last executing test programs: 3m16.427048884s ago: executing program 4 (id=347): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x19, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70200005f000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000181100", @ANYRES32], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000001000)=0x3, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000002a80)}}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002c00)="18", 0x1}], 0x1}}], 0x2, 0x40480c0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'ovf\x00', 0x36, 0x5, 0x104a}, 0x2c) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0, 0x1000) symlinkat(&(0x7f0000003200)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) close(r4) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r4) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000000c80)={0x9, &(0x7f0000001040)=[{0x9, 0x75, &(0x7f00000002c0)="4fc9f38b39ce8e5cc166866278fd3d02ba01b13de84e8fc328397599930468a2e1e7c2cc5c47682d7ae5fd4e9c3bd23bb042b55ffee59c4b3246a7c945e2915ee2bdc326702810c373165fd21a4481d4ce3d6120e48c841f1f38c62f8ba90b29d090f4b8e3e3c535dae5f9a654885ba4a4edaf7ae0"}, {0x40, 0x77, &(0x7f0000000500)="4c2fe1084440461d9399b0e6c5c14797a7290af186b9abddc31ff6d883bba6e53206c4606dd766e072aaebf70688ffcec86551b943fea8ed93d7d0d4015a1857e3a4c772006a062707d7dd744bf2b812c5e5c289c38f1fd079d0b22c1409e18d03ae8979ce4f727ff76424dfaa233d861301d03362101d", 0x1, 0x1}, {0x3, 0xf8, &(0x7f0000000580)="75bf8dba8fbc90ee6757688cea81afae08b27f0a7c6847323cfb0c25e41048dc830b3a3dd924c4b80b8069878b064d21e97db80c5fab635a657e1eea3a03b9cf96afa363e29c9d95cb8c121406e7a37bcf735fb466df0999fe573569d088dcf3ca9abd5ffbbb749507e96ba08e428ba161b5325edd346fd25a0affff9df70d26e38002d04deb0466d047eaefff4c6136e83d13115620c54d4bc9c87610149af6212d5973e949cf6c39f97a12e12ac560c46f0ad8c1384c6f6a2e2338d285e296aa9f6ea44cc9e1b1f393b1272ac434c6305853624ecd26d9eb52095bdf4c1323125220e9159b032a4cee8d350f6e32ecd6ec1549c25d8732"}, {0xe22, 0x9b, &(0x7f0000000700)="171e16e210ba7b05025f8a7184d604a98d70d9271bc14307a30ca5b8f4fecfa37525acc9cacd355a416b72b345605181515a9eb08ade69429c08859cc2a2611f5c34d3a03cbad52324f22cd628d76459e9d37a8c491b790c7619b5181df2e78e1b5ea3462170f8333c9e46bd87d0dd7016e5858b9027dd34f1e2a193946eb8f756314544c0530874dfe58e1012748ee00a5d055f1f7c7b6912e14f", 0x0, 0x1}, {0x8, 0x2a, &(0x7f00000007c0)="03dd01b250ff2f54f8dbd119e91f13aec570b32c41e0937eb0d910c53baf1c67f26ae4eb2940c2922f6f", 0x1, 0x1}, {0x1000, 0x6, &(0x7f0000000800)="bf00d67217c2"}, {0x583, 0x148, &(0x7f0000001300)="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", 0x1, 0x1}, {0xfff, 0xc3, &(0x7f0000000880)="7c1b3899b17a62ddb3afbdc58f2ecde5d3552a3b52cef816f282fd4a5aedf3b4ff6fec22a47c327015c30a76925146f8a1ebd3ad7aa59540508e05edfaecd7e19035ff135602acd8c2812ca6dd00a1f41144a8dbeff0da1d79c158513f011039b9708cca0ec05d8b52e57773099cbb9fbd97847d33cf1b7ef1e334430d3740df3176be00f3463e806a52f6d1b532132fc2df91a5edb8f7d548240e61db3739098d28e65d27ec59495b60910690a48991d67b5add0a09d72058388d3850b425bc5516c4", 0x1}, {0xfffffffd, 0x0, 0x0, 0x1, 0x1}]}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x8000, 0x8f, 0x0, 0x7}, 0x3a, 0x1, 0x1, 0x7, 0xff7, 0xc, 0x1, 0x1, 0x7, 0xa, {0xa, 0xfff, 0x10, 0xffff, 0x69f, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40004}, 0x40) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) 3m14.622616181s ago: executing program 4 (id=352): sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYBLOB="010000000000fedbdf250300000058000180"], 0x6c}, 0x1, 0x0, 0x0, 0x20000014}, 0x20040084) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002700010000000000000000000c000080080023"], 0x1c}], 0x1}, 0x0) 3m14.418466663s ago: executing program 4 (id=357): bind$pptp(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) 3m14.22979974s ago: executing program 4 (id=361): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x2040, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x220) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[]) 3m13.976047454s ago: executing program 4 (id=363): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfffd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240448a0}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) 3m13.72061132s ago: executing program 4 (id=366): syz_open_dev$loop(&(0x7f0000000500), 0x4ee8, 0x5042) syz_pidfd_open(0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x20940, 0x1e2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='./trace\x00', 0x4a0) 3m13.005901345s ago: executing program 32 (id=366): syz_open_dev$loop(&(0x7f0000000500), 0x4ee8, 0x5042) syz_pidfd_open(0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x20940, 0x1e2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='./trace\x00', 0x4a0) 4.213181251s ago: executing program 3 (id=1529): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x100040aa7, 0xc0203) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc0585604, &(0x7f0000000100)={0x1000000}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = add_key$keyring(&(0x7f0000000240), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r5) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) userfaultfd(0x1) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480), 0xa6f81, 0x0) r7 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x20002) ioctl$VIDIOC_G_FMT(r7, 0xc0d05604, &(0x7f0000000140)={0x9, @raw_data="aa1d33c716d5b6c598bb846045a4bcde20fce0759b5c056dddb296fe6a83dba0fddded3748767a86464e2d891fd2233e2e34bc803b4b8da2533af7268e8114063e523749d15906dd6b2b142a27f2a2422a49a8d947ddcabfc37cb266e3ba7058137740598d04828e74eb7b413ec0847036eca4215e1f2e40b6ec95e1a190fb73954b3ada9faf3ef4d77d6cffe617982304db80ebb456edb8117402076cea30bccfc83eddbac4c369c3528b552ad400"}) socket$inet6(0xa, 0x80002, 0x0) r8 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0xc0101) ioctl$VIDIOC_SUBSCRIBE_EVENT(r8, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x2}, 0x2) r9 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r9, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2}) r10 = fsopen(&(0x7f0000000000)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000300)='iocharset', &(0x7f00000001c0)='io#(ap\xac\xbesyt\xca\xb6(\xf9\xde\xe7\x82\v\xad\x9c\xf2\xd7+\x9bCN:?\xfd\xedf0\xb3\xb1\xf4\x8c\x15\xf9G+\x7f\x87\x91JQ\x01\x00\x00\x00\xee@\xf0Pbp\x95\x1a\xc2\xde\xad]\x80~\xf9\xbd|!\ta\xaa\xb2p\xee\x8d\xb6\n\x90wx\xd2\xc5\x00'/95, 0x0) ioctl$VIDIOC_QUERYMENU(r9, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) dup2(r6, r1) getpid() 3.774308488s ago: executing program 2 (id=1534): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r0, &(0x7f0000001840)=ANY=[@ANYBLOB="0800080006000600"], 0x1102) 3.40344983s ago: executing program 1 (id=1537): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xffffffffffffffaf, &(0x7f0000000040)={&(0x7f0000000440)=@ipv4_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x20, 0x14, 0x4, 0x2, 0x0, 0xfe, 0x2, 0x700}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_PREFSRC={0x8, 0x1e, @broadcast}]}, 0x2c}, 0x1, 0xffffff7f, 0x0, 0x4008044}, 0x4048004) 3.344405284s ago: executing program 2 (id=1538): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x100}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x882) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000440)={0x0, 0x0, {0x3, 0x2, 0x0, 0x2, 0x3}, 0x4}) write$sndseq(r1, &(0x7f0000000140), 0x0) 3.291570068s ago: executing program 1 (id=1539): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r0, 0x2219, 0x771e, 0x16, 0x0, 0x0) 3.28977135s ago: executing program 5 (id=1540): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg(r0, &(0x7f0000004340)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000005c0)="046850856348cdac0dd0b77bb87232b19f5c1f67f06a85cb4933c716b18157509d0b56ba2c526dfc9ff946470276d00c24c6c72b84a212abcc425b639e183a195ad0fa9e5327253ffdfcdd67c2734c30b1", 0x51}], 0x1, &(0x7f00000006c0)=[{0x58, 0xff, 0x5, "2b556285581fd3e587926813f0c7373c388d01100170c6dc055ad3da3ff129815fc66267399043c914b6f0e637c23f5b7e9341d8b2df94ce6aac733dd90a0fbb73f9603d"}], 0x58}}, {{&(0x7f0000004080)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000004300)=[{0x10, 0x10a, 0x2}], 0x10}}], 0x2, 0x11) 3.048830166s ago: executing program 1 (id=1541): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000e00)={0x28, 0x7, r1, 0x0, &(0x7f0000000c00)="7f", 0x1, 0x7}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x7, r1, 0x0, &(0x7f0000002500)="e9", 0x1, 0x7}) 3.02825621s ago: executing program 5 (id=1542): socket$kcm(0x10, 0x2, 0x10) socket$inet6(0xa, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$mtd(&(0x7f0000000000), 0x492, 0x20800) socket$nl_rdma(0x10, 0x3, 0x14) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x1000, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000040)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x700, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x20000, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xffffdffe, 0x351}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a75, 0x100, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x66c7e65cbf3e4906, 0x2, 0x250, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4040) 2.95704775s ago: executing program 2 (id=1543): openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x7, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff3e5, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x8, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000000, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed9b, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0xfffffffe, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x4, 0x5, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x51, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) openat$sndtimer(0xffffffffffffff9c, 0x0, 0xa1001) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004004) gettid() r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) syz_clone(0x95008100, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) readv(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = socket$rds(0x15, 0x5, 0x0) sendmsg$inet(r5, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) 2.828304726s ago: executing program 1 (id=1544): syz_usb_connect(0x2, 0x2d, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x30000000) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x11, 0x3, 0x0) ioprio_get$pid(0x3, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0xd007) 2.680821581s ago: executing program 2 (id=1545): rt_sigprocmask(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x20001) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000100)=0x1) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000d00)={0x4d5, 0x2, {0x1, 0x0, 0x8, 0x2, 0xfffffffe}, 0x2}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000540)={{}, {0x18}, 0x3, 0x2}) r2 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f00000000c0)={0xfffffe1a, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x16c, &(0x7f00000002c0)=ANY=[]) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0x9, 0x401, 0xfffffe0800000001, 0xfa11, 0xf7ffffff}, 0x0) syz_clone3(&(0x7f00000003c0)={0x122125000, &(0x7f00000000c0), 0x0, 0x0, {0xa2}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) memfd_create(0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, 0xffffffffffffffff, 0x8000000) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000100)=0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000332000/0x4000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000053000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0x20, 0x3, 0xc4}) 2.464379382s ago: executing program 3 (id=1546): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', '', [], 0xa, "e30330c052a4a652bf726295e1ab5beea10600d854902b8ddb02acb9d03415a498bae6ae17d2d69ac3ef76d80be8e6cc49d0cee38df134bd424a6d2ba3293d88a92c9397420029191b9b9285c57e9ef851b76aae7f2f0f63ff1c12dbda843b5d731cbb0b7819aed66ec4f4367f8207a9b6d88c30cee354218a361b5ec4e4e829"}, 0xfffffd18) 2.404382764s ago: executing program 3 (id=1547): syz_open_dev$vbi(0x0, 0x3, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0xc004) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xffbffffc, @empty, 0x7}, 0x1c) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 2.300295696s ago: executing program 0 (id=1548): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x28, 0x41, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 2.270627594s ago: executing program 0 (id=1549): msgsnd(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="02"], 0x1008, 0x0) msgsnd(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02"], 0x8, 0x0) msgrcv(0x0, &(0x7f0000000440)={0x0, ""/153}, 0xa1, 0x1, 0x3000) 2.258346801s ago: executing program 3 (id=1550): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x11, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}, 0x1, 0x0, 0x0, 0x823be637d8173150}, 0x40000c0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}}, 0x0) 2.170724537s ago: executing program 0 (id=1551): getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000380)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x9, 0x4, 0xe9b, 0x22, 0x20000008, 0x7, 0x911d, 0x7, 0x8, 0xafa, 0x5, 0x1006, 0xc, 0x8, 0x8000, 0xffffffffffffffff], 0x1000, 0xc2302}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x20005, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000480)={"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"}) 2.061417585s ago: executing program 1 (id=1552): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000100)={"b46474f815e8d5535f0887c44335cc824dc6121bc72a77f532ff5dad4d643a9cab29d2310e04be14eb26c0af4985fe45e3b3b0680b3ec92725d74b9716e0f7c3119a2c9a0ae65ff4772e2e12733cb013c4300fe40863480747c0a7ddb9361b1578015ca1bb2c1677ebae096f08345476f567443842946ed946434c75916d1db83fe305920de65bfaf9bd940672216846cb16b8ae67cd3affc61375381f91b3b9f1cc5e38cafe5239aee71dcd481fbe1ecd2547ffbaad4469a74697c28fb9beefa6a5d736712a55eb9110c2cf7964062ba8cbc1c038e84f0f5db7fc7053118bf5221e3efa6fc3edb5d0ca3cde7054dd0751a332520aa8478b1775d552c5cc24d3c2df9eb333e5ca3aa06c1c2cf8526714f5caff2f55b41976fc20b64f1fc61d5b44f50953582a1825d32130a31abfeafd1987317879e29ac51b93c9659e040000000000000019cc3ef1d883c78b9e073d08a9197fb3717df238b9831831214b186693be9dd2568bb77272e80df5dfed03e8c467627bedfbd93359a9f79a3aa37e873dc1357b37b43d813ea85267b0dc8b1c4cc51bd985328833beb2509b7fb762555bbea2da936b36f8f1673fd5f606b2b6eb23b72bf947206e8dbfeb40ca6f265a3485c8446e0f0da652860b88328073d2282c14b48a7774e62754a968b60e92205e8fafcdd70a55c3c4d1a4821ff44e6e3681f15ae091262e3a3290a24d8ceae30ebbf9d24287bb8a5d73c608d47d287f9e716cf02b4796a83fb0c05e45b89de9ef8bce834e6d7a0be6e30d2c66cb6e640cb01898454ad361bc0701d8fe56113335ae6adec59300db04691cc4a689034272a8e086a32ce7061b4f79fa8afbb48a6ce4b62bdc44af013d78980457e1fa61eb9204818606f4c3b03c0f33cd2a841ac9bc2b73151a96e31ab99e6ec969b5f2c3edd5f9abc69845e487af992758ba445368da93dae1d44360d52a534a88276b8aaf349841d8a4788c60408618437c442308dbf70efeda2e54e9b9e4fe5f76997c9dcb945a26bd75748c85d19ca8b99264dce50580e8d4dbda401dad7df31e9a7a6a3a83bfbdfb5394abd581ac0824fbcd75d2f5205c0b7c9188e6f26bfd97734d9a20433f6cdba9d14a5f32a4d97a57f4603b21146fd1aebf082e863d463c224ad623c17d8043d3bf083f0322408dd6ead6915ac6a4222ab51480eb6e11a8913348219515170d9df90d72d7363bbda3e327d19f98c0a856f980763802788e602e8a2ae0a1930786874dc21a2e99abda15f35457cf1dcb440c4b41350d0eda352aad7f57a0adc8a6914da06470635ed21c4c11cd1a8ec778064c9f62efba2927828b23f94b5af41c4bce81eda040ab8583c9f2e73233d74b84f4877ce6b35bb1180300"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.002781875s ago: executing program 5 (id=1553): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x100}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x882) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000440)={0x0, 0x0, {0x3, 0x2, 0x0, 0x2, 0x3}, 0x4}) write$sndseq(r1, &(0x7f0000000140), 0x0) 1.9652699s ago: executing program 1 (id=1554): socket$rds(0x15, 0x5, 0x0) r0 = syz_ublk_setup_io_uring(0x2261, &(0x7f0000000300)={0x0, 0xd58c, 0x80, 0x2, 0x30b}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) eventfd2(0x1, 0x80001) r4 = eventfd(0xe467) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x0, 0x156}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20000000, 0xe4, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x2, 0x80000250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20084884) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000080)=r4, 0x1) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x21, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) 1.833329566s ago: executing program 0 (id=1555): openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x7, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff3e5, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x8, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000000, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed9b, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0xfffffffe, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x4, 0x5, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x51, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) openat$sndtimer(0xffffffffffffff9c, 0x0, 0xa1001) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004004) gettid() r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) syz_clone(0x95008100, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) readv(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = socket$rds(0x15, 0x5, 0x0) sendmsg$inet(r5, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) 1.516298409s ago: executing program 3 (id=1556): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000004c0)={0x7, @pix={0x8, 0x8, 0x4f565559, 0x1, 0x3, 0xd2c8, 0x9, 0x400, 0x1, 0x8}}) 1.515837511s ago: executing program 5 (id=1557): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', '', [], 0xa, "e30330c052a4a652bf726295e1ab5beea10600d854902b8ddb02acb9d03415a498bae6ae17d2d69ac3ef76d80be8e6cc49d0cee38df134bd424a6d2ba3293d88a92c9397420029191b9b9285c57e9ef851b76aae7f2f0f63ff1c12dbda843b5d731cbb0b7819aed66ec4f4367f8207a9b6d88c30cee354218a361b5ec4e4e829"}, 0xfffffd18) 1.43647111s ago: executing program 3 (id=1558): syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d55000905020200020200"], 0x0) socket(0x40000000015, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1194, &(0x7f0000000040)={0x0, 0xa150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) 1.34153596s ago: executing program 5 (id=1559): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x44, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0xc4}}, 0x0) 1.317254898s ago: executing program 0 (id=1560): mbind(&(0x7f000058a000/0x2000)=nil, 0x2000, 0x4000, 0x0, 0x6, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000480)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x81000004}}}}}}, 0x0) fcntl$setown(r1, 0x8, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r4, &(0x7f0000000540)="48696c060a2f686c64bf8fcc6b881b5fa6802c012f6869642d636f72652e63206c696e65cb57e017fcb309130850af815ecccc4d204e993838202bb97263e20d133f29281464f37f2afb75a76a8e2f56368df24600c4220485506210c0554b0ee4a7f2f8dc0f4644cca3b91d5532d062", 0xfffffeea) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x8, &(0x7f0000000000)=0xfffffffd, 0x4) getsockopt$inet6_tcp_buf(r5, 0x6, 0x8, 0x0, &(0x7f0000001040)) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 426.521305ms ago: executing program 0 (id=1561): r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f00000001c0)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000540)=0x28) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x70) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x267) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f00000010c0)=ANY=[@ANYBLOB="80fb555d", @ANYRES16=r4, @ANYBLOB="0100000000000000000014000000180007800c000300ffff0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x48800}, 0x0) fcntl$dupfd(r0, 0x406, r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1ec) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$binfmt_aout(r5, &(0x7f0000000340)=ANY=[], 0xff2e) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r7 = dup(r5) ioctl$TCXONC(r7, 0x540a, 0x3) 348.037263ms ago: executing program 2 (id=1562): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x900000}], 0x1, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) socket$inet(0x2, 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xffff}, {0x300, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x10000001, 0x0, 0x3}, @loopback, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x5}, 0x0) write$tun(r1, &(0x7f0000000500)=ANY=[], 0x20) 282.354812ms ago: executing program 5 (id=1563): syz_usb_connect(0x2, 0x2d, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x30000000) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x11, 0x3, 0x0) ioprio_get$pid(0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0xd007) 0s ago: executing program 2 (id=1564): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r3, 0x402, 0x40000029) fcntl$notify(r2, 0x402, 0x1c) getdents64(r3, &(0x7f0000000080)=""/226, 0xe2) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x4c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88c7}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac=@broadcast, @device_b}}}]}, 0x4c}}, 0x800) kernel console output (not intermixed with test programs): duct=0x1505, serial= interface=186 now attached to iowarrior0 [ 233.362131][ T5729] usb 3-1: USB disconnect, device number 19 [ 233.429361][ T32] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 233.429388][ T32] [drm] Initialized udl on minor 1 [ 233.451628][ T32] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 233.452106][ T32] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 233.477860][ T32] usb 1-1: USB disconnect, device number 12 [ 233.639806][ T8704] fuse: Unknown parameter 'grou00000000000000000000' [ 233.687881][ T8706] fuse: Unknown parameter 'grou00000000000000000000' [ 234.141637][ T8721] netlink: 'syz.2.975': attribute type 2 has an invalid length. [ 234.141656][ T8721] netlink: 'syz.2.975': attribute type 2 has an invalid length. [ 234.182037][ T5743] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 234.342978][ T5743] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 234.344104][ T5743] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 234.344131][ T5743] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 234.344151][ T5743] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 234.344166][ T5743] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 234.344198][ T5743] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.418771][ T5743] usb 2-1: config 0 descriptor?? [ 234.544923][ T5729] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 234.602041][ T8738] fuse: Unknown parameter 'grou00000000000000000000' [ 234.680655][ T8740] fuse: Unknown parameter 'group_i00000000000000000000' [ 234.700382][ T5729] usb 6-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 234.704187][ T5729] usb 6-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 234.704237][ T5729] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 234.706401][ T5729] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.706426][ T5729] usb 6-1: Product: syz [ 234.706439][ T5729] usb 6-1: Manufacturer: syz [ 234.706452][ T5729] usb 6-1: SerialNumber: syz [ 234.771749][ T5729] usb 6-1: config 0 descriptor?? [ 234.778224][ T5729] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 234.856955][ T5743] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 234.856991][ T5743] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 234.857018][ T5743] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 234.857067][ T5743] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 234.857094][ T5743] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 234.857118][ T5743] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 234.857142][ T5743] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 234.857167][ T5743] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 234.857210][ T5743] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 234.857234][ T5743] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 234.958268][ T5743] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 235.075359][ T8749] CUSE: unknown device info "n|zQC*" [ 235.075379][ T8749] CUSE: DEVNAME unspecified [ 235.090854][ T32] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 235.163029][ T10] usb 2-1: USB disconnect, device number 24 [ 235.196400][ T5729] gspca_sunplus: reg_r err -32 [ 235.196489][ T5729] sunplus 6-1:0.0: probe with driver sunplus failed with error -32 [ 235.240922][ T32] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 235.242012][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.277109][ T32] usb 1-1: config 0 descriptor?? [ 235.371909][ T33] kauditd_printk_skb: 25 callbacks suppressed [ 235.371926][ T33] audit: type=1326 audit(1789264498.320:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8748 comm="syz.3.984" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3c79b9e159 code=0x0 [ 235.509940][ T32] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 235.714089][ T32] [drm:udl_init] *ERROR* Selecting channel failed [ 235.760506][ T32] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 235.760531][ T32] [drm] Initialized udl on minor 1 [ 235.805350][ T32] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 235.805743][ T32] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 235.820376][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 235.932888][ T8775] dyndbg: expected <4096 bytes into control [ 235.934131][ T8775] binder: 8772:8775 ioctl c0306201 0 returned -14 [ 235.939352][ T8775] sz1: rxe_newlink: already configured on lo [ 236.688621][ T32] usb 1-1: USB disconnect, device number 13 [ 236.714580][ T1018] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 236.757360][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 236.760748][ T10] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 236.766651][ T10] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 236.766674][ T10] usb 3-1: config 0 has no interface number 0 [ 236.766708][ T10] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 236.766728][ T10] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 236.766747][ T10] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 236.766768][ T10] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 236.766790][ T10] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 236.777763][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.777789][ T10] usb 3-1: Product: syz [ 236.777801][ T10] usb 3-1: Manufacturer: syz [ 236.777814][ T10] usb 3-1: SerialNumber: syz [ 236.808637][ T10] usb 3-1: config 0 descriptor?? [ 237.069836][ T10] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 237.093124][ T8785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.992'. [ 237.117489][ T10] usb 3-1: USB disconnect, device number 20 [ 237.275387][ T8789] fuse: Unknown parameter 'group_i00000000000000000000' [ 237.409208][ T10] usb 6-1: USB disconnect, device number 17 [ 237.887298][ T8817] fuse: Unknown parameter 'group_i00000000000000000000' [ 238.084990][ T8824] fuse: Unknown parameter 'group_i00000000000000000000' [ 238.680348][ T6626] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 238.812306][ T6626] usb 2-1: device descriptor read/64, error -71 [ 238.920256][ T5729] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 239.080731][ T5729] usb 3-1: Using ep0 maxpacket: 8 [ 239.144140][ T5729] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 239.148783][ T5729] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 239.148810][ T5729] usb 3-1: config 0 has no interface number 0 [ 239.148876][ T5729] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 239.148903][ T5729] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 239.148925][ T5729] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 239.148947][ T5729] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 239.148970][ T5729] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 239.163743][ T8856] syz.0.1017: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 239.163812][ T8856] CPU: 1 UID: 0 PID: 8856 Comm: syz.0.1017 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.163839][ T8856] Tainted: [L]=SOFTLOCKUP [ 239.163846][ T8856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 239.163870][ T8856] Call Trace: [ 239.163878][ T8856] [ 239.163886][ T8856] dump_stack_lvl+0xe8/0x150 [ 239.163919][ T8856] warn_alloc+0x24d/0x270 [ 239.163942][ T8856] ? stack_depot_save_flags+0x33/0x7f0 [ 239.163976][ T8856] ? __pfx_warn_alloc+0x10/0x10 [ 239.163996][ T8856] ? kasan_save_track+0x4f/0x80 [ 239.164033][ T8856] ? __kasan_kmalloc+0x93/0xb0 [ 239.164058][ T8856] ? xsk_init_queue+0x8a/0xe0 [ 239.164084][ T8856] ? xsk_setsockopt+0x52a/0x960 [ 239.164111][ T8856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.164143][ T8856] __vmalloc_node_range_noprof+0x12c/0x1690 [ 239.164193][ T8856] ? rcu_is_watching+0x16/0xb0 [ 239.164222][ T8856] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 239.164243][ T8856] ? __kmalloc_cache_noprof+0x31c/0x600 [ 239.164267][ T8856] ? __kmalloc_cache_noprof+0x148/0x600 [ 239.164289][ T8856] ? xskq_create+0x56/0x220 [ 239.164321][ T8856] xskq_create+0x148/0x220 [ 239.164349][ T8856] ? xsk_init_queue+0x8a/0xe0 [ 239.164387][ T8856] xsk_init_queue+0x8a/0xe0 [ 239.164418][ T8856] xsk_setsockopt+0x52a/0x960 [ 239.164447][ T8856] ? __pfx_xsk_setsockopt+0x10/0x10 [ 239.164474][ T8856] ? __pfx_aa_sk_perm+0x10/0x10 [ 239.164513][ T8856] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 239.164540][ T8856] ? __pfx_xsk_setsockopt+0x10/0x10 [ 239.164576][ T8856] do_sock_setsockopt+0x17c/0x1b0 [ 239.164604][ T8856] __x64_sys_setsockopt+0x13d/0x1b0 [ 239.164639][ T8856] do_syscall_64+0x166/0x520 [ 239.164658][ T8856] ? trace_irq_disable+0x3b/0x140 [ 239.164680][ T8856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.164700][ T8856] ? clear_bhb_loop+0x70/0xc0 [ 239.164723][ T8856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.164743][ T8856] RIP: 0033:0x7f01f2b9e159 [ 239.164761][ T8856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.164777][ T8856] RSP: 002b:00007f01f39ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 239.164797][ T8856] RAX: ffffffffffffffda RBX: 00007f01f2e26090 RCX: 00007f01f2b9e159 [ 239.164810][ T8856] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 239.164822][ T8856] RBP: 00007f01f2c3503b R08: 0000000000000004 R09: 0000000000000000 [ 239.164834][ T8856] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.164847][ T8856] R13: 00007f01f2e26128 R14: 00007f01f2e26090 R15: 00007fffa6913408 [ 239.164878][ T8856] [ 239.164886][ T8856] Mem-Info: [ 239.164895][ T8856] active_anon:12609 inactive_anon:0 isolated_anon:0 [ 239.164895][ T8856] active_file:0 inactive_file:61119 isolated_file:0 [ 239.164895][ T8856] unevictable:0 dirty:240 writeback:0 [ 239.164895][ T8856] slab_reclaimable:10740 slab_unreclaimable:103556 [ 239.164895][ T8856] mapped:36287 shmem:6828 pagetables:1525 [ 239.164895][ T8856] sec_pagetables:0 bounce:0 [ 239.164895][ T8856] kernel_misc_reclaimable:0 [ 239.164895][ T8856] free:1287930 free_pcp:13767 free_cma:0 [ 239.164943][ T8856] Node 0 active_anon:50436kB inactive_anon:0kB active_file:0kB inactive_file:244268kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:145148kB dirty:956kB writeback:0kB shmem:27312kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12976kB pagetables:5952kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 239.164993][ T8856] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 239.165047][ T8856] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 239.165100][ T8856] lowmem_reserve[]: 0 2486 2486 2486 2486 [ 239.165134][ T8856] Node 0 DMA32 free:1200804kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:50436kB inactive_anon:0kB active_file:0kB inactive_file:244268kB unevictable:0kB writepending:956kB zspages:0kB present:3129332kB managed:2546360kB mlocked:0kB bounce:0kB free_pcp:51932kB local_pcp:14100kB free_cma:0kB [ 239.165196][ T8856] lowmem_reserve[]: 0 0 0 0 0 [ 239.165227][ T8856] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 239.165285][ T8856] lowmem_reserve[]: 0 0 0 0 0 [ 239.165317][ T8856] Node 1 Normal free:3935556kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:3136kB local_pcp:0kB free_cma:0kB [ 239.165372][ T8856] lowmem_reserve[]: 0 0 0 0 0 [ 239.165405][ T8856] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 239.165516][ T8856] Node 0 DMA32: 1477*4kB (UME) 438*8kB (UME) 200*16kB (UME) 281*32kB (UME) 296*64kB (ME) 144*128kB (UME) 74*256kB (UM) 27*512kB (UME) 5*1024kB (ME) 1*2048kB (E) 269*4096kB (UM) = 1200740kB [ 239.165675][ T8856] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 239.165770][ T8856] Node 1 Normal: 1*4kB (M) 4*8kB (UM) 6*16kB (UM) 12*32kB (UM) 7*64kB (UM) 1*128kB (M) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 959*4096kB (M) = 3935556kB [ 239.165928][ T8856] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 239.165944][ T8856] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 239.165959][ T8856] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 239.165975][ T8856] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 239.165990][ T8856] 67943 total pagecache pages [ 239.165998][ T8856] 0 pages in swap cache [ 239.166004][ T8856] Free swap = 124996kB [ 239.166011][ T8856] Total swap = 124996kB [ 239.166019][ T8856] 2097051 pages RAM [ 239.166026][ T8856] 0 pages HighMem/MovableOnly [ 239.166033][ T8856] 428845 pages reserved [ 239.166040][ T8856] 0 pages cma reserved [ 239.298947][ T5729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.298973][ T5729] usb 3-1: Product: syz [ 239.298986][ T5729] usb 3-1: Manufacturer: syz [ 239.299000][ T5729] usb 3-1: SerialNumber: syz [ 239.347079][ T6626] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 239.470533][ T6626] usb 2-1: device descriptor read/64, error -71 [ 239.495167][ T5729] usb 3-1: config 0 descriptor?? [ 239.586723][ T6626] usb usb2-port1: attempt power cycle [ 240.021665][ T6626] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 240.040863][ T6626] usb 2-1: device descriptor read/8, error -71 [ 240.114575][ T5729] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 240.135687][ T5729] usb 3-1: USB disconnect, device number 21 [ 240.280287][ T6626] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 240.303176][ T6626] usb 2-1: device descriptor read/8, error -71 [ 240.410769][ T6626] usb usb2-port1: unable to enumerate USB device [ 240.430881][ T33] audit: type=1804 audit(1789264503.370:264): pid=8868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1022" name="/newroot/110/file1" dev="tmpfs" ino=585 res=1 errno=0 [ 240.946361][ T8875] netlink: 'syz.0.1026': attribute type 2 has an invalid length. [ 240.946384][ T8875] netlink: 'syz.0.1026': attribute type 2 has an invalid length. [ 242.603912][ T8897] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1033'. [ 242.626520][ T33] audit: type=1326 audit(1789264505.570:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8892 comm="syz.1.1031" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873499e159 code=0x7ffc0000 [ 242.626570][ T33] audit: type=1326 audit(1789264505.570:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8892 comm="syz.1.1031" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873499e159 code=0x7ffc0000 [ 242.627300][ T33] audit: type=1326 audit(1789264505.570:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8892 comm="syz.1.1031" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f873499e159 code=0x7ffc0000 [ 242.629569][ T33] audit: type=1326 audit(1789264505.570:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8892 comm="syz.1.1031" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873499e159 code=0x7ffc0000 [ 242.629617][ T33] audit: type=1326 audit(1789264505.570:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8892 comm="syz.1.1031" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873499e159 code=0x7ffc0000 [ 242.633723][ T33] audit: type=1326 audit(1789264505.580:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8892 comm="syz.1.1031" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f873499e159 code=0x7ffc0000 [ 242.633774][ T33] audit: type=1326 audit(1789264505.580:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8892 comm="syz.1.1031" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873499e159 code=0x7ffc0000 [ 242.634881][ T33] audit: type=1326 audit(1789264505.580:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8892 comm="syz.1.1031" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873499e159 code=0x7ffc0000 [ 242.640246][ T33] audit: type=1326 audit(1789264505.580:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8892 comm="syz.1.1031" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f873499e159 code=0x7ffc0000 [ 243.321193][ T8910] netlink: 'syz.0.1037': attribute type 2 has an invalid length. [ 243.321210][ T8910] netlink: 'syz.0.1037': attribute type 2 has an invalid length. [ 243.630737][ T1018] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 243.780973][ T1018] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 243.783251][ T1018] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.783273][ T1018] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 243.783306][ T1018] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.788891][ T1018] usb 4-1: config 0 descriptor?? [ 244.710326][ T6626] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 244.859817][ T8946] netlink: 'syz.2.1050': attribute type 2 has an invalid length. [ 244.859833][ T8946] netlink: 'syz.2.1050': attribute type 2 has an invalid length. [ 244.862823][ T6626] usb 1-1: Using ep0 maxpacket: 16 [ 244.865060][ T6626] usb 1-1: unable to get BOS descriptor or descriptor too short [ 244.865104][ T6626] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 244.867808][ T6626] usb 1-1: config 4 has an invalid interface number: 28 but max is 0 [ 244.867830][ T6626] usb 1-1: config 4 has no interface number 0 [ 244.867855][ T6626] usb 1-1: config 4 interface 28 has no altsetting 0 [ 244.870997][ T6626] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.871019][ T6626] usb 1-1: Product: syz [ 244.871032][ T6626] usb 1-1: Manufacturer: syz [ 244.871044][ T6626] usb 1-1: SerialNumber: syz [ 245.374695][ T8960] syz.2.1054 uses obsolete (PF_INET,SOCK_PACKET) [ 245.623435][ T6626] usb 1-1: USB disconnect, device number 14 [ 245.692284][ T191] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 245.764471][ T8969] syzkaller0: entered promiscuous mode [ 245.764492][ T8969] syzkaller0: entered allmulticast mode [ 245.840230][ T191] usb 3-1: Using ep0 maxpacket: 8 [ 245.841471][ T191] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 245.842404][ T191] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 245.844804][ T191] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.844824][ T191] usb 3-1: Product: syz [ 245.844837][ T191] usb 3-1: Manufacturer: syz [ 245.844849][ T191] usb 3-1: SerialNumber: syz [ 245.852824][ T191] usb 3-1: config 0 descriptor?? [ 245.856149][ T191] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 245.856201][ T191] usb 3-1: setting power ON [ 245.862187][ T191] dvb-usb: bulk message failed: -22 (2/0) [ 245.869438][ T191] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 245.872261][ T191] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 245.872317][ T191] usb 3-1: media controller created [ 245.901718][ T191] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 245.951454][ T191] usb 3-1: selecting invalid altsetting 6 [ 245.951480][ T191] usb 3-1: digital interface selection failed (-22) [ 245.951493][ T191] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 245.953540][ T191] usb 3-1: setting power OFF [ 245.953610][ T191] dvb-usb: bulk message failed: -22 (2/0) [ 245.953625][ T191] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 245.953636][ T191] (NULL device *): no alternate interface [ 246.040907][ T191] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 246.046315][ T33] kauditd_printk_skb: 30 callbacks suppressed [ 246.046334][ T33] audit: type=1326 audit(1789264508.990:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8972 comm="syz.5.1061" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350bf9e159 code=0x7ffc0000 [ 246.046467][ T33] audit: type=1326 audit(1789264508.990:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8972 comm="syz.5.1061" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350bf9e159 code=0x7ffc0000 [ 246.049931][ T33] audit: type=1326 audit(1789264508.990:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8972 comm="syz.5.1061" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f350bf9e159 code=0x7ffc0000 [ 246.049991][ T33] audit: type=1326 audit(1789264508.990:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8972 comm="syz.5.1061" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350bf9e159 code=0x7ffc0000 [ 246.050031][ T33] audit: type=1326 audit(1789264508.990:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8972 comm="syz.5.1061" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350bf9e159 code=0x7ffc0000 [ 246.050071][ T33] audit: type=1326 audit(1789264508.990:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8972 comm="syz.5.1061" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f350bf9e159 code=0x7ffc0000 [ 246.050280][ T33] audit: type=1326 audit(1789264508.990:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8972 comm="syz.5.1061" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350bf9e159 code=0x7ffc0000 [ 246.055215][ T33] audit: type=1326 audit(1789264508.990:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8972 comm="syz.5.1061" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350bf9e159 code=0x7ffc0000 [ 246.130986][ T8956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.135576][ T8956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.145819][ T8956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.146217][ T8956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.165849][ T191] usb 3-1: USB disconnect, device number 22 [ 246.423646][ T32] usb 4-1: USB disconnect, device number 17 [ 246.564328][ T8980] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 247.030259][ T6626] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 247.182751][ T6626] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 247.186683][ T6626] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 247.186700][ T6626] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.186709][ T6626] usb 4-1: config 0 has no interface number 0 [ 247.186730][ T6626] usb 4-1: config 0 interface 133 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 247.188310][ T6626] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.188323][ T6626] usb 4-1: Product: syz [ 247.188330][ T6626] usb 4-1: Manufacturer: syz [ 247.188337][ T6626] usb 4-1: SerialNumber: syz [ 247.190836][ T6626] usb 4-1: config 0 descriptor?? [ 247.240608][ T32] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 247.395811][ T6626] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 247.395930][ T6626] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 82 [ 247.397218][ T6626] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 247.397298][ T6626] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 247.397372][ T6626] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 247.398729][ T6626] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 247.441441][ T32] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 247.459754][ T32] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.459777][ T32] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 247.460064][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.489849][ T32] usb 1-1: config 0 descriptor?? [ 247.641248][ T6626] usb 4-1: USB disconnect, device number 18 [ 247.649542][ T6626] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 247.651171][ T6626] keyspan 4-1:0.133: device disconnected [ 248.350758][ T9018] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 248.497382][ T9028] ip_tables: iptables: counters copy to user failed while replacing table [ 249.650205][ T5729] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 249.800999][ T5729] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 249.802037][ T5729] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 249.802061][ T5729] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.802078][ T5729] usb 4-1: config 0 has no interface number 0 [ 249.802113][ T5729] usb 4-1: config 0 interface 133 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 249.804103][ T5729] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.804117][ T5729] usb 4-1: Product: syz [ 249.804124][ T5729] usb 4-1: Manufacturer: syz [ 249.804131][ T5729] usb 4-1: SerialNumber: syz [ 249.805993][ T5729] usb 4-1: config 0 descriptor?? [ 250.014768][ T5729] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 250.015019][ T5729] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 82 [ 250.018140][ T5729] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 250.018236][ T5729] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 250.018311][ T5729] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 250.026577][ T5729] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 250.076249][ T5729] usb 1-1: USB disconnect, device number 15 [ 250.235061][ T191] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 250.254143][ T9051] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 250.342112][ T5715] usb 4-1: USB disconnect, device number 19 [ 250.357418][ T5715] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 250.358032][ T5715] keyspan 4-1:0.133: device disconnected [ 250.401849][ T191] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 250.402833][ T191] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 250.402861][ T191] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 250.402891][ T191] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 250.402910][ T191] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 250.402948][ T191] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.406696][ T191] usb 6-1: config 0 descriptor?? [ 250.821923][ T191] hid_parser_main: 5 callbacks suppressed [ 250.821946][ T191] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 250.821974][ T191] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 250.823896][ T191] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 250.823924][ T191] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 250.823949][ T191] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 250.823973][ T191] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 250.823997][ T191] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 250.824020][ T191] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 250.824045][ T191] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 250.824069][ T191] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 250.921913][ T191] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 251.026335][ T191] usb 6-1: USB disconnect, device number 18 [ 251.051691][ T5715] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 251.212431][ T5715] usb 3-1: unable to get BOS descriptor or descriptor too short [ 251.212830][ T5715] usb 3-1: not running at top speed; connect to a high speed hub [ 251.212848][ T5715] usb 3-1: New USB device found, idVendor=0caa, idProduct=3001, bcdDevice=3e.c2 [ 251.215546][ T5715] usb 3-1: config 160 has an invalid interface number: 187 but max is 0 [ 251.215562][ T5715] usb 3-1: config 160 has no interface number 0 [ 251.215578][ T5715] usb 3-1: config 160 interface 187 has no altsetting 0 [ 251.219172][ T5715] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.219194][ T5715] usb 3-1: Product: syz [ 251.219207][ T5715] usb 3-1: Manufacturer: syz [ 251.219219][ T5715] usb 3-1: SerialNumber: syz [ 251.381015][ T1018] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 251.430248][ T191] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 251.531359][ T1018] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 251.532305][ T1018] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.532326][ T1018] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 251.532358][ T1018] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.535194][ T1018] usb 4-1: config 0 descriptor?? [ 251.610408][ T191] usb 1-1: Using ep0 maxpacket: 16 [ 251.614121][ T191] usb 1-1: unable to get BOS descriptor or descriptor too short [ 251.614223][ T191] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 251.616693][ T191] usb 1-1: config 4 has an invalid interface number: 28 but max is 0 [ 251.616716][ T191] usb 1-1: config 4 has no interface number 0 [ 251.616742][ T191] usb 1-1: config 4 interface 28 has no altsetting 0 [ 251.644279][ T191] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.644304][ T191] usb 1-1: Product: syz [ 251.644318][ T191] usb 1-1: Manufacturer: syz [ 251.644329][ T191] usb 1-1: SerialNumber: syz [ 251.722052][ T9076] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 252.978502][ T5715] pl2303 3-1:160.187: required endpoints missing [ 252.989819][ T5715] usb 3-1: USB disconnect, device number 23 [ 253.546047][ T191] usb 1-1: USB disconnect, device number 16 [ 253.628849][ T9103] fuse: Bad value for 'user_id' [ 253.628869][ T9103] fuse: Bad value for 'user_id' [ 253.731742][ T9107] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 253.845931][ T9110] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 254.349174][ T1018] usb 4-1: USB disconnect, device number 20 [ 254.831031][ T5715] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 254.851399][ T1018] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 254.980989][ T5715] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 254.982009][ T5715] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 254.982035][ T5715] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 254.982057][ T5715] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 254.982075][ T5715] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 254.982112][ T5715] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.988477][ T5715] usb 2-1: config 0 descriptor?? [ 255.018109][ T1018] usb 4-1: Using ep0 maxpacket: 8 [ 255.054526][ T1018] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 255.132366][ T1018] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 255.132393][ T1018] usb 4-1: config 0 has no interface number 0 [ 255.132433][ T1018] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 255.132454][ T1018] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 255.132475][ T1018] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 255.132496][ T1018] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 255.132519][ T1018] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 255.135387][ T1018] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.135410][ T1018] usb 4-1: Product: syz [ 255.135423][ T1018] usb 4-1: Manufacturer: syz [ 255.135436][ T1018] usb 4-1: SerialNumber: syz [ 255.219490][ T1018] usb 4-1: config 0 descriptor?? [ 255.469733][ T9118] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1116'. [ 255.498419][ T1018] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 255.528378][ T1018] usb 4-1: USB disconnect, device number 21 [ 255.649268][ T5715] plantronics 0003:047F:FFFF.0007: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 255.707211][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.707267][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.728359][ T5715] usb 2-1: USB disconnect, device number 29 [ 255.796711][ T9136] fido_id[9136]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 256.852840][ T9156] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1129'. [ 256.853352][ T9156] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1129'. [ 257.060209][ T191] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 257.521595][ T32] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 257.561017][ T191] usb 1-1: Using ep0 maxpacket: 16 [ 257.563554][ T191] usb 1-1: unable to get BOS descriptor or descriptor too short [ 257.563602][ T191] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 257.564780][ T191] usb 1-1: config 4 has an invalid interface number: 28 but max is 0 [ 257.564801][ T191] usb 1-1: config 4 has no interface number 0 [ 257.564825][ T191] usb 1-1: config 4 interface 28 has no altsetting 0 [ 257.567739][ T191] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.567762][ T191] usb 1-1: Product: syz [ 257.567775][ T191] usb 1-1: Manufacturer: syz [ 257.567788][ T191] usb 1-1: SerialNumber: syz [ 257.594805][ T33] audit: type=1326 audit(1789264520.550:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9165 comm="syz.1.1133" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873499e159 code=0x7ffc0000 [ 257.597861][ T33] audit: type=1326 audit(1789264520.550:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9165 comm="syz.1.1133" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f873499e159 code=0x7ffc0000 [ 257.597909][ T33] audit: type=1326 audit(1789264520.550:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9165 comm="syz.1.1133" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873499e159 code=0x7ffc0000 [ 257.599301][ T33] audit: type=1326 audit(1789264520.550:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9165 comm="syz.1.1133" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873499e159 code=0x7ffc0000 [ 257.599362][ T33] audit: type=1326 audit(1789264520.550:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9165 comm="syz.1.1133" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f873499e159 code=0x7ffc0000 [ 257.599401][ T33] audit: type=1326 audit(1789264520.550:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9165 comm="syz.1.1133" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873499e159 code=0x7ffc0000 [ 257.600956][ T33] audit: type=1326 audit(1789264520.550:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9165 comm="syz.1.1133" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873499e159 code=0x7ffc0000 [ 257.601000][ T33] audit: type=1326 audit(1789264520.550:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9165 comm="syz.1.1133" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f873499e159 code=0x7ffc0000 [ 257.606123][ T33] audit: type=1326 audit(1789264520.560:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9165 comm="syz.1.1133" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873499e159 code=0x7ffc0000 [ 257.606704][ T33] audit: type=1326 audit(1789264520.560:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9165 comm="syz.1.1133" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873499e159 code=0x7ffc0000 [ 257.772233][ T32] usb 4-1: device descriptor read/64, error -71 [ 257.826423][ T5627] Bluetooth: hci1: command 0x0406 tx timeout [ 257.949996][ T9177] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1135'. [ 257.950022][ T9177] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1135'. [ 258.020390][ T32] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 258.150240][ T32] usb 4-1: device descriptor read/64, error -71 [ 258.281707][ T32] usb usb4-port1: attempt power cycle [ 258.296101][ T1018] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 258.461921][ T1018] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 258.537028][ T1018] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 258.537430][ T1018] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 258.537619][ T1018] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 258.538055][ T1018] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 258.539187][ T1018] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.702913][ T32] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 258.781106][ T32] usb 4-1: device descriptor read/8, error -71 [ 258.783130][ T1018] usb 3-1: config 0 descriptor?? [ 259.020520][ T32] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 259.043498][ T32] usb 4-1: device descriptor read/8, error -71 [ 259.150774][ T32] usb usb4-port1: unable to enumerate USB device [ 259.241627][ T1018] hid_parser_main: 20 callbacks suppressed [ 259.241650][ T1018] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 259.241679][ T1018] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 259.241704][ T1018] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 259.241729][ T1018] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 259.241752][ T1018] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 259.241778][ T1018] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 259.241801][ T1018] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 259.241824][ T1018] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 259.241848][ T1018] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 259.241871][ T1018] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 259.250696][ T191] usb 1-1: USB disconnect, device number 17 [ 259.411288][ T5729] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 259.490373][ T32] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 259.799982][ T1018] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 259.835301][ T1018] usb 3-1: USB disconnect, device number 24 [ 259.928649][ T9196] fido_id[9196]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 259.945137][ T32] usb 2-1: Using ep0 maxpacket: 16 [ 259.951927][ T5729] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 259.962844][ T32] usb 2-1: unable to get BOS descriptor or descriptor too short [ 259.962881][ T32] usb 2-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=18.85 [ 259.964486][ T5729] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 259.964500][ T5729] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.964509][ T5729] usb 6-1: config 0 has no interface number 0 [ 259.964531][ T5729] usb 6-1: config 0 interface 133 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 259.964636][ T32] usb 2-1: config 1 has an invalid interface number: 151 but max is 0 [ 259.964646][ T32] usb 2-1: config 1 has no interface number 0 [ 259.964659][ T32] usb 2-1: config 1 interface 151 has no altsetting 0 [ 259.968922][ T5729] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.968937][ T5729] usb 6-1: Product: syz [ 259.968944][ T5729] usb 6-1: Manufacturer: syz [ 259.968951][ T5729] usb 6-1: SerialNumber: syz [ 260.014479][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.014496][ T32] usb 2-1: Product: syz [ 260.014503][ T32] usb 2-1: Manufacturer: syz [ 260.014510][ T32] usb 2-1: SerialNumber: syz [ 260.099126][ T5729] usb 6-1: config 0 descriptor?? [ 260.323556][ T5729] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected [ 260.323783][ T5729] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 82 [ 260.329327][ T5729] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81 [ 260.329436][ T5729] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1 [ 260.329535][ T5729] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2 [ 260.353320][ T9192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.387538][ T5729] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 260.642440][ T9206] warn_alloc: 1 callbacks suppressed [ 260.642459][ T9206] syz.2.1146: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 260.642520][ T9206] CPU: 0 UID: 0 PID: 9206 Comm: syz.2.1146 Tainted: G L syzkaller #0 PREEMPT(full) [ 260.642546][ T9206] Tainted: [L]=SOFTLOCKUP [ 260.642554][ T9206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 260.642566][ T9206] Call Trace: [ 260.642574][ T9206] [ 260.642583][ T9206] dump_stack_lvl+0xe8/0x150 [ 260.642615][ T9206] warn_alloc+0x24d/0x270 [ 260.642638][ T9206] ? stack_depot_save_flags+0x33/0x7f0 [ 260.642678][ T9206] ? __pfx_warn_alloc+0x10/0x10 [ 260.642699][ T9206] ? kasan_save_track+0x4f/0x80 [ 260.642723][ T9206] ? __kasan_kmalloc+0x93/0xb0 [ 260.642749][ T9206] ? xsk_init_queue+0x8a/0xe0 [ 260.642776][ T9206] ? xsk_setsockopt+0x52a/0x960 [ 260.642802][ T9206] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.642834][ T9206] __vmalloc_node_range_noprof+0x12c/0x1690 [ 260.642884][ T9206] ? rcu_is_watching+0x16/0xb0 [ 260.642913][ T9206] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 260.642934][ T9206] ? __kmalloc_cache_noprof+0x31c/0x600 [ 260.642958][ T9206] ? __kmalloc_cache_noprof+0x148/0x600 [ 260.642981][ T9206] ? xskq_create+0x56/0x220 [ 260.643021][ T9206] xskq_create+0x148/0x220 [ 260.643048][ T9206] ? xsk_init_queue+0x8a/0xe0 [ 260.643078][ T9206] xsk_init_queue+0x8a/0xe0 [ 260.643109][ T9206] xsk_setsockopt+0x52a/0x960 [ 260.643139][ T9206] ? __pfx_xsk_setsockopt+0x10/0x10 [ 260.643166][ T9206] ? __pfx_aa_sk_perm+0x10/0x10 [ 260.643205][ T9206] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 260.643232][ T9206] ? __pfx_xsk_setsockopt+0x10/0x10 [ 260.643264][ T9206] do_sock_setsockopt+0x17c/0x1b0 [ 260.643292][ T9206] __x64_sys_setsockopt+0x13d/0x1b0 [ 260.643320][ T9206] do_syscall_64+0x166/0x520 [ 260.643339][ T9206] ? trace_irq_disable+0x3b/0x140 [ 260.643361][ T9206] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.643381][ T9206] ? clear_bhb_loop+0x70/0xc0 [ 260.643408][ T9206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.643427][ T9206] RIP: 0033:0x7f5f4879e159 [ 260.643446][ T9206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.643461][ T9206] RSP: 002b:00007f5f495d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 260.643481][ T9206] RAX: ffffffffffffffda RBX: 00007f5f48a26090 RCX: 00007f5f4879e159 [ 260.643494][ T9206] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 260.643506][ T9206] RBP: 00007f5f4883503b R08: 0000000000000004 R09: 0000000000000000 [ 260.643518][ T9206] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.643530][ T9206] R13: 00007f5f48a26128 R14: 00007f5f48a26090 R15: 00007fff59cdf988 [ 260.643565][ T9206] [ 260.643573][ T9206] Mem-Info: [ 260.643582][ T9206] active_anon:9212 inactive_anon:0 isolated_anon:0 [ 260.643582][ T9206] active_file:0 inactive_file:61384 isolated_file:0 [ 260.643582][ T9206] unevictable:0 dirty:101 writeback:10 [ 260.643582][ T9206] slab_reclaimable:10935 slab_unreclaimable:104887 [ 260.643582][ T9206] mapped:33777 shmem:3380 pagetables:1516 [ 260.643582][ T9206] sec_pagetables:0 bounce:0 [ 260.643582][ T9206] kernel_misc_reclaimable:0 [ 260.643582][ T9206] free:1282297 free_pcp:21204 free_cma:0 [ 260.643630][ T9206] Node 0 active_anon:36848kB inactive_anon:0kB active_file:0kB inactive_file:245328kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:135108kB dirty:400kB writeback:40kB shmem:13520kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12840kB pagetables:5916kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 260.643683][ T9206] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 260.643731][ T9206] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 260.643786][ T9206] lowmem_reserve[]: 0 2486 2486 2486 2486 [ 260.643821][ T9206] Node 0 DMA32 free:1178272kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:36848kB inactive_anon:0kB active_file:0kB inactive_file:245328kB unevictable:0kB writepending:340kB zspages:0kB present:3129332kB managed:2546360kB mlocked:0kB bounce:0kB free_pcp:81680kB local_pcp:71576kB free_cma:0kB [ 260.643877][ T9206] lowmem_reserve[]: 0 0 0 0 0 [ 260.643910][ T9206] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 260.643960][ T9206] lowmem_reserve[]: 0 0 0 0 0 [ 260.644000][ T9206] Node 1 Normal free:3935556kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:3136kB local_pcp:3136kB free_cma:0kB [ 260.644055][ T9206] lowmem_reserve[]: 0 0 0 0 0 [ 260.644089][ T9206] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 260.644201][ T9206] Node 0 DMA32: 256*4kB (UE) 265*8kB (UE) 69*16kB (UE) 78*32kB (UME) 9*64kB (UME) 124*128kB (ME) 38*256kB (UM) 29*512kB (UME) 6*1024kB (ME) 7*2048kB (UME) 271*4096kB (UM) = 1178264kB [ 260.644354][ T9206] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 260.644447][ T9206] Node 1 Normal: 1*4kB (M) 4*8kB (UM) 6*16kB (UM) 12*32kB (UM) 7*64kB (UM) 1*128kB (M) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 959*4096kB (M) = 3935556kB [ 260.644596][ T9206] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 260.644611][ T9206] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 260.644626][ T9206] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 260.644641][ T9206] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 260.644656][ T9206] 64760 total pagecache pages [ 260.644664][ T9206] 0 pages in swap cache [ 260.644670][ T9206] Free swap = 124996kB [ 260.644678][ T9206] Total swap = 124996kB [ 260.644685][ T9206] 2097051 pages RAM [ 260.644692][ T9206] 0 pages HighMem/MovableOnly [ 260.644698][ T9206] 428845 pages reserved [ 260.644706][ T9206] 0 pages cma reserved [ 261.022448][ T1018] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 261.322533][ T1018] usb 4-1: Using ep0 maxpacket: 32 [ 261.329963][ T1018] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 261.333549][ T1018] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.342388][ T1018] usb 4-1: config 0 descriptor?? [ 261.363356][ T9210] fuse: Bad value for 'fd' [ 261.581259][ T1018] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 261.589186][ T1018] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 261.607630][ T1018] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 261.607664][ T1018] usb 4-1: media controller created [ 261.673775][ T1018] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 261.769096][ T5743] usb 6-1: USB disconnect, device number 19 [ 261.784392][ T5743] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 261.787721][ T1018] az6027: usb out operation failed. (-71) [ 261.787915][ T5743] keyspan 6-1:0.133: device disconnected [ 261.788845][ T1018] az6027: usb out operation failed. (-71) [ 261.788859][ T1018] stb0899_attach: Driver disabled by Kconfig [ 261.788867][ T1018] az6027: no front-end attached [ 261.788867][ T1018] [ 261.789382][ T1018] az6027: usb out operation failed. (-71) [ 261.789393][ T1018] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 262.841413][ T1018] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8 [ 262.863741][ T1018] dvb-usb: schedule remote query interval to 400 msecs. [ 262.863763][ T1018] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 262.887478][ T1018] usb 4-1: USB disconnect, device number 26 [ 263.431874][ T1018] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 263.450836][ T32] gspca_main: pac7311-2.14.0 probing 093a:260e [ 263.452968][ T32] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 263.453049][ T32] pac7311 2-1:1.151: probe with driver pac7311 failed with error -71 [ 263.491166][ T32] usb 2-1: USB disconnect, device number 30 [ 264.228634][ T9246] fuse: Bad value for 'fd' [ 264.310215][ T1018] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 264.310379][ T32] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 264.461200][ T1018] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 264.461549][ T32] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 264.462868][ T32] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 264.462892][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 264.463213][ T1018] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 36, changing to 9 [ 264.463235][ T1018] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1160, setting to 1024 [ 264.463257][ T1018] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 264.463291][ T1018] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.464692][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 264.464710][ T32] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 264.464743][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.468639][ T32] usb 2-1: config 0 descriptor?? [ 264.469568][ T1018] usb 4-1: config 0 descriptor?? [ 264.479848][ T9240] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 264.630244][ T5715] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 264.780181][ T5715] usb 1-1: Using ep0 maxpacket: 32 [ 264.780872][ T5715] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 264.781994][ T5715] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 264.782016][ T5715] usb 1-1: config 0 has no interface number 0 [ 264.782056][ T5715] usb 1-1: config 0 interface 12 has no altsetting 0 [ 264.785811][ T5715] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.785835][ T5715] usb 1-1: Product: syz [ 264.785848][ T5715] usb 1-1: Manufacturer: syz [ 264.785861][ T5715] usb 1-1: SerialNumber: syz [ 264.788770][ T5715] usb 1-1: config 0 descriptor?? [ 264.904270][ T32] usbhid 2-1:0.0: can't add hid device: -71 [ 264.904400][ T32] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 264.909843][ T32] usb 2-1: USB disconnect, device number 31 [ 264.979146][ T1018] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 265.113440][ T9266] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 265.438685][ T9252] IPVS: length: 4096 != 24 [ 265.459762][ T5715] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 265.459817][ T5715] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 265.459832][ T5715] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 265.459906][ T5715] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 265.473588][ T5715] usb 1-1: USB disconnect, device number 18 [ 265.545397][ T9281] fuse: Bad value for 'fd' [ 266.431559][ T1018] usb 4-1: reset high-speed USB device number 27 using dummy_hcd [ 266.561288][ T1018] usb 4-1: device descriptor read/64, error -32 [ 266.801298][ T1018] usb 4-1: reset high-speed USB device number 27 using dummy_hcd [ 266.932007][ T1018] usb 4-1: device descriptor read/64, error -32 [ 267.171229][ T1018] usb 4-1: reset high-speed USB device number 27 using dummy_hcd [ 267.198502][ T9311] fuse: Invalid rootmode [ 267.200565][ T1018] usb 4-1: device descriptor read/8, error -32 [ 267.362108][ T5814] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 267.412488][ T9234] raw-gadget.1 gadget.3: failed to queue suspend event [ 267.412577][ T9234] raw-gadget.1 gadget.3: failed to queue disconnect event [ 267.441675][ T1018] usb 4-1: reset high-speed USB device number 27 using dummy_hcd [ 267.527358][ T5814] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 267.534065][ T5814] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 267.534098][ T5814] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 267.534121][ T5814] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 267.534140][ T5814] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 267.534177][ T5814] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.548456][ T5814] usb 6-1: config 0 descriptor?? [ 267.660566][ T1018] usb 4-1: device not accepting address 27, error -71 [ 267.669672][ T5743] usb 4-1: USB disconnect, device number 27 [ 268.006422][ T5814] usbhid 6-1:0.0: can't add hid device: -71 [ 268.006523][ T5814] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 268.017363][ T5814] usb 6-1: USB disconnect, device number 20 [ 268.034395][ T32] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 268.162364][ T32] usb 3-1: device descriptor read/64, error -71 [ 268.400259][ T32] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 268.540264][ T32] usb 3-1: device descriptor read/64, error -71 [ 268.652876][ T32] usb usb3-port1: attempt power cycle [ 268.879514][ T9344] fuse: Bad value for 'fd' [ 268.992977][ T32] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 269.021012][ T32] usb 3-1: device descriptor read/8, error -71 [ 269.280239][ T32] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 269.304626][ T32] usb 3-1: device descriptor read/8, error -71 [ 269.410537][ T32] usb usb3-port1: unable to enumerate USB device [ 270.921348][ T32] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 270.969875][ T9374] fuse: Bad value for 'fd' [ 271.072943][ T32] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 271.076732][ T32] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 271.076761][ T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 271.076774][ T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 271.077296][ T32] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 271.077331][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.154495][ T32] usb 1-1: config 0 descriptor?? [ 271.210250][ T5743] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 271.360190][ T5743] usb 3-1: Using ep0 maxpacket: 32 [ 271.362628][ T5743] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 271.368765][ T5743] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.368789][ T5743] usb 3-1: Product: syz [ 271.368802][ T5743] usb 3-1: Manufacturer: syz [ 271.368815][ T5743] usb 3-1: SerialNumber: syz [ 271.420652][ T5743] usb 3-1: config 0 descriptor?? [ 271.426572][ T5743] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 271.426700][ T5743] dvb-usb: bulk message failed: -22 (4/0) [ 271.426714][ T5743] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 271.427490][ T5743] dvb-usb: bulk message failed: -22 (5/0) [ 271.427504][ T5743] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 271.481582][ T5743] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 271.482660][ T5743] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 271.482715][ T5743] usb 3-1: media controller created [ 271.524992][ T5743] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 271.553049][ T5743] usb 3-1: selecting invalid altsetting 3 [ 271.553070][ T5743] ttusb2: set interface to alts=3 failed [ 271.756039][ T9393] binder_alloc: 9392: binder_alloc_buf, no vma [ 271.781279][ T5743] DVB: Unable to find symbol tda10086_attach() [ 271.781292][ T5743] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 271.782482][ T5743] dvb-usb: bulk message failed: -22 (4/0) [ 271.782500][ T5743] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 271.782606][ T5743] dvb-usb: bulk message failed: -22 (5/0) [ 271.782619][ T5743] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 271.782676][ T5743] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 271.784167][ T32] usbhid 1-1:0.0: can't add hid device: -71 [ 271.784258][ T32] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 271.787922][ T5743] usb 3-1: USB disconnect, device number 29 [ 271.788428][ T32] usb 1-1: USB disconnect, device number 19 [ 272.341064][ T5743] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 272.427204][ T9399] fuse: Invalid rootmode [ 273.003463][ T9422] binder_alloc: 9420: binder_alloc_buf, no vma [ 273.404486][ T9435] fuse: Invalid rootmode [ 273.583873][ T5743] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 274.221132][ T5743] usb 4-1: Using ep0 maxpacket: 32 [ 274.225625][ T5743] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 274.250794][ T5743] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.250820][ T5743] usb 4-1: Product: syz [ 274.250833][ T5743] usb 4-1: Manufacturer: syz [ 274.250846][ T5743] usb 4-1: SerialNumber: syz [ 274.280908][ T5743] usb 4-1: config 0 descriptor?? [ 274.312199][ T5743] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 274.312295][ T5743] dvb-usb: bulk message failed: -22 (4/0) [ 274.312309][ T5743] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 274.312424][ T5743] dvb-usb: bulk message failed: -22 (5/0) [ 274.312436][ T5743] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 274.452232][ T5743] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 274.459434][ T5743] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 274.459490][ T5743] usb 4-1: media controller created [ 274.523609][ T5743] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 274.595338][ T9447] fuse: Bad value for 'rootmode' [ 274.613019][ T5743] usb 4-1: selecting invalid altsetting 3 [ 274.613047][ T5743] ttusb2: set interface to alts=3 failed [ 274.720047][ T9451] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 274.774267][ T5743] DVB: Unable to find symbol tda10086_attach() [ 274.774284][ T5743] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 274.779140][ T5743] dvb-usb: bulk message failed: -22 (4/0) [ 274.779161][ T5743] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 274.779269][ T5743] dvb-usb: bulk message failed: -22 (5/0) [ 274.779281][ T5743] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 274.779339][ T5743] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 274.837206][ T5743] usb 4-1: USB disconnect, device number 28 [ 274.917369][ T9455] binder: BINDER_SET_CONTEXT_MGR already set [ 274.917384][ T9455] binder: 9453:9455 ioctl 4018620d 200000004a80 returned -16 [ 275.002100][ T5743] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 275.219599][ T33] kauditd_printk_skb: 25 callbacks suppressed [ 275.219618][ T33] audit: type=1326 audit(1789264538.160:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9458 comm="syz.3.1242" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c79b9e159 code=0x7ffc0000 [ 275.219658][ T33] audit: type=1326 audit(1789264538.160:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9458 comm="syz.3.1242" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c79b9e159 code=0x7ffc0000 [ 275.293497][ T33] audit: type=1326 audit(1789264538.240:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9458 comm="syz.3.1242" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f3c79b9e159 code=0x7ffc0000 [ 275.293615][ T33] audit: type=1326 audit(1789264538.240:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9458 comm="syz.3.1242" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c79b9e159 code=0x7ffc0000 [ 275.293753][ T33] audit: type=1326 audit(1789264538.240:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9458 comm="syz.3.1242" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c79b9e159 code=0x7ffc0000 [ 275.329040][ T33] audit: type=1326 audit(1789264538.250:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9458 comm="syz.3.1242" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f3c79b9e159 code=0x7ffc0000 [ 275.329092][ T33] audit: type=1326 audit(1789264538.250:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9458 comm="syz.3.1242" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c79b9e159 code=0x7ffc0000 [ 275.329129][ T33] audit: type=1326 audit(1789264538.250:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9458 comm="syz.3.1242" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c79b9e159 code=0x7ffc0000 [ 275.355064][ T33] audit: type=1326 audit(1789264538.280:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9458 comm="syz.3.1242" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3c79b9e159 code=0x7ffc0000 [ 275.355100][ T33] audit: type=1326 audit(1789264538.280:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9458 comm="syz.3.1242" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c79b9e159 code=0x7ffc0000 [ 275.538316][ T9466] fuse: Invalid rootmode [ 276.120215][ T5814] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 276.432487][ T5814] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 276.433505][ T5814] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 276.433533][ T5814] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.433552][ T5814] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 276.433588][ T5814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.436990][ T5814] usb 3-1: config 0 descriptor?? [ 277.231936][ T5814] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 277.354935][ T9496] fuse: Bad value for 'rootmode' [ 277.522734][ T32] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 277.609483][ T9507] io-wq is not configured for unbound workers [ 277.671011][ T32] usb 2-1: Using ep0 maxpacket: 32 [ 277.671773][ T32] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 277.705684][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.705710][ T32] usb 2-1: Product: syz [ 277.705723][ T32] usb 2-1: Manufacturer: syz [ 277.705736][ T32] usb 2-1: SerialNumber: syz [ 277.741380][ T32] usb 2-1: config 0 descriptor?? [ 277.762844][ T32] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 277.762960][ T32] dvb-usb: bulk message failed: -22 (4/0) [ 277.765058][ T32] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 277.765196][ T32] dvb-usb: bulk message failed: -22 (5/0) [ 277.765209][ T32] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 277.823160][ T32] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 277.823840][ T32] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 277.823870][ T32] usb 2-1: media controller created [ 277.870890][ T32] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 277.903069][ T32] usb 2-1: selecting invalid altsetting 3 [ 277.903088][ T32] ttusb2: set interface to alts=3 failed [ 277.992854][ T32] DVB: Unable to find symbol tda10086_attach() [ 277.992867][ T32] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 277.994212][ T32] dvb-usb: bulk message failed: -22 (4/0) [ 277.994225][ T32] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 277.994289][ T32] dvb-usb: bulk message failed: -22 (5/0) [ 277.994296][ T32] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 277.994344][ T32] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 277.997348][ T32] usb 2-1: USB disconnect, device number 32 [ 278.129144][ T32] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 278.239985][ T6234] IPVS: starting estimator thread 0... [ 278.320565][ T9513] IPVS: using max 56 ests per chain, 134400 per kthread [ 279.731192][ T9530] fuse: Bad value for 'rootmode' [ 279.771175][ T1018] usb 3-1: USB disconnect, device number 30 [ 280.233336][ T51] IPVS: starting estimator thread 0... [ 280.259171][ T33] kauditd_printk_skb: 35 callbacks suppressed [ 280.259198][ T33] audit: type=1326 audit(1789264543.200:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9539 comm="syz.2.1271" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4879e159 code=0x7ffc0000 [ 280.259346][ T33] audit: type=1326 audit(1789264543.200:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9539 comm="syz.2.1271" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4879e159 code=0x7ffc0000 [ 280.350590][ T9547] IPVS: using max 56 ests per chain, 134400 per kthread [ 281.428494][ T9562] fuse: Bad value for 'rootmode' [ 282.941175][ T9589] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1287'. [ 283.240831][ T191] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 284.033113][ T9613] warn_alloc: 1 callbacks suppressed [ 284.033134][ T9613] syz.0.1298: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 284.033195][ T9613] CPU: 1 UID: 0 PID: 9613 Comm: syz.0.1298 Tainted: G L syzkaller #0 PREEMPT(full) [ 284.033220][ T9613] Tainted: [L]=SOFTLOCKUP [ 284.033231][ T9613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 284.033242][ T9613] Call Trace: [ 284.033250][ T9613] [ 284.033258][ T9613] dump_stack_lvl+0xe8/0x150 [ 284.033291][ T9613] warn_alloc+0x24d/0x270 [ 284.033314][ T9613] ? stack_depot_save_flags+0x33/0x7f0 [ 284.033348][ T9613] ? __pfx_warn_alloc+0x10/0x10 [ 284.033369][ T9613] ? kasan_save_track+0x4f/0x80 [ 284.033392][ T9613] ? __kasan_kmalloc+0x93/0xb0 [ 284.033418][ T9613] ? xsk_init_queue+0x8a/0xe0 [ 284.033444][ T9613] ? xsk_setsockopt+0x52a/0x960 [ 284.033471][ T9613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.033502][ T9613] __vmalloc_node_range_noprof+0x12c/0x1690 [ 284.033549][ T9613] ? rcu_is_watching+0x16/0xb0 [ 284.033577][ T9613] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 284.033598][ T9613] ? __kmalloc_cache_noprof+0x31c/0x600 [ 284.033623][ T9613] ? __kmalloc_cache_noprof+0x148/0x600 [ 284.033646][ T9613] ? xskq_create+0x56/0x220 [ 284.033678][ T9613] xskq_create+0x148/0x220 [ 284.033706][ T9613] ? xsk_init_queue+0x8a/0xe0 [ 284.033740][ T9613] xsk_init_queue+0x8a/0xe0 [ 284.033771][ T9613] xsk_setsockopt+0x52a/0x960 [ 284.033801][ T9613] ? __pfx_xsk_setsockopt+0x10/0x10 [ 284.033829][ T9613] ? __pfx_aa_sk_perm+0x10/0x10 [ 284.033867][ T9613] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 284.033902][ T9613] ? __pfx_xsk_setsockopt+0x10/0x10 [ 284.033931][ T9613] do_sock_setsockopt+0x17c/0x1b0 [ 284.033959][ T9613] __x64_sys_setsockopt+0x13d/0x1b0 [ 284.033987][ T9613] do_syscall_64+0x166/0x520 [ 284.034006][ T9613] ? trace_irq_disable+0x3b/0x140 [ 284.034026][ T9613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.034046][ T9613] ? clear_bhb_loop+0x70/0xc0 [ 284.034068][ T9613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.034087][ T9613] RIP: 0033:0x7f01f2b9e159 [ 284.034105][ T9613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.034121][ T9613] RSP: 002b:00007f01f3a10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 284.034140][ T9613] RAX: ffffffffffffffda RBX: 00007f01f2e25fa0 RCX: 00007f01f2b9e159 [ 284.034155][ T9613] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 284.034167][ T9613] RBP: 00007f01f2c3503b R08: 0000000000000029 R09: 0000000000000000 [ 284.034179][ T9613] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.034191][ T9613] R13: 00007f01f2e26038 R14: 00007f01f2e25fa0 R15: 00007fffa6913408 [ 284.034221][ T9613] [ 284.034258][ T9613] Mem-Info: [ 284.034272][ T9613] active_anon:15402 inactive_anon:0 isolated_anon:0 [ 284.034272][ T9613] active_file:2048 inactive_file:57818 isolated_file:0 [ 284.034272][ T9613] unevictable:0 dirty:161 writeback:0 [ 284.034272][ T9613] slab_reclaimable:10867 slab_unreclaimable:104535 [ 284.034272][ T9613] mapped:39244 shmem:9548 pagetables:1647 [ 284.034272][ T9613] sec_pagetables:3 bounce:0 [ 284.034272][ T9613] kernel_misc_reclaimable:0 [ 284.034272][ T9613] free:1287672 free_pcp:10932 free_cma:0 [ 284.034320][ T9613] Node 0 active_anon:61608kB inactive_anon:0kB active_file:8192kB inactive_file:231064kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:156976kB dirty:640kB writeback:0kB shmem:38192kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12988kB pagetables:6440kB sec_pagetables:12kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 284.034370][ T9613] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 284.034415][ T9613] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 284.034467][ T9613] lowmem_reserve[]: 0 2486 2486 2486 2486 [ 284.034501][ T9613] Node 0 DMA32 free:1199260kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:61608kB inactive_anon:0kB active_file:8192kB inactive_file:231064kB unevictable:0kB writepending:640kB zspages:0kB present:3129332kB managed:2546360kB mlocked:0kB bounce:0kB free_pcp:41084kB local_pcp:17532kB free_cma:0kB [ 284.039992][ T9613] lowmem_reserve[]: 0 0 0 0 0 [ 284.040034][ T9613] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 284.040171][ T9613] lowmem_reserve[]: 0 0 0 0 0 [ 284.040207][ T9613] Node 1 Normal free:3936068kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:2624kB local_pcp:0kB free_cma:0kB [ 284.040261][ T9613] lowmem_reserve[]: 0 0 0 0 0 [ 284.040295][ T9613] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 284.040431][ T9613] Node 0 DMA32: 1841*4kB (UE) 637*8kB (UE) 176*16kB (UE) 180*32kB (UME) 149*64kB (UME) 50*128kB (UM) 75*256kB (UM) 40*512kB (UME) 10*1024kB (UME) 7*2048kB (UME) 268*4096kB (M) = 1198956kB [ 284.040606][ T9613] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 284.040699][ T9613] Node 1 Normal: 1*4kB (M) 4*8kB (UM) 6*16kB (UM) 12*32kB (UM) 9*64kB (UM) 4*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 959*4096kB (M) = 3936068kB [ 284.040840][ T9613] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 284.040855][ T9613] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 284.040869][ T9613] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 284.040893][ T9613] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 284.040908][ T9613] 69560 total pagecache pages [ 284.040915][ T9613] 0 pages in swap cache [ 284.040921][ T9613] Free swap = 124996kB [ 284.040928][ T9613] Total swap = 124996kB [ 284.040936][ T9613] 2097051 pages RAM [ 284.040943][ T9613] 0 pages HighMem/MovableOnly [ 284.040950][ T9613] 428845 pages reserved [ 284.040956][ T9613] 0 pages cma reserved [ 284.302215][ T191] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 284.321030][ T191] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.321062][ T191] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.321082][ T191] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 284.321119][ T191] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.323833][ T191] usb 6-1: config 0 descriptor?? [ 285.161240][ T5814] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 285.317353][ T5814] usb 1-1: not running at top speed; connect to a high speed hub [ 285.317412][ T5814] usb 1-1: New USB device found, idVendor=249c, idProduct=9008, bcdDevice= 0.40 [ 285.320865][ T5814] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 214, changing to 4 [ 285.320908][ T5814] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 122, changing to 4 [ 285.367041][ T5814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.367069][ T5814] usb 1-1: Product: 慸벞⁃䅪댏邁⹍〼蓩ꩥ按鸁婷淄〼鏎흜ꇸ讼䔠鶊髚⽷暖妀땲墾춟棻᷈檉џ맄犤몄㝀驘昴Ꮙ䝅䗛쳿˖쯲Ꝛﳨ焍臜톣作滈蚘⻑遇똊▁栲렿䞢恳฻፮뗶埖泹컱ꠀ傠慔䡜⟽㢧੥똋鴖ꇧᲜ㐥欰禔筂脹桤ꆓ곣ⱑꗵ闈⟃᙮째ꮻ銇냓䰕ˀꏛꗿঝ櫐 [ 285.367096][ T5814] usb 1-1: Manufacturer: 猋뱲䀧ᵽ꭯넓槑裏蝾ꠉ⪓䪒뮣典䯑퉷潟艐畎ᔏ蒁왖댍썏䯣䟜歇抖Ԩ胏䶘רּ壓뺻峙뷍✇狁ꀍ擮Е拾˪辝⻳驯휠ⷡව袢痾窍ተ鰾䩷建荎དྷ刺⪗滙ৢ㍗鎪̌먺鱓泜쁍ᰂ诋雦剮삘 [ 285.367130][ T5814] usb 1-1: SerialNumber: Њ [ 285.622659][ T9613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.628118][ T9613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.688404][ T9613] hsr_slave_0: left promiscuous mode [ 285.693146][ T9613] hsr_slave_1: left promiscuous mode [ 286.730044][ T191] usbhid 6-1:0.0: can't add hid device: -71 [ 286.730233][ T191] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 286.734490][ T191] usb 6-1: USB disconnect, device number 21 [ 286.775538][ T5814] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 287.548199][ T5814] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 287.551742][ T5814] usb 1-1: can't set first interface for hiFace device. [ 287.551783][ T5814] snd-usb-hiface 1-1:1.0: probe with driver snd-usb-hiface failed with error -5 [ 287.560899][ T5814] usb 1-1: can't set first interface for hiFace device. [ 287.560923][ T5814] snd-usb-hiface 1-1:1.1: probe with driver snd-usb-hiface failed with error -5 [ 287.568166][ T5814] usb 1-1: can't set first interface for hiFace device. [ 287.568191][ T5814] snd-usb-hiface 1-1:1.2: probe with driver snd-usb-hiface failed with error -5 [ 287.578947][ T5814] usb 1-1: USB disconnect, device number 20 [ 287.670648][ T6376] udevd[6376]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 287.771468][ T9670] ip_tables: iptables: counters copy to user failed while replacing table [ 287.891375][ T32] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 288.051937][ T32] usb 3-1: Using ep0 maxpacket: 8 [ 288.052728][ T32] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 288.054006][ T32] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 288.054056][ T32] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 288.054076][ T32] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 288.054097][ T32] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 288.054118][ T32] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 288.054150][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.210370][ T1018] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 288.227465][ T9683] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1322'. [ 288.304425][ T32] usb 3-1: GET_CAPABILITIES returned 0 [ 288.304455][ T32] usbtmc 3-1:16.0: can't read capabilities [ 288.350239][ T1018] usb 4-1: device descriptor read/64, error -71 [ 288.490340][ T5807] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 288.515287][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 288.515325][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 288.517809][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 288.517842][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 288.517866][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 288.517890][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 288.517914][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 288.517938][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 288.518102][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 288.518129][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 288.518154][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 288.518177][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 288.518200][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 288.518223][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 288.518247][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 288.519959][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 288.532261][ T5743] usb 3-1: USB disconnect, device number 31 [ 288.630257][ T1018] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 288.661316][ T5807] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 288.663023][ T5807] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.663051][ T5807] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.663071][ T5807] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 288.663106][ T5807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.668822][ T5807] usb 1-1: config 0 descriptor?? [ 288.770820][ T1018] usb 4-1: device descriptor read/64, error -71 [ 288.882495][ T1018] usb usb4-port1: attempt power cycle [ 289.087584][ T5807] plantronics 0003:047F:FFFF.000B: reserved main item tag 0xd [ 289.148989][ T5807] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 289.225004][ T1018] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 289.243793][ T1018] usb 4-1: device descriptor read/8, error -71 [ 289.480204][ T1018] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 289.508520][ T1018] usb 4-1: device descriptor read/8, error -71 [ 289.612986][ T1018] usb usb4-port1: unable to enumerate USB device [ 289.718344][ T9716] input: syz1 as /devices/virtual/input/input10 [ 290.400879][ T1018] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 290.531041][ T5743] usb 1-1: reset high-speed USB device number 21 using dummy_hcd [ 290.557697][ T1018] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 290.561339][ T1018] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 36, changing to 9 [ 290.561367][ T1018] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1160, setting to 1024 [ 290.561390][ T1018] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 290.561448][ T1018] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.572862][ T1018] usb 6-1: config 0 descriptor?? [ 290.575156][ T9730] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 291.014438][ T1018] plantronics 0003:047F:FFFF.000C: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 291.991463][ T32] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 292.116780][ T5807] usb 1-1: USB disconnect, device number 21 [ 292.141159][ T32] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 292.142859][ T32] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.142903][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 292.142928][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 292.142950][ T32] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 292.148103][ T32] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 292.148128][ T32] usb 4-1: Manufacturer: syz [ 292.164717][ T32] usb 4-1: config 0 descriptor?? [ 292.315313][ T9784] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1359'. [ 292.531918][ T32] rc_core: IR keymap rc-hauppauge not found [ 292.531936][ T32] Registered IR keymap rc-empty [ 292.533855][ T32] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 292.559474][ T32] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 292.571894][ T32] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 292.574113][ T32] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input11 [ 292.578875][ T5807] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 292.606485][ T32] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 292.620397][ T32] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 292.640681][ T32] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 292.642372][ T9789] syzkaller0: entered promiscuous mode [ 292.642394][ T9789] syzkaller0: entered allmulticast mode [ 292.660515][ T32] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 292.680942][ T32] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 292.702663][ T32] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 292.721746][ T32] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 292.731120][ T5807] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 292.732279][ T5807] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.732304][ T5807] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.732323][ T5807] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 292.732358][ T5807] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.739022][ T5807] usb 3-1: config 0 descriptor?? [ 292.743265][ T32] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 292.760867][ T32] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 292.782419][ T32] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 292.805593][ T32] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 292.805617][ T32] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 293.044436][ T191] usb 6-1: USB disconnect, device number 22 [ 293.163050][ T5807] plantronics 0003:047F:FFFF.000D: reserved main item tag 0xd [ 293.189825][ T5807] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 294.667077][ T5807] usb 3-1: reset high-speed USB device number 32 using dummy_hcd [ 294.833480][ T1018] usb 4-1: USB disconnect, device number 33 [ 295.313195][ T9823] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.411833][ T9823] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 295.411860][ T9823] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 295.414779][ T9823] vhci_hcd vhci_hcd.0: Device attached [ 295.419983][ T9823] vhci_hcd vhci_hcd.0: port 0 already used [ 295.667166][ T9824] vhci_hcd: connection closed [ 295.680052][ T1488] vhci_hcd vhci_hcd.0: stop threads [ 295.680674][ T1488] vhci_hcd vhci_hcd.0: release socket [ 295.683262][ T1488] vhci_hcd vhci_hcd.0: disconnect device [ 295.730299][ T191] usb 34-1: enqueue for inactive port 0 [ 296.195615][ T5743] usb 3-1: USB disconnect, device number 32 [ 296.233679][ T191] usb usb34-port1: attempt power cycle [ 296.501370][ T5807] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 296.503469][ T9850] syzkaller0: entered promiscuous mode [ 296.503492][ T9850] syzkaller0: entered allmulticast mode [ 296.655534][ T5807] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 296.658481][ T5807] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.658513][ T5807] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 296.658526][ T5807] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 296.658540][ T5807] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 296.662059][ T5807] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 296.662106][ T5807] usb 6-1: Manufacturer: syz [ 296.673630][ T5807] usb 6-1: config 0 descriptor?? [ 296.816209][ T191] usb usb34-port1: unable to enumerate USB device [ 296.971521][ T5807] rc_core: IR keymap rc-hauppauge not found [ 296.971542][ T5807] Registered IR keymap rc-empty [ 296.971913][ T5807] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 296.993418][ T5807] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 297.014758][ T5807] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 297.018121][ T5807] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input13 [ 297.060271][ T5807] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 297.085245][ T5807] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 297.100395][ T5807] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 297.120327][ T5807] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 297.140653][ T5807] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 297.160385][ T5807] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 297.181081][ T5807] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 297.200370][ T5807] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 297.224661][ T5807] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 297.241332][ T5807] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 297.261980][ T5807] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 297.261996][ T5807] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 297.404628][ T9862] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1381'. [ 297.669069][ T191] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 297.671134][ T9868] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1383'. [ 297.847847][ T191] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 297.877996][ T191] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 297.878022][ T191] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 297.878035][ T191] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 297.878045][ T191] usb 3-1: config 1 has no interface number 1 [ 297.878067][ T191] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 297.878087][ T191] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 297.938401][ T191] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.938426][ T191] usb 3-1: Product: syz [ 297.938438][ T191] usb 3-1: Manufacturer: syz [ 297.938450][ T191] usb 3-1: SerialNumber: syz [ 297.970236][ T5807] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 298.121118][ T5807] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 298.122268][ T5807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.122316][ T5807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.122406][ T5807] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 298.122469][ T5807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.148852][ T5807] usb 4-1: config 0 descriptor?? [ 298.211071][ T191] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 298.211131][ T191] usb 3-1: MIDIStreaming interface descriptor not found [ 298.314812][ T191] usb 3-1: USB disconnect, device number 33 [ 298.425352][ T5994] udevd[5994]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 298.568929][ T5807] plantronics 0003:047F:FFFF.000E: reserved main item tag 0xd [ 298.582313][ T5807] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 299.270802][ T1018] usb 6-1: USB disconnect, device number 23 [ 300.015391][ T1018] usb 4-1: reset high-speed USB device number 34 using dummy_hcd [ 300.988438][ T9898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1390'. [ 301.105100][ T9902] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 301.616150][ T5743] usb 4-1: USB disconnect, device number 34 [ 301.650722][ T10] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 301.814648][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 301.816731][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.816779][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 301.816804][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 301.816825][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 301.818910][ T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 301.818933][ T10] usb 2-1: Manufacturer: syz [ 301.852443][ T5743] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 301.912911][ T10] usb 2-1: config 0 descriptor?? [ 302.004718][ T5743] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 302.017812][ T5743] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 302.017842][ T5743] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.017862][ T5743] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 302.017900][ T5743] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.025115][ T5743] usb 4-1: config 0 descriptor?? [ 302.200162][ T10] rc_core: IR keymap rc-hauppauge not found [ 302.200181][ T10] Registered IR keymap rc-empty [ 302.202815][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 302.230818][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 302.251578][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 302.274508][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input15 [ 302.298983][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 302.313947][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 302.330413][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 302.350490][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 302.370427][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 302.390573][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 302.410827][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 302.431628][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 302.450869][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 302.480909][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 302.509915][ T5743] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 302.514749][ T10] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 302.514793][ T10] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 302.670262][ T5743] usb 4-1: USB disconnect, device number 35 [ 303.216975][ T9948] netlink: 'syz.0.1407': attribute type 11 has an invalid length. [ 303.660306][ T5814] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 303.832925][ T5814] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 303.834058][ T5814] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 303.834084][ T5814] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.834101][ T5814] usb 1-1: config 0 has no interface number 0 [ 303.834135][ T5814] usb 1-1: config 0 interface 133 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 303.836501][ T5814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.836526][ T5814] usb 1-1: Product: syz [ 303.836538][ T5814] usb 1-1: Manufacturer: syz [ 303.836551][ T5814] usb 1-1: SerialNumber: syz [ 303.841449][ T5814] usb 1-1: config 0 descriptor?? [ 304.054758][ T5814] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected [ 304.054981][ T5814] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 82 [ 304.063245][ T5814] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81 [ 304.063330][ T5814] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1 [ 304.063426][ T5814] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 304.078446][ T5814] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 304.463162][ T5729] usb 2-1: USB disconnect, device number 33 [ 304.971119][ T5814] usb 1-1: USB disconnect, device number 22 [ 304.996181][ T5814] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 305.008105][ T5814] keyspan 1-1:0.133: device disconnected [ 305.162639][ T9990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1422'. [ 305.485529][ T9999] input: syz1 as /devices/virtual/input/input16 [ 305.500179][ T5715] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 305.662988][ T5715] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 305.666458][ T5715] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 305.666490][ T5715] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 305.666511][ T5715] usb 4-1: config 1 interface 0 has no altsetting 0 [ 305.683846][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.683871][ T5715] usb 4-1: Product: syz [ 305.683894][ T5715] usb 4-1: Manufacturer: syz [ 305.683907][ T5715] usb 4-1: SerialNumber: syz [ 305.744214][ T9986] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 305.744347][ T9986] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 305.970495][ T9986] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1421'. [ 306.136167][ T5715] rtl8150 4-1:1.0: couldn't reset the device [ 306.136428][ T5715] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 306.168934][ T5715] usb 4-1: USB disconnect, device number 36 [ 306.572715][T10019] loop8: detected capacity change from 0 to 16384 [ 307.358410][T10035] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 307.892771][ T5743] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 308.040203][ T5743] usb 4-1: Using ep0 maxpacket: 16 [ 308.042399][ T5743] usb 4-1: unable to get BOS descriptor or descriptor too short [ 308.042449][ T5743] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 308.043403][ T5743] usb 4-1: config 127 has an invalid interface number: 124 but max is 0 [ 308.043426][ T5743] usb 4-1: config 127 has no interface number 0 [ 308.043452][ T5743] usb 4-1: config 127 interface 124 has no altsetting 0 [ 308.045416][ T5743] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.045441][ T5743] usb 4-1: Product: syz [ 308.045453][ T5743] usb 4-1: Manufacturer: syz [ 308.045466][ T5743] usb 4-1: SerialNumber: syz [ 308.220178][ T191] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 308.381726][ T191] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 308.385954][ T191] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 308.385986][ T191] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.386005][ T191] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 308.386043][ T191] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.403496][ T191] usb 1-1: config 0 descriptor?? [ 308.644129][ T5715] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 308.800848][ T5715] usb 2-1: Using ep0 maxpacket: 16 [ 308.803071][ T5715] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 308.804201][ T5715] usb 2-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 32 [ 308.804221][ T5715] usb 2-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 308.804233][ T5715] usb 2-1: config 1 interface 0 has no altsetting 0 [ 308.811785][ T5715] usb 2-1: string descriptor 0 read error: -22 [ 308.812001][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.829861][T10052] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 308.878469][ T191] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 309.020907][ T5743] usb 4-1: reset high-speed USB device number 37 using dummy_hcd [ 309.027924][ T191] usb 1-1: USB disconnect, device number 23 [ 309.093245][ T33] audit: type=1326 audit(1789264572.040:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10051 comm="syz.1.1448" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f873499e159 code=0x0 [ 309.096721][ T5729] usb 2-1: USB disconnect, device number 34 [ 309.173224][ T5743] usb 4-1: unable to get BOS descriptor or descriptor too short [ 309.330248][ T5715] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 309.473289][ T5715] usb 6-1: device descriptor read/64, error -71 [ 309.627315][ T191] usb 4-1: USB disconnect, device number 37 [ 309.710668][ T5715] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 309.840378][ T5715] usb 6-1: device descriptor read/64, error -71 [ 309.941192][ T10] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 309.959221][ T5715] usb usb6-port1: attempt power cycle [ 310.102345][ T10] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 310.103226][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 310.103243][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 310.103254][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 310.104815][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.104837][ T10] usb 1-1: Product: syz [ 310.104850][ T10] usb 1-1: Manufacturer: syz [ 310.104862][ T10] usb 1-1: SerialNumber: syz [ 310.106832][ T10] usb 1-1: config 0 descriptor?? [ 310.300369][ T5715] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 310.320969][ T5715] usb 6-1: device descriptor read/8, error -71 [ 310.324828][ T10] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 310.538785][ T10] usb 1-1: USB disconnect, device number 24 [ 310.560205][ T5715] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 310.580999][ T5715] usb 6-1: device descriptor read/8, error -71 [ 310.645294][T10083] dyndbg: expected <4096 bytes into control [ 310.645905][T10083] binder: 10082:10083 ioctl c0306201 0 returned -14 [ 310.646955][T10083] rdma_rxe: rxe_newlink: failed to add lo [ 311.150263][ T5743] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 311.300148][ T5743] usb 4-1: Using ep0 maxpacket: 8 [ 311.300994][ T5743] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 311.346209][ T5743] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 311.346237][ T5743] usb 4-1: config 0 has no interface number 0 [ 311.346275][ T5743] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 311.346400][ T5743] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 311.346422][ T5743] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 311.346445][ T5743] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 311.346468][ T5743] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 311.380410][ T5743] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.380436][ T5743] usb 4-1: Product: syz [ 311.380449][ T5743] usb 4-1: Manufacturer: syz [ 311.380462][ T5743] usb 4-1: SerialNumber: syz [ 311.469522][ T5743] usb 4-1: config 0 descriptor?? [ 311.589100][ T5715] usb usb6-port1: unable to enumerate USB device [ 311.696180][T10086] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1460'. [ 311.753054][ T5729] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 311.753552][ T5743] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 311.785664][ T5743] usb 4-1: USB disconnect, device number 38 [ 311.900997][ T5729] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 311.902155][ T5729] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 311.902367][ T5729] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.902389][ T5729] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 311.902425][ T5729] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.907675][ T5729] usb 3-1: config 0 descriptor?? [ 312.320295][T10113] dyndbg: expected <4096 bytes into control [ 312.328914][T10113] sz1: rxe_newlink: already configured on lo [ 312.452218][ T5729] usbhid 3-1:0.0: can't add hid device: -71 [ 312.488928][ T5729] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 312.730781][T10107] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1469'. [ 312.730809][T10107] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1469'. [ 312.730824][T10107] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1469'. [ 312.731073][ T5729] usb 3-1: USB disconnect, device number 34 [ 312.813443][T10107] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 313.417004][T10123] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 313.771229][T10120] fuse: Bad value for 'fd' [ 314.362694][T10150] dyndbg: expected <4096 bytes into control [ 314.371406][T10150] rdma_rxe: rxe_newlink: failed to add lo [ 315.097492][T10154] fuse: Bad value for 'fd' [ 315.351790][ T6626] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 315.445492][T10161] futex_wake_op: syz.2.1492 tries to shift op by -1; fix this program [ 315.762762][ T32] hid_parser_main: 5 callbacks suppressed [ 315.762788][ T32] asus 0018:0B05:0101.0011: unknown main item tag 0x0 [ 315.762816][ T32] asus 0018:0B05:0101.0011: unknown main item tag 0x0 [ 315.762839][ T32] asus 0018:0B05:0101.0011: unknown main item tag 0x0 [ 315.762863][ T32] asus 0018:0B05:0101.0011: unknown main item tag 0x0 [ 315.762886][ T32] asus 0018:0B05:0101.0011: unknown main item tag 0x0 [ 315.762909][ T32] asus 0018:0B05:0101.0011: unknown main item tag 0x0 [ 315.762932][ T32] asus 0018:0B05:0101.0011: unknown main item tag 0x0 [ 315.861359][ T32] asus 0018:0B05:0101.0011: unknown main item tag 0x0 [ 315.861395][ T32] asus 0018:0B05:0101.0011: unknown main item tag 0x0 [ 315.861415][ T32] asus 0018:0B05:0101.0011: unknown main item tag 0x0 [ 315.905020][ T6626] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 315.906471][ T6626] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 315.906501][ T6626] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.906519][ T6626] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 315.906997][ T6626] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.980862][ T32] asus 0018:0B05:0101.0011: hidraw0: I2C HID v0.00 Device [syz1] on syz0 [ 316.025973][ T6626] usb 4-1: config 0 descriptor?? [ 316.114154][T10179] openvswitch: netlink: Flow actions attr not present in new flow. [ 316.218052][T10178] fido_id[10178]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 316.510354][T10186] dyndbg: expected <4096 bytes into control [ 316.517540][T10186] rdma_rxe: rxe_newlink: failed to add lo [ 317.122407][ T32] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 317.145826][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.145885][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.282108][ T32] usb 3-1: Using ep0 maxpacket: 32 [ 317.296656][ T32] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 317.317197][ T32] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 317.317225][ T32] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 317.317242][ T32] usb 3-1: config 0 has no interface number 0 [ 317.317281][ T32] usb 3-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 317.364336][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.364363][ T32] usb 3-1: Product: syz [ 317.364377][ T32] usb 3-1: Manufacturer: syz [ 317.364390][ T32] usb 3-1: SerialNumber: syz [ 317.400592][ T6626] usbhid 4-1:0.0: can't add hid device: -71 [ 317.400697][ T6626] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 317.402499][ T32] usb 3-1: config 0 descriptor?? [ 317.403218][ T6626] usb 4-1: USB disconnect, device number 39 [ 317.468341][ T32] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 317.468601][ T32] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -22 [ 317.470049][T10194] fuse: Bad value for 'fd' [ 317.709059][ T32] usb 3-1: USB disconnect, device number 35 [ 318.184144][T10212] openvswitch: netlink: Flow actions attr not present in new flow. [ 318.441100][T10220] dyndbg: expected <4096 bytes into control [ 318.442499][T10220] binder: 10215:10220 ioctl c0306201 0 returned -14 [ 318.449739][T10220] rdma_rxe: rxe_newlink: failed to add lo [ 319.058582][T10229] fuse: Unknown parameter '0x0000000000000004' [ 319.550709][ T32] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 319.701384][ T32] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 319.703984][ T32] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 319.709555][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 319.709705][ T32] usb 3-1: SerialNumber: syz [ 319.774907][ T32] hub 3-1:1.0: bad descriptor, ignoring hub [ 319.774936][ T32] hub 3-1:1.0: probe with driver hub failed with error -5 [ 320.200414][ T5729] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 320.258506][T10254] dyndbg: expected <4096 bytes into control [ 320.260930][T10254] binder: 10251:10254 ioctl c0306201 0 returned -14 [ 320.269567][T10254] sz1: rxe_newlink: already configured on lo [ 320.380561][ T5729] usb 6-1: Using ep0 maxpacket: 32 [ 320.386560][ T5729] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 320.445837][ T5729] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 320.445937][ T5729] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.445980][ T5729] usb 6-1: config 0 has no interface number 0 [ 320.446668][ T5729] usb 6-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 320.545732][ T5729] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.546049][ T5729] usb 6-1: Product: syz [ 320.546283][ T5729] usb 6-1: Manufacturer: syz [ 320.547491][ T5729] usb 6-1: SerialNumber: syz [ 320.766281][ T5729] usb 6-1: config 0 descriptor?? [ 320.781080][ T5729] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 320.785631][ T5729] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -22 [ 321.102850][ T5729] usb 6-1: USB disconnect, device number 28 [ 321.813814][ T32] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 321.861676][ T32] usb 3-1: USB disconnect, device number 36 [ 322.616922][T10294] syzkaller1: entered promiscuous mode [ 322.616938][T10294] syzkaller1: entered allmulticast mode [ 322.880405][ T6626] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 323.040204][ T6626] usb 1-1: Using ep0 maxpacket: 32 [ 323.040939][ T6626] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 323.044560][ T6626] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 323.044593][ T6626] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.044602][ T6626] usb 1-1: config 0 has no interface number 0 [ 323.044626][ T6626] usb 1-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 323.046698][ T6626] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.046723][ T6626] usb 1-1: Product: syz [ 323.046736][ T6626] usb 1-1: Manufacturer: syz [ 323.046748][ T6626] usb 1-1: SerialNumber: syz [ 323.073170][ T6626] usb 1-1: config 0 descriptor?? [ 323.097835][ T6626] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 323.098056][ T6626] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 323.331492][ T6626] usb 1-1: USB disconnect, device number 25 [ 323.879463][T10333] netlink: 'syz.3.1547': attribute type 2 has an invalid length. [ 323.879488][T10333] netlink: 'syz.3.1547': attribute type 2 has an invalid length. [ 323.880901][ T6626] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 324.034133][ T6626] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 324.042391][ T6626] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 324.042417][ T6626] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.042433][ T6626] usb 3-1: config 0 has no interface number 0 [ 324.042467][ T6626] usb 3-1: config 0 interface 133 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 324.047674][ T6626] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.047698][ T6626] usb 3-1: Product: syz [ 324.047710][ T6626] usb 3-1: Manufacturer: syz [ 324.047722][ T6626] usb 3-1: SerialNumber: syz [ 324.055476][ T6626] usb 3-1: config 0 descriptor?? [ 324.098488][T10341] netlink: 'syz.3.1550': attribute type 1 has an invalid length. [ 324.262213][T10341] bond1: entered promiscuous mode [ 324.266262][T10341] 8021q: adding VLAN 0 to HW filter on device bond1 [ 324.268862][ T6626] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 324.279334][ T6626] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 82 [ 324.280888][ T6626] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 324.287622][ T6626] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 324.287713][ T6626] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 324.292783][ T6626] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 324.385764][T10348] 8021q: adding VLAN 0 to HW filter on device bond1 [ 324.386397][T10348] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 324.386419][T10348] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 324.422240][T10348] bond1: (slave ip6gre1): making interface the new active one [ 324.422265][T10348] ip6gre1: entered promiscuous mode [ 324.508477][ T10] usb 3-1: USB disconnect, device number 37 [ 324.527659][T10348] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 324.575254][ T10] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 324.577548][ T10] keyspan 3-1:0.133: device disconnected [ 325.091318][T10370] dyndbg: expected <4096 bytes into control [ 325.092608][T10370] binder: 10366:10370 ioctl c0306201 0 returned -14 [ 325.101512][T10370] rdma_rxe: rxe_newlink: failed to add lo [ 325.830248][ T5715] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 325.981761][ T5715] usb 4-1: Using ep0 maxpacket: 32 [ 325.984563][ T5715] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 325.987664][ T5715] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 325.987681][ T5715] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.987690][ T5715] usb 4-1: config 0 has no interface number 0 [ 325.987712][ T5715] usb 4-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 325.993370][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.993395][ T5715] usb 4-1: Product: syz [ 325.993407][ T5715] usb 4-1: Manufacturer: syz [ 325.993420][ T5715] usb 4-1: SerialNumber: syz [ 326.008492][ T5715] usb 4-1: config 0 descriptor?? [ 326.027154][ T5715] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 326.027364][ T5715] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 326.268113][T10378] BUG: using smp_processor_id() in preemptible [00000000] code: syz.2.1564/10378 [ 326.268139][T10378] caller is ieee80211_tx_control_port+0xac7/0x1100 [ 326.268188][T10378] CPU: 1 UID: 0 PID: 10378 Comm: syz.2.1564 Tainted: G L syzkaller #0 PREEMPT(full) [ 326.268215][T10378] Tainted: [L]=SOFTLOCKUP [ 326.268223][T10378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 326.268239][T10378] Call Trace: [ 326.268251][T10378] [ 326.268259][T10378] dump_stack_lvl+0xe8/0x150 [ 326.268290][T10378] check_preemption_disabled+0xcd/0xd0 [ 326.268316][T10378] ieee80211_tx_control_port+0xac7/0x1100 [ 326.268338][T10378] ? ieee80211_tx_control_port+0x71b/0x1100 [ 326.268365][T10378] nl80211_tx_control_port+0x624/0x960 [ 326.268401][T10378] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 326.268428][T10378] ? nl80211_pre_doit+0x53d/0x890 [ 326.268465][T10378] genl_family_rcv_msg_doit+0x233/0x340 [ 326.268494][T10378] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 326.268528][T10378] ? bpf_lsm_capable+0x9/0x20 [ 326.268548][T10378] ? security_capable+0x7e/0x2c0 [ 326.268583][T10378] genl_rcv_msg+0x614/0x7a0 [ 326.268609][T10378] ? __pfx_genl_rcv_msg+0x10/0x10 [ 326.268627][T10378] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 326.268649][T10378] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 326.268680][T10378] ? __pfx_nl80211_post_doit+0x10/0x10 [ 326.268717][T10378] netlink_rcv_skb+0x226/0x4a0 [ 326.268744][T10378] ? __pfx_genl_rcv_msg+0x10/0x10 [ 326.268766][T10378] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 326.268807][T10378] ? down_read+0x2b9/0x320 [ 326.268839][T10378] genl_rcv+0x28/0x40 [ 326.268856][T10378] netlink_unicast+0x7bd/0x940 [ 326.268890][T10378] netlink_sendmsg+0x7c3/0xae0 [ 326.268922][T10378] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.268956][T10378] ? apparmor_socket_sendmsg+0x98/0x360 [ 326.268986][T10378] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.269011][T10378] sock_sendmsg_nosec+0x13a/0x180 [ 326.269043][T10378] ____sys_sendmsg+0x54e/0x850 [ 326.269071][T10378] ? __pfx_____sys_sendmsg+0x10/0x10 [ 326.269103][T10378] ? import_iovec+0x73/0xa0 [ 326.269124][T10378] ___sys_sendmsg+0x2a5/0x360 [ 326.269146][T10378] ? __lock_acquire+0x747/0x2de0 [ 326.269172][T10378] ? __pfx____sys_sendmsg+0x10/0x10 [ 326.269199][T10378] ? futex_wait+0x2a2/0x390 [ 326.269247][T10378] ? __fget_files+0x2a/0x420 [ 326.269266][T10378] ? __fget_files+0x3a2/0x420 [ 326.269296][T10378] __x64_sys_sendmsg+0x1b1/0x290 [ 326.269322][T10378] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 326.269368][T10378] do_syscall_64+0x166/0x520 [ 326.269387][T10378] ? trace_irq_disable+0x3b/0x140 [ 326.269408][T10378] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.269427][T10378] ? clear_bhb_loop+0x70/0xc0 [ 326.269461][T10378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.269481][T10378] RIP: 0033:0x7f5f4879e159 [ 326.269499][T10378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.269514][T10378] RSP: 002b:00007f5f495f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 326.269535][T10378] RAX: ffffffffffffffda RBX: 00007f5f48a25fa0 RCX: 00007f5f4879e159 [ 326.269549][T10378] RDX: 0000000000000800 RSI: 0000200000003700 RDI: 0000000000000003 [ 326.269561][T10378] RBP: 00007f5f4883503b R08: 0000000000000000 R09: 0000000000000000 [ 326.269573][T10378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 326.269584][T10378] R13: 00007f5f48a26038 R14: 00007f5f48a25fa0 R15: 00007fff59cdf988 [ 326.269615][T10378] [ 327.360197][ T5715] usb 4-1: USB disconnect, device number 40