last executing test programs: 15.025963754s ago: executing program 3 (id=2052): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000140600000fff07006706000020000000350200000ee60000bf25000000000000bd350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad53010000000000840400000000000014000000000000009500000000000000db13d5d8b740f2cdaabc8383c8f56b8c2b84a800ea6553f3ef4392b3815dcf00c3eebc52267b042d19d6e31e25e589d5f2692c75a547d6f186641ae8c557ccff3878a93b51a0389749df734f49ed5078b10f1e7f2b37626a3ace1ea89f7d2c570720a8"], 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000000008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 14.732903501s ago: executing program 3 (id=2054): syz_open_dev$usbmon(&(0x7f0000000240), 0x401, 0x8802) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@deltaction={0x14, 0x18, 0x1, 0x0, 0x25dfdc00, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x8008001}, 0x40c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) rt_tgsigqueueinfo(r1, r1, 0xe, &(0x7f0000000240)={0x6, 0xffffffff, 0xa7}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000380)=0x5, 0x4) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000200)={0x0, 0x2, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34371113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x13ff, 0xe0, 0x0, 0x0, 0x0, 0x9, 0x2, 0xfffffffc, 0x0, 0x0}) syz_emit_ethernet(0x41c, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x20, 0x0, 0x0) epoll_create(0x4) syz_open_procfs(0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 13.698940451s ago: executing program 3 (id=2060): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r3, 0x401, 0x0) modify_ldt$write(0x1, &(0x7f00000000c0)={0x8, 0x20000800, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, 0xffffffffffffff2a) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$cont(0x21, r4, 0x80000001, 0x4) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x6, 0x800, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000280)=0x1) getdents(r3, &(0x7f0000000340)=""/69, 0x45) 9.765433121s ago: executing program 3 (id=2064): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000140600000fff07006706000020000000350200000ee60000bf25000000000000bd350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad53010000000000840400000000000014000000000000009500000000000000db13d5d8b740f2cdaabc8383c8f56b8c2b84a800ea6553f3ef4392b3815dcf00c3eebc52267b042d19d6e31e25e589d5f2692c75a547d6f186641ae8c557ccff3878a93b51a0389749df734f49ed5078b10f1e7f2b37626a3ace1ea89f7d2c570720a8"], 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000000008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 8.345111043s ago: executing program 0 (id=2070): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x28e) r1 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x4f, 0x22, 0x76, 0x10, 0xb05, 0x9202, 0x944f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x25, 0x2, 0x1, 0xb7, 0xaf, 0xe0, 0xfc, [], [{{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x20, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5}, [@NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048805}, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xa888, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x12}], 0x1}, 0x48084) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = syz_open_dev$vbi(&(0x7f0000000540), 0x3, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d3, 0x190, 0x879, 0x1, 0xdd9f83, 0x1, 0x9, 0x4, 0x9, 0x1, 0x2, 0x13, 0x2800, 0x7f, 0x2b, 0xb763599953cb091f, {0x1, 0x6fd8e84e}, 0x3}}) ioctl$sock_ifreq(r6, 0x8993, &(0x7f0000000180)={'bond0\x00', @ifru_data=&(0x7f0000000000)="df4db079617f254814fe75cbf90a294ca418faa77068af30067e82fff76e4061"}) socket$nl_sock_diag(0x10, 0x3, 0x4) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x8001, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r8, 0xc018937a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000003c0)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300", 0x42}], 0x1) 8.116324577s ago: executing program 2 (id=2071): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) fcntl$setstatus(r0, 0x4, 0x42800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_get$pid(0x3, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000280)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000700), 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000004c0)={0x42, 0x2, 0x2}, 0x10) getsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000480), &(0x7f0000000440)=0x4) r4 = dup(r0) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@random="cfb14e407d33", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0x1, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x8001, {0x2, 0x6, "081331", 0x9, 0xff, 0x0, @loopback, @loopback, [@fragment={0x3b, 0x0, 0xe, 0x0, 0x0, 0x3, 0x65}]}}}}}}}, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f00000000c0)={0x7, 0xffffffffffffffa0, 0xfa00, {0xffffffffffffffff, 0x10c}}, 0xfffffd88) 7.453199686s ago: executing program 3 (id=2073): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syzkaller0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001780)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0xa, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x8, 0x8, 0x8, 0xcfe, 0x3, 0x80000000, 0x8a5, 0x6, 0x10, 0x8, 0xb, 0x2, 0xf6cb, 0x6ab, 0x5, 0x9, 0x8, 0x6, 0x0, 0x4, 0x7fffffff, 0x10000, 0x7, 0x0, 0x0, 0x7, 0x6, 0xfffffffe, 0x372b, 0x2, 0x1000, 0xfffffffa, 0x8, 0xae6, 0x6, 0xfffffffc, 0x1, 0x0, 0x7e, 0x8, 0x9d, 0x3, 0x240, 0x1, 0x7, 0x7, 0x6, 0x1000, 0x7, 0xb, 0x401, 0x789f, 0x7ff, 0x3, 0x8, 0x800, 0x9, 0x10000, 0x6, 0xff, 0x8, 0x8226, 0x400, 0x401, 0xc709, 0x7, 0x5, 0x3, 0x7, 0x10000, 0x4, 0x40, 0x8, 0xc1, 0x7, 0x3ff, 0x200, 0x1, 0x6, 0x7fffffff, 0xfffffff9, 0x3, 0xa, 0xfffffffc, 0x1, 0x0, 0x9, 0x2, 0x4, 0x2, 0xc, 0x7b, 0xff, 0x800, 0x4, 0x80, 0x5, 0x4, 0x5, 0x1000, 0x5, 0x7, 0x40, 0x8, 0x2, 0x6, 0x8226, 0xe, 0x81, 0x3, 0x5, 0x3800000, 0xf12, 0x0, 0x2, 0x8911, 0x9, 0x0, 0x9, 0x2, 0x0, 0x3, 0x8, 0x2, 0x2, 0x2, 0xd098, 0x9, 0x8, 0x3, 0xa, 0xf7, 0x4, 0x3, 0x3, 0x0, 0xfffffffc, 0x0, 0x1, 0x81, 0xffff6660, 0x1, 0x3, 0x4, 0x0, 0x9, 0x3, 0x6, 0x5, 0xd7a, 0xfffffff9, 0x3, 0x8, 0x2, 0xfffffffd, 0x3864, 0x4, 0x7, 0x1, 0x4, 0x4c, 0x82ca, 0x4eeb, 0x6, 0xbdd, 0x5fdf, 0xc, 0x3, 0x10000, 0x9, 0x54, 0x8, 0x8, 0x800, 0x1ff, 0x9, 0xccc, 0x1, 0x7, 0x7ff, 0x2, 0xe, 0xc, 0xb, 0x80000001, 0x8001, 0x4, 0x9, 0xfffffffe, 0xfffffffa, 0x6, 0xb, 0x7ff, 0x1, 0x10, 0x2, 0x1, 0x4a0, 0x3, 0x0, 0x3ff, 0x9, 0x7, 0x1, 0x5, 0x7, 0x1, 0xfffffe01, 0x8001, 0x6, 0x3, 0x3, 0x9, 0x2, 0x4, 0x0, 0x1, 0x100, 0x4, 0x3, 0xffffff00, 0x6, 0x4, 0x3, 0x6, 0x5, 0x5c49, 0x7f, 0x7, 0x8cc7, 0x7, 0x0, 0x1, 0xcc99, 0x3, 0xb, 0x0, 0xffff, 0x0, 0xb64, 0x4, 0xf, 0x9, 0x77dc, 0x8, 0x1, 0x4, 0x7ff, 0x676, 0x10, 0x8, 0xffff, 0xfff, 0x8, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x480d8}, 0x4000000) 7.310359394s ago: executing program 2 (id=2074): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x141000, 0x0) symlink(0x0, &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x95) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000340)={0x2000, r6}, 0x0) landlock_restrict_self(r3, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x3, 0x8, 0xc}, 0x50) read$sequencer(r7, &(0x7f0000000780)=""/35, 0x23) 7.223395949s ago: executing program 3 (id=2075): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000280)=0x1) ioctl$TCSETS(r4, 0x89f0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x802, 0xd, "5dee0000005940090000000f00"}) 6.311313582s ago: executing program 2 (id=2078): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r4 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r4, &(0x7f0000000100)='./file1\x00', r4, &(0x7f0000000240)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) socket(0x10, 0x3, 0x0) 5.306900991s ago: executing program 2 (id=2079): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') open_by_handle_at(r0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x22) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r4 = syz_io_uring_setup(0x499, 0x0, &(0x7f0000000100)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r4, 0x3516, 0x0, 0x4, 0x0, 0x0) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f37, 0x80000000, 0x3, 0x80008, 0x3, 0xb, 0x4, 0x7, 0xa, 0x5, 0x401, 0xfffffffb, 0x200001, 0x23, 0x10006, 0x101, 0xffffffff, 0x2, 0x1, 0x40000006, 0x89, 0xcaa7, 0x9, 0x92d1, 0x3ff, 0xe68, 0x3d, 0x9, 0x6, 0x0, 0xfffffff9]}) 4.760614093s ago: executing program 1 (id=2080): mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount$bind(&(0x7f0000001a80)='./file0\x00', &(0x7f0000001ac0)='./file0\x00', &(0x7f0000001b00), 0x202842, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) process_vm_readv(r2, &(0x7f0000001700)=[{&(0x7f0000001440)=""/251, 0xfb}, {&(0x7f0000000180)=""/154, 0x9a}, {&(0x7f00000003c0)=""/103, 0x67}, {&(0x7f0000000040)=""/62, 0x3e}, {&(0x7f0000001540)=""/216, 0xd8}, {&(0x7f0000001640)=""/182, 0xb6}], 0x6, &(0x7f0000001a40)=[{&(0x7f0000001780)=""/170, 0xaa}, {&(0x7f0000001840)=""/230, 0xe6}, {&(0x7f0000001940)=""/145, 0x91}, {&(0x7f0000001a00)=""/3, 0x3}], 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f00000000c0)='4', 0x1}], 0x1) 4.616392331s ago: executing program 0 (id=2081): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300), 0x40000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000400)={0xf0f016, 0x2}) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat2(0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x200001, 0x108, 0x10}, 0x18) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x10000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x14442cc7}}, './file0\x00'}) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, 0x0, &(0x7f0000000280)) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="c1", 0x1}], 0x1) ioctl$SNDCTL_DSP_GETISPACE(r7, 0x8010500d, &(0x7f0000000340)) 4.375081135s ago: executing program 1 (id=2082): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000191000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x11, r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="150327bd7000fdeddf25040000000c0001800800030003"], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x4800) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c) 4.051103374s ago: executing program 4 (id=2083): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x82) open_tree(r3, 0x0, 0x1000) fsync(r3) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) syz_open_procfs(0x0, 0x0) 3.932537141s ago: executing program 0 (id=2084): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000000008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 3.876257634s ago: executing program 2 (id=2085): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syzkaller0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001780)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0xa, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x8, 0x8, 0x8, 0xcfe, 0x3, 0x80000000, 0x8a5, 0x6, 0x10, 0x8, 0xb, 0x2, 0xf6cb, 0x6ab, 0x5, 0x9, 0x8, 0x6, 0x0, 0x4, 0x7fffffff, 0x10000, 0x7, 0x0, 0x0, 0x7, 0x6, 0xfffffffe, 0x372b, 0x2, 0x1000, 0xfffffffa, 0x8, 0xae6, 0x6, 0xfffffffc, 0x1, 0x0, 0x7e, 0x8, 0x9d, 0x3, 0x240, 0x1, 0x7, 0x7, 0x6, 0x1000, 0x7, 0xb, 0x401, 0x789f, 0x7ff, 0x3, 0x8, 0x800, 0x9, 0x10000, 0x6, 0xff, 0x8, 0x8226, 0x400, 0x401, 0xc709, 0x7, 0x5, 0x3, 0x7, 0x10000, 0x4, 0x40, 0x8, 0xc1, 0x7, 0x3ff, 0x200, 0x1, 0x6, 0x7fffffff, 0xfffffff9, 0x3, 0xa, 0xfffffffc, 0x1, 0x0, 0x9, 0x2, 0x4, 0x2, 0xc, 0x7b, 0xff, 0x800, 0x4, 0x80, 0x5, 0x4, 0x5, 0x1000, 0x5, 0x7, 0x40, 0x8, 0x2, 0x6, 0x8226, 0xe, 0x81, 0x3, 0x5, 0x3800000, 0xf12, 0x0, 0x2, 0x8911, 0x9, 0x0, 0x9, 0x2, 0x0, 0x3, 0x8, 0x2, 0x2, 0x2, 0xd098, 0x9, 0x8, 0x3, 0xa, 0xf7, 0x4, 0x3, 0x3, 0x0, 0xfffffffc, 0x0, 0x1, 0x81, 0xffff6660, 0x1, 0x3, 0x4, 0x0, 0x9, 0x3, 0x6, 0x5, 0xd7a, 0xfffffff9, 0x3, 0x8, 0x2, 0xfffffffd, 0x3864, 0x4, 0x7, 0x1, 0x4, 0x4c, 0x82ca, 0x4eeb, 0x6, 0xbdd, 0x5fdf, 0xc, 0x3, 0x10000, 0x9, 0x54, 0x8, 0x8, 0x800, 0x1ff, 0x9, 0xccc, 0x1, 0x7, 0x7ff, 0x2, 0xe, 0xc, 0xb, 0x80000001, 0x8001, 0x4, 0x9, 0xfffffffe, 0xfffffffa, 0x6, 0xb, 0x7ff, 0x1, 0x10, 0x2, 0x1, 0x4a0, 0x3, 0x0, 0x3ff, 0x9, 0x7, 0x1, 0x5, 0x7, 0x1, 0xfffffe01, 0x8001, 0x6, 0x3, 0x3, 0x9, 0x2, 0x4, 0x0, 0x1, 0x100, 0x4, 0x3, 0xffffff00, 0x6, 0x4, 0x3, 0x6, 0x5, 0x5c49, 0x7f, 0x7, 0x8cc7, 0x7, 0x0, 0x1, 0xcc99, 0x3, 0xb, 0x0, 0xffff, 0x0, 0xb64, 0x4, 0xf, 0x9, 0x77dc, 0x8, 0x1, 0x4, 0x7ff, 0x676, 0x10, 0x8, 0xffff, 0xfff, 0x8, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x480d8}, 0x4000000) 3.425993921s ago: executing program 1 (id=2086): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$unix(0x1, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x5}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {0x6, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x0, 0x5, 0x1, 0xc}, 0xb, 0xfffffffe, 0x8, 0x5, 0x9, 0xd, 0x9, 0xf, 0x9, 0x1, {0xffff1c72, 0x4, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.299003437s ago: executing program 4 (id=2087): socket(0xa, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffe, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x4, 0xfffffffffffffffd, 0x0, 0xf3, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x6, 0x0, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3486, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x800000, 0x0, 0x101, 0x0, 0xd721, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79a2, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4a44e74b]}) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000300)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f0000000880)=""/99, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0xfffffffe) 3.204149883s ago: executing program 2 (id=2088): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x2c, 0x0, 0xb, 0x5, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_COMPAT_NAME={0x8, 0x1, 'u32\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004045}, 0x20000000) 3.168895905s ago: executing program 4 (id=2089): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r4 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r4, &(0x7f0000000100)='./file1\x00', r4, &(0x7f0000000240)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) socket(0x10, 0x3, 0x0) 2.950740598s ago: executing program 0 (id=2090): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x1000007, 0x6361, 0x5, 0xffffffed, 0x26}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x170b923, 0x80000, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x24, 0x25, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xb}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) 2.949686488s ago: executing program 1 (id=2091): openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7c}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x8000) syz_emit_ethernet(0x256, 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x4bfb, 0xffffffffffffffff) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x1, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000140)={0xf9a0000, 0x8, 0x6, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x251c9d1d73feec9c, 0x2, '\x00', @string=&(0x7f00000000c0)=0x2}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x38, &(0x7f0000000200)="49d9325af8c3858779b7febae9c4f40ec81e09093d0ed2867d2462b88ae2a681b73217aed1988bd863cb2802b541cd04cd75c48f467d", 0x36) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="030b28bd7000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20040880) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8090}, 0x44) 2.189573733s ago: executing program 4 (id=2092): mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount$bind(&(0x7f0000001a80)='./file0\x00', &(0x7f0000001ac0)='./file0\x00', &(0x7f0000001b00), 0x202842, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) process_vm_readv(r2, &(0x7f0000001700)=[{&(0x7f0000001440)=""/251, 0xfb}, {&(0x7f0000000180)=""/154, 0x9a}, {&(0x7f00000003c0)=""/103, 0x67}, {&(0x7f0000000040)=""/62, 0x3e}, {&(0x7f0000001540)=""/216, 0xd8}, {&(0x7f0000001640)=""/182, 0xb6}], 0x6, &(0x7f0000001a40)=[{&(0x7f0000001780)=""/170, 0xaa}, {&(0x7f0000001840)=""/230, 0xe6}, {&(0x7f0000001940)=""/145, 0x91}, {&(0x7f0000001a00)=""/3, 0x3}], 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f00000000c0)='4', 0x1}], 0x1) 1.506890522s ago: executing program 0 (id=2093): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3, 0x0, 0x0, 0x5}, 0xa0}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r3, &(0x7f00000001c0)=""/4068, 0xfe4) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xf7fffe0000000001, 0xfa11, 0xffffffff}, 0x0) writev(r2, &(0x7f00000013c0)=[{&(0x7f0000001200)='hES', 0x3}, {&(0x7f0000001440)="f6a4380663eb330377c1f477014dabcb3ef9e02318d5c3ae3697c12987ad7de40d2932e384a9040000005873f266e0804e6972284f2de8b924fc96bdb8c5c2cfdfb82c10a257dbf4763b40c732c5e491a0748de5f3d7c07d3f91bd0560ccce809e9923cf47ecb3a6c68697a000ae24157bd2962799403a0c5272d19d420e4f", 0x7f}, {&(0x7f0000001240)="ff41d76d24ffeba52a560d9c876ee7be3a2901cdaee8a18d97a6253a9c9ffda0b609000000000000003898ee10b3362d79e93a8172dc97692e1fcc096b7a32519118d4f27ca45691f40453489d8373ba9e76478b428e696505264ff487a03886e44ffe9865c877cb9691fdee2f59e2d12c63c3dc33244f4710ad7a49062689ac", 0x1e}, {&(0x7f00000012c0)='\x00'/12, 0xb}, {&(0x7f0000001380)="fe634250d7183e8f07cfa09b221ed131a446b924f1", 0x15}], 0x5) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f00000011c0)=[{0xe258, 0x5e, 0x0, 0x7}, {0xf, 0x6, 0x7, 0x4001}]}) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000001c0)=@nat={'nat\x00', 0x1b, 0x5, 0x6c0, 0x1b0, 0x500, 0xffffffff, 0x500, 0x2a8, 0x668, 0x668, 0xffffffff, 0x668, 0x668, 0x5, 0x0, {[{{@uncond, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@srh1={{0x90}, {0xc, 0x7, 0x1, 0x18, 0x7, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, [0xffffff00, 0xff000000, 0xffffffff, 0xffffff00], [0xff0000ff, 0xff000000, 0xffffffff, 0xff], [0xffffff00, 0xff000000, 0xff000000, 0xff000000], 0x2201, 0x140c}}, @common=@srh={{0x30}, {0x6, 0x5, 0x2, 0x1, 0x7, 0x2220, 0x200c}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x2e, @ipv4=@multicast2, @ipv6=@dev={0xfe, 0x80, '\x00', 0x25}, @icmp_id=0x64, @port=0x4e23}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {'Rx', 0x1}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x7, 0x6}}}, {{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff000000, 0x0, 0xff, 0xffffff00], [0x0, 0x0, 0xff, 0xffffffff], '\x00', 'ip6gre0\x00', {}, {}, 0x2, 0x2, 0x0, 0x34}, 0x0, 0x210, 0x258, 0x0, {}, [@common=@srh={{0x30}, {0x88, 0x3, 0x3, 0x4, 0x0, 0x1530, 0x3}}, @common=@rt={{0x138}, {0x80000001, [0x5, 0x9], 0xffffffff, 0x1, 0x0, [@empty, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @remote, @ipv4={'\x00', '\xff\xff', @empty}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x41}, @local, @rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback], 0xd}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x33}, @ipv6=@private0={0xfc, 0x0, '\x00', 0xd}, @port=0x4e22, @gre_key=0x70}}}, {{@ipv6={@loopback, @empty, [0xff000000, 0xff000000, 0xffffff00, 0xffffffff], [0x0, 0xffffff00, 0xffffffff, 0xffffff00], 'tunl0\x00', 'pimreg1\x00', {}, {}, 0xc, 0xf4, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x10, @ipv6=@dev={0xfe, 0x80, '\x00', 0x44}, @ipv4=@rand_addr=0x64010102, @port=0x4e23, @gre_key=0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x720) connect$inet6(r4, &(0x7f0000000040)={0xa, 0xce22, 0x40, @empty, 0xa28}, 0x1c) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0xe2102, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='net/ip_tables_matches\x00') preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 739.912607ms ago: executing program 1 (id=2094): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300), 0x40000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000400)={0xf0f016, 0x2}) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat2(0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x200001, 0x108, 0x10}, 0x18) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x10000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x14442cc7}}, './file0\x00'}) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000140)={0x190, 0x640, 0x3c0, 0x280, 0x8, 0x5, 0x0, 0x0, {0x77, 0x6}, {0x0, 0x0, 0x1}, {0x6, 0x8}, {0x3ff, 0xfffff506, 0x1}, 0x2, 0x10, 0x3, 0x10001, 0x1, 0x38c2, 0x5, 0x3, 0x0, 0x7, 0x2, 0x0, 0x8, 0x200, 0x2, 0x4}) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, 0x0, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="c1", 0x1}], 0x1) ioctl$SNDCTL_DSP_GETISPACE(r7, 0x8010500d, &(0x7f0000000340)) 665.554652ms ago: executing program 4 (id=2095): mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xa0, 0x29, 0x4, {0x2c, 0x10, '\x00', [@enc_lim={0x4, 0x1, 0xfd}, @generic={0xfe, 0x55, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a82"}, @generic={0x80, 0x9, "09e12e5f0b6bdcf72f"}, @ra={0x5, 0x2, 0xa7e}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x8, "e80ec8b633e304ec"}]}}}, @hoplimit={{0x14}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x0, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x138}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 318.152102ms ago: executing program 1 (id=2096): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000002300)=@raw={'raw\x00', 0xc01, 0x3, 0x2298, 0x1100, 0x5002004a, 0x0, 0x0, 0x0, 0x2200, 0x3c8, 0x3c8, 0x2200, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x1, 0x7], 0x6, 0x2}, {0x2, [0x0, 0x6, 0x4, 0x9, 0x0, 0x89ce99baffcf6900], 0x1, 0x1}}}}, {{@uncond, 0x0, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x1, 0x1, './cgroup.net/syz1\x00', 0x2, {0x5}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0xffffff00, 0xff000000, 0xff, 0xff0000ff], 0x4e22, 0x4c20, 0x4e24, 0x4e23, 0xc9, 0x0, 0x3b, 0x83, 0x25}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x22f8) vmsplice(r0, 0x0, 0x0, 0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000000c0)=0x0) ptrace$ARCH_GET_FS(0x1e, r3, &(0x7f0000000100), 0x1003) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000003500)={&(0x7f00000034c0)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000810}, 0x80) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000040)={0x7, 0x3, 0x4, 0x7}) sendmmsg$inet(r4, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}], 0x1, 0x0) 2.15745ms ago: executing program 0 (id=2097): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x82) open_tree(r3, 0x0, 0x1000) fsync(r3) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) syz_open_procfs(0x0, 0x0) 0s ago: executing program 4 (id=2098): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001780)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x10}, {}, {0xa, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x8, 0x8, 0x8, 0xcfe, 0x3, 0x80000000, 0x8a5, 0x6, 0x10, 0x8, 0xb, 0x2, 0xf6cb, 0x6ab, 0x5, 0x9, 0x8, 0x6, 0x0, 0x4, 0x7fffffff, 0x10000, 0x7, 0x0, 0x0, 0x7, 0x6, 0xfffffffe, 0x372b, 0x2, 0x1000, 0xfffffffa, 0x8, 0xae6, 0x6, 0xfffffffc, 0x1, 0x0, 0x7e, 0x8, 0x9d, 0x3, 0x240, 0x1, 0x7, 0x7, 0x6, 0x1000, 0x7, 0xb, 0x401, 0x789f, 0x7ff, 0x3, 0x8, 0x800, 0x9, 0x10000, 0x6, 0xff, 0x8, 0x8226, 0x400, 0x401, 0xc709, 0x7, 0x5, 0x3, 0x7, 0x10000, 0x4, 0x40, 0x8, 0xc1, 0x7, 0x3ff, 0x200, 0x1, 0x6, 0x7fffffff, 0xfffffff9, 0x3, 0xa, 0xfffffffc, 0x1, 0x0, 0x9, 0x2, 0x4, 0x2, 0xc, 0x7b, 0xff, 0x800, 0x4, 0x80, 0x5, 0x4, 0x5, 0x1000, 0x5, 0x7, 0x40, 0x8, 0x2, 0x6, 0x8226, 0xe, 0x81, 0x3, 0x5, 0x3800000, 0xf12, 0x0, 0x2, 0x8911, 0x9, 0x0, 0x9, 0x2, 0x0, 0x3, 0x8, 0x2, 0x2, 0x2, 0xd098, 0x9, 0x8, 0x3, 0xa, 0xf7, 0x4, 0x3, 0x3, 0x0, 0xfffffffc, 0x0, 0x1, 0x81, 0xffff6660, 0x1, 0x3, 0x4, 0x0, 0x9, 0x3, 0x6, 0x5, 0xd7a, 0xfffffff9, 0x3, 0x8, 0x2, 0xfffffffd, 0x3864, 0x4, 0x7, 0x1, 0x4, 0x4c, 0x82ca, 0x4eeb, 0x6, 0xbdd, 0x5fdf, 0xc, 0x3, 0x10000, 0x9, 0x54, 0x8, 0x8, 0x800, 0x1ff, 0x9, 0xccc, 0x1, 0x7, 0x7ff, 0x2, 0xe, 0xc, 0xb, 0x80000001, 0x8001, 0x4, 0x9, 0xfffffffe, 0xfffffffa, 0x6, 0xb, 0x7ff, 0x1, 0x10, 0x2, 0x1, 0x4a0, 0x3, 0x0, 0x3ff, 0x9, 0x7, 0x1, 0x5, 0x7, 0x1, 0xfffffe01, 0x8001, 0x6, 0x3, 0x3, 0x9, 0x2, 0x4, 0x0, 0x1, 0x100, 0x4, 0x3, 0xffffff00, 0x6, 0x4, 0x3, 0x6, 0x5, 0x5c49, 0x7f, 0x7, 0x8cc7, 0x7, 0x0, 0x1, 0xcc99, 0x3, 0xb, 0x0, 0xffff, 0x0, 0xb64, 0x4, 0xf, 0x9, 0x77dc, 0x8, 0x1, 0x4, 0x7ff, 0x676, 0x10, 0x8, 0xffff, 0xfff, 0x8, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x3}, {}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x480d8}, 0x4000000) kernel console output (not intermixed with test programs): 1feb9 code=0x7ffc0000 [ 205.795835][ T4254] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 205.821027][ T4254] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 205.850966][ T26] audit: type=1326 audit(1769951832.355:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6682 comm="syz.4.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70f0f1feb9 code=0x7ffc0000 [ 205.876539][ T4254] usb 1-1: config 220 interface 0 has no altsetting 0 [ 206.025851][ T4513] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 206.075840][ T4254] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 206.095290][ T4254] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.130775][ T4254] usb 1-1: Product: syz [ 206.164453][ T4254] usb 1-1: Manufacturer: syz [ 206.205796][ T4254] usb 1-1: SerialNumber: syz [ 206.285469][ T4513] usb 4-1: Using ep0 maxpacket: 16 [ 206.311987][ T6705] Can't find ip_set type hash„{et,port [ 206.405861][ T4513] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.450704][ T4513] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 206.666258][ T4513] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 206.705643][ T4254] usb 1-1: Found UVC 0.00 device syz (8086:0b07) [ 206.718422][ T4254] usb 1-1: No valid video chain found. [ 206.730344][ T4513] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.783484][ T4254] usb 1-1: USB disconnect, device number 22 [ 206.790629][ T4513] usb 4-1: Product: syz [ 206.801181][ T4513] usb 4-1: Manufacturer: syz [ 206.836556][ T4513] usb 4-1: SerialNumber: syz [ 207.165695][ T4513] usb 4-1: 0:2 : does not exist [ 207.226557][ T4513] usb 4-1: USB disconnect, device number 14 [ 207.506785][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 207.965591][ T4255] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 208.205687][ T4255] usb 3-1: Using ep0 maxpacket: 16 [ 208.327053][ T4255] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.349450][ T4255] usb 3-1: config 0 has no interfaces? [ 208.379034][ T4255] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 208.427981][ T4255] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.471215][ T4255] usb 3-1: config 0 descriptor?? [ 208.739379][ T4255] usb 3-1: USB disconnect, device number 15 [ 209.675553][ T21] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 209.915494][ T21] usb 3-1: Using ep0 maxpacket: 16 [ 210.035759][ T21] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.055955][ T21] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 210.225898][ T21] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 210.239606][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.259914][ T21] usb 3-1: Product: syz [ 210.269811][ T21] usb 3-1: Manufacturer: syz [ 210.280201][ T21] usb 3-1: SerialNumber: syz [ 210.615698][ T21] usb 3-1: 0:2 : does not exist [ 210.669056][ T21] usb 3-1: USB disconnect, device number 16 [ 210.748277][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 211.513350][ T26] audit: type=1326 audit(1769951838.555:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6846 comm="syz.1.796" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f773878fcd7 code=0x0 [ 213.014412][ T6891] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 213.014412][ T6891] The task syz.1.805 (6891) triggered the difference, watch for misbehavior. [ 213.579455][ T6897] mmap: syz.0.806 (6897) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 214.165587][ T4255] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 214.536652][ T4255] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 214.583625][ T4255] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 214.681167][ T4255] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 214.763750][ T4255] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 214.813715][ T4255] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 214.955631][ T4255] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 214.975103][ T4255] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 215.000400][ T4255] usb 2-1: Product: syz [ 215.014299][ T4255] usb 2-1: Manufacturer: syz [ 215.096434][ T4255] cdc_wdm 2-1:1.0: skipping garbage [ 215.112076][ T4255] cdc_wdm 2-1:1.0: skipping garbage [ 215.132532][ T4255] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 215.158436][ T4255] cdc_wdm 2-1:1.0: Unknown control protocol [ 215.897389][ T4247] usb 2-1: USB disconnect, device number 22 [ 217.055642][ T4255] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 217.315679][ T4255] usb 4-1: Using ep0 maxpacket: 16 [ 217.326826][ T6968] tipc: Enabled bearer , priority 0 [ 217.335506][ T4247] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 217.353827][ T6968] device syzkaller0 entered promiscuous mode [ 217.392962][ T6968] tipc: Resetting bearer [ 217.430607][ T6967] tipc: Resetting bearer [ 217.436365][ T4255] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.436392][ T4255] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 217.501826][ T6967] tipc: Disabling bearer [ 217.595700][ T4255] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 217.604801][ T4255] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.634523][ T4255] usb 4-1: Product: syz [ 217.642969][ T4255] usb 4-1: Manufacturer: syz [ 217.650067][ T4255] usb 4-1: SerialNumber: syz [ 217.765751][ T4247] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.786178][ T4247] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.796434][ T4247] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 217.807265][ T4247] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.836960][ T4247] usb 5-1: config 0 descriptor?? [ 218.055672][ T4255] usb 4-1: 0:2 : does not exist [ 218.097173][ T4254] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 218.123298][ T4255] usb 4-1: USB disconnect, device number 15 [ 218.343648][ T6994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.838'. [ 218.356175][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 218.525747][ T4254] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 218.534436][ T4254] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 218.577977][ T4254] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 218.635584][ T4254] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 218.695471][ T4254] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 218.850835][ T7005] Can't find ip_set type hash„{et,port [ 218.875921][ T4254] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 218.910673][ T4254] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 218.949485][ T4254] usb 1-1: Product: syz [ 218.953716][ T4254] usb 1-1: Manufacturer: syz [ 219.046515][ T4254] cdc_wdm 1-1:1.0: skipping garbage [ 219.052976][ T4254] cdc_wdm 1-1:1.0: skipping garbage [ 219.093273][ T4254] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 219.134307][ T4254] cdc_wdm 1-1:1.0: Unknown control protocol [ 219.867010][ T4247] usbhid 5-1:0.0: can't add hid device: -71 [ 219.873288][ T13] usb 1-1: USB disconnect, device number 23 [ 219.891713][ T4247] usbhid: probe of 5-1:0.0 failed with error -71 [ 219.956548][ T4247] usb 5-1: USB disconnect, device number 15 [ 220.006985][ T7015] tipc: Enabled bearer , priority 0 [ 220.061746][ T7022] device syzkaller0 entered promiscuous mode [ 220.158737][ T7015] tipc: Resetting bearer [ 220.227400][ T7014] tipc: Resetting bearer [ 220.279303][ T7014] tipc: Disabling bearer [ 220.390974][ T4255] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 220.765635][ T4255] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 220.779220][ T4255] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 220.840485][ T4255] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 220.887350][ T4255] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 220.939688][ T4255] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 221.115590][ T4255] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 221.142233][ T4255] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 221.175552][ T4255] usb 4-1: Product: syz [ 221.179759][ T4255] usb 4-1: Manufacturer: syz [ 221.246811][ T4255] cdc_wdm 4-1:1.0: skipping garbage [ 221.252075][ T4255] cdc_wdm 4-1:1.0: skipping garbage [ 221.279517][ T4255] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 221.295574][ T13] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 221.305138][ T4255] cdc_wdm 4-1:1.0: Unknown control protocol [ 221.545518][ T13] usb 5-1: Using ep0 maxpacket: 16 [ 221.665591][ T13] usb 5-1: config 4 has an invalid interface number: 37 but max is 0 [ 221.673720][ T13] usb 5-1: config 4 has no interface number 0 [ 221.744994][ T13] usb 5-1: config 4 interface 37 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 221.792660][ T13] usb 5-1: config 4 interface 37 has no altsetting 0 [ 222.007680][ T13] usb 5-1: New USB device found, idVendor=0b05, idProduct=9202, bcdDevice=94.4f [ 222.049206][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.086847][ T13] usb 5-1: Product: syz [ 222.091067][ T13] usb 5-1: Manufacturer: syz [ 222.131974][ T13] usb 5-1: SerialNumber: syz [ 222.175842][ T7046] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 222.307589][ T21] usb 4-1: USB disconnect, device number 16 [ 222.447811][ T13] usb 5-1: USB disconnect, device number 16 [ 222.644097][ T7062] QAT: failed to copy from user. [ 223.805545][ T13] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 224.267591][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 224.284551][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 224.415654][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 224.437621][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 224.595588][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 224.620506][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 224.729848][ T7083] tipc: Enabled bearer , priority 0 [ 224.779814][ T7083] tipc: Resetting bearer [ 224.837854][ T7078] tipc: Disabling bearer [ 224.855785][ T13] usb 4-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 224.873934][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.910216][ T13] usb 4-1: Product: syz [ 224.934580][ T13] usb 4-1: Manufacturer: syz [ 224.955895][ T13] usb 4-1: SerialNumber: syz [ 224.985996][ T13] usb 4-1: config 0 descriptor?? [ 225.078632][ T13] ti_usb_3410_5052 4-1:0.0: TI USB 5052 2 port adapter converter detected [ 225.093172][ T13] ti_usb_3410_5052 4-1:0.0: missing endpoints [ 225.785778][ T7092] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 226.131728][ T7114] tipc: Failed to remove unknown binding: 66,0,0/0:3436128155/3436128156 [ 226.147804][ T7114] tipc: Failed to remove unknown binding: 66,0,0/0:3436128155/3436128156 [ 226.262452][ T7092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.393745][ T7092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.404161][ T7092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.415299][ T7092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.435636][ T7092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.464713][ T7092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.489812][ T7092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.516173][ T7092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.534287][ T7092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.554834][ T7092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.565205][ T7092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.581350][ T7092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.681544][ T7118] Can't find ip_set type hash„{et,port [ 226.886314][ T7124] netlink: 44 bytes leftover after parsing attributes in process `syz.2.873'. [ 227.064577][ T7126] tipc: Enabled bearer , priority 0 [ 227.130646][ T7130] device syzkaller0 entered promiscuous mode [ 227.220793][ T7126] tipc: Resetting bearer [ 227.259352][ T7125] tipc: Resetting bearer [ 227.316294][ T7125] tipc: Disabling bearer [ 227.855745][ T21] usb 4-1: USB disconnect, device number 17 [ 228.647502][ T7158] tipc: Failed to remove unknown binding: 66,0,0/0:2952719269/2952719270 [ 228.675838][ T7159] device syzkaller0 entered promiscuous mode [ 228.738761][ T7158] tipc: Failed to remove unknown binding: 66,0,0/0:2952719269/2952719270 [ 229.175549][ T21] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 229.425456][ T21] usb 3-1: Using ep0 maxpacket: 16 [ 229.520917][ T7177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.891'. [ 229.540655][ T7178] netlink: 'syz.3.892': attribute type 1 has an invalid length. [ 229.548700][ T21] usb 3-1: config 4 has an invalid interface number: 37 but max is 0 [ 229.567212][ T21] usb 3-1: config 4 has no interface number 0 [ 229.584333][ T21] usb 3-1: config 4 interface 37 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 229.642365][ T21] usb 3-1: config 4 interface 37 has no altsetting 0 [ 229.720114][ T7180] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 229.798297][ T7180] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 229.831547][ T7180] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 229.845788][ T21] usb 3-1: New USB device found, idVendor=0b05, idProduct=9202, bcdDevice=94.4f [ 229.865194][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.885635][ T7180] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 229.906811][ T21] usb 3-1: Product: syz [ 229.911033][ T21] usb 3-1: Manufacturer: syz [ 229.926936][ T7180] bond1: (slave geneve2): making interface the new active one [ 229.927480][ T21] usb 3-1: SerialNumber: syz [ 229.945872][ T13] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 229.957839][ T7180] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 229.986134][ T7162] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 229.988892][ T7178] netlink: 28 bytes leftover after parsing attributes in process `syz.3.892'. [ 230.024364][ T7178] 8021q: adding VLAN 0 to HW filter on device bond1 [ 230.225527][ T13] usb 2-1: Using ep0 maxpacket: 16 [ 230.235821][ T7195] tipc: Failed to remove unknown binding: 66,0,0/0:2411743449/2411743450 [ 230.249584][ T21] usb 3-1: USB disconnect, device number 17 [ 230.310551][ T7195] tipc: Failed to remove unknown binding: 66,0,0/0:2411743449/2411743450 [ 230.372468][ T13] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.392868][ T13] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 230.507941][ T7203] netlink: 4 bytes leftover after parsing attributes in process `syz.4.901'. [ 230.615791][ T13] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 230.645564][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.653639][ T13] usb 2-1: Product: syz [ 230.689474][ T13] usb 2-1: Manufacturer: syz [ 230.694137][ T13] usb 2-1: SerialNumber: syz [ 230.893896][ T7213] QAT: failed to copy from user. [ 231.066706][ T13] usb 2-1: 0:2 : does not exist [ 231.118767][ T13] usb 2-1: USB disconnect, device number 23 [ 231.166622][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 231.712502][ T7229] tipc: Failed to remove unknown binding: 66,0,0/0:2026960863/2026960864 [ 231.733739][ T7229] tipc: Failed to remove unknown binding: 66,0,0/0:2026960863/2026960864 [ 232.265603][ T13] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 232.525542][ T13] usb 2-1: Using ep0 maxpacket: 16 [ 232.645657][ T13] usb 2-1: config 4 has an invalid interface number: 37 but max is 0 [ 232.664428][ T13] usb 2-1: config 4 has no interface number 0 [ 232.690048][ T13] usb 2-1: config 4 interface 37 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 232.734113][ T13] usb 2-1: config 4 interface 37 has no altsetting 0 [ 232.935669][ T13] usb 2-1: New USB device found, idVendor=0b05, idProduct=9202, bcdDevice=94.4f [ 232.983193][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.034061][ T13] usb 2-1: Product: syz [ 233.052059][ T13] usb 2-1: Manufacturer: syz [ 233.062566][ T13] usb 2-1: SerialNumber: syz [ 233.108994][ T7245] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 233.390533][ T13] usb 2-1: USB disconnect, device number 24 [ 234.025527][ T4233] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 234.237661][ T26] audit: type=1326 audit(1769951861.295:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7272 comm="syz.1.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7738795eb9 code=0x7ffc0000 [ 234.265580][ T4233] usb 1-1: Using ep0 maxpacket: 16 [ 234.331370][ T26] audit: type=1326 audit(1769951861.325:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7272 comm="syz.1.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7738795eb9 code=0x7ffc0000 [ 234.386061][ T4233] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.414815][ T4233] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 234.461260][ T26] audit: type=1326 audit(1769951861.325:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7272 comm="syz.1.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f7738795eb9 code=0x7ffc0000 [ 234.621898][ T26] audit: type=1326 audit(1769951861.325:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7272 comm="syz.1.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7738795eb9 code=0x7ffc0000 [ 234.655780][ T4233] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 234.671665][ T4233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.708876][ T4233] usb 1-1: Product: syz [ 234.714326][ T26] audit: type=1326 audit(1769951861.325:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7272 comm="syz.1.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7738795eb9 code=0x7ffc0000 [ 234.749707][ T4233] usb 1-1: Manufacturer: syz [ 234.771105][ T4233] usb 1-1: SerialNumber: syz [ 234.905305][ T7287] device vlan0 entered promiscuous mode [ 234.982073][ T26] audit: type=1326 audit(1769951861.325:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7272 comm="syz.1.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7738795eb9 code=0x7ffc0000 [ 235.105753][ T26] audit: type=1326 audit(1769951861.325:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7272 comm="syz.1.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7738795eb9 code=0x7ffc0000 [ 235.116468][ T4233] usb 1-1: 0:2 : does not exist [ 235.210419][ T4233] usb 1-1: USB disconnect, device number 24 [ 235.369404][ T26] audit: type=1326 audit(1769951861.325:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7272 comm="syz.1.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7738795eb9 code=0x7ffc0000 [ 235.568434][ T26] audit: type=1326 audit(1769951861.325:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7272 comm="syz.1.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f7738795eb9 code=0x7ffc0000 [ 235.770644][ T26] audit: type=1326 audit(1769951861.345:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7272 comm="syz.1.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7738795eb9 code=0x7ffc0000 [ 236.609506][ T21] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 236.926187][ T21] usb 1-1: Using ep0 maxpacket: 16 [ 237.045871][ T21] usb 1-1: config 4 has an invalid interface number: 37 but max is 0 [ 237.066453][ T21] usb 1-1: config 4 has no interface number 0 [ 237.087100][ T21] usb 1-1: config 4 interface 37 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 237.118911][ T21] usb 1-1: config 4 interface 37 has no altsetting 0 [ 237.120588][ T7316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.937'. [ 237.305745][ T21] usb 1-1: New USB device found, idVendor=0b05, idProduct=9202, bcdDevice=94.4f [ 237.344712][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.375606][ T21] usb 1-1: Product: syz [ 237.379826][ T21] usb 1-1: Manufacturer: syz [ 237.440775][ T21] usb 1-1: SerialNumber: syz [ 237.507659][ T7309] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 237.773262][ T7332] netlink: 'syz.2.943': attribute type 1 has an invalid length. [ 237.789391][ T21] usb 1-1: USB disconnect, device number 25 [ 237.832310][ T7336] binder: 7334:7336 ioctl ab03 0 returned -22 [ 237.854254][ T7335] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 237.863712][ T7335] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 237.877621][ T7335] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 237.889457][ T7335] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 237.903216][ T7335] bond1: (slave geneve2): making interface the new active one [ 237.914549][ T7335] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 237.924925][ T7332] netlink: 28 bytes leftover after parsing attributes in process `syz.2.943'. [ 237.938163][ T7332] 8021q: adding VLAN 0 to HW filter on device bond1 [ 237.976051][ T4225] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 238.125575][ T4233] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 238.225522][ T4225] usb 4-1: Using ep0 maxpacket: 16 [ 238.355720][ T4225] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.392646][ T4225] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 238.485804][ T4233] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 238.513824][ T4233] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 238.526881][ T4233] usb 5-1: config 220 interface 0 has no altsetting 0 [ 238.575946][ T4225] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 238.590306][ T4225] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.610993][ T4225] usb 4-1: Product: syz [ 238.620976][ T4225] usb 4-1: Manufacturer: syz [ 238.634221][ T4225] usb 4-1: SerialNumber: syz [ 238.705745][ T4233] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 238.719535][ T4233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.741254][ T4233] usb 5-1: Product: syz [ 238.750049][ T4233] usb 5-1: Manufacturer: syz [ 238.761721][ T4233] usb 5-1: SerialNumber: syz [ 238.995677][ T4225] usb 4-1: 0:2 : does not exist [ 239.046264][ T4225] usb 4-1: USB disconnect, device number 18 [ 239.185583][ T4233] usb 5-1: Found UVC 0.00 device syz (8086:0b07) [ 239.193684][ T4233] usb 5-1: No valid video chain found. [ 239.281816][ T4233] usb 5-1: USB disconnect, device number 17 [ 239.297123][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 239.829759][ T7370] fuse: Unknown parameter 'ÿÿ00000000000000000000004' [ 240.591471][ T7383] netlink: 44 bytes leftover after parsing attributes in process `syz.2.960'. [ 240.776591][ T7388] device syzkaller0 entered promiscuous mode [ 240.829583][ T7392] tipc: Failed to remove unknown binding: 66,0,0/0:3840641134/3840641135 [ 240.886777][ T7394] tipc: Failed to remove unknown binding: 66,0,0/0:3840641134/3840641135 [ 241.368926][ T4513] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 241.486463][ T7403] QAT: failed to copy from user. [ 241.625484][ T4513] usb 3-1: Using ep0 maxpacket: 16 [ 241.775676][ T4513] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.817503][ T4513] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 242.035722][ T4513] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 242.058568][ T4513] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.105461][ T4513] usb 3-1: Product: syz [ 242.137476][ T4513] usb 3-1: Manufacturer: syz [ 242.165121][ T4513] usb 3-1: SerialNumber: syz [ 242.525618][ T4513] usb 3-1: 0:2 : does not exist [ 242.601973][ T4513] usb 3-1: USB disconnect, device number 18 [ 242.898464][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 243.638087][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 243.638103][ T26] audit: type=1326 audit(1769951870.695:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.4.976" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f70f0f1feb9 code=0x0 [ 243.937312][ T7440] device syzkaller0 entered promiscuous mode [ 244.359792][ T26] audit: type=1326 audit(1769951871.415:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7447 comm="syz.3.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabb0aadeb9 code=0x7ffc0000 [ 244.443183][ T26] audit: type=1326 audit(1769951871.455:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7447 comm="syz.3.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabb0aadeb9 code=0x7ffc0000 [ 244.511389][ T26] audit: type=1326 audit(1769951871.455:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7447 comm="syz.3.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fabb0aadeb9 code=0x7ffc0000 [ 244.608655][ T26] audit: type=1326 audit(1769951871.455:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7447 comm="syz.3.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabb0aadeb9 code=0x7ffc0000 [ 244.678116][ T26] audit: type=1326 audit(1769951871.455:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7447 comm="syz.3.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fabb0aadeb9 code=0x7ffc0000 [ 244.773175][ T26] audit: type=1326 audit(1769951871.455:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7447 comm="syz.3.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabb0aadeb9 code=0x7ffc0000 [ 244.863457][ T26] audit: type=1326 audit(1769951871.455:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7447 comm="syz.3.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fabb0aadeb9 code=0x7ffc0000 [ 244.934156][ T26] audit: type=1326 audit(1769951871.455:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7447 comm="syz.3.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabb0aadeb9 code=0x7ffc0000 [ 245.119955][ T26] audit: type=1326 audit(1769951871.455:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7447 comm="syz.3.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fabb0aadeb9 code=0x7ffc0000 [ 245.878932][ T7490] device syzkaller0 entered promiscuous mode [ 247.175584][ T4513] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 247.655654][ T4513] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 247.677851][ T4513] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 247.835652][ T4513] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 247.886548][ T4513] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 248.105686][ T4513] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 248.119748][ T7544] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1015'. [ 248.136227][ T4513] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 248.155696][ T7544] device veth0_to_bond entered promiscuous mode [ 248.365642][ T4513] usb 2-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 248.380494][ T4513] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.421095][ T4513] usb 2-1: Product: syz [ 248.437946][ T4513] usb 2-1: Manufacturer: syz [ 248.444084][ T4513] usb 2-1: SerialNumber: syz [ 248.476266][ T4513] usb 2-1: config 0 descriptor?? [ 248.526880][ T4513] ti_usb_3410_5052 2-1:0.0: TI USB 5052 2 port adapter converter detected [ 248.540906][ T4513] ti_usb_3410_5052 2-1:0.0: missing endpoints [ 248.547104][ T4225] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 248.815533][ T4225] usb 4-1: Using ep0 maxpacket: 16 [ 248.935667][ T4225] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.970222][ T4225] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 249.042935][ T7564] binder: 7563:7564 ioctl ab03 0 returned -22 [ 249.155689][ T4225] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 249.184994][ T4225] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.227920][ T4225] usb 4-1: Product: syz [ 249.237193][ T4225] usb 4-1: Manufacturer: syz [ 249.241850][ T4225] usb 4-1: SerialNumber: syz [ 249.336059][ T4247] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 249.447226][ T7574] tipc: Enabled bearer , priority 0 [ 249.492657][ T7574] tipc: Resetting bearer [ 249.508151][ T7573] tipc: Disabling bearer [ 249.595633][ T4225] usb 4-1: 0:2 : does not exist [ 249.642635][ T4225] usb 4-1: USB disconnect, device number 19 [ 249.707742][ T4247] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 249.742318][ T4247] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 249.781355][ T4247] usb 5-1: config 220 interface 0 has no altsetting 0 [ 249.956686][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 249.986015][ T4247] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 250.005633][ T4247] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.013773][ T4247] usb 5-1: Product: syz [ 250.054344][ T4247] usb 5-1: Manufacturer: syz [ 250.133770][ T4247] usb 5-1: SerialNumber: syz [ 250.605605][ T4247] usb 5-1: Found UVC 0.00 device syz (8086:0b07) [ 250.616236][ T4247] usb 5-1: No valid video chain found. [ 250.645705][ T4247] usb 5-1: USB disconnect, device number 18 [ 250.822076][ T7604] netlink: set zone limit has 8 unknown bytes [ 250.908270][ T4513] usb 2-1: USB disconnect, device number 25 [ 251.261527][ T7618] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1045'. [ 251.305458][ T4247] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 251.558380][ T7630] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1047'. [ 251.595463][ T4247] usb 5-1: Using ep0 maxpacket: 16 [ 251.745696][ T4247] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 251.770405][ T4247] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 252.037333][ T4247] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 252.055493][ T4247] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.063619][ T4247] usb 5-1: Product: syz [ 252.068172][ T4247] usb 5-1: Manufacturer: syz [ 252.072884][ T4247] usb 5-1: SerialNumber: syz [ 252.425705][ T4247] usb 5-1: 0:2 : does not exist [ 252.483215][ T4247] usb 5-1: USB disconnect, device number 19 [ 252.511804][ T7691] netlink: 'syz.1.1058': attribute type 11 has an invalid length. [ 252.525510][ T7691] netlink: 'syz.1.1058': attribute type 11 has an invalid length. [ 252.554409][ T7691] netlink: 2704 bytes leftover after parsing attributes in process `syz.1.1058'. [ 252.601892][ T7687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.770104][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 252.839083][ T7701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1061'. [ 253.600581][ T7703] infiniband syz0: set down [ 253.660073][ T7703] infiniband syz0: added ipvlan1 [ 253.817379][ T7703] infiniband syz0: Couldn't open port 1 [ 253.987163][ T7703] RDS/IB: syz0: added [ 253.998947][ T7703] smc: adding ib device syz0 with port count 1 [ 254.024787][ T7703] smc: ib device syz0 port 1 has pnetid [ 254.282067][ T7737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1074'. [ 254.316451][ T7737] netlink: set zone limit has 8 unknown bytes [ 254.722414][ T7760] device syzkaller0 entered promiscuous mode [ 255.093914][ T7764] tipc: Failed to remove unknown binding: 66,1,1/0:2300492701/2300492703 [ 255.617245][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.623627][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.678347][ T7790] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 256.935983][ T13] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 257.205438][ T13] usb 1-1: Using ep0 maxpacket: 16 [ 257.325707][ T13] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.350666][ T13] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 257.535854][ T13] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 257.562611][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.587307][ T13] usb 1-1: Product: syz [ 257.599586][ T13] usb 1-1: Manufacturer: syz [ 257.614831][ T13] usb 1-1: SerialNumber: syz [ 257.855191][ T7817] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1102'. [ 257.985683][ T13] usb 1-1: 0:2 : does not exist [ 258.064369][ T13] usb 1-1: USB disconnect, device number 26 [ 258.367282][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 258.621591][ T7854] netlink: 1072 bytes leftover after parsing attributes in process `syz.2.1113'. [ 258.770847][ T7858] device syzkaller0 entered promiscuous mode [ 259.564661][ T7884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1123'. [ 259.939945][ T4233] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 260.205615][ T4233] usb 1-1: Using ep0 maxpacket: 32 [ 260.325739][ T4233] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.357231][ T4233] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.395743][ T4233] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 260.452240][ T4233] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.497050][ T4233] usb 1-1: config 0 descriptor?? [ 260.566254][ T7920] netlink: 316 bytes leftover after parsing attributes in process `syz.4.1136'. [ 261.055532][ T4233] usbhid 1-1:0.0: can't add hid device: -71 [ 261.061974][ T4233] usbhid: probe of 1-1:0.0 failed with error -71 [ 261.087898][ T4233] usb 1-1: USB disconnect, device number 27 [ 261.825774][ T7972] device syzkaller0 entered promiscuous mode [ 262.255031][ T7991] binder: 7990:7991 ioctl ab03 0 returned -22 [ 262.535553][ T4513] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 262.664524][ T8011] tipc: Enabled bearer , priority 0 [ 262.690808][ T8011] tipc: Resetting bearer [ 262.726736][ T8010] tipc: Disabling bearer [ 262.735567][ T4514] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 262.803879][ T8021] netlink: 'syz.3.1169': attribute type 39 has an invalid length. [ 262.915517][ T4513] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 262.939146][ T4513] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 262.964142][ T4513] usb 5-1: config 220 interface 0 has no altsetting 0 [ 262.988848][ T4514] usb 3-1: Using ep0 maxpacket: 16 [ 263.105871][ T4514] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.123093][ T4514] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 263.161153][ T4513] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 263.175493][ T4513] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.194733][ T4513] usb 5-1: Product: syz [ 263.216528][ T4513] usb 5-1: Manufacturer: syz [ 263.233240][ T4513] usb 5-1: SerialNumber: syz [ 263.257822][ T8049] tipc: Enabled bearer , priority 0 [ 263.305638][ T4514] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 263.328101][ T4514] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.332258][ T8049] tipc: Resetting bearer [ 263.357860][ T4514] usb 3-1: Product: syz [ 263.364470][ T4514] usb 3-1: Manufacturer: syz [ 263.373120][ T4514] usb 3-1: SerialNumber: syz [ 263.384133][ T8048] tipc: Disabling bearer [ 263.531295][ T8051] netlink: 'syz.1.1182': attribute type 10 has an invalid length. [ 263.665671][ T4513] usb 5-1: Found UVC 0.00 device syz (8086:0b07) [ 263.674373][ T4513] usb 5-1: No valid video chain found. [ 263.714390][ T4513] usb 5-1: USB disconnect, device number 20 [ 263.745717][ T4514] usb 3-1: 0:2 : does not exist [ 263.856462][ T4514] usb 3-1: USB disconnect, device number 19 [ 264.268926][ T8064] ksmbd: Unknown IPC event: 1, ignore. [ 264.619532][ T8081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1194'. [ 265.087501][ T8089] tipc: Failed to remove unknown binding: 66,1,1/0:1135809142/1135809144 [ 265.185123][ T8093] netlink: 'syz.2.1199': attribute type 3 has an invalid length. [ 265.244399][ T8093] netlink: 'syz.2.1199': attribute type 1 has an invalid length. [ 265.255339][ T8093] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.1199'. [ 265.298203][ T8096] device syzkaller0 entered promiscuous mode [ 265.482870][ T8105] tipc: Enabled bearer , priority 0 [ 265.517463][ T8105] tipc: Resetting bearer [ 265.526376][ T8109] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1207'. [ 265.539688][ T8109] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1207'. [ 265.552414][ T8104] tipc: Disabling bearer [ 265.572262][ T8109] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1207'. [ 265.585178][ T8109] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1207'. [ 265.712269][ T8113] tipc: Enabled bearer , priority 0 [ 265.834926][ T8113] tipc: Resetting bearer [ 265.930850][ T8112] tipc: Disabling bearer [ 266.405444][ T4514] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 266.431476][ T8131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1214'. [ 266.470713][ T8131] tipc: Enabled bearer , priority 10 [ 266.705478][ T4514] usb 1-1: Using ep0 maxpacket: 16 [ 266.845666][ T4514] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.861659][ T4514] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.902504][ T4514] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 266.943280][ T4514] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 267.000693][ T4514] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.042108][ T4514] usb 1-1: config 0 descriptor?? [ 267.636457][ T21] tipc: Node number set to 2223727965 [ 267.687558][ T4514] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 267.729109][ T4514] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 267.773982][ T4514] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 267.804434][ T4514] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 267.816330][ T4514] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 267.842493][ T4514] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 267.857171][ T8152] device syzkaller0 entered promiscuous mode [ 267.884218][ T4514] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0004/input/input8 [ 268.884100][ T4514] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 268.994321][ T4514] usb 1-1: USB disconnect, device number 28 [ 269.179020][ T8160] fido_id[8160]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 270.629429][ T8185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1230'. [ 273.185580][ T4514] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 273.702896][ T4514] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 273.910695][ T4514] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 273.921735][ T4514] usb 5-1: config 220 interface 0 has no altsetting 0 [ 275.185572][ T4514] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 275.198187][ T4514] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.219626][ T8255] ieee802154 phy0 wpan0: encryption failed: -22 [ 275.233261][ T4514] usb 5-1: Product: syz [ 275.237950][ T4514] usb 5-1: Manufacturer: syz [ 275.242732][ T4514] usb 5-1: SerialNumber: syz [ 276.385771][ T4514] usb 5-1: Found UVC 0.00 device syz (8086:0b07) [ 276.400177][ T4514] usb 5-1: No valid video chain found. [ 276.442406][ T4514] usb 5-1: USB disconnect, device number 21 [ 278.222979][ T8292] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 278.365456][ T4514] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 278.406884][ T8289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.526923][ T8289] bond0: (slave rose0): Enslaving as an active interface with an up link [ 278.562615][ T7658] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 278.635495][ T4514] usb 5-1: Using ep0 maxpacket: 32 [ 278.795535][ T4514] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 279.627324][ T4514] usb 5-1: config 0 has no interface number 0 [ 279.633731][ T4514] usb 5-1: config 0 interface 184 has no altsetting 0 [ 280.245671][ T4514] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 280.274172][ T4514] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.348133][ T4514] usb 5-1: Product: syz [ 280.353349][ T4514] usb 5-1: Manufacturer: syz [ 280.394661][ T4514] usb 5-1: SerialNumber: syz [ 280.421061][ T8310] tipc: Failed to remove unknown binding: 66,0,0/0:427864130/427864131 [ 280.426265][ T4514] usb 5-1: config 0 descriptor?? [ 280.450362][ T8310] tipc: Failed to remove unknown binding: 66,0,0/0:427864130/427864131 [ 280.486667][ T4514] smsc75xx v1.0.0 [ 280.614984][ T4247] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 280.654309][ T4247] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 280.770905][ T4233] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 281.135598][ T4233] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 281.145745][ T4514] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 281.158135][ T4233] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 281.167817][ T4514] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 281.187754][ T4233] usb 1-1: config 220 interface 0 has no altsetting 0 [ 281.461415][ T4514] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 281.474328][ T4514] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 281.493095][ T4514] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 281.503882][ T4514] smsc75xx: probe of 5-1:0.184 failed with error -71 [ 281.542710][ T4514] usb 5-1: USB disconnect, device number 22 [ 283.045608][ T8345] sched: RT throttling activated [ 283.051700][ T4233] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 283.233216][ T4233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.275580][ T4233] usb 1-1: Product: syz [ 283.279966][ T4233] usb 1-1: Manufacturer: syz [ 283.284798][ T4233] usb 1-1: SerialNumber: syz [ 285.034405][ T8370] tipc: Failed to remove unknown binding: 66,0,0/0:2034872234/2034872235 [ 285.065901][ T8370] tipc: Failed to remove unknown binding: 66,0,0/0:2034872234/2034872235 [ 285.095596][ T4233] usb 1-1: Found UVC 0.00 device syz (8086:0b07) [ 285.102523][ T4233] usb 1-1: No valid video chain found. [ 285.136299][ T4233] usb 1-1: USB disconnect, device number 29 [ 285.239033][ T8376] device syzkaller0 entered promiscuous mode [ 285.275441][ T13] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 285.645632][ T13] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 285.663219][ T13] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.699824][ T13] usb 2-1: config 0 has no interface number 0 [ 285.721672][ T13] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 285.756471][ T13] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 285.955775][ T13] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 285.979433][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.021519][ T13] usb 2-1: Product: syz [ 286.045179][ T13] usb 2-1: Manufacturer: syz [ 286.066593][ T13] usb 2-1: SerialNumber: syz [ 286.097588][ T13] usb 2-1: config 0 descriptor?? [ 286.565442][ T4247] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 286.791555][ T13] usb 2-1: USB disconnect, device number 26 [ 286.825500][ T4247] usb 3-1: Using ep0 maxpacket: 16 [ 286.945597][ T4247] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.985505][ T4247] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.005583][ T4247] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 287.031873][ T4247] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 287.046571][ T4247] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.063621][ T4247] usb 3-1: config 0 descriptor?? [ 287.103627][ T8407] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1283'. [ 287.146256][ T8407] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1283'. [ 287.160602][ T8407] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1283'. [ 287.606162][ T4247] microsoft 0003:045E:07DA.0006: ignoring exceeding usage max [ 287.655087][ T4247] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 287.664898][ T4247] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 287.679405][ T4247] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 287.693499][ T4247] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 287.703626][ T4247] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 287.705667][ T4233] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 287.761315][ T4247] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0006/input/input10 [ 287.952788][ T4247] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 288.006768][ T4247] usb 3-1: USB disconnect, device number 20 [ 288.085666][ T4233] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 288.120041][ T4233] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 288.149487][ T8414] fido_id[8414]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 288.164120][ T4233] usb 2-1: config 220 interface 0 has no altsetting 0 [ 288.376869][ T4233] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 288.425094][ T4233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.480231][ T4233] usb 2-1: Product: syz [ 288.495707][ T4233] usb 2-1: Manufacturer: syz [ 288.500333][ T4233] usb 2-1: SerialNumber: syz [ 289.006742][ T4233] usb 2-1: Found UVC 0.00 device syz (8086:0b07) [ 289.032584][ T4233] usb 2-1: No valid video chain found. [ 289.095078][ T4233] usb 2-1: USB disconnect, device number 27 [ 289.879634][ T8428] 9pnet: Insufficient options for proto=fd [ 290.459426][ T8439] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 290.466502][ T8439] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 290.518531][ T8439] vhci_hcd vhci_hcd.0: Device attached [ 290.741694][ T8428] device vlan1 left promiscuous mode [ 290.775563][ T4247] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 290.793657][ T8428] bond1: (slave macvlan2): Releasing backup interface [ 290.885447][ T4513] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 291.342073][ T4247] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.352607][ T4247] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 292.025692][ T4247] usb 1-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 292.038748][ T4247] usb 1-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 292.070340][ T4247] usb 1-1: Manufacturer: syz [ 292.087610][ T4247] usb 1-1: config 0 descriptor?? [ 292.160942][ T8460] CUSE: info not properly terminated [ 292.343283][ T4247] usb 1-1: USB disconnect, device number 30 [ 292.351525][ T8440] usb 33-1: recv xbuf, 0 [ 292.367329][ T7658] vhci_hcd: stop threads [ 292.371792][ T7658] vhci_hcd: release socket [ 292.403098][ T7658] vhci_hcd: disconnect device [ 292.435475][ T4513] vhci_hcd: vhci_device speed not set [ 292.520862][ T8463] ======================================================= [ 292.520862][ T8463] WARNING: The mand mount option has been deprecated and [ 292.520862][ T8463] and is ignored by this kernel. Remove the mand [ 292.520862][ T8463] option from the mount to silence this warning. [ 292.520862][ T8463] ======================================================= [ 292.758844][ T8464] overlayfs: overlapping lowerdir path [ 293.315594][ T4225] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 293.785654][ T4225] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 293.921217][ T4225] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 294.145553][ T4225] usb 1-1: config 220 interface 0 has no altsetting 0 [ 294.336523][ T4225] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 294.350931][ T4225] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.375477][ T4225] usb 1-1: Product: syz [ 294.381062][ T4225] usb 1-1: Manufacturer: syz [ 294.398320][ T4225] usb 1-1: SerialNumber: syz [ 294.830808][ T4225] usb 1-1: Found UVC 0.00 device syz (8086:0b07) [ 294.839203][ T4225] usb 1-1: No valid video chain found. [ 296.242938][ T4225] usb 1-1: USB disconnect, device number 31 [ 297.460675][ T8511] overlayfs: failed to resolve './file1': -2 [ 302.975550][ T8549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1320'. [ 304.368779][ T8616] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 307.225423][ T4247] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 307.856281][ T4247] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 307.895532][ T4247] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.923940][ T4247] usb 1-1: Product: syz [ 307.928520][ T4247] usb 1-1: Manufacturer: syz [ 307.933246][ T4247] usb 1-1: SerialNumber: syz [ 307.950403][ T4247] usb 1-1: config 0 descriptor?? [ 308.018964][ T4247] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 308.050532][ T4247] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 308.105764][ T4247] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 308.120287][ T4247] usb 1-1: media controller created [ 308.186695][ T4247] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 308.226310][ T8632] dvb-usb: bulk message failed: -22 (7/0) [ 308.374035][ T4247] DVB: Unable to find symbol mt352_attach() [ 308.415936][ T4247] DVB: Unable to find symbol nxt6000_attach() [ 308.425565][ T4247] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 308.594945][ T4247] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input11 [ 308.608337][ T4247] dvb-usb: schedule remote query interval to 1000 msecs. [ 308.652170][ T4247] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 308.665676][ T4247] dvb-usb: bulk message failed: -22 (7/0) [ 308.672913][ T4247] dvb-usb: bulk message failed: -22 (7/0) [ 308.809619][ T4247] usb 1-1: USB disconnect, device number 32 [ 309.342046][ T4247] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 309.466359][ T8658] tipc: Failed to remove unknown binding: 66,1,1/0:1855118730/1855118732 [ 309.778059][ T8665] QAT: failed to copy from user. [ 315.238626][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 315.300130][ T8695] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 316.647474][ T8725] 9pnet: Insufficient options for proto=fd [ 317.059820][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.066185][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.458222][ T4254] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 318.725444][ T4254] usb 3-1: Using ep0 maxpacket: 16 [ 318.865743][ T4254] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.912743][ T4254] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 319.994308][ T4254] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 320.003942][ T4254] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.023683][ T4254] usb 3-1: Product: syz [ 320.028354][ T4254] usb 3-1: Manufacturer: syz [ 320.135563][ T4254] usb 3-1: SerialNumber: syz [ 320.155540][ T4247] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 321.205722][ T4254] usb 3-1: 0:2 : does not exist [ 321.235409][ T4247] usb 1-1: Using ep0 maxpacket: 16 [ 321.299561][ T4254] usb 3-1: USB disconnect, device number 21 [ 321.355635][ T4247] usb 1-1: config 4 has an invalid interface number: 37 but max is 0 [ 321.398980][ T4247] usb 1-1: config 4 has no interface number 0 [ 321.509382][ T4247] usb 1-1: config 4 interface 37 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 321.580592][ T4247] usb 1-1: config 4 interface 37 has no altsetting 0 [ 321.686296][ T8648] udevd[8648]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 321.835705][ T4247] usb 1-1: New USB device found, idVendor=0b05, idProduct=9202, bcdDevice=94.4f [ 321.936057][ T4247] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.954378][ T4247] usb 1-1: Product: syz [ 321.964510][ T4247] usb 1-1: Manufacturer: syz [ 322.591213][ T4247] usb 1-1: SerialNumber: syz [ 323.332374][ T4247] usb 1-1: can't set config #4, error -71 [ 323.352600][ T4247] usb 1-1: USB disconnect, device number 33 [ 323.755603][ T13] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 324.015749][ T13] usb 5-1: Using ep0 maxpacket: 8 [ 324.135701][ T13] usb 5-1: config 0 has an invalid interface number: 151 but max is 0 [ 324.169174][ T13] usb 5-1: config 0 has no interface number 0 [ 324.249542][ T13] usb 5-1: config 0 interface 151 has no altsetting 0 [ 324.327496][ T13] usb 5-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice=43.24 [ 324.422650][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.700231][ T13] usb 5-1: config 0 descriptor?? [ 325.165727][ T13] usb 5-1: string descriptor 0 read error: -71 [ 325.636223][ T13] rtsx_usb: probe of 5-1:0.151 failed with error -22 [ 325.674903][ T13] usb 5-1: USB disconnect, device number 23 [ 326.212324][ T8859] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1387'. [ 326.427720][ T8861] zonefs (nullb0) ERROR: Not a zoned block device [ 329.184718][ T13] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 329.455526][ T13] usb 5-1: Using ep0 maxpacket: 16 [ 329.575611][ T13] usb 5-1: config 4 has an invalid interface number: 37 but max is 0 [ 329.583795][ T13] usb 5-1: config 4 has no interface number 0 [ 329.604287][ T8891] binder: 8890:8891 unknown command 1074553620 [ 329.677071][ T13] usb 5-1: config 4 interface 37 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 329.694314][ T8891] binder: 8890:8891 ioctl c0306201 200000000640 returned -22 [ 329.780822][ T13] usb 5-1: config 4 interface 37 has no altsetting 0 [ 329.885694][ T13] usb 5-1: string descriptor 0 read error: -71 [ 329.894447][ T13] usb 5-1: New USB device found, idVendor=0b05, idProduct=9202, bcdDevice=94.4f [ 329.967384][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.055787][ T13] usb 5-1: can't set config #4, error -71 [ 330.123363][ T13] usb 5-1: USB disconnect, device number 24 [ 330.185490][ T4247] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 330.635473][ T4247] usb 4-1: config 0 has no interfaces? [ 330.815630][ T4247] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 330.905472][ T4247] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.947418][ T4247] usb 4-1: Product: syz [ 330.951785][ T4247] usb 4-1: Manufacturer: syz [ 330.961798][ T4247] usb 4-1: SerialNumber: syz [ 330.984647][ T4247] usb 4-1: config 0 descriptor?? [ 331.371094][ T13] usb 4-1: USB disconnect, device number 20 [ 331.392329][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 331.392344][ T26] audit: type=1804 audit(1769951957.447:135): pid=8904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1400" name="file0" dev="ramfs" ino=52178 res=1 errno=0 [ 332.145507][ T4514] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 332.217220][ T8916] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 332.556086][ T4514] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 332.572347][ T4514] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 332.595817][ T4514] usb 3-1: config 220 interface 0 has no altsetting 0 [ 332.765732][ T4514] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 332.775079][ T4514] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.788877][ T4514] usb 3-1: Product: syz [ 332.793186][ T4514] usb 3-1: Manufacturer: syz [ 332.798681][ T4514] usb 3-1: SerialNumber: syz [ 332.902066][ T8935] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 333.520635][ T4225] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 333.587203][ T4514] usb 3-1: Found UVC 0.00 device syz (8086:0b07) [ 333.599486][ T4514] usb 3-1: No valid video chain found. [ 333.643958][ T4514] usb 3-1: USB disconnect, device number 22 [ 333.895467][ T4225] usb 2-1: Using ep0 maxpacket: 16 [ 334.685535][ T4225] usb 2-1: config 4 has an invalid interface number: 37 but max is 0 [ 334.693735][ T4225] usb 2-1: config 4 has no interface number 0 [ 336.127831][ T4225] usb 2-1: config 4 interface 37 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 336.175447][ T4225] usb 2-1: config 4 interface 37 has no altsetting 0 [ 336.235499][ T4225] usb 2-1: string descriptor 0 read error: -71 [ 336.263253][ T4225] usb 2-1: New USB device found, idVendor=0b05, idProduct=9202, bcdDevice=94.4f [ 336.312347][ T4225] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.375600][ T4225] usb 2-1: can't set config #4, error -71 [ 336.404004][ T4225] usb 2-1: USB disconnect, device number 28 [ 339.280545][ T8976] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 339.708688][ T8986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1425'. [ 340.035488][ T4255] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 340.305496][ T4255] usb 5-1: Using ep0 maxpacket: 32 [ 340.466339][ T4255] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.477482][ T4255] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.491609][ T4255] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 340.504137][ T4255] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.535988][ T4255] usb 5-1: config 0 descriptor?? [ 341.033402][ T4255] savu 0003:1E7D:2D5A.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 341.300469][ T1110] usb 5-1: USB disconnect, device number 25 [ 341.556620][ T9013] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1431'. [ 342.365432][ T4255] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 343.385795][ T4255] usb 3-1: Using ep0 maxpacket: 16 [ 345.135496][ T4255] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 345.199293][ T4255] usb 3-1: can't read configurations, error -71 [ 345.348517][ T9042] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 348.833346][ T9068] device syzkaller0 entered promiscuous mode [ 349.160900][ T1110] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 349.420669][ T9087] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 349.515504][ T23] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 350.108085][ T1110] usb 1-1: Using ep0 maxpacket: 32 [ 350.235786][ T1110] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 350.255599][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 350.295393][ T1110] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.392214][ T1110] usb 1-1: config 0 descriptor?? [ 350.406950][ T23] usb 3-1: config 4 has an invalid interface number: 37 but max is 0 [ 350.429894][ T23] usb 3-1: config 4 has no interface number 0 [ 350.457096][ T23] usb 3-1: config 4 interface 37 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 350.485427][ T23] usb 3-1: config 4 interface 37 has no altsetting 0 [ 350.686375][ T23] usb 3-1: New USB device found, idVendor=0b05, idProduct=9202, bcdDevice=94.4f [ 350.696405][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.704604][ T23] usb 3-1: Product: syz [ 350.709723][ T23] usb 3-1: Manufacturer: syz [ 350.714479][ T23] usb 3-1: SerialNumber: syz [ 350.787396][ T9073] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 350.841404][ T9093] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 350.925550][ T1110] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 350.942773][ T1110] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 350.979316][ T1110] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 350.997558][ T1110] usb 1-1: media controller created [ 351.042576][ T23] usb 3-1: USB disconnect, device number 25 [ 351.061788][ T1110] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 351.129435][ T9105] block device autoloading is deprecated and will be removed. [ 351.199992][ T1110] DVB: Unable to find symbol dib7000p_attach() [ 351.211055][ T1110] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 351.345509][ T1110] rc_core: IR keymap rc-dib0700-rc5 not found [ 351.351646][ T1110] Registered IR keymap rc-empty [ 351.371854][ T1110] dvb-usb: could not initialize remote control. [ 351.396258][ T1110] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 351.450384][ T1110] usb 1-1: USB disconnect, device number 34 [ 351.540428][ T1110] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 354.126634][ T4255] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 355.115422][ T4255] usb 1-1: Using ep0 maxpacket: 16 [ 355.265757][ T4255] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 355.290983][ T4255] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 355.303500][ T9143] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 355.496334][ T4255] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 355.507240][ T4255] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.515755][ T4255] usb 1-1: Product: syz [ 355.524526][ T4255] usb 1-1: Manufacturer: syz [ 355.529580][ T4255] usb 1-1: SerialNumber: syz [ 355.915706][ T4255] usb 1-1: 0:2 : does not exist [ 356.033659][ T4255] usb 1-1: USB disconnect, device number 35 [ 356.225452][ T13] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 356.321790][ T8648] udevd[8648]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 356.405934][ T23] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 356.521625][ T9166] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1473'. [ 356.795724][ T23] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 357.205578][ T23] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 357.240637][ T23] usb 5-1: config 220 interface 0 has no altsetting 0 [ 357.315598][ T13] usb 4-1: Using ep0 maxpacket: 16 [ 357.435662][ T23] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 357.455599][ T13] usb 4-1: config 4 has an invalid interface number: 37 but max is 0 [ 357.464964][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.470527][ T13] usb 4-1: config 4 has no interface number 0 [ 357.502867][ T13] usb 4-1: config 4 interface 37 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 357.504487][ T23] usb 5-1: Product: syz [ 357.540676][ T9184] device syzkaller0 entered promiscuous mode [ 357.546832][ T23] usb 5-1: Manufacturer: syz [ 357.548375][ T13] usb 4-1: config 4 interface 37 has no altsetting 0 [ 357.553417][ T23] usb 5-1: SerialNumber: syz [ 357.755804][ T13] usb 4-1: New USB device found, idVendor=0b05, idProduct=9202, bcdDevice=94.4f [ 357.785963][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.794064][ T13] usb 4-1: Product: syz [ 357.840575][ T9188] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 357.869819][ T13] usb 4-1: Manufacturer: syz [ 357.890446][ T13] usb 4-1: SerialNumber: syz [ 357.903687][ T9192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1481'. [ 357.945985][ T9147] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 357.999895][ T23] usb 5-1: USB disconnect, device number 26 [ 358.232661][ T13] usb 4-1: USB disconnect, device number 21 [ 359.072505][ T9214] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1486'. [ 360.880595][ T9225] device syzkaller0 entered promiscuous mode [ 361.234301][ T9247] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 364.138819][ T9276] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 364.915430][ T4514] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 364.932642][ T9278] device syzkaller0 entered promiscuous mode [ 365.280307][ T4514] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 365.310564][ T4514] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 365.329223][ T9288] netlink: 'syz.0.1507': attribute type 2 has an invalid length. [ 365.341718][ T9288] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1507'. [ 365.345231][ T4514] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.385806][ T4514] usb 3-1: config 0 descriptor?? [ 365.415778][ T9273] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 365.666431][ T9298] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 366.011101][ T4514] elan 0003:04F3:0755.0008: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 366.810705][ T4233] usb 3-1: USB disconnect, device number 26 [ 366.841475][ T9309] fido_id[9309]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 366.904126][ T9314] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 367.139971][ T9323] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 368.028665][ T9333] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1518'. [ 368.681443][ T9305] Set syz1 is full, maxelem 65536 reached [ 369.749909][ T9339] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 372.313985][ T9373] tmpfs: Unknown parameter 'grpquota' [ 373.263874][ T9374] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 373.855489][ T9383] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1532'. [ 374.566514][ T9382] device syzkaller0 entered promiscuous mode [ 375.279901][ T4514] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 375.545919][ T4514] usb 1-1: Using ep0 maxpacket: 16 [ 375.820547][ T4514] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 375.831381][ T4514] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 376.575748][ T4514] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 376.596603][ T4514] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.611937][ T4514] usb 1-1: Product: syz [ 376.616669][ T4514] usb 1-1: Manufacturer: syz [ 376.622430][ T4514] usb 1-1: SerialNumber: syz [ 377.285666][ T4514] usb 1-1: 0:2 : does not exist [ 377.398563][ T4514] usb 1-1: USB disconnect, device number 36 [ 377.646907][ T8648] udevd[8648]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 377.804572][ T9420] device syzkaller0 entered promiscuous mode [ 378.725861][ T4255] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 379.012196][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.019954][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.498472][ T9438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1551'. [ 379.515918][ T4255] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 379.535607][ T4255] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 379.545683][ T4255] usb 1-1: config 220 interface 0 has no altsetting 0 [ 379.946516][ T4255] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 379.965419][ T4255] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.978022][ T4255] usb 1-1: Product: syz [ 379.982237][ T4255] usb 1-1: Manufacturer: syz [ 379.986974][ T4255] usb 1-1: SerialNumber: syz [ 380.485742][ T4514] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 380.515535][ T4255] usb 1-1: Found UVC 0.00 device syz (8086:0b07) [ 380.522717][ T4255] usb 1-1: No valid video chain found. [ 380.558855][ T4255] usb 1-1: USB disconnect, device number 37 [ 380.610673][ T9451] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1548'. [ 380.895955][ T4514] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 380.936665][ T13] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 380.983231][ T4514] usb 5-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 380.994472][ T4514] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.052721][ T4514] usb 5-1: config 0 descriptor?? [ 381.097964][ T9444] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 381.366487][ T13] usb 2-1: config 4 has an invalid interface number: 3 but max is 0 [ 381.406683][ T13] usb 2-1: config 4 has an invalid interface number: 3 but max is 0 [ 381.444638][ T13] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 381.475486][ T13] usb 2-1: config 4 has no interface number 0 [ 381.485862][ T13] usb 2-1: config 4 interface 3 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 381.640319][ T13] usb 2-1: config 4 interface 3 has no altsetting 0 [ 381.667969][ T4514] hid-generic 0003:1532:010E.0009: hidraw0: USB HID v1.01 Device [HID 1532:010e] on usb-dummy_hcd.4-1/input0 [ 381.679728][ T13] usb 2-1: config 4 interface 3 has no altsetting 1 [ 381.701369][ T13] usb 2-1: New USB device found, idVendor=05ac, idProduct=1204, bcdDevice= 7.6c [ 381.758658][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.896924][ T1110] usb 5-1: USB disconnect, device number 27 [ 381.935453][ T4255] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 382.110206][ T9464] device syzkaller0 entered promiscuous mode [ 382.195467][ T4255] usb 1-1: Using ep0 maxpacket: 16 [ 382.315654][ T4255] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 382.328340][ T4255] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 382.526061][ T4255] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 382.537810][ T4255] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.549320][ T4255] usb 1-1: Product: syz [ 382.559130][ T4255] usb 1-1: Manufacturer: syz [ 382.571394][ T4255] usb 1-1: SerialNumber: syz [ 382.945566][ T4255] usb 1-1: 0:2 : does not exist [ 383.043797][ T4255] usb 1-1: USB disconnect, device number 38 [ 383.074042][ T8648] udevd[8648]: setting mode of /dev/bus/usb/001/038 to 020664 failed: No such file or directory [ 383.097062][ T8648] udevd[8648]: setting owner of /dev/bus/usb/001/038 to uid=0, gid=0 failed: No such file or directory [ 383.171490][ T9480] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 383.266250][ T8648] udevd[8648]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 383.439780][ T1110] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 383.465684][ T13] apple-mfi-fastcharge 2-1: string descriptor 0 read error: -71 [ 383.476782][ T13] usb-storage 2-1:4.3: USB Mass Storage device detected [ 383.527581][ T13] usb-storage 2-1:4.3: Quirks match for vid 05ac pid 1204: 90 [ 383.644958][ T13] apple-mfi-fastcharge 2-1: USB disconnect, device number 29 [ 384.615562][ T1110] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 384.635535][ T1110] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 384.664495][ T1110] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 384.685565][ T1110] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.828093][ T9501] device syzkaller0 entered promiscuous mode [ 384.935524][ T13] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 384.955643][ T1110] usb 3-1: usb_control_msg returned -32 [ 384.961763][ T1110] usbtmc 3-1:16.0: can't read capabilities [ 385.605611][ T13] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 385.640516][ T13] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 385.700002][ T13] usb 2-1: config 220 interface 0 has no altsetting 0 [ 385.975598][ T13] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 385.990572][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.011747][ T13] usb 2-1: Product: syz [ 386.022109][ T13] usb 2-1: Manufacturer: syz [ 386.035065][ T13] usb 2-1: SerialNumber: syz [ 386.125490][ T4255] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 386.330186][ T1110] usb 3-1: USB disconnect, device number 27 [ 386.395478][ T4255] usb 5-1: Using ep0 maxpacket: 16 [ 386.525497][ T4255] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 386.585773][ T13] usb 2-1: USB disconnect, device number 30 [ 386.608512][ T4255] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 386.694262][ T9525] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 387.656257][ T4255] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 388.430472][ T4255] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.450584][ T9533] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1582'. [ 388.457235][ T4255] usb 5-1: Product: syz [ 388.469015][ T9533] device geneve3 entered promiscuous mode [ 388.474977][ T4255] usb 5-1: Manufacturer: syz [ 388.493256][ T4255] usb 5-1: SerialNumber: syz [ 388.649424][ T9536] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 388.751945][ T9543] device syzkaller0 entered promiscuous mode [ 388.855699][ T4255] usb 5-1: 0:2 : does not exist [ 388.971919][ T4255] usb 5-1: USB disconnect, device number 28 [ 389.277686][ T8648] udevd[8648]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 391.323508][ T9564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1589'. [ 392.651521][ T9579] syz.1.1595 (9579) used greatest stack depth: 17232 bytes left [ 394.616455][ T9601] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 394.695992][ T4233] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 395.076253][ T4233] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 395.566586][ T4233] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 395.600228][ T4233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 395.645447][ T4233] usb 1-1: Product: syz [ 395.649678][ T4233] usb 1-1: Manufacturer: syz [ 395.684952][ T4233] usb 1-1: SerialNumber: syz [ 395.981583][ T4233] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 39 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 396.129707][ T4233] usb 1-1: USB disconnect, device number 39 [ 396.153287][ T4233] usblp0: removed [ 398.986008][ T9643] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 399.571048][ T9648] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 400.655950][ T13] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 400.785388][ T4255] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 400.905396][ T13] usb 2-1: Using ep0 maxpacket: 8 [ 401.027011][ T13] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 401.055135][ T13] usb 2-1: config 0 has no interface number 0 [ 401.067948][ T4255] usb 4-1: Using ep0 maxpacket: 32 [ 401.074272][ T13] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 401.103595][ T13] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 401.121325][ T9662] device syzkaller0 entered promiscuous mode [ 401.128846][ T13] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 401.170449][ T13] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 401.203360][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.215574][ T4255] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 401.246437][ T4255] usb 4-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 401.263570][ T13] usb 2-1: config 0 descriptor?? [ 401.277809][ T4255] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 401.316689][ T13] ldusb 2-1:0.55: Interrupt in endpoint not found [ 401.536122][ T4255] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 401.546728][ T13] usb 2-1: USB disconnect, device number 31 [ 401.550143][ T4255] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.585496][ T4255] usb 4-1: Product: syz [ 401.605599][ T4255] usb 4-1: Manufacturer: syz [ 401.610252][ T4255] usb 4-1: SerialNumber: syz [ 401.707431][ T4255] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 401.735585][ T4255] imon 4-1:155.0: unable to initialize intf0, err -19 [ 401.755463][ T4255] imon:imon_probe: failed to initialize context! [ 401.775592][ T4255] imon 4-1:155.0: unable to register, err -19 [ 401.832334][ T9668] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 402.285541][ T4233] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 402.989008][ T9683] tipc: Failed to remove unknown binding: 66,1,1/2223727965:3527367390/3527367392 [ 403.075493][ T4233] usb 1-1: Using ep0 maxpacket: 16 [ 403.195756][ T4233] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 403.234770][ T4233] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 403.465903][ T4233] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 403.500773][ T4233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.572042][ T4233] usb 1-1: Product: syz [ 403.609931][ T4233] usb 1-1: Manufacturer: syz [ 403.651017][ T4233] usb 1-1: SerialNumber: syz [ 403.930439][ T9691] device syzkaller0 entered promiscuous mode [ 404.009009][ T1110] usb 4-1: USB disconnect, device number 22 [ 404.036477][ T9691] tipc: Enabled bearer , priority 0 [ 404.055707][ T4233] usb 1-1: 0:2 : does not exist [ 404.101683][ T9690] tipc: Resetting bearer [ 404.139559][ T9690] tipc: Disabling bearer [ 404.148695][ T4233] usb 1-1: USB disconnect, device number 40 [ 404.588125][ T8648] udevd[8648]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 405.351660][ T9711] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 405.780737][ T1110] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 406.376253][ T1110] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 406.421285][ T1110] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.544960][ T1110] usb 1-1: Product: syz [ 406.572711][ T1110] usb 1-1: Manufacturer: syz [ 406.603619][ T1110] usb 1-1: SerialNumber: syz [ 407.491117][ T9734] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 407.645640][ T1110] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 409.019993][ T9753] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1645'. [ 409.475696][ T1110] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 409.790258][ T1110] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -32 [ 409.868984][ T1110] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -32 [ 410.165705][ T1110] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 410.228699][ T9763] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 411.225599][ T1110] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 411.275783][ T1110] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 411.315668][ T1110] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 411.345043][ T9774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1650'. [ 411.355509][ T1110] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 411.395495][ T1110] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -71 [ 411.417535][ T1110] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 411.444013][ T1110] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 411.457272][ T1110] lan78xx: probe of 1-1:1.0 failed with error -71 [ 411.475975][ T1110] usb 1-1: USB disconnect, device number 41 [ 411.705553][ T4225] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 411.975702][ T4225] usb 4-1: Using ep0 maxpacket: 32 [ 412.039241][ T9785] device syzkaller0 entered promiscuous mode [ 412.095637][ T4225] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.121730][ T4225] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.138671][ T4225] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 412.151369][ T4225] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.169538][ T9782] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 412.188880][ T4225] usb 4-1: config 0 descriptor?? [ 412.539259][ T9795] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1657'. [ 413.267464][ T4225] savu 0003:1E7D:2D5A.000A: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 413.310278][ T4225] usb 4-1: USB disconnect, device number 23 [ 413.476755][ T9800] fido_id[9800]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 413.547052][ T9804] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.554312][ T9804] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.058515][ T23] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 414.263034][ T9815] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 415.965367][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 416.086661][ T23] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 416.110950][ T23] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 416.124220][ T23] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 416.140645][ T23] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 416.151881][ T23] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 416.170944][ T23] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 416.181505][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.430809][ T9825] device syzkaller0 entered promiscuous mode [ 416.455476][ T23] usb 5-1: GET_CAPABILITIES returned 0 [ 416.461081][ T23] usbtmc 5-1:16.0: can't read capabilities [ 417.302998][ T4233] usb 5-1: USB disconnect, device number 29 [ 417.315541][ T9804] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 417.605404][ T23] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 418.998379][ T9851] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1672'. [ 419.690613][ T23] usb 1-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 420.596176][ T9853] overlayfs: missing 'workdir' [ 420.685416][ T1110] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 420.725709][ T23] usb 1-1: string descriptor 0 read error: -71 [ 420.733126][ T23] usb 1-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 420.742721][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.775709][ T23] usb 1-1: can't set config #54, error -71 [ 420.796548][ T23] usb 1-1: USB disconnect, device number 42 [ 420.995355][ T1110] usb 3-1: Using ep0 maxpacket: 32 [ 421.115607][ T1110] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.136679][ T1110] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.149747][ T1110] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 421.159439][ T1110] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.178053][ T1110] usb 3-1: config 0 descriptor?? [ 421.476581][ T23] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 422.387014][ T1110] savu 0003:1E7D:2D5A.000B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 422.465406][ T1110] usb 3-1: USB disconnect, device number 28 [ 422.564029][ T9887] fido_id[9887]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 422.635608][ T23] usb 1-1: config 0 has no interfaces? [ 422.955890][ T23] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 422.985438][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.993615][ T23] usb 1-1: Product: syz [ 423.004007][ T23] usb 1-1: Manufacturer: syz [ 423.014345][ T23] usb 1-1: SerialNumber: syz [ 423.289530][ T23] usb 1-1: config 0 descriptor?? [ 423.648563][ T23] usb 1-1: USB disconnect, device number 43 [ 423.937581][ T9903] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 424.290196][ T9909] netlink: 'syz.4.1689': attribute type 12 has an invalid length. [ 424.325399][ T9909] netlink: 'syz.4.1689': attribute type 5 has an invalid length. [ 424.344669][ T9909] netlink: 'syz.4.1689': attribute type 2 has an invalid length. [ 424.387167][ T9909] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1689'. [ 424.795411][ T4513] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 424.890508][ T9927] tipc: Failed to remove unknown binding: 66,1,1/0:3660668348/3660668350 [ 425.115388][ T4233] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 425.385482][ T4513] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 425.385689][ T4233] usb 3-1: Using ep0 maxpacket: 32 [ 425.595899][ T4233] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.653476][ T4233] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.514126][ T4233] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 426.584309][ T4233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.646146][ T4513] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.654199][ T4513] usb 5-1: Product: syz [ 426.658443][ T4513] usb 5-1: Manufacturer: syz [ 426.663070][ T4513] usb 5-1: SerialNumber: syz [ 426.678300][ T4513] usb 5-1: config 0 descriptor?? [ 426.679159][ T4233] usb 3-1: config 0 descriptor?? [ 426.840249][ T9936] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 426.932910][ T23] usb 5-1: USB disconnect, device number 30 [ 427.209727][ T4233] savu 0003:1E7D:2D5A.000C: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 427.891114][ T4513] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 427.917745][ T4233] usb 3-1: USB disconnect, device number 29 [ 428.105399][ T4513] usb 2-1: device descriptor read/64, error -71 [ 428.141707][ T9947] fido_id[9947]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 428.267205][ T9955] device syzkaller0 entered promiscuous mode [ 428.395454][ T4513] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 428.595993][ T4513] usb 2-1: device descriptor read/64, error -71 [ 428.797038][ T1110] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 428.805225][ T4513] usb usb2-port1: attempt power cycle [ 428.921212][ T9969] tipc: Failed to remove unknown binding: 66,1,1/0:1342148146/1342148148 [ 429.005444][ T1110] usb 4-1: device descriptor read/64, error -71 [ 429.225493][ T4513] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 429.275510][ T1110] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 429.305179][ T9973] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 429.325687][ T4513] usb 2-1: device descriptor read/8, error -71 [ 429.475398][ T1110] usb 4-1: device descriptor read/64, error -71 [ 429.595479][ T4513] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 429.603374][ T1110] usb usb4-port1: attempt power cycle [ 429.706601][ T4513] usb 2-1: device descriptor read/8, error -71 [ 429.744323][ T9985] tmpfs: Unknown parameter 'usrquota' [ 429.845572][ T4513] usb usb2-port1: unable to enumerate USB device [ 429.969791][ T9992] device syzkaller0 entered promiscuous mode [ 430.025991][ T1110] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 430.154939][ T9993] syz.4.1717 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 430.575615][ T1110] usb 4-1: device descriptor read/8, error -71 [ 431.595470][ T13] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 432.715352][ T13] usb 2-1: Using ep0 maxpacket: 16 [ 432.730560][T10011] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 432.835620][ T13] usb 2-1: config 4 has an invalid interface number: 37 but max is 0 [ 432.879423][ T13] usb 2-1: config 4 has no interface number 0 [ 433.009647][ T13] usb 2-1: config 4 interface 37 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 433.048422][T10013] trusted_key: encrypted_key: insufficient parameters specified [ 433.059687][ T13] usb 2-1: config 4 interface 37 has no altsetting 0 [ 433.139233][T10017] tipc: Failed to remove unknown binding: 66,1,1/0:1249602749/1249602751 [ 433.235651][ T13] usb 2-1: New USB device found, idVendor=0b05, idProduct=9202, bcdDevice=94.4f [ 433.245164][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.259448][ T13] usb 2-1: Product: syz [ 433.263830][ T13] usb 2-1: Manufacturer: syz [ 433.270312][ T13] usb 2-1: SerialNumber: syz [ 433.753115][ T9995] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 434.358567][ T13] usb 2-1: USB disconnect, device number 36 [ 434.365698][ T4233] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 434.460373][T10037] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 434.555430][ T4233] usb 5-1: device descriptor read/64, error -71 [ 434.625384][ T1110] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 434.825395][ T4233] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 434.835521][ T1110] usb 4-1: device descriptor read/64, error -71 [ 435.025391][ T4233] usb 5-1: device descriptor read/64, error -71 [ 435.033295][T10054] kvm: apic: phys broadcast and lowest prio [ 435.125458][ T1110] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 435.145819][ T4233] usb usb5-port1: attempt power cycle [ 435.176120][T10058] tipc: Failed to remove unknown binding: 66,1,1/2223727965:2574843735/2574843737 [ 435.345381][ T1110] usb 4-1: device descriptor read/64, error -71 [ 435.471345][ T1110] usb usb4-port1: attempt power cycle [ 435.555401][ T4233] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 435.666351][ T4233] usb 5-1: device descriptor read/8, error -71 [ 435.885749][ T1110] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 435.955420][ T4233] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 435.985666][ T1110] usb 4-1: device descriptor read/8, error -71 [ 436.095813][ T4233] usb 5-1: device descriptor read/8, error -71 [ 436.219474][ T4233] usb usb5-port1: unable to enumerate USB device [ 436.255405][ T1110] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 436.264322][T10068] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 436.351308][T10075] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 436.359881][ T1110] usb 4-1: device descriptor read/8, error -71 [ 436.485532][ T1110] usb usb4-port1: unable to enumerate USB device [ 437.828191][T10093] Illegal XDP return value 4294967274, expect packet loss! [ 437.839036][T10094] tipc: Failed to remove unknown binding: 66,1,1/0:3774666891/3774666893 [ 438.765393][ T21] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 439.015450][ T21] usb 4-1: Using ep0 maxpacket: 16 [ 439.135642][ T21] usb 4-1: config 4 has an invalid interface number: 37 but max is 0 [ 439.179277][ T21] usb 4-1: config 4 has no interface number 0 [ 439.195379][ T4255] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 439.204185][ T21] usb 4-1: config 4 interface 37 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 439.224667][ T21] usb 4-1: config 4 interface 37 has no altsetting 0 [ 439.265364][ T4232] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 439.395560][ T21] usb 4-1: New USB device found, idVendor=0b05, idProduct=9202, bcdDevice=94.4f [ 439.405386][ T4255] usb 3-1: device descriptor read/64, error -71 [ 439.412560][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.423044][ T21] usb 4-1: Product: syz [ 439.429706][ T21] usb 4-1: Manufacturer: syz [ 439.439000][ T21] usb 4-1: SerialNumber: syz [ 439.465437][ T4232] usb 5-1: device descriptor read/64, error -71 [ 439.499731][T10088] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 439.685447][ T4255] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 439.735405][ T4232] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 439.875548][ T4255] usb 3-1: device descriptor read/64, error -71 [ 439.905223][ T21] usb 4-1: USB disconnect, device number 32 [ 439.925685][ T4232] usb 5-1: device descriptor read/64, error -71 [ 439.937375][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.943751][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.005673][ T4255] usb usb3-port1: attempt power cycle [ 440.068390][ T4232] usb usb5-port1: attempt power cycle [ 440.415374][ T4255] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 440.485787][ T4232] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 440.525569][ T4255] usb 3-1: device descriptor read/8, error -71 [ 440.595695][ T4232] usb 5-1: device descriptor read/8, error -71 [ 440.795516][ T4255] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 440.875492][ T4232] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 441.481016][ T4232] usb 5-1: device descriptor read/8, error -71 [ 441.487701][ T4255] usb 3-1: device descriptor read/8, error -71 [ 441.640503][ T4232] usb usb5-port1: unable to enumerate USB device [ 441.640543][ T4255] usb usb3-port1: unable to enumerate USB device [ 442.504511][T10147] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1769'. [ 442.722752][T10150] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1768'. [ 444.548970][T10162] device syzkaller0 entered promiscuous mode [ 444.762340][ T4255] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 445.315447][ T4255] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 445.357648][ T4255] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 445.398758][ T4255] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 445.427728][ T4255] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 445.539698][ T4255] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 445.603390][ T4255] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.629757][ T4255] usb 4-1: config 0 descriptor?? [ 446.821468][ T21] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 446.829339][ T4232] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 446.886524][ T4255] hdpvr 4-1:0.0: firmware version 0x12 dated [ 447.125377][ T4232] usb 1-1: device descriptor read/64, error -71 [ 447.175372][ T21] usb 3-1: Using ep0 maxpacket: 16 [ 447.775692][ T21] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 447.787628][ T21] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 447.889155][T10191] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 447.945095][T10196] device syzkaller0 entered promiscuous mode [ 447.951588][ T4232] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 447.975586][ T21] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 447.993568][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.003379][ T21] usb 3-1: Product: syz [ 448.007860][ T21] usb 3-1: Manufacturer: syz [ 448.012769][ T21] usb 3-1: SerialNumber: syz [ 448.165833][ T4232] usb 1-1: device descriptor read/64, error -71 [ 448.318925][T10202] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1786'. [ 448.395602][ T21] usb 3-1: 0:2 : does not exist [ 448.990559][ T21] usb 3-1: USB disconnect, device number 34 [ 449.096354][ T4232] usb usb1-port1: attempt power cycle [ 449.156002][ T4255] hdpvr 4-1:0.0: Could not setup controls [ 449.165026][ T4255] hdpvr 4-1:0.0: registering videodev failed [ 449.233976][ T4255] hdpvr: probe of 4-1:0.0 failed with error -71 [ 449.234538][ T8546] udevd[8546]: setting mode of /dev/i2c-1 to 020600 failed: No such file or directory [ 449.249805][ T4255] usb 4-1: USB disconnect, device number 33 [ 449.448848][ T8546] udevd[8546]: setting owner of /dev/i2c-1 to uid=0, gid=0 failed: No such file or directory [ 449.535620][ T4232] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 449.666123][ T8648] udevd[8648]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 449.675502][ T4232] usb 1-1: device descriptor read/8, error -71 [ 449.743182][T10206] device syzkaller0 entered promiscuous mode [ 454.785624][ T4232] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 454.858606][T10230] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 454.905547][ T4232] usb 1-1: Using ep0 maxpacket: 32 [ 455.004323][T10237] device syzkaller0 entered promiscuous mode [ 455.055566][ T4232] usb 1-1: device descriptor read/all, error -71 [ 455.071374][ T4232] usb usb1-port1: unable to enumerate USB device [ 455.485497][ T4232] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 455.595400][ T4254] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 455.765363][ T4232] usb 1-1: Using ep0 maxpacket: 16 [ 456.523092][ T4232] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 456.554395][ T4232] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 456.736311][ T4254] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 456.747500][ T4254] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 456.756652][ T4254] usb 2-1: config 220 interface 0 has no altsetting 0 [ 459.345605][ T4232] usb 1-1: string descriptor 0 read error: -71 [ 459.351926][ T4232] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 459.535553][ T4254] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 459.544668][ T4254] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.561482][ T4232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.055406][ T4232] usb 1-1: can't set config #1, error -71 [ 460.066663][ T4232] usb 1-1: USB disconnect, device number 48 [ 460.145407][ T4254] usb 2-1: can't set config #220, error -71 [ 460.154243][ T4254] usb 2-1: USB disconnect, device number 37 [ 461.525909][T10274] comedi comedi4: bad chanlist[0]=0x00480000 chan=0 range length=2 [ 461.552919][T10275] device syzkaller0 entered promiscuous mode [ 462.545802][ T4225] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 462.815796][ T4225] usb 2-1: Using ep0 maxpacket: 32 [ 462.895039][T10297] tipc: Failed to remove unknown binding: 66,1,1/0:3893029909/3893029911 [ 462.965541][ T4225] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.084592][ T4225] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.101973][ T4225] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 463.115337][ T4225] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.145944][ T4225] usb 2-1: config 0 descriptor?? [ 463.285610][ T21] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 463.293303][ T4232] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 463.555500][ T4232] usb 4-1: Using ep0 maxpacket: 16 [ 463.693111][ T4225] savu 0003:1E7D:2D5A.000D: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 463.756121][ T21] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 463.756166][ T4232] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 463.800556][ T4232] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 463.864202][ T21] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 463.914589][ T21] usb 5-1: config 220 interface 0 has no altsetting 0 [ 464.130415][ T4225] usb 2-1: USB disconnect, device number 38 [ 464.225887][ T4232] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 464.281066][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.374472][ T4232] usb 4-1: Product: syz [ 464.401195][ T4232] usb 4-1: Manufacturer: syz [ 464.411320][ T4232] usb 4-1: SerialNumber: syz [ 464.517356][ T21] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 464.545808][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.545937][ T21] usb 5-1: Product: syz [ 464.546019][ T21] usb 5-1: Manufacturer: syz [ 464.546099][ T21] usb 5-1: SerialNumber: syz [ 464.807406][ T4232] usb 4-1: 0:2 : does not exist [ 465.016663][ T4232] usb 4-1: USB disconnect, device number 34 [ 465.020268][ T21] usb 5-1: Found UVC 0.00 device syz (8086:0b07) [ 465.022317][ T21] usb 5-1: No valid video chain found. [ 465.060402][ T21] usb 5-1: USB disconnect, device number 39 [ 465.389752][T10327] device syzkaller0 entered promiscuous mode [ 465.416802][ T8648] udevd[8648]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 465.596296][T10333] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 469.428522][ T4232] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 469.825382][ T4232] usb 4-1: Using ep0 maxpacket: 16 [ 469.985708][ T4232] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 470.025249][ T4232] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 470.079014][T10378] device syzkaller0 entered promiscuous mode [ 472.515414][ T4232] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 472.524518][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.534633][ T4232] usb 4-1: Product: syz [ 472.539796][ T4232] usb 4-1: Manufacturer: syz [ 472.565459][ T4232] usb 4-1: can't set config #1, error -71 [ 472.691335][ T4232] usb 4-1: USB disconnect, device number 35 [ 472.734154][T10397] tipc: Enabling of bearer rejected, failed to enable media [ 472.845466][T10397] device syzkaller0 entered promiscuous mode [ 475.530850][T10436] device syzkaller0 entered promiscuous mode [ 475.965480][ T4232] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 476.213242][T10451] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 476.235613][ T4232] usb 1-1: Using ep0 maxpacket: 16 [ 476.355592][ T4232] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 476.374116][ T4232] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 476.483510][T10457] tipc: Enabling of bearer rejected, failed to enable media [ 476.516226][T10457] device syzkaller0 entered promiscuous mode [ 477.012884][ T4232] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 477.060215][ T4232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.275356][ T4232] usb 1-1: Product: syz [ 477.279588][ T4232] usb 1-1: Manufacturer: syz [ 478.498842][ T4232] usb 1-1: SerialNumber: syz [ 478.555414][ T4232] usb 1-1: can't set config #1, error -71 [ 478.576263][ T4232] usb 1-1: USB disconnect, device number 49 [ 479.543942][T10490] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 480.861465][T10496] tipc: Failed to remove unknown binding: 66,1,1/0:2626500094/2626500096 [ 480.881157][T10494] QAT: failed to copy from user. [ 480.948954][T10504] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 481.675398][ T4232] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 482.370343][T10509] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1881'. [ 482.435451][ T4232] usb 2-1: device descriptor read/64, error -71 [ 482.715354][ T4232] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 482.855231][T10516] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 482.955389][ T4232] usb 2-1: device descriptor read/64, error -71 [ 483.206205][ T4232] usb usb2-port1: attempt power cycle [ 483.945570][ T4232] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 484.145480][ T4232] usb 2-1: device descriptor read/8, error -71 [ 484.706142][T10532] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 486.382646][T10552] binder: 10551:10552 unknown command 1074553620 [ 486.405408][T10552] binder: 10551:10552 ioctl c0306201 200000000640 returned -22 [ 486.838527][T10565] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 487.323586][ T4254] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 487.508655][T10576] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1900'. [ 487.525987][T10576] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1900'. [ 487.551272][T10576] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1900'. [ 487.571582][T10576] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1900'. [ 487.665366][ T4233] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 487.750849][ T4254] usb 5-1: config 0 has no interfaces? [ 487.925566][ T4254] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 487.945083][ T4254] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.025314][ T4233] usb 4-1: device descriptor read/64, error -71 [ 490.245336][ T4254] usb 5-1: Product: syz [ 490.249665][ T4254] usb 5-1: Manufacturer: syz [ 490.254279][ T4254] usb 5-1: SerialNumber: syz [ 490.279823][ T4254] usb 5-1: config 0 descriptor?? [ 490.355450][ T4254] usb 5-1: can't set config #0, error -71 [ 490.371915][ T4254] usb 5-1: USB disconnect, device number 40 [ 490.445375][ T4233] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 490.719520][T10596] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 490.799371][T10600] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 494.991668][T10630] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1905'. [ 495.086879][T10633] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1913'. [ 497.460637][ T4514] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 497.734340][T10656] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 498.422235][ T4514] usb 4-1: device descriptor read/64, error -71 [ 498.715311][ T4514] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 499.135330][ T4514] usb 4-1: device descriptor read/64, error -71 [ 499.662563][ T4514] usb usb4-port1: attempt power cycle [ 501.391314][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.398026][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.137503][T10697] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 503.335434][ T4233] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 503.616061][ T4233] usb 5-1: device descriptor read/64, error -71 [ 504.035430][ T4233] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 504.358897][ T4233] usb 5-1: device descriptor read/64, error -71 [ 504.501929][ T4233] usb usb5-port1: attempt power cycle [ 505.675391][ T4233] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 506.037073][ T4233] usb 5-1: device not accepting address 43, error -71 [ 508.655378][ T4233] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 508.875439][ T4233] usb 5-1: device descriptor read/8, error -71 [ 509.992033][ T4233] usb usb5-port1: unable to enumerate USB device [ 514.535391][ T4232] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 515.341047][T10772] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 515.378838][ T4232] usb 4-1: device descriptor read/64, error -71 [ 515.665446][ T4232] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 515.885298][ T4232] usb 4-1: device descriptor read/64, error -71 [ 516.029600][ T4232] usb usb4-port1: attempt power cycle [ 516.545732][ T4232] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 516.985516][ T4232] usb 4-1: device descriptor read/8, error -71 [ 517.275250][ T4232] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 517.357012][ T4232] usb 4-1: device descriptor read/8, error -71 [ 517.536450][ T4232] usb usb4-port1: unable to enumerate USB device [ 520.535809][T10804] zonefs (nullb0) ERROR: Not a zoned block device [ 525.141631][ T1110] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 526.232281][T10845] trusted_key: encrypted_key: insufficient parameters specified [ 526.327991][T10846] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 527.055324][ T1110] usb 4-1: device descriptor read/64, error -71 [ 527.306984][T10859] device syzkaller0 entered promiscuous mode [ 527.522612][T10861] zonefs (nullb0) ERROR: Not a zoned block device [ 529.400518][T10875] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 529.485380][ T23] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 530.199623][ T4232] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 530.294147][T10895] trusted_key: encrypted_key: insufficient parameters specified [ 530.465253][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 530.547577][T10900] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 531.255492][ T23] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 531.263911][ T23] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 531.295422][ T4232] usb 2-1: Using ep0 maxpacket: 32 [ 531.305665][ T23] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 531.314843][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 531.325375][ T23] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 531.447350][ T23] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 531.545128][T10906] zonefs (nullb0) ERROR: Not a zoned block device [ 531.845444][ T4232] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 531.858196][ T4232] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 531.870314][ T23] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 531.881336][ T4232] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 531.892738][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.903883][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.184928][ T23] usb 5-1: config 0 descriptor?? [ 532.275618][ T23] usb 5-1: can't set config #0, error -71 [ 532.283225][ T4232] usb 2-1: config 0 descriptor?? [ 532.293366][ T23] usb 5-1: USB disconnect, device number 45 [ 532.491476][ T1110] usb 2-1: USB disconnect, device number 43 [ 532.553321][T10914] QAT: failed to copy from user. [ 532.885866][T10925] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 536.726926][T10946] zonefs (nullb0) ERROR: Not a zoned block device [ 539.976942][ T13] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 540.276797][ T13] usb 1-1: Using ep0 maxpacket: 32 [ 542.907781][ T13] usb 1-1: device descriptor read/all, error -71 [ 543.571961][T10996] zonefs (nullb0) ERROR: Not a zoned block device [ 545.344489][T10998] Can't find ip_set type hash:net,po [ 545.350481][T11002] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 545.541153][T11016] device syzkaller0 entered promiscuous mode [ 548.165213][ T4232] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 548.685358][ T4232] usb 2-1: Using ep0 maxpacket: 32 [ 548.805935][ T4232] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 548.820395][ T4232] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 548.831919][ T4232] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 548.847444][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.867633][ T4232] usb 2-1: config 0 descriptor?? [ 548.917308][T11033] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 549.190933][T11038] device syzkaller0 entered promiscuous mode [ 549.287179][T11039] zonefs (nullb0) ERROR: Not a zoned block device [ 550.824022][T11054] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2027'. [ 551.193914][ T4232] usb 2-1: USB disconnect, device number 44 [ 556.941501][T11083] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 556.960909][T11081] device syzkaller0 entered promiscuous mode [ 557.140637][T11088] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 561.260336][ T4225] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 561.899244][T11132] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 562.556092][T11149] device syzkaller0 entered promiscuous mode [ 562.817464][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.824039][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.835602][ T21] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 563.060484][ T21] usb 5-1: device descriptor read/64, error -71 [ 563.084474][T11159] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 563.335506][ T21] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 563.607052][ T1110] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 563.635558][ T21] usb 5-1: device descriptor read/64, error -71 [ 563.756412][ T21] usb usb5-port1: attempt power cycle [ 563.895253][ T1110] usb 2-1: Using ep0 maxpacket: 32 [ 564.054212][T11174] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 564.231520][ T1110] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 564.248292][ T1110] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 564.263704][ T1110] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 564.278619][ T1110] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.833572][ T21] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 567.730879][ T1110] usb 2-1: config 0 descriptor?? [ 567.777405][ T1110] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 567.805325][ T21] usb 5-1: device descriptor read/8, error -71 [ 567.976707][ T1110] usb 2-1: USB disconnect, device number 45 [ 568.069826][T11189] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 569.320683][T11207] device syzkaller0 entered promiscuous mode [ 569.495608][ T23] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 569.775432][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 569.945982][ T23] usb 1-1: config 4 has an invalid interface number: 37 but max is 0 [ 569.955268][ T23] usb 1-1: config 4 has no interface number 0 [ 569.962168][ T23] usb 1-1: config 4 interface 37 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 569.977951][ T23] usb 1-1: config 4 interface 37 has no altsetting 0 [ 570.155320][ T23] usb 1-1: New USB device found, idVendor=0b05, idProduct=9202, bcdDevice=94.4f [ 570.175372][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.188540][T11212] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 570.205318][ T23] usb 1-1: Product: syz [ 570.209617][ T23] usb 1-1: Manufacturer: syz [ 570.214264][ T23] usb 1-1: SerialNumber: syz [ 570.276189][T11203] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 571.610236][T11233] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 572.747960][T11239] trusted_key: encrypted_key: insufficient parameters specified [ 572.796264][ T23] usb 1-1: USB disconnect, device number 52 [ 573.687419][T11259] overlayfs: failed to resolve './file2': -2 [ 574.237944][T11266] device syzkaller0 entered promiscuous mode [ 574.629568][T11279] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 577.558296][T11308] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1497 [ 577.568462][T11308] in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 11308, name: syz.1.2096 [ 577.577579][T11308] 1 lock held by syz.1.2096/11308: [ 577.582706][T11308] #0: ffffffff8c3443b8 (css_set_lock){..-.}-{2:2}, at: cgroup_get_from_path+0x26/0x2f0 [ 577.592540][T11308] irq event stamp: 178 [ 577.596599][T11308] hardirqs last enabled at (177): [] _raw_spin_unlock_irqrestore+0x82/0x120 [ 577.606958][T11308] hardirqs last disabled at (178): [] _raw_spin_lock_irq+0x86/0xf0 [ 577.616407][T11308] softirqs last enabled at (162): [] ip_setsockopt+0x58a/0x3130 [ 577.625726][T11308] softirqs last disabled at (160): [] release_sock+0x2b/0x1b0 [ 577.634758][T11308] Preemption disabled at: [ 577.634765][T11308] [<0000000000000000>] 0x0 [ 577.643627][T11308] CPU: 1 PID: 11308 Comm: syz.1.2096 Not tainted syzkaller #0 [ 577.651077][T11308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 577.661133][T11308] Call Trace: [ 577.664410][T11308] [ 577.667337][T11308] dump_stack_lvl+0x188/0x250 [ 577.672039][T11308] ? ip_setsockopt+0x58a/0x3130 [ 577.676892][T11308] ? show_regs_print_info+0x20/0x20 [ 577.682090][T11308] ? load_image+0x400/0x400 [ 577.686600][T11308] ___might_sleep+0x493/0x610 [ 577.691293][T11308] ? __might_sleep+0xf0/0xf0 [ 577.695890][T11308] down_read+0x20/0x2e0 [ 577.700059][T11308] kernfs_walk_and_get_ns+0x7e/0x2c0 [ 577.705372][T11308] ? kernfs_find_ns+0x510/0x510 [ 577.710246][T11308] ? current_cgns_cgroup_from_root+0x2a9/0x2f0 [ 577.716406][T11308] cgroup_get_from_path+0x5f/0x2f0 [ 577.721519][T11308] cgroup_mt_check_v1+0x1ae/0x2c0 [ 577.726546][T11308] xt_check_match+0x425/0xaf0 [ 577.731227][T11308] ? xt_check_proc_name+0x240/0x240 [ 577.736421][T11308] ? pcpu_alloc+0x1121/0x1770 [ 577.741161][T11308] ? xt_find_match+0x1e1/0x210 [ 577.745951][T11308] translate_table+0x1551/0x20e0 [ 577.750921][T11308] ? ipt_register_table+0x800/0x800 [ 577.756133][T11308] ? __might_fault+0xb7/0x110 [ 577.760815][T11308] ? __lock_acquire+0x7d10/0x7d10 [ 577.765849][T11308] ? _copy_from_user+0x111/0x170 [ 577.770819][T11308] do_ipt_set_ctl+0x964/0xd80 [ 577.775497][T11308] ? futex_wait_queue_me+0x178/0x440 [ 577.780812][T11308] ? nf_setsockopt+0x218/0x280 [ 577.785586][T11308] ? ipt_unregister_table_exit+0x220/0x220 [ 577.791403][T11308] ? __lock_acquire+0x7d10/0x7d10 [ 577.796426][T11308] ? __mutex_lock_common+0x465/0x2400 [ 577.801811][T11308] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 577.807467][T11308] ? mutex_unlock+0x10/0x10 [ 577.811971][T11308] ? __local_bh_enable_ip+0x136/0x1c0 [ 577.817369][T11308] ? lockdep_hardirqs_on+0x94/0x140 [ 577.822586][T11308] ? __local_bh_enable_ip+0x136/0x1c0 [ 577.827961][T11308] nf_setsockopt+0x25f/0x280 [ 577.832555][T11308] ip_setsockopt+0x207d/0x3130 [ 577.837321][T11308] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 577.842721][T11308] ? __might_sleep+0xf0/0xf0 [ 577.847341][T11308] ? rcu_lock_release+0x9/0x20 [ 577.852119][T11308] tcp_setsockopt+0x240/0x1e90 [ 577.856891][T11308] ? aa_sk_perm+0x7dc/0x910 [ 577.861406][T11308] ? tcp_set_window_clamp+0x1a0/0x1a0 [ 577.866810][T11308] ? aa_af_perm+0x340/0x340 [ 577.871321][T11308] ? __fget_files+0x40f/0x480 [ 577.876003][T11308] ? aa_sock_opt_perm+0x74/0x100 [ 577.880943][T11308] ? sock_common_setsockopt+0x32/0xb0 [ 577.886314][T11308] ? sock_common_recvmsg+0x1c0/0x1c0 [ 577.891602][T11308] __sys_setsockopt+0x2bf/0x3d0 [ 577.896458][T11308] __x64_sys_setsockopt+0xb1/0xc0 [ 577.901485][T11308] do_syscall_64+0x4c/0xa0 [ 577.905900][T11308] ? clear_bhb_loop+0x30/0x80 [ 577.910583][T11308] ? clear_bhb_loop+0x30/0x80 [ 577.915352][T11308] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 577.921269][T11308] RIP: 0033:0x7f7738795eb9 [ 577.925686][T11308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.945289][T11308] RSP: 002b:00007f77369f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 577.953697][T11308] RAX: ffffffffffffffda RBX: 00007f7738a10fa0 RCX: 00007f7738795eb9 [ 577.961664][T11308] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000005 [ 577.969631][T11308] RBP: 00007f7738803c1f R08: 00000000000022f8 R09: 0000000000000000 [ 577.977603][T11308] R10: 0000200000002300 R11: 0000000000000246 R12: 0000000000000000 [ 577.985572][T11308] R13: 00007f7738a11038 R14: 00007f7738a10fa0 R15: 00007ffe55965768 [ 577.993560][T11308] [ 577.996577][T11308] [ 577.998897][T11308] ============================= [ 578.003729][T11308] [ BUG: Invalid wait context ] [ 578.008564][T11308] syzkaller #0 Tainted: G W [ 578.014364][T11308] ----------------------------- [ 578.019322][T11308] syz.1.2096/11308 is trying to lock: [ 578.024694][T11308] ffffffff8c44f910 (kernfs_rwsem){++++}-{3:3}, at: kernfs_walk_and_get_ns+0x7e/0x2c0 [ 578.034188][T11308] other info that might help us debug this: [ 578.040069][T11308] context-{4:4} [ 578.043548][T11308] 1 lock held by syz.1.2096/11308: [ 578.048650][T11308] #0: ffffffff8c3443b8 (css_set_lock){..-.}-{2:2}, at: cgroup_get_from_path+0x26/0x2f0 [ 578.058399][T11308] stack backtrace: [ 578.062109][T11308] CPU: 1 PID: 11308 Comm: syz.1.2096 Tainted: G W syzkaller #0 [ 578.070950][T11308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 578.081009][T11308] Call Trace: [ 578.084283][T11308] [ 578.087226][T11308] dump_stack_lvl+0x188/0x250 [ 578.091916][T11308] ? show_regs_print_info+0x20/0x20 [ 578.097111][T11308] ? load_image+0x400/0x400 [ 578.101618][T11308] __lock_acquire+0x1bf8/0x7d10 [ 578.106466][T11308] ? 0xffffffffa002c000 [ 578.110619][T11308] ? verify_lock_unused+0x140/0x140 [ 578.115839][T11308] ? __printk_cpu_unlock+0x5f/0x70 [ 578.120970][T11308] ? dump_stack_lvl+0x1fd/0x250 [ 578.125837][T11308] ? ip_setsockopt+0x58a/0x3130 [ 578.130689][T11308] ? show_regs_print_info+0x20/0x20 [ 578.135888][T11308] ? load_image+0x400/0x400 [ 578.140390][T11308] lock_acquire+0x19e/0x400 [ 578.144889][T11308] ? kernfs_walk_and_get_ns+0x7e/0x2c0 [ 578.150434][T11308] ? __might_sleep+0xf0/0xf0 [ 578.155019][T11308] ? read_lock_is_recursive+0x10/0x10 [ 578.160401][T11308] down_read+0x44/0x2e0 [ 578.164552][T11308] ? kernfs_walk_and_get_ns+0x7e/0x2c0 [ 578.170359][T11308] kernfs_walk_and_get_ns+0x7e/0x2c0 [ 578.175651][T11308] ? kernfs_find_ns+0x510/0x510 [ 578.180506][T11308] ? current_cgns_cgroup_from_root+0x2a9/0x2f0 [ 578.186658][T11308] cgroup_get_from_path+0x5f/0x2f0 [ 578.191778][T11308] cgroup_mt_check_v1+0x1ae/0x2c0 [ 578.196803][T11308] xt_check_match+0x425/0xaf0 [ 578.201481][T11308] ? xt_check_proc_name+0x240/0x240 [ 578.206692][T11308] ? pcpu_alloc+0x1121/0x1770 [ 578.211403][T11308] ? xt_find_match+0x1e1/0x210 [ 578.216171][T11308] translate_table+0x1551/0x20e0 [ 578.221138][T11308] ? ipt_register_table+0x800/0x800 [ 578.226341][T11308] ? __might_fault+0xb7/0x110 [ 578.231012][T11308] ? __lock_acquire+0x7d10/0x7d10 [ 578.236036][T11308] ? _copy_from_user+0x111/0x170 [ 578.240971][T11308] do_ipt_set_ctl+0x964/0xd80 [ 578.245643][T11308] ? futex_wait_queue_me+0x178/0x440 [ 578.250927][T11308] ? nf_setsockopt+0x218/0x280 [ 578.255691][T11308] ? ipt_unregister_table_exit+0x220/0x220 [ 578.261499][T11308] ? __lock_acquire+0x7d10/0x7d10 [ 578.266517][T11308] ? __mutex_lock_common+0x465/0x2400 [ 578.271892][T11308] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 578.277524][T11308] ? mutex_unlock+0x10/0x10 [ 578.282026][T11308] ? __local_bh_enable_ip+0x136/0x1c0 [ 578.287396][T11308] ? lockdep_hardirqs_on+0x94/0x140 [ 578.292595][T11308] ? __local_bh_enable_ip+0x136/0x1c0 [ 578.297960][T11308] nf_setsockopt+0x25f/0x280 [ 578.302637][T11308] ip_setsockopt+0x207d/0x3130 [ 578.307426][T11308] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 578.312796][T11308] ? __might_sleep+0xf0/0xf0 [ 578.317381][T11308] ? rcu_lock_release+0x9/0x20 [ 578.322140][T11308] tcp_setsockopt+0x240/0x1e90 [ 578.326898][T11308] ? aa_sk_perm+0x7dc/0x910 [ 578.331398][T11308] ? tcp_set_window_clamp+0x1a0/0x1a0 [ 578.336762][T11308] ? aa_af_perm+0x340/0x340 [ 578.341259][T11308] ? __fget_files+0x40f/0x480 [ 578.345929][T11308] ? aa_sock_opt_perm+0x74/0x100 [ 578.350859][T11308] ? sock_common_setsockopt+0x32/0xb0 [ 578.356226][T11308] ? sock_common_recvmsg+0x1c0/0x1c0 [ 578.361508][T11308] __sys_setsockopt+0x2bf/0x3d0 [ 578.366363][T11308] __x64_sys_setsockopt+0xb1/0xc0 [ 578.371385][T11308] do_syscall_64+0x4c/0xa0 [ 578.375795][T11308] ? clear_bhb_loop+0x30/0x80 [ 578.380464][T11308] ? clear_bhb_loop+0x30/0x80 [ 578.385155][T11308] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 578.391059][T11308] RIP: 0033:0x7f7738795eb9 [ 578.395469][T11308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 578.415068][T11308] RSP: 002b:00007f77369f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 578.423502][T11308] RAX: ffffffffffffffda RBX: 00007f7738a10fa0 RCX: 00007f7738795eb9 [ 578.431475][T11308] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000005 [ 578.439444][T11308] RBP: 00007f7738803c1f R08: 00000000000022f8 R09: 0000000000000000 [ 578.447409][T11308] R10: 0000200000002300 R11: 0000000000000246 R12: 0000000000000000 [ 578.455378][T11308] R13: 00007f7738a11038 R14: 00007f7738a10fa0 R15: 00007ffe55965768 [ 578.463351][T11308] [ 578.690544][T11316] overlayfs: failed to resolve './file2': -2 [ 579.119577][T11308] xt_cgroup: invalid path, errno=-2