last executing test programs: 44.576131538s ago: executing program 3 (id=1519): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000540)="8879980c666c1879782da85041d1296824f0fa0ec9432c970ad0e59485c15cd3f6c8fe0e9b6bca3589fffc8f2ed694abab2f88e4ecd8976dad", 0x39}], 0x1}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @mcast1, 0x9}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}) syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r6) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) fsetxattr$trusted_overlay_redirect(r5, &(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', 0x8, 0x1) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) fsopen(0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) 40.348067712s ago: executing program 3 (id=1562): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 40.25632078s ago: executing program 3 (id=1563): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c000280080001"], 0x44}}, 0x4000050) 40.253699505s ago: executing program 3 (id=1564): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000540)="8879980c666c1879782da85041d1296824f0fa0ec9432c970ad0e59485c15cd3f6c8fe0e9b6bca3589fffc8f2ed694abab2f88e4ecd8976dad", 0x39}], 0x1}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3d0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @mcast1, 0x9}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r6) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xa8, r9, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80c}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) fsetxattr$trusted_overlay_redirect(r5, &(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', 0x8, 0x1) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) fsopen(0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) 34.471703334s ago: executing program 3 (id=1622): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf25170000005c00068014000300322d73352e2d000000400000004363844400040067636d2861657329000000000000000000000000000000000000000000000000a17c00"], 0x70}, 0x1, 0x0, 0x0, 0x806}, 0x0) 32.644649603s ago: executing program 3 (id=1641): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000540)="8879980c666c1879782da85041d1296824f0fa0ec9432c970ad0e59485c15cd3f6c8fe0e9b6bca3589fffc8f2ed694abab2f88e4ecd8976dad", 0x39}], 0x1}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4e0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @mcast1, 0x9}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r6) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xa8, r9, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80c}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) fsetxattr$trusted_overlay_redirect(r5, &(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', 0x8, 0x1) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) fsopen(0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) 17.459569093s ago: executing program 32 (id=1641): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000540)="8879980c666c1879782da85041d1296824f0fa0ec9432c970ad0e59485c15cd3f6c8fe0e9b6bca3589fffc8f2ed694abab2f88e4ecd8976dad", 0x39}], 0x1}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4e0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @mcast1, 0x9}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r6) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xa8, r9, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80c}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) fsetxattr$trusted_overlay_redirect(r5, &(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', 0x8, 0x1) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) fsopen(0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) 5.428858555s ago: executing program 1 (id=1808): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000540)="8879980c666c1879782da85041d1296824f0fa0ec9432c970ad0e59485c15cd3f6c8fe0e9b6bca3589fffc8f2ed694abab2f88e4ecd8976dad", 0x39}], 0x1}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @mcast1, 0x9}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r6) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x84, r9, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80c}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) fsetxattr$trusted_overlay_redirect(r5, &(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', 0x8, 0x1) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) fsopen(0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) 5.003791513s ago: executing program 4 (id=1811): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') syz_usb_connect(0x0, 0x24, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x1b5}) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac-aes-neon\x00'}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="21050000"], 0x14}}, 0x0) io_uring_enter(r0, 0x80002219, 0x7721, 0x16, 0x0, 0x0) 4.72454486s ago: executing program 5 (id=1813): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x17d) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x804019, &(0x7f0000000480)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000300)='./file0\x00', 0x0, 0x10}, 0x18) sendmsg$NFT_BATCH(r0, 0x0, 0x40) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x7}, 0x48) r2 = gettid() r3 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000000c0)='source', 0x0, 0xfeffffff00000000) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c040000030000000500000000d87ac2ed2801a3252e00", @ANYRESHEX=r2], &(0x7f0000000040)=""/8, 0x27, 0x8, 0x0, 0x8, 0x2e5debe220577a02}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x49, &(0x7f0000000800)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0xc2, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) eventfd2(0x0, 0x0) io_uring_setup(0x2bed, &(0x7f0000000040)={0x0, 0x8c7d, 0x2, 0x0, 0x258}) 4.552028635s ago: executing program 2 (id=1814): fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r1, 0x0, 0x0) getdents64(r1, 0xfffffffffffffffe, 0x29) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) open_by_handle_at(r0, 0x0, 0x460281) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000840)="a6", 0xffffff1e, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='bic', 0x3) shutdown(r2, 0x1) 4.41620812s ago: executing program 5 (id=1816): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 4.335899412s ago: executing program 2 (id=1817): fstat(0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\n\x00\x00'], 0x50) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES8], 0x68}, 0x1, 0x0, 0x0, 0x840}, 0x48000) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfc) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) 4.172912982s ago: executing program 2 (id=1819): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = io_uring_setup(0xad5, &(0x7f0000000140)={0x0, 0xc45e, 0x8, 0x2, 0x1000}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, 0x0) close(r3) r4 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r4, &(0x7f0000000140), 0x12) 4.053556254s ago: executing program 2 (id=1820): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00'}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0xe6a7}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@bridge_getlink={0xac, 0x12, 0x200, 0x70bd2a, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x400, 0x8}, [@IFLA_AF_SPEC={0x70, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_MPLS={0x4}, @AF_MPLS={0x4}, @AF_MPLS={0x4}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}, @AF_INET6={0x3c, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x7b}, @IFLA_INET6_TOKEN={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1c}]}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}]}, @IFLA_IFALIAS={0x14, 0x14, 'ip_vti0\x00'}, @IFLA_OPERSTATE={0x5, 0x10, 0x6}]}, 0xac}}, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_disconnect(r3) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r3, 0x81, 0x0, 0x0) 3.964063106s ago: executing program 0 (id=1821): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d0", 0x1}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r2, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) socket$kcm(0xa, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, &(0x7f0000000500)={0x3ff, 0x0, 0x4, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) 3.869140229s ago: executing program 1 (id=1822): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r5, 0x41}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 3.670344303s ago: executing program 4 (id=1823): timer_create(0x7, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) read(r0, &(0x7f0000000180)=""/236, 0xec) 3.249755208s ago: executing program 4 (id=1824): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r1, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000001400210100000000000000000200b000", @ANYRES32=r5, @ANYBLOB="08000200ac1414"], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}}, 0x18}}, 0x0) 3.025314458s ago: executing program 0 (id=1825): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x5130, 0xffffffffffffffff, 0xf8d63000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/consoles\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000a80)=[{&(0x7f0000000a40)=""/51, 0x33}], 0x1, 0xe, 0x1000) r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x600000a, 0x12, r2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x418, 0x110, 0x220, 0x110, 0x330, 0x330, 0x330, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, @dev={0xac, 0x14, 0x14, 0x40}, @loopback, 0xf}}}, {{@arp={@rand_addr=0x64010102, @broadcast, 0xff000000, 0x0, 0x4, 0x7, {@empty, {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x2, 0x80, 0x40, 0x2, 0x8, 0x0, 'bridge_slave_0\x00', 'netpci0\x00', {}, {0xff}, 0x0, 0xb8dcc107897441c4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @multicast1, @local, 0x8, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000280)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18040000ffffffff0000000000000000540000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2}, 0x94) 2.792988402s ago: executing program 0 (id=1826): socket$can_raw(0x1d, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x81842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x88802) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f00000005c0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r2, 0x14}, 0x80, &(0x7f0000004c40)=[{&(0x7f0000000300)="43e5e2102d6bf2f393a88190b845", 0xe}], 0x1}}], 0x1, 0x20000081) 2.147475573s ago: executing program 5 (id=1827): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1, r1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) socket(0x10, 0x803, 0x0) clock_gettime(0x9, 0x0) 2.057022694s ago: executing program 5 (id=1828): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, 0x0, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 1.631344692s ago: executing program 2 (id=1829): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="0503e5fdd3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 805.840877ms ago: executing program 0 (id=1830): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d31ce0108dc556e597655ba11bacc032a16fbefc64776f363610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141fa4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb67c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff4da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3e81869534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033b65ccd4e990cb2ba86ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aebe4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f600005800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000001040)="99d3c9f30f09b993080000b800000000ba000000800f30660f38dfb1e4000000f4cfc4e1fe12230f01c3b9800000c00f3235010000000f30", 0x38}], 0xaaaaaaaaaaaac7f, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 804.398429ms ago: executing program 1 (id=1831): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000140)="a756", 0x2, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) io_setup(0x9, &(0x7f00000000c0)) rseq(&(0x7f0000002340)={0x0, 0x0, &(0x7f0000002200)={0x0, 0x2, 0x8, 0x1000, 0x2}}, 0x20, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@multicast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x0, 0x2c, 0x0, @remote, @local}}}}, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002140)={0x50, 0x0, r3, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) read$FUSE(r1, &(0x7f000000b040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r4}, 0x10) syz_fuse_handle_req(r1, &(0x7f0000009040)="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", 0x2000, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x90, 0x0, 0x0, {0x0, 0x400000, 0x0, 0x3, 0x0, 0x0, {0x0, 0x80000000, 0x0, 0x2, 0x0, 0x3, 0x400, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(r2, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c000000810000000000000006"], 0xfeffffff) 800.875445ms ago: executing program 4 (id=1832): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 775.480333ms ago: executing program 5 (id=1833): bind$unix(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000100)=0x2c0000) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000002080)='pagemap\x00') timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) keyctl$session_to_parent(0x12) syz_usb_disconnect(0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r1}, 0x18) 607.078604ms ago: executing program 5 (id=1834): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 514.211645ms ago: executing program 4 (id=1835): prctl$PR_SET_NAME(0xf, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) socket(0xa, 0x3, 0x3a) io_submit(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socket$l2tp6(0xa, 0x2, 0x73) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) shutdown(r1, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x84383, 0x0) 463.877881ms ago: executing program 2 (id=1836): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04c20700000000000109022400010000000009"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0xcdbf0d3388237035, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xfff}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x400}]}}]}, 0x44}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="ef", 0x1}], 0x1, 0x0, 0x0, 0x4060019}, 0x20000041) 403.847586ms ago: executing program 1 (id=1837): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0xa000, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x3}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 329.969637ms ago: executing program 0 (id=1838): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0xa0000, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r2 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) connect$inet(0xffffffffffffffff, 0x0, 0x0) 268.670778ms ago: executing program 1 (id=1839): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_TDX_CAPABILITIES(r1, 0xc008aeba, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003540)}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x10001, 0x2, 0xeeee8000, 0x1000, &(0x7f0000000000/0x1000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0xeeee8000, 0x102000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 261.918017ms ago: executing program 4 (id=1840): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1700, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xfffffffffffffffc, 0x8000, 0x2, 0x10001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x7, 0x80000006}, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 248.251µs ago: executing program 1 (id=1841): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000080)={@hyper, 0x2}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=1842): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x129240, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r4 = syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090248000101570040090400000002060000052406000005240000000d240f01000800000000000000042402000905810310"], 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_disconnect(r4) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000540)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f00000001c0)={0x28, 0x2, r5, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000180)}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000600)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, &(0x7f0000000640)={0x48, 0xa, r7, 0x0, r8}) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ces, different from the descriptor's value: 1 [ 356.042462][ T24] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 356.071340][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.105868][ T24] usb 4-1: Product: syz [ 356.130545][ T24] usb 4-1: Manufacturer: syz [ 356.156746][ T24] usb 4-1: SerialNumber: syz [ 356.189744][ T24] usb 4-1: config 0 descriptor?? [ 356.521347][T10660] blktrace: Concurrent blktraces are not allowed on sg0 [ 356.659755][ T5696] usb 3-1: USB disconnect, device number 42 [ 357.184173][T10680] could not allocate digest TFM handle sha3-224-ce [ 357.914655][ T5696] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 358.129586][ T5696] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 358.213659][ T5696] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 358.285258][ T5696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 358.324349][ T5696] usb 3-1: Product: syz [ 358.342461][ T5696] usb 3-1: Manufacturer: syz [ 358.370487][ T5696] usb 3-1: SerialNumber: syz [ 358.641819][ T5696] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 43 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 358.656194][ T995] usb 4-1: USB disconnect, device number 41 [ 358.723939][ T5696] usb 3-1: USB disconnect, device number 43 [ 358.827321][ T5696] usblp0: removed [ 359.150373][T10715] tipc: Failed to remove unknown binding: 66,0,0/0:1564854043/1564854044 [ 359.208549][T10715] tipc: Failed to remove unknown binding: 66,0,0/0:1564854043/1564854044 [ 359.261084][T10717] input: syz0 as /devices/virtual/input/input32 [ 359.613432][ T5368] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 359.793451][ T5368] usb 4-1: Using ep0 maxpacket: 32 [ 359.808174][ T5368] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.819674][ T5368] usb 4-1: config 0 has no interfaces? [ 359.838234][ T5368] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 359.857185][ T5368] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.877694][ T5368] usb 4-1: Product: syz [ 359.890694][ T5368] usb 4-1: Manufacturer: syz [ 359.901003][ T5368] usb 4-1: SerialNumber: syz [ 359.916589][ T5368] usb 4-1: config 0 descriptor?? [ 360.161488][ T9] usb 4-1: USB disconnect, device number 42 [ 360.691538][T10731] could not allocate digest TFM handle sha3-224-ce [ 360.816876][T10741] xt_hashlimit: size too large, truncated to 1048576 [ 361.215059][ T1045] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.249487][T10743] xt_TPROXY: Can be used only with -p tcp or -p udp [ 361.320862][ T1045] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.400605][ T1045] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.497816][ T1045] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.714085][ T5368] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 361.907155][ T5368] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 361.943590][ T5368] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.988841][ T5368] usb 2-1: config 0 descriptor?? [ 362.066458][ T5368] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 363.133483][ T5696] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 363.184428][ T5695] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 363.305327][ T5696] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 363.356626][ T5695] usb 3-1: Using ep0 maxpacket: 32 [ 363.363979][ T5696] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 363.385191][ T5695] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 363.393833][ T5696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 363.416539][ T5695] usb 3-1: config 0 has no interface number 0 [ 363.430470][ T5696] usb 4-1: Product: syz [ 363.440874][ T5695] usb 3-1: config 0 interface 12 has no altsetting 0 [ 363.448755][ T5696] usb 4-1: Manufacturer: syz [ 363.471214][ T5696] usb 4-1: SerialNumber: syz [ 363.476038][ T5368] usb 2-1: USB disconnect, device number 34 [ 363.494250][ T5695] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 363.530017][ T5695] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.557998][ T5695] usb 3-1: Product: syz [ 363.581333][ T5695] usb 3-1: Manufacturer: syz [ 363.596503][ T5695] usb 3-1: SerialNumber: syz [ 363.626139][ T5695] usb 3-1: config 0 descriptor?? [ 363.739712][ T5696] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 43 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 363.788478][ T5696] usb 4-1: USB disconnect, device number 43 [ 363.835760][ T5696] usblp0: removed [ 364.459590][T10803] xt_hashlimit: size too large, truncated to 1048576 [ 365.398011][T10807] syzkaller1: entered promiscuous mode [ 365.410993][ T5695] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 365.427165][T10807] syzkaller1: entered allmulticast mode [ 365.440120][ T5695] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 365.468275][ T5695] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 365.509963][ T5695] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 365.561028][ T5695] usb 3-1: USB disconnect, device number 44 [ 365.963664][ T24] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 366.139471][ T24] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 366.149014][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.159146][ T24] usb 1-1: Product: syz [ 366.164216][ T24] usb 1-1: Manufacturer: syz [ 366.170074][ T24] usb 1-1: SerialNumber: syz [ 366.183582][ T24] usb 1-1: config 0 descriptor?? [ 366.287053][T10829] bridge0: port 3(macvlan2) entered blocking state [ 366.293949][T10829] bridge0: port 3(macvlan2) entered disabled state [ 366.300803][T10829] macvlan2: entered allmulticast mode [ 366.307231][T10829] bridge0: entered allmulticast mode [ 366.314954][T10829] macvlan2: left allmulticast mode [ 366.320106][T10829] bridge0: left allmulticast mode [ 366.399616][T10811] netlink: zone id is out of range [ 366.413526][ T5696] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 366.415676][T10811] netlink: zone id is out of range [ 366.441423][T10811] netlink: zone id is out of range [ 366.455640][T10811] netlink: zone id is out of range [ 366.469323][T10811] netlink: zone id is out of range [ 366.480861][T10811] netlink: zone id is out of range [ 366.493416][T10811] netlink: zone id is out of range [ 366.498900][T10811] netlink: zone id is out of range [ 366.504981][T10811] netlink: zone id is out of range [ 366.517911][T10811] netlink: zone id is out of range [ 366.548724][T10829] kAFS: unable to lookup cell '(,cL' [ 366.595429][ T5696] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 366.619870][ T5696] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 366.654867][ T5696] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 366.684429][ T5696] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.701016][ T5696] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 366.711299][ T5696] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 366.723011][ T5696] usb 5-1: Product: syz [ 366.727488][ T5696] usb 5-1: Manufacturer: syz [ 366.800959][ T5696] cdc_wdm 5-1:1.0: skipping garbage [ 366.822774][ T5696] cdc_wdm 5-1:1.0: skipping garbage [ 366.850349][ T5696] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 366.876842][ T5696] cdc_wdm 5-1:1.0: Unknown control protocol [ 367.028303][ T5696] usb 5-1: USB disconnect, device number 38 [ 367.205833][ T24] usb 1-1: f81604_read: reg: 105 failed: -EPROTO [ 367.218107][ T24] f81604 1-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 367.229544][ T24] f81604 1-1:0.0: probe with driver f81604 failed with error -71 [ 367.249452][ T24] usb 1-1: USB disconnect, device number 30 [ 367.403431][ T5717] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 367.463449][ T5368] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 367.545885][ T5696] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 367.573408][ T5717] usb 2-1: Using ep0 maxpacket: 8 [ 367.596620][T10839] syzkaller0: entered promiscuous mode [ 367.602209][T10839] syzkaller0: entered allmulticast mode [ 367.613947][ T5368] usb 4-1: Using ep0 maxpacket: 16 [ 367.632107][ T5368] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 367.654922][ T5368] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 367.682085][ T5368] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.695436][ T5368] usb 4-1: Product: syz [ 367.700924][ T5368] usb 4-1: Manufacturer: syz [ 367.706354][ T5368] usb 4-1: SerialNumber: syz [ 367.715045][ T5368] usb 4-1: config 0 descriptor?? [ 367.718097][ T5696] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 367.744140][ T5368] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 367.753469][ T5696] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 367.759979][ T5717] usb 2-1: unable to get BOS descriptor or descriptor too short [ 367.783493][ T5368] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 367.788982][ T5696] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 367.796277][ T5717] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 367.810360][ T5696] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.821938][ T5717] usb 2-1: can't read configurations, error -71 [ 367.846369][ T5696] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 367.873387][ T5696] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 367.887407][ T5696] usb 5-1: Product: syz [ 367.901846][ T5696] usb 5-1: Manufacturer: syz [ 367.914372][ T5696] cdc_wdm 5-1:1.0: skipping garbage [ 367.921784][ T5696] cdc_wdm 5-1:1.0: skipping garbage [ 367.929356][ T5696] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 367.935476][ T5696] cdc_wdm 5-1:1.0: Unknown control protocol [ 368.123539][ T24] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 368.277099][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 368.296898][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 368.315191][ T24] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 368.325329][ T24] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 368.336543][ T24] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 368.350248][ T5368] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 368.356615][ T24] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 368.368157][ T24] usb 1-1: config 1 interface 1 has no altsetting 0 [ 368.377596][ T24] usb 1-1: string descriptor 0 read error: -22 [ 368.384014][ T24] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 368.393074][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.433963][ T5368] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 368.454408][ T5368] em28xx 4-1:0.0: board has no eeprom [ 368.467359][T10823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.487141][T10823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.523442][ T5368] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 368.532400][ T5368] em28xx 4-1:0.0: dvb set to bulk mode. [ 368.538656][ T808] em28xx 4-1:0.0: Binding DVB extension [ 368.603889][ T5368] usb 4-1: USB disconnect, device number 44 [ 368.642891][ T5368] em28xx 4-1:0.0: Disconnecting em28xx [ 368.657641][ T808] em28xx 4-1:0.0: Registering input extension [ 368.668453][ T5368] em28xx 4-1:0.0: Closing input extension [ 368.712793][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 368.719570][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 368.726689][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 368.733296][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 368.739970][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 368.746572][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 368.752832][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 368.759426][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 368.765798][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 368.772385][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 368.778738][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 368.785347][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 368.793415][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 368.800035][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 368.806345][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 368.812923][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 368.818994][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 368.848482][ T5696] usb 5-1: USB disconnect, device number 39 [ 368.941116][ T5368] em28xx 4-1:0.0: Freeing device [ 369.055570][ T24] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 369.068154][ T24] usb 1-1: Warning! Unlikely small volume range (=63), linear volume or custom curve? [ 369.079977][ T24] usb 1-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/63/1 [ 369.141986][ T24] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 369.223435][ T5696] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 369.240108][ T24] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 369.296545][ T24] usb 1-1: USB disconnect, device number 31 [ 369.393390][ T5696] usb 5-1: Using ep0 maxpacket: 8 [ 369.415171][ T5696] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 369.444081][ T5696] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.475196][ T5696] usb 5-1: Product: syz [ 369.489146][ T5696] usb 5-1: Manufacturer: ш [ 369.493434][ T5368] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 369.511432][ T5696] usb 5-1: SerialNumber: syz [ 369.657159][ T5368] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 369.674811][ T5368] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 369.685854][ T5368] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 369.695983][ T5368] usb 4-1: Product: syz [ 369.701880][ T5368] usb 4-1: Manufacturer: syz [ 369.708442][ T5368] usb 4-1: SerialNumber: syz [ 369.772838][T10866] xt_hashlimit: size too large, truncated to 1048576 [ 369.843195][ T5696] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 369.939454][ T5368] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 45 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 370.073937][ T5368] usb 4-1: USB disconnect, device number 45 [ 370.111036][ T5696] usb 5-1: USB disconnect, device number 40 [ 370.199587][ T5368] usblp0: removed [ 370.282078][T10874] xt_hashlimit: size too large, truncated to 1048576 [ 370.590701][ T5765] udevd[5765]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 371.405644][T10887] netlink: 'syz.2.1365': attribute type 4 has an invalid length. [ 372.366606][T10899] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 372.403007][T10899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1369'. [ 372.492042][T10901] program syz.2.1368 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 373.019422][T10914] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1372'. [ 373.085341][T10916] syz_tun: left promiscuous mode [ 373.095347][T10916] bridge0: port 1(syz_tun) entered disabled state [ 373.168145][T10916] net_ratelimit: 370 callbacks suppressed [ 373.168157][T10916] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 373.415645][T10923] input: syz1 as /devices/virtual/input/input34 [ 373.590978][ T808] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 373.666839][T10906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.786336][ T808] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 373.817769][ T808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.863624][ T808] usb 3-1: config 0 descriptor?? [ 373.890037][ T808] cp210x 3-1:0.0: cp210x converter detected [ 374.109218][T10932] tipc: New replicast peer: 255.255.255.255 [ 374.133473][ T5368] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 374.142470][T10932] tipc: Enabled bearer , priority 10 [ 374.284806][ T30] kauditd_printk_skb: 73 callbacks suppressed [ 374.284817][ T30] audit: type=1326 audit(1781186429.020:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10920 comm="syz.2.1373" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feebcf9ce59 code=0x7ffc0000 [ 374.374449][ T30] audit: type=1326 audit(1781186429.050:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10920 comm="syz.2.1373" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feebcf9ce59 code=0x7ffc0000 [ 374.414412][ T30] audit: type=1326 audit(1781186429.050:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10920 comm="syz.2.1373" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feebcf9ce59 code=0x7ffc0000 [ 374.429304][ T5368] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 374.440931][ T30] audit: type=1326 audit(1781186429.050:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10920 comm="syz.2.1373" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feebcf9ce59 code=0x7ffc0000 [ 374.473844][ T5696] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 374.474531][ T5368] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 374.493788][ T5368] usb 5-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 374.535219][ T30] audit: type=1326 audit(1781186429.050:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10920 comm="syz.2.1373" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feebcf9ce59 code=0x7ffc0000 [ 374.594288][ T5368] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.605829][ T30] audit: type=1326 audit(1781186429.050:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10920 comm="syz.2.1373" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7feebcf9ce59 code=0x7ffc0000 [ 374.641528][ T5696] usb 4-1: device descriptor read/64, error -71 [ 374.654059][ T5368] usb 5-1: Product: syz [ 374.661209][T10936] could not allocate digest TFM handle sha3-224-ce [ 374.678791][ T30] audit: type=1326 audit(1781186429.050:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10920 comm="syz.2.1373" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feebcf9ce59 code=0x7ffc0000 [ 374.780208][ T30] audit: type=1326 audit(1781186429.050:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10920 comm="syz.2.1373" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feebcf9ce59 code=0x7ffc0000 [ 374.804693][ T5368] usb 5-1: Manufacturer: syz [ 374.809343][ T5368] usb 5-1: SerialNumber: syz [ 374.863438][ T30] audit: type=1326 audit(1781186429.050:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10920 comm="syz.2.1373" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feebcf9ce59 code=0x7ffc0000 [ 374.883437][ T5696] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 374.926900][ T30] audit: type=1326 audit(1781186429.050:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10920 comm="syz.2.1373" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feebcf9ce59 code=0x7ffc0000 [ 375.053013][T10946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.084793][ T5696] usb 4-1: device descriptor read/64, error -71 [ 375.109493][T10946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.204341][ T808] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 375.242761][ T808] usb 3-1: cp210x converter now attached to ttyUSB0 [ 375.253702][ T5696] usb usb4-port1: attempt power cycle [ 375.265332][ T9] tipc: Node number set to 1501439376 [ 375.557721][ T5368] usb 5-1: 0:1 : does not exist [ 375.583852][ T5368] usb 5-1: unit 4 not found! [ 375.593445][ T5696] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 375.612553][ T5368] usb 5-1: unit 51 not found! [ 375.644133][ T5696] usb 4-1: device descriptor read/8, error -71 [ 375.905069][ T5696] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 375.914382][ T5368] usb 5-1: USB disconnect, device number 41 [ 375.954547][ T5696] usb 4-1: device descriptor read/8, error -71 [ 376.096425][ T5696] usb usb4-port1: unable to enumerate USB device [ 376.449476][ T9] usb 3-1: USB disconnect, device number 45 [ 376.465164][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 376.509162][ T9] cp210x 3-1:0.0: device disconnected [ 376.993501][ T5368] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 377.200403][ T5368] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 377.273561][ T5368] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 377.307788][ T5368] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 377.344648][ T5368] usb 2-1: Product: syz [ 377.367505][ T5368] usb 2-1: Manufacturer: syz [ 377.399783][ T5368] usb 2-1: SerialNumber: syz [ 377.507869][T10971] libceph: resolve ' [ 377.507869][T10971] -&fYǝa2i [ 377.507869][T10971] .?&*&' (ret=-3): failed [ 377.694566][ T5368] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 37 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 377.817553][ T5368] usb 2-1: USB disconnect, device number 37 [ 377.926049][ T5368] usblp0: removed [ 377.931159][T10979] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 377.961620][T10967] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 378.168914][T10987] xt_hashlimit: size too large, truncated to 1048576 [ 378.443564][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.459429][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.003460][ T995] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 379.163488][ T995] usb 1-1: Using ep0 maxpacket: 32 [ 379.223498][ T9] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 379.308296][ T995] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 379.319980][ T995] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.328511][ T995] usb 1-1: Product: syz [ 379.333608][ T995] usb 1-1: Manufacturer: syz [ 379.338365][ T995] usb 1-1: SerialNumber: syz [ 379.347102][ T995] usb 1-1: config 0 descriptor?? [ 379.445015][ T995] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 379.469113][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 379.510193][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.546188][ T9] usb 3-1: Product: syz [ 379.567634][ T9] usb 3-1: Manufacturer: syz [ 379.583452][ T9] usb 3-1: SerialNumber: syz [ 379.614176][ T9] usb 3-1: config 0 descriptor?? [ 379.793526][ T5695] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 379.840144][ T9] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 379.933422][ T5696] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 379.953574][ T5695] usb 5-1: Using ep0 maxpacket: 32 [ 379.960309][ T5695] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 379.968559][ T5695] usb 5-1: config 0 has no interface number 0 [ 379.976962][ T5695] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 379.986050][ T5695] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.994106][ T5695] usb 5-1: Product: syz [ 379.998290][ T5695] usb 5-1: Manufacturer: syz [ 380.002905][ T5695] usb 5-1: SerialNumber: syz [ 380.011515][ T5695] usb 5-1: config 0 descriptor?? [ 380.063411][ T24] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 380.085916][ T5696] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.096937][ T5696] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.106753][ T5696] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 380.115931][ T5696] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.127920][ T5696] usb 2-1: config 0 descriptor?? [ 380.213445][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 380.226855][ T24] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 380.236128][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.244594][ T24] usb 4-1: Product: syz [ 380.249104][ T24] usb 4-1: Manufacturer: syz [ 380.254003][ T24] usb 4-1: SerialNumber: syz [ 380.262677][ T24] usb 4-1: config 0 descriptor?? [ 380.434580][ T5695] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 380.445454][ T5695] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 380.455338][ T9] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 380.551003][ T5696] keytouch 0003:0926:3333.000F: fixing up Keytouch IEC report descriptor [ 380.564030][ T5696] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000F/input/input35 [ 380.664932][ T5696] keytouch 0003:0926:3333.000F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 380.672381][ T24] airspy 4-1:0.0: Board ID: 00 [ 380.689941][ T24] airspy 4-1:0.0: Firmware version: [ 380.754670][ T5696] usb 2-1: USB disconnect, device number 38 [ 380.884662][ T995] gspca_ov534_9: reg_r err -32 [ 380.887598][T10995] binder: BINDER_SET_CONTEXT_MGR already set [ 380.895522][T10995] binder: 10994:10995 ioctl 4018620d 200000000100 returned -16 [ 380.909051][T10995] binder: BINDER_SET_CONTEXT_MGR already set [ 380.916694][T10995] binder: 10994:10995 ioctl 4018620d 200000004a80 returned -16 [ 381.143426][ T995] gspca_ov534_9: Unknown sensor 0000 [ 381.143545][ T995] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 381.583935][T11018] fuse: Bad value for 'fd' [ 381.590261][T11018] libceph: resolve ' [ 381.590261][T11018] -&fYǝa2i [ 381.590261][T11018] .?&*&' (ret=-3): failed [ 381.885378][ T24] airspy 4-1:0.0: usb_control_msg() failed -110 request 0e [ 381.948967][ T24] airspy 4-1:0.0: Registered as swradio24 [ 381.968601][ T24] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 381.990382][ T5695] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000038: -71 [ 382.030210][ T5695] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 382.045441][ T24] usb 3-1: USB disconnect, device number 46 [ 382.123220][ T5695] usb 5-1: USB disconnect, device number 42 [ 382.157518][ T5717] usb 1-1: USB disconnect, device number 32 [ 382.382314][T11033] Cannot find add_set index 0 as target [ 382.744360][ T5717] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 382.889298][ T5368] usb 4-1: USB disconnect, device number 50 [ 382.975265][ T5717] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 383.049152][ T5717] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 383.088425][ T5717] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 383.130353][ T5717] usb 1-1: Product: syz [ 383.145070][ T5717] usb 1-1: Manufacturer: syz [ 383.176643][ T5717] usb 1-1: SerialNumber: syz [ 383.424620][ T5717] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 33 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 383.503378][ T5717] usb 1-1: USB disconnect, device number 33 [ 383.552347][ T5717] usblp0: removed [ 384.593881][ T5717] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 384.637939][T11060] xt_hashlimit: size too large, truncated to 1048576 [ 384.775038][ T5717] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 384.821909][ T5717] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 384.870709][ T5717] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.977440][ T5717] usb 2-1: config 0 descriptor?? [ 385.026899][T11049] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 385.039277][T11065] fuse: Bad value for 'fd' [ 385.085278][T11065] libceph: resolve ' [ 385.085278][T11065] -&fYǝa2i [ 385.085278][T11065] .?&*&' (ret=-3): failed [ 385.485773][T11057] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 385.528939][ T5717] hid-picolcd 0003:04D8:C002.0010: unknown main item tag 0x0 [ 385.551362][ T5717] hid-picolcd 0003:04D8:C002.0010: unknown main item tag 0x0 [ 385.582091][ T5717] hid-picolcd 0003:04D8:C002.0010: unknown main item tag 0x0 [ 385.610260][ T5717] hid-picolcd 0003:04D8:C002.0010: unknown main item tag 0x0 [ 385.645267][ T5717] hid-picolcd 0003:04D8:C002.0010: unknown main item tag 0x0 [ 385.670150][ T5717] hid-picolcd 0003:04D8:C002.0010: unknown main item tag 0x0 [ 385.705972][ T5717] hid-picolcd 0003:04D8:C002.0010: unknown main item tag 0x0 [ 385.730448][T11049] input: syz1 as /devices/virtual/input/input36 [ 385.742363][ T5717] hid-picolcd 0003:04D8:C002.0010: unknown main item tag 0x0 [ 385.754084][ T5368] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 385.771445][ T5717] hid-picolcd 0003:04D8:C002.0010: unknown main item tag 0x0 [ 385.820222][ T5717] hid-picolcd 0003:04D8:C002.0010: unknown main item tag 0x0 [ 385.873926][T11071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1411'. [ 385.891115][ T5717] hid-picolcd 0003:04D8:C002.0010: collection stack underflow [ 385.915851][ T5717] hid-picolcd 0003:04D8:C002.0010: item 0 0 0 12 parsing failed [ 385.928474][T11071] ip6tnl1: entered allmulticast mode [ 385.960759][ T5368] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 385.977438][ T5717] hid-picolcd 0003:04D8:C002.0010: device report parse failed [ 385.991911][ T5368] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.016557][ T5717] hid-picolcd 0003:04D8:C002.0010: probe with driver hid-picolcd failed with error -22 [ 386.033050][ T5368] usb 4-1: Product: syz [ 386.051321][ T5368] usb 4-1: Manufacturer: syz [ 386.065175][ T5717] usb 2-1: USB disconnect, device number 39 [ 386.072620][ T5368] usb 4-1: SerialNumber: syz [ 386.093121][ T5368] usb 4-1: config 0 descriptor?? [ 386.313107][ T5368] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 386.339910][T11078] xt_hashlimit: size too large, truncated to 1048576 [ 386.354165][T11077] netlink: 'syz.2.1413': attribute type 1 has an invalid length. [ 386.717225][T11089] program syz.0.1416 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 386.751655][ T995] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 386.827179][T11082] could not allocate digest TFM handle sha3-224-ce [ 386.919151][ T5368] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 386.942439][ T995] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 386.980903][ T995] usb 2-1: config 1 has no interface number 0 [ 387.013256][ T995] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 387.045343][ T995] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 387.069208][ T995] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x7 has invalid maxpacket 1600, setting to 1024 [ 387.103877][ T995] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 387.124135][T11098] Cannot find add_set index 0 as target [ 387.140064][ T995] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.222543][ T995] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 387.240336][ T995] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.286665][ T995] usb 2-1: Product: syz [ 387.307438][ T995] usb 2-1: Manufacturer: syz [ 387.324262][ T995] usb 2-1: SerialNumber: syz [ 387.359180][T11086] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 387.380653][T11086] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 387.643054][T11086] syz.1.1415: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 387.685596][T11086] CPU: 0 UID: 0 PID: 11086 Comm: syz.1.1415 Tainted: G L syzkaller #0 PREEMPT(full) [ 387.685628][T11086] Tainted: [L]=SOFTLOCKUP [ 387.685634][T11086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 387.685657][T11086] Call Trace: [ 387.685665][T11086] [ 387.685672][T11086] dump_stack_lvl+0xe8/0x150 [ 387.685697][T11086] warn_alloc+0x249/0x340 [ 387.685728][T11086] ? __pfx_warn_alloc+0x10/0x10 [ 387.685768][T11086] __vmalloc_node_range_noprof+0x132/0x1750 [ 387.685795][T11086] ? __mutex_trylock_common+0x158/0x260 [ 387.685820][T11086] ? __pfx___mutex_trylock_common+0x10/0x10 [ 387.685847][T11086] ? trace_contention_end+0x3d/0x140 [ 387.685870][T11086] ? __mutex_lock+0x319/0x1550 [ 387.685898][T11086] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 387.685919][T11086] ? tomoyo_path_number_perm+0x219/0x630 [ 387.685943][T11086] ? dvb_demux_do_ioctl+0x320/0x540 [ 387.685970][T11086] ? __pfx___mutex_lock+0x10/0x10 [ 387.685990][T11086] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 387.686014][T11086] vmalloc_noprof+0xb2/0xe0 [ 387.686043][T11086] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 387.686069][T11086] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 387.686100][T11086] dvb_demux_do_ioctl+0x45d/0x540 [ 387.686128][T11086] dvb_usercopy+0x199/0x2e0 [ 387.686151][T11086] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 387.686174][T11086] ? __pfx_dvb_usercopy+0x10/0x10 [ 387.686207][T11086] ? __fget_files+0x3a0/0x420 [ 387.686226][T11086] ? __fget_files+0x2a/0x420 [ 387.686248][T11086] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 387.686271][T11086] dvb_demux_ioctl+0x29/0x40 [ 387.686295][T11086] __se_sys_ioctl+0xfc/0x170 [ 387.686319][T11086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.686337][T11086] do_syscall_64+0x174/0x580 [ 387.686353][T11086] ? trace_irq_disable+0x3b/0x140 [ 387.686378][T11086] ? clear_bhb_loop+0x40/0x90 [ 387.686399][T11086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.686416][T11086] RIP: 0033:0x7eff3e59ce59 [ 387.686433][T11086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.686447][T11086] RSP: 002b:00007eff3f50e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 387.686466][T11086] RAX: ffffffffffffffda RBX: 00007eff3e815fa0 RCX: 00007eff3e59ce59 [ 387.686478][T11086] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000004 [ 387.686489][T11086] RBP: 00007eff3e632d6f R08: 0000000000000000 R09: 0000000000000000 [ 387.686499][T11086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 387.686509][T11086] R13: 00007eff3e816038 R14: 00007eff3e815fa0 R15: 00007eff3e93fa48 [ 387.686537][T11086] [ 387.691353][T11086] Mem-Info: [ 387.973971][T11106] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 387.991931][T11086] active_anon:23416 inactive_anon:0 isolated_anon:0 [ 387.991931][T11086] active_file:15108 inactive_file:40139 isolated_file:0 [ 387.991931][T11086] unevictable:768 dirty:362 writeback:0 [ 387.991931][T11086] slab_reclaimable:10343 slab_unreclaimable:99527 [ 387.991931][T11086] mapped:32610 shmem:18252 pagetables:1392 [ 387.991931][T11086] sec_pagetables:0 bounce:0 [ 387.991931][T11086] kernel_misc_reclaimable:0 [ 387.991931][T11086] free:1287252 free_pcp:15528 free_cma:0 [ 387.993604][T11106] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 388.063568][ T5368] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 388.200109][T11086] Node 0 active_anon:94080kB inactive_anon:0kB active_file:60432kB inactive_file:160356kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132052kB dirty:1448kB writeback:0kB shmem:71484kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12924kB pagetables:5412kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 388.263479][ T5368] usb 5-1: Using ep0 maxpacket: 32 [ 388.279839][ T5368] usb 5-1: unable to get BOS descriptor or descriptor too short [ 388.296602][T11086] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 388.299486][ T5368] usb 5-1: config 0 has an invalid interface number: 77 but max is 0 [ 388.352101][ T5368] usb 5-1: config 0 has no interface number 0 [ 388.362419][ T5368] usb 5-1: config 0 interface 77 has no altsetting 0 [ 388.422045][T11086] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 388.424273][ T5368] usb 5-1: New USB device found, idVendor=061d, idProduct=c180, bcdDevice=9c.90 [ 388.550468][T11086] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 388.565454][ T5717] usb 4-1: USB disconnect, device number 51 [ 388.608809][T11086] Node 0 DMA32 free:1195356kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:97380kB inactive_anon:0kB active_file:60432kB inactive_file:160356kB unevictable:1536kB writepending:1448kB zspages:0kB present:3129332kB managed:2552780kB mlocked:0kB bounce:0kB free_pcp:50196kB local_pcp:34776kB free_cma:0kB [ 388.707157][ T5368] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.739270][ T5368] usb 5-1: Product: syz [ 388.762617][ T5368] usb 5-1: Manufacturer: syz [ 388.775206][T11086] lowmem_reserve[]: 0 0 0 0 0 [ 388.789793][T11086] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:680kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:20kB free_cma:0kB [ 388.834876][ T5368] usb 5-1: SerialNumber: syz [ 388.872691][ T5368] usb 5-1: config 0 descriptor?? [ 388.936290][T11086] lowmem_reserve[]: 0 0 0 0 0 [ 388.957456][T11086] Node 1 Normal free:3934572kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:10016kB local_pcp:0kB free_cma:0kB [ 389.203192][T11086] lowmem_reserve[]: 0 0 0 0 0 [ 389.253779][T11086] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 389.352818][T11086] Node 0 DMA32: 5091*4kB (UM) 3746*8kB (UM) 2766*16kB (UME) 889*32kB (UME) 744*64kB (UME) 473*128kB (UME) 326*256kB (UME) 170*512kB (UM) 107*1024kB (UM) 13*2048kB (UM) 160*4096kB (UM) = 1193244kB [ 389.515170][ T5368] quatech2 5-1:0.77: Quatech 2nd gen USB to Serial Driver converter detected [ 389.548514][T11086] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 389.588354][ T5368] usb 5-1: qt2_attach - failed to power on unit: -71 [ 389.619594][ T5368] quatech2 5-1:0.77: probe with driver quatech2 failed with error -71 [ 389.690032][ T5368] usb 5-1: USB disconnect, device number 43 [ 389.693440][T11086] Node 1 Normal: 3*4kB (UM) 6*8kB (UM) 11*16kB (UM) 12*32kB (UM) 12*64kB (UM) 10*128kB (UM) 7*256kB (UM) 6*512kB (UM) 5*1024kB (UM) 3*2048kB (U) 956*4096kB (UM) = 3934572kB [ 389.799186][T11086] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 389.846369][T11086] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 389.886384][T11086] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 389.944546][T11086] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 389.981357][T11086] 78272 total pagecache pages [ 389.996499][T11086] 0 pages in swap cache [ 390.007609][T11086] Free swap = 124996kB [ 390.017777][T11086] Total swap = 124996kB [ 390.029154][T11086] 2097051 pages RAM [ 390.047777][T11086] 0 pages HighMem/MovableOnly [ 390.068081][T11086] 427071 pages reserved [ 390.072693][T11086] 0 pages cma reserved [ 390.094663][ T995] usb 2-1: Incompatible driver and firmware versions [ 390.117239][ T995] usb 2-1: USB disconnect, device number 40 [ 390.348113][T11133] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.355650][T11133] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.420389][T11141] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1426'. [ 390.513649][ T5368] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 390.625137][T11133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.679906][T11133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.694516][ T5368] usb 3-1: config 253 has an invalid interface number: 130 but max is 0 [ 390.715996][ T5368] usb 3-1: config 253 has no interface number 0 [ 390.741843][ T5368] usb 3-1: config 253 interface 130 has no altsetting 0 [ 390.775118][ T5368] usb 3-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=98.ed [ 390.813633][ T5368] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.834777][ T995] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 390.849651][ T5368] usb 3-1: Product: syz [ 390.874342][ T5368] usb 3-1: Manufacturer: syz [ 390.885778][ T5368] usb 3-1: SerialNumber: syz [ 390.974947][T11137] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1426'. [ 391.013538][ T995] usb 1-1: Using ep0 maxpacket: 8 [ 391.026077][ T1045] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.039880][ T995] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 391.059732][ T1045] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.070465][ T995] usb 1-1: config 0 has no interface number 0 [ 391.084307][ T995] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 391.101475][ T1045] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.121685][ T995] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.133961][ T1045] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.151001][ T995] usb 1-1: Product: syz [ 391.160818][ T995] usb 1-1: Manufacturer: syz [ 391.181690][ T995] usb 1-1: SerialNumber: syz [ 391.205590][ T995] usb 1-1: config 0 descriptor?? [ 391.377985][ T5368] dvb-usb: found a 'EvolutePC TVWay+' in cold state, will try to load a firmware [ 391.445792][ T5368] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 391.468807][ T5368] dib0700: firmware download failed at 7 with -22 [ 391.495975][ T5368] usb 3-1: USB disconnect, device number 47 [ 391.503465][ T995] uvcvideo 1-1:0.31: probe with driver uvcvideo failed with error -22 [ 391.530074][ T995] usb 1-1: USB disconnect, device number 34 [ 391.966487][T11169] xt_hashlimit: size too large, truncated to 1048576 [ 391.983564][ T995] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 392.156245][ T995] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 392.171405][ T995] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.193526][ T5368] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 392.210313][ T995] usb 5-1: config 0 descriptor?? [ 392.243251][T11177] Cannot find add_set index 0 as target [ 392.361467][ T5368] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 392.375950][ T5368] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.393408][ T5368] usb 3-1: Product: syz [ 392.401886][ T5368] usb 3-1: Manufacturer: syz [ 392.414106][ T5368] usb 3-1: SerialNumber: syz [ 392.443462][T11164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.462022][ T5368] usb 3-1: config 0 descriptor?? [ 392.482155][T11164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.529545][ T995] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 392.560771][ T995] [drm:udl_init] *ERROR* Selecting channel failed [ 392.623127][ T995] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 392.638550][ T995] [drm] Initialized udl on minor 2 [ 392.665307][ T995] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 392.691273][ T5368] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 392.733251][ T995] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 392.767182][ T9] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 392.780374][ T995] usb 5-1: USB disconnect, device number 44 [ 392.790746][ T9] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 393.179859][T11180] warning: `syz.1.1433' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 393.298397][ T5368] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 393.384322][ T24] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 393.400836][T11185] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1435'. [ 393.411107][T11185] ip6tnl0: Caught tx_queue_len zero misconfig [ 393.422164][T11185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1435'. [ 393.443488][ T995] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 393.535118][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.546116][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 393.556918][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 393.566590][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 393.579913][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 393.589257][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.600525][ T24] usb 2-1: config 0 descriptor?? [ 393.611673][ T995] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.620341][ T24] hdpvr 2-1:0.0: Could not find bulk-in endpoint [ 393.631861][ T24] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 393.635628][ T995] usb 5-1: config 0 has no interfaces? [ 393.648854][ T995] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 393.659295][ T995] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.686835][ T995] usb 5-1: config 0 descriptor?? [ 393.799053][T11196] netlink: 'syz.0.1439': attribute type 1 has an invalid length. [ 393.906076][ T995] usb 5-1: USB disconnect, device number 45 [ 394.094045][ T24] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 394.253385][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 394.266598][ T24] usb 1-1: config index 0 descriptor too short (expected 5292, got 27) [ 394.275638][ T24] usb 1-1: config 46 has an invalid descriptor of length 0, skipping remainder of the config [ 394.286608][ T24] usb 1-1: config 46 has 0 interfaces, different from the descriptor's value: 20 [ 394.306101][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 394.322989][ T30] kauditd_printk_skb: 3412 callbacks suppressed [ 394.323015][ T30] audit: type=1326 audit(1781186449.050:3946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11179 comm="syz.1.1433" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff3e59ce59 code=0x7ffc0000 [ 394.335753][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.362224][ T995] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 394.381517][ T24] usb 1-1: Product: syz [ 394.390365][ T24] usb 1-1: Manufacturer: syz [ 394.396110][ T24] usb 1-1: SerialNumber: syz [ 394.441378][ T30] audit: type=1326 audit(1781186449.050:3947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11179 comm="syz.1.1433" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff3e59ce59 code=0x7ffc0000 [ 394.467412][ T30] audit: type=1326 audit(1781186449.100:3948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11179 comm="syz.1.1433" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7eff3e59ce59 code=0x7ffc0000 [ 394.492356][ T30] audit: type=1326 audit(1781186449.100:3949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11179 comm="syz.1.1433" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff3e59ce59 code=0x7ffc0000 [ 394.517542][ T30] audit: type=1326 audit(1781186449.100:3950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11179 comm="syz.1.1433" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7eff3e59ce59 code=0x7ffc0000 [ 394.544006][ T30] audit: type=1326 audit(1781186449.100:3951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11179 comm="syz.1.1433" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff3e59ce59 code=0x7ffc0000 [ 394.568905][ T995] usb 5-1: Using ep0 maxpacket: 32 [ 394.575257][ T30] audit: type=1326 audit(1781186449.100:3952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11179 comm="syz.1.1433" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7eff3e59ce59 code=0x7ffc0000 [ 394.600675][ T30] audit: type=1326 audit(1781186449.100:3953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11179 comm="syz.1.1433" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff3e59ce59 code=0x7ffc0000 [ 394.625251][ T995] usb 5-1: config 0 has an invalid interface number: 61 but max is 1 [ 394.633502][ T995] usb 5-1: config 0 has no interface number 1 [ 394.674283][ T995] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 394.691506][ T995] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.716474][ T995] usb 5-1: Product: syz [ 394.722349][ T30] audit: type=1326 audit(1781186449.100:3954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11179 comm="syz.1.1433" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7eff3e59ce59 code=0x7ffc0000 [ 394.746730][ T995] usb 5-1: Manufacturer: syz [ 394.752039][ T995] usb 5-1: SerialNumber: syz [ 394.762460][T11196] syzkaller1: entered promiscuous mode [ 394.770593][ T995] usb 5-1: config 0 descriptor?? [ 394.787238][ T30] audit: type=1326 audit(1781186449.110:3955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11179 comm="syz.1.1433" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff3e59ce59 code=0x7ffc0000 [ 394.824039][T11196] syzkaller1: entered allmulticast mode [ 394.894150][ T995] viperboard 5-1:0.61: version 0.00 found at bus 005 address 046 [ 394.965767][ T995] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 394.988888][ T995] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 395.035402][ T29] usb 3-1: USB disconnect, device number 48 [ 395.080140][ T995] viperboard 5-1:0.0: version 0.00 found at bus 005 address 046 [ 395.126526][ T24] usb 1-1: USB disconnect, device number 35 [ 395.227772][T11213] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1442'. [ 395.583439][ T24] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 395.736163][T11219] netlink: 'syz.4.1434': attribute type 3 has an invalid length. [ 395.746733][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 395.793637][ T24] usb 3-1: config 0 has no interfaces? [ 395.805467][ T24] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 395.826352][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.840372][ T24] usb 3-1: config 0 descriptor?? [ 395.946673][T11223] Cannot find add_set index 0 as target [ 395.987418][T11223] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1445'. [ 396.780271][ T24] usb 5-1: USB disconnect, device number 46 [ 397.074053][ T29] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 397.174815][ T995] usb 2-1: USB disconnect, device number 41 [ 397.237314][ T29] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.253295][ T29] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 397.271310][ T29] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 397.292249][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.311124][ T29] usb 1-1: config 0 descriptor?? [ 397.477429][ T24] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 397.546199][ T29] Bluetooth: Can't get state to change to load ram patch err [ 397.562803][ T29] Bluetooth: Loading patch file failed [ 397.571953][ T29] ath3k 1-1:0.0: probe with driver ath3k failed with error -71 [ 397.596808][ T29] usb 1-1: USB disconnect, device number 36 [ 397.646790][ T24] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 397.663836][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.676965][ T24] usb 5-1: Product: syz [ 397.681244][ T24] usb 5-1: Manufacturer: syz [ 397.686340][ T24] usb 5-1: SerialNumber: syz [ 397.694850][ T24] usb 5-1: config 0 descriptor?? [ 397.906352][ T24] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 398.172555][ T995] usb 3-1: USB disconnect, device number 49 [ 398.332798][T11257] Cannot find add_set index 0 as target [ 398.340024][T11249] program syz.3.1454 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 398.374880][T11260] netlink: 'syz.2.1457': attribute type 4 has an invalid length. [ 398.398112][T11257] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1456'. [ 398.534056][ T24] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 398.553825][T11262] netlink: 'syz.1.1458': attribute type 4 has an invalid length. [ 398.574260][T11262] netlink: 'syz.1.1458': attribute type 4 has an invalid length. [ 398.625369][T11249] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 399.249944][T11267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1459'. [ 399.415411][T11273] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1459'. [ 399.578457][T11272] could not allocate digest TFM handle sha3-224-ce [ 399.715126][ T24] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 399.726870][T11285] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1464'. [ 399.739797][T11285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 399.886080][ T24] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 399.905914][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.932631][ T24] usb 3-1: config 0 descriptor?? [ 400.191387][T11293] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1465'. [ 400.220075][ T10] usb 5-1: USB disconnect, device number 47 [ 400.990730][T11308] lo: entered allmulticast mode [ 401.012717][T11308] tunl0: entered allmulticast mode [ 401.054472][T11308] gre0: entered allmulticast mode [ 401.227841][T11308] gretap0: entered allmulticast mode [ 401.267134][T11308] erspan0: entered allmulticast mode [ 401.309981][T11308] ip_vti0: entered allmulticast mode [ 401.344012][T11308] ip6_vti0: entered allmulticast mode [ 401.382802][T11308] sit0: entered allmulticast mode [ 401.459028][T11308] ip6tnl0: entered allmulticast mode [ 401.499031][T11308] ip6gre0: entered allmulticast mode [ 401.558099][T11308] ip6gretap0: entered allmulticast mode [ 401.583726][T11308] bridge0: entered allmulticast mode [ 401.618526][T11308] vcan0: entered allmulticast mode [ 401.640099][T11308] bond0: entered allmulticast mode [ 401.664250][T11308] dummy0: entered allmulticast mode [ 401.705364][T11308] nlmon0: entered allmulticast mode [ 401.730164][T11308] vxcan0: entered allmulticast mode [ 401.759751][T11308] vxcan1: entered allmulticast mode [ 401.798190][T11308] veth0: entered allmulticast mode [ 401.829016][T11308] veth1: entered allmulticast mode [ 401.889820][T11308] wg0: entered allmulticast mode [ 401.917156][T11308] wg1: entered allmulticast mode [ 401.954207][T11308] wg2: entered allmulticast mode [ 401.986316][T11308] veth0_to_bridge: entered allmulticast mode [ 402.025038][T11308] bridge_slave_0: entered allmulticast mode [ 402.036981][T11315] xt_connbytes: Forcing CT accounting to be enabled [ 402.053198][T11315] set match dimension is over the limit! [ 402.090220][T11308] veth1_to_bridge: entered allmulticast mode [ 402.160368][T11308] bridge_slave_1: entered allmulticast mode [ 402.172858][T11308] veth0_to_bond: entered allmulticast mode [ 402.183840][T11308] bond_slave_0: entered allmulticast mode [ 402.230372][T11308] veth1_to_bond: entered allmulticast mode [ 402.259034][T11308] bond_slave_1: entered allmulticast mode [ 402.290666][T11308] veth0_to_team: entered allmulticast mode [ 402.298199][T11308] team_slave_0: entered allmulticast mode [ 402.321932][T11308] veth1_to_team: entered allmulticast mode [ 402.371361][T11308] team_slave_1: entered allmulticast mode [ 402.404315][T11308] veth0_to_batadv: entered allmulticast mode [ 402.575519][ T24] usb 3-1: Cannot read MAC address [ 402.582116][ T24] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 402.612865][T11308] batadv_slave_0: entered allmulticast mode [ 402.640052][T11308] veth1_to_batadv: entered allmulticast mode [ 402.653750][ T24] usb 3-1: USB disconnect, device number 50 [ 402.687151][T11308] batadv_slave_1: entered allmulticast mode [ 402.768996][T11308] xfrm0: entered allmulticast mode [ 402.824519][T11308] veth0_to_hsr: entered allmulticast mode [ 402.863143][T11308] hsr_slave_0: entered allmulticast mode [ 402.896424][T11308] veth1_to_hsr: entered allmulticast mode [ 402.937319][ T24] IPVS: starting estimator thread 0... [ 402.952393][T11308] hsr_slave_1: entered allmulticast mode [ 402.978255][T11308] hsr0: entered allmulticast mode [ 403.006209][T11308] veth1_virt_wifi: entered allmulticast mode [ 403.049098][T11308] veth0_virt_wifi: entered allmulticast mode [ 403.055588][T11345] IPVS: using max 57 ests per chain, 136800 per kthread [ 403.085616][T11308] virt_wifi0: entered allmulticast mode [ 403.121628][T11308] veth1_vlan: entered allmulticast mode [ 403.157737][T11308] veth0_vlan: entered allmulticast mode [ 403.222224][T11308] vlan0: entered allmulticast mode [ 403.245736][T11308] vlan1: entered allmulticast mode [ 403.270305][T11308] macvlan0: entered allmulticast mode [ 403.311164][T11308] macvlan1: entered allmulticast mode [ 403.343236][T11308] ipvlan0: entered allmulticast mode [ 403.370333][T11308] ipvlan1: entered allmulticast mode [ 403.400497][T11351] could not allocate digest TFM handle sha3-224-ce [ 403.411695][T11308] veth1_macvtap: entered allmulticast mode [ 403.470793][T11308] veth0_macvtap: entered allmulticast mode [ 403.535754][T11308] macvtap0: entered allmulticast mode [ 403.573966][T11308] macsec0: entered allmulticast mode [ 403.595265][T10262] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 403.614931][T11308] geneve0: entered allmulticast mode [ 403.666219][T11308] geneve1: entered allmulticast mode [ 403.701646][T11308] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 403.729630][T11308] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 403.751199][T11308] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 403.771049][T11308] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 403.787112][T11308] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 403.800078][T10262] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 403.810416][T11308] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 403.817688][T10262] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 403.833371][T11308] macvlan2: entered allmulticast mode [ 403.843473][T10262] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 403.862066][T10262] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 403.879408][T10262] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 403.891092][T10262] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 403.904487][T11308] ip6erspan0: entered allmulticast mode [ 403.920664][T11308] : entered allmulticast mode [ 403.938221][T11308] bridge1: entered allmulticast mode [ 403.957700][T10262] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 403.966625][T11308] bridge2: entered allmulticast mode [ 403.966830][T10262] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 403.982009][T10262] usb 3-1: Product: syz [ 403.988571][T10262] usb 3-1: Manufacturer: syz [ 404.008046][T11344] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 404.015707][T11308] macsec1: entered allmulticast mode [ 404.034383][T11308] syztnl1: entered allmulticast mode [ 404.052833][T11308] syzkaller0: entered allmulticast mode [ 404.069245][T10262] cdc_wdm 3-1:1.0: skipping garbage [ 404.080290][ T48] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.094195][ T48] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.103722][T10262] cdc_wdm 3-1:1.0: skipping garbage [ 404.111516][ T48] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.157414][ T48] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.186263][ T48] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.212704][T10262] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 404.213180][ T48] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.257504][ T48] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.262257][T10262] cdc_wdm 3-1:1.0: Unknown control protocol [ 404.331741][ T48] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.505337][T11380] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1478'. [ 404.542404][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 404.549029][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 404.555344][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 404.561970][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 404.568220][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 404.574814][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 404.581056][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 404.587631][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 404.594013][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 404.600622][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 404.609376][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 404.615960][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 404.622179][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 404.628752][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 404.635010][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 404.641581][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 404.647849][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 404.654427][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 404.660642][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 404.667213][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 404.673733][ T24] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 404.733490][ T10] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 404.745410][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 404.760071][ T5695] usb 3-1: USB disconnect, device number 51 [ 404.866491][ T24] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 404.883779][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 404.885832][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.911284][ T24] usb 5-1: Product: syz [ 404.911633][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 404.938889][ T24] usb 5-1: Manufacturer: syz [ 404.944988][ T10] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 404.965669][ T24] usb 5-1: SerialNumber: syz [ 404.968009][ T10] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 404.992801][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.017178][ T10] usb 1-1: Product: syz [ 405.025185][ T24] usb 5-1: config 0 descriptor?? [ 405.030536][ T10] usb 1-1: Manufacturer: syz [ 405.035720][ T10] usb 1-1: SerialNumber: syz [ 405.061360][T11396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 405.242076][ T24] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 405.583559][ T10] usb 1-1: Cannot retrieve CPort count: -110 [ 405.601462][ T10] usb 1-1: Cannot retrieve CPort count: -110 [ 405.626822][ T10] es2_ap_driver 1-1:7.0: probe with driver es2_ap_driver failed with error -110 [ 405.853129][ T24] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 406.153405][ T24] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 406.315229][ T24] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 406.338195][ T24] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 406.360111][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 406.379083][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.405465][T11411] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 406.418112][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 407.302365][ T10] usb 5-1: USB disconnect, device number 48 [ 407.401609][ T24] usb 1-1: USB disconnect, device number 37 [ 407.486948][T11463] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1486'. [ 407.569361][T11470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 407.584043][T11470] fuse: Bad value for 'rootmode' [ 407.695335][T11483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 407.873438][ T24] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 408.036605][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 408.043614][ T24] usb 5-1: config 251 has an invalid interface number: 202 but max is 0 [ 408.052127][ T24] usb 5-1: config 251 has no interface number 0 [ 408.058572][ T24] usb 5-1: config 251 interface 202 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 408.068594][ T24] usb 5-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 408.078623][ T24] usb 5-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 408.089668][ T24] usb 5-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 408.101075][ T24] usb 5-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 408.112956][ T24] usb 5-1: config 251 interface 202 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.124901][ T24] usb 5-1: config 251 interface 202 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.135052][ T24] usb 5-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 408.148325][ T24] usb 5-1: config 251 interface 202 has no altsetting 0 [ 408.156918][ T24] usb 5-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 408.166138][ T24] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 408.174152][ T24] usb 5-1: Product: syz [ 408.178332][ T24] usb 5-1: SerialNumber: syz [ 408.431569][T11473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.441033][T11473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.463947][ T24] cxacru 5-1:251.202: cxacru_bind: interface has incorrect endpoints [ 408.476992][ T24] cxacru 5-1:251.202: usbatm_usb_probe: bind failed: -19! [ 408.490422][ T24] usb 5-1: USB disconnect, device number 49 [ 408.863409][T10262] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 408.890216][ T10] usb 3-1: USB disconnect, device number 52 [ 409.027779][T10262] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 409.066385][T10262] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.093369][T10262] usb 4-1: Product: syz [ 409.102414][T10262] usb 4-1: Manufacturer: syz [ 409.122656][T10262] usb 4-1: SerialNumber: syz [ 409.143981][T10262] usb 4-1: config 0 descriptor?? [ 409.253413][T11542] xt_hashlimit: size too large, truncated to 1048576 [ 410.001152][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 410.001170][ T30] audit: type=1326 audit(1781186464.730:3969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11574 comm="syz.1.1506" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff3e59ce59 code=0x7ffc0000 [ 410.134756][ T30] audit: type=1326 audit(1781186464.730:3970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11574 comm="syz.1.1506" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff3e59ce59 code=0x7ffc0000 [ 410.217829][T11577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1507'. [ 410.227540][ T30] audit: type=1326 audit(1781186464.790:3971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11574 comm="syz.1.1506" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7eff3e59ce59 code=0x7ffc0000 [ 410.277126][T10262] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -110 [ 410.303282][T10262] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 410.366332][ T30] audit: type=1326 audit(1781186464.790:3972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11574 comm="syz.1.1506" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff3e59ce59 code=0x7ffc0000 [ 410.431913][T11577] binder: 11576:11577 ioctl c0145608 200000000140 returned -22 [ 410.474665][ T30] audit: type=1326 audit(1781186464.790:3973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11574 comm="syz.1.1506" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff3e59ce59 code=0x7ffc0000 [ 410.695719][T11583] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[11585] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[11583] [ 410.763561][ T30] audit: type=1800 audit(1781186465.490:3974): pid=11584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1505" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 410.848236][T11583] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!l1*$pOcɔr$G [ 411.133459][ T10] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 411.249238][T11600] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1508'. [ 411.352319][ T10] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 411.377261][ T10] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 411.388115][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 411.401694][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.430329][T11596] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 411.481043][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 411.689725][T11596] tipc: Enabled bearer , priority 0 [ 411.817689][T11596] syzkaller0: entered promiscuous mode [ 411.844532][T11596] syzkaller0: entered allmulticast mode [ 411.873108][T11637] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 411.992832][T11596] tipc: Resetting bearer [ 412.179049][T11595] tipc: Resetting bearer [ 412.259400][T11595] tipc: Disabling bearer [ 412.394792][ T10] usb 1-1: USB disconnect, device number 38 [ 412.590834][T11661] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 412.599438][T11661] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 412.671582][T11663] batadv0: entered promiscuous mode [ 412.677427][T11663] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 412.713740][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 412.882137][ T10] usb 4-1: USB disconnect, device number 52 [ 412.964550][T11680] syz_tun: entered allmulticast mode [ 413.224310][ T5696] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 413.365439][ T5696] usb 2-1: device descriptor read/64, error -71 [ 413.614515][ T5696] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 413.792246][ T5696] usb 2-1: device descriptor read/64, error -71 [ 413.821048][ T10] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 413.883356][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 413.934551][ T5696] usb usb2-port1: attempt power cycle [ 413.999975][ T10] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 414.005512][T11733] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1534'. [ 414.012040][ T10] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 414.027196][ T10] usb 1-1: Product: syz [ 414.031413][ T10] usb 1-1: SerialNumber: syz [ 414.044146][ T10] usb 1-1: config 0 descriptor?? [ 414.292486][ T10] hso 1-1:0.0: Failed to find BULK eps [ 414.313419][ T5696] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 414.344228][ T5696] usb 2-1: device descriptor read/8, error -71 [ 414.540135][ T5724] usb 1-1: USB disconnect, device number 39 [ 414.541614][T11771] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1544'. [ 414.620052][T11710] xt_hashlimit: size too large, truncated to 1048576 [ 414.626849][ T5696] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 414.645712][ T5696] usb 2-1: device descriptor read/8, error -71 [ 414.733831][ T24] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 414.754160][ T5696] usb usb2-port1: unable to enumerate USB device [ 414.905102][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 414.930482][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 414.957294][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 414.991320][ T24] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 415.009211][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.026256][ T24] usb 5-1: Product: syz [ 415.035411][ T24] usb 5-1: Manufacturer: syz [ 415.044757][ T24] usb 5-1: SerialNumber: syz [ 415.090394][ T24] usb 5-1: config 0 descriptor?? [ 415.103649][T11766] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 415.154927][T11794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 415.283405][ T24] rc_core: IR keymap rc-streamzap not found [ 415.296699][ T24] Registered IR keymap rc-empty [ 415.310486][ T24] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 415.368338][ T24] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input37 [ 415.410653][ T24] usb 5-1: USB disconnect, device number 50 [ 415.899242][T11671] syz_tun: left allmulticast mode [ 416.005037][T11827] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1551'. [ 416.186350][T11835] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1554'. [ 416.235939][T11838] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1554'. [ 416.294577][T11842] netlink: 'syz.1.1556': attribute type 10 has an invalid length. [ 416.294605][T11842] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1556'. [ 416.373799][T11835] loop9: detected capacity change from 0 to 2640 [ 416.390990][T11835] buffer_io_error: 6 callbacks suppressed [ 416.391006][T11835] Buffer I/O error on dev loop9, logical block 0, async page read [ 416.391157][T11835] Buffer I/O error on dev loop9, logical block 0, async page read [ 416.391241][T11835] Buffer I/O error on dev loop9, logical block 0, async page read [ 416.391378][T11835] Buffer I/O error on dev loop9, logical block 0, async page read [ 416.395034][T11835] Buffer I/O error on dev loop9, logical block 0, async page read [ 416.395131][T11835] Buffer I/O error on dev loop9, logical block 0, async page read [ 416.395212][T11835] Buffer I/O error on dev loop9, logical block 0, async page read [ 416.395264][T11835] Buffer I/O error on dev loop9, logical block 0, async page read [ 416.395299][T11835] ldm_validate_partition_table(): Disk read failed. [ 416.395323][T11835] Buffer I/O error on dev loop9, logical block 0, async page read [ 416.395373][T11835] Buffer I/O error on dev loop9, logical block 0, async page read [ 416.395564][T11835] Dev loop9: unable to read RDB block 0 [ 416.395802][T11835] loop9: unable to read partition table [ 416.397723][T11835] loop_reread_partitions: partition scan of loop9 (3 ) failed (rc=-5) [ 416.536336][T11842] `: entered promiscuous mode [ 416.536359][T11842] geneve1: entered promiscuous mode [ 416.536509][T11842] `: entered allmulticast mode [ 416.536522][T11842] geneve1: entered allmulticast mode [ 416.545141][T11842] 8021q: adding VLAN 0 to HW filter on device ` [ 416.549811][T11842] bridge0: port 1(`) entered blocking state [ 416.549983][T11842] bridge0: port 1(`) entered disabled state [ 416.911108][ T5002] ldm_validate_partition_table(): Disk read failed. [ 416.925163][ T5002] Dev loop9: unable to read RDB block 0 [ 416.936968][ T5002] loop9: unable to read partition table [ 416.952113][T11880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.133401][ T24] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 417.285483][ T24] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 417.298130][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.325983][ T24] usb 1-1: config 0 descriptor?? [ 417.541454][T11873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.555825][T11873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.569346][ T24] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 417.585165][ T24] [drm:udl_init] *ERROR* Selecting channel failed [ 417.650211][ T24] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 417.688357][ T24] [drm] Initialized udl on minor 2 [ 417.746312][ T24] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 417.804267][ T24] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 417.861272][ T24] usb 1-1: USB disconnect, device number 40 [ 417.877395][ T5724] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 417.939000][ T5724] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 418.289616][T11947] xt_hashlimit: size too large, truncated to 1048576 [ 418.406773][T11949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 418.476482][T11949] fuse: Unknown parameter 'use00000000000000000000' [ 418.600095][T11958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 419.298972][T11980] could not allocate digest TFM handle sha3-224-ce [ 419.473421][ T5696] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 419.601096][T11996] fuse: Bad value for 'rootmode' [ 419.653865][ T5696] usb 2-1: Using ep0 maxpacket: 32 [ 419.667717][ T5696] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 419.679196][T11998] binder: 11993:11998 ioctl 4018620d 0 returned -22 [ 419.693125][ T5696] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 419.723147][ T5696] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 419.736647][ T5696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.745308][ T5696] usb 2-1: Product: syz [ 419.749635][ T5696] usb 2-1: Manufacturer: syz [ 419.754712][ T5696] usb 2-1: SerialNumber: syz [ 419.762151][ T5696] usb 2-1: config 0 descriptor?? [ 419.778102][T11998] No such timeout policy "syz1" [ 420.001521][ T24] usb 2-1: USB disconnect, device number 46 [ 420.372993][T12025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 420.737513][T12038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 420.756964][T12038] fuse: Unknown parameter 'user_i00000000000000000000' [ 420.885660][T12046] could not allocate digest TFM handle sha3-224-ce [ 421.302487][T12068] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 421.313277][T12064] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1603'. [ 421.475307][ T4952] Bluetooth: hci3: command 0x0406 tx timeout [ 421.838599][T12090] could not allocate digest TFM handle sha3-224-ce [ 422.375009][T12105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 424.014296][T12149] could not allocate digest TFM handle sha3-224-ce [ 424.381157][T12169] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1632'. [ 424.662398][T12175] could not allocate digest TFM handle sha3-224-ce [ 424.694152][T12183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1636'. [ 424.887084][T12194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 424.908327][T12194] fuse: Unknown parameter 'user_i00000000000000000000' [ 425.023585][T12203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1642'. [ 425.227344][T12214] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 425.236046][T12214] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 425.623403][ T5724] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 425.787912][ T5724] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 425.817420][ T5724] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 425.839353][ T5724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 425.852810][ T5724] usb 1-1: Product: syz [ 425.857293][ T5724] usb 1-1: Manufacturer: syz [ 425.862214][ T5724] usb 1-1: SerialNumber: syz [ 426.097558][ T5724] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 41 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 426.152912][ T5724] usb 1-1: USB disconnect, device number 41 [ 426.190602][ T5724] usblp0: removed [ 426.368117][T12254] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 426.530437][T12270] syzkaller1: entered promiscuous mode [ 426.541880][T12270] syzkaller1: entered allmulticast mode [ 426.873451][ T5724] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 427.035717][ T5724] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 427.048850][ T24] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 427.082305][ T5724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 427.124790][ T5724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 427.141743][T12320] trusted_key: encrypted_key: insufficient parameters specified [ 427.157692][ T5724] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 427.183122][ T5724] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 427.218352][ T5724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.240131][ T24] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 427.257512][ T5724] usb 3-1: config 0 descriptor?? [ 427.263204][ T24] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 427.278501][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 427.291529][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.312908][T12309] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 427.331144][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 427.684809][ T5724] hid_parser_main: 173 callbacks suppressed [ 427.684823][ T5724] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 427.703457][ T5724] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 427.711292][ T5724] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 427.720887][ T5724] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 427.729718][ T5724] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 427.738200][ T5724] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 427.748000][ T5724] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 427.756818][ T5724] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 427.766896][ T5724] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 427.775623][ T5724] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 427.850651][ T5724] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 427.951875][ T5724] usb 3-1: USB disconnect, device number 53 [ 428.783487][ T5696] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 428.813378][ T10] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 428.944476][ T5696] usb 3-1: Using ep0 maxpacket: 16 [ 428.958150][ T5696] usb 3-1: config 251 has an invalid interface number: 202 but max is 0 [ 428.975673][ T5696] usb 3-1: config 251 has no interface number 0 [ 428.988762][ T5696] usb 3-1: config 251 interface 202 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 429.005570][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 429.024441][ T5696] usb 3-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 429.051648][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 429.067536][ T5696] usb 3-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 429.084528][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 429.106683][ T5696] usb 3-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 429.124353][ T10] usb 5-1: Product: syz [ 429.132959][ T10] usb 5-1: Manufacturer: syz [ 429.146756][ T10] usb 5-1: SerialNumber: syz [ 429.151400][ T5696] usb 3-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 429.164909][ T5696] usb 3-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 429.179682][ T5696] usb 3-1: config 251 interface 202 has no altsetting 0 [ 429.192303][ T5696] usb 3-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 429.219788][ T5696] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 429.238237][ T5696] usb 3-1: Product: syz [ 429.250120][ T5696] usb 3-1: SerialNumber: syz [ 429.407936][ T10] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 51 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 429.465875][ T10] usb 5-1: USB disconnect, device number 51 [ 429.511429][ T10] usblp0: removed [ 429.543755][ T5696] cxacru 3-1:251.202: usbatm_usb_probe: bind failed: -19! [ 429.571320][ T5696] usb 3-1: USB disconnect, device number 54 [ 429.683411][ T5724] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 429.814096][ T24] usb 2-1: USB disconnect, device number 47 [ 429.851828][ T5724] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 429.916522][ T5724] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 429.937457][ T5724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 429.966790][ T5724] usb 1-1: Product: syz [ 429.976084][ T5724] usb 1-1: Manufacturer: syz [ 429.985605][ T5724] usb 1-1: SerialNumber: syz [ 430.221010][ T5724] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 42 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 430.284812][ T5724] usb 1-1: USB disconnect, device number 42 [ 430.311971][ T5724] usblp0: removed [ 430.673622][ T24] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 430.745438][T12479] xt_hashlimit: size too large, truncated to 1048576 [ 430.836712][ T24] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 430.862071][ T24] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 430.882251][ T24] usb 3-1: config 0 has no interface number 0 [ 430.903598][ T24] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 430.950374][ T24] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 430.994653][ T24] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 431.030814][ T24] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 431.070692][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.151889][ T24] usb 3-1: config 0 descriptor?? [ 431.177597][T12466] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 431.619636][ T24] usb 3-1: USB disconnect, device number 55 [ 432.213660][ T5696] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 432.334692][T12551] Cannot find add_set index 0 as target [ 432.393405][ T5696] usb 2-1: Using ep0 maxpacket: 32 [ 432.414221][T12554] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1691'. [ 432.433002][ T5696] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 432.471270][ T5696] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 432.486770][ T24] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 432.514622][ T5696] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 432.549496][ T5696] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 432.589617][ T5696] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 432.630472][ T5696] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 432.657278][ T5696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.674613][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 432.711416][ T5696] usb 2-1: Product: syz [ 432.724411][ T5696] usb 2-1: Manufacturer: syz [ 432.735688][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 432.751404][ T5696] usb 2-1: SerialNumber: syz [ 432.765263][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 432.783482][ T24] usb 5-1: Product: syz [ 432.792801][ T5696] usb 2-1: config 0 descriptor?? [ 432.804145][ T24] usb 5-1: Manufacturer: syz [ 432.816314][ T24] usb 5-1: SerialNumber: syz [ 432.933483][ T5724] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 433.086975][ T24] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 52 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 433.101328][ T5724] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 433.142806][ T5724] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 433.158300][ T24] usb 5-1: USB disconnect, device number 52 [ 433.185709][ T5724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 433.203192][ T24] usblp0: removed [ 433.213004][ T5724] usb 1-1: Product: syz [ 433.232154][ T5696] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 433.241809][ T5724] usb 1-1: Manufacturer: syz [ 433.260833][ T5724] usb 1-1: SerialNumber: syz [ 433.261397][ T5696] input input39: Device does not respond to id packet M [ 433.319506][ T5696] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 433.350582][ T5696] input input39: Device does not respond to id packet P [ 433.387322][ T5696] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 433.412373][ T5696] input input39: Device does not respond to id packet B [ 433.454604][ T5696] input input39: Device does not respond to id packet N [ 433.528529][ T5724] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 43 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 433.589814][ T5724] usb 1-1: USB disconnect, device number 43 [ 433.622272][ T5724] usblp0: removed [ 433.655994][ T5696] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 433.664798][ T5696] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 433.673243][ T5696] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 433.697983][ T5696] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 433.741155][ T5696] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input39 [ 433.862945][ T5696] usb 2-1: USB disconnect, device number 48 [ 434.264665][T12619] syzkaller1: entered promiscuous mode [ 434.280098][T12619] syzkaller1: entered allmulticast mode [ 435.279315][T12644] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1699'. [ 435.498947][T12655] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1704'. [ 436.152807][T12703] veth0_macvtap: Caught tx_queue_len zero misconfig [ 436.349002][T12709] netlink: 'syz.4.1714': attribute type 1 has an invalid length. [ 436.566200][ T10] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 436.733635][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 436.742001][ T10] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 436.764749][ T10] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 436.802338][ T10] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 436.844011][ T10] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 436.917582][ T10] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 436.938999][T12746] libceph: resolve ' [ 436.938999][T12746] -&fYǝa2i [ 436.938999][T12746] .?&*&' (ret=-3): failed [ 436.961745][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.980446][ T10] usb 1-1: Product: syz [ 436.994034][ T10] usb 1-1: Manufacturer: syz [ 437.023399][ T5696] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 437.033660][ T10] usb 1-1: SerialNumber: syz [ 437.055859][T12754] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1, syncid = 0, id = 0 [ 437.078485][ C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 437.120319][ T10] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input40 [ 437.225199][ T5696] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 437.281237][ T5696] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 437.292519][ T5696] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 437.301060][ T5696] usb 5-1: Product: syz [ 437.305373][ T5724] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 437.311322][ T5696] usb 5-1: Manufacturer: syz [ 437.318002][ T10] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 437.329360][ T10] (id 0x00) [ 437.334301][ T5696] usb 5-1: SerialNumber: syz [ 437.403706][ T10] rc_core: IR keymap rc-imon-pad not found [ 437.409941][ T10] Registered IR keymap rc-empty [ 437.415596][ T10] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 437.426591][ T10] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 437.457852][T12772] xt_hashlimit: size too large, truncated to 1048576 [ 437.468610][ T5724] usb 3-1: Using ep0 maxpacket: 32 [ 437.488431][ T5724] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 437.524622][ T10] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 437.551903][ T10] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input41 [ 437.585336][ T5724] usb 3-1: New USB device found, idVendor=2b73, idProduct=0029, bcdDevice= 0.40 [ 437.599164][ T5724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.625087][ T5696] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 53 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 437.648751][ T10] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:44> initialized [ 437.662403][ T5724] usb 3-1: Product: syz [ 437.671239][ T5696] usb 5-1: USB disconnect, device number 53 [ 437.693216][ T5696] usblp0: removed [ 437.706173][ T5724] usb 3-1: Manufacturer: syz [ 437.735182][ T5724] usb 3-1: SerialNumber: syz [ 437.765525][ T10] usb 1-1: USB disconnect, device number 44 [ 438.297721][ T5724] usb 3-1: 1:1: invalid format type 0x1001 is detected, processed as PCM [ 438.337672][ T5724] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 438.661083][ T5724] usb 3-1: USB disconnect, device number 56 [ 438.814827][ T5765] udevd[5765]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 438.843066][T12835] libceph: resolve ' [ 438.843066][T12835] -&fYǝa2i [ 438.843066][T12835] .?&*&' (ret=-3): failed [ 438.959770][T12855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1730'. [ 439.021663][T12849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1730'. [ 439.031129][ T10] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 439.206274][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.228284][ T10] usb 1-1: config 0 has no interfaces? [ 439.254505][ T10] usb 1-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 439.298309][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.327689][T12893] xt_hashlimit: size too large, truncated to 1048576 [ 439.339045][ T10] usb 1-1: config 0 descriptor?? [ 439.715867][ T10] usb 1-1: USB disconnect, device number 45 [ 439.885122][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.898479][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.990290][T12921] kvm_intel: kvm [12920]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0xe001 [ 440.001785][T12921] kvm: kvm [12920]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x901f [ 440.011503][T12921] kvm: kvm [12920]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0xafd8 [ 440.033473][T10262] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 440.056582][T12929] xt_hashlimit: size too large, truncated to 1048576 [ 440.193387][T10262] usb 2-1: device descriptor read/64, error -71 [ 440.426417][ T4952] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 440.440503][ T4952] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 440.447970][T10262] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 440.460982][ T4952] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 440.471431][ T4952] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 440.486299][ T4952] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 440.633393][T10262] usb 2-1: device descriptor read/64, error -71 [ 440.753786][T10262] usb usb2-port1: attempt power cycle [ 441.113473][T10262] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 441.149519][T10262] usb 2-1: device descriptor read/8, error -71 [ 441.201721][T13009] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1748'. [ 441.373397][ T10] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 441.393525][T10262] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 441.425028][T10262] usb 2-1: device descriptor read/8, error -71 [ 441.548855][T10262] usb usb2-port1: unable to enumerate USB device [ 441.563411][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 441.570235][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 441.581698][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 441.581755][T12945] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.590933][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.606085][ T10] usb 1-1: Product: syz [ 441.610283][ T10] usb 1-1: Manufacturer: syz [ 441.614998][ T10] usb 1-1: SerialNumber: syz [ 441.623077][ T10] usb 1-1: config 0 descriptor?? [ 441.633654][ T10] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 441.639956][T12945] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.654335][T12945] bridge_slave_0: entered allmulticast mode [ 441.668680][T12945] bridge_slave_0: entered promiscuous mode [ 441.694393][T12945] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.719822][T12945] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.732326][T12945] bridge_slave_1: entered allmulticast mode [ 441.741564][T12945] bridge_slave_1: entered promiscuous mode [ 441.855804][T12945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.868519][T12945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.928619][T12945] team0: Port device team_slave_0 added [ 441.943018][T12945] team0: Port device team_slave_1 added [ 442.011607][T12945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.031475][T12945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.061302][T12945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.077979][T12945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.085649][T12945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.112437][T12945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.169026][T12945] hsr_slave_0: entered promiscuous mode [ 442.176039][T12945] hsr_slave_1: entered promiscuous mode [ 442.182219][T12945] debugfs: 'hsr0' already exists in 'hsr' [ 442.189008][T12945] Cannot create hsr debugfs directory [ 442.239309][ T10] gspca_zc3xx: reg_w_i err -71 [ 442.323239][T13194] KVM: debugfs: duplicate directory 13194-4 [ 442.381468][T13207] Cannot find add_set index 0 as target [ 442.506614][T13257] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1756'. [ 442.603807][ T5638] Bluetooth: hci5: command tx timeout [ 442.754144][T12945] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 442.843412][ T10] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 442.850629][ T10] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 442.878319][ T10] usb 1-1: USB disconnect, device number 46 [ 443.035811][T12945] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 443.070196][T12945] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 443.230056][T12945] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 443.318912][T13293] binder: 13291:13293 ioctl c0306201 200000000680 returned -14 [ 443.330794][T12945] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 443.352248][T13293] netlink: 428 bytes leftover after parsing attributes in process `syz.4.1761'. [ 443.355837][T12945] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 443.488858][T12945] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 443.536914][T12945] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 443.840450][T12945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.847503][T13319] binder: 13318:13319 unknown command 0 [ 443.853151][T13319] binder: 13318:13319 ioctl c0306201 2000000001c0 returned -22 [ 443.932871][T12945] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.953522][T10262] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 443.962144][ T1045] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.969323][ T1045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.040822][ T1045] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.047964][ T1045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.101174][T13310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1764'. [ 444.168058][T10262] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 444.176994][T12945] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 444.187572][T10262] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.187595][T10262] usb 3-1: Product: syz [ 444.187609][T10262] usb 3-1: Manufacturer: syz [ 444.187622][T10262] usb 3-1: SerialNumber: syz [ 444.194953][T10262] usb 3-1: config 0 descriptor?? [ 444.324456][T12945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.388916][T12945] veth0_vlan: entered promiscuous mode [ 444.401905][T12945] veth1_vlan: entered promiscuous mode [ 444.566186][T10262] usb 3-1: USB disconnect, device number 57 [ 444.576565][T13343] 8021q: adding VLAN 0 to HW filter on device bond2 [ 444.600913][T13343] bridge0: port 3(bond2) entered blocking state [ 444.630348][T13343] bridge0: port 3(bond2) entered disabled state [ 444.651046][T13343] bond2: entered allmulticast mode [ 444.672261][T13343] bond2: entered promiscuous mode [ 444.680436][ T5638] Bluetooth: hci5: command tx timeout [ 444.708202][T12945] veth0_macvtap: entered promiscuous mode [ 444.748868][T12945] veth1_macvtap: entered promiscuous mode [ 444.817765][T12945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.897685][T12945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.910650][ T1173] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.920603][ T1173] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.935969][ T1173] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.946246][ T1173] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.044380][ T5696] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 445.123922][ T5695] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 445.142571][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.162611][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.200196][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.213729][ T5696] usb 5-1: Using ep0 maxpacket: 16 [ 445.221983][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.231184][ T5696] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.262077][ T5696] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 445.298722][ T5696] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 445.308509][ T5695] usb 2-1: Using ep0 maxpacket: 8 [ 445.326041][ T5695] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 445.334970][ T5696] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 445.345208][ T5695] usb 2-1: config 0 has no interface number 0 [ 445.351457][ T5695] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 445.365618][ T5696] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 445.391972][ T5695] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 445.415913][ T5696] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 445.432742][ T5695] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 445.452046][ T5696] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 445.472588][ T5696] usb 5-1: Manufacturer: syz [ 445.477626][ T5695] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 445.508307][ T5696] usb 5-1: config 0 descriptor?? [ 445.516742][ T5695] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 445.554079][ T5695] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.588710][ T5695] usb 2-1: config 0 descriptor?? [ 445.616314][ T5695] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 445.807543][T11149] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 445.815197][ T5696] rc_core: IR keymap rc-hauppauge not found [ 445.821668][ T5696] Registered IR keymap rc-empty [ 445.834003][ T5696] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 445.863786][ T5696] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 445.898038][ T5696] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 445.927330][ T5696] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input42 [ 445.955815][ T5696] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 445.989511][T11149] usb 3-1: unable to get BOS descriptor or descriptor too short [ 446.003788][ T5696] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 446.021309][T11149] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 446.037075][ T5696] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 446.047650][T11149] usb 3-1: string descriptor 0 read error: -22 [ 446.054450][T11149] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 446.063810][ T5696] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 446.071085][T11149] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.093813][ T5696] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 446.123622][ T5696] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 446.143462][ T5696] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 446.163604][ T5696] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 446.183978][ T5696] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 446.213922][ T5696] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 446.253415][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 446.258616][ T5696] mceusb 5-1:0.0: Registered 42424242 with mce emulator interface version 1 [ 446.271321][ T5696] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 446.296774][ T5696] usb 5-1: USB disconnect, device number 54 [ 446.415520][ T24] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 446.425198][ T24] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 446.439156][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 446.449420][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 446.461535][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 446.474936][ T24] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 446.485100][ T24] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 446.493142][ T24] usb 6-1: Product: syz [ 446.497480][ T24] usb 6-1: Manufacturer: syz [ 446.511689][ T24] cdc_wdm 6-1:1.0: skipping garbage [ 446.522129][ T24] cdc_wdm 6-1:1.0: skipping garbage [ 446.529599][ T24] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 446.535737][ T24] cdc_wdm 6-1:1.0: Unknown control protocol [ 446.663180][T12207] bond0: (slave syz_tun): Releasing backup interface [ 446.696357][T11149] usb 3-1: current rate 2564614 is different from the runtime rate 48000 [ 446.753552][ T5638] Bluetooth: hci5: command tx timeout [ 446.910555][T11149] usb 3-1: USB disconnect, device number 58 [ 447.703418][T10262] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 447.864518][T10262] usb 3-1: Using ep0 maxpacket: 8 [ 447.874725][ T10] usb 2-1: USB disconnect, device number 53 [ 447.879557][T10262] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 447.881677][T13475] ldusb 2-1:0.55: Couldn't submit interrupt_in_urb -19 [ 447.906907][T10262] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 447.921950][ T10] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 447.942100][T10262] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 447.953378][T11149] usb 6-1: USB disconnect, device number 2 [ 447.981140][T10262] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 448.016602][T10262] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 448.039371][T10262] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 448.064891][T10262] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 448.093404][T10262] usb 3-1: config 168 interface 0 has no altsetting 0 [ 448.113220][T10262] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 448.129201][T10262] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 448.155642][T10262] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 448.180744][T10262] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 448.210697][T10262] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 448.235315][T10262] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 448.251445][T10262] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 448.266767][T10262] usb 3-1: config 168 interface 0 has no altsetting 0 [ 448.288702][T13574] bridge4: entered promiscuous mode [ 448.297711][T10262] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 448.308179][T10262] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 448.326780][T10262] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 448.371624][T10262] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 448.417479][T10262] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 448.446658][T10262] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 448.476340][T10262] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 448.536680][T10262] usb 3-1: config 168 interface 0 has no altsetting 0 [ 448.575443][T10262] usb 3-1: string descriptor 0 read error: -22 [ 448.582196][T10262] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 448.600890][T10262] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.623610][T10262] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 448.843663][ T5638] Bluetooth: hci5: command tx timeout [ 448.855657][ T5724] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 449.023209][ T5724] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 449.044938][ T5724] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 449.056953][ T5724] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 449.072278][ T5724] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 449.082025][ T5724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 449.090454][T13605] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1793'. [ 449.090689][ T5724] usb 2-1: Product: syz [ 449.114434][ T5724] usb 2-1: Manufacturer: syz [ 449.114452][ T5724] usb 2-1: SerialNumber: syz [ 449.346133][ T5724] usblp 2-1:1.0: usblp1: USB Unidirectional printer dev 54 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 450.333490][T11149] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 450.517489][T11149] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 450.536196][T11149] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 450.545716][T11149] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 450.554194][T11149] usb 6-1: Product: syz [ 450.563830][T11149] usb 6-1: Manufacturer: syz [ 450.573466][T11149] usb 6-1: SerialNumber: syz [ 450.653446][ T10] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 450.828547][ T10] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 450.846266][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.871180][ T10] usb 5-1: Product: syz [ 450.880574][ T10] usb 5-1: Manufacturer: syz [ 450.891388][ T10] usb 5-1: SerialNumber: syz [ 450.908338][ T10] usb 5-1: config 0 descriptor?? [ 451.078445][ T5696] usb 3-1: USB disconnect, device number 59 [ 451.111948][ T5695] usb 2-1: USB disconnect, device number 54 [ 451.143872][T11149] usblp 6-1:1.0: usblp2: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 451.177316][ T5695] usblp1: removed [ 451.210685][T11149] usb 6-1: USB disconnect, device number 3 [ 451.245923][T11149] usblp2: removed [ 451.971357][ T10] usb 5-1: Firmware version (0.0) predates our first public release. [ 452.012838][ T10] usb 5-1: Please update to version 0.2 or newer [ 452.179358][ T10] usb 5-1: USB disconnect, device number 55 [ 452.338478][T13735] xt_hashlimit: size too large, truncated to 1048576 [ 453.256090][T13770] bridge0: port 1(macvlan3) entered blocking state [ 453.272823][T13770] bridge0: port 1(macvlan3) entered disabled state [ 453.293202][T13770] macvlan3: entered allmulticast mode [ 453.319458][T13770] macvlan3: entered promiscuous mode [ 453.823611][T11149] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 454.014137][T11149] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.040202][T11149] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.062559][T11149] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 454.083532][T11149] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.101327][T11149] usb 3-1: config 0 descriptor?? [ 454.351303][T11149] usbhid 3-1:0.0: can't add hid device: -71 [ 454.376226][T11149] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 454.422367][T11149] usb 3-1: USB disconnect, device number 60 [ 454.465775][T13820] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1824'. [ 454.863464][T11149] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 455.033396][T11149] usb 3-1: Using ep0 maxpacket: 32 [ 455.040421][T11149] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.051580][T11149] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.061672][T11149] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 455.070835][T11149] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.089566][T11149] usb 3-1: config 0 descriptor?? [ 455.097811][T11149] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 455.118364][T11149] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 455.299536][T13790] ldusb 3-1:0.0: Couldn't submit interrupt_in_urb -90 [ 455.318130][ T24] usb 3-1: USB disconnect, device number 61 [ 455.339002][ T24] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 456.725841][T13863] syzkaller0: entered promiscuous mode [ 456.743848][T13863] syzkaller0: entered allmulticast mode [ 456.815210][T13885] netlink: 'syz.4.1832': attribute type 4 has an invalid length. [ 456.838930][T13885] netlink: 'syz.4.1832': attribute type 4 has an invalid length. [ 456.857670][T13888] usb usb7: usbfs: process 13888 (syz.1.1831) did not claim interface 0 before use [ 456.920848][T13884] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 457.206251][ T5696] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 457.370758][ T5696] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 457.388622][ T5696] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.398265][ T5696] usb 6-1: Product: syz [ 457.402818][ T5696] usb 6-1: Manufacturer: syz [ 457.404382][ T24] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 457.408009][ T5696] usb 6-1: SerialNumber: syz [ 457.603983][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 457.661982][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 457.736307][ T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 457.759653][T13945] [ 457.762020][T13945] ============================================ [ 457.768160][T13945] WARNING: possible recursive locking detected [ 457.774313][T13945] syzkaller #0 Tainted: G L [ 457.774524][ T24] usb 3-1: New USB device found, idVendor=045e, idProduct=07c2, bcdDevice= 0.00 [ 457.780282][T13945] -------------------------------------------- [ 457.780292][T13945] syz.1.1841/13945 is trying to acquire lock: [ 457.780302][T13945] ffffffff8f3d6690 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x117/0xf20 [ 457.789827][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.795500][T13945] [ 457.795500][T13945] but task is already holding lock: [ 457.795509][T13945] ffffffff8f3d6690 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x117/0xf20 [ 457.795558][T13945] [ 457.795558][T13945] other info that might help us debug this: [ 457.795565][T13945] Possible unsafe locking scenario: [ 457.795565][T13945] [ 457.795570][T13945] CPU0 [ 457.795574][T13945] ---- [ 457.795578][T13945] lock(qp_broker_list.mutex); [ 457.795590][T13945] lock(qp_broker_list.mutex); [ 457.795602][T13945] [ 457.795602][T13945] *** DEADLOCK *** [ 457.795602][T13945] [ 457.795606][T13945] May be due to missing lock nesting notation [ 457.795606][T13945] [ 457.795612][T13945] 1 lock held by syz.1.1841/13945: [ 457.795621][T13945] #0: ffffffff8f3d6690 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x117/0xf20 [ 457.795665][T13945] [ 457.795665][T13945] stack backtrace: [ 457.795691][T13945] CPU: 0 UID: 0 PID: 13945 Comm: syz.1.1841 Tainted: G L syzkaller #0 PREEMPT(full) [ 457.795710][T13945] Tainted: [L]=SOFTLOCKUP [ 457.795716][T13945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 457.795730][T13945] Call Trace: [ 457.795736][T13945] [ 457.795745][T13945] dump_stack_lvl+0xe8/0x150 [ 457.795763][T13945] print_deadlock_bug+0x279/0x290 [ 457.795785][T13945] __lock_acquire+0x253f/0x2cf0 [ 457.795803][T13945] ? is_bpf_text_address+0x292/0x2b0 [ 457.795818][T13945] ? is_bpf_text_address+0x26/0x2b0 [ 457.795834][T13945] ? kernel_text_address+0xa5/0xe0 [ 457.795856][T13945] ? __kernel_text_address+0xd/0x30 [ 457.795878][T13945] ? vmci_qp_broker_detach+0x117/0xf20 [ 457.795896][T13945] lock_acquire+0x106/0x350 [ 457.795909][T13945] ? vmci_qp_broker_detach+0x117/0xf20 [ 457.795933][T13945] __mutex_lock+0x1a3/0x1550 [ 457.795950][T13945] ? vmci_qp_broker_detach+0x117/0xf20 [ 457.795973][T13945] ? kasan_save_track+0x4f/0x80 [ 457.795991][T13945] ? kasan_save_track+0x3e/0x80 [ 457.796010][T13945] ? kasan_save_free_info+0x46/0x50 [ 457.796027][T13945] ? __kasan_slab_free+0x5c/0x80 [ 457.796047][T13945] ? kfree+0x1c5/0x640 [ 457.796065][T13945] ? vmci_ctx_put+0x5ef/0xc40 [ 457.796080][T13945] ? vmci_ctx_enqueue_datagram+0x3ab/0x420 [ 457.796095][T13945] ? vmci_datagram_dispatch+0x450/0xc60 [ 457.796107][T13945] ? vmci_qp_broker_detach+0x8dd/0xf20 [ 457.796126][T13945] ? vmci_host_close+0x98/0x160 [ 457.796143][T13945] ? vmci_qp_broker_detach+0x117/0xf20 [ 457.796162][T13945] ? exit_to_user_mode_loop+0x193/0x680 [ 457.796177][T13945] ? __pfx___mutex_lock+0x10/0x10 [ 457.796199][T13945] vmci_qp_broker_detach+0x117/0xf20 [ 457.796224][T13945] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 457.796244][T13945] ? kasan_quarantine_put+0xbb/0x1f0 [ 457.796263][T13945] ? lockdep_hardirqs_on+0x7a/0x110 [ 457.796280][T13945] ? kfree+0x1c5/0x640 [ 457.796297][T13945] ? vmci_ctx_put+0x5ef/0xc40 [ 457.796311][T13945] ? vmci_ctx_put+0x141/0xc40 [ 457.796327][T13945] vmci_ctx_put+0x64e/0xc40 [ 457.796355][T13945] ? __pfx___schedule+0x10/0x10 [ 457.796376][T13945] ? vmci_ctx_put+0x141/0xc40 [ 457.796393][T13945] ? __pfx_vmci_ctx_put+0x10/0x10 [ 457.796409][T13945] ? preempt_schedule_thunk+0x16/0x30 [ 457.796431][T13945] ? preempt_schedule_common+0x82/0xd0 [ 457.796449][T13945] vmci_ctx_enqueue_datagram+0x3ab/0x420 [ 457.796468][T13945] vmci_datagram_dispatch+0x450/0xc60 [ 457.796486][T13945] ? __pfx_vmci_datagram_dispatch+0x10/0x10 [ 457.796506][T13945] vmci_qp_broker_detach+0x8dd/0xf20 [ 457.796530][T13945] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 457.796549][T13945] ? kasan_quarantine_put+0xbb/0x1f0 [ 457.796571][T13945] ? kfree+0x1c5/0x640 [ 457.796588][T13945] ? vmci_ctx_put+0x5ef/0xc40 [ 457.796603][T13945] vmci_ctx_put+0x64e/0xc40 [ 457.796618][T13945] ? vmci_ctx_put+0x141/0xc40 [ 457.796634][T13945] ? __pfx_vmci_ctx_put+0x10/0x10 [ 457.796656][T13945] vmci_host_close+0x98/0x160 [ 457.796674][T13945] ? __pfx_vmci_host_close+0x10/0x10 [ 457.796694][T13945] __fput+0x44f/0xa60 [ 457.796714][T13945] task_work_run+0x1d9/0x270 [ 457.796732][T13945] ? __pfx_task_work_run+0x10/0x10 [ 457.796753][T13945] exit_to_user_mode_loop+0x193/0x680 [ 457.796765][T13945] ? rcu_is_watching+0x15/0xb0 [ 457.796783][T13945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.796806][T13945] do_syscall_64+0x353/0x580 [ 457.796823][T13945] ? trace_irq_disable+0x3b/0x140 [ 457.796844][T13945] ? clear_bhb_loop+0x40/0x90 [ 457.796862][T13945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.796877][T13945] RIP: 0033:0x7eff3e59ce59 [ 457.796892][T13945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.796905][T13945] RSP: 002b:00007eff3f4ed028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 457.796921][T13945] RAX: 0000000000000000 RBX: 00007eff3e816090 RCX: 00007eff3e59ce59 [ 457.796933][T13945] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000007 [ 457.796943][T13945] RBP: 00007eff3e632d6f R08: 0000000000000000 R09: 0000000000000000 [ 457.796953][T13945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 457.796963][T13945] R13: 00007eff3e816128 R14: 00007eff3e816090 R15: 00007eff3e93fa48 [ 457.796980][T13945] [ 457.933867][ T10] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 458.111083][ T24] usb 3-1: config 0 descriptor?? [ 458.128323][ T5696] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 458.354978][ T5696] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 458.535099][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 458.545479][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 458.560131][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 458.569851][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.577902][ T10] usb 1-1: Product: syz [ 458.582063][ T10] usb 1-1: Manufacturer: syz [ 458.586789][ T10] usb 1-1: SerialNumber: syz [ 458.795593][T13940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.805026][T13940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.815291][ T10] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 458.820406][T13955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1836'. [ 458.828186][ T10] usb 1-1: USB disconnect, device number 47 [ 458.839709][ T48] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.848758][T13955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1836'. [ 458.849772][ T48] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.869094][ T48] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.878923][ T48] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.313459][ T10] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 459.372498][ T5696] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 459.385027][ T5696] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 459.463374][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 459.469694][ T10] usb 1-1: config index 0 descriptor too short (expected 301, got 72) [ 459.478113][ T10] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 459.488354][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 459.498316][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 459.508095][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 459.518200][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.529263][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 459.538413][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.750136][T13940] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 459.758676][T13940] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 459.767969][ T10] usb 1-1: usb_control_msg returned -71 [ 459.776936][ T10] usbtmc 1-1:16.0: can't read capabilities [ 459.789673][ T10] usb 1-1: USB disconnect, device number 48 [ 459.801453][ T5696] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 459.816904][ T5696] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 459.827559][ T5696] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 459.837218][ T5696] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 459.854654][ T5696] usb 6-1: USB disconnect, device number 4 [ 460.168907][ T24] usb 3-1: USB disconnect, device number 62