last executing test programs: 25.395865768s ago: executing program 1 (id=1197): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000040)=0xfffffffe, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)={0x7, [0x5, 0x3, 0x4, 0xce, 0x5, 0x57a, 0xd747]}) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) mmap$KVM_VCPU(&(0x7f0000001000/0x3000)=nil, r7, 0x2, 0x13, r6, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r8, 0x0, 0x404c0c1) close(0x3) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x50, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa8100000086dd607b0100001611fffe8000000000000000000000000000bbfe8000000000000006000000000000aa00000e220016907802030000000000000000000000004b84a1ee3cc7aaebac"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010"], 0x0) sendto$inet6(r0, 0x0, 0x0, 0x44000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmmsg(r0, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff1b}, 0x6}, {{&(0x7f0000000400)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0, &(0x7f0000000600)=[{&(0x7f0000000c00)=""/4096}, {&(0x7f0000001c00)=""/4096}], 0x0, &(0x7f0000000640)=""/48}, 0x9}, {{&(0x7f0000000680)=@l2={0x1f, 0x0, @fixed}, 0x0, &(0x7f0000000880)=[{&(0x7f0000000700)=""/216}, {&(0x7f0000000800)=""/78}], 0x0, &(0x7f00000008c0)=""/229}, 0x4}], 0x800000000000151, 0x1022, 0x0) 23.418950474s ago: executing program 1 (id=1201): unshare(0x20000400) r0 = socket(0x40000000015, 0x805, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, 0x0) 23.418822784s ago: executing program 1 (id=1202): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000880)={'broute\x00', 0x0, 0x0, 0x0, [0x9, 0x2, 0xff7fb5b2, 0x3a8e5b6c, 0x40000, 0x208]}, &(0x7f0000000000)=0x50) 23.191545121s ago: executing program 1 (id=1203): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 23.070985973s ago: executing program 1 (id=1205): add_key(&(0x7f0000000380)='rxrpc\x00', 0x0, &(0x7f00000003c0)="01000000020000a94b4109905ae059630b008145f94cd97780f916feff", 0x1d, 0xfffffffffffffffb) 22.739031683s ago: executing program 1 (id=1208): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000200)={0x18, 0x0, {0x4001, @local, 'hsr0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 22.732473953s ago: executing program 32 (id=1208): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000200)={0x18, 0x0, {0x4001, @local, 'hsr0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 8.726914796s ago: executing program 3 (id=1288): r0 = epoll_create(0x2) unshare(0x400) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x66, &(0x7f0000000040), 0x8) 8.605620169s ago: executing program 3 (id=1290): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='attr\x00') fcntl$notify(r1, 0x402, 0x9) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='attr\x00') fcntl$notify(r2, 0x402, 0x80000003) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='attr\x00') fcntl$notify(r3, 0x402, 0x33) close_range(r0, 0xffffffffffffffff, 0x0) 8.470843003s ago: executing program 3 (id=1291): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000700"], 0x50) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r3, r3, 0x0, 0x200000) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000000), 0x80, r5, 0x0, 0x7}, 0x38) sendfile(r4, r4, 0x0, 0x1002000ff) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000cc0)}], 0x1) write$FUSE_NOTIFY_RETRIEVE(r1, 0x0, 0x0) 8.028663605s ago: executing program 3 (id=1294): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket(0x2, 0x80805, 0x0) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 7.950896057s ago: executing program 5 (id=1295): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x7d) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="25b89ca38ffd48f3be52", 0xa}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f7", 0x1d}, {&(0x7f0000000440)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a005eabe97b4dc33a5ed3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c44301c6ad7d00000000000000000000000b899f27cf3da1f0fe9c3ca8f0bc595b0bf937f0642a978ce0ca588dc0e738b0aec1a935524315e58ab7460b4a59bc5c52300e544938d0227a896b1969f8ac41d3e694b50b37cb8f85c84f5f4438", 0xb9}], 0x3, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x2004c054) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000840)=""/186, 0xba}], 0x1}, 0x40002002) 7.926684318s ago: executing program 5 (id=1297): pipe(&(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000001e40), 0x1, 0x2) ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000001e80)={0xb, @vbi={0x101, 0x101, 0x7, 0x3447504d, [0x4, 0x7], [0x7, 0xd], 0x108}}) r4 = fsopen(&(0x7f0000000200)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='source', &(0x7f0000001bc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x46) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x4, 0xffffbe0000000001, 0x8, 0xffffffff}, 0x0) sysinfo(&(0x7f00000015c0)=""/4096) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket(0x11, 0x3, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000014001b0528bd7000ffdbdf2511000d0001000405fa97"], 0x24}, 0x1, 0x0, 0x0, 0x2400a051}, 0x44000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x3f, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) r7 = socket$kcm(0x10, 0x100000000002, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000040)=r8, 0x4) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) sendmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x5fc, 0x380, 0x380, 0x2b8, 0x2b8, 0x448, 0x534, 0x534, 0x534, 0x534, 0x534, 0x6, 0x0, {[{{@uncond, 0x11e, 0xa4, 0x1cc, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x2, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [0xff], [], 'syz_tun\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xc8, 0xec, 0x7400, {}, [@inet=@rpfilter={{0x24}, {0xa}}]}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xc}}}, {{@uncond, 0x0, 0xc8, 0xec, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x2}}]}, @HL={0x24, 'HL\x00', 0x0, {0x1, 0x5}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x658) 3.9260498s ago: executing program 4 (id=1316): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x6, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000380)={{0x1, 0x7ff, 0x4b, 0x8009}, 'syz0\x00', 0x8}) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) r4 = dup3(r3, r2, 0x80000) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x1, 0x4, 0xff, 0xfffffffffffffffc}, 0x0, 0x0) r5 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x3) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x200040c0}, 0x4000054) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x400000000000235, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000000100)={0x4, r8}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000a00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0xa8, r11, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x4, 0x66}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMK={0x14, 0xfe, "e026051423e17d1415c4d06c1e1d1753"}, @NL80211_ATTR_PMK={0x14, 0xfe, "b7947b3f782cf104b8d997a003f60e34"}, @NL80211_ATTR_PMK={0x14, 0xfe, "337a314d20f4e140354effd9727bd89b"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "9eb827e7fc1429208f295242eca47863"}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4008}, 0x40088c0) ioctl$DMA_BUF_SET_NAME_A(r10, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') r13 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0x1, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x6, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x4, 0x80003e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x74, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x7], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x8, 0x8aaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x7, 0x2, 0x4, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000880)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb0, 0x1, 0x2, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_EXPECT_NAT={0x9c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x88, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}}}]}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}]}, 0xb0}}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r13, 0xffffffffffffffff, 0x0) 3.58165147s ago: executing program 0 (id=1319): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x52, &(0x7f0000000040)=0x92c, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000043c0)=""/69, 0x45}, 0x10002}], 0x1, 0x10022, 0x0) 3.502956972s ago: executing program 2 (id=1320): syz_open_dev$vim2m(&(0x7f00000000c0), 0xfffffffffffffffb, 0x2) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x2, 0x400) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = epoll_create1(0x0) r3 = syz_open_dev$media(&(0x7f00000001c0), 0x9, 0x402) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, 0x0) syz_usb_connect$uac1(0x0, 0x77, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x20000008}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) 3.159457762s ago: executing program 0 (id=1321): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0x5b23, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r7, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0x93, 0x0, 0xf, "100056f200"}) ioctl$TIOCMSET(r7, 0x5418, &(0x7f0000000000)=0x8002) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x80000001}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x4, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x40000000}, {0x0, 0xfd7c0}, {}, {0x0, 0x0, 0x3}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x200}, {0x0, 0x0, 0x7f}, {0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd, 0x0, 0x0, 0x0, 0x10000}, {}, {}, {}, {0x0, 0x0, 0x9}, {}, {0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x1e}, {}, {0x0, 0x0, 0x0, 0x1000000}, {}, {}, {0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xc, 0x40000}, {}, {0x10}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {0x8000000}, {0x0, 0x4}, {}, {}, {0x0, 0x9, 0x4, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0xfffffe00}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x200000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xb41}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}, {0x200}, {}, {}, {0x0, 0x0, 0x0, 0x7}], [{0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 2.540123489s ago: executing program 0 (id=1322): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) mknodat(r4, &(0x7f0000000100)='./file0/file0\x00', 0x8910, 0x4) unlinkat(0xffffffffffffff9c, 0x0, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r5, 0x8949, &(0x7f0000001440)={'vlan0\x00', @ifru_settings={0x8000, 0xffffffff, @cisco=0x0}}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in=@empty, @in=@multicast2, 0x4e22, 0x0, 0x0, 0x8, 0x2, 0x0, 0x80, 0x3b}, {0xfffffffffffffffd, 0x1, 0x9, 0x0, 0xd, 0x80000000, 0x0, 0x7fffffdfffffffff}, {0x3, 0x200000000000000, 0xffffffffffffffff, 0x20000000000000}, 0x0, 0xfffffffd}, {{@in=@remote, 0x4d4, 0x6c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0xb}, 0x3500, 0x4, 0x0, 0x0, 0x0, 0x2, 0x200000}}, 0xe8) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18, 0xe000}, 0x5}], 0x1, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000980)="dc", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) shutdown(r7, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r7, 0x84, 0x79, &(0x7f0000000040)={0x0, 0x8, 0x2}, 0x8) recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) 2.539756509s ago: executing program 4 (id=1323): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1, 0x26c, &(0x7f0000000840)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) mknodat(r4, &(0x7f0000000100)='./file0/file0\x00', 0x8910, 0x4) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) r5 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r5, 0x8949, &(0x7f0000001440)={'vlan0\x00', @ifru_settings={0x8000, 0xffffffff, @cisco=0x0}}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in=@empty, @in=@multicast2, 0x4e22, 0x0, 0x0, 0x8, 0x2, 0x0, 0x80, 0x3b}, {0xfffffffffffffffd, 0x1, 0x9, 0x0, 0xd, 0x80000000, 0x0, 0x7fffffdfffffffff}, {0x3, 0x200000000000000, 0xffffffffffffffff, 0x20000000000000}, 0x0, 0xfffffffd}, {{@in=@remote, 0x4d4, 0x6c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0xb}, 0x3500, 0x4, 0x0, 0x0, 0x0, 0x2, 0x200000}}, 0xe8) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000010010000"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f0000007900)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x3d66, @local, 0x5}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000980)="dc", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) shutdown(r7, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r7, 0x84, 0x79, &(0x7f0000000040)={0x0, 0x8, 0x2}, 0x8) recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) 2.382867964s ago: executing program 2 (id=1324): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) syz_emit_vhci(0x0, 0xf) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000003c0), 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='net/ip6_tables_matches\x00') preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0x9d, 0x0) 1.835339288s ago: executing program 3 (id=1325): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1, 0x26c, &(0x7f0000000840)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) mknodat(r4, &(0x7f0000000100)='./file0/file0\x00', 0x8910, 0x4) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) r5 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r5, 0x8949, &(0x7f0000001440)={'vlan0\x00', @ifru_settings={0x8000, 0xffffffff, @cisco=0x0}}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f0000007900)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x3d66, @local, 0x5}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000980)="dc", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) shutdown(r7, 0x1) recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) 940.593044ms ago: executing program 2 (id=1326): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) 888.110845ms ago: executing program 0 (id=1327): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, 0x0, 0x0) connect(r0, &(0x7f0000000240)=@generic={0x28, "d1823ad468faa51929e49c75ce0a5dc878c8b8bf2b79ba96e8ec1095615be8c1b38856f4b96c78ea91178cea3d5d9c8deea46f716a70e105630aab94478a6ce5d5a68e63540144d0a50214e936a5b8fb23d48f56c98c1c30d0110e5bd1258a702a62930e1b0c54bbe53a2b4ff42efe5eb9c0b2880f5db30233524f87a1de"}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x59, 0x4) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40088c0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200001004000b"], 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 871.585706ms ago: executing program 2 (id=1328): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r1], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x20) 834.397067ms ago: executing program 0 (id=1329): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x6, 0x0, &(0x7f0000000040)="630b008646dc", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x4c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000300012800b00010065727370616e00002000028004001200050016000200000006001800"], 0x50}}, 0x4080) 770.919619ms ago: executing program 2 (id=1330): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@rand_addr=0x64010100, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xa0}, {@in=@multicast1, 0x0, 0x33}, @in6=@local, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="04210000100007000000000000000000ff02000000000000000000000000000164010100000000000000000000000000ffff0000000000000000002002000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000002b000000fc0000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a0002407000000014000e00fc0100"/181], 0x104}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001c"], 0x104}}, 0x0) 741.768809ms ago: executing program 2 (id=1331): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x4b) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 340.320021ms ago: executing program 4 (id=1332): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001c40)) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) preadv2(r3, &(0x7f0000003500)=[{0x0, 0x4800}, {&(0x7f0000000580)=""/72, 0x48}], 0x2, 0x0, 0x7e, 0x10) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x18, r2, 0x4c1dad3e3d6a7499, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x22a7, 0x20001) pselect6(0x40, &(0x7f0000000280)={0x5, 0x5, 0x7, 0x6, 0xbd, 0x8000000000000000, 0x56, 0x1}, &(0x7f0000000300)={0xc, 0x3, 0x2, 0x1, 0x9, 0x80000001, 0x1, 0xd}, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xac, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x84, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x4c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x1c, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "52f14aa7d20600000020c78f44e3a3f401"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x120}, 0x1, 0x0, 0x0, 0x200c0}, 0x40) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000180), 0x800000000000006, 0x128202) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001ac0)={r5, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0xe, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f54016d1a85a056f5d759ded130e04d528539f3d328973747a75d1f3d000017deb7d6193b3e7772fd29f35239d200000000008000", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x6]}}) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r7, 0x0) madvise(&(0x7f0000049000/0x3000)=nil, 0x3011, 0x16) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f000000a900)={0x0, 0x0, &(0x7f000000a8c0)={&(0x7f0000000140)={0x2c, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @private=0xa010101}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x80) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x5}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004000}, 0x2000) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_open_dev$char_usb(0xc, 0xb4, 0x6) 325.031361ms ago: executing program 3 (id=1333): bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000080)='./mnt\x00', 0x0, 0x18}, 0x18) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x1, 0x8001, 0x0, 0xb49, 0x200000000002, 0x9, 0x8, 0x5}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@map_fd={0x18, 0x0, 0x2}, @ldst={0x1, 0x3, 0x3, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x4000000, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0x9c}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) socket$kcm(0x10, 0x2, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) recvmmsg(r4, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40010000, 0x0) socket$inet(0x2, 0x2, 0x0) pipe(&(0x7f0000000080)) 62.929009ms ago: executing program 5 (id=1334): r0 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0) fsetxattr(r0, &(0x7f0000000000)=@random={'user.', '(@^%\x00'}, 0x0, 0x0, 0x1) 62.595009ms ago: executing program 0 (id=1335): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r4, &(0x7f0000002100)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@dstaddrv4={0x10, 0x84, 0x7, @empty}, @sndrcv={0x2c, 0x84, 0x1, {0x3, 0x200, 0x18205, 0x4, 0x9dc0, 0x2300, 0x9, 0x2}}], 0x3c, 0xc000}], 0x1, 0x80) r5 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x8086e1, 0x0, 0x1, 0xfffffffd}, &(0x7f0000000500), &(0x7f0000000140), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x400, 0x1) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'erspan0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x2, 0x40, 0x40, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x1, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xe}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}]}, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x40530, 0x5a1b5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004804}, 0x40000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@ipv6_delrule={0x38, 0x21, 0x1, 0x70bd2b, 0x25dfdbfc, {0xa, 0x20, 0x14, 0x1, 0x76, 0x0, 0x0, 0x8, 0x3}, [@FRA_SRC={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_GOTO={0x8}]}, 0x38}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x2000c0c2) 0s ago: executing program 5 (id=1336): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e00000004000000040000000a"], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4000000000000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, 0x0, 0x0) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$6lowpan_control(r6, &(0x7f0000000240)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r7, 0x0, 0xcc, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast2, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af2144a011a00", 0x0, 0x1, 0x0, 0x8000}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r7, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000340)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x80000001, 0x2, 0x614, 0x1, 0xb5, 0x8, 0x4}, 0x9c) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newchain={0x24, 0x64, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xfff1, 0xf}, {0x8, 0xc}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044801}, 0x20040000) kernel console output (not intermixed with test programs): 318.285936][ T6777] netlink: 20 bytes leftover after parsing attributes in process `syz.4.716'. [ 318.752074][ T6091] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 318.975626][ T6805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.724'. [ 319.161423][ T6091] usb 5-1: unable to get BOS descriptor or descriptor too short [ 319.280909][ T6091] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 319.291921][ T6091] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 319.461312][ T6091] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 319.470500][ T6091] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.479652][ T6091] usb 5-1: Product: syz [ 319.480831][ T4235] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 319.485363][ T4234] usb 1-1: USB disconnect, device number 3 [ 319.503574][ T6091] usb 5-1: Manufacturer: syz [ 319.508845][ T6091] usb 5-1: SerialNumber: syz [ 319.563781][ T6091] usb 5-1: selecting invalid altsetting 1 [ 319.570344][ T6091] usb 5-1: unit 6 not found! [ 319.596728][ T6091] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 319.657275][ T4182] udevd[4182]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 319.688012][ T6829] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 319.694695][ T6829] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 319.703371][ T6829] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 319.709734][ T6829] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 319.716433][ T6829] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 319.722823][ T6829] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 319.730141][ T6829] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 319.760866][ T4235] usb 2-1: Using ep0 maxpacket: 8 [ 319.920897][ T4235] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 319.932194][ T4235] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 319.942424][ T4235] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 319.952512][ T4235] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 319.965824][ T4235] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 319.975993][ T4235] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.230886][ T4235] usb 2-1: GET_CAPABILITIES returned 0 [ 320.236410][ T4235] usbtmc 2-1:16.0: can't read capabilities [ 320.532973][ T4235] usb 5-1: USB disconnect, device number 11 [ 320.570669][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 320.580271][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 320.589530][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 320.598892][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 320.608151][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 320.617400][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 320.626649][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 320.635891][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 320.645118][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 320.654335][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 320.663549][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 320.672767][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 320.681987][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 320.691207][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 320.700432][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 320.709650][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 320.746545][ T21] usb 2-1: USB disconnect, device number 9 [ 321.020718][ T4235] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 321.440740][ T4235] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 321.452783][ T4235] usb 5-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 321.463523][ T4235] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 321.473007][ T4235] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 321.600671][ T4235] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 321.610297][ T4235] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 321.623472][ T4235] usb 5-1: Product: syz [ 321.627650][ T4235] usb 5-1: Manufacturer: syz [ 321.632544][ T21] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 321.692659][ T4235] cdc_wdm 5-1:1.0: skipping garbage [ 321.700113][ T4235] cdc_wdm 5-1:1.0: skipping garbage [ 321.708749][ T4235] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 321.800599][ T6091] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 321.896952][ T4721] usb 5-1: USB disconnect, device number 12 [ 322.020811][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 322.046273][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 322.050522][ T6091] usb 2-1: Using ep0 maxpacket: 8 [ 322.069766][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 322.200621][ T6091] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 322.213881][ T6091] usb 2-1: config 179 has no interface number 0 [ 322.237141][ T6091] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 322.253280][ T21] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 322.265793][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.281206][ T21] usb 3-1: Product: syz [ 322.288743][ T21] usb 3-1: Manufacturer: syz [ 322.300070][ T21] usb 3-1: SerialNumber: syz [ 322.309776][ T21] usb 3-1: config 0 descriptor?? [ 322.326395][ T6091] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 322.337962][ T6091] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 322.349443][ T6091] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 322.361423][ T6091] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 322.374996][ T6091] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 322.384330][ T6091] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.420747][ T6874] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 322.585921][ T21] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 322.709400][ T6091] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input7 [ 322.837924][ T21] usb 3-1: USB disconnect, device number 6 [ 322.893874][ T6874] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 322.913875][ T6874] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 322.943529][ T6874] net_ratelimit: 1993 callbacks suppressed [ 322.943537][ T6874] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 323.104688][ T4234] usb 2-1: USB disconnect, device number 10 [ 323.130422][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 323.141100][ T4231] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 323.151187][ T4234] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 323.523461][ T4231] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 323.542956][ T4231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.577585][ T4231] usb 5-1: config 0 descriptor?? [ 323.644430][ T4231] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 324.033613][ T25] audit: type=1326 audit(1781414031.519:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.3.776" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e4acfe59 code=0x7ffc0000 [ 324.040336][ T21] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 324.058168][ T25] audit: type=1326 audit(1781414031.519:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.3.776" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e4acfe59 code=0x7ffc0000 [ 324.098181][ T4231] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 324.107677][ T25] audit: type=1326 audit(1781414031.519:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.3.776" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e4acfe59 code=0x7ffc0000 [ 324.139163][ T25] audit: type=1326 audit(1781414031.519:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.3.776" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb7e4acfe59 code=0x7ffc0000 [ 324.163785][ T25] audit: type=1326 audit(1781414031.519:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.3.776" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e4acfe59 code=0x7ffc0000 [ 324.188244][ T25] audit: type=1326 audit(1781414031.519:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.3.776" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e4acfe59 code=0x7ffc0000 [ 324.219687][ T25] audit: type=1326 audit(1781414031.519:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.3.776" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e4acfe59 code=0x7ffc0000 [ 324.252498][ T25] audit: type=1326 audit(1781414031.519:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.3.776" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb7e4acfe59 code=0x7ffc0000 [ 324.277154][ T25] audit: type=1326 audit(1781414031.519:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.3.776" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e4acfe59 code=0x7ffc0000 [ 324.330229][ T25] audit: type=1326 audit(1781414031.519:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.3.776" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb7e4acfe59 code=0x7ffc0000 [ 324.354228][ T21] usb 2-1: Using ep0 maxpacket: 8 [ 324.477565][ T21] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 324.520351][ T21] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 324.529496][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.540445][ T21] usb 2-1: config 0 descriptor?? [ 324.644652][ T4231] gspca_cpia1: usb_control_msg 01, error -71 [ 324.651716][ T4231] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 324.667935][ T4231] usb 5-1: USB disconnect, device number 13 [ 324.704399][ T4230] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 324.990243][ T4230] usb 1-1: Using ep0 maxpacket: 16 [ 325.110427][ T4230] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.140299][ T6940] input: syz0 as /devices/virtual/input/input8 [ 325.142339][ T6981] syz.1.775 (6981): drop_caches: 0 [ 325.153833][ T4230] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.193756][ T4230] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 325.237713][ T4230] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 325.258429][ T4230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.281892][ T4230] usb 1-1: config 0 descriptor?? [ 325.426222][ T6983] device vlan2 entered promiscuous mode [ 325.463251][ T6987] netlink: 52 bytes leftover after parsing attributes in process `syz.4.792'. [ 325.547076][ T6987] netlink: 68 bytes leftover after parsing attributes in process `syz.4.792'. [ 325.750723][ T6996] program syz.4.794 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 325.871765][ T4231] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 325.884050][ T4230] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 325.917359][ T4230] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 325.928451][ T4230] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 325.939067][ T4230] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 325.946722][ T4230] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 325.958235][ T4230] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 325.981454][ T4230] microsoft 0003:045E:07DA.0001: No inputs registered, leaving [ 326.003217][ T4230] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 326.030593][ T4230] microsoft 0003:045E:07DA.0001: no inputs found [ 326.039091][ T4230] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 326.150058][ T4231] usb 3-1: Using ep0 maxpacket: 32 [ 326.230041][ T21] usbhid 2-1:0.0: can't add hid device: -71 [ 326.236136][ T21] usbhid: probe of 2-1:0.0 failed with error -71 [ 326.270178][ T4231] usb 3-1: config 12 has an invalid interface number: 58 but max is 0 [ 326.301948][ T4231] usb 3-1: config 12 has no interface number 0 [ 326.323830][ T21] usb 2-1: USB disconnect, device number 11 [ 326.365103][ T4231] usb 3-1: config 12 interface 58 has no altsetting 0 [ 326.560212][ T4231] usb 3-1: New USB device found, idVendor=05da, idProduct=00b6, bcdDevice=1b.d3 [ 326.577622][ T4231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.588041][ T4231] usb 3-1: Product: syz [ 326.599434][ T4231] usb 3-1: Manufacturer: syz [ 326.599695][ T6219] usb 1-1: USB disconnect, device number 4 [ 326.604559][ T4231] usb 3-1: SerialNumber: syz [ 326.792212][ T4230] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 326.960723][ T4231] microtek usb (rev 0.4.3): expecting 3 got 0 endpoints! Bailing out. [ 326.973867][ T4231] usb 3-1: USB disconnect, device number 7 [ 327.040002][ T4230] usb 4-1: Using ep0 maxpacket: 16 [ 327.160149][ T4230] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 327.179960][ T4230] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 327.211640][ T21] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 327.259978][ T4230] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 327.269973][ T4230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 327.290606][ T4230] usb 4-1: SerialNumber: syz [ 327.371438][ T4230] usb 4-1: 0:2 : does not exist [ 327.481827][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 327.720097][ T6219] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 327.829997][ T21] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 327.844074][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.862826][ T21] usb 5-1: Product: syz [ 327.872216][ T21] usb 5-1: Manufacturer: syz [ 327.882879][ T21] usb 5-1: SerialNumber: syz [ 327.895592][ T21] usb 5-1: config 0 descriptor?? [ 327.912739][ T7069] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[7070] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7069] [ 327.961772][ T21] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 327.973287][ T21] dvb-usb: bulk message failed: -22 (2/0) [ 327.986786][ T21] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 327.996145][ T6219] usb 3-1: Using ep0 maxpacket: 32 [ 328.020151][ T21] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 328.029648][ T21] usb 5-1: media controller created [ 328.054330][ T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 328.081884][ T21] usb 5-1: selecting invalid altsetting 7 [ 328.090586][ T21] cxusb: set interface failed [ 328.097953][ T21] dvb-usb: bulk message failed: -22 (1/0) [ 328.140131][ T6219] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1064, setting to 1024 [ 328.157969][ T21] DVB: Unable to find symbol lgdt330x_attach() [ 328.166824][ T7044] dvb-usb: bulk message failed: -22 (3/0) [ 328.173516][ T21] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 328.349768][ T21] rc_core: IR keymap rc-dvico-portable not found [ 328.356298][ T6219] usb 3-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 328.366720][ T21] Registered IR keymap rc-empty [ 328.376601][ T6219] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.397878][ T21] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 328.418885][ T6219] usb 3-1: Product: syz [ 328.434999][ T6219] usb 3-1: Manufacturer: syz [ 328.456584][ T21] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input10 [ 328.482084][ T6219] usb 3-1: SerialNumber: syz [ 328.528898][ T21] dvb-usb: schedule remote query interval to 100 msecs. [ 328.574152][ T21] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 328.694929][ T21] dvb-usb: bulk message failed: -22 (1/0) [ 328.784267][ T6219] snd-ua101 3-1:1.1: sample format descriptor not found [ 328.816266][ T6219] snd-ua101 3-1:1.0: invalid num_altsetting [ 328.880632][ T6219] usb 3-1: USB disconnect, device number 8 [ 328.917033][ T21] dvb-usb: bulk message failed: -22 (1/0) [ 329.051613][ T21] dvb-usb: bulk message failed: -22 (1/0) [ 329.180774][ T4235] dvb-usb: bulk message failed: -22 (1/0) [ 329.319599][ T6219] dvb-usb: bulk message failed: -22 (1/0) [ 329.405555][ T7098] program syz.3.819 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 329.447838][ T6219] dvb-usb: bulk message failed: -22 (1/0) [ 329.559739][ T4235] dvb-usb: bulk message failed: -22 (1/0) [ 329.560055][ T4230] usb 4-1: 5:0: cannot get min/max values for control 4 (id 5) [ 329.669694][ T4235] dvb-usb: bulk message failed: -22 (1/0) [ 329.799588][ T4235] dvb-usb: bulk message failed: -22 (1/0) [ 329.839744][ T4230] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 329.919539][ T4235] dvb-usb: bulk message failed: -22 (1/0) [ 329.973529][ T4235] usb 5-1: USB disconnect, device number 14 [ 330.001887][ T4231] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 330.054470][ T4235] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 330.101744][ T4230] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 330.139049][ T7130] loop6: detected capacity change from 0 to 8 [ 330.171669][ T7128] cifs: Unknown parameter 'd/)fd' [ 330.349923][ T4230] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 330.369625][ T4231] usb 3-1: config 0 has no interfaces? [ 330.389029][ T4230] usb 4-1: USB disconnect, device number 9 [ 330.491457][ T4231] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 330.511252][ T4231] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 330.524520][ T4231] usb 3-1: Manufacturer: syz [ 330.529128][ T4231] usb 3-1: SerialNumber: syz [ 330.544389][ T4231] usb 3-1: config 0 descriptor?? [ 330.579476][ T4235] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 330.624730][ T7137] device syzkaller0 entered promiscuous mode [ 330.759637][ T4230] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 330.869479][ T4235] usb 5-1: device descriptor read/64, error -71 [ 331.149489][ T4235] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 331.169602][ T4230] usb 4-1: unable to get BOS descriptor or descriptor too short [ 331.259653][ T4230] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 331.278802][ T4230] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 331.349414][ T4235] usb 5-1: device descriptor read/64, error -71 [ 331.449521][ T4230] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 331.468671][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.469528][ T4235] usb usb5-port1: attempt power cycle [ 331.511673][ T4230] usb 4-1: Product: syz [ 331.537968][ T4230] usb 4-1: Manufacturer: syz [ 331.555572][ T4230] usb 4-1: SerialNumber: syz [ 331.630854][ T4230] usb 4-1: selecting invalid altsetting 1 [ 331.663850][ T4230] usb 4-1: unit 6 not found! [ 331.911069][ T4235] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 332.019384][ T4235] usb 5-1: device descriptor read/8, error -71 [ 332.319343][ T4235] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 332.363639][ T7103] udc-core: couldn't find an available UDC or it's busy [ 332.378360][ T7103] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 332.429323][ T4235] usb 5-1: device descriptor read/8, error -71 [ 332.549391][ T4235] usb usb5-port1: unable to enumerate USB device [ 332.658608][ T4230] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 332.663457][ T7175] netlink: 28 bytes leftover after parsing attributes in process `syz.0.848'. [ 332.692827][ T4182] udevd[4182]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 332.731973][ T7175] netlink: 'syz.0.848': attribute type 7 has an invalid length. [ 332.743278][ T6091] usb 3-1: USB disconnect, device number 9 [ 332.785173][ T7175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.848'. [ 332.857296][ T4182] udevd[4182]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 332.878819][ T7175] device dummy0 entered promiscuous mode [ 332.891987][ T7175] device team0 entered promiscuous mode [ 332.906248][ T7175] device team_slave_0 entered promiscuous mode [ 332.924495][ T7175] device team_slave_1 entered promiscuous mode [ 332.930862][ T4235] Bluetooth: hci1: command 0x2016 tx timeout [ 332.966299][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 333.323769][ T7188] tap0: tun_chr_ioctl cmd 1074025677 [ 333.341575][ T7188] tap0: linktype set to 768 [ 333.357483][ T7188] netlink: 16 bytes leftover after parsing attributes in process `syz.4.851'. [ 333.672475][ T7202] device syzkaller0 entered promiscuous mode [ 333.683093][ T25] kauditd_printk_skb: 1 callbacks suppressed [ 333.683105][ T25] audit: type=1326 audit(1781414041.171:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7200 comm="syz.0.856" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4c3a8f5e59 code=0x0 [ 333.908871][ T7208] device syzkaller0 entered promiscuous mode [ 333.915995][ T6091] usb 4-1: USB disconnect, device number 10 [ 334.088323][ T25] audit: type=1326 audit(1781414041.571:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.2.864" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982fe81e59 code=0x7ffc0000 [ 334.188743][ T25] audit: type=1326 audit(1781414041.611:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.2.864" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f982fe81e59 code=0x7ffc0000 [ 334.230358][ T25] audit: type=1326 audit(1781414041.611:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.2.864" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982fe81e59 code=0x7ffc0000 [ 334.586007][ T7236] sg_write: data in/out 394207/770 bytes for SCSI command 0x0-- guessing data in; [ 334.586007][ T7236] program syz.0.870 not setting count and/or reply_len properly [ 334.652909][ T7238] netlink: 12 bytes leftover after parsing attributes in process `syz.0.871'. [ 334.949009][ T4231] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 335.162551][ T7242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.872'. [ 335.189518][ T4231] usb 1-1: Using ep0 maxpacket: 8 [ 335.351891][ T4231] usb 1-1: unable to get BOS descriptor or descriptor too short [ 335.439005][ T4231] usb 1-1: config index 0 descriptor too short (expected 8255, got 63) [ 335.467709][ T4231] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.481416][ T4231] usb 1-1: config 0 has no interfaces? [ 335.492069][ T7255] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 335.679535][ T4231] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 335.688714][ T4231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.697483][ T7256] netlink: 20 bytes leftover after parsing attributes in process `syz.1.877'. [ 335.707234][ T4231] usb 1-1: Product: syz [ 335.707299][ T7256] netlink: 16 bytes leftover after parsing attributes in process `syz.1.877'. [ 335.711460][ T4231] usb 1-1: Manufacturer: syz [ 335.711478][ T4231] usb 1-1: SerialNumber: syz [ 335.720330][ T4231] usb 1-1: config 0 descriptor?? [ 335.735427][ T7256] netlink: 16 bytes leftover after parsing attributes in process `syz.1.877'. [ 335.809047][ T6091] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 336.031047][ T4231] usb 1-1: USB disconnect, device number 5 [ 336.048860][ T6091] usb 5-1: Using ep0 maxpacket: 32 [ 336.208883][ T6091] usb 5-1: unable to get BOS descriptor or descriptor too short [ 336.288905][ T6091] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 336.297166][ T6091] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 336.305923][ T6091] usb 5-1: config 14 has no interface number 0 [ 336.312240][ T6091] usb 5-1: config 14 has no interface number 1 [ 336.318464][ T6091] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 336.329451][ T6091] usb 5-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 336.356207][ T6091] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 336.368154][ T6091] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 336.386183][ T7269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.882'. [ 336.394766][ T6091] usb 5-1: config 14 interface 57 has no altsetting 0 [ 336.402440][ T6091] usb 5-1: config 14 interface 228 has no altsetting 0 [ 336.568908][ T6091] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 336.578355][ T6091] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.586482][ T6091] usb 5-1: Product: syz [ 336.590675][ T6091] usb 5-1: Manufacturer: syz [ 336.595438][ T6091] usb 5-1: SerialNumber: syz [ 336.838723][ T4235] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 336.930859][ T4231] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 336.938560][ T6091] legousbtower 5-1:14.57: interrupt endpoints not found [ 336.980297][ T6091] legousbtower 5-1:14.228: interrupt endpoints not found [ 336.990706][ T6091] usb 5-1: USB disconnect, device number 19 [ 337.168683][ T4231] usb 3-1: Using ep0 maxpacket: 8 [ 337.258806][ T4235] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 337.269895][ T4235] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 337.284145][ T4235] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 337.303599][ T4235] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.329039][ T7276] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 337.448815][ T4231] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 337.480921][ T4231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.496451][ T7284] device syzkaller0 entered promiscuous mode [ 337.503750][ T4231] usb 3-1: Product: syz [ 337.507987][ T4231] usb 3-1: Manufacturer: syz [ 337.514100][ T4231] usb 3-1: SerialNumber: syz [ 337.534824][ T4231] usb 3-1: config 0 descriptor?? [ 337.579849][ T4231] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 337.589934][ T4231] dvb-usb: bulk message failed: -22 (2/0) [ 337.613337][ T4231] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 337.659854][ T4231] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 337.680958][ T4231] usb 3-1: media controller created [ 337.707812][ T4231] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 337.779973][ T7278] dvb-usb: bulk message failed: -22 (3/0) [ 337.788693][ T4231] cxusb: set interface failed [ 337.796147][ T4231] dvb-usb: bulk message failed: -22 (1/0) [ 337.837594][ T4231] DVB: Unable to find symbol mt352_attach() [ 337.843635][ T4231] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 337.968698][ T4231] rc_core: IR keymap rc-dvico-portable not found [ 337.977888][ T4231] Registered IR keymap rc-empty [ 337.988730][ T4231] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 338.009525][ T4234] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 338.020119][ T4231] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input11 [ 338.045286][ T4231] dvb-usb: schedule remote query interval to 100 msecs. [ 338.057496][ T4231] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 338.090653][ T4231] usb 3-1: USB disconnect, device number 10 [ 338.131034][ T4231] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 338.268695][ T4234] usb 5-1: Using ep0 maxpacket: 32 [ 338.388631][ T4234] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 338.397157][ T4234] usb 5-1: config 0 has no interface number 0 [ 338.403642][ T4234] usb 5-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 338.414271][ T4234] usb 5-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 338.425164][ T4234] usb 5-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 338.588593][ T4234] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 338.597706][ T4234] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.606115][ T4234] usb 5-1: Product: syz [ 338.610403][ T4234] usb 5-1: Manufacturer: syz [ 338.615000][ T4234] usb 5-1: SerialNumber: syz [ 338.623319][ T4234] usb 5-1: config 0 descriptor?? [ 338.662160][ T4234] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.119/input/input12 [ 338.728588][ T4231] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 338.862035][ T4235] usb 5-1: USB disconnect, device number 20 [ 338.991917][ T4721] usb 1-1: USB disconnect, device number 6 [ 339.093713][ T4231] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 339.117352][ T4231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.145708][ T4231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.173860][ T4231] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 339.274170][ T7302] tipc: Started in network mode [ 339.279499][ T4231] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 339.280145][ T7302] tipc: Node identity 7f000001, cluster identity 4711 [ 339.295897][ T7302] tipc: Enabling of bearer rejected, failed to enable media [ 339.309922][ T4231] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 339.313859][ T7302] device bridge1 entered promiscuous mode [ 339.318132][ T4231] usb 3-1: Manufacturer: syz [ 339.346424][ T4231] usb 3-1: config 0 descriptor?? [ 339.477101][ T7304] netlink: 'syz.4.895': attribute type 39 has an invalid length. [ 339.750937][ T7309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.897'. [ 339.778388][ T7309] bond0: option arp_all_targets: invalid value (1048578) [ 339.830252][ T4231] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 339.852025][ T4231] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 339.928328][ T4721] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 340.002904][ T4231] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 340.080434][ T7316] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 340.358446][ T4721] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.374942][ T4721] usb 1-1: config 0 has no interfaces? [ 340.398506][ T4231] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 340.468476][ T4721] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.478971][ T4721] usb 1-1: config 0 has no interfaces? [ 340.498188][ T7327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.569632][ T4721] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.584385][ T4721] usb 1-1: config 0 has no interfaces? [ 340.594637][ T4721] usb 1-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 340.598309][ T4231] usb 5-1: device descriptor read/64, error -71 [ 340.619087][ T4721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.637535][ T4721] usb 1-1: config 0 descriptor?? [ 340.668645][ T6219] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 340.878249][ T4231] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 341.068210][ T4231] usb 5-1: device descriptor read/64, error -71 [ 341.076197][ T6219] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 341.116549][ T7348] netlink: 12 bytes leftover after parsing attributes in process `syz.1.906'. [ 341.198275][ T4231] usb usb5-port1: attempt power cycle [ 341.288358][ T6219] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 341.305126][ T6219] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.316367][ T6219] usb 4-1: Product: syz [ 341.334664][ T6219] usb 4-1: Manufacturer: syz [ 341.339531][ T6219] usb 4-1: SerialNumber: syz [ 341.400950][ T6219] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 341.526445][ T7357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.909'. [ 341.535498][ T7357] bond0: option arp_validate: invalid value (1048578) [ 341.567794][ T7359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.910'. [ 341.577142][ T7359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.910'. [ 341.586130][ T7359] netlink: 'syz.1.910': attribute type 13 has an invalid length. [ 341.593957][ T7359] netlink: 'syz.1.910': attribute type 11 has an invalid length. [ 341.608140][ T4231] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 341.718402][ T4231] usb 5-1: device descriptor read/8, error -71 [ 341.870262][ T6219] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 341.880789][ T6219] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 341.890054][ T6219] usb 4-1: media controller created [ 341.901538][ T6219] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 341.914158][ T4234] usb 3-1: USB disconnect, device number 11 [ 341.958200][ T4230] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 341.988153][ T4231] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 342.078151][ T4231] usb 5-1: device descriptor read/8, error -71 [ 342.198072][ T4230] usb 2-1: Using ep0 maxpacket: 16 [ 342.204215][ T4231] usb usb5-port1: unable to enumerate USB device [ 342.318183][ T4230] usb 2-1: config 0 has no interfaces? [ 342.478893][ T4230] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 342.492619][ T4230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.505434][ T4230] usb 2-1: Product: syz [ 342.509870][ T4230] usb 2-1: Manufacturer: syz [ 342.518247][ T4230] usb 2-1: SerialNumber: syz [ 342.525111][ T4230] usb 2-1: config 0 descriptor?? [ 342.759742][ T4230] usb 1-1: USB disconnect, device number 7 [ 343.540402][ T4178] usb 4-1: USB disconnect, device number 11 [ 343.664043][ T7391] netlink: 'syz.3.923': attribute type 12 has an invalid length. [ 343.676754][ T7391] netlink: 'syz.3.923': attribute type 29 has an invalid length. [ 343.773183][ T7391] netlink: 148 bytes leftover after parsing attributes in process `syz.3.923'. [ 343.798257][ T4235] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 343.811499][ T7394] fuse: Bad value for 'fd' [ 343.832630][ T7391] netlink: 59 bytes leftover after parsing attributes in process `syz.3.923'. [ 343.889191][ T7396] device ip6tnl1 entered promiscuous mode [ 343.943131][ T6219] usb 2-1: USB disconnect, device number 12 [ 344.187948][ T4235] usb 3-1: config 2 has an invalid interface number: 79 but max is 0 [ 344.199781][ T4235] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 344.204956][ T7414] device bridge2 entered promiscuous mode [ 344.210359][ T4235] usb 3-1: config 2 has no interface number 0 [ 344.222619][ T4235] usb 3-1: config 2 interface 79 altsetting 13 endpoint 0x1 has invalid wMaxPacketSize 0 [ 344.247389][ T4235] usb 3-1: config 2 interface 79 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 344.269742][ T7414] team0: Port device bridge2 added [ 344.289305][ T4235] usb 3-1: config 2 interface 79 has no altsetting 0 [ 344.508053][ T4235] usb 3-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb [ 344.537512][ T4235] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.547637][ T4235] usb 3-1: Product: syz [ 344.557606][ T4235] usb 3-1: Manufacturer: syz [ 344.574263][ T4235] usb 3-1: SerialNumber: syz [ 344.616427][ T7433] device syzkaller0 entered promiscuous mode [ 344.757908][ T6219] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 344.858990][ T7386] netlink: 100 bytes leftover after parsing attributes in process `syz.2.922'. [ 345.060705][ T7463] netlink: 164 bytes leftover after parsing attributes in process `syz.4.949'. [ 345.157875][ T6219] usb 4-1: config 0 has no interfaces? [ 345.248345][ T6219] usb 4-1: config 0 has no interfaces? [ 345.368188][ T6219] usb 4-1: config 0 has no interfaces? [ 345.373987][ T6219] usb 4-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 345.390412][ T6219] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.403324][ T6219] usb 4-1: config 0 descriptor?? [ 345.437707][ T4230] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 345.464256][ T7494] tipc: Started in network mode [ 345.477770][ T7494] tipc: Node identity 7f, cluster identity 4711 [ 345.484147][ T7494] tipc: Node number set to 127 [ 345.490116][ T7494] tipc: Cannot configure node identity twice [ 345.680355][ T6219] usb 4-1: USB disconnect, device number 12 [ 345.803930][ T7512] netlink: 'syz.4.973': attribute type 10 has an invalid length. [ 345.818017][ T4230] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 345.831453][ T7512] team0: Port device netdevsim0 added [ 345.837351][ T4230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.848500][ T4230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.859469][ T4230] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 345.880893][ T4230] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 345.911165][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.944971][ T7514] tipc: Started in network mode [ 345.950774][ T4230] usb 2-1: config 0 descriptor?? [ 345.964269][ T7514] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 345.974206][ T7514] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 345.984244][ T7514] tipc: Enabled bearer , priority 10 [ 346.076542][ T7522] netlink: 12 bytes leftover after parsing attributes in process `syz.0.978'. [ 346.387782][ T13] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 346.469363][ T4230] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 346.476855][ T4230] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 346.484299][ T4230] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 346.492238][ T4230] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 346.499706][ T4230] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 346.507242][ T4230] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 346.515297][ T4230] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 346.522921][ T4230] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 346.530397][ T4230] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 346.538013][ T4230] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 346.546597][ T4230] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 346.554260][ T4230] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 346.566788][ T4230] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 346.574518][ T4230] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 346.580186][ T6219] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 346.589403][ T4230] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 346.598599][ T4230] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 346.608309][ T4235] esd_usb2 3-1:2.79: sending version message failed [ 346.621710][ T4235] esd_usb2: probe of 3-1:2.79 failed with error -22 [ 346.624328][ T4230] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 346.634231][ T4235] usb 3-1: USB disconnect, device number 12 [ 346.677818][ T7533] netlink: 16146 bytes leftover after parsing attributes in process `syz.2.982'. [ 346.757721][ T13] usb 5-1: config 128 has an invalid interface number: 148 but max is 0 [ 346.761350][ T4178] usb 2-1: USB disconnect, device number 13 [ 346.766086][ T13] usb 5-1: config 128 has no interface number 0 [ 346.766127][ T13] usb 5-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 346.813728][ T13] usb 5-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 346.830675][ T13] usb 5-1: config 128 interface 148 has no altsetting 0 [ 346.997750][ T13] usb 5-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 347.011461][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.023221][ T13] usb 5-1: Product: syz [ 347.032163][ T13] usb 5-1: Manufacturer: syz [ 347.038796][ T13] usb 5-1: SerialNumber: syz [ 347.069408][ T4230] tipc: Node number set to 1 [ 347.180486][ T6219] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 347.192025][ T6219] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.202612][ T6219] usb 4-1: Product: syz [ 347.207450][ T6219] usb 4-1: Manufacturer: syz [ 347.208504][ T4234] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 347.212258][ T6219] usb 4-1: SerialNumber: syz [ 347.234015][ T6219] usb 4-1: config 0 descriptor?? [ 347.299324][ T6219] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 347.326684][ T13] usb 5-1: USB disconnect, device number 25 [ 347.578224][ T4234] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.592323][ T7556] capability: warning: `syz.1.991' uses 32-bit capabilities (legacy support in use) [ 347.601857][ T4234] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.622165][ T4234] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 347.635373][ T4234] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 347.657476][ T4234] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.678208][ T4234] usb 1-1: config 0 descriptor?? [ 347.852393][ T13] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 347.887765][ T4178] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 348.097378][ T13] usb 5-1: Using ep0 maxpacket: 8 [ 348.147359][ T4178] usb 2-1: Using ep0 maxpacket: 8 [ 348.177521][ T6219] gspca_sunplus: reg_w_riv err -71 [ 348.182785][ T6219] sunplus: probe of 4-1:0.0 failed with error -71 [ 348.191868][ T6219] usb 4-1: USB disconnect, device number 13 [ 348.217520][ T13] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 348.227085][ T13] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 348.237651][ T4234] usbhid 1-1:0.0: can't add hid device: -71 [ 348.246387][ T4234] usbhid: probe of 1-1:0.0 failed with error -71 [ 348.253959][ T13] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 348.268021][ T4234] usb 1-1: USB disconnect, device number 8 [ 348.275311][ T13] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 348.287603][ T4178] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 348.290059][ T13] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 348.311667][ T13] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 348.316170][ T4178] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 348.320838][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.333570][ T4178] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 348.348929][ T4178] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 348.365069][ T4178] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 348.378671][ T4178] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 348.387767][ T4178] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.607346][ T13] usb 5-1: GET_CAPABILITIES returned 0 [ 348.612964][ T13] usbtmc 5-1:16.0: can't read capabilities [ 348.647351][ T4178] usb 2-1: usb_control_msg returned -32 [ 348.652991][ T4178] usbtmc 2-1:16.0: can't read capabilities [ 348.749117][ T7572] device syzkaller0 entered promiscuous mode [ 348.833078][ T4234] usb 5-1: USB disconnect, device number 26 [ 348.846597][ T7556] usbtmc 5-1:16.0: usb_control_msg returned -19 [ 348.867096][ T7579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1000'. [ 348.872989][ T4178] usb 2-1: USB disconnect, device number 14 [ 348.955057][ T7582] device ipvlan0 entered promiscuous mode [ 348.961800][ T7582] device ipvlan0 left promiscuous mode [ 349.045587][ T7585] : renamed from dummy0 [ 349.067305][ T13] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 349.141694][ T7585] ALSA: mixer_oss: invalid OSS volume '' [ 349.154341][ T7593] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1005'. [ 349.587279][ T13] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 349.596382][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.604761][ T13] usb 4-1: Product: syz [ 349.609012][ T13] usb 4-1: Manufacturer: syz [ 349.613609][ T13] usb 4-1: SerialNumber: syz [ 349.639199][ T13] usb 4-1: config 0 descriptor?? [ 349.678221][ T13] hub 4-1:0.0: bad descriptor, ignoring hub [ 349.694966][ T13] hub: probe of 4-1:0.0 failed with error -5 [ 349.787183][ T4234] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 349.830703][ T7628] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 349.897618][ T13] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 349.908029][ T13] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 349.967730][ T13] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 350.003659][ T13] usb 4-1: media controller created [ 350.077158][ T4178] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 350.098233][ T7577] dib0700: tx buffer length is larger than 4. Not supported. [ 350.108390][ T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 350.167268][ T6219] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 350.207282][ T4234] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 350.212361][ T4235] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 350.235505][ T13] DVB: Unable to find symbol dib7000p_attach() [ 350.262036][ T13] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 350.357198][ T4178] usb 3-1: Using ep0 maxpacket: 16 [ 350.397149][ T13] rc_core: IR keymap rc-dib0700-rc5 not found [ 350.403310][ T13] Registered IR keymap rc-empty [ 350.412565][ T13] dvb-usb: could not initialize remote control. [ 350.427284][ T4234] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 350.466554][ T4234] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.474906][ T13] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 350.489142][ T4234] usb 5-1: Product: syz [ 350.493317][ T4234] usb 5-1: Manufacturer: syz [ 350.500575][ T4234] usb 5-1: SerialNumber: syz [ 350.506964][ T4234] usb 5-1: config 0 descriptor?? [ 350.519490][ T13] usb 4-1: USB disconnect, device number 14 [ 350.532505][ T7620] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 350.548418][ T4234] streamzap 5-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 350.596040][ T13] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 350.598455][ T6219] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 350.646442][ T6219] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 350.671469][ T6219] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 350.682254][ T4178] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 350.691782][ T4235] usb 1-1: config index 0 descriptor too short (expected 8192, got 36) [ 350.712156][ T4235] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 350.727954][ T4178] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.736030][ T6219] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 350.750563][ T4178] usb 3-1: Product: syz [ 350.755017][ T4235] usb 1-1: config 0 has no interfaces? [ 350.763119][ T4231] usb 5-1: USB disconnect, device number 27 [ 350.767919][ T4178] usb 3-1: Manufacturer: syz [ 350.773721][ T6219] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 350.792277][ T4235] usb 1-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 350.815960][ T4178] usb 3-1: SerialNumber: syz [ 350.824485][ T6219] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.838742][ T4178] usb 3-1: config 0 descriptor?? [ 350.844045][ T4235] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.860474][ T6219] usb 2-1: config 0 descriptor?? [ 350.877007][ T4235] usb 1-1: config 0 descriptor?? [ 350.898808][ T4178] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 351.117397][ T4178] ssu100: probe of 3-1:0.0 failed with error -32 [ 351.157390][ T4235] usb 1-1: string descriptor 0 read error: -71 [ 351.158666][ T6219] hdpvr 2-1:0.0: firmware version 0xd9 dated LW@'^R"5DBUN=rp]E/ [ 351.158761][ T6219] hdpvr 2-1:0.0: untested firmware, the driver might not work. [ 351.162743][ T4235] usb 1-1: USB disconnect, device number 9 [ 351.359601][ T25] audit: type=1326 audit(1781414058.853:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7635 comm="syz.1.1022" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f32424e59 code=0x7ffc0000 [ 351.417686][ T25] audit: type=1326 audit(1781414058.853:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7635 comm="syz.1.1022" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9f32424e59 code=0x7ffc0000 [ 351.441578][ C1] vkms_vblank_simulate: vblank timer overrun [ 351.503925][ T7664] udc-core: couldn't find an available UDC or it's busy [ 351.525918][ T7664] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 351.574650][ T25] audit: type=1326 audit(1781414058.853:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7635 comm="syz.1.1022" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f32424e59 code=0x7ffc0000 [ 351.687040][ T6219] hdpvr 2-1:0.0: device init failed [ 351.692374][ T6219] hdpvr: probe of 2-1:0.0 failed with error -12 [ 351.699016][ T25] audit: type=1326 audit(1781414058.853:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7635 comm="syz.1.1022" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f32424e59 code=0x7ffc0000 [ 351.722976][ C1] vkms_vblank_simulate: vblank timer overrun [ 351.773133][ T6219] usb 2-1: USB disconnect, device number 15 [ 351.786981][ T4231] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 351.833693][ T25] audit: type=1326 audit(1781414058.853:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7635 comm="syz.1.1022" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f32424e59 code=0x7ffc0000 [ 351.857662][ C1] vkms_vblank_simulate: vblank timer overrun [ 351.942545][ T25] audit: type=1326 audit(1781414058.873:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7635 comm="syz.1.1022" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9f32424e59 code=0x7ffc0000 [ 352.026952][ T4231] usb 5-1: Using ep0 maxpacket: 32 [ 352.032381][ T25] audit: type=1326 audit(1781414058.873:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7635 comm="syz.1.1022" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f32424e59 code=0x7ffc0000 [ 352.056342][ C1] vkms_vblank_simulate: vblank timer overrun [ 352.107854][ T25] audit: type=1326 audit(1781414058.873:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7635 comm="syz.1.1022" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9f32424e59 code=0x7ffc0000 [ 352.150144][ T4231] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 352.163477][ T25] audit: type=1326 audit(1781414059.163:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7635 comm="syz.1.1022" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f32424e59 code=0x7ffc0000 [ 352.178807][ T4231] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 352.187468][ C1] vkms_vblank_simulate: vblank timer overrun [ 352.297507][ T4231] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xB7, skipping [ 352.349410][ T13] usb 3-1: USB disconnect, device number 13 [ 352.416899][ T25] audit: type=1326 audit(1781414059.163:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7635 comm="syz.1.1022" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f32424e59 code=0x7ffc0000 [ 352.440905][ C1] vkms_vblank_simulate: vblank timer overrun [ 352.507042][ T4231] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 352.536970][ T4231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.576128][ T4231] usb 5-1: Product: syz [ 352.595781][ T4231] usb 5-1: Manufacturer: syz [ 352.605295][ T4231] usb 5-1: SerialNumber: syz [ 352.616801][ T6219] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 352.633267][ T4231] usb 5-1: config 0 descriptor?? [ 352.741872][ T7704] kernel profiling enabled (shift: 9) [ 352.885064][ T4231] usb 5-1: USB disconnect, device number 28 [ 353.047093][ T6219] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 353.066154][ T6219] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.106764][ T6219] usb 1-1: config 0 has no interfaces? [ 353.131644][ T6219] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 353.161801][ T6219] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.200170][ T6219] usb 1-1: config 0 descriptor?? [ 353.276238][ T7711] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1049'. [ 353.628674][ T7715] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.1051'. [ 354.422034][ T7741] fuse: Bad value for 'fd' [ 355.309283][ T6091] usb 1-1: USB disconnect, device number 10 [ 355.807563][ T7771] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1068'. [ 356.276700][ T13] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 356.296806][ T7791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1079'. [ 356.307187][ T7791] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1079'. [ 356.346377][ T4231] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 356.369657][ T7793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1079'. [ 356.526324][ T13] usb 4-1: Using ep0 maxpacket: 32 [ 356.646471][ T13] usb 4-1: config 0 has no interfaces? [ 356.716527][ T4231] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 356.762664][ T4231] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 356.792973][ T4231] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 356.816503][ T13] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 356.835863][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.861236][ T13] usb 4-1: Product: syz [ 356.876555][ T13] usb 4-1: Manufacturer: syz [ 356.892394][ T13] usb 4-1: SerialNumber: syz [ 356.907159][ T7803] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1084'. [ 356.911644][ T13] usb 4-1: config 0 descriptor?? [ 357.016458][ T4231] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 357.036154][ T4231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.066055][ T4231] usb 1-1: Product: syz [ 357.076165][ T4231] usb 1-1: Manufacturer: syz [ 357.081056][ T4231] usb 1-1: SerialNumber: syz [ 357.098027][ T4231] usb 1-1: config 0 descriptor?? [ 357.136904][ T4231] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 357.174815][ T7781] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1074'. [ 357.542659][ T4231] usb 4-1: USB disconnect, device number 15 [ 357.603670][ T7822] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[7823] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7822] [ 357.999960][ T21] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 358.374355][ T7842] fuse: Bad value for 'fd' [ 358.409366][ T21] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 358.421691][ T21] usb 2-1: config 0 has no interface number 0 [ 358.448350][ T21] usb 2-1: New USB device found, idVendor=0b48, idProduct=1004, bcdDevice=8c.1e [ 358.483052][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.522638][ T21] usb 2-1: config 0 descriptor?? [ 358.580507][ T21] usb 2-1: selecting invalid altsetting 1 [ 358.590329][ T21] dvb_ttusb_budget: ttusb_init_controller: error [ 358.609467][ T21] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 358.797694][ T4235] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 358.898670][ T21] DVB: Unable to find symbol ves1820_attach() [ 359.039654][ T21] DVB: Unable to find symbol stv0297_attach() [ 359.051024][ T21] dvb_ttusb_budget: no frontend driver found for device [0b48:1004] [ 359.216050][ T4231] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 359.326038][ T4235] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 359.342935][ T4235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.373633][ T4235] usb 4-1: Product: syz [ 359.390184][ T4235] usb 4-1: Manufacturer: syz [ 359.405156][ T4235] usb 4-1: SerialNumber: syz [ 359.437768][ T4235] usb 4-1: config 0 descriptor?? [ 359.470709][ T6219] usb 1-1: USB disconnect, device number 11 [ 359.512183][ T4235] hub 4-1:0.0: bad descriptor, ignoring hub [ 359.534454][ T4235] hub: probe of 4-1:0.0 failed with error -5 [ 359.618648][ T4231] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 359.645736][ T4231] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.711072][ T4231] usb 5-1: config 0 has no interfaces? [ 359.725998][ T4235] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 359.741898][ T4235] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 359.752951][ T4231] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 359.766266][ T4235] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 359.783296][ T4235] usb 4-1: media controller created [ 359.789420][ T4231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.813353][ T4235] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 359.831436][ T4231] usb 5-1: config 0 descriptor?? [ 359.916486][ T4235] DVB: Unable to find symbol dib7000p_attach() [ 359.924635][ T4235] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 360.055981][ T4235] rc_core: IR keymap rc-dib0700-rc5 not found [ 360.062258][ T4235] Registered IR keymap rc-empty [ 360.070947][ T4235] dvb-usb: could not initialize remote control. [ 360.083816][ T4235] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 360.651019][ T13] usb 2-1: USB disconnect, device number 16 [ 361.015304][ T13] usb 4-1: USB disconnect, device number 16 [ 361.054776][ T13] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 361.055865][ T4178] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 361.466703][ T4178] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 361.483825][ T4178] usb 1-1: config 0 has no interface number 0 [ 361.490344][ T4178] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 361.668071][ T4178] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 361.684078][ T4178] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.694308][ T4178] usb 1-1: Product: syz [ 361.714196][ T4178] usb 1-1: Manufacturer: syz [ 361.723657][ T4178] usb 1-1: SerialNumber: syz [ 361.759993][ T4178] usb 1-1: config 0 descriptor?? [ 361.831032][ T4178] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 361.841783][ T4231] usb 5-1: USB disconnect, device number 29 [ 361.990968][ T7907] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.017798][ T7907] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.024880][ T7907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.041247][ T4178] usb 1-1: USB disconnect, device number 12 [ 362.067984][ T4178] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 362.425700][ T6219] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 362.584871][ T7930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1131'. [ 362.687260][ T6219] usb 2-1: Using ep0 maxpacket: 32 [ 362.692486][ T4235] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 362.817835][ T6219] usb 2-1: config 0 has no interfaces? [ 362.985988][ T6219] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 363.015730][ T6219] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.054307][ T6219] usb 2-1: Product: syz [ 363.074554][ T6219] usb 2-1: Manufacturer: syz [ 363.079889][ T4235] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 363.095800][ T4235] usb 4-1: config 0 has no interface number 0 [ 363.106021][ T6219] usb 2-1: SerialNumber: syz [ 363.115681][ T4235] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 363.146271][ T6219] usb 2-1: config 0 descriptor?? [ 363.151457][ T4235] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 363.358357][ T4235] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 363.367626][ T4235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.379659][ T4235] usb 4-1: Product: syz [ 363.384829][ T4235] usb 4-1: Manufacturer: syz [ 363.392209][ T7913] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1124'. [ 363.405016][ T4235] usb 4-1: SerialNumber: syz [ 363.415966][ T4235] usb 4-1: config 0 descriptor?? [ 363.476648][ T4235] yurex 4-1:0.50: Could not submitting URB [ 363.490787][ T4235] yurex: probe of 4-1:0.50 failed with error -5 [ 363.709803][ T6219] usb 2-1: USB disconnect, device number 17 [ 363.823763][ T6091] usb 4-1: USB disconnect, device number 17 [ 365.125398][ T4235] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 365.166005][ T7982] binder: 7976:7982 ioctl c0045005 2000000002c0 returned -22 [ 365.197474][ T7982] binder: 7976:7982 ioctl c0306201 0 returned -14 [ 365.375268][ T4235] usb 5-1: Using ep0 maxpacket: 16 [ 365.495337][ T4235] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 365.519870][ T4235] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 365.735421][ T4235] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 365.777984][ T4235] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.825201][ T4235] usb 5-1: Product: syz [ 365.890162][ T4235] usb 5-1: Manufacturer: syz [ 365.905189][ T4235] usb 5-1: SerialNumber: syz [ 365.919218][ T7988] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 365.947086][ T4235] r8152-cfgselector 5-1: config 0 descriptor?? [ 366.305173][ T6219] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 366.408957][ T7972] udc-core: couldn't find an available UDC or it's busy [ 366.424196][ T7972] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 366.465334][ T4235] r8152-cfgselector 5-1: Unknown version 0x0000 [ 366.476627][ T4235] r8152-cfgselector 5-1: USB disconnect, device number 30 [ 366.735233][ T6219] usb 3-1: config 0 has no interfaces? [ 366.740972][ T6219] usb 3-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 366.751362][ T6219] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.761161][ T8003] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 366.773981][ T6219] usb 3-1: config 0 descriptor?? [ 366.845083][ T21] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 367.255118][ T21] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 367.267970][ T21] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 367.294945][ T21] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 367.319330][ T21] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 367.342366][ T21] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 367.505106][ T21] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 367.521429][ T21] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 367.534858][ T21] usb 4-1: Product: syz [ 367.543854][ T21] usb 4-1: Manufacturer: syz [ 367.607688][ T21] cdc_wdm 4-1:1.0: skipping garbage [ 367.614780][ T21] cdc_wdm 4-1:1.0: skipping garbage [ 367.632796][ T21] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 367.644452][ T21] cdc_wdm 4-1:1.0: Unknown control protocol [ 367.862937][ T6219] usb 4-1: USB disconnect, device number 18 [ 368.544905][ T6091] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 368.879195][ T4235] usb 3-1: USB disconnect, device number 14 [ 368.925000][ T6091] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 368.940857][ T6091] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 369.124919][ T6091] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 369.140920][ T6091] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.159100][ T6091] usb 5-1: Product: syz [ 369.167989][ T6091] usb 5-1: Manufacturer: syz [ 369.182023][ T6091] usb 5-1: SerialNumber: syz [ 369.198675][ T6091] usb 5-1: config 0 descriptor?? [ 369.392784][ T8043] device syzkaller0 entered promiscuous mode [ 369.437162][ T8022] udc-core: couldn't find an available UDC or it's busy [ 369.444141][ T8022] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 369.514873][ T4235] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 369.634906][ T6091] usb 5-1: USB disconnect, device number 31 [ 369.814959][ T21] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 369.904796][ T4235] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 369.912880][ T4235] usb 3-1: config 0 has no interface number 0 [ 370.103380][ T8058] binder: 8057:8058 ioctl c0306201 200000000080 returned -14 [ 370.111983][ T4235] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 370.122635][ T8058] binder: BINDER_SET_CONTEXT_MGR already set [ 370.130278][ T8058] binder: 8057:8058 ioctl 4018620d 200000000040 returned -16 [ 370.130329][ T4235] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.146833][ T4235] usb 3-1: Product: syz [ 370.151008][ T4235] usb 3-1: Manufacturer: syz [ 370.152474][ T8058] binder: 8057:8058 ioctl c0306201 2000000003c0 returned -14 [ 370.155691][ T4235] usb 3-1: SerialNumber: syz [ 370.170567][ T4235] usb 3-1: config 0 descriptor?? [ 370.244744][ T21] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 370.255117][ T21] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 370.272768][ T21] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 370.282083][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.292419][ T21] usb 2-1: config 0 descriptor?? [ 370.351922][ T21] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 370.360013][ T21] dvb-usb: bulk message failed: -22 (3/0) [ 370.369642][ T21] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 370.420655][ T21] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 370.436317][ T21] usb 2-1: media controller created [ 370.444787][ T4235] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 370.468650][ T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 370.486390][ T4235] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 370.509687][ T21] dvb-usb: bulk message failed: -22 (6/0) [ 370.529909][ T4235] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 370.538517][ T21] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 370.545635][ T4235] usb 3-1: media controller created [ 370.563289][ T4235] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 370.604354][ T8080] dvb-usb: bulk message failed: -22 (2/0) [ 370.609610][ T21] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input15 [ 370.638495][ T21] dvb-usb: schedule remote query interval to 150 msecs. [ 370.646142][ T8041] dvb-usb: bulk message failed: -22 (4/0) [ 370.652295][ T21] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 370.816525][ T4235] dvb-usb: bulk message failed: -22 (1/0) [ 370.822508][ T4235] dvb-usb: error while querying for an remote control event. [ 370.915658][ T6091] usb 3-1: USB disconnect, device number 15 [ 370.984686][ T4235] dvb-usb: bulk message failed: -22 (1/0) [ 370.991543][ T4235] dvb-usb: error while querying for an remote control event. [ 371.130767][ T8086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1183'. [ 371.164761][ T4235] dvb-usb: bulk message failed: -22 (1/0) [ 371.174300][ T4235] dvb-usb: error while querying for an remote control event. [ 371.336216][ T4235] dvb-usb: bulk message failed: -22 (1/0) [ 371.344739][ T4235] dvb-usb: error while querying for an remote control event. [ 371.505569][ T4235] dvb-usb: bulk message failed: -22 (1/0) [ 371.511620][ T4235] dvb-usb: error while querying for an remote control event. [ 371.684685][ T4235] dvb-usb: bulk message failed: -22 (1/0) [ 371.690609][ T4235] dvb-usb: error while querying for an remote control event. [ 371.864571][ T4235] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 371.874682][ T21] dvb-usb: bulk message failed: -22 (1/0) [ 371.880437][ T21] dvb-usb: error while querying for an remote control event. [ 372.044598][ T21] dvb-usb: bulk message failed: -22 (1/0) [ 372.050404][ T21] dvb-usb: error while querying for an remote control event. [ 372.064564][ T6091] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 372.215270][ T21] dvb-usb: bulk message failed: -22 (1/0) [ 372.221223][ T21] dvb-usb: error while querying for an remote control event. [ 372.234604][ T4235] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 372.243447][ T4235] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 372.259258][ T4235] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 372.268610][ T4235] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.314419][ T6091] usb 3-1: Using ep0 maxpacket: 16 [ 372.394606][ T4235] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 372.403755][ T4235] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 372.412010][ T4235] usb 4-1: Product: syz [ 372.416417][ T4235] usb 4-1: Manufacturer: syz [ 372.429384][ T6219] dvb-usb: bulk message failed: -22 (1/0) [ 372.435212][ T6219] dvb-usb: error while querying for an remote control event. [ 372.447836][ T6091] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.458179][ T6091] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 372.465415][ T4235] cdc_wdm 4-1:1.0: skipping garbage [ 372.474130][ T6091] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 372.475792][ T4235] cdc_wdm 4-1:1.0: skipping garbage [ 372.484104][ T6091] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 372.490863][ T4235] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 372.504641][ T6091] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 372.573482][ T4235] usb 2-1: USB disconnect, device number 18 [ 372.613303][ T4235] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 372.624627][ T6091] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 372.638502][ T6091] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 372.646816][ T6091] usb 3-1: Manufacturer: syz [ 372.653617][ T6091] usb 3-1: config 0 descriptor?? [ 372.685378][ T13] usb 4-1: USB disconnect, device number 19 [ 372.916517][ T25] audit: type=1400 audit(1781414080.405:35): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=8110 comm="syz.2.1193" [ 372.934043][ T8111] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 372.974471][ T4235] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 373.024441][ T6091] rc_core: IR keymap rc-hauppauge not found [ 373.030395][ T6091] Registered IR keymap rc-empty [ 373.036058][ T6091] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 373.064421][ T6091] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 373.108862][ T6091] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 373.122787][ T6091] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input16 [ 373.138045][ T6091] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 373.175734][ T6091] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 373.184347][ T13] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 373.204716][ T6091] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 373.235327][ T4235] usb 2-1: Using ep0 maxpacket: 32 [ 373.254550][ T6091] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 373.284358][ T6091] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 373.320670][ T6091] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 373.354473][ T4235] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 373.358486][ T6091] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 373.378512][ T4235] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 373.404897][ T6091] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 373.434511][ T6091] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 373.474437][ T6091] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 373.505763][ T6091] mceusb 3-1:0.0: Registered 42424242 with mce emulator interface version 1 [ 373.516826][ T6091] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 373.544442][ T13] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 373.554617][ T4235] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 373.568584][ T13] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 373.580785][ T4235] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.603815][ T13] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 373.622122][ T4235] usb 2-1: Product: syz [ 373.631043][ T13] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 373.650514][ T4235] usb 2-1: Manufacturer: syz [ 373.657644][ T4235] usb 2-1: SerialNumber: syz [ 373.667613][ T4235] usb 2-1: config 0 descriptor?? [ 373.775594][ T13] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 373.788010][ T13] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 373.806122][ T13] usb 5-1: Product: syz [ 373.812656][ T13] usb 5-1: Manufacturer: syz [ 373.865956][ T13] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 373.927350][ T13] usb 2-1: USB disconnect, device number 19 [ 374.770190][ T13] usb 3-1: USB disconnect, device number 16 [ 375.439094][ T8151] chnl_net:caif_netlink_parms(): no params data found [ 375.510941][ T8151] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.525672][ T8151] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.533862][ T8151] device bridge_slave_0 entered promiscuous mode [ 375.549586][ T8151] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.560542][ T8151] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.572889][ T8151] device bridge_slave_1 entered promiscuous mode [ 375.609915][ T8151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.628696][ T8151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.672089][ T8151] team0: Port device team_slave_0 added [ 375.687374][ T8151] team0: Port device team_slave_1 added [ 375.713743][ T8151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.721062][ T8151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.754440][ T8151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.774599][ T8151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.782006][ T8151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.808343][ T8151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.853453][ T8151] device hsr_slave_0 entered promiscuous mode [ 375.862243][ T8151] device hsr_slave_1 entered promiscuous mode [ 375.876439][ T8151] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 375.885191][ T8151] Cannot create hsr debugfs directory [ 375.916582][ T4235] usb 5-1: USB disconnect, device number 32 [ 376.189967][ T8151] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 376.201654][ T8151] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 376.232524][ T8151] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 376.284978][ T8151] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 376.422074][ T8151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.456575][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 376.476781][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 376.510505][ T8151] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.517559][ T4235] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 376.533751][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 376.552765][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 376.577943][ T4300] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.585058][ T4300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.623427][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 376.649306][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 376.680321][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 376.704440][ T13] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 376.718757][ T4300] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.725870][ T4300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.767001][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 376.777221][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 376.795981][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 376.822358][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 376.851399][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 376.882726][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 376.907489][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 376.945954][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 376.959231][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 376.969394][ T13] usb 4-1: Using ep0 maxpacket: 8 [ 376.996411][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 377.026391][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 377.048040][ T8151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 377.134198][ T4235] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 377.143270][ T4235] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.165807][ T4235] usb 5-1: Product: syz [ 377.173332][ T4235] usb 5-1: Manufacturer: syz [ 377.184749][ T4235] usb 5-1: SerialNumber: syz [ 377.213141][ T4235] usb 5-1: config 0 descriptor?? [ 377.314060][ T6219] Bluetooth: hci1: command 0x0409 tx timeout [ 377.348262][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 377.371563][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 377.395936][ T8151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.504027][ T4235] usb 5-1: ignoring: probably an ADSL modem [ 377.758248][ T8199] device syz_tun entered promiscuous mode [ 377.776389][ T8199] team0: Port device syz_tun added [ 377.892024][ T4438] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.944090][ T4235] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 378.029331][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 378.052489][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 378.126368][ T4438] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.160765][ T5379] usb 5-1: USB disconnect, device number 33 [ 378.215950][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 378.232345][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 378.270138][ T8151] device veth0_vlan entered promiscuous mode [ 378.276158][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.282642][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.286922][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 378.315396][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 378.378620][ T4438] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.418458][ T8151] device veth1_vlan entered promiscuous mode [ 378.465496][ T4438] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.566144][ T8151] device veth0_macvtap entered promiscuous mode [ 378.585639][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 378.610255][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 378.637070][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 378.668662][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 378.703131][ T8151] device veth1_macvtap entered promiscuous mode [ 378.720125][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 378.758637][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 378.861079][ T8151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.918752][ T8151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.961691][ T8151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.995503][ T8151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.023653][ T8151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.050913][ T8151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.097749][ T8151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.136118][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 379.170320][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 379.231868][ T8151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.263612][ T8151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.316913][ T8151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.339764][ T8151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.395852][ T4178] Bluetooth: hci1: command 0x041b tx timeout [ 379.403016][ T8151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.442102][ T8151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.488851][ T8151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.669930][ T8220] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1227'. [ 379.690059][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 379.720297][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 379.753644][ T13] usb 4-1: unable to get BOS descriptor or descriptor too short [ 379.755618][ T8151] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.813554][ T13] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 379.816314][ T8151] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.821151][ T13] usb 4-1: can't read configurations, error -71 [ 379.880070][ T8151] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.909978][ T8151] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.962343][ T8219] device syzkaller0 entered promiscuous mode [ 380.071585][ T4438] tipc: Left network mode [ 380.160670][ T5132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.175269][ T5132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.233633][ T13] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 380.307767][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 380.330840][ T5132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.349247][ T5132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.368491][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 380.607526][ T13] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 380.630694][ T13] usb 4-1: config 0 has no interfaces? [ 380.729432][ T8274] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 380.833634][ T13] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 380.871595][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.898595][ T13] usb 4-1: Product: syz [ 380.910705][ T8281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1239'. [ 380.921584][ T13] usb 4-1: Manufacturer: syz [ 380.930638][ T13] usb 4-1: SerialNumber: syz [ 380.952074][ T13] usb 4-1: config 0 descriptor?? [ 380.960609][ T8281] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 381.130948][ T4438] device hsr_slave_0 left promiscuous mode [ 381.148453][ T4438] device hsr_slave_1 left promiscuous mode [ 381.172813][ T4438] device veth1_macvtap left promiscuous mode [ 381.191513][ T4438] device veth0_macvtap left promiscuous mode [ 381.203249][ T4438] device veth1_vlan left promiscuous mode [ 381.221663][ T4438] device veth0_vlan left promiscuous mode [ 381.330143][ T21] usb 4-1: USB disconnect, device number 21 [ 381.497315][ T4178] Bluetooth: hci1: command 0x040f tx timeout [ 382.359056][ T4438] bond0 (unregistering): Released all slaves [ 383.098974][ T8328] Context (ID=0x1) not attached to queue pair (handle=0xffffffff:0x1) [ 383.553234][ T4178] Bluetooth: hci1: command 0x0419 tx timeout [ 384.013058][ T4178] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 384.312977][ T4178] usb 6-1: Using ep0 maxpacket: 8 [ 384.473160][ T4178] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 384.498127][ T4178] usb 6-1: config 0 has no interface number 0 [ 384.520209][ T4178] usb 6-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 384.552039][ T8375] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1259'. [ 384.578335][ T4178] usb 6-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 384.614538][ T4178] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 384.668302][ T4178] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 384.702949][ T4178] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.743082][ T4178] usb 6-1: config 0 descriptor?? [ 384.810007][ T4178] ldusb 6-1:0.55: Interrupt in endpoint not found [ 385.016035][ T13] usb 6-1: USB disconnect, device number 2 [ 385.213488][ T4178] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 385.622978][ T4178] usb 1-1: unable to get BOS descriptor or descriptor too short [ 385.702851][ T13] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 385.702952][ T4178] usb 1-1: not running at top speed; connect to a high speed hub [ 385.913275][ T4178] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 385.946146][ T4178] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 386.069055][ T4178] usb 1-1: config 14 has an invalid descriptor of length 1, skipping remainder of the config [ 386.232177][ T4178] usb 1-1: config 14 has no interface number 0 [ 386.344474][ T4178] usb 1-1: config 14 has no interface number 1 [ 386.418062][ T4178] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 386.511233][ T4178] usb 1-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 386.572059][ T4178] usb 1-1: config 14 interface 57 has no altsetting 0 [ 386.598324][ T4178] usb 1-1: config 14 interface 228 has no altsetting 0 [ 386.792858][ T13] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 386.811334][ T13] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 386.823036][ T4178] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 386.839256][ T4178] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.850000][ T13] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 386.879673][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 386.887616][ T4178] usb 1-1: Product: syz [ 386.910399][ T4178] usb 1-1: Manufacturer: syz [ 386.922554][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 386.930830][ T4178] usb 1-1: SerialNumber: syz [ 387.002706][ T13] usb 5-1: language id specifier not provided by device, defaulting to English [ 387.168955][ T8443] usb usb8: usbfs: interface 0 claimed by hub while 'syz.5.1277' resets device [ 387.463415][ T4178] legousbtower 1-1:14.57: interrupt endpoints not found [ 387.532730][ T13] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 387.549910][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.559302][ T13] usb 5-1: Manufacturer: 牢 [ 387.581421][ T13] usb 5-1: config 0 descriptor?? [ 387.611907][ T8461] trusted_key: encrypted_key: keyword 'new2똱,' not recognized [ 387.623825][ T13] hub 5-1:0.0: bad descriptor, ignoring hub [ 387.629713][ T13] hub: probe of 5-1:0.0 failed with error -5 [ 387.658149][ T13] input: 牢 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input17 [ 387.674085][ T4178] legousbtower 1-1:14.228: interrupt endpoints not found [ 387.839413][ T13] usb 5-1: USB disconnect, device number 34 [ 388.889863][ T8491] binder: 8490:8491 ioctl c0105500 200000000240 returned -22 [ 389.288285][ T4178] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 389.712495][ T4178] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 389.774410][ T4178] usb 3-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 389.785467][ T4178] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.805905][ T4178] usb 3-1: config 0 descriptor?? [ 389.822529][ T8510] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 389.835240][ T4230] usb 1-1: USB disconnect, device number 13 [ 390.046163][ T8510] udc-core: couldn't find an available UDC or it's busy [ 390.072447][ T8510] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 390.235623][ T8553] fuse: Unknown parameter 'user_id00000000000000000000' [ 390.366829][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 390.392387][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 390.399518][ T8556] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1300'. [ 390.407646][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 390.442333][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 390.464419][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 390.481770][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 390.501156][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 390.516166][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 390.571804][ T8555] udc-core: couldn't find an available UDC or it's busy [ 390.582765][ T8555] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 391.028541][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.035683][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.046177][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.053251][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.060293][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.067389][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.074708][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.081738][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.088832][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.095978][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.103029][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.110137][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.117224][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.124317][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.131960][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.139057][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.149779][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.159215][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.167038][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.174124][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.181148][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.236686][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.288195][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.308556][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.328842][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.354969][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.378536][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.410484][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.429692][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.438141][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.445393][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.452697][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.459806][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.467078][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.474310][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.481398][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.488681][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.496951][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.504221][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.511322][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.518586][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.525877][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.538019][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.546132][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.553953][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.561064][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.568334][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.575575][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.582839][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.591111][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.602432][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.613733][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x2 [ 391.620845][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.629105][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.636347][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.644235][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.651340][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.658616][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.666161][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.673425][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.680529][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.687786][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.695010][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.702267][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.707004][ T4230] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 391.709361][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.728133][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.735436][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.742682][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.750387][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.758512][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.765838][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.773115][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.780220][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.787496][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.794844][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.801947][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.810320][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.817571][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.824833][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.831943][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.839435][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.846670][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.854642][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.861747][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.869033][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.876771][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.884043][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.891146][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.898412][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.906793][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.914055][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.921151][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.928422][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.935652][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.942912][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.950422][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.957750][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.964891][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.971927][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.978984][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.982116][ T4230] usb 1-1: Using ep0 maxpacket: 16 [ 391.986047][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 391.998194][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.005234][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.012307][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.019346][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.026406][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.033674][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.040690][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.047742][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.055171][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.062264][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.069288][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.076329][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.083400][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.090409][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.097452][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.104499][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.111506][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.118568][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.125628][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.132708][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.139731][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.146783][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.152107][ T4230] usb 1-1: unable to get BOS descriptor or descriptor too short [ 392.153860][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.169125][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.176180][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.183241][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.190274][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.197424][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.204865][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.212569][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.219614][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.226929][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.234228][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.241274][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.248723][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.256199][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.264395][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.266750][ T4230] usb 1-1: config 9 has an invalid interface number: 73 but max is 0 [ 392.271717][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.286977][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.294363][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.300517][ T4230] usb 1-1: config 9 has no interface number 0 [ 392.311115][ T4230] usb 1-1: config 9 interface 73 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 392.312273][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.322063][ T8581] netlink: 'syz.2.1307': attribute type 21 has an invalid length. [ 392.329135][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.343824][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.350858][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.359061][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.376990][ T8583] device syzkaller0 entered promiscuous mode [ 392.383134][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.390171][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.397463][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.404562][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.411586][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.418660][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.425724][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.432784][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.439809][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.446852][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.453898][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.460905][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.468808][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.475924][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.483001][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.490029][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.497385][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.502094][ T4230] usb 1-1: New USB device found, idVendor=0545, idProduct=808b, bcdDevice=65.30 [ 392.508349][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.518940][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.520517][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.520541][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.529029][ T4230] usb 1-1: Product: syz [ 392.535767][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.547802][ T4230] usb 1-1: Manufacturer: syz [ 392.554141][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.559556][ T4230] usb 1-1: SerialNumber: syz [ 392.567129][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.578820][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.585922][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.593006][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.600031][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.607077][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.614135][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.621147][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.628221][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.635272][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.642339][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.649363][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.656415][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.663470][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.670973][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.678060][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.685115][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.692169][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.699192][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.706235][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.713289][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.720299][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.727339][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.734403][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.741422][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.748481][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.755526][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.762608][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.770031][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.777092][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.784138][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.791154][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.798229][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.805310][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.812389][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.819416][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.826483][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.833594][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.840620][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.847701][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.854775][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.861791][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.863873][ T4230] gspca_main: tv8532-2.14.0 probing 0545:808b [ 392.868855][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.882532][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.889561][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.896622][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x1 [ 392.903689][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.910800][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.917867][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x3 [ 392.924941][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x4 [ 392.932008][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.939041][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.946106][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.953157][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.960165][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.967229][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x2 [ 392.974633][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.981664][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.988750][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 392.996942][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.004009][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x2 [ 393.011037][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.018098][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.025162][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.032248][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.039277][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.046354][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x2 [ 393.053418][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.060444][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.067486][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.074545][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.081968][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.089004][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.096071][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x3 [ 393.103137][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.110152][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.117208][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x2 [ 393.124262][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.131268][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.138317][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.145382][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x2 [ 393.152460][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.159518][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.166620][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.173764][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.181144][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.188229][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.195281][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.202352][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.209374][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.216436][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.223488][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.230499][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.237595][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.244673][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.251701][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.258744][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.265790][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.272845][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.279869][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.287363][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.294454][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.301481][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.308538][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.315593][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.322667][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.329698][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.336777][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.343847][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.350890][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.357971][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.365035][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.372133][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.375901][ T8588] sg_write: data in/out 414685/338 bytes for SCSI command 0x0-- guessing data in; [ 393.375901][ T8588] program syz.0.1308 not setting count and/or reply_len properly [ 393.379174][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.379205][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.421894][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.428938][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.436177][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.443291][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.450334][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.457471][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.464586][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.471622][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.478799][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.486453][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.493571][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.500663][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.507749][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.514806][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.521871][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.528902][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.535961][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.543004][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.550008][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.557071][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.564116][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.571124][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.578183][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.585253][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.592923][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.599956][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.606994][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.614046][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.621060][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.628153][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.635516][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.642617][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.649651][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.656755][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.663802][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.670810][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.677862][ T4178] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 393.684928][ T4178] uclogic 0003:5543:0064.0004: collection stack underflow [ 393.692688][ T4178] uclogic 0003:5543:0064.0004: item 0 0 0 12 parsing failed [ 393.700199][ T4178] uclogic 0003:5543:0064.0004: parse failed [ 393.706144][ T4178] uclogic: probe of 0003:5543:0064.0004 failed with error -22 [ 393.719566][ T4178] usb 3-1: USB disconnect, device number 17 [ 394.047519][ T8612] input: syz0 as /devices/virtual/input/input18 [ 394.220574][ T8615] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 394.257451][ T8615] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 394.400014][ T4230] usb 1-1: USB disconnect, device number 14 [ 395.709358][ T8656] loop4: detected capacity change from 0 to 256 [ 397.041103][ T8666] loop3: detected capacity change from 0 to 256 [ 397.130471][ T8674] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1330'. [ 397.730277][ T8683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1329'. [ 397.908767][ T8695] mmap: syz.0.1335 (8695) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 397.928077][ T8695] ------------[ cut here ]------------ [ 397.945325][ T8695] WARNING: CPU: 1 PID: 8695 at include/linux/fs.h:532 hugetlb_split+0x237/0x2a0 [ 397.954601][ T4178] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 397.962487][ T8695] Modules linked in: [ 397.966541][ T8695] CPU: 1 PID: 8695 Comm: syz.0.1335 Not tainted syzkaller #0 [ 397.985467][ T8695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 398.011011][ T8695] RIP: 0010:hugetlb_split+0x237/0x2a0 [ 398.025658][ T8695] Code: bf ff 4c 89 f7 48 89 de 4c 89 fa 31 c9 5b 41 5c 41 5d 41 5e 41 5f 5d eb 7a e8 65 ad bf ff 0f 0b e9 62 fe ff ff e8 59 ad bf ff <0f> 0b e9 2d ff ff ff 48 c7 c1 84 3a 8a 8d 80 e1 07 80 c1 03 38 c1 [ 398.074728][ T8695] RSP: 0018:ffffc900034afa80 EFLAGS: 00010283 [ 398.091361][ T8695] RAX: ffffffff81b99b97 RBX: 0000200000000000 RCX: 0000000000080000 [ 398.099359][ T8695] RDX: ffffc9000c8c1000 RSI: 0000000000003bf7 RDI: 0000000000003bf8 [ 398.164242][ T8695] RBP: 0000000000000000 R08: ffff888016c6f7bf R09: 1ffff11002d8def7 [ 398.197527][ T8695] R10: dffffc0000000000 R11: ffffed1002d8def8 R12: ffff88805471d3b8 [ 398.201347][ T4178] usb 5-1: Using ep0 maxpacket: 32 [ 398.219525][ T8695] R13: dffffc0000000000 R14: ffff88805471d318 R15: ffff888061bee440 [ 398.239317][ T8695] FS: 00007f4c38b4f6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 398.277559][ T8695] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 398.304196][ T8695] CR2: 00005614ea699950 CR3: 000000007d35f000 CR4: 00000000003526f0 [ 398.331480][ T4178] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 398.332144][ T8695] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 398.367554][ T4178] usb 5-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 398.396215][ T4178] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 398.401293][ T8695] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 398.480285][ T8695] Call Trace: [ 398.489140][ T8695] [ 398.501565][ T8695] __vma_adjust+0x2b6/0x1c10 [ 398.515004][ T8695] ? rcu_lock_acquire+0x30/0x30 [ 398.538043][ T8695] ? memset+0x1e/0x40 [ 398.568101][ T8695] __split_vma+0x34b/0x410 [ 398.591376][ T4178] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 399.085900][ T4178] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.094227][ T4178] usb 5-1: Product: syz [ 399.098475][ T4178] usb 5-1: Manufacturer: syz [ 399.103161][ T4178] usb 5-1: SerialNumber: syz [ 399.115628][ T8695] __do_munmap+0x383/0xdf0 [ 399.120141][ T8695] mmap_region+0x8b4/0x1650 [ 399.124797][ T8695] ? bpf_lsm_mmap_addr+0x5/0x10 [ 399.129667][ T8695] do_mmap+0x819/0xe90 [ 399.134228][ T8695] __se_sys_remap_file_pages+0x4ce/0x670 [ 399.139878][ T8695] ? syscall_enter_from_user_mode+0x21/0x70 [ 399.145874][ T8695] do_syscall_64+0x4c/0xa0 [ 399.150298][ T8695] ? clear_bhb_loop+0x30/0x80 [ 399.157584][ T4178] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 399.166447][ T8695] ? clear_bhb_loop+0x30/0x80 [ 399.171333][ T4178] imon 5-1:155.0: unable to initialize intf0, err -19 [ 399.178098][ T4178] imon:imon_probe: failed to initialize context! [ 399.184541][ T8695] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 399.190460][ T4178] imon 5-1:155.0: unable to register, err -19 [ 399.203540][ T8695] RIP: 0033:0x7f4c3a8f5e59 [ 399.209277][ T8695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.230309][ T8695] RSP: 002b:00007f4c38b4f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 399.238912][ T8695] RAX: ffffffffffffffda RBX: 00007f4c3ab6efa0 RCX: 00007f4c3a8f5e59 [ 399.247151][ T8695] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000800000 [ 399.255187][ T8695] RBP: 00007f4c3a98bd6f R08: 0000000000000001 R09: 0000000000000000 [ 399.263894][ T8695] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000000 [ 399.287625][ T8695] R13: 00007f4c3ab6f038 R14: 00007f4c3ab6efa0 R15: 00007ffcdcf26fa8 [ 399.336662][ T8695] [ 399.349137][ T8695] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 399.356433][ T8695] CPU: 1 PID: 8695 Comm: syz.0.1335 Not tainted syzkaller #0 [ 399.363806][ T8695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 399.373866][ T8695] Call Trace: [ 399.377145][ T8695] [ 399.380080][ T8695] dump_stack_lvl+0x188/0x250 [ 399.384765][ T8695] ? show_regs_print_info+0x20/0x20 [ 399.389965][ T8695] ? load_image+0x400/0x400 [ 399.394484][ T8695] panic+0x2e5/0x810 [ 399.398396][ T8695] ? bpf_jit_dump+0xd0/0xd0 [ 399.402922][ T8695] ? hugetlb_split+0x237/0x2a0 [ 399.407692][ T8695] __warn+0x248/0x2b0 [ 399.411675][ T8695] ? hugetlb_split+0x237/0x2a0 [ 399.416441][ T8695] report_bug+0x1b7/0x2e0 [ 399.420777][ T8695] handle_bug+0x3a/0x70 [ 399.424950][ T8695] exc_invalid_op+0x16/0x40 [ 399.429454][ T8695] asm_exc_invalid_op+0x16/0x20 [ 399.434305][ T8695] RIP: 0010:hugetlb_split+0x237/0x2a0 [ 399.439681][ T8695] Code: bf ff 4c 89 f7 48 89 de 4c 89 fa 31 c9 5b 41 5c 41 5d 41 5e 41 5f 5d eb 7a e8 65 ad bf ff 0f 0b e9 62 fe ff ff e8 59 ad bf ff <0f> 0b e9 2d ff ff ff 48 c7 c1 84 3a 8a 8d 80 e1 07 80 c1 03 38 c1 [ 399.459286][ T8695] RSP: 0018:ffffc900034afa80 EFLAGS: 00010283 [ 399.465337][ T8695] RAX: ffffffff81b99b97 RBX: 0000200000000000 RCX: 0000000000080000 [ 399.473292][ T8695] RDX: ffffc9000c8c1000 RSI: 0000000000003bf7 RDI: 0000000000003bf8 [ 399.481241][ T8695] RBP: 0000000000000000 R08: ffff888016c6f7bf R09: 1ffff11002d8def7 [ 399.489191][ T8695] R10: dffffc0000000000 R11: ffffed1002d8def8 R12: ffff88805471d3b8 [ 399.497147][ T8695] R13: dffffc0000000000 R14: ffff88805471d318 R15: ffff888061bee440 [ 399.505102][ T8695] ? hugetlb_split+0x237/0x2a0 [ 399.509855][ T8695] __vma_adjust+0x2b6/0x1c10 [ 399.514426][ T8695] ? rcu_lock_acquire+0x30/0x30 [ 399.519264][ T8695] ? memset+0x1e/0x40 [ 399.523224][ T8695] __split_vma+0x34b/0x410 [ 399.527622][ T8695] __do_munmap+0x383/0xdf0 [ 399.532021][ T8695] mmap_region+0x8b4/0x1650 [ 399.536504][ T8695] ? bpf_lsm_mmap_addr+0x5/0x10 [ 399.541336][ T8695] do_mmap+0x819/0xe90 [ 399.545390][ T8695] __se_sys_remap_file_pages+0x4ce/0x670 [ 399.551004][ T8695] ? syscall_enter_from_user_mode+0x21/0x70 [ 399.556883][ T8695] do_syscall_64+0x4c/0xa0 [ 399.561280][ T8695] ? clear_bhb_loop+0x30/0x80 [ 399.565937][ T8695] ? clear_bhb_loop+0x30/0x80 [ 399.570593][ T8695] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 399.576466][ T8695] RIP: 0033:0x7f4c3a8f5e59 [ 399.580865][ T8695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.600449][ T8695] RSP: 002b:00007f4c38b4f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 399.608842][ T8695] RAX: ffffffffffffffda RBX: 00007f4c3ab6efa0 RCX: 00007f4c3a8f5e59 [ 399.616794][ T8695] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000800000 [ 399.624744][ T8695] RBP: 00007f4c3a98bd6f R08: 0000000000000001 R09: 0000000000000000 [ 399.632692][ T8695] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000000 [ 399.640646][ T8695] R13: 00007f4c3ab6f038 R14: 00007f4c3ab6efa0 R15: 00007ffcdcf26fa8 [ 399.648611][ T8695] [ 399.651886][ T8695] Kernel Offset: disabled [ 399.656471][ T8695] Rebooting in 86400 seconds..