last executing test programs: 12m34.426296253s ago: executing program 0 (id=536): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000005fc0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="02017d29012918050e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e21082b1a3d206"], 0xdd12}], 0x1}, 0x20000400) 12m34.12119624s ago: executing program 0 (id=537): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, 0x0}], 0x1, 0x6d, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x44}}, 0x44000) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x42}, 0x94) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x7, 0xc, 0x6, 0xfffffffffffffffd, 0x8, 0x5, 0x4, 0x2, 0x8, 0x4, 0x3, 0x3, 0x1932be21, 0x100000000, 0x4, 0x4], 0xeeee0000, 0x40600}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x1, 0x2, 0x50000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12m33.434184637s ago: executing program 0 (id=540): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x178, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x10, 0xfffa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_MAX_P={0x8, 0x4, 0x3}, @TCA_GRED_PARMS={0x32, 0x1, {0xe0, 0x3, 0x4, 0xb, 0x3, 0x7, 0x9, 0x0, 0x0, 0x80, 0x5, 0x0, 0x1a, 0x4, 0xff, 0x1d4}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x178}}, 0x24040004) 12m33.376119458s ago: executing program 3 (id=541): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8400, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/17, 0x11}, 0x40000040) 12m33.319665159s ago: executing program 3 (id=542): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000017c0)=ANY=[@ANYBLOB="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"], 0x13c8}}, 0x0) 12m33.306533509s ago: executing program 0 (id=543): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, 0x0, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x200000d0) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x1) 12m33.199041342s ago: executing program 3 (id=544): socket$inet(0x2, 0x1, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0xff, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0xdd86}}}}}}, 0x0) 12m33.197530492s ago: executing program 0 (id=545): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000780)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001cc0)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0x1) syz_clone3(&(0x7f0000000040)={0x200000000, 0x0, 0x0, 0x0, {0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 12m33.169820543s ago: executing program 3 (id=546): r0 = syz_usb_connect(0x3, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd0c43000101020301010902190001010080fa0904000001ffffff00070584"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12m32.959482938s ago: executing program 0 (id=548): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x2065, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x6, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0xf, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x6, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000009, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x200d3, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x7, 0x81, 0xdf3, 0x2, 0x7, 0x6, 0x40fff, 0x1fb, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x18, 0x0, 0x8, 0x0, 0x9, 0x6, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x1, 0x7038, 0x8000, 0x2}, {0x3, 0x1, 0xf, 0x2, 0x0, 0x8000}, 0x200, 0xf, 0x538}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12m30.000966619s ago: executing program 3 (id=557): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000780)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0x1) syz_clone3(&(0x7f0000000040)={0x200000000, 0x0, 0x0, 0x0, {0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 12m26.660902548s ago: executing program 3 (id=558): rseq(&(0x7f0000001040)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000000)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8) 12m17.659878875s ago: executing program 32 (id=548): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x2065, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x6, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0xf, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x6, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000009, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x200d3, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x7, 0x81, 0xdf3, 0x2, 0x7, 0x6, 0x40fff, 0x1fb, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x18, 0x0, 0x8, 0x0, 0x9, 0x6, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x1, 0x7038, 0x8000, 0x2}, {0x3, 0x1, 0xf, 0x2, 0x0, 0x8000}, 0x200, 0xf, 0x538}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12m11.262926628s ago: executing program 33 (id=558): rseq(&(0x7f0000001040)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000000)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8) 7.569858589s ago: executing program 4 (id=3576): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0xfff1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x9, 0x0, 0x8000, 0x3}, {0xd, 0x1, 0x3, 0x461d, 0xb20, 0xff}, 0xa61, 0x2, 0x4e4}}, @TCA_TBF_RATE64={0xc, 0x4, 0x482b771ec8ae0f5e}, @TCA_TBF_PRATE64={0xc, 0x5, 0xbfbfaebe1d121811}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x40) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 7.396174343s ago: executing program 4 (id=3577): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\f\x00\x00\x00\a\x00'], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000680)={0x20}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a80)={0x2c, &(0x7f0000000500)={0x40, 0x15, 0x4, "413db6ee"}, 0x0, 0x0, 0x0, 0x0}) 5.915293458s ago: executing program 5 (id=3584): openat$pidfd(0xffffffffffffff9c, 0x0, 0x100800, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x41, 0x5, 0x0, 0x4, 0x7, 0x2, 0x5, 0x1, 0x57, 0x8, 0xfffffffd, 0x2, 0x8, 0xff, 0x9a, 0x45, [0x3]}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000340)={'tunl0\x00', 0x0}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 5.719059933s ago: executing program 5 (id=3585): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_sctp(0xa, 0x0, 0x84) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 4.291990307s ago: executing program 4 (id=3590): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x400001, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x4049004) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2e, 0x25dfdafd, {0x0, 0x0, 0x0, r4, {0xc, 0xc}, {0xb, 0xfff1}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 4.046130863s ago: executing program 4 (id=3593): r0 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x8, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0x9, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000080)=0xa9e) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000040)=0x7) 3.943221375s ago: executing program 4 (id=3595): bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x3, 0x80065c9}, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xffffffffffffff3b}, @HCI_OP_PERIODIC_INQ={{0x7f}, 0x3}}}, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000006200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0x40891800, 0x0, 0x100, 0x7, 0xa17, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000a200)="c1fd43b601662701272af37a7deda072caa09faa11b0a4ef2825e87f09fb6bc3dfd84ddd853b18203bbf08b1af6066c78b4714a789a8f3605f5920e7afc5b0a04271cebce72a797abd5b9e4a44fdcc150e6ef0e8c3d4360e74275818df26243f28cac3d84e264fd0c77d4bccbc466e7244b247d9dcee026df89aefc958d84a55d4d6922d96ce0349fe28efd6b83d15b7b08143a721c4a677b72362a49eeb15ec5b5f8569bad585e30a62ab149e7e4c7f49af9560fd52ea5730135dc3ea3f6a9a3ae6286ef68e520a43b8813ca6aad1adbb30b2459f90699e2ba3a6335ddcace3737ed8f5f21e027ac2b224389bf0c8c005ac8d8c3ae188679d34da0a2c20a910487d3c91b18770fa5ee483a3f09b882960f12e7d2eb9015895ce80b37f74a305a50deb146b1c3430f31d28e6f827b9c7070bc880d251ddb09e0e70a0512ed2600256332c43a5deaecb01f089333fc3b6721f6ed5b41f9971b7c63f57b5afa8042f5beb1ac1274676dc5406b5828247123bb7be795baee59d779bbde227c90d0a5d863936d434f2ce7a45f9b650600f32827b92e2d828915f0411f765ed82dd012561ed29b09950b96f8e490f1448dbd5e45bdc92a2a36aa67e5e9396b6376f82aa6915eac4144a102de786563e4482f0917698bc70776f8c7aad3346e18ee295af54f3c1658f9b124116a2fdac79353b095cf667dd941c3cba141b3ac8982eed42e7db649c9d49a59378216bf4323ff4c2f2992994d4144b74866a2426e19a2dc8dbf4643f97a214fc9c448512316d76c4116c3ae600dfb98cf85472da661745b638438dbf15d8dd87a8ba35205a65ba5bf79cf941454f8c788dc2eeccea412add734798c82e9c86122a91dff778edcd309c05fdca66176e9bc4d410b0ee4627eb889443b574ce205c7f4d6d428e909952712ec3dfc89552279b2da87b010051a451377a0c51a34ebba25c3b62ba98eb6f15b0fee6a7c5e0c7a72835388803a0a8342bb9f2733224c92a50dd25a9b335f243f2d8c68142aa1db1de2f899a56c623a32f8a74c16db56983eb83f6469316f2fc14860c075236a3ba40e8c265909b8fc6b03c6378269f6629bab81418789cd748d8b786f47ab8f13b0caa5ecd79dbea61330be6de5804f5c211cef78f555e7b2093f4a836cdb8a2cfa261be14e0f59d075f58e97ba16cb130f062a2261df244c57d6f477d761262b2e755c96bad3898894e80b23fae71fc31b2895513a11b0cf07551ca87325592dd10549b7d92da1cb07119fe970b8cc3aacc386ab64d32b308679593256d2fcd1f9e9b15ee93ef859e7268be776053182460e83fb873711226ec9aa5c35b15fbfa12ea0abfc7465b300bd8445c831ae77d2aab7d4bc3ba5f218fda9e90eacde1ac5119eb30073a6f291727cb94fc87a3d3013f3ebb1cd259067c571bd3c57eacce716e61f86bf4041bacadd6c676e17fb3cf89c4984aec78216854a60af68533fcdff12897c3e1b2c10cec019722623f477a512c4e5eef74a6d1ab7a735905373ca3a0b18c3eaa523c86238fba77e45aa07c1b96fa1e3ceb04e5f4742536b687ebf989918f6805cda9611ab9ed10ee33cda71a95be2da0d2c21d2295fdb334dc2057942382dc7d0f70300df3df84cf9a18f042c11243a347569771f9b82404e13684324fb06d867641c87d6d70ad15e90240f901d04a8b8c7fdfb8b84aefee1606f14a2a6995e6b8aaee1b372cd586a6daf28ad7d8ef644c58fa72f0b2f847eef72e18f1a4374c4fa3d604a9bfec6a1a4fefdfaa848279693208dfbc1dbb97b44c4f034090606e0ad312cdfb6a8f68dae7312b064c68813eb41992559ca63d88a8e90711c838f220a4da5bc7d82ec0af83da059bdccdb524a59ad26e43413f131e7703eb82158293a331456ce728c28923bf9ae644a331a667c2932ae1f11a9f9b893f802796ad029c40496c9bc49cdf41a40da1092b404da660e80f33a6012a407805e70f9a180105cd0401ed01a9f6edef4e2479e1579ea365d843c197279e3c79ae56a107dfaba6af80ed9a24d535d19827596ca2b14bf4b110fae4820fc8d0570a64ae08e315da0091f766bceb1fc990465ecb84a2d72efcb9a269816863b72f8d0869b20c14bd72f909fc3ebbf2ba2f98ce3fd7eb54b738692916eeb98ab9ea04ce3e740817dc9ac6561c71d3bc15358ebbb3027294f66eb890577f8a63ecd23beacd93c3b1498d5eefd8b68ebab3536653d5839713b07f79ebb2a6106c009cc535a2173cde3ccc65676bcae513145db5bf08546e8810fb4d193266d491fb9121935138a74c52149959a0c270cd6e244dd7cb140fcf6bf0e7536220f798bf32cda564ebde025a92617f3195e549a491a45446ff0ebfd3b047775af339e59a8da0db6223339325c6f493baa5f2c71b5710a975def3e3919a24a52351acc12e5a2ab6c171705bad0e6afd0ad2b6dd6feaedc9924fdba533fc958fab9a980b775eb4c93a499413073cf09826381b8054f9f09f4a0dfa63ac2f6cb22d001ff277ec7f493bc54d2d1d34a6dad62cd7bccab2ecd419c90087f6945311460b87daad605ff8519aba1d8311a5e565dd26655577aa13da31e01cacbb7e10e720a486e9cc450b8a21d23aeab42838d81dc05f5be0474ab81b806fe71b888323037f3262179e451f765e419bddf7b7a99b40bcc226986efbd3765b66e56a3500de4b18b676361510bd35b3a9c6b8c08222cf7a73c4cda972190f839c2d01a4c171a803c0a77d2769c892b2f0191d2fa01d7d5ca53573e47e93ca9b56b8f0d684d5458d505ad8383f22e19024da06bf6abf30ed663cfb33e202be17bb951e9ea30cfcf65675d2fc64aa51e07237fe8391549185fac5822daa92e73778e080b16423b4b8f9035092a729b9a0122d1c07d60336f18a9e46ebeced1041de2e2e8a5de6f4a814d5179bddfcdeda88888cb9ce322a516af3be2b7cf371e9193cb40e66cd41dd94e37f14c6e6469e8fa6c17a4fa3125fb6819b84e276768a7354dd3e2692a77a4a60af85bec0325d0aae72a5f4f7bf9468f1d35147910a55af546e4e3634fe2d8efe116606bf84c0e9c4d442ec8f99fe6c1cc90b99a8d1e53322b26b66928fd01738fa70c0aff84b4f02946c6fa684bd617667857cd751a3ad3d324f9574af78eec6c8c51c25e01cb0ef12a34c4ef14c810c2e69e06158f02033e15f1ec00419a91c1450338956a188fac918fb73692491baaf5976ca392c139ba0e551de260dfd6c733b572215f2af0aacc5709b0d4a3b36d23f5882c5644bb455075c5c48bd50492b395d14c36393019fa9eab8a211d71d173754663ea2af1ebdf9751006792609d4db47824d95d68583c922c04af3cdfb58f37b6f958a4b35cbd74a30a393be192fb46bfe4e722c3634c94fbf4829f25dc0b8b07cd16cf4c7e924eb02ae8d675539d32b5d9a54a43811eb98e2db317c67d5bc62901582cbb128542d6be3bc9a5b5b8a8827f2eab15e82b28b411edf67d786b76feed9e7d5ffbc86fbdb19ed80a4f5dcebd631719f8734c398938047011a251370e40d5929e9b4426081029b1339ccb08bb0dbcbb4eedd53792e43a046abc1d5c1dc8c1749052233e18e25593daee94f77f327de61867f1e791b797cc5ee43f8109cb0654d8742ece8512c322442f63dff88702ba047e8370a1b7304536ee7cf465a0a19d965fd03543b991449d6a1a98be5ec3867314c688c5c487e59a6bb05291fda479827172bf3db615c20ea022ff7b16020299220b7c45a7181c1eda48c9a5fa7624843d112c52d99d0b27e168eeadbcd3c60b3f366175decc8c91c64a0a16d3a2e38244dd8d2de806ad741e2256075efcb0466360acaa3f65611789a821c30a13d4b60e44173be9e288d0300000000000000a85104170631c942eef22c10e903bf70b0ed36831d536a0cd65c11a209e37a76f3f54deb326735bec5a532431a81f303af5e9d03717a93a3da18317c459aee8db08b9f0b3331d29770fe7fc4266c15a4294c9c435a38296cd880dcedb34f63037f2a8e3ada9ead3e52abd69e5779905f82a607f70e351d2167bf1b599cfb9314a37df876bd5f2acff82f1773c512ffd308179e47b26946ebcce112273e12895145ec88c701269c93f32a5ab2bc16acd57e997d140d18c2cbed2601a05ec33a63e7edbcca673f71eecab66af5287d7d5a1dad68771ed612d29ef8ab23ef0211b4bbed6f981cd24d652f355d94f6003b01cf3d803a6e36b470402c05816aa2cd747f293300bbe891854d932df7809c7809c2cc3d06c693981e7bc21e89aa3ea8f8829c85185e4ecfd2e293bfa2b88cae2c9e0622b9cfee01911a502d59360532528661eadf2150e26a2992871f562d6fed4a36867b2521b1778c4ce955f5980b9dd9ede42fc4a1394491ebf1c1fb0d794cb8c28b103d76b2e70b0337877a222d7f3cd61f353baf7bc9e23d80f8e5b4459937d75f869c179dd9b948a70b9ba37386532790bac12f2f342fc4f2afd8a45f109331d5daf3344ade893029e322e8b7f3bdb5a49987116b31b2bd6d5bab789ca061ea42f7647c88488f734150e161e5aea78639c5bf9c2fb88da321cbfd379b38cbe6e14af979f238685e2c0ff51629cd228602dbaceff8a214cdc66528cdea114691ef619a8c9a0f9cdb7e08c5bcfc2bfd29e39af38f5db4821c648cc3d976cc455a6e6498c92511b407f3349284901562a912c5af25ff792b9c6c5dfb73519336c7d4a87e49debce7a441b7a29706173e4e4e8dacee63a06ab85dd359b508bc8a0f7002832fae10a0a38efaa475846c4205aebe777334788c3e4652086e26dcdddad991b0ce5256e113bac692d442f524d7e292b86eaf0dd8380ccd78b1489dd2ef6beaf2eb9b08b50bb2a5ff3ba8df3b226baf79a0739d8a60cf815cb347399ac4adb2cea533d3f0ce160a563f8d401e5a6100578e4c8178a7e70663e135edc645cdec2f0588fc99a0cb60dd8788e02554ade370960ce562c210e826a1eba767a09b10f46ebbe6c9166e24286331d2ff025c57a10c7b64c506d0a68642171ad965a001700561fcac2e3f548fd58d32bab5f38b36e62f5546129cea35ce856052e3e480fc639640a5301dd700c8e8d0bd6ac790910fcf2b4f159cc1531aa1c9e37b541520450dde638942081201ae8a580f28cf50530190a45f45468753a122b364be7dad79044ec8b9977d583bc0ac3ec7b9fae192397ce8693310f301c18c2cab5208b369e63c5ac18d0266834e218bb71f308c2c2f2df4a6ccadb3788860a2c733a9252b877ea1c1e849a38a328310bafae9614a6e161170c6fcbe9bd8c4177de1fd18f56805c91fb382aad767891556ff8e1b5f3ab8c18b4fa3053c981c12fa2ea017bb7596158ca533d0dd95a95d0b392222609f6ea336711a9dc50393bc41fac0d429540ad70757f2086bf1bea0132a609ea0bdeea0cef93d8b2a0d59189bffec05281e97b4722291005e9ca7e755be9070f405ab0d6c9546a5ebda2e62adcc621c2b1f6b07cd1e617d50469ef2c71647a47ef98ffbc71505e188cef3e5c774c0987664b6989794d7ca186804ccc6296da3adf22feb351792f1a9cff77413703744bf4f21212920d6a8fa1800da7a38fef7160a50f5b895e7b76f3fd830fcb9a25f3b3ccfd082a1712237e4ca665085aa1c5aa413bce813f1b7ca66105de94babb7b4a05029cc3759d00191fd9bfa0f996cc703403dd6ed2b33f2743a788041f279b767efc373314edfae1bd33f7eaaa7418a59fff7e40d02e618172f6e0abe08c855348f3cba40c8592a0521ed1e41524f20abccb2bf0ebb933e59b7036eff5a66279d578e6b2fd6c4140b33adc67f7083110d815ac55b4833ec0504488265b3ff2bdacec17c91bea9d6bdd931bf056d6e9790e472d874a5a3946b200493c9874d057aa6be3a1ca4da6fbb88a9d853aaa7c8ccabc83582caa65078bbe7b04625d139ed9860080d185bd9798d613ca3014713eb9e36bdeb73f14ac3fc7b2f8f594404f56dd937c0a7e865fa98e858cb0af661cbe12f15c928c4c45a982e24cd322320a96ccd54656b2c7876a5d717e42d3df13189b95ddc2b5a928dbda9ee02c30352045d02cbd854af821300f198b1ce1ea8e45c969020e5c7670fbd9b7227cfd3c809fac1df2eb18c199b27e969f32052376b450003b7ff6332ee1d9fce1b5947b72575ec6541b992fbc76f0e03fc1bb9a0df5ee3de0f34125c311d2ddb67962cf9a8230efff82c25c896621082a587139e997e0532962e84ad697a1a2b80d997c2a268ecca8b7d1095530b332ef368270bf31a75b777a7cfe8c8d324a8c558d3c65f801deac6822842f85f10a641b71ad7e5fb05f64eb3033507dc3a2e9ec02d667ef36c551f69c438e8b6c3927733d83e94f035ef3da230b759df5f5d1964815b176478c4ed94402dc8265e589171df165094a2e4e75614fc6febb8484f28ec8c1252b2d933852573926837e1edf9da0da3f91697b290c3ee5a44fcab3b10095b78b5df3701431cab31750e211d442a77dbc5e2d4d0e67bf329f9103414abd4f3879511375c8800f52f8a17ae6887214bf8634bd99075ab073540f04ff675d32190a3d1152ceee32e30719cd883a82185f89f071c02df443cf7046dce8a6ddc472ed63945faef588acf57985c7ecffa438f5427fb851ebc6a4c577a33895a8fc4628286a48d3bbcda1b769aa3194869e148ba457932fa6f2e4640e2755940e2f5a6a67796b5f88ac10f389b409c0c57bd4bf0cbe0fac2fd2f58ec498d19c43952e4522b51931712eb4002b7b208c02c4e06df99fa8e93e4b9e8b0d7a57e63aacdafb19db0fd422f8e89d1275b49963bd82b490f9e4d24cfe9700e98c73b31fdcf7b7d30d73e9bf6bd86439dc8b63171d53ca7caa860c60777436099db544164d4e4a81a483ffd5ef2980110f461529c057c40f2ee63b71a8eb2d87919726bda25a8fa2f242d3ff7bf0726d8a11d141eb87d2733f1faf456f2eccbe4c3a856702a80ba7e36cd8ef8e064e16e61eedda4478d2edaf0445e2247a76e25b4b5c68720b87bba69b4171983d95a5a764f42fa6f23466096d9a097edf84952023a4541110456b93ea558c2059156c287fc6cde7c74abd90ec539a5f43c2a641b1a34cffa2538ba565d0b57513b8c1b3df541d02d6d5a0aa2f96200dbbf64ab7c0adb868cce23ca607db6d6dd18f956185c983a90c8b4a7ec630178376ac400c61c77fcbacb979e2e07115db8a034a00ffb136f91c0b16c6d796f524f9ce6a0b72c378c8939b56bb83ca0f3d09da2b82b4d3457b568878d019f54f9cddd514a601d4edfae582f1a2674892bacf6eaba66124c797e1ebf91e1b5f12e520404d213b12770966d5c5f3435169f8867faed0107d2cd4cf0638e4f1c488122da7516820cc3d12cdc9f663778455352d2be1d8d3cd611808304554bde601e4ec4c9aa50ec22648b12f45c8d84bdcfc85f95ba0afe254df5d8b40d53adf1d4fe1dc3744bd486e3eb14775f4f4c333f751975a4a8b5bfa497850633aff3ff98deb53d1b515a08c4c474bcce46149dfd5bece51d1dfb6eaf593f8ee037404a5ce5edc2887006059cd3743448ab977899f10540b5a5eac1b9d4346654e4eb0200858b5b92525399a87859859269d3b0fa4c2159dc807548368ff701076606378b44cee2839f05ad94f659270af868cd674b44729bbb8eb2f697101bf4fb4f96d07dabaeb5b6a1cc884423fcac3d3805bffb3c8de3e801d641436ca6b1f50aabce4c7b3b1a24eb6977d5a8c84d6cce8ec9ee93d3062a4bd78ff916fbba7ab228838bd61f25759c6ac8650adbe2b346e65681dbafbb934358ca2b1b854bf42f42404a15caf99b785f132b9a20413b2d9d353220656ae271883ca9733430db09b5e8578e9d4fff032b0ee792f429791089d93876a30100a35c420a0686c125005242551df27673e0826a1c38bc028c104e0f958ae1ffb2d5221fd1a36e598065eed6a449567b41c027b6faa461d3aeee8dfb6285661af7fdcfa484fee654b633342eb122fe72d5d68ea4cfc988cabb0df39b8cbd064d489fcbc90bf313f3a29797d479a8fc12cf5b9ead0907a2dca568bc0f40d0fa4a9c3758f9bfd1ac3662a9f04260ef0d2b86a02d23759b210f38830c4a224649186b6e4b87c6b457217c86f502521940caf1e5b2eadb72951a790c94dd74b929232947b01cefd5a1483e127b1b6d216317b581455f9cf96876af837e5f88cc38a46eb2fb6cd7fcc6fce1a264167b86723829ffffc413bb0000000000000032dd6219a95418314b1e071dd59d0e96083e02cb8778069ed54137ce98bd702dead8fc74992d7743d1450faf7de44c2d59ff2dd339b80d3449e9bda5b3a564f01aeefe300165bf3b00d811c7ae866cb1a0a1b87400c2941841cd2d6953308f1a963f1c6d4486e7e45daabf0b066ad8884f4577534d3c9f3d3f3bbe8a1a3088d9b95da1fc901573e26f5b86c7a868429b9b634c9e35dfd0534563160912a43c64bacc8ea1ced7bc1b77a28716700e501905c9e81e190241e0edbf4f894aee4047c5b5fb58a3db4afaf76790690fdc1289236fbfc5f6cff540eb82de8044d17658fb054b198cc288cc43aa5d805a51cadac3e75c8fd82ad015a04932cb6f6b53aa4e8d9d84018ff8db0f756d6b5db4e06a689b52fe8471b9230c2dd14d042c1fea45c3d2452351a4222421366610d80785f7e47474d4ad58116313813d4db3176d93c4e29e5c7562806879ddc75b9cfcf38d6aed015c0f4d52302a51215187bfe254d6065bd142cc9b9e03f32ebc9686ad0d0cb3fcf0afa320a15f37cf591600636a4ef84c756c0d42ab98bc2479f0d5d230359f622447101844430a7555a4cbc702b55a4a6ed964cf399a1a493e40555f622da1643073a786a3425d95090b9b0e20521187e9e20d35f4e061e6201e67e844d88457f751e5519dd30df9251f1ce2836e0bf61eef8fc6ed22e48871863165e6278bec46af3823ed53e3e18ca5741124dc53cadb5ff0846cc1c6b9c072be6dea187e8336eb6b6b7029ef79ff3b2999938cc59aafa1618fc4556ce3c81f99414d5d79538a83ee9d8a9ad0b9e57060d4be9c53266f418455d760f423a1642e9edfccede29d21891d7421ad0f1cefe472d0ef84965575419871374727bf5f1dc72057a18ed4d7e0a2ddd6d105eb2cc3718609814c2968f27465b00fb4b4a64359629722320583a05644693e6fcadde0efc12e66a0c8e48311f0550ab8fbc1556b69bb2a5a0c03f1a59d67046d7acd5beb9f7f9ae6eb18580431624d63ffe294ea5497a65ec3891f4c70b26b7b17a9f82145e5d5156d6b3355ad249bb66168bbb745d00c40d6ef42d52a032cf62caeeaec31f4c85ac403cbb0c6756953f0ddbf79da0cfa6ccc1c40de43bc4a10a700b98322e671225e80e663d30192ff5611c44c095351bb69a4e14c11a3d5b0b53e78954699760516134f3148e71a2b0bb04b24bb1a2c2b503f56249e0a2c638ff40e7c2c7d50ef7196fc9893e18c0ac3fc5a4c0d23ee08080f984dc643854b54df4a638af29dc5df79f905c4133ce263f3b2bb55fa7d56fa82795687e6ee5c68cc13d71e44367ea8670409cf2231990cc6d06e5aae2fc3af1537b33b42775b40bba3aa417016fb9dd89f90a89196c104017a68f7527b8b958e38f9646832a7790045fe394ce41bcbd1cbcbe52cd7e56cec7b2856e448fa5d7e837798b899f05a2c2fbe6d9f1a7b193bbf7c70444d6a37810d4d19d359f9cd6b8a6ef2230b735f8bebe0ccec94e44ed95234bfa4a36a2f0ee9fd5ca73d697344d28436e0fab81e73f447bb144a70aaf96acf6ff52c4737e7a4debcd285bdb54e363d842bc9a7d180c16f010fe4078b41c4c3e565c3edd64e61f995ab0086dbdc026dc1825b8c45ed96edd8d2bd9daa699e5da333274d6bee2097c004462848cd16849f95cd2252c4c87058a821ed977ed751b77b0a8fc0966bf3a30c26d49f3185782a7d314e89f039a15ede458538f1ada8eb836a36bb5d82c402e3feebd37e7b7c667a1c82edc8720072789fa5f388039daa731ce74dbd5aa8965b7ee99f6c271035239ca1c34cdc3c57bd8510dee08f74cda37095b1b098997998fa267e0be15de474b2c737936cacccb4ba44112570bbd13f870b55f3763f77724b586d6e26c3e72b20bb13272f2ee331bcabd4a79980a8d2965c20da2a3918c855215fecce95d29bec58f522d3d6d2852c4ac080fffcb3ee7fb98591f99b7cfb7bb124cc20078030756aee8fd284df06cd5f07c13fd56e5381b19e0a3a9f412a8d27428cb6af0078e4dc8ce4836630360a5c3b98ff5e6cbac1d9d29de9838a84d4722ceea3765be3df9984cf139770f3fb986b9cc9185ab787f54be33d46c54de74d94d13f74ec70cfbe1605c00db79fa8de64cd834090a35c80759f83c8fbefcf9a276dde8a8498d084b4619578eccdda2651a475f73367bda96894bb36eb868035251694cbb745feb150555ada09909497ff1d9c8aee7a35b7c8b2fc64ff483f4fd3491ed52304e6010b9bf2af8c5b8e162a383a0bf0bf108ca78f5086132b2b1a29581f323841c2f189509898d932436e5c1e693ed91f0524da026fecaa2b7efab54aeef120be61de457171c58811e0ca8a7600e0ac249aa579d78d2e2b1d6f41a3da4676b6690ca0249251f5b48b9a3820ac5b25a52cc01bc331c24039b6f4bfab72d5838a35629259930dea936f8c60b4f1b189db1fd1b5e7e6c8a842707ad6756d098a9ab543cde3e1d1161983ea91b7322ee2a713be3bad369d8112fdc7f1ac7b5122d55dc5ae443e10db711ddd6619ffbf96068e28911b1f54388413a17958d61ca07465b54699a1351915300cb826d3bf7f4f217bba0ed3195cbd077b67167b9a03040afc237f3bb36edd9fed33d7d6e7c9493fec34be6543880b0b442d8351496f2e8d60d4d984cca743983c0afab9cdedd5a9d774a121e91230d359c27a3d7b4db38ce73db747af3ca06470901f2605c031a7c9b7d1bbb1e838d36a4d39b039e80bcddfaecca906705fe8c844e93d5aee494dc62c7b4fcb6abe09acf925ef422dc09185b53e960795c56500b43faa6e89720aeee724532f89e60e20b12cd4f832b95189bf45b96aa7af10cf8298b44278de1c67e2d71d811240a7aa2d1d6de22e5b8cef4a1f309de3b81c5a02d2abdabddc9637974c2dc19b60458f0954bc751b7ae628ac602eb7c52c7fac0c1621ee7757fc5b002ad7e8fb66fc7da0896547abf01ee091c0cfe1d0fc66e6e03599bb2aa7608a72c30203af5eac3915a0b6616b6119c4a09654de2f56e53296d1f8487cd7ec36c86894bab72ec3ce61208f848432d45a27cafcfbf2a2c56b58e017c76ac7e943aff0b4acaf84dfb343d93efb29c518a9d552c36a3e44c6ea948673bc2aa71c5a873d1d301a9c8b02f19c086f922f0b3e4f7d14e8a59c017809188e2e1b4dc6b55fb8ad82b1c04460b5ff2e9b8f47d3e833599519b79ac6d9ab282db4a55654f60396d2e72bf8e2ebbc8c742913359edadfcbda00", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x90, 0x0, 0xc, {0x3, 0x0, 0x1000003, 0x1, 0x4, 0x6, {0x2, 0xc0, 0x7fffffffffffffff, 0xfe2b259, 0x100000001, 0x0, 0x3, 0x5, 0x2, 0xc000, 0x3, 0x0, r3, 0x18, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r5, 0x40047452, &(0x7f0000000280)=0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x6cb, 0x81a7, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x81, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0xc1, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) 3.874789297s ago: executing program 2 (id=3596): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x168, 0x9, 0x230, 0xb, 0x320, 0x250, 0x250, 0x320, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0x208, 0x230, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@rt={{0x138}, {0x0, [0x4, 0x8], 0x6, 0x17, 0x4, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private2, @dev={0xfe, 0x80, '\x00', 0x38}, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, @private0, @private2, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @mcast1, @loopback, @dev={0xfe, 0x80, '\x00', 0x26}], 0xe}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x6, 0x4}, {0x3, 0x5, 0x1}}}}, {{@ipv6={@loopback, @mcast1, [0x0, 0xffffff00, 0x0, 0xff000000], [0xffffff00, 0xffffff00, 0x0, 0xff000000], 'gretap0\x00', 'bridge_slave_0\x00', {}, {}, 0x2b, 0x2, 0x4, 0x3}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3c2, 0x5fb8, 0x77, 'syz0\x00', {0x2b}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[], 0x38}}, 0x0) listen(r0, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 2.9224182s ago: executing program 2 (id=3600): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x4ae, r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="98"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f00000034c0)={0x2020}, 0x2020) keyctl$KEYCTL_MOVE(0x1e, r1, r1, r1, 0x0) 2.548122239s ago: executing program 5 (id=3602): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x400001, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x4049004) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2e, 0x25dfdafd, {0x0, 0x0, 0x0, r4, {0xc, 0xc}, {0xb, 0xfff1}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 2.339292204s ago: executing program 5 (id=3603): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000bc0)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0xfffe, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0xfffc, [0xff, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0xdd86}, {0x8, 0x22eb, 0x3}}}}}}, 0x0) 2.198341088s ago: executing program 5 (id=3604): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8120, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x400001000001) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) 1.997646072s ago: executing program 5 (id=3605): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x48d, 0x8595, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0xc, "", [{{0x9, 0x4, 0x0, 0xf, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0xff, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xb4, 0x83, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.939279533s ago: executing program 2 (id=3606): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xe8}}, 0x44840) syz_emit_ethernet(0x36, &(0x7f0000000800)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 1.800014697s ago: executing program 2 (id=3607): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x39) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) write(r0, &(0x7f0000001f00)="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", 0x70e) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.519778384s ago: executing program 1 (id=3611): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002480)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f0000002280)='./file1\x00', 0x5482, 0x7e3111f862955f54) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x1030002, 0x0, 0x0, 0x2}}, 0x50) read$FUSE(r1, 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x80280, 0x0) dup3(r3, r1, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x45ffffa, 0x281) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001100)={r0, 0x0, {0x0, 0x0, 0x0, 0x4718, 0x0, 0x0, 0x0, 0x0, 0x14, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333795f045158d97405000000000000040000000100", [0xfffffffffeff7ffc, 0xffffffffffffffff]}}) 1.426143466s ago: executing program 1 (id=3612): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x400001, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x4049004) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2e, 0x25dfdafd, {0x0, 0x0, 0x0, r4, {0xc, 0xc}, {0xb, 0xfff1}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 1.299310199s ago: executing program 1 (id=3613): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8120, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x400001000001) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) 1.161430233s ago: executing program 1 (id=3614): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x4ae, r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="98"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f00000034c0)={0x2020}, 0x2020) keyctl$KEYCTL_MOVE(0x1e, r1, r1, r1, 0x0) 888.146279ms ago: executing program 2 (id=3615): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2e, &(0x7f00000004c0)=0xb1e0, 0x4) 867.010889ms ago: executing program 2 (id=3616): write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB='+cpuacv'], 0x9) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x80400, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000200)=0x200000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat2(0xffffffffffffffff, &(0x7f0000000080)='./cgroup/../file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x11}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r1, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01864c1, &(0x7f0000000080)) r2 = fsopen(&(0x7f0000000040)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x1, 0x7) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x8, 0x0, 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000040)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x0, 0x7fff0026}]}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e23, 0x7, @private2={0xfc, 0x2, '\x00', 0x5}, 0x4326}}, 0x0, 0x0, 0xe, 0x0, "5496a5dddc12b8ad4394a6a4d4dd5e5003c2cc26e095388c3dcf697675feed1499a8e540d53a3993d6386d8607e255ec6bf788c74746e54dbb6129e96bc8b7ce178a7c9e3ef1cf49704783a34f4df6f5"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff}}, 0x0, 0x0, 0x2, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8) close_range(r3, 0xffffffffffffffff, 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x200) socket$nl_generic(0x10, 0x3, 0x10) 742.116162ms ago: executing program 4 (id=3617): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000100)=0x5) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0x3, 0x4, 0x4, 0x2, 0x3, 0xf1, 0x0, 0x7fffffffffffb, 0x8000, 0x0, 0x1, 0x0, 0x5, 0x0, 0xbde], 0x1000, 0x3c53c5}) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x80, 0xc0, 0x0}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x408d6}, 0x24000010) 232.985124ms ago: executing program 1 (id=3618): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x168, 0x9, 0x230, 0xb, 0x320, 0x250, 0x250, 0x320, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0x208, 0x230, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@rt={{0x138}, {0x0, [0x4, 0x8], 0x6, 0x17, 0x4, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private2, @dev={0xfe, 0x80, '\x00', 0x38}, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, @private0, @private2, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @mcast1, @loopback, @dev={0xfe, 0x80, '\x00', 0x26}], 0xe}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x6, 0x4}, {0x3, 0x5, 0x1}}}}, {{@ipv6={@loopback, @mcast1, [0x0, 0xffffff00, 0x0, 0xff000000], [0xffffff00, 0xffffff00, 0x0, 0xff000000], 'gretap0\x00', 'bridge_slave_0\x00', {}, {}, 0x2b, 0x2, 0x4, 0x3}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3c2, 0x5fb8, 0x77, 'syz0\x00', {0x2b}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16], 0x38}}, 0x0) listen(r0, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 0s ago: executing program 1 (id=3619): socket$rds(0x15, 0x5, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) listen(r0, 0xa) connect$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "01"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[{0x18, 0x110, 0x1, "02"}], 0x18}, 0x0) sendmsg(r0, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): 22 [ 811.055657][T15397] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 811.063219][T15397] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 811.146712][T15401] Cannot find add_set index 2 as target [ 811.275646][ T27] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 811.287264][ T8] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 811.467336][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 811.476520][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 811.489972][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 811.500201][ T8] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 811.509449][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.520841][ T8] usb 6-1: config 0 descriptor?? [ 811.690630][ T27] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 811.701170][ T27] asix: probe of 2-1:0.34 failed with error -32 [ 811.946040][ T8] savu 0003:1E7D:2D5A.0012: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 812.209435][ T27] usb 6-1: USB disconnect, device number 9 [ 812.398218][ T8] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 812.587895][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 812.595594][ T8] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 812.605518][ T8] usb 3-1: config 0 has no interface number 0 [ 812.612380][ T8] usb 3-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 255 [ 812.628601][ T8] usb 3-1: config 0 interface 184 has no altsetting 0 [ 812.639128][ T8] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 812.648471][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.656493][ T8] usb 3-1: Product: syz [ 812.661948][ T8] usb 3-1: Manufacturer: syz [ 812.666947][ T8] usb 3-1: SerialNumber: syz [ 812.674715][ T8] usb 3-1: config 0 descriptor?? [ 812.681391][T15407] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 812.691785][ T8] smsc75xx v1.0.0 [ 812.905944][T15407] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 813.217427][ T27] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 813.299620][ T5816] usb 2-1: USB disconnect, device number 34 [ 813.331078][ T8] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 813.345328][ T8] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 813.385620][T15428] socket: no more sockets [ 813.437469][ T27] usb 6-1: Using ep0 maxpacket: 32 [ 813.451268][ T27] usb 6-1: config 0 has an invalid interface number: 239 but max is 0 [ 813.464427][ T27] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 813.475043][ T27] usb 6-1: config 0 has no interface number 0 [ 813.481415][ T27] usb 6-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 813.492125][ T27] usb 6-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 813.503316][ T27] usb 6-1: config 0 interface 239 altsetting 4 has an invalid endpoint with address 0xA9, skipping [ 813.514285][ T27] usb 6-1: config 0 interface 239 altsetting 4 has an invalid endpoint with address 0xD5, skipping [ 813.526820][ T27] usb 6-1: config 0 interface 239 has no altsetting 0 [ 813.536093][ T27] usb 6-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 813.557403][ T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.565480][ T27] usb 6-1: Product: syz [ 813.577245][ T27] usb 6-1: Manufacturer: syz [ 813.581921][ T27] usb 6-1: SerialNumber: syz [ 813.599073][ T27] usb 6-1: config 0 descriptor?? [ 813.605586][T15421] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 813.618595][T15421] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 813.945946][T15421] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2986'. [ 814.044355][ T5816] usb 6-1: USB disconnect, device number 10 [ 814.657621][T15437] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 814.817608][T15439] Cannot find add_set index 2 as target [ 815.002015][ T8] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000011c: -71 [ 815.013477][ T8] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRL: -71 [ 815.035585][ T8] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 815.055801][ T8] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 815.070899][ T8] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 815.081419][ T8] usb 3-1: USB disconnect, device number 69 [ 815.327388][ T27] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 815.507268][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 815.514338][ T27] usb 2-1: config 0 interface 0 has no altsetting 0 [ 815.522023][ T27] usb 2-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 815.531384][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.542519][ T27] usb 2-1: config 0 descriptor?? [ 815.975629][ T27] usbhid 2-1:0.0: can't add hid device: -71 [ 815.998364][ T27] usbhid: probe of 2-1:0.0 failed with error -71 [ 816.027692][ T27] usb 2-1: USB disconnect, device number 35 [ 816.075083][T15455] socket: no more sockets [ 816.092136][T15455] socket: no more sockets [ 816.252372][ T5765] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 816.458809][ T5765] usb 3-1: Using ep0 maxpacket: 16 [ 816.472903][ T5765] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 816.487367][ T5765] usb 3-1: config 0 has no interface number 0 [ 816.503515][ T5765] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 816.514285][ T5765] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 816.528808][ T5765] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 816.539197][ T5765] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.548617][ T5765] usb 3-1: Product: syz [ 816.553091][ T5765] usb 3-1: Manufacturer: syz [ 816.558278][ T5765] usb 3-1: SerialNumber: syz [ 816.567116][ T5765] usb 3-1: config 0 descriptor?? [ 816.573794][T15453] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 816.581626][T15453] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 816.793782][T15475] Cannot find add_set index 2 as target [ 816.793943][T15453] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 816.809398][T15453] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 817.026545][ T5765] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 817.253113][T15478] kvm: kvm [15477]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x80 [ 817.262321][T15478] kvm: kvm [15477]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 817.429173][ T5765] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 817.457864][ T5765] asix: probe of 3-1:0.34 failed with error -32 [ 817.700018][T15488] socket: no more sockets [ 818.088707][T15496] binder: 15495:15496 ioctl c0306201 0 returned -14 [ 818.127453][ T8] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 818.147532][T15498] binder: 15495:15498 ioctl c0306201 0 returned -14 [ 818.307264][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 818.314011][ T8] usb 6-1: config 0 interface 0 has no altsetting 0 [ 818.321048][ T8] usb 6-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 818.330516][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.343117][ T8] usb 6-1: config 0 descriptor?? [ 818.753965][ T8] usbhid 6-1:0.0: can't add hid device: -71 [ 818.766104][ T8] usbhid: probe of 6-1:0.0 failed with error -71 [ 818.775329][ T8] usb 6-1: USB disconnect, device number 11 [ 819.004316][ T8] usb 3-1: USB disconnect, device number 70 [ 819.420451][T15517] socket: no more sockets [ 819.431711][ T8] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 819.440476][T15517] socket: no more sockets [ 819.563422][T15523] binder: 15521:15523 ioctl c0306201 0 returned -14 [ 819.625747][T15524] binder: 15521:15524 ioctl c0306201 0 returned -14 [ 819.632525][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 819.642116][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 819.653277][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 819.664160][ T8] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 819.675687][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 819.686627][ T8] usb 3-1: SerialNumber: syz [ 819.703955][ T8] usb 3-1: 0:2 : does not exist [ 820.549357][ T8] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 820.586924][ T8] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 820.608722][ T8] usb 3-1: USB disconnect, device number 71 [ 821.224423][ T5784] Bluetooth: hci4: unexpected event for opcode 0x0403 [ 821.507604][ T8] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 821.596578][T15541] socket: no more sockets [ 821.697697][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 821.709297][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 821.717119][ T8] usb 3-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 821.726834][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.738151][ T8] usb 3-1: config 0 descriptor?? [ 822.158746][ T8] usbhid 3-1:0.0: can't add hid device: -71 [ 822.164796][ T8] usbhid: probe of 3-1:0.0 failed with error -71 [ 822.174328][ T8] usb 3-1: USB disconnect, device number 72 [ 822.351225][T15553] binder: 15552:15553 ioctl c0306201 0 returned -14 [ 822.411547][T15554] binder: 15552:15554 ioctl c0306201 0 returned -14 [ 823.067290][ T8] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 823.272114][ T8] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 823.288974][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 823.303959][ T8] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 823.327253][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 823.335104][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 823.347366][ T8] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 823.367210][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 823.387983][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 823.396945][ T8] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 823.409301][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 823.417696][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 823.426671][ T8] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 823.438091][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 823.446204][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 823.455285][ T8] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 823.467105][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 823.475384][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 823.484642][ T8] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 823.495959][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 823.504240][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 823.527352][ T8] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 823.545878][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 823.557347][ T5765] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 823.564101][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 823.588080][ T8] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 823.610767][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 823.633909][ T8] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 823.657429][ T8] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 823.666330][ T8] usb 3-1: Product: syz [ 823.673316][ T8] usb 3-1: Manufacturer: syz [ 823.678539][ T8] usb 3-1: SerialNumber: syz [ 823.692955][ T8] usb 3-1: config 0 descriptor?? [ 823.713548][ T8] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 823.757535][ T5765] usb 2-1: Using ep0 maxpacket: 32 [ 823.776664][ T5765] usb 2-1: config index 0 descriptor too short (expected 3659, got 75) [ 823.786167][ T5765] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 823.803667][ T5765] usb 2-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 823.813151][ T5765] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.826749][ T5765] usb 2-1: Product: syz [ 823.831057][ T5765] usb 2-1: Manufacturer: syz [ 823.836035][ T5765] usb 2-1: SerialNumber: syz [ 823.844772][ T5765] usb 2-1: config 0 descriptor?? [ 823.856451][ T5765] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 824.646777][T15571] socket: no more sockets [ 825.078324][T15562] fuse: Bad value for 'fd' [ 825.773079][ C0] usb 3-1: yurex_control_callback - control failed: -2 [ 825.828987][ T5815] usb 3-1: USB disconnect, device number 73 [ 825.857074][ T5815] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 826.110934][ T5765] gspca_sunplus: reg_r err -71 [ 826.121249][ T5765] sunplus: probe of 2-1:0.0 failed with error -71 [ 826.147764][ T5765] usb 2-1: USB disconnect, device number 36 [ 826.370398][ T5815] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 826.557272][ T5815] usb 3-1: Using ep0 maxpacket: 32 [ 826.564772][ T5815] usb 3-1: config 0 has an invalid interface number: 239 but max is 0 [ 826.573228][ T5815] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 826.589012][ T5815] usb 3-1: config 0 has no interface number 0 [ 826.600956][ T5815] usb 3-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 826.617247][ T27] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 826.625141][ T5815] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 826.647217][ T5815] usb 3-1: config 0 interface 239 altsetting 4 has an invalid endpoint with address 0xA9, skipping [ 826.660424][ T5815] usb 3-1: config 0 interface 239 altsetting 4 has an invalid endpoint with address 0xD5, skipping [ 826.677607][ T5815] usb 3-1: config 0 interface 239 has no altsetting 0 [ 826.689638][ T5815] usb 3-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 826.715443][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.727049][ T5815] usb 3-1: Product: syz [ 826.747684][ T5815] usb 3-1: Manufacturer: syz [ 826.752367][ T5815] usb 3-1: SerialNumber: syz [ 826.838908][ T5815] usb 3-1: config 0 descriptor?? [ 826.859322][T15587] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 826.880902][ T27] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 826.910138][T15587] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 826.952026][ T27] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 826.982433][ T27] usb 6-1: config 0 interface 0 has no altsetting 0 [ 827.029078][ T27] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 827.066504][ T27] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 827.078886][ T5834] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 827.337113][ T27] usb 6-1: Product: syz [ 827.344119][ T27] usb 6-1: Manufacturer: syz [ 827.357473][ T27] usb 6-1: SerialNumber: syz [ 827.375454][ T27] usb 6-1: config 0 descriptor?? [ 827.397331][ T5834] usb 2-1: Using ep0 maxpacket: 16 [ 827.402627][ T27] usb 6-1: selecting invalid altsetting 0 [ 827.408250][ T5834] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 827.416709][ T5834] usb 2-1: config 0 has no interface number 0 [ 827.423728][ T5834] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 827.437520][ T5834] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 827.462871][ T5834] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 827.512090][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.565132][T15587] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3038'. [ 827.604388][ T5834] usb 2-1: Product: syz [ 827.633023][ T5834] usb 2-1: Manufacturer: syz [ 827.690359][ T5834] usb 2-1: SerialNumber: syz [ 827.706386][ T5834] usb 2-1: config 0 descriptor?? [ 827.739645][T15599] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 827.773116][T15599] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 827.897605][ T7651] usb 3-1: USB disconnect, device number 74 [ 828.034042][T15599] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 828.041612][T15599] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 828.090489][T15592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 828.103734][T15592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 828.153949][ T8] usb 6-1: USB disconnect, device number 12 [ 828.274506][ T5834] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 828.668101][ T8] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 828.707288][ T5834] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 828.732272][ T5834] asix: probe of 2-1:0.34 failed with error -61 [ 828.870500][ T8] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 828.897204][ T8] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 828.917273][ T8] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 828.946847][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.951648][T15612] socket: no more sockets [ 829.604602][T15589] syz.5.3037 (15589): drop_caches: 2 [ 829.800505][ T8] usb 6-1: USB disconnect, device number 13 [ 829.962424][ T5834] usb 2-1: USB disconnect, device number 37 [ 830.271672][T15641] socket: no more sockets [ 830.497550][ T5834] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 830.687332][ T5834] usb 2-1: Using ep0 maxpacket: 32 [ 830.709025][ T5834] usb 2-1: config 0 has an invalid interface number: 239 but max is 0 [ 830.727847][ T5834] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 830.748675][ T5834] usb 2-1: config 0 has no interface number 0 [ 830.754863][ T5834] usb 2-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 830.783059][ T5834] usb 2-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 830.807225][ T5834] usb 2-1: config 0 interface 239 altsetting 4 has an invalid endpoint with address 0xA9, skipping [ 830.828032][ T5834] usb 2-1: config 0 interface 239 altsetting 4 has an invalid endpoint with address 0xD5, skipping [ 830.849567][ T5834] usb 2-1: config 0 interface 239 has no altsetting 0 [ 830.866057][ T5834] usb 2-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 830.881183][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.903492][ T5834] usb 2-1: Product: syz [ 830.910004][ T5834] usb 2-1: Manufacturer: syz [ 830.914755][ T5834] usb 2-1: SerialNumber: syz [ 830.945329][ T5834] usb 2-1: config 0 descriptor?? [ 830.968005][T15632] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 830.991085][T15632] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 831.260159][T15665] socket: no more sockets [ 831.334023][T15632] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3049'. [ 831.509720][ T27] usb 2-1: USB disconnect, device number 38 [ 831.777016][T15675] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3063'. [ 831.818425][T15675] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3063'. [ 832.502028][T15692] socket: no more sockets [ 832.927325][ T27] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 833.087389][ T27] usb 3-1: device descriptor read/64, error -71 [ 833.367590][ T27] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 833.431961][T15714] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3075'. [ 833.457366][ T5834] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 833.468940][T15714] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3075'. [ 833.557513][ T27] usb 3-1: device descriptor read/64, error -71 [ 833.667236][ T5834] usb 2-1: Using ep0 maxpacket: 32 [ 833.680611][ T5834] usb 2-1: config 0 has an invalid interface number: 239 but max is 0 [ 833.687471][ T27] usb usb3-port1: attempt power cycle [ 833.709741][ T5834] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 833.724922][ T5834] usb 2-1: config 0 has no interface number 0 [ 833.731344][ T5834] usb 2-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 833.741891][ T5834] usb 2-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 833.753872][ T5834] usb 2-1: config 0 interface 239 altsetting 4 has an invalid endpoint with address 0xA9, skipping [ 833.767902][ T5834] usb 2-1: config 0 interface 239 altsetting 4 has an invalid endpoint with address 0xD5, skipping [ 833.783096][ T5834] usb 2-1: config 0 interface 239 has no altsetting 0 [ 833.809952][ T5834] usb 2-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 833.821235][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.829842][ T5834] usb 2-1: Product: syz [ 833.838082][ T5834] usb 2-1: Manufacturer: syz [ 833.842750][ T5834] usb 2-1: SerialNumber: syz [ 833.881853][ T5834] usb 2-1: config 0 descriptor?? [ 833.888210][T15708] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 833.916206][T15708] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 833.933171][T15727] socket: no more sockets [ 834.117657][ T27] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 834.160402][ T27] usb 3-1: device descriptor read/8, error -71 [ 834.206358][T15708] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3074'. [ 834.294084][ T5834] usb 2-1: USB disconnect, device number 39 [ 834.459514][ T27] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 834.498221][ T27] usb 3-1: device descriptor read/8, error -71 [ 834.653039][ T27] usb usb3-port1: unable to enumerate USB device [ 835.261509][T15745] syzkaller0: entered promiscuous mode [ 835.267094][T15745] syzkaller0: entered allmulticast mode [ 835.279613][T15747] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3085'. [ 835.289801][T15747] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3085'. [ 835.517863][T15752] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 835.705936][T15757] socket: no more sockets [ 835.739172][T15757] socket: no more sockets [ 835.938698][T15764] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.3091'. [ 835.940067][T15766] tipc: Enabled bearer , priority 0 [ 835.991077][T15766] syzkaller0: entered promiscuous mode [ 836.017438][T15766] syzkaller0: entered allmulticast mode [ 836.065446][T15769] xt_hashlimit: size too large, truncated to 1048576 [ 836.086452][T15766] tipc: Resetting bearer [ 836.097262][ T5815] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 836.128620][T15765] tipc: Resetting bearer [ 836.244405][T15765] tipc: Disabling bearer [ 836.307348][ T5815] usb 3-1: Using ep0 maxpacket: 16 [ 836.330062][ T5815] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 836.361068][ T5815] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 836.411840][ T5815] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 836.441443][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.462014][ T5815] usb 3-1: Product: syz [ 836.466310][ T5815] usb 3-1: Manufacturer: syz [ 836.482128][ T5815] usb 3-1: SerialNumber: syz [ 836.727856][ T5815] usb 3-1: 0:2 : does not exist [ 836.760857][ T5815] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 836.776026][T11943] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 836.796988][T11943] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 836.809857][T11943] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 836.821210][T11943] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 836.829987][T11943] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 836.847799][T11943] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 836.905063][ T5815] usb 3-1: USB disconnect, device number 79 [ 837.010316][ T5770] udevd[5770]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 837.490473][T15776] chnl_net:caif_netlink_parms(): no params data found [ 837.794622][T15776] bridge0: port 1(bridge_slave_0) entered blocking state [ 837.806040][T15776] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.820689][T15776] bridge_slave_0: entered allmulticast mode [ 837.840954][T15776] bridge_slave_0: entered promiscuous mode [ 837.879139][T15794] socket: no more sockets [ 837.885118][T15776] bridge0: port 2(bridge_slave_1) entered blocking state [ 837.906959][T15776] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.921991][T15776] bridge_slave_1: entered allmulticast mode [ 837.930713][T15776] bridge_slave_1: entered promiscuous mode [ 837.965982][T15776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 837.996560][T15776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 838.127050][T15776] team0: Port device team_slave_0 added [ 838.154389][T15776] team0: Port device team_slave_1 added [ 838.170416][ T5765] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 838.204979][T15776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 838.216046][T15776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 838.255590][T15776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 838.277702][T15776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 838.284717][T15776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 838.328462][T15776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 838.389785][T15776] hsr_slave_0: entered promiscuous mode [ 838.396712][T15776] hsr_slave_1: entered promiscuous mode [ 838.402770][ T7651] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 838.420819][T15776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 838.434610][T15776] Cannot create hsr debugfs directory [ 838.466003][ T5765] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 838.477988][ T5765] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 838.573146][ T5765] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 838.587643][ T7651] usb 2-1: device descriptor read/64, error -71 [ 838.633315][ T5765] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.686237][T15776] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.698148][T15791] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 838.712356][ T5765] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 838.842156][T15776] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.877709][ T7651] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 838.958140][T11943] Bluetooth: hci1: command tx timeout [ 839.000374][T15776] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.037811][ T7651] usb 2-1: device descriptor read/64, error -71 [ 839.166725][ T7651] usb usb2-port1: attempt power cycle [ 839.190320][T15776] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.211994][T14903] cxacru 5-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 839.597501][ T7651] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 839.680357][ T7651] usb 2-1: device descriptor read/8, error -71 [ 839.870224][T15776] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 839.945645][T15776] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 839.978830][ T7651] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 840.046608][T15776] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 840.059136][T15776] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 840.069129][ T7651] usb 2-1: device descriptor read/8, error -71 [ 840.204774][ T7651] usb usb2-port1: unable to enumerate USB device [ 840.327379][T15776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 840.381156][T15776] 8021q: adding VLAN 0 to HW filter on device team0 [ 840.406493][ T9322] bridge0: port 1(bridge_slave_0) entered blocking state [ 840.413926][ T9322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 840.482767][ T9318] bridge0: port 2(bridge_slave_1) entered blocking state [ 840.490046][ T9318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 840.793384][T15776] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 840.827824][T15776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 840.887766][ T5834] usb 3-1: USB disconnect, device number 80 [ 841.037590][T11943] Bluetooth: hci1: command tx timeout [ 841.403645][T15776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 841.517306][ T27] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 841.717272][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 841.729388][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 841.750289][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 841.777002][ T27] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 841.796309][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 841.807368][ T27] usb 2-1: SerialNumber: syz [ 841.832262][ T27] usb 2-1: 0:2 : does not exist [ 842.126321][T15776] veth0_vlan: entered promiscuous mode [ 842.150160][T15776] veth1_vlan: entered promiscuous mode [ 842.246746][T15776] veth0_macvtap: entered promiscuous mode [ 842.268114][T15776] veth1_macvtap: entered promiscuous mode [ 842.310453][T15776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 842.336016][T15776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 842.354554][T15776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.366700][T15776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 842.378233][T15776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.398939][T15776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 842.420632][T15776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.435874][T15776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 842.454022][T15776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.464622][T15776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 842.475831][T15776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.510614][T15776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 842.544399][T15776] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.566824][T15776] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.576500][T15776] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.593142][T15776] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.643051][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 842.673330][ T27] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 842.756051][ T27] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 842.788936][ T9318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 842.800240][ T27] usb 2-1: USB disconnect, device number 44 [ 842.816408][ T9318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 842.861707][ T5770] udevd[5770]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 842.876660][ T9318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 842.913143][ T9318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 843.118696][T11943] Bluetooth: hci1: command tx timeout [ 843.339095][T15826] socket: no more sockets [ 843.499631][T15832] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3109'. [ 843.898230][ T5765] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 843.967270][ T789] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 844.089879][ T5765] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 844.111825][ T5765] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 844.132584][ T5765] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 844.150593][ T27] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 844.151676][ T789] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 844.177671][ T5765] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.180365][ T789] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 844.205765][ T789] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 844.220402][ T789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.247744][T15833] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 844.270811][ T5765] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 844.377411][ T27] usb 5-1: Using ep0 maxpacket: 16 [ 844.390703][ T27] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 844.420146][ T27] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 844.445796][ T789] usb 3-1: USB disconnect, device number 81 [ 844.468201][ T27] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 844.490279][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.522570][ T27] usb 5-1: Product: syz [ 844.528249][ T27] usb 5-1: Manufacturer: syz [ 844.532982][ T27] usb 5-1: SerialNumber: syz [ 844.764442][ T27] usb 5-1: 0:2 : does not exist [ 844.784723][ T27] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 844.821923][ T27] usb 5-1: USB disconnect, device number 109 [ 844.892561][ T5770] udevd[5770]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 845.197473][T11943] Bluetooth: hci1: command tx timeout [ 845.995439][T15854] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3118'. [ 846.048518][ T789] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 846.103447][T15856] xt_hashlimit: size too large, truncated to 1048576 [ 846.267380][ T789] usb 5-1: Using ep0 maxpacket: 16 [ 846.276772][ T789] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 846.352602][ T789] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 846.378920][ T789] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 846.401139][ T789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 846.427349][ T789] usb 5-1: SerialNumber: syz [ 846.492048][ T789] usb 5-1: 0:2 : does not exist [ 846.584385][ T27] usb 2-1: USB disconnect, device number 45 [ 847.314789][ T789] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 847.387400][ T789] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 847.431818][ T789] usb 5-1: USB disconnect, device number 110 [ 847.716411][T15876] loop5: detected capacity change from 0 to 2048 [ 847.776474][T15876] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 847.887296][ T27] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 848.093906][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 848.667837][ T789] usb 5-1: new full-speed USB device number 111 using dummy_hcd [ 848.884028][ T789] usb 5-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 848.885545][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 848.903230][T15776] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 848.907727][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 848.935409][ T27] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 848.944660][ T789] usb 5-1: config 0 interface 0 has no altsetting 0 [ 848.951645][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.951673][ T27] usb 2-1: Product: syz [ 848.965130][ T27] usb 2-1: Manufacturer: syz [ 848.981534][ T27] usb 2-1: SerialNumber: syz [ 848.997479][ T789] usb 5-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 849.027586][ T789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.075067][ T789] usb 5-1: config 0 descriptor?? [ 849.141288][T15890] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3127'. [ 849.207654][ T27] usb 2-1: 0:2 : does not exist [ 849.242512][T15890] team0: Port device geneve2 added [ 849.251307][ T27] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 849.315901][ T27] usb 2-1: USB disconnect, device number 46 [ 849.376225][ T5770] udevd[5770]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 849.506761][ T789] itetech 0003:048D:8595.0013: unknown main item tag 0x0 [ 849.524606][ T789] itetech 0003:048D:8595.0013: unknown main item tag 0x0 [ 849.537360][ T789] itetech 0003:048D:8595.0013: collection stack underflow [ 849.544549][ T789] itetech 0003:048D:8595.0013: item 0 0 0 12 parsing failed [ 849.568134][ T789] itetech: probe of 0003:048D:8595.0013 failed with error -22 [ 849.711866][ T27] usb 5-1: USB disconnect, device number 111 [ 850.457573][ T789] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 850.657900][ T789] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 850.679276][ T789] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 850.720352][ T789] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 850.763815][ T789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.867983][T15899] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 850.908948][ T789] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 851.069304][T15910] socket: no more sockets [ 851.087851][ T5815] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 851.287853][ T5815] usb 5-1: Using ep0 maxpacket: 32 [ 851.305399][ T5815] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 851.329988][ T5815] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 851.339904][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.354305][ T5815] usb 5-1: config 0 descriptor?? [ 851.374861][ T5815] hub 5-1:0.0: bad descriptor, ignoring hub [ 851.389617][ T5815] hub: probe of 5-1:0.0 failed with error -5 [ 851.399398][ T5815] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 851.560654][T15914] loop5: detected capacity change from 0 to 2048 [ 851.609367][T15914] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 852.665179][T15776] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 853.779046][ T5815] usb 2-1: USB disconnect, device number 47 [ 854.051554][ T23] usb 5-1: USB disconnect, device number 112 [ 854.113740][T15932] tipc: Started in network mode [ 854.129644][T15932] tipc: Node identity 2a6f0ff81fb6, cluster identity 4711 [ 854.137015][T15932] tipc: Enabled bearer , priority 0 [ 854.182354][T15930] tipc: Disabling bearer [ 854.228802][T15936] tipc: Enabled bearer , priority 0 [ 854.236773][T15936] syzkaller0: entered promiscuous mode [ 854.247405][T15936] syzkaller0: entered allmulticast mode [ 854.294656][T15936] tipc: Resetting bearer [ 854.331503][T15935] tipc: Resetting bearer [ 854.413008][T15935] tipc: Disabling bearer [ 854.503007][T15946] Cannot find add_set index 2 as target [ 854.510970][T15944] loop5: detected capacity change from 0 to 2048 [ 854.603344][T15944] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 855.198232][ T23] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 855.568487][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 855.590207][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 855.637079][ T23] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 855.664531][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.686826][T15776] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 855.705929][ T23] usb 2-1: config 0 descriptor?? [ 855.752608][ T23] hub 2-1:0.0: bad descriptor, ignoring hub [ 855.777554][ T23] hub: probe of 2-1:0.0 failed with error -5 [ 855.785507][ T23] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 855.875679][T15967] tipc: Enabled bearer , priority 0 [ 855.907000][T15966] tipc: Disabling bearer [ 856.007599][ T8] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 856.147635][T15975] tipc: Enabled bearer , priority 0 [ 856.155241][T15975] syzkaller0: entered promiscuous mode [ 856.161718][T15975] syzkaller0: entered allmulticast mode [ 856.180792][T15975] tipc: Resetting bearer [ 856.190803][T15974] tipc: Resetting bearer [ 856.209488][ T8] usb 3-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 856.241546][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 856.249584][T15974] tipc: Disabling bearer [ 856.258440][ T8] usb 3-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 856.284603][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.300821][ T8] usb 3-1: config 0 descriptor?? [ 856.633050][T15988] loop4: detected capacity change from 0 to 2048 [ 856.679555][T15988] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 856.894156][ T8] itetech 0003:048D:8595.0014: unknown main item tag 0x0 [ 856.902730][ T8] itetech 0003:048D:8595.0014: unknown main item tag 0x0 [ 856.909980][ T8] itetech 0003:048D:8595.0014: collection stack underflow [ 856.917225][ T8] itetech 0003:048D:8595.0014: item 0 0 0 12 parsing failed [ 856.925079][ T8] itetech: probe of 0003:048D:8595.0014 failed with error -22 [ 857.566748][ T8] usb 3-1: USB disconnect, device number 82 [ 857.770103][ T7454] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 858.045629][T16007] tipc: Enabled bearer , priority 0 [ 858.057628][ T27] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 858.087476][ T8] usb 2-1: USB disconnect, device number 48 [ 858.102476][T16005] tipc: Disabling bearer [ 858.218451][ T789] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 858.247923][ T27] usb 6-1: Using ep0 maxpacket: 16 [ 858.273444][ T27] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 858.288053][ T27] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 858.301190][ T27] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 858.316879][ T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 858.327056][ T27] usb 6-1: SerialNumber: syz [ 858.353827][ T27] usb 6-1: 0:2 : does not exist [ 858.407444][ T789] usb 5-1: Using ep0 maxpacket: 32 [ 858.429355][ T789] usb 5-1: config 0 has an invalid interface number: 239 but max is 0 [ 858.444650][ T789] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 858.456330][ T789] usb 5-1: config 0 has no interface number 0 [ 858.471616][ T789] usb 5-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 858.492357][ T789] usb 5-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 858.505815][ T789] usb 5-1: config 0 interface 239 altsetting 4 has an invalid endpoint with address 0xA9, skipping [ 858.525225][ T789] usb 5-1: config 0 interface 239 altsetting 4 has an invalid endpoint with address 0xD5, skipping [ 858.544967][ T789] usb 5-1: config 0 interface 239 has no altsetting 0 [ 858.556938][ T789] usb 5-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 858.576525][ T789] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.586655][ T789] usb 5-1: Product: syz [ 858.591459][ T789] usb 5-1: Manufacturer: syz [ 858.596105][ T789] usb 5-1: SerialNumber: syz [ 858.604339][ T789] usb 5-1: config 0 descriptor?? [ 858.611651][T16003] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 858.628868][T16003] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 858.862367][T16025] loop1: detected capacity change from 0 to 2048 [ 858.922334][T16003] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3160'. [ 858.971272][T16025] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 859.202581][ T789] usb 5-1: USB disconnect, device number 113 [ 859.445961][ T27] usb 6-1: 5:0: cannot get min/max values for control 5 (id 5) [ 859.951096][ T27] usb 6-1: 5:0: cannot get min/max values for control 5 (id 5) [ 859.971925][T14308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 860.015789][ T27] usb 6-1: USB disconnect, device number 14 [ 860.099726][ T5770] udevd[5770]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 860.372025][T16045] tipc: Enabled bearer , priority 0 [ 860.412176][T16045] syzkaller0: entered promiscuous mode [ 860.428743][T16045] syzkaller0: entered allmulticast mode [ 860.463662][T16045] tipc: Resetting bearer [ 860.494211][T16044] tipc: Resetting bearer [ 860.582384][T16044] tipc: Disabling bearer [ 860.951029][T16055] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 861.143200][T16061] loop5: detected capacity change from 0 to 2048 [ 861.270245][T16061] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 861.687242][ T27] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 861.713588][T16075] fuse: Unknown parameter 'grou00000000000000000000' [ 862.250426][T15776] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 862.407343][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 862.452289][ T27] usb 2-1: config 0 has an invalid interface number: 239 but max is 0 [ 862.476515][ T27] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 862.511106][ T27] usb 2-1: config 0 has no interface number 0 [ 862.540751][ T27] usb 2-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 862.575893][ T27] usb 2-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 862.606423][ T27] usb 2-1: config 0 interface 239 altsetting 4 has an invalid endpoint with address 0xA9, skipping [ 862.628183][ T27] usb 2-1: config 0 interface 239 altsetting 4 has an invalid endpoint with address 0xD5, skipping [ 862.690987][ T27] usb 2-1: config 0 interface 239 has no altsetting 0 [ 862.740373][ T27] usb 2-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 862.759909][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.779074][ T27] usb 2-1: Product: syz [ 862.796223][ T27] usb 2-1: Manufacturer: syz [ 862.797512][ T8] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 862.816552][ T27] usb 2-1: SerialNumber: syz [ 862.829369][ T27] usb 2-1: config 0 descriptor?? [ 862.852833][T16070] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 862.864890][T16070] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 863.047931][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 863.057260][ T5765] usb 5-1: new full-speed USB device number 114 using dummy_hcd [ 863.064040][ T8] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 863.086244][ T8] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 863.120740][ T8] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 863.140875][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 863.152311][T16070] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3180'. [ 863.167386][ T8] usb 6-1: SerialNumber: syz [ 863.185531][ T8] usb 6-1: 0:2 : does not exist [ 863.242581][ T5765] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 863.263807][ T5765] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.284639][ T5765] usb 5-1: Product: syz [ 863.310822][ T5815] usb 2-1: USB disconnect, device number 49 [ 863.330377][ T5765] usb 5-1: Manufacturer: syz [ 863.335161][ T5765] usb 5-1: SerialNumber: syz [ 863.345186][ T5765] usb 5-1: config 0 descriptor?? [ 863.596852][ T5765] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 864.136211][T16099] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.3187'. [ 864.232347][ T8] usb 6-1: 5:0: cannot get min/max values for control 5 (id 5) [ 864.289348][ T8] usb 6-1: 5:0: cannot get min/max values for control 5 (id 5) [ 864.336268][ T8] usb 6-1: USB disconnect, device number 15 [ 864.343079][T16103] loop1: detected capacity change from 0 to 2048 [ 864.414418][T16103] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 864.441079][ T5770] udevd[5770]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 864.828439][T16112] fuse: Unknown parameter 'grou00000000000000000000' [ 865.471417][T14308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 865.656463][ T5765] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 865.689455][ T5765] usb 5-1: USB disconnect, device number 114 [ 866.377279][ T5765] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 866.587213][ T5765] usb 6-1: Using ep0 maxpacket: 32 [ 866.620112][ T5765] usb 6-1: config 0 has an invalid interface number: 239 but max is 0 [ 866.647516][ T5765] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 866.688701][ T5765] usb 6-1: config 0 has no interface number 0 [ 866.694918][ T5765] usb 6-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 866.757306][ T5765] usb 6-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 866.811693][T16140] loop1: detected capacity change from 0 to 2048 [ 866.817232][ T5765] usb 6-1: config 0 interface 239 altsetting 4 has an invalid endpoint with address 0xA9, skipping [ 866.848922][ T5765] usb 6-1: config 0 interface 239 altsetting 4 has an invalid endpoint with address 0xD5, skipping [ 866.876562][ T5765] usb 6-1: config 0 interface 239 has no altsetting 0 [ 866.893040][ T5765] usb 6-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 866.898317][T16140] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 866.907986][ T5765] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.926307][ T5765] usb 6-1: Product: syz [ 866.934689][ T5765] usb 6-1: Manufacturer: syz [ 866.941149][ T5765] usb 6-1: SerialNumber: syz [ 866.954808][ T5765] usb 6-1: config 0 descriptor?? [ 866.965750][T16144] netlink: 'syz.4.3202': attribute type 72 has an invalid length. [ 866.970791][T16125] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 866.997798][T16125] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 867.329602][T16154] fuse: Unknown parameter 'grou00000000000000000000' [ 867.355268][ T8] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 867.376822][T16123] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3195'. [ 867.543456][T16123] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 867.699628][ T8] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 867.726657][ T8] usb 3-1: config 0 has no interface number 0 [ 867.743713][ T8] usb 3-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 867.781844][ T8] usb 3-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 867.818550][ T8] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 867.842226][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.866436][ T8] usb 3-1: Product: syz [ 867.897171][ T8] usb 3-1: Manufacturer: syz [ 867.923775][ T8] usb 3-1: SerialNumber: syz [ 867.947929][T14308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 867.952653][T16123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 867.963077][ T8] usb 3-1: config 0 descriptor?? [ 867.994804][T16147] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 868.016508][T16147] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 868.042256][ T8] smsc95xx v2.0.0 [ 868.085413][ T5815] usb 6-1: USB disconnect, device number 16 [ 868.246881][T16147] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 868.249861][T16161] binder: 16160:16161 ioctl c0306201 0 returned -14 [ 868.254952][T16147] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 868.484954][ T8] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 868.506873][ T8] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 868.673374][T16173] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.3211'. [ 869.044280][T16180] loop4: detected capacity change from 0 to 2048 [ 869.108775][T16180] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 869.503244][T16186] fuse: Unknown parameter 'group_i00000000000000000000' [ 870.033330][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.047284][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.075567][ T7454] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 870.089308][T16189] binder: 16187:16189 ioctl c0306201 0 returned -14 [ 870.168418][T16190] binder: 16187:16190 ioctl c0306201 0 returned -14 [ 870.491109][ T8] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71 [ 870.522415][ T8] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 870.564571][ T8] usb 3-1: USB disconnect, device number 83 [ 871.489209][ T5815] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 871.529561][T16216] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.3221'. [ 871.687710][ T5815] usb 3-1: Using ep0 maxpacket: 32 [ 871.698038][ T5815] usb 3-1: config 0 has an invalid interface number: 239 but max is 0 [ 871.727238][ T5815] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 871.767457][ T5815] usb 3-1: config 0 has no interface number 0 [ 871.775730][T16219] loop5: detected capacity change from 0 to 2048 [ 871.794093][ T5815] usb 3-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 871.827443][ T5815] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 871.859419][ T5815] usb 3-1: config 0 interface 239 altsetting 4 has an invalid endpoint with address 0xA9, skipping [ 871.893938][ T5815] usb 3-1: config 0 interface 239 altsetting 4 has an invalid endpoint with address 0xD5, skipping [ 871.918686][T16219] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 871.976594][ T5815] usb 3-1: config 0 interface 239 has no altsetting 0 [ 872.083151][ T5784] Bluetooth: hci0: command 0x0406 tx timeout [ 872.128974][T16225] socket: no more sockets [ 872.154707][ T5815] usb 3-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 872.184434][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.193976][ T5815] usb 3-1: Product: syz [ 872.198482][ T5815] usb 3-1: Manufacturer: syz [ 872.205837][ T5815] usb 3-1: SerialNumber: syz [ 872.215540][ T5815] usb 3-1: config 0 descriptor?? [ 872.232529][T16227] fuse: Unknown parameter 'group_i00000000000000000000' [ 872.801880][T16207] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 872.810157][T16207] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 872.868135][T15776] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 873.058429][T16231] binder: 16230:16231 ioctl c0306201 0 returned -14 [ 873.107385][T16207] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3220'. [ 873.151438][T16235] binder: 16230:16235 ioctl c0306201 0 returned -14 [ 873.199112][ T789] usb 3-1: USB disconnect, device number 84 [ 874.020246][T16250] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.3232'. [ 874.393286][T16258] loop2: detected capacity change from 0 to 2048 [ 874.533452][T16258] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 874.748983][ T7651] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 874.852716][T16269] fuse: Unknown parameter 'group_i00000000000000000000' [ 875.491222][T10745] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 875.617965][ T7651] usb 6-1: Using ep0 maxpacket: 32 [ 875.641504][ T7651] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 875.687080][ T7651] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 875.758085][ T7651] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 875.779771][ T7651] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.806075][ T7651] usb 6-1: config 0 descriptor?? [ 875.818676][ T7651] hub 6-1:0.0: USB hub found [ 876.061360][ T7651] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 876.137520][ T8] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 876.306673][ T7651] usbhid 6-1:0.0: can't add hid device: -71 [ 876.323292][ T7651] usbhid: probe of 6-1:0.0 failed with error -71 [ 876.330771][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 876.368054][ T8] usb 3-1: config 0 has an invalid interface number: 239 but max is 0 [ 876.376827][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 876.398189][ T7651] usb 6-1: USB disconnect, device number 17 [ 876.421729][ T8] usb 3-1: config 0 has no interface number 0 [ 876.438615][T16286] binder: 16285:16286 ioctl c0306201 0 returned -14 [ 876.447307][ T8] usb 3-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 876.461421][ T8] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 876.477788][ T8] usb 3-1: config 0 interface 239 altsetting 4 has an invalid endpoint with address 0xA9, skipping [ 876.489200][ T8] usb 3-1: config 0 interface 239 altsetting 4 has an invalid endpoint with address 0xD5, skipping [ 876.513653][T16288] binder: 16285:16288 ioctl c0306201 0 returned -14 [ 876.523691][ T8] usb 3-1: config 0 interface 239 has no altsetting 0 [ 876.538708][ T8] usb 3-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 876.553880][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.576207][ T8] usb 3-1: Product: syz [ 876.586221][ T8] usb 3-1: Manufacturer: syz [ 876.591340][ T8] usb 3-1: SerialNumber: syz [ 876.618120][ T8] usb 3-1: config 0 descriptor?? [ 876.626758][T16277] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 876.641638][T16277] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 876.725312][T16290] tipc: Enabled bearer , priority 0 [ 876.735862][T16289] tipc: Disabling bearer [ 876.953320][T16277] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3238'. [ 877.116568][ T8] usb 3-1: USB disconnect, device number 85 [ 877.181504][T16301] loop5: detected capacity change from 0 to 2048 [ 877.228659][T16301] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 877.600064][T16314] fuse: Unknown parameter 'group_id00000000000000000000' [ 878.276885][T15776] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 878.563292][T16316] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3248'. [ 879.662088][T16330] tipc: Enabled bearer , priority 0 [ 879.715300][T16329] tipc: Disabling bearer [ 880.148615][T16334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3253'. [ 880.425265][T16342] binder: 16341:16342 ioctl c0306201 0 returned -14 [ 880.489197][T16343] binder: 16341:16343 ioctl c0306201 0 returned -14 [ 880.828042][ T789] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 880.897312][ T5780] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 881.017932][ T789] usb 2-1: Using ep0 maxpacket: 32 [ 881.049580][ T789] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 881.117713][ T789] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 881.127941][ T789] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 881.137245][ T789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.148647][ T789] usb 2-1: config 0 descriptor?? [ 881.157640][ T5780] usb 5-1: Using ep0 maxpacket: 32 [ 881.163697][ T789] hub 2-1:0.0: USB hub found [ 881.173538][ T5780] usb 5-1: config 0 has an invalid interface number: 239 but max is 0 [ 881.188785][ T5780] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 881.202130][ T5780] usb 5-1: config 0 has no interface number 0 [ 881.208743][ T5780] usb 5-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 881.220204][ T5780] usb 5-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 881.231994][ T5780] usb 5-1: config 0 interface 239 altsetting 4 has an invalid endpoint with address 0xA9, skipping [ 881.243471][ T5780] usb 5-1: config 0 interface 239 altsetting 4 has an invalid endpoint with address 0xD5, skipping [ 881.264872][ T5780] usb 5-1: config 0 interface 239 has no altsetting 0 [ 881.329096][ T5780] usb 5-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 881.356132][ T5780] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.378441][ T5780] usb 5-1: Product: syz [ 881.382671][ T5780] usb 5-1: Manufacturer: syz [ 881.393569][ T789] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 881.411151][ T5780] usb 5-1: SerialNumber: syz [ 881.440557][ T5780] usb 5-1: config 0 descriptor?? [ 881.446459][T16351] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 881.455621][T16351] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 881.632907][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 881.641128][ T789] usbhid 2-1:0.0: can't add hid device: -71 [ 881.647167][ T789] usbhid: probe of 2-1:0.0 failed with error -71 [ 881.725056][ T789] usb 2-1: USB disconnect, device number 50 [ 881.733514][T16351] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3258'. [ 881.905428][ T5780] usb 5-1: USB disconnect, device number 115 [ 881.915151][T16371] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3262'. [ 883.114239][T16395] binder: 16394:16395 ioctl c0306201 0 returned -14 [ 883.193504][T16397] binder: 16394:16397 ioctl c0306201 0 returned -14 [ 884.497457][ T789] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 884.757243][ T789] usb 2-1: Using ep0 maxpacket: 32 [ 884.783451][ T789] usb 2-1: config 0 has an invalid interface number: 239 but max is 0 [ 884.807311][ T789] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 884.843859][ T789] usb 2-1: config 0 has no interface number 0 [ 884.864526][ T789] usb 2-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 884.894449][ T789] usb 2-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 884.934578][ T789] usb 2-1: config 0 interface 239 altsetting 4 has an invalid endpoint with address 0xA9, skipping [ 884.949302][ T789] usb 2-1: config 0 interface 239 altsetting 4 has an invalid endpoint with address 0xD5, skipping [ 884.979581][ T789] usb 2-1: config 0 interface 239 has no altsetting 0 [ 885.009147][ T789] usb 2-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 885.019459][ T789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.028076][ T789] usb 2-1: Product: syz [ 885.032493][ T789] usb 2-1: Manufacturer: syz [ 885.039346][ T789] usb 2-1: SerialNumber: syz [ 885.054546][ T789] usb 2-1: config 0 descriptor?? [ 885.065461][T16411] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 885.073388][T16411] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 885.117325][ T5780] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 885.339829][ T5780] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 885.365017][T16411] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3273'. [ 885.396720][ T5780] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 885.425180][ T5780] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 885.502952][ T5780] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 885.578811][ T23] usb 2-1: USB disconnect, device number 51 [ 885.589589][ T5780] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.857274][ T5780] cxacru 3-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 885.887736][ T5780] cxacru: probe of 3-1:1.0 failed with error -22 [ 886.054109][ T23] usb 3-1: USB disconnect, device number 86 [ 886.074177][T16440] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3280'. [ 886.202871][T16442] binder: 16441:16442 ioctl c0306201 0 returned -14 [ 886.282295][T16445] binder: 16441:16445 ioctl c0306201 0 returned -14 [ 886.857794][T16454] socket: no more sockets [ 888.067362][ T5780] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 888.311600][ T5780] usb 2-1: Using ep0 maxpacket: 32 [ 888.370702][ T5780] usb 2-1: config 0 has an invalid interface number: 239 but max is 0 [ 888.397719][ T5780] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 888.435034][ T5780] usb 2-1: config 0 has no interface number 0 [ 888.454606][ T5780] usb 2-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 888.495223][ T5780] usb 2-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 888.531122][ T5780] usb 2-1: config 0 interface 239 altsetting 4 has an invalid endpoint with address 0xA9, skipping [ 888.563483][T16497] binder: 16496:16497 ioctl c0306201 0 returned -14 [ 888.570606][ T5780] usb 2-1: config 0 interface 239 altsetting 4 has an invalid endpoint with address 0xD5, skipping [ 888.602218][ T5780] usb 2-1: config 0 interface 239 has no altsetting 0 [ 888.630687][ T5780] usb 2-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 888.644923][T16498] binder: 16496:16498 ioctl c0306201 0 returned -14 [ 888.661062][ T5780] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.693516][ T5780] usb 2-1: Product: syz [ 888.704628][ T5780] usb 2-1: Manufacturer: syz [ 888.720928][ T5780] usb 2-1: SerialNumber: syz [ 888.742748][ T5780] usb 2-1: config 0 descriptor?? [ 888.754773][T16480] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 888.768783][T16480] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 889.048400][T16480] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3290'. [ 889.165237][ T23] usb 2-1: USB disconnect, device number 52 [ 889.949103][T16517] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3297'. [ 891.094295][T16540] binder: 16539:16540 ioctl c0306201 0 returned -14 [ 891.247651][T16543] binder: 16539:16543 ioctl c0306201 0 returned -14 [ 891.937527][ T5765] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 892.187807][ T5765] usb 2-1: Using ep0 maxpacket: 32 [ 892.212768][ T5765] usb 2-1: config 0 has an invalid interface number: 239 but max is 0 [ 892.257205][ T5765] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 892.314201][ T5765] usb 2-1: config 0 has no interface number 0 [ 892.328114][ T5765] usb 2-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 892.407215][ T5765] usb 2-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 892.444135][ T5765] usb 2-1: config 0 interface 239 altsetting 4 has an invalid endpoint with address 0xA9, skipping [ 892.490293][ T5765] usb 2-1: config 0 interface 239 altsetting 4 has an invalid endpoint with address 0xD5, skipping [ 892.523075][ T5765] usb 2-1: config 0 interface 239 has no altsetting 0 [ 892.534061][ T5765] usb 2-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 892.546006][ T5765] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.565240][ T5765] usb 2-1: Product: syz [ 892.578784][ T5765] usb 2-1: Manufacturer: syz [ 892.588633][ T5765] usb 2-1: SerialNumber: syz [ 892.601582][ T5765] usb 2-1: config 0 descriptor?? [ 892.618187][T16548] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 892.626606][T16548] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 892.919227][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 892.932324][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 892.945367][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 892.953189][T16548] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3306'. [ 892.970365][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 892.981761][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 892.991822][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 893.133726][ T5815] usb 2-1: USB disconnect, device number 53 [ 893.364804][T16558] chnl_net:caif_netlink_parms(): no params data found [ 893.529637][T16558] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.538220][T16558] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.546891][T16558] bridge_slave_0: entered allmulticast mode [ 893.555409][T16558] bridge_slave_0: entered promiscuous mode [ 893.565591][T16558] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.573941][T16558] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.581850][T16558] bridge_slave_1: entered allmulticast mode [ 893.590148][T16558] bridge_slave_1: entered promiscuous mode [ 893.667037][T16558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 893.690372][T16558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 893.775659][T16558] team0: Port device team_slave_0 added [ 893.778508][T16586] binder: 16585:16586 ioctl c0306201 0 returned -14 [ 893.799978][T16558] team0: Port device team_slave_1 added [ 893.842659][T16587] binder: 16585:16587 ioctl c0306201 0 returned -14 [ 893.849954][T16558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 893.856917][T16558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 893.885806][T16558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 893.901817][T16558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 893.911787][T16558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 893.940567][T16558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 893.984500][T16558] hsr_slave_0: entered promiscuous mode [ 893.993197][T16558] hsr_slave_1: entered promiscuous mode [ 894.000490][T16558] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 894.009359][T16558] Cannot create hsr debugfs directory [ 894.177056][T16558] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.265955][T16558] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.358425][T16558] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.441269][T16558] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.789082][T16558] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 894.835407][T16558] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 894.872731][T16558] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 894.985275][T16601] fuse: Unknown parameter 'use00000000000000000000' [ 895.003496][T16558] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 895.046423][ T5784] Bluetooth: hci2: command tx timeout [ 895.325446][T16558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 895.394311][T16558] 8021q: adding VLAN 0 to HW filter on device team0 [ 895.459809][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.467237][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 895.493900][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.501072][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 895.977498][ T5780] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 896.174853][T16558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 896.177242][ T5780] usb 6-1: Using ep0 maxpacket: 32 [ 896.200750][ T5780] usb 6-1: config 0 has an invalid interface number: 239 but max is 0 [ 896.231164][ T5780] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 896.267763][ T23] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 896.297201][ T5780] usb 6-1: config 0 has no interface number 0 [ 896.308488][ T5780] usb 6-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 896.340951][ T5780] usb 6-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 896.372947][ T5780] usb 6-1: config 0 interface 239 altsetting 4 has an invalid endpoint with address 0xA9, skipping [ 896.414593][ T5780] usb 6-1: config 0 interface 239 altsetting 4 has an invalid endpoint with address 0xD5, skipping [ 896.447484][ T5780] usb 6-1: config 0 interface 239 has no altsetting 0 [ 896.468537][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 896.475889][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 896.498209][ T5780] usb 6-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 896.507168][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 896.527398][ T5780] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.536164][ T23] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 896.545839][ T5780] usb 6-1: Product: syz [ 896.546393][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.556284][ T5780] usb 6-1: Manufacturer: syz [ 896.566388][ T5780] usb 6-1: SerialNumber: syz [ 896.598817][ T5780] usb 6-1: config 0 descriptor?? [ 896.603551][ T23] usb 2-1: config 0 descriptor?? [ 896.604705][T16612] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 896.641959][T16612] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 896.647899][ T23] hub 2-1:0.0: USB hub found [ 896.979044][T16612] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3322'. [ 897.063566][ T23] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 897.077741][T16632] binder: 16631:16632 ioctl c0306201 0 returned -14 [ 897.118224][ T5784] Bluetooth: hci2: command tx timeout [ 897.127005][ T5780] usb 6-1: USB disconnect, device number 18 [ 897.153637][T16634] binder: 16631:16634 ioctl c0306201 0 returned -14 [ 897.175161][T16558] veth0_vlan: entered promiscuous mode [ 897.200473][T16558] veth1_vlan: entered promiscuous mode [ 897.243902][T16558] veth0_macvtap: entered promiscuous mode [ 897.259387][T16558] veth1_macvtap: entered promiscuous mode [ 897.283981][T16558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 897.302309][ T23] usbhid 2-1:0.0: can't add hid device: -71 [ 897.313865][T16558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 897.325681][ T23] usbhid: probe of 2-1:0.0 failed with error -71 [ 897.335285][T16558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.345349][T16558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 897.355893][T16558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.368395][ T23] usb 2-1: USB disconnect, device number 54 [ 897.376481][T16558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 897.391231][T16558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.403202][T16558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 897.417172][T16558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.428817][T16558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 897.448970][T16558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.459181][T16558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 897.469799][T16558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.481542][T16558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 897.497406][T16558] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.506281][T16558] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.515695][T16558] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.525563][T16558] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.634483][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 897.650223][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 897.683440][ T1047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 897.692880][ T1047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 898.026756][T16642] fuse: Unknown parameter 'use00000000000000000000' [ 898.243273][T16654] Cannot find add_set index 2 as target [ 898.617447][ T789] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 898.787558][ T7651] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 898.819323][ T789] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 898.878216][ T789] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 898.916950][ T789] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 898.958263][ T789] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 898.975798][ T789] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.987257][ T7651] usb 5-1: Using ep0 maxpacket: 32 [ 898.996201][ T7651] usb 5-1: config 0 has an invalid interface number: 239 but max is 0 [ 899.029608][ T7651] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 899.055553][ T7651] usb 5-1: config 0 has no interface number 0 [ 899.065904][ T7651] usb 5-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 899.076604][ T7651] usb 5-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 899.096814][ T7651] usb 5-1: config 0 interface 239 altsetting 4 has an invalid endpoint with address 0xA9, skipping [ 899.147415][ T7651] usb 5-1: config 0 interface 239 altsetting 4 has an invalid endpoint with address 0xD5, skipping [ 899.178677][ T7651] usb 5-1: config 0 interface 239 has no altsetting 0 [ 899.189813][ T7651] usb 5-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 899.203056][ T5784] Bluetooth: hci2: command tx timeout [ 899.217264][ T7651] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.226330][ T7651] usb 5-1: Product: syz [ 899.231007][ T7651] usb 5-1: Manufacturer: syz [ 899.237381][ T7651] usb 5-1: SerialNumber: syz [ 899.246681][ T7651] usb 5-1: config 0 descriptor?? [ 899.254140][T16662] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 899.262191][T16662] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 899.269731][ T789] cxacru 6-1:1.0: invalid response length to cm 0x90: 0 [ 899.298020][T16670] cxacru 6-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 899.326193][T16670] cxacru 6-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 899.481198][ T23] usb 6-1: USB disconnect, device number 19 [ 899.519639][T16660] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3333'. [ 899.533767][T16660] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 899.667999][T16660] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 900.014046][T16679] binder: 16678:16679 ioctl c0306201 0 returned -14 [ 900.075637][T16680] binder: 16678:16680 ioctl c0306201 0 returned -14 [ 900.096732][T16682] fuse: Unknown parameter 'user_i00000000000000000000' [ 900.237523][ T7651] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 900.284793][T16686] Cannot find add_set index 2 as target [ 900.427549][ T7651] usb 2-1: Using ep0 maxpacket: 32 [ 900.440565][ T7651] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 900.452142][ T7651] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 900.466093][ T7651] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 900.475680][ T7651] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.508052][ T7651] usb 2-1: config 0 descriptor?? [ 900.516171][ T7651] hub 2-1:0.0: USB hub found [ 900.911814][ T5765] usb 5-1: USB disconnect, device number 116 [ 900.934580][ T7651] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 901.102823][T16701] fuse: Unknown parameter 'user_i00000000000000000000' [ 901.161741][ T7651] usbhid 2-1:0.0: can't add hid device: -71 [ 901.171731][ T7651] usbhid: probe of 2-1:0.0 failed with error -71 [ 901.223563][ T7651] usb 2-1: USB disconnect, device number 55 [ 901.278873][ T5784] Bluetooth: hci2: command tx timeout [ 901.319299][T16705] Cannot find add_set index 2 as target [ 901.813963][T16717] binder: 16716:16717 ioctl c0306201 0 returned -14 [ 901.875748][T16718] binder: 16716:16718 ioctl c0306201 0 returned -14 [ 902.077309][ T5816] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 902.262546][ T5816] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 902.282635][ T5816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.294357][ T5816] usb 2-1: Product: syz [ 902.300031][T16722] fuse: Unknown parameter 'user_i00000000000000000000' [ 902.308189][ T5816] usb 2-1: Manufacturer: syz [ 902.312933][ T5816] usb 2-1: SerialNumber: syz [ 902.327021][ T5816] usb 2-1: config 0 descriptor?? [ 902.542059][ T5816] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 902.987597][ T789] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 903.161034][ T5834] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 903.181056][ T789] usb 3-1: Using ep0 maxpacket: 32 [ 903.188958][ T789] usb 3-1: config 0 has an invalid interface number: 239 but max is 0 [ 903.198205][ T789] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 903.211657][ T789] usb 3-1: config 0 has no interface number 0 [ 903.218253][ T789] usb 3-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 903.230853][ T789] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 903.242297][ T789] usb 3-1: config 0 interface 239 altsetting 4 has an invalid endpoint with address 0xA9, skipping [ 903.253568][ T789] usb 3-1: config 0 interface 239 altsetting 4 has an invalid endpoint with address 0xD5, skipping [ 903.265898][ T789] usb 3-1: config 0 interface 239 has no altsetting 0 [ 903.275781][ T789] usb 3-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 903.285364][ T789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.293539][ T789] usb 3-1: Product: syz [ 903.298582][ T789] usb 3-1: Manufacturer: syz [ 903.303229][ T789] usb 3-1: SerialNumber: syz [ 903.312166][ T789] usb 3-1: config 0 descriptor?? [ 903.318516][T16729] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 903.327559][T16729] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 903.348536][ T5834] usb 5-1: Using ep0 maxpacket: 32 [ 903.356470][ T5834] usb 5-1: config index 0 descriptor too short (expected 3659, got 75) [ 903.377219][ T5834] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 903.390618][ T5834] usb 5-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 903.399951][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.408236][ T5834] usb 5-1: Product: syz [ 903.412440][ T5834] usb 5-1: Manufacturer: syz [ 903.417258][ T5834] usb 5-1: SerialNumber: syz [ 903.424686][ T5834] usb 5-1: config 0 descriptor?? [ 903.435674][ T5834] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 903.610059][T16729] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3359'. [ 903.676071][ T789] usb 3-1: USB disconnect, device number 87 [ 903.993433][ T5816] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 904.009195][ T5816] usb 2-1: USB disconnect, device number 56 [ 904.645905][T16751] fuse: Unknown parameter 'user_id00000000000000000000' [ 904.671218][T16735] fuse: Bad value for 'fd' [ 904.876156][T16755] binder: 16754:16755 ioctl c0306201 0 returned -14 [ 904.939842][T16756] binder: 16754:16756 ioctl c0306201 0 returned -14 [ 905.704208][ T5834] gspca_sunplus: reg_r err -71 [ 905.709560][ T5834] sunplus: probe of 5-1:0.0 failed with error -71 [ 905.759465][ T5834] usb 5-1: USB disconnect, device number 117 [ 905.768636][ T7651] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 905.961796][ T7651] usb 3-1: Using ep0 maxpacket: 32 [ 905.968961][ T7651] usb 3-1: config 0 has an invalid interface number: 239 but max is 0 [ 905.977470][ T7651] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 905.988448][ T7651] usb 3-1: config 0 has no interface number 0 [ 905.996136][ T7651] usb 3-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 906.006509][ T7651] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 906.019780][ T7651] usb 3-1: config 0 interface 239 altsetting 4 has an invalid endpoint with address 0xA9, skipping [ 906.030621][ T7651] usb 3-1: config 0 interface 239 altsetting 4 has an invalid endpoint with address 0xD5, skipping [ 906.042385][ T7651] usb 3-1: config 0 interface 239 has no altsetting 0 [ 906.052300][ T7651] usb 3-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 906.061691][ T7651] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.069866][ T7651] usb 3-1: Product: syz [ 906.074059][ T7651] usb 3-1: Manufacturer: syz [ 906.079073][ T7651] usb 3-1: SerialNumber: syz [ 906.085396][ T7651] usb 3-1: config 0 descriptor?? [ 906.092374][T16767] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 906.100858][T16767] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 906.168077][ T5816] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 906.303650][T16777] fuse: Unknown parameter 'user_id00000000000000000000' [ 906.378413][ T5816] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 906.388462][T16767] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3372'. [ 906.407823][ T5816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.438409][ T5816] usb 2-1: Product: syz [ 906.451233][ T5816] usb 2-1: Manufacturer: syz [ 906.470696][ T5816] usb 2-1: SerialNumber: syz [ 906.489241][ T5816] usb 2-1: config 0 descriptor?? [ 906.529450][ T5834] usb 3-1: USB disconnect, device number 88 [ 906.726281][ T5816] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 907.026263][T16791] binder: 16790:16791 ioctl c0306201 0 returned -14 [ 907.125449][T16792] binder: 16790:16792 ioctl c0306201 0 returned -14 [ 907.285066][T16799] fuse: Unknown parameter 'user_id00000000000000000000' [ 907.423415][T16803] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3386'. [ 907.990356][ T789] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 908.190982][ T789] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 908.217582][ T789] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 908.275709][ T789] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 908.331422][ T5816] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 908.355145][ T5816] usb 2-1: USB disconnect, device number 57 [ 908.383053][ T789] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 908.422896][ T789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.487260][ T5834] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 908.685219][ T789] cxacru 3-1:1.0: invalid response length to cm 0x90: 0 [ 908.717481][ T5834] usb 5-1: Using ep0 maxpacket: 32 [ 908.740574][ T5834] usb 5-1: config 0 has an invalid interface number: 239 but max is 0 [ 908.749456][ T5834] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 908.763894][ T5834] usb 5-1: config 0 has no interface number 0 [ 908.777262][ T5834] usb 5-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 908.806469][ T5834] usb 5-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 908.827192][ T5834] usb 5-1: config 0 interface 239 altsetting 4 has an invalid endpoint with address 0xA9, skipping [ 908.847351][ T5834] usb 5-1: config 0 interface 239 altsetting 4 has an invalid endpoint with address 0xD5, skipping [ 908.874540][ T5834] usb 5-1: config 0 interface 239 has no altsetting 0 [ 908.893162][ T8] usb 3-1: USB disconnect, device number 89 [ 908.918280][ T5834] usb 5-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 908.945893][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.976340][ T5834] usb 5-1: Product: syz [ 908.986606][ T5834] usb 5-1: Manufacturer: syz [ 908.996788][ T5834] usb 5-1: SerialNumber: syz [ 909.009344][ T5834] usb 5-1: config 0 descriptor?? [ 909.015417][T16820] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 909.038404][T16820] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 909.338369][T16820] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3391'. [ 909.441524][T16833] fuse: Bad value for 'fd' [ 909.509784][ T5816] usb 5-1: USB disconnect, device number 118 [ 909.567333][T16837] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3396'. [ 909.828428][T16843] socket: no more sockets [ 909.868633][T16843] socket: no more sockets [ 909.899500][T16843] socket: no more sockets [ 910.508928][T16865] fuse: Bad value for 'fd' [ 910.638329][T13015] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 910.858221][T13015] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 910.877202][T13015] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 910.916834][T13015] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 910.951859][T13015] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 910.970312][T16872] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3408'. [ 910.980787][T13015] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.232805][T13015] cxacru 5-1:1.0: invalid response length to cm 0x90: 0 [ 911.436629][T13015] usb 5-1: USB disconnect, device number 119 [ 911.579117][T16877] socket: no more sockets [ 911.884443][T16879] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 912.337055][T16893] fuse: Bad value for 'fd' [ 914.574992][T16932] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 914.685846][T16935] fuse: Unknown parameter '0x0000000000000005' [ 915.612428][T16962] fuse: Unknown parameter '0x0000000000000005' [ 915.669390][T16960] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 916.941144][T16987] fuse: Unknown parameter '0x0000000000000005' [ 917.133409][T16991] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 917.424811][T16999] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 917.853980][T17009] fuse: Unknown parameter '0x0000000000000005' [ 918.222206][T17018] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 919.267426][ T5816] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 919.334502][T17029] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 919.488140][ T5816] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 919.497885][ T5816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.506460][ T5816] usb 2-1: Product: syz [ 919.512754][ T5816] usb 2-1: Manufacturer: syz [ 919.517804][ T5816] usb 2-1: SerialNumber: syz [ 919.536040][ T5816] usb 2-1: config 0 descriptor?? [ 919.686122][T17035] syz.5.3460: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 919.703724][T17035] CPU: 0 PID: 17035 Comm: syz.5.3460 Not tainted syzkaller #0 [ 919.711518][T17035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 919.721700][T17035] Call Trace: [ 919.725071][T17035] [ 919.728128][T17035] dump_stack_lvl+0x18c/0x250 [ 919.733071][T17035] ? show_regs_print_info+0x20/0x20 [ 919.738881][T17035] ? load_image+0x420/0x420 [ 919.743722][T17035] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 919.750347][T17035] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 919.755159][ T5816] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 919.756910][T17035] warn_alloc+0x246/0x340 [ 919.770217][T17035] ? zone_watermark_ok_safe+0x230/0x230 [ 919.775806][T17035] __vmalloc_node_range+0x129/0x1320 [ 919.781379][T17035] ? __mutex_trylock_common+0x160/0x270 [ 919.787095][T17035] ? trace_raw_output_contention_end+0xd0/0xd0 [ 919.793381][T17035] ? rcu_is_watching+0x15/0xb0 [ 919.798325][T17035] ? trace_contention_end+0x39/0xe0 [ 919.803620][T17035] ? __mutex_lock+0x30d/0xc80 [ 919.808723][T17035] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 919.814460][T17035] ? free_vm_area+0x50/0x50 [ 919.819025][T17035] ? dvb_demux_do_ioctl+0x317/0x530 [ 919.824395][T17035] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 919.830358][T17035] ? mutex_lock_nested+0x20/0x20 [ 919.835620][T17035] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 919.841504][T17035] vmalloc+0x79/0x90 [ 919.845457][T17035] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 919.851410][T17035] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 919.857149][T17035] dvb_demux_do_ioctl+0x454/0x530 [ 919.862231][T17035] dvb_usercopy+0x195/0x2b0 [ 919.866869][T17035] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 919.872447][T17035] ? dvb_generic_ioctl+0xb0/0xb0 [ 919.877438][T17035] ? dvb_demux_poll+0x210/0x210 [ 919.882333][T17035] dvb_demux_ioctl+0x29/0x30 [ 919.888233][T17035] __se_sys_ioctl+0xfd/0x170 [ 919.892908][T17035] do_syscall_64+0x55/0xb0 [ 919.897451][T17035] ? clear_bhb_loop+0x40/0x90 [ 919.902314][T17035] ? clear_bhb_loop+0x40/0x90 [ 919.907303][T17035] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 919.913430][T17035] RIP: 0033:0x7f08b539e0d9 [ 919.918060][T17035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 919.938324][T17035] RSP: 002b:00007f08b61cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 919.947171][T17035] RAX: ffffffffffffffda RBX: 00007f08b5625fa0 RCX: 00007f08b539e0d9 [ 919.955194][T17035] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000003 [ 919.963234][T17035] RBP: 00007f08b5435024 R08: 0000000000000000 R09: 0000000000000000 [ 919.971600][T17035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 919.980212][T17035] R13: 00007f08b5626038 R14: 00007f08b5625fa0 R15: 00007fffaa9f9c08 [ 919.988308][T17035] [ 919.996658][T17035] Mem-Info: [ 920.001256][T17035] active_anon:7209 inactive_anon:0 isolated_anon:0 [ 920.001256][T17035] active_file:17697 inactive_file:40346 isolated_file:0 [ 920.001256][T17035] unevictable:768 dirty:118 writeback:0 [ 920.001256][T17035] slab_reclaimable:7699 slab_unreclaimable:103413 [ 920.001256][T17035] mapped:25194 shmem:1392 pagetables:875 [ 920.001256][T17035] sec_pagetables:0 bounce:0 [ 920.001256][T17035] kernel_misc_reclaimable:0 [ 920.001256][T17035] free:1322436 free_pcp:6617 free_cma:0 [ 920.048750][T17035] Node 0 active_anon:28836kB inactive_anon:0kB active_file:70744kB inactive_file:161180kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100732kB dirty:468kB writeback:0kB shmem:4032kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11884kB pagetables:3500kB sec_pagetables:0kB all_unreclaimable? no [ 920.081742][T17035] Node 1 active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 920.137348][T17035] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 920.197340][T17035] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 920.205787][T17035] Node 0 DMA32 free:1369096kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:28796kB inactive_anon:0kB active_file:70744kB inactive_file:160356kB unevictable:1536kB writepending:468kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:17872kB local_pcp:7228kB free_cma:0kB [ 920.265699][T17038] fuse: Unknown parameter '0x0000000000000005' [ 920.290320][T17035] lowmem_reserve[]: 0 0 0 0 0 [ 920.306628][T17035] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 920.350830][T17035] lowmem_reserve[]: 0 0 0 0 0 [ 920.356032][T17035] Node 1 Normal free:3905280kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:8832kB local_pcp:0kB free_cma:0kB [ 920.389652][T17035] lowmem_reserve[]: 0 0 0 0 0 [ 920.394677][T17035] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 920.409585][T17035] Node 0 DMA32: 970*4kB (UME) 252*8kB (UME) 238*16kB (UME) 325*32kB (UME) 100*64kB (UME) 49*128kB (UME) 32*256kB (UME) 12*512kB (UME) 15*1024kB (UME) 10*2048kB (UM) 314*4096kB (UM) = 1369096kB [ 920.517812][T17035] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 920.542823][T17035] Node 1 Normal: 236*4kB (UE) 48*8kB (UE) 41*16kB (UME) 240*32kB (UME) 83*64kB (UME) 31*128kB (UME) 7*256kB (UM) 3*512kB (UE) 0*1024kB 4*2048kB (ME) 946*4096kB (M) = 3905280kB [ 920.573520][T17035] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 920.591730][T17035] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 920.613627][T17035] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 920.626146][T17035] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 920.650218][T17035] 59434 total pagecache pages [ 920.655517][T17035] 0 pages in swap cache [ 920.664733][T17035] Free swap = 124360kB [ 920.689592][T17042] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 920.690583][T17035] Total swap = 124996kB [ 920.728522][T17035] 2097051 pages RAM [ 920.732592][T17035] 0 pages HighMem/MovableOnly [ 920.749360][T17035] 416955 pages reserved [ 920.754590][T17035] 0 pages cma reserved [ 921.216931][ T5816] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 921.233849][ T5816] usb 2-1: USB disconnect, device number 58 [ 922.208272][T17063] Cannot find add_set index 2 as target [ 922.285357][T17066] fuse: Unknown parameter '0x0000000000000005' [ 922.426938][T17069] tipc: Enabling of bearer rejected, failed to enable media [ 922.437710][T17069] syzkaller0: entered promiscuous mode [ 922.443973][T17069] syzkaller0: entered allmulticast mode [ 922.583764][T17071] netlink: 'syz.1.3473': attribute type 1 has an invalid length. [ 922.616120][T17071] 8021q: adding VLAN 0 to HW filter on device bond1 [ 922.655588][T17071] bond1: (slave geneve2): making interface the new active one [ 922.668590][T17071] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 922.810828][T17074] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 923.139325][T17080] ip_tables: iptables: counters copy to user failed while replacing table [ 923.457070][T17091] fuse: Unknown parameter 'fd0x0000000000000005' [ 923.659684][T17094] tipc: Enabling of bearer rejected, failed to enable media [ 923.672978][T17094] syzkaller0: entered promiscuous mode [ 923.679916][T17094] syzkaller0: entered allmulticast mode [ 924.065960][T17097] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 924.194865][T17101] Cannot find add_set index 2 as target [ 924.315686][ T789] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 924.537272][ T789] usb 2-1: Using ep0 maxpacket: 8 [ 924.552493][ T789] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 924.571168][ T789] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 924.615463][ T789] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 924.649039][ T789] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 924.668739][ T789] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 924.682094][ T789] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 924.691483][ T789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.950056][ T789] usb 2-1: GET_CAPABILITIES returned 0 [ 924.955747][ T789] usbtmc 2-1:16.0: can't read capabilities [ 925.129005][T17114] fuse: Unknown parameter 'fd0x0000000000000005' [ 925.177540][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 925.187094][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 925.196745][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 925.232104][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 925.241586][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 925.250848][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 925.285063][ T789] usb 2-1: USB disconnect, device number 59 [ 925.664745][T17128] Cannot find add_set index 2 as target [ 926.240133][ T5834] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 926.427190][ T5834] usb 2-1: Using ep0 maxpacket: 32 [ 926.435010][ T5834] usb 2-1: config 0 has an invalid interface number: 239 but max is 0 [ 926.444934][ T5834] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 926.469458][ T5834] usb 2-1: config 0 has no interface number 0 [ 926.488627][ T5834] usb 2-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 926.512981][ T5834] usb 2-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 926.536599][ T5834] usb 2-1: config 0 interface 239 altsetting 4 has an invalid endpoint with address 0xA9, skipping [ 926.562111][ T5834] usb 2-1: config 0 interface 239 altsetting 4 has an invalid endpoint with address 0xD5, skipping [ 926.587067][ T5834] usb 2-1: config 0 interface 239 has no altsetting 0 [ 926.597070][ T5834] usb 2-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 926.606649][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.621987][ T5834] usb 2-1: Product: syz [ 926.626437][ T5834] usb 2-1: Manufacturer: syz [ 926.635926][ T5834] usb 2-1: SerialNumber: syz [ 926.656574][ T5834] usb 2-1: config 0 descriptor?? [ 926.662423][T17138] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 926.670520][T17138] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 926.945273][T17138] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3497'. [ 927.046403][ T789] usb 2-1: USB disconnect, device number 60 [ 927.323840][T17151] fuse: Unknown parameter 'fd0x0000000000000005' [ 927.705821][T17158] Cannot find add_set index 2 as target [ 929.165848][T17193] tipc: Enabling of bearer rejected, failed to enable media [ 929.184358][T17193] syzkaller0: entered promiscuous mode [ 929.195978][T17193] syzkaller0: entered allmulticast mode [ 929.446497][T17195] Cannot find add_set index 2 as target [ 929.968880][ T5784] Bluetooth: hci0: unexpected event for opcode 0x0403 [ 930.247562][ T5834] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 930.467374][ T5834] usb 2-1: Using ep0 maxpacket: 8 [ 930.475649][ T5834] usb 2-1: config 0 interface 0 has no altsetting 0 [ 930.482514][ T5834] usb 2-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 930.492055][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.502034][ T5834] usb 2-1: config 0 descriptor?? [ 930.922760][ T5834] usbhid 2-1:0.0: can't add hid device: -71 [ 930.937612][ T5834] usbhid: probe of 2-1:0.0 failed with error -71 [ 930.956763][ T5834] usb 2-1: USB disconnect, device number 61 [ 931.362375][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.369241][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.585520][T17216] warn_alloc: 3 callbacks suppressed [ 931.585599][T17216] syz.1.3521: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 931.610382][T17216] CPU: 1 PID: 17216 Comm: syz.1.3521 Not tainted syzkaller #0 [ 931.618101][T17216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 931.628456][T17216] Call Trace: [ 931.631757][T17216] [ 931.634716][T17216] dump_stack_lvl+0x18c/0x250 [ 931.639516][T17216] ? show_regs_print_info+0x20/0x20 [ 931.644743][T17216] ? load_image+0x420/0x420 [ 931.649362][T17216] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 931.655972][T17216] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 931.662670][T17216] warn_alloc+0x246/0x340 [ 931.667027][T17216] ? zone_watermark_ok_safe+0x230/0x230 [ 931.672606][T17216] __vmalloc_node_range+0x129/0x1320 [ 931.678172][T17216] ? __mutex_trylock_common+0x160/0x270 [ 931.683950][T17216] ? trace_raw_output_contention_end+0xd0/0xd0 [ 931.690776][T17216] ? rcu_is_watching+0x15/0xb0 [ 931.695964][T17216] ? trace_contention_end+0x39/0xe0 [ 931.701273][T17216] ? __mutex_lock+0x30d/0xc80 [ 931.706419][T17216] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 931.712071][T17216] ? free_vm_area+0x50/0x50 [ 931.716744][T17216] ? dvb_demux_do_ioctl+0x317/0x530 [ 931.722006][T17216] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 931.727498][T17216] ? mutex_lock_nested+0x20/0x20 [ 931.732481][T17216] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 931.738428][T17216] vmalloc+0x79/0x90 [ 931.742541][T17216] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 931.748404][T17216] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 931.754221][T17216] dvb_demux_do_ioctl+0x454/0x530 [ 931.759461][T17216] dvb_usercopy+0x195/0x2b0 [ 931.765119][T17216] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 931.770778][T17216] ? dvb_generic_ioctl+0xb0/0xb0 [ 931.775870][T17216] ? dvb_demux_poll+0x210/0x210 [ 931.780739][T17216] dvb_demux_ioctl+0x29/0x30 [ 931.785763][T17216] __se_sys_ioctl+0xfd/0x170 [ 931.790666][T17216] do_syscall_64+0x55/0xb0 [ 931.795644][T17216] ? clear_bhb_loop+0x40/0x90 [ 931.800454][T17216] ? clear_bhb_loop+0x40/0x90 [ 931.805187][T17216] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 931.811396][T17216] RIP: 0033:0x7f44e159e0d9 [ 931.816128][T17216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 931.836214][T17216] RSP: 002b:00007f44e2455028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 931.844782][T17216] RAX: ffffffffffffffda RBX: 00007f44e1825fa0 RCX: 00007f44e159e0d9 [ 931.853085][T17216] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000006 [ 931.861469][T17216] RBP: 00007f44e1635024 R08: 0000000000000000 R09: 0000000000000000 [ 931.869492][T17216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 931.877876][T17216] R13: 00007f44e1826038 R14: 00007f44e1825fa0 R15: 00007ffe2592ad48 [ 931.886276][T17216] [ 931.910371][T17216] Mem-Info: [ 931.926481][T17216] active_anon:7222 inactive_anon:0 isolated_anon:0 [ 931.926481][T17216] active_file:17697 inactive_file:40350 isolated_file:0 [ 931.926481][T17216] unevictable:768 dirty:62 writeback:0 [ 931.926481][T17216] slab_reclaimable:7699 slab_unreclaimable:103294 [ 931.926481][T17216] mapped:25194 shmem:1392 pagetables:876 [ 931.926481][T17216] sec_pagetables:0 bounce:0 [ 931.926481][T17216] kernel_misc_reclaimable:0 [ 931.926481][T17216] free:1323328 free_pcp:5594 free_cma:0 [ 932.014081][T17216] Node 0 active_anon:28788kB inactive_anon:0kB active_file:70744kB inactive_file:161196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100732kB dirty:244kB writeback:0kB shmem:4032kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11864kB pagetables:3404kB sec_pagetables:0kB all_unreclaimable? no [ 932.044059][T17219] tipc: Enabling of bearer rejected, failed to enable media [ 932.057346][T17219] syzkaller0: entered promiscuous mode [ 932.063015][T17219] syzkaller0: entered allmulticast mode [ 932.086825][T17216] Node 1 active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 932.128913][T17216] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 932.170938][T17216] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 932.183338][T17216] Node 0 DMA32 free:1371992kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:28848kB inactive_anon:0kB active_file:70744kB inactive_file:160372kB unevictable:1536kB writepending:244kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:14016kB local_pcp:2664kB free_cma:0kB [ 932.216180][T17216] lowmem_reserve[]: 0 0 0 0 0 [ 932.221399][T17216] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 932.249550][T17216] lowmem_reserve[]: 0 0 0 0 0 [ 932.254363][T17216] Node 1 Normal free:3905280kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:8832kB local_pcp:8832kB free_cma:0kB [ 932.360989][T17216] lowmem_reserve[]: 0 0 0 0 0 [ 932.365831][T17216] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 932.405048][T17216] Node 0 DMA32: 656*4kB (UME) 501*8kB (UME) 335*16kB (UME) 419*32kB (UME) 123*64kB (UME) 53*128kB (UME) 30*256kB (UME) 8*512kB (ME) 15*1024kB (UME) 5*2048kB (M) 316*4096kB (UM) = 1371768kB [ 932.483030][T17216] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 932.503263][T17221] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 932.513501][T17221] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 932.532518][T17216] Node 1 Normal: 236*4kB (UE) 48*8kB (UE) 41*16kB (UME) 240*32kB (UME) 83*64kB (UME) 31*128kB (UME) 7*256kB (UM) 3*512kB (UE) 0*1024kB 4*2048kB (ME) 946*4096kB (M) = 3905280kB [ 932.557280][T17216] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 932.571064][T17216] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 932.580949][T17216] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 932.591146][T17216] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 932.604808][T17216] 59438 total pagecache pages [ 932.621672][T17216] 0 pages in swap cache [ 932.633147][T17216] Free swap = 124360kB [ 932.641715][T17216] Total swap = 124996kB [ 932.657266][T17216] 2097051 pages RAM [ 932.662891][T17216] 0 pages HighMem/MovableOnly [ 932.669402][T17216] 416955 pages reserved [ 932.673817][T17216] 0 pages cma reserved [ 932.763080][T17226] Cannot find add_set index 2 as target [ 933.128255][T13016] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 933.339001][T13016] usb 2-1: unable to get BOS descriptor or descriptor too short [ 933.365942][T13016] usb 2-1: config 63 has an invalid interface number: 66 but max is 0 [ 933.375823][T13016] usb 2-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 933.387863][T13016] usb 2-1: config 63 has no interface number 0 [ 933.394110][T13016] usb 2-1: config 63 interface 66 has no altsetting 0 [ 933.414159][T13016] usb 2-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 933.425489][T13016] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.434967][T13016] usb 2-1: Product: syz [ 933.439551][T13016] usb 2-1: Manufacturer: syz [ 933.444265][T13016] usb 2-1: SerialNumber: syz [ 933.593028][ T5784] Bluetooth: hci4: unexpected event for opcode 0x0403 [ 933.676730][T13016] usb 2-1: Found UVC 0.07 device syz (174f:8acf) [ 933.684032][T13016] usb 2-1: No valid video chain found. [ 933.693484][T13016] usb 2-1: USB disconnect, device number 62 [ 934.577388][ T5834] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 934.832795][ T5834] usb 2-1: Using ep0 maxpacket: 32 [ 934.840315][ T5834] usb 2-1: config index 0 descriptor too short (expected 3659, got 75) [ 934.860967][ T5834] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 934.886661][ T5834] usb 2-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 934.905563][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.936814][ T5834] usb 2-1: Product: syz [ 934.944858][ T5834] usb 2-1: Manufacturer: syz [ 934.958449][ T5834] usb 2-1: SerialNumber: syz [ 934.974874][ T5834] usb 2-1: config 0 descriptor?? [ 935.006869][ T5834] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 935.852236][T17249] syzkaller0: entered promiscuous mode [ 935.858448][T17249] syzkaller0: entered allmulticast mode [ 935.872476][T17249] tipc: Enabled bearer , priority 0 [ 935.883414][T17248] tipc: Resetting bearer [ 935.925569][T17248] tipc: Disabling bearer [ 936.162606][T17255] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 936.269640][T17238] fuse: Bad value for 'fd' [ 937.404888][ T5834] gspca_sunplus: reg_r err -71 [ 937.433282][ T5834] sunplus: probe of 2-1:0.0 failed with error -71 [ 937.442513][ T5834] usb 2-1: USB disconnect, device number 63 [ 938.404442][ T5784] Bluetooth: hci4: unexpected event for opcode 0x0403 [ 938.470928][ T5834] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 938.668748][ T5834] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 938.680017][ T5834] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 938.690838][ T5834] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 938.702575][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.722945][T17280] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 938.744555][ T5834] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 941.876172][ T5834] usb 2-1: USB disconnect, device number 64 [ 943.488328][ T5784] Bluetooth: hci0: unexpected event for opcode 0x0403 [ 943.767311][ T5834] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 943.961715][ T5834] usb 2-1: Using ep0 maxpacket: 8 [ 943.973113][ T5834] usb 2-1: config 0 interface 0 has no altsetting 0 [ 943.983311][ T5834] usb 2-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 943.997827][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.029227][ T5834] usb 2-1: config 0 descriptor?? [ 944.464470][ T5834] usbhid 2-1:0.0: can't add hid device: -71 [ 944.485564][ T5834] usbhid: probe of 2-1:0.0 failed with error -71 [ 944.564711][ T5834] usb 2-1: USB disconnect, device number 65 [ 945.624932][T17356] binder: 17355:17356 ioctl c0306201 0 returned -14 [ 945.686543][T17358] binder: 17355:17358 ioctl c0306201 0 returned -14 [ 945.729169][T17361] syzkaller0: entered promiscuous mode [ 945.734711][T17361] syzkaller0: entered allmulticast mode [ 946.518151][ T5784] Bluetooth: hci0: unexpected event for opcode 0x0403 [ 946.548960][T17370] netlink: 'syz.5.3580': attribute type 1 has an invalid length. [ 946.592079][T17370] 8021q: adding VLAN 0 to HW filter on device bond1 [ 946.847483][ T5834] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 947.047447][ T5834] usb 2-1: Using ep0 maxpacket: 8 [ 947.077203][ T5834] usb 2-1: config 0 interface 0 has no altsetting 0 [ 947.084188][ T5834] usb 2-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 947.104496][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.120072][ T5834] usb 2-1: config 0 descriptor?? [ 947.555989][ T5834] usbhid 2-1:0.0: can't add hid device: -71 [ 947.562346][ T5834] usbhid: probe of 2-1:0.0 failed with error -71 [ 947.600926][ T5834] usb 2-1: USB disconnect, device number 66 [ 947.739852][T17385] socket: no more sockets [ 948.154872][T17393] Cannot find add_set index 2 as target [ 948.248728][T17395] binder: 17394:17395 ioctl c0306201 0 returned -14 [ 948.310516][T17396] binder: 17394:17396 ioctl c0306201 0 returned -14 [ 949.095107][T17403] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 949.443824][T17416] Cannot find add_set index 2 as target [ 949.561824][T17420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3597'. [ 950.372906][T17429] binder: 17428:17429 ioctl c0306201 0 returned -14 [ 950.435188][T17433] binder: 17428:17433 ioctl c0306201 0 returned -14 [ 951.563504][T17456] Cannot find add_set index 2 as target [ 952.108856][T17468] binder: 17467:17468 ioctl c0306201 0 returned -14 [ 952.169448][T17469] binder: 17467:17469 ioctl c0306201 0 returned -14 [ 953.122045][T17480] Cannot find add_set index 2 as target [ 953.345396][T17483] ------------[ cut here ]------------ [ 953.351644][T17483] WARNING: CPU: 1 PID: 17483 at kernel/softirq.c:386 __local_bh_enable_ip+0x186/0x1c0 [ 953.361461][T17483] Modules linked in: [ 953.365382][T17483] CPU: 1 PID: 17483 Comm: krxrpcio/20000 Not tainted syzkaller #0 [ 953.373204][T17483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 953.383402][T17483] RIP: 0010:__local_bh_enable_ip+0x186/0x1c0 [ 953.389420][T17483] Code: 48 8b 04 25 28 00 00 00 48 3b 44 24 48 75 4e 48 8d 65 e0 5b 41 5c 41 5e 41 5f 5d c3 0f 0b e9 f3 fe ff ff e8 3c 00 00 00 eb a5 <0f> 0b e9 20 ff ff ff 48 c7 c1 ac af 8c 8e 80 e1 07 80 c1 03 38 c1 [ 953.409065][T17483] RSP: 0018:ffffc9000e4876e0 EFLAGS: 00010046 [ 953.415243][T17483] RAX: 0000000000000000 RBX: 0000000000000201 RCX: 0000000000000001 [ 953.423273][T17483] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff8901575f [ 953.431547][T17483] RBP: ffffc9000e487760 R08: ffff8880b8f3dc83 R09: 1ffff110171e7b90 [ 953.439576][T17483] R10: dffffc0000000000 R11: ffffed10171e7b91 R12: ffff88802fa8e678 [ 953.448067][T17483] R13: ffff88802fa8e670 R14: dffffc0000000000 R15: 1ffff92001c90edc [ 953.456262][T17483] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 953.465344][T17483] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 953.472055][T17483] CR2: ffffffffffffffe8 CR3: 000000001f3ec000 CR4: 00000000003526e0 [ 953.480161][T17483] Call Trace: [ 953.483554][T17483] [ 953.486512][T17483] ? _local_bh_enable+0xa0/0xa0 [ 953.491395][T17483] ? do_raw_spin_unlock+0x121/0x230 [ 953.496895][T17483] ? rt_cache_route+0x21f/0x280 [ 953.502045][T17483] rt_cache_route+0x21f/0x280 [ 953.506758][T17483] rt_set_nexthop+0x48b/0xa10 [ 953.511664][T17483] ? ip_route_output_key_hash_rcu+0x1281/0x2350 [ 953.518036][T17483] ip_route_output_key_hash_rcu+0x18c9/0x2350 [ 953.524125][T17483] ? ip_route_output_key_hash_rcu+0x1281/0x2350 [ 953.530431][T17483] ? ip_route_output_key_hash+0x13d/0x330 [ 953.536194][T17483] ip_route_output_key_hash+0x1f3/0x330 [ 953.541859][T17483] ? ip_route_input_rcu+0x3120/0x3120 [ 953.547520][T17483] ? make_kuid+0x1db/0x680 [ 953.551963][T17483] ? __put_user_ns+0x50/0x50 [ 953.556574][T17483] ip_route_output_flow+0x2a/0x150 [ 953.561709][T17483] rxrpc_init_peer+0x2da/0x740 [ 953.566902][T17483] ? rxrpc_new_incoming_peer+0x590/0x590 [ 953.573021][T17483] ? do_raw_spin_lock+0x11f/0x2b0 [ 953.578171][T17483] ? __rwlock_init+0x150/0x150 [ 953.583055][T17483] rxrpc_new_incoming_peer+0x27a/0x590 [ 953.588826][T17483] rxrpc_new_incoming_call+0x62a/0x1450 [ 953.594554][T17483] ? rxrpc_io_thread+0x12b5/0x24b0 [ 953.599712][T17483] rxrpc_io_thread+0x1b3e/0x24b0 [ 953.604682][T17483] ? rxrpc_io_thread+0x12b5/0x24b0 [ 953.609854][T17483] ? rxrpc_direct_abort+0x330/0x330 [ 953.615418][T17483] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 953.621493][T17483] ? __lock_acquire+0x7d80/0x7d80 [ 953.626767][T17483] ? lockdep_hardirqs_on+0x98/0x150 [ 953.632084][T17483] ? _raw_spin_unlock+0x40/0x40 [ 953.637076][T17483] ? __kthread_parkme+0x71/0x1c0 [ 953.642399][T17483] ? __kthread_parkme+0x15b/0x1c0 [ 953.647556][T17483] kthread+0x2fa/0x390 [ 953.651852][T17483] ? rxrpc_direct_abort+0x330/0x330 [ 953.657867][T17483] ? kthread_blkcg+0xd0/0xd0 [ 953.662476][T17483] ret_from_fork+0x48/0x80 [ 953.666974][T17483] ? kthread_blkcg+0xd0/0xd0 [ 953.671582][T17483] ret_from_fork_asm+0x11/0x20 [ 953.676438][T17483] [ 953.679501][T17483] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 953.687337][T17483] CPU: 1 PID: 17483 Comm: krxrpcio/20000 Not tainted syzkaller #0 [ 953.695201][T17483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 953.705513][T17483] Call Trace: [ 953.709025][T17483] [ 953.711998][T17483] dump_stack_lvl+0x18c/0x250 [ 953.716750][T17483] ? show_regs_print_info+0x20/0x20 [ 953.722161][T17483] ? load_image+0x420/0x420 [ 953.726821][T17483] panic+0x2ca/0x720 [ 953.731037][T17483] ? bpf_jit_dump+0xd0/0xd0 [ 953.735685][T17483] ? ret_from_fork_asm+0x11/0x20 [ 953.740751][T17483] __warn+0x2e0/0x470 [ 953.745308][T17483] ? __local_bh_enable_ip+0x186/0x1c0 [ 953.750723][T17483] ? __local_bh_enable_ip+0x186/0x1c0 [ 953.756218][T17483] report_bug+0x2be/0x4f0 [ 953.760660][T17483] ? __local_bh_enable_ip+0x186/0x1c0 [ 953.766209][T17483] ? __local_bh_enable_ip+0x186/0x1c0 [ 953.771638][T17483] ? __local_bh_enable_ip+0x188/0x1c0 [ 953.777384][T17483] handle_bug+0xcf/0x120 [ 953.782721][T17483] exc_invalid_op+0x1a/0x50 [ 953.787249][T17483] asm_exc_invalid_op+0x1a/0x20 [ 953.792215][T17483] RIP: 0010:__local_bh_enable_ip+0x186/0x1c0 [ 953.798242][T17483] Code: 48 8b 04 25 28 00 00 00 48 3b 44 24 48 75 4e 48 8d 65 e0 5b 41 5c 41 5e 41 5f 5d c3 0f 0b e9 f3 fe ff ff e8 3c 00 00 00 eb a5 <0f> 0b e9 20 ff ff ff 48 c7 c1 ac af 8c 8e 80 e1 07 80 c1 03 38 c1 [ 953.818613][T17483] RSP: 0018:ffffc9000e4876e0 EFLAGS: 00010046 [ 953.824908][T17483] RAX: 0000000000000000 RBX: 0000000000000201 RCX: 0000000000000001 [ 953.833093][T17483] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff8901575f [ 953.841190][T17483] RBP: ffffc9000e487760 R08: ffff8880b8f3dc83 R09: 1ffff110171e7b90 [ 953.849284][T17483] R10: dffffc0000000000 R11: ffffed10171e7b91 R12: ffff88802fa8e678 [ 953.857311][T17483] R13: ffff88802fa8e670 R14: dffffc0000000000 R15: 1ffff92001c90edc [ 953.865630][T17483] ? rt_cache_route+0x21f/0x280 [ 953.871262][T17483] ? _local_bh_enable+0xa0/0xa0 [ 953.876277][T17483] ? do_raw_spin_unlock+0x121/0x230 [ 953.881498][T17483] ? rt_cache_route+0x21f/0x280 [ 953.886468][T17483] rt_cache_route+0x21f/0x280 [ 953.891307][T17483] rt_set_nexthop+0x48b/0xa10 [ 953.896036][T17483] ? ip_route_output_key_hash_rcu+0x1281/0x2350 [ 953.902344][T17483] ip_route_output_key_hash_rcu+0x18c9/0x2350 [ 953.908669][T17483] ? ip_route_output_key_hash_rcu+0x1281/0x2350 [ 953.914964][T17483] ? ip_route_output_key_hash+0x13d/0x330 [ 953.921011][T17483] ip_route_output_key_hash+0x1f3/0x330 [ 953.927493][T17483] ? ip_route_input_rcu+0x3120/0x3120 [ 953.933027][T17483] ? make_kuid+0x1db/0x680 [ 953.937492][T17483] ? __put_user_ns+0x50/0x50 [ 953.942125][T17483] ip_route_output_flow+0x2a/0x150 [ 953.947262][T17483] rxrpc_init_peer+0x2da/0x740 [ 953.952136][T17483] ? rxrpc_new_incoming_peer+0x590/0x590 [ 953.957892][T17483] ? do_raw_spin_lock+0x11f/0x2b0 [ 953.963120][T17483] ? __rwlock_init+0x150/0x150 [ 953.968004][T17483] rxrpc_new_incoming_peer+0x27a/0x590 [ 953.973668][T17483] rxrpc_new_incoming_call+0x62a/0x1450 [ 953.980085][T17483] ? rxrpc_io_thread+0x12b5/0x24b0 [ 953.985605][T17483] rxrpc_io_thread+0x1b3e/0x24b0 [ 953.991021][T17483] ? rxrpc_io_thread+0x12b5/0x24b0 [ 953.996286][T17483] ? rxrpc_direct_abort+0x330/0x330 [ 954.001522][T17483] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 954.007532][T17483] ? __lock_acquire+0x7d80/0x7d80 [ 954.012577][T17483] ? lockdep_hardirqs_on+0x98/0x150 [ 954.017804][T17483] ? _raw_spin_unlock+0x40/0x40 [ 954.022848][T17483] ? __kthread_parkme+0x71/0x1c0 [ 954.027798][T17483] ? __kthread_parkme+0x15b/0x1c0 [ 954.032848][T17483] kthread+0x2fa/0x390 [ 954.037036][T17483] ? rxrpc_direct_abort+0x330/0x330 [ 954.042260][T17483] ? kthread_blkcg+0xd0/0xd0 [ 954.046882][T17483] ret_from_fork+0x48/0x80 [ 954.051332][T17483] ? kthread_blkcg+0xd0/0xd0 [ 954.055981][T17483] ret_from_fork_asm+0x11/0x20 [ 954.060794][T17483] [ 954.064289][T17483] Kernel Offset: disabled [ 954.068815][T17483] Rebooting in 86400 seconds..