last executing test programs: 7m57.401127193s ago: executing program 3 (id=219): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000180)=0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r3, 0x0, 0xb) splice(r4, 0x0, r3, 0x0, 0xf3a, 0x8) splice(r2, 0x0, r5, 0x0, 0x50, 0x8) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$FUSE_INIT(r3, &(0x7f00000002c0)={0xffffffffffffffb6, 0x0, 0x0, {0x7, 0x2b, 0x7d4, 0x48000, 0x6, 0xf, 0x1, 0x2, 0x0, 0x0, 0x2a, 0x3}}, 0x50) openat$kvm(0x0, &(0x7f0000000040), 0x8080, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x1c1) 7m56.351858623s ago: executing program 3 (id=225): syz_emit_ethernet(0x2e, &(0x7f0000000340)={@random="35ab2788d003", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010100, @broadcast=0xe0000001}, {0x4e24, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x1, 0x0, @void}}}}}}}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8e, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb3209000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000040)='./file1\x00', 0x1, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8) 7m53.034931803s ago: executing program 3 (id=241): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000440), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 7m48.875941335s ago: executing program 3 (id=252): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x29002c, &(0x7f0000000940)=ANY=[], 0x1, 0x0, 0x0) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x88000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x89901) umount2(&(0x7f0000000200)='./file0\x00', 0x2) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 7m47.662278259s ago: executing program 3 (id=259): socket(0x840000000002, 0x3, 0x100) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x80000) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES16=r0], 0x3c}, 0x1, 0x8000a0ffffffff, 0x0, 0x8086}, 0x0) 7m47.224471279s ago: executing program 3 (id=260): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4) bind$packet(r0, &(0x7f0000000200)={0x11, 0x1, 0x1, 0x1, 0xfe, 0x6, @random="ee520800"}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x0, 0x7ffffffb}]}) unshare(0x24020400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth0_to_batadv\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x1ff, 0xa4, 0xffb, 0x7, 0xb69, 0x5228, 0x4, 0x1, 0x3, 0x5, 0x101, 0x2001000, 0x9, 0x5, 0x3, 0xff20, 0x40, 0x0, 0x6, 0x9, 0x4, 0x7, 0x4, 0x100000, 0x762, 0x13, 0xd, 0xe, 0x2b12, 0x104, 0x6, 0x1c00, 0xb, 0x7, 0xbed8, 0x8, 0x8000100, 0x3, 0x4, 0x11000, 0x10001, 0x5, 0x79b, 0x2, 0xbd, 0x7d, 0x4, 0x1000a, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xa9a3, 0x5, 0x5, 0x6, 0x9, 0x6, 0x7, 0x4009, 0x0, 0x4, 0xffffff01, 0xb, 0x752, 0x0, 0x1005, 0x5, 0x10001, 0xffffffff, 0xffffffff, 0x6, 0x4, 0x7f, 0x331, 0xfdffffff, 0x2, 0x2, 0x84, 0x800100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20008, 0x9, 0x2, 0xffffffff, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x7, 0x2, 0x8, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x8000003, 0x404, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008821}, 0x802) write(r0, &(0x7f0000000000)="01", 0xf) syz_usb_connect$cdc_ecm(0x2, 0x97, &(0x7f0000000080)=ANY=[@ANYBLOB="12011003020000082505a1a44000010203010902850001010810090904000603020600020524060000052400f1ff0d240fe8040000007f00060002152412"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) 7m46.084089385s ago: executing program 32 (id=260): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4) bind$packet(r0, &(0x7f0000000200)={0x11, 0x1, 0x1, 0x1, 0xfe, 0x6, @random="ee520800"}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x0, 0x7ffffffb}]}) unshare(0x24020400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth0_to_batadv\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x1ff, 0xa4, 0xffb, 0x7, 0xb69, 0x5228, 0x4, 0x1, 0x3, 0x5, 0x101, 0x2001000, 0x9, 0x5, 0x3, 0xff20, 0x40, 0x0, 0x6, 0x9, 0x4, 0x7, 0x4, 0x100000, 0x762, 0x13, 0xd, 0xe, 0x2b12, 0x104, 0x6, 0x1c00, 0xb, 0x7, 0xbed8, 0x8, 0x8000100, 0x3, 0x4, 0x11000, 0x10001, 0x5, 0x79b, 0x2, 0xbd, 0x7d, 0x4, 0x1000a, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xa9a3, 0x5, 0x5, 0x6, 0x9, 0x6, 0x7, 0x4009, 0x0, 0x4, 0xffffff01, 0xb, 0x752, 0x0, 0x1005, 0x5, 0x10001, 0xffffffff, 0xffffffff, 0x6, 0x4, 0x7f, 0x331, 0xfdffffff, 0x2, 0x2, 0x84, 0x800100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20008, 0x9, 0x2, 0xffffffff, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x7, 0x2, 0x8, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x8000003, 0x404, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008821}, 0x802) write(r0, &(0x7f0000000000)="01", 0xf) syz_usb_connect$cdc_ecm(0x2, 0x97, &(0x7f0000000080)=ANY=[@ANYBLOB="12011003020000082505a1a44000010203010902850001010810090904000603020600020524060000052400f1ff0d240fe8040000007f00060002152412"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) 5m52.789953997s ago: executing program 2 (id=538): socket$inet6_sctp(0xa, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000400)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_io_uring_setup(0x111, &(0x7f0000000500)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000640)='n', 0x1) openat$vim2m(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xad58, 0x10, 0x2100, 0x10000006, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x20, 0xfffffffe, 0xae, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x4000, 0x0, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x400, 0x2, 0x2dd}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 5m50.527427359s ago: executing program 2 (id=541): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000feffffff850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x28, r1, 0x303, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @val={0x18, 0x99, {0x6, 0x21}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20044080}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r5) recvmmsg(r5, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000004c0)=""/167, 0xa7}, {&(0x7f0000000580)=""/91, 0x5b}, {&(0x7f0000000600)=""/4087, 0xff7}, {&(0x7f0000001600)=""/13, 0xd}, {&(0x7f0000001640)=""/81, 0x51}, {&(0x7f00000016c0)=""/209, 0xd1}, {&(0x7f00000017c0)=""/180, 0xb4}, {&(0x7f0000001880)=""/172, 0xac}], 0x8}, 0x9}], 0x1, 0x400100a0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x1100, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 5m48.914992688s ago: executing program 2 (id=544): openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20400}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x10000000000002, 0x9, 0xfffffffffffffff9, 0x2, 0x0, 0x0, 0x4002004c4, 0x1004, 0x76, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x90], 0xeeee8000, 0x2018d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m47.87343882s ago: executing program 2 (id=546): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000007c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="28000000100001002abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="802100000000000008000d"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(r4) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r3, &(0x7f0000000440)={&(0x7f0000000480)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000500)=[{&(0x7f00000005c0)="f9", 0x1}], 0x1}, 0x20004014) 5m46.659290599s ago: executing program 2 (id=551): r0 = socket$netlink(0x10, 0x3, 0x400000000000004) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$USERFAULTFD_IOC_NEW(r3, 0xaa00) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000001080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x3}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x1, 0x8, 0x0, 0x4, 0x9, 0x8001], 0xfec00000, 0x3c4210}) ioctl$KVM_RUN(r5, 0xae80, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) 5m45.391108859s ago: executing program 2 (id=553): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001f40)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001f80), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001fc0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000002080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x8f5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xff, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4004884) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002180)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000021c0)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000002200)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000002240)="05031c00d3fc1400fd004788031c09102c28", 0xfdef, 0x4, &(0x7f0000002280)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 5m30.24622263s ago: executing program 33 (id=553): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001f40)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001f80), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001fc0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000002080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x8f5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xff, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4004884) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002180)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000021c0)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000002200)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000002240)="05031c00d3fc1400fd004788031c09102c28", 0xfdef, 0x4, &(0x7f0000002280)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 12.517962346s ago: executing program 6 (id=1556): r0 = syz_io_uring_setup(0x4944, &(0x7f0000000100)={0x0, 0xd026, 0x2, 0x0, 0x42}, &(0x7f0000000400), &(0x7f0000011000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x2, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000180)={[0xd456, 0x8, 0x7ff, 0x7, 0x8, 0xfffffffffffffffd, 0xfe, 0x7fffffff, 0xfffffffffffffff9, 0x400, 0x10000, 0x100000001, 0x4, 0x10, 0x8, 0x7fff], 0x7000, 0x110000}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x6, &(0x7f0000000240)={0x6, 0x0, 0x0, 0x0}, 0x20) gettid() r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x5, 0x1, 0x0, 0x0, 0xa701fffc) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="1b1b"]) getsockopt(r2, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102400, &(0x7f0000000400)=0x19000) 10.219888102s ago: executing program 6 (id=1563): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000140), 0x4a) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000002c0)=0x9, 0x4) sendmmsg$inet(r0, &(0x7f0000000400)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x806, 0x1233c1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$inet6(r1, 0x0, 0x0) r2 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000300)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, 0x0, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x0, 0x10001, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, r4, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5c0, 0x0, 0x0}}, 0x0) 9.785624228s ago: executing program 5 (id=1565): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040}, 0x80) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000012c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000001300)={0x2, 0x4, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000001440), 0x800001d, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000014c0)={0x1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000001580)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000001600)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000001640)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000001680), 0x800001d, 0x8000000) syz_ublk_setup_io_uring(0x2261, &(0x7f0000000980)={0x0, 0xd58c, 0x80, 0x2, 0x30b}, 0x0, 0x0, 0x0) eventfd2(0x1, 0x80001) 8.869258028s ago: executing program 6 (id=1566): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x24, 0x5e, 0x1, 0x0, 0x25dfdbfc, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x8000000000000001}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x2}]}]}, 0x24}], 0x1}, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@mpls_delroute={0x28, 0x19, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_MULTIPATH={0xc}]}, 0x28}}, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000240)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000280)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2c000010) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000000400)=[{&(0x7f0000000440)=""/54, 0x7ffff000}, {&(0x7f0000000480)=""/152, 0x98}], 0x2, &(0x7f0000000540)=[{&(0x7f0000000580)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001780)={0x1, 0x6, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@alu={0x4, 0x1, 0x9, 0x8, 0x5, 0x20, 0xc}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) 7.905901612s ago: executing program 4 (id=1570): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r2 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x3, 0x0) r3 = add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r3, &(0x7f0000000700)=""/55, 0x37) mq_timedsend(r2, 0x0, 0x0, 0x9, 0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}}, &(0x7f00000000c0)) mq_timedreceive(r2, &(0x7f0000000500)=""/202, 0xca, 0x200000200009, 0x0) 7.643328397s ago: executing program 4 (id=1571): r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000300)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000b40)=""/173, 0xad}], 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0xa, 0xfffff010}, {0x20, 0x0, 0x20, 0xfffff034}, {0x6}]}, 0x8) sendmmsg(r1, &(0x7f0000000180), 0x4000190, 0x0) r3 = openat$audio(0xffffff9c, &(0x7f0000000f00), 0x8000, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000000f40)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000b40)={0x18, &(0x7f0000000980)=ANY=[@ANYBLOB="20110c"], 0x0, 0x0, 0x0, 0x0}, 0x0) ppoll(&(0x7f0000000080)=[{r4, 0x5300}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r4, 0x8010500d, &(0x7f00000002c0)) 7.386391059s ago: executing program 1 (id=1572): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10008041) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40000c0) syz_emit_ethernet(0x16, 0x0, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x101, 0x800, 0x103, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x25c, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2eef, 0x4, 0xfffffffe, 0x146, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90d, 0x20000, 0x0, 0x1a6, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8dd0, 0x0, 0x2, 0x367}, 0xffffffffffffffff}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYRES16, @ANYBLOB="010028bd70", @ANYBLOB], 0x2c}}, 0x80) r9 = syz_open_procfs(0x0, &(0x7f00000007c0)='projid_map\x00') write$FUSE_IOCTL(r9, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r7) sendmsg$NL80211_CMD_GET_SCAN(r8, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 7.283858203s ago: executing program 5 (id=1573): gettid() prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) userfaultfd(0x1) syz_open_dev$ttys(0xc, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000003c0)={0x0, 0x297f, 0x0, 0x2, 0x9000158}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) syz_clone3(&(0x7f0000000140)={0x104901400, &(0x7f0000000040), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) 6.997880988s ago: executing program 0 (id=1574): r0 = syz_io_uring_setup(0x4944, &(0x7f0000000100)={0x0, 0xd026, 0x2, 0x0, 0x42}, &(0x7f0000000400), &(0x7f0000011000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x2, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000180)={[0xd456, 0x8, 0x7ff, 0x7, 0x8, 0xfffffffffffffffd, 0xfe, 0x7fffffff, 0xfffffffffffffff9, 0x400, 0x10000, 0x100000001, 0x4, 0x10, 0x8, 0x7fff], 0x7000, 0x110000}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x6, &(0x7f0000000240)={0x6, 0x0, 0x0, 0x0}, 0x20) gettid() r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x5, 0x1, 0x0, 0x0, 0xa701fffc) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="1b1b"]) getsockopt(r2, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102400, &(0x7f0000000400)=0x19000) 6.507871639s ago: executing program 1 (id=1575): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000008000b00", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40018}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x42013, 0x2020e}}, 0x20}, 0x1, 0x0, 0x0, 0x4000886}, 0x0) 6.507338635s ago: executing program 6 (id=1577): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000140), 0x4a) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000002c0)=0x9, 0x4) sendmmsg$inet(r0, &(0x7f0000000400)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x806, 0x1233c1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$inet6(r1, 0x0, 0x0) r2 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000300)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, 0x0, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x0, 0x10001, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, r4, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5c0, 0x0, 0x0}}, 0x0) 5.751691204s ago: executing program 5 (id=1578): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfc, 0xf7, 0x7fff7ffc}]}) unlink(&(0x7f00000003c0)='./cgroup\x00') migrate_pages(0x0, 0x3, &(0x7f0000000300)=0x3, &(0x7f0000000340)=0x13e) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=0x0], 0x48) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106, 0x8}}, 0x20) 5.674587231s ago: executing program 1 (id=1579): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000300)={0x2000200, 0x4e, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000180)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x1, 0x3, 0x9, 0x0, 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x200, 0x4f, 0x4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000002c0)={r3}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4d, 0x2ba8}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000380)={0x200, 0x51, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f00000001c0)={r7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0x81, 0x5, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000540)={0xf, 0x1, 0x1e}) 5.356058175s ago: executing program 1 (id=1580): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x3, 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000580)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000002100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8d}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0) 5.11869478s ago: executing program 6 (id=1581): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000140), 0x4a) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000002c0)=0x9, 0x4) sendmmsg$inet(r0, &(0x7f0000000400)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r1) syz_open_dev$video4linux(&(0x7f0000000000), 0x806, 0x1233c1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$inet6(r2, 0x0, 0x0) r3 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0xe5b9, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) socket$can_bcm(0x1d, 0x2, 0x2) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x0, 0x10001, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5c0, 0x0, 0x0}}, 0x0) 4.666152659s ago: executing program 0 (id=1582): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x5, 0x2, 0xa}, 0x1c) syz_usb_connect(0x3, 0x36, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={0x1, 0x2}, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000045, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r3 = socket$inet6(0xa, 0x1, 0x100) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x11}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 4.408305263s ago: executing program 4 (id=1583): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) r1 = syz_io_uring_setup(0xf08, &(0x7f0000000300)={0x0, 0x2d85, 0x40000, 0x3, 0x800000c3}, &(0x7f0000000580)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_TX(r5, 0x6, 0x17, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) r7 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f00000002c0)=0x0, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000400)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000480)=@any_dev={0x3, 0x6d3, 0x0, 0x0, 0x1000, 0x4f24, 0x0, 0x0, 0x191}}}, &(0x7f00000004c0)=0x0) syz_ublk_setup_queues(r6, r11, &(0x7f00000005c0)={0x0, 0x1aa5, 0x80, 0x2, 0x2ad}, &(0x7f0000000640)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3104, 0x1, 0x0, 0x4, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587d, 0x200, 0x3, 0x2cc, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x800, 0x1, 0x315, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x0, 0x3, 0x2dc, 0x0, r6}}], 0x1, &(0x7f00000008c0)={0x2e, 0x1a, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0xdbd, 0x0, 0x0}}, 0x0) 4.397490185s ago: executing program 5 (id=1593): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) recvfrom(r0, &(0x7f0000000180)=""/233, 0xe9, 0x40000002, 0x0, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)=""/245, 0xf5}], 0x1, &(0x7f0000000640)=""/16, 0x10}, 0x3}], 0x1, 0x23, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000140)="d0", 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 4.21972457s ago: executing program 1 (id=1584): syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, &(0x7f00000007c0)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) fanotify_mark(r0, 0x80, 0x8, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_usb_connect(0x3, 0x32, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 3.537673481s ago: executing program 0 (id=1585): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x4e21, @broadcast}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='bbr', 0x3) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000001c0)=0xce, 0x4) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x14, &(0x7f0000000340)=[{&(0x7f0000000380)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, 0x0, 0x700) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 2.861774439s ago: executing program 4 (id=1586): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x24, 0x5e, 0x1, 0x0, 0x25dfdbfc, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x8000000000000001}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x2}]}]}, 0x24}], 0x1}, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@mpls_delroute={0x28, 0x19, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_MULTIPATH={0xc}]}, 0x28}}, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000240)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000280)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2c000010) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000000400)=[{&(0x7f0000000440)=""/54, 0x7ffff000}, {&(0x7f0000000480)=""/152, 0x98}], 0x2, &(0x7f0000000540)=[{&(0x7f0000000580)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001780)={0x1, 0x6, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@alu={0x4, 0x1, 0x9, 0x8, 0x5, 0x20, 0xc}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) 2.86048041s ago: executing program 6 (id=1597): r0 = socket$netlink(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x3, 0x32, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904"], 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080), 0x3) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40280, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl(r4, 0x4048aecb, &(0x7f0000000100)="070000000000000001000000ffffffff40894088") write(r1, &(0x7f0000000100), 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) dup(r5) r6 = openat$nsim_del_device(0xffffff9c, &(0x7f00000014c0), 0x1, 0x0) write$nsim_del_device(r6, &(0x7f0000001500)={0x0}, 0x1) 2.488369471s ago: executing program 0 (id=1587): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10008041) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40000c0) syz_emit_ethernet(0x16, 0x0, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x101, 0x800, 0x103, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x25c, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2eef, 0x4, 0xfffffffe, 0x146, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90d, 0x20000, 0x0, 0x1a6, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8dd0, 0x0, 0x2, 0x367}, 0xffffffffffffffff}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYRES16, @ANYBLOB="010028bd70", @ANYBLOB], 0x2c}}, 0x80) r9 = syz_open_procfs(0x0, &(0x7f00000007c0)='projid_map\x00') write$FUSE_IOCTL(r9, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r7) sendmsg$NL80211_CMD_GET_SCAN(r8, 0x0, 0x1) 2.032116664s ago: executing program 5 (id=1588): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f0000000380)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000400)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r0, 0x0, 0x3000, 0x1000000, 0x0, 0x10}]) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4c050}, 0x44004000) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a300000ff060a010400000000000000000a000001040004800900020073797a32000000000900010073797a3100000000140000001100010000000000000000000100000a"], 0x58}, 0x1, 0x0, 0x0, 0x2c000844}, 0x24000840) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000032073797a6b616c6c65723000001800128008000100767266000c000280080001"], 0x48}}, 0x4000) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) setpgid(r4, r4) waitid(0x2, r4, 0x0, 0x6, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 1.29558529s ago: executing program 0 (id=1589): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xfffffffb}, 0x5, 0x34, 0x91f}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000006c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0x16}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000b0}, 0xc0d0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000000800)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.059797962s ago: executing program 4 (id=1590): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000008000b00", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40018}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x42013, 0x2020e}}, 0x20}, 0x1, 0x0, 0x0, 0x4000886}, 0x0) 584.093915ms ago: executing program 5 (id=1591): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfc, 0xf7, 0x7fff7ffc}]}) unlink(&(0x7f00000003c0)='./cgroup\x00') migrate_pages(0x0, 0x3, &(0x7f0000000300)=0x3, &(0x7f0000000340)=0x13e) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=0x0], 0x48) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106, 0x8}}, 0x20) 376.315896ms ago: executing program 1 (id=1592): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x638) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e24, 0x6bb, @remote, 0x9}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x14) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0xfffffffffffffe26, &(0x7f0000000300)=[{&(0x7f0000000340)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00054002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4044) 261.559602ms ago: executing program 0 (id=1594): socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r1 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x88) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) add_key(&(0x7f0000000100)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) sendfile(r3, r3, 0x0, 0x200) 0s ago: executing program 4 (id=1595): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x400000, 0x1, 0x5, 0x4, 0x2, 0x0, 0x9, 0x2}}) r1 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x34, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x4) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x100000, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x100}}, 0x10000000) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x5, 0x40) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000000)={0xfe, 0x1f, 0x0, 0xc0, "d57ba4b0cef17e817d96b58200bd40ed0000240ec7dc1d0000000000004f24b3"}) kernel console output (not intermixed with test programs): id wMaxPacketSize 0 [ 485.659949][ T5729] usb 1-1: config 0 interface 0 has no altsetting 0 [ 485.659984][ T5729] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.664107][ T5729] usb 1-1: config 0 descriptor?? [ 486.041813][T10170] tipc: Enabled bearer , priority 0 [ 486.044252][T10170] syzkaller0: entered promiscuous mode [ 486.044268][T10170] syzkaller0: entered allmulticast mode [ 486.083649][T10170] tipc: Resetting bearer [ 486.100256][T10169] tipc: Resetting bearer [ 486.173205][ T5729] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 486.173234][ T5729] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 486.173255][ T5729] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 486.173274][ T5729] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 486.173292][ T5729] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 486.173859][ T5729] mcp2221 0003:04D8:00DD.0012: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 486.290478][T10169] tipc: Disabling bearer [ 486.393165][T10149] sctp: [Deprecated]: syz.0.1182 (pid 10149) Use of int in max_burst socket option. [ 486.393165][T10149] Use struct sctp_assoc_value instead [ 486.875670][ T5637] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 487.017358][ T11] usb 1-1: USB disconnect, device number 38 [ 487.025869][ T5637] usb 5-1: Using ep0 maxpacket: 16 [ 487.027193][ T5637] usb 5-1: New USB device found: idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 487.029036][ T5637] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 487.029067][ T5637] usb 5-1: config 0 interface 0 has no altsetting 0 [ 487.035536][ T5637] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.035562][ T5637] usb 5-1: Product: syz [ 487.035577][ T5637] usb 5-1: Manufacturer: syz [ 487.035593][ T5637] usb 5-1: SerialNumber: syz [ 487.106132][ T5637] usb 5-1: config 0 descriptor?? [ 487.344309][ T5637] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input35 [ 487.588846][ T11] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 487.617496][T10187] netlink: 'syz.1.1198': attribute type 2 has an invalid length. [ 487.617523][T10187] netlink: 'syz.1.1198': attribute type 2 has an invalid length. [ 487.675612][ T5637] rc_core: IR keymap rc-imon-pad not found [ 487.675634][ T5637] Registered IR keymap rc-empty [ 487.675737][ T5637] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 487.675751][ T5637] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 487.735765][ T11] usb 1-1: Using ep0 maxpacket: 8 [ 487.736521][ T11] usb 1-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 487.743505][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.743532][ T11] usb 1-1: Product: syz [ 487.743548][ T11] usb 1-1: Manufacturer: syz [ 487.743562][ T11] usb 1-1: SerialNumber: syz [ 487.751669][ T11] usb 1-1: config 0 descriptor?? [ 487.790663][ T5637] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 487.794323][ T5637] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input36 [ 487.819573][ T5637] imon 5-1:0.0: iMON device (15c2:0041) on usb<5:33> initialized [ 487.886642][ T1226] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 487.966039][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 487.968050][ T5699] usb 5-1: USB disconnect, device number 33 [ 487.986673][ T11] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 488.035783][ T1226] usb 6-1: Using ep0 maxpacket: 16 [ 488.038847][ T1226] usb 6-1: New USB device found: idVendor=057e, idProduct=2019, bcdDevice=0.00 [ 488.040278][ T1226] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.040312][ T1226] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 488.040367][ T1226] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 488.040412][ T1226] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.044065][ T1226] usb 6-1: config 0 descriptor?? [ 488.175196][T10191] IPv6: Can't replace route, no match found [ 488.189059][T10191] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1200'. [ 488.425699][ T5699] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 488.576428][ T5699] usb 7-1: New USB device found: idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 488.578021][ T5699] usb 7-1: config 0 has an invalid interface number: 117 but max is 0 [ 488.578048][ T5699] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 488.578068][ T5699] usb 7-1: config 0 has no interface number 0 [ 488.578143][ T5699] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 488.578171][ T5699] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 488.578194][ T5699] usb 7-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 488.581960][ T5699] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.581989][ T5699] usb 7-1: Product: syz [ 488.582005][ T5699] usb 7-1: Manufacturer: syz [ 488.582021][ T5699] usb 7-1: SerialNumber: syz [ 488.593734][ T5699] usb 7-1: config 0 descriptor?? [ 489.266081][ T5699] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.117/input/input37 [ 489.481945][ T5699] usb 7-1: USB disconnect, device number 16 [ 489.512706][ T11] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 489.561023][ T11] usb 1-1: USB disconnect, device number 39 [ 489.828363][ T1226] usbhid 6-1:0.0: can't add hid device: -71 [ 489.828478][ T1226] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 489.848556][ T1226] usb 6-1: USB disconnect, device number 23 [ 490.254104][T10221] syzkaller0: entered promiscuous mode [ 490.254130][T10221] syzkaller0: entered allmulticast mode [ 490.271155][T10221] tc mirred: Loop (syzkaller0:egress --> syzkaller0:egress) [ 490.271193][T10221] TC_ACT_REPEAT abuse ? [ 490.355599][ T5637] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 490.515600][ T5637] usb 5-1: Using ep0 maxpacket: 32 [ 490.517481][ T5637] usb 5-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 490.518716][ T5637] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.518747][ T5637] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.518787][ T5637] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.568722][ T5637] usb 5-1: config 0 descriptor?? [ 490.580541][ T5637] hub 5-1:0.0: USB hub found [ 490.797860][ T5637] hub 5-1:0.0: 1 port detected [ 491.444548][ T5729] hub 5-1:0.0: activate --> -90 [ 491.974558][ T31] kauditd_printk_skb: 40 callbacks suppressed [ 491.974583][ T31] audit: type=1326 audit(1794399670.599:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10239 comm="syz.0.1215" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73def1c code=0x7ffc0000 [ 491.974647][ T31] audit: type=1326 audit(1794399670.599:2035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10239 comm="syz.0.1215" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73def1c code=0x7ffc0000 [ 492.044696][ T31] audit: type=1326 audit(1794399670.679:2036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10239 comm="syz.0.1215" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf73def1c code=0x7ffc0000 [ 492.077675][ T31] audit: type=1326 audit(1794399670.679:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10239 comm="syz.0.1215" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73def1c code=0x7ffc0000 [ 492.077889][ T31] audit: type=1326 audit(1794399670.709:2038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10239 comm="syz.0.1215" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73def1c code=0x7ffc0000 [ 492.167314][ T31] audit: type=1326 audit(1794399670.809:2039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10239 comm="syz.0.1215" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=428 compat=1 ip=0xf73def1c code=0x7ffc0000 [ 492.167356][ T31] audit: type=1326 audit(1794399670.809:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10239 comm="syz.0.1215" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73def1c code=0x7ffc0000 [ 492.167387][ T31] audit: type=1326 audit(1794399670.809:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10239 comm="syz.0.1215" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73def1c code=0x7ffc0000 [ 492.186973][ T31] audit: type=1326 audit(1794399670.819:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10239 comm="syz.0.1215" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=133 compat=1 ip=0xf73def1c code=0x7ffc0000 [ 492.187191][ T31] audit: type=1326 audit(1794399670.819:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10239 comm="syz.0.1215" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73def1c code=0x7ffc0000 [ 493.717560][ T25] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 493.886539][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 493.890173][ T25] usb 2-1: New USB device found: idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 493.907219][ T25] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 493.907308][ T25] usb 2-1: config 0 has no interface number 0 [ 493.907417][ T25] usb 2-1: config 0 interface 12 has no altsetting 0 [ 493.933574][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.933682][ T25] usb 2-1: Product: syz [ 493.933724][ T25] usb 2-1: Manufacturer: syz [ 493.933767][ T25] usb 2-1: SerialNumber: syz [ 493.979148][ T25] usb 2-1: config 0 descriptor?? [ 494.365816][ T5729] usb 5-1: USB disconnect, device number 34 [ 494.876178][T10270] syzkaller0: entered promiscuous mode [ 494.876243][T10270] syzkaller0: entered allmulticast mode [ 495.410153][T10272] syzkaller0: entered promiscuous mode [ 495.410172][T10272] syzkaller0: entered allmulticast mode [ 496.035722][ T11] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 496.185625][ T11] usb 5-1: Using ep0 maxpacket: 32 [ 496.186843][ T11] usb 5-1: New USB device found: idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 496.188915][ T11] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 496.188942][ T11] usb 5-1: config 0 has no interface number 0 [ 496.188986][ T11] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 496.193475][ T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.193500][ T11] usb 5-1: Product: syz [ 496.193517][ T11] usb 5-1: Manufacturer: syz [ 496.193532][ T11] usb 5-1: SerialNumber: syz [ 496.268504][ T11] usb 5-1: config 0 descriptor?? [ 496.272752][T10276] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 496.511560][T10276] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 497.115363][ T25] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 497.115421][ T25] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 497.115441][ T25] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 497.116583][ T25] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 497.159641][ T25] usb 2-1: USB disconnect, device number 30 [ 499.287304][T10321] loop5: detected capacity change from 0 to 7 [ 499.290776][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 499.290851][ C1] buffer_io_error: 4155 callbacks suppressed [ 499.290870][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 499.293815][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 499.293894][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 499.294887][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 499.294965][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 499.295233][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 499.295295][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 499.295521][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 499.295608][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 499.296650][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 499.296835][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 499.298545][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 499.298759][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 499.298909][T10321] ldm_validate_partition_table(): Disk read failed. [ 499.299340][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 499.299505][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 499.300402][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 499.300621][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 499.301994][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 499.302077][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 499.302313][T10321] Dev loop5: unable to read RDB block 0 [ 499.315423][T10321] loop5: unable to read partition table [ 499.320785][T10321] loop5: partition table beyond EOD, truncated [ 499.343340][T10321] loop_reread_partitions: partition scan of loop5 (úù) failed (rc=-5) [ 499.408899][ T11] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 499.409150][ T11] asix 5-1:0.188: probe with driver asix failed with error -71 [ 499.567646][ T11] usb 5-1: USB disconnect, device number 35 [ 499.766784][T10322] loop5: detected capacity change from 7 to 0 [ 500.383373][T10328] syzkaller0: entered promiscuous mode [ 500.383400][T10328] syzkaller0: entered allmulticast mode [ 500.418382][ C1] bridge0: received packet on macvlan2 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 500.949739][T10338] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 501.627888][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.627952][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.074252][T10352] syzkaller0: entered promiscuous mode [ 502.074271][T10352] syzkaller0: entered allmulticast mode [ 502.128886][ T5729] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 502.309270][ T5729] usb 7-1: New USB device found: idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 502.325359][ T5729] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 502.325381][ T5729] usb 7-1: config 0 has no interfaces? [ 502.325403][ T5729] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.360245][ T5729] usb 7-1: config 0 descriptor?? [ 502.678611][ T5699] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 502.838894][ T5699] usb 6-1: Using ep0 maxpacket: 8 [ 502.840313][ T5699] usb 6-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 502.840939][ T5699] usb 6-1: config 0 has no interfaces? [ 502.840974][ T5699] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.887429][ T5699] usb 6-1: config 0 descriptor?? [ 502.926316][ T5729] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 503.112873][ T5729] usb 5-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 503.160308][ T5729] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.160337][ T5729] usb 5-1: Product: syz [ 503.160352][ T5729] usb 5-1: Manufacturer: syz [ 503.160367][ T5729] usb 5-1: SerialNumber: syz [ 503.211529][ T5699] usb 6-1: USB disconnect, device number 24 [ 503.645063][ T5729] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 503.659793][ T5729] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 504.895072][ T5729] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 504.908179][ T5729] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 505.116038][ T9088] usb 7-1: USB disconnect, device number 17 [ 505.655699][ T5699] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 505.753709][ T5729] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPROTO [ 505.753771][ T5729] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 505.754579][ T5729] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 505.792015][ T5729] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 505.806401][ T5699] usb 7-1: Using ep0 maxpacket: 16 [ 505.809113][ T5699] usb 7-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 505.810924][ T5699] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.810956][ T5699] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.810979][ T5699] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 505.811023][ T5699] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.865233][ T5699] usb 7-1: config 0 descriptor?? [ 505.907592][ T5729] usb 5-1: USB disconnect, device number 36 [ 506.128686][ T5699] usbhid 7-1:0.0: can't add hid device: -71 [ 506.128765][ T5699] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 506.151630][ T5699] usb 7-1: USB disconnect, device number 18 [ 507.584932][T10409] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 508.947849][T10417] syzkaller0: entered promiscuous mode [ 508.947867][T10417] syzkaller0: entered allmulticast mode [ 509.606446][T10424] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1261'. [ 509.829366][T10426] vlan3: entered allmulticast mode [ 509.829391][T10426] bridge1: entered allmulticast mode [ 509.831661][T10424] bridge1: port 1(erspan0) entered blocking state [ 509.831752][T10424] bridge1: port 1(erspan0) entered disabled state [ 509.831847][T10424] erspan0: entered allmulticast mode [ 509.882165][T10424] erspan0: entered promiscuous mode [ 509.904299][T10424] bridge1: port 1(erspan0) entered blocking state [ 509.904434][T10424] bridge1: port 1(erspan0) entered forwarding state [ 510.013670][T10424] erspan0: left allmulticast mode [ 510.013697][T10424] erspan0: left promiscuous mode [ 510.016197][T10424] bridge1: port 1(erspan0) entered disabled state [ 510.059419][T10424] bridge_slave_0: left allmulticast mode [ 510.059448][T10424] bridge_slave_0: left promiscuous mode [ 510.060943][T10424] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.136047][T10424] bridge_slave_1: left allmulticast mode [ 510.136067][T10424] bridge_slave_1: left promiscuous mode [ 510.136193][T10424] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.204115][T10424] bond0: (slave bond_slave_0): Releasing backup interface [ 510.227162][ T25] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 510.266889][T10424] bond0: (slave bond_slave_1): Releasing backup interface [ 510.320725][T10424] team0: Port device team_slave_0 removed [ 510.348992][T10424] team0: Port device team_slave_1 removed [ 510.349653][T10424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 510.353267][T10424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 510.393233][T10424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 510.393262][T10424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 510.395649][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 510.417600][ T25] usb 6-1: New USB device found: idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 510.433146][ T25] usb 6-1: config 0 has an invalid interface number: 48 but max is 0 [ 510.433222][ T25] usb 6-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 510.433277][ T25] usb 6-1: config 0 has no interface number 0 [ 510.433354][ T25] usb 6-1: too many endpoints for config 0 interface 48 altsetting 120: 48, using maximum allowed: 30 [ 510.433454][ T25] usb 6-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 510.433535][ T25] usb 6-1: config 0 interface 48 has no altsetting 0 [ 510.509023][T10424] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 510.528975][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.528997][ T25] usb 6-1: Product: syz [ 510.529007][ T25] usb 6-1: Manufacturer: syz [ 510.529017][ T25] usb 6-1: SerialNumber: syz [ 510.576090][ T25] usb 6-1: config 0 descriptor?? [ 510.581055][T10442] netlink: 'syz.1.1265': attribute type 17 has an invalid length. [ 510.581076][T10442] netlink: 'syz.1.1265': attribute type 16 has an invalid length. [ 510.581087][T10442] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1265'. [ 510.666150][T10437] tipc: Started in network mode [ 510.666184][T10437] tipc: Node identity 76657468115f, cluster identity 4711 [ 510.666359][T10437] tipc: Enabled bearer , priority 0 [ 510.670352][T10441] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 510.670372][T10441] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 510.754783][T10444] tipc: Resetting bearer [ 510.942075][ T25] sr9700 6-1:0.48: probe with driver sr9700 failed with error -22 [ 510.971146][ T25] usb 6-1: USB disconnect, device number 25 [ 511.242171][T10448] bridge0: port 1(macvlan2) entered disabled state [ 511.387309][ T9088] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 511.539222][ T9088] usb 5-1: Using ep0 maxpacket: 16 [ 511.541812][ T9088] usb 5-1: New USB device found: idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 511.545251][ T9088] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 511.545284][ T9088] usb 5-1: config 0 interface 0 has no altsetting 0 [ 511.588500][ T9088] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.588531][ T9088] usb 5-1: Product: syz [ 511.588547][ T9088] usb 5-1: Manufacturer: syz [ 511.588562][ T9088] usb 5-1: SerialNumber: syz [ 511.620343][ T9088] usb 5-1: config 0 descriptor?? [ 511.952034][T10448] syz_tun: left allmulticast mode [ 512.365427][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 512.381432][ T5700] tipc: Node number set to 1731884136 [ 512.414862][ T9088] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input38 [ 512.471998][ T9088] imon:send_packet: packet tx failed (-71) [ 512.485813][ T9088] imon 5-1:0.0: panel buttons/knobs setup failed [ 512.707746][ T9088] rc_core: IR keymap rc-imon-pad not found [ 512.707761][ T9088] Registered IR keymap rc-empty [ 512.707818][ T9088] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 512.707832][ T9088] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 512.709246][ T9088] imon:send_packet: packet tx failed (-71) [ 512.747948][ T9088] imon 5-1:0.0: remote input dev register failed [ 512.748592][ T9088] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 512.946790][ T9088] imon 5-1:0.0: unable to initialize intf0, err 0 [ 512.989141][ T9088] usb 5-1: USB disconnect, device number 37 [ 513.478796][ T9088] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 513.627731][ T9088] usb 5-1: New USB device found: idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 513.629193][ T9088] usb 5-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 513.629226][ T9088] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 513.629255][ T9088] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 513.633287][ T9088] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 513.633305][ T9088] usb 5-1: Manufacturer: syz [ 513.633316][ T9088] usb 5-1: SerialNumber: syz [ 513.979898][ T9088] yealink 5-1:36.0: invalid payload size 0, expected 16 [ 513.995098][ T9088] input: Yealink usb-p1k as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:36.0/input/input40 [ 514.022276][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 514.022511][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 514.022708][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 514.022944][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 514.023169][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 514.023394][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 514.023602][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 514.023809][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 514.023825][ C1] yealink 5-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 514.098140][ T9088] usb 5-1: USB disconnect, device number 38 [ 514.515666][ T9088] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 514.666908][ T9088] usb 5-1: New USB device found: idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 514.668377][ T9088] usb 5-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 514.668441][ T9088] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 514.668466][ T9088] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 514.672152][ T9088] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 514.672171][ T9088] usb 5-1: Manufacturer: syz [ 514.672182][ T9088] usb 5-1: SerialNumber: syz [ 514.979109][ T9088] yealink 5-1:36.0: invalid payload size 0, expected 16 [ 514.995418][ T9088] input: Yealink usb-p1k as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:36.0/input/input41 [ 516.340967][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 516.341184][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 516.341411][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 516.341632][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 516.341692][ T1226] usb 5-1: USB disconnect, device number 39 [ 516.341845][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 516.341868][ C1] yealink 5-1:36.0: urb_ctl_callback - usb_submit_urb failed -19 [ 516.795764][T10503] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1278'. [ 516.831079][T10504] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1277'. [ 517.028606][T10507] tipc: Enabled bearer , priority 0 [ 517.032009][T10507] syzkaller0: entered promiscuous mode [ 517.032029][T10507] syzkaller0: entered allmulticast mode [ 517.102665][T10507] tipc: Resetting bearer [ 517.111921][T10506] tipc: Resetting bearer [ 517.134805][T10506] tipc: Disabling bearer [ 517.425690][ T9088] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 517.497646][ T30] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 517.585639][ T25] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 517.585796][ T9088] usb 1-1: Using ep0 maxpacket: 16 [ 517.586922][ T9088] usb 1-1: New USB device found: idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 517.588747][ T9088] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 517.588779][ T9088] usb 1-1: config 0 interface 0 has no altsetting 0 [ 517.591641][ T9088] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.591664][ T9088] usb 1-1: Product: syz [ 517.591694][ T9088] usb 1-1: Manufacturer: syz [ 517.591707][ T9088] usb 1-1: SerialNumber: syz [ 517.660970][ T9088] usb 1-1: config 0 descriptor?? [ 517.685860][ T30] usb 7-1: Using ep0 maxpacket: 16 [ 517.686776][ T30] usb 7-1: New USB device found: idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 517.688480][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.693223][ T30] usb 7-1: config 0 descriptor?? [ 517.728466][ T30] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 517.735588][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 517.749079][ T25] usb 5-1: New USB device found: idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 517.750530][ T25] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 517.750611][ T25] usb 5-1: config 0 interface 0 has no altsetting 0 [ 517.784578][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.784608][ T25] usb 5-1: Product: syz [ 517.784655][ T25] usb 5-1: Manufacturer: syz [ 517.784672][ T25] usb 5-1: SerialNumber: syz [ 517.816738][ T25] usb 5-1: config 0 descriptor?? [ 517.884700][ C1] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 517.902311][ T9088] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input42 [ 517.928836][ T9088] imon:send_packet: packet tx failed (-71) [ 517.945973][ T9088] imon 1-1:0.0: panel buttons/knobs setup failed [ 518.026581][ T9088] rc_core: IR keymap rc-imon-pad not found [ 518.026600][ T9088] Registered IR keymap rc-empty [ 518.026706][ T9088] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 518.026725][ T9088] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 518.032253][ T9088] imon:send_packet: packet tx failed (-71) [ 518.046534][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 518.056051][ T9088] imon 1-1:0.0: remote input dev register failed [ 518.056740][ T9088] imon 1-1:0.0: imon_init_intf0: rc device setup failed [ 518.114819][ T25] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input44 [ 518.155315][ T25] imon:send_packet: packet tx failed (-71) [ 518.167612][ T25] imon 5-1:0.0: panel buttons/knobs setup failed [ 518.173845][ T9088] imon 1-1:0.0: unable to initialize intf0, err 0 [ 518.193508][ T9088] usb 1-1: USB disconnect, device number 40 [ 518.365715][ T25] rc_core: IR keymap rc-imon-pad not found [ 518.365739][ T25] Registered IR keymap rc-empty [ 518.365820][ T25] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 518.365834][ T25] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 518.366199][ T25] imon:send_packet: packet tx failed (-71) [ 518.396050][ T25] imon 5-1:0.0: remote input dev register failed [ 518.410259][ T25] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 518.477197][ T25] imon 5-1:0.0: unable to initialize intf0, err 0 [ 518.501050][ T25] usb 5-1: USB disconnect, device number 40 [ 518.785593][ T1226] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 518.935824][T10530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.936278][ T1226] usb 1-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 518.939189][ T1226] usb 1-1: config 0 interface 0 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 61 [ 518.939220][ T1226] usb 1-1: config 0 interface 0 has no altsetting 0 [ 518.943347][ T1226] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 518.943375][ T1226] usb 1-1: Product: syz [ 518.943386][ T1226] usb 1-1: Manufacturer: syz [ 518.943420][ T1226] usb 1-1: SerialNumber: syz [ 519.007390][ T1226] usb 1-1: config 0 descriptor?? [ 519.010270][T10523] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 519.037503][ T1226] usb 1-1: selecting invalid altsetting 0 [ 519.210172][T10530] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 519.246518][T10523] usb 1-1: BOGUS urb xfer, pipe 0 != type 3 [ 519.407357][T10532] loop5: detected capacity change from 0 to 7 [ 519.414730][T10532] Dev loop5: unable to read RDB block 7 [ 519.414772][T10532] loop5: AHDI p1 p2 p3 [ 519.414797][T10532] loop5: partition table partially beyond EOD, truncated [ 519.415029][T10532] loop5: p1 start 5472580 is beyond EOD, truncated [ 519.415049][T10532] loop5: p2 start 167772160 is beyond EOD, truncated [ 520.006895][ T5699] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 520.169874][ T5699] usb 2-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 520.172327][ T5699] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 520.172361][ T5699] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 520.172402][ T5699] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.219667][T10535] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 520.235896][ T5699] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 520.425056][ T30] gspca_sonixj: reg_w1 err -71 [ 520.425114][ T30] sonixj 7-1:0.0: probe with driver sonixj failed with error -71 [ 520.470422][ T30] usb 7-1: USB disconnect, device number 19 [ 520.801593][ T992] usb 2-1: USB disconnect, device number 31 [ 520.980961][T10551] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1294'. [ 521.105006][ T5699] usb 1-1: USB disconnect, device number 41 [ 521.885872][T10560] tipc: Enabling of bearer rejected, already enabled [ 521.965795][ T30] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 522.116853][ T30] usb 2-1: Using ep0 maxpacket: 16 [ 522.119004][ T30] usb 2-1: New USB device found: idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 522.120064][ T30] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 522.120084][ T30] usb 2-1: config 0 interface 0 has no altsetting 0 [ 522.136749][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.136824][ T30] usb 2-1: Product: syz [ 522.136867][ T30] usb 2-1: Manufacturer: syz [ 522.136903][ T30] usb 2-1: SerialNumber: syz [ 522.181153][ T30] usb 2-1: config 0 descriptor?? [ 522.459808][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 522.550908][ T30] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input46 [ 522.613380][ T30] imon:send_packet: packet tx failed (-71) [ 522.625672][ T30] imon 2-1:0.0: panel buttons/knobs setup failed [ 522.855576][ T30] rc_core: IR keymap rc-imon-pad not found [ 522.855598][ T30] Registered IR keymap rc-empty [ 522.855695][ T30] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 522.855745][ T30] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 522.864460][ T30] imon:send_packet: packet tx failed (-71) [ 522.879581][ T30] imon 2-1:0.0: remote input dev register failed [ 522.880057][ T30] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 522.980404][ T30] imon 2-1:0.0: unable to initialize intf0, err 0 [ 523.013019][ T30] usb 2-1: USB disconnect, device number 32 [ 523.372702][T10581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1302'. [ 523.608036][T10562] vlan2: left promiscuous mode [ 523.608054][T10562] macvlan0: left promiscuous mode [ 523.653901][T10562] vlan3: left allmulticast mode [ 523.653921][T10562] bridge1: left allmulticast mode [ 523.689980][ T51] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.690529][ T13] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.690571][ T13] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.711760][ T51] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.964609][T10581] macvtap1: entered promiscuous mode [ 523.964633][T10581] bridge0: entered promiscuous mode [ 523.979284][T10581] macvtap1: entered allmulticast mode [ 523.979432][T10581] bridge0: entered allmulticast mode [ 524.058076][T10586] bridge0: left allmulticast mode [ 524.058105][T10586] bridge0: left promiscuous mode [ 524.059553][T10586] macvtap1: left promiscuous mode [ 524.059575][T10586] macvtap1: left allmulticast mode [ 524.170379][T10589] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1303'. [ 524.172082][T10589] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1303'. [ 524.645598][ T11] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 524.795584][ T11] usb 5-1: Using ep0 maxpacket: 16 [ 524.804575][ T11] usb 5-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 524.818581][ T11] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 524.818614][ T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 524.837397][ T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.837424][ T11] usb 5-1: Product: syz [ 524.837439][ T11] usb 5-1: Manufacturer: syz [ 524.837453][ T11] usb 5-1: SerialNumber: syz [ 524.874438][ T11] usb 5-1: config 0 descriptor?? [ 524.893347][ T11] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 524.893383][ T11] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 524.910983][T10604] netlink: 'syz.6.1309': attribute type 1 has an invalid length. [ 524.974466][T10607] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1309'. [ 525.005613][ T5699] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 525.054299][T10604] bond1: entered promiscuous mode [ 525.054766][T10604] 8021q: adding VLAN 0 to HW filter on device bond1 [ 525.072889][T10607] bond1: entered allmulticast mode [ 525.165606][ T5699] usb 1-1: Using ep0 maxpacket: 16 [ 525.167978][ T5699] usb 1-1: New USB device found: idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 525.170536][ T5699] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 525.170576][ T5699] usb 1-1: config 0 interface 0 has no altsetting 0 [ 525.208700][ T5699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.208720][ T5699] usb 1-1: Product: syz [ 525.208730][ T5699] usb 1-1: Manufacturer: syz [ 525.208740][ T5699] usb 1-1: SerialNumber: syz [ 525.244207][ T5699] usb 1-1: config 0 descriptor?? [ 525.331671][T10610] bond1: (slave bridge3): making interface the new active one [ 525.331696][T10610] bridge3: entered promiscuous mode [ 525.331858][T10610] bridge3: entered allmulticast mode [ 525.359786][T10610] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 525.503740][ T5699] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input48 [ 525.544649][ T11] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 525.556421][ T11] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 525.686157][T10615] tipc: Enabled bearer , priority 0 [ 525.688667][T10615] syzkaller0: entered promiscuous mode [ 525.688683][T10615] syzkaller0: entered allmulticast mode [ 525.725358][T10615] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 525.877095][T10614] tipc: Resetting bearer [ 525.934282][ T5699] rc_core: IR keymap rc-imon-pad not found [ 525.934299][ T5699] Registered IR keymap rc-empty [ 525.934357][ T5699] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 525.934402][ T5699] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 525.981898][T10614] tipc: Disabling bearer [ 525.993077][ T5699] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 526.026188][ T5699] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input49 [ 526.084082][ T5699] imon 1-1:0.0: iMON device (15c2:0041) on usb<1:42> initialized [ 526.178969][ T11] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 526.179736][ T11] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 526.180413][ T11] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 526.209137][ T11] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 526.209858][ T11] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 526.297425][ C0] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 526.298510][ T9088] usb 1-1: USB disconnect, device number 42 [ 526.630649][ T31] kauditd_printk_skb: 29 callbacks suppressed [ 526.630669][ T31] audit: type=1804 audit(1794399705.269:2073): pid=10622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1313" name="bus" dev="ramfs" ino=40293 res=1 errno=0 [ 526.662581][ T11] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 526.672408][ T31] audit: type=1804 audit(1794399705.279:2074): pid=10622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1313" name="bus" dev="ramfs" ino=40293 res=1 errno=0 [ 526.699863][ T5699] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 526.700040][ T11] usb 5-1: USB disconnect, device number 41 [ 526.867231][ T5699] usb 7-1: Using ep0 maxpacket: 16 [ 526.870793][ T5699] usb 7-1: New USB device found: idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 526.872296][ T5699] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 526.872330][ T5699] usb 7-1: config 0 interface 0 has no altsetting 0 [ 526.881516][ T5699] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.881541][ T5699] usb 7-1: Product: syz [ 526.881555][ T5699] usb 7-1: Manufacturer: syz [ 526.881571][ T5699] usb 7-1: SerialNumber: syz [ 526.944857][ T5699] usb 7-1: config 0 descriptor?? [ 527.195879][ T5699] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input50 [ 527.523995][T10630] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1316'. [ 527.617373][ T5699] rc_core: IR keymap rc-imon-pad not found [ 527.617388][ T5699] Registered IR keymap rc-empty [ 527.617454][ T5699] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 527.617600][ T5699] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 527.638286][ T5699] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 527.683811][ T5699] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input51 [ 527.698329][ T5699] imon 7-1:0.0: iMON device (15c2:0041) on usb<7:20> initialized [ 527.823676][ C0] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 527.824249][ T5699] usb 7-1: USB disconnect, device number 20 [ 528.524136][T10647] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1320'. [ 528.958320][T10652] tipc: Enabled bearer , priority 0 [ 528.960520][T10652] syzkaller0: entered promiscuous mode [ 528.960537][T10652] syzkaller0: entered allmulticast mode [ 528.980079][T10652] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 529.082600][T10651] tipc: Resetting bearer [ 529.236960][T10651] tipc: Disabling bearer [ 529.327984][T10656] syzkaller0: entered promiscuous mode [ 529.328003][T10656] syzkaller0: entered allmulticast mode [ 529.402017][T10656] TC_ACT_REPEAT abuse ? [ 531.447758][ T992] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 531.595628][ T992] usb 2-1: Using ep0 maxpacket: 16 [ 531.596492][ T992] usb 2-1: New USB device found: idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 531.599249][ T992] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 531.599271][ T992] usb 2-1: config 0 interface 0 has no altsetting 0 [ 531.641282][ T992] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.641311][ T992] usb 2-1: Product: syz [ 531.641326][ T992] usb 2-1: Manufacturer: syz [ 531.641361][ T992] usb 2-1: SerialNumber: syz [ 531.668265][ T992] usb 2-1: config 0 descriptor?? [ 531.924812][ T992] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input52 [ 532.296687][ T992] rc_core: IR keymap rc-imon-pad not found [ 532.296703][ T992] Registered IR keymap rc-empty [ 532.296778][ T992] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 532.296790][ T992] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 532.354381][ T992] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 532.371252][ T992] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input53 [ 532.387135][ T992] imon 2-1:0.0: iMON device (15c2:0041) on usb<2:33> initialized [ 532.481680][T10697] syzkaller0: entered promiscuous mode [ 532.481704][T10697] syzkaller0: entered allmulticast mode [ 532.528927][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 532.529541][ T992] usb 2-1: USB disconnect, device number 33 [ 532.667043][ T11] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 532.838800][ T11] usb 7-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 532.842413][ T11] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 532.842458][ T11] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.845160][ T11] usb 7-1: config 0 descriptor?? [ 532.894866][ T11] pwc: Askey VC010 type 2 USB webcam detected. [ 532.995393][T10703] tipc: Enabled bearer , priority 0 [ 533.009565][T10703] syzkaller0: entered promiscuous mode [ 533.009585][T10703] syzkaller0: entered allmulticast mode [ 533.034081][T10703] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 533.082904][ T11] pwc: send_video_command error -71 [ 533.083010][ T11] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 533.083133][ T11] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 533.103656][ T11] usb 7-1: USB disconnect, device number 21 [ 533.177625][T10702] tipc: Resetting bearer [ 533.259459][T10702] tipc: Disabling bearer [ 533.605558][ T11] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 533.768082][ T11] usb 7-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 533.772805][ T11] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 533.772876][ T11] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.797381][ T11] usb 7-1: config 0 descriptor?? [ 533.824877][ T11] pwc: Askey VC010 type 2 USB webcam detected. [ 534.213595][ T11] pwc: recv_control_msg error -32 req 02 val 2b00 [ 534.214195][ T11] pwc: recv_control_msg error -32 req 02 val 2700 [ 534.221379][ T11] pwc: recv_control_msg error -32 req 02 val 2c00 [ 534.245954][ T11] pwc: recv_control_msg error -32 req 04 val 1000 [ 534.248430][ T11] pwc: recv_control_msg error -32 req 04 val 1300 [ 534.250894][ T11] pwc: recv_control_msg error -32 req 04 val 1400 [ 534.253852][ T11] pwc: recv_control_msg error -32 req 02 val 2000 [ 534.266905][ T11] pwc: recv_control_msg error -32 req 02 val 2100 [ 534.287553][ T11] pwc: recv_control_msg error -32 req 04 val 1500 [ 534.303152][ T11] pwc: recv_control_msg error -32 req 02 val 2500 [ 534.314926][ T11] pwc: recv_control_msg error -32 req 02 val 2400 [ 534.527128][ T11] pwc: recv_control_msg error -71 req 02 val 2900 [ 534.531782][ T11] pwc: recv_control_msg error -71 req 02 val 2800 [ 534.532407][ T11] pwc: recv_control_msg error -71 req 04 val 1100 [ 534.534342][ T11] pwc: recv_control_msg error -71 req 04 val 1200 [ 534.544941][ T11] pwc: Registered as video103. [ 534.591709][ T11] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input54 [ 534.657297][ T11] usb 7-1: USB disconnect, device number 22 [ 535.321664][T10730] tipc: Enabled bearer , priority 0 [ 535.325294][T10730] syzkaller0: entered promiscuous mode [ 535.325318][T10730] syzkaller0: entered allmulticast mode [ 535.348669][T10730] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 535.437184][T10730] tipc: Resetting bearer [ 535.443941][T10729] tipc: Resetting bearer [ 535.602296][T10729] tipc: Disabling bearer [ 536.055633][ T992] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 536.095787][ T11] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 536.205557][ T992] usb 6-1: Using ep0 maxpacket: 32 [ 536.206335][ T992] usb 6-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 536.207603][ T992] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 536.207637][ T992] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 536.207656][ T992] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 536.207675][ T992] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 536.210010][ T992] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.210043][ T992] usb 6-1: Product: syz [ 536.210053][ T992] usb 6-1: Manufacturer: syz [ 536.210064][ T992] usb 6-1: SerialNumber: syz [ 536.246701][ T11] usb 7-1: Using ep0 maxpacket: 16 [ 536.280837][ T11] usb 7-1: New USB device found: idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 536.325524][ C1] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 536.330845][ T11] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 536.330878][ T11] usb 7-1: config 0 interface 0 has no altsetting 0 [ 536.330974][ T992] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input55 [ 536.347072][ T11] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.347166][ T11] usb 7-1: Product: syz [ 536.347216][ T11] usb 7-1: Manufacturer: syz [ 536.347258][ T11] usb 7-1: SerialNumber: syz [ 536.418684][ T11] usb 7-1: config 0 descriptor?? [ 536.555603][ T992] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 536.555625][ T992] (id 0x00) [ 536.671861][ T11] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input57 [ 536.687595][ T992] rc_core: IR keymap rc-imon-pad not found [ 536.687612][ T992] Registered IR keymap rc-empty [ 536.687976][ T992] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 536.688568][ T992] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 536.769515][ T992] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0 [ 536.790267][ T992] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0/input56 [ 536.809588][ T992] imon 6-1:155.0: iMON device (15c2:ffdc) on usb<6:26> initialized [ 536.935817][T10749] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1352'. [ 537.145614][ T11] rc_core: IR keymap rc-imon-pad not found [ 537.145633][ T11] Registered IR keymap rc-empty [ 537.145738][ T11] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 537.145757][ T11] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 537.189583][ T11] rc rc1: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc1 [ 537.198306][ T11] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc1/input58 [ 537.224308][ T11] imon 7-1:0.0: iMON device (15c2:0041) on usb<7:23> initialized [ 537.315629][ T992] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 537.359849][ C0] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 537.362477][ T9088] usb 7-1: USB disconnect, device number 23 [ 537.468932][ T992] usb 2-1: Using ep0 maxpacket: 16 [ 537.471251][ T992] usb 2-1: New USB device found: idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 537.492417][ T992] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 537.492451][ T992] usb 2-1: config 0 interface 0 has no altsetting 0 [ 537.517574][ T992] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.517601][ T992] usb 2-1: Product: syz [ 537.517615][ T992] usb 2-1: Manufacturer: syz [ 537.517628][ T992] usb 2-1: SerialNumber: syz [ 537.523075][ T992] usb 2-1: config 0 descriptor?? [ 537.764400][ T992] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input59 [ 537.938575][ T30] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 538.115729][ T30] usb 1-1: Using ep0 maxpacket: 8 [ 538.116527][ T30] usb 1-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 538.117338][ T30] usb 1-1: config 0 has no interfaces? [ 538.117372][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.123638][ T30] usb 1-1: config 0 descriptor?? [ 538.196182][ T992] rc_core: IR keymap rc-imon-pad not found [ 538.196230][ T992] Registered IR keymap rc-empty [ 538.196330][ T992] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 538.196348][ T992] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 538.241955][ T992] rc rc1: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1 [ 538.256016][ T992] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1/input60 [ 538.270125][ T992] imon 2-1:0.0: iMON device (15c2:0041) on usb<2:34> initialized [ 538.317123][ T5699] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 538.439103][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 538.439788][ T992] usb 2-1: USB disconnect, device number 34 [ 538.501284][ T5699] usb 7-1: New USB device found: idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 538.511862][ T5699] usb 7-1: config 0 has an invalid interface number: 251 but max is 0 [ 538.511943][ T5699] usb 7-1: config 0 has no interface number 0 [ 538.522843][ T5699] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.522917][ T5699] usb 7-1: Product: syz [ 538.522960][ T5699] usb 7-1: Manufacturer: syz [ 538.522999][ T5699] usb 7-1: SerialNumber: syz [ 538.563374][ T5699] usb 7-1: config 0 descriptor?? [ 538.884570][T10771] imon:send_packet: task interrupted [ 538.884592][T10771] imon:send_packet: packet tx failed (-512) [ 538.884974][T10771] imon:vfd_write: send packet #5 failed [ 538.922997][ T992] usb 6-1: USB disconnect, device number 26 [ 540.129518][ T11] usb 1-1: USB disconnect, device number 43 [ 540.349213][ T31] audit: type=1326 audit(1794399718.989:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10778 comm="syz.1.1359" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4f1c code=0x7ffc0000 [ 540.350169][ T31] audit: type=1326 audit(1794399718.989:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10778 comm="syz.1.1359" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4f1c code=0x7ffc0000 [ 540.355030][ T31] audit: type=1326 audit(1794399718.989:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10778 comm="syz.1.1359" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7ff4f1c code=0x7ffc0000 [ 540.435314][ T31] audit: type=1326 audit(1794399719.069:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10778 comm="syz.1.1359" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4f1c code=0x7ffc0000 [ 540.463752][ T31] audit: type=1326 audit(1794399719.099:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10778 comm="syz.1.1359" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=470 compat=1 ip=0xf7ff4f1c code=0x7ffc0000 [ 540.464512][ T31] audit: type=1326 audit(1794399719.099:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10778 comm="syz.1.1359" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4f1c code=0x7ffc0000 [ 540.465239][ T31] audit: type=1326 audit(1794399719.099:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10778 comm="syz.1.1359" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4f1c code=0x7ffc0000 [ 540.489115][ T31] audit: type=1326 audit(1794399719.129:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10778 comm="syz.1.1359" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7ff4f1c code=0x7ffc0000 [ 540.503513][ T31] audit: type=1326 audit(1794399719.139:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10778 comm="syz.1.1359" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4f1c code=0x7ffc0000 [ 540.516538][ T31] audit: type=1326 audit(1794399719.149:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10778 comm="syz.1.1359" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4f1c code=0x7ffc0000 [ 541.300347][ T5699] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 541.300371][ T5699] asix 7-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 541.300690][ T5699] asix 7-1:0.251: probe with driver asix failed with error -71 [ 541.356883][ T5699] usb 7-1: USB disconnect, device number 24 [ 541.995868][ T5699] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 542.143600][T10802] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1364'. [ 542.146217][ T5699] usb 2-1: Using ep0 maxpacket: 16 [ 542.148171][ T5699] usb 2-1: New USB device found: idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 542.152550][ T5699] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 542.152624][ T5699] usb 2-1: config 0 interface 0 has no altsetting 0 [ 542.207763][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.207784][ T5699] usb 2-1: Product: syz [ 542.207794][ T5699] usb 2-1: Manufacturer: syz [ 542.207805][ T5699] usb 2-1: SerialNumber: syz [ 542.215089][ T5699] usb 2-1: config 0 descriptor?? [ 542.264118][T10803] netlink: 'syz.6.1364': attribute type 10 has an invalid length. [ 542.472144][ T5699] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input61 [ 542.535873][T10805] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1365'. [ 542.750993][T10790] bridge0: port 2(syz_tun) entered disabled state [ 542.807601][T10790] bridge0: port 4(ip6gretap0) entered disabled state [ 542.825590][ T5699] rc_core: IR keymap rc-imon-pad not found [ 542.825610][ T5699] Registered IR keymap rc-empty [ 542.825717][ T5699] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 542.825736][ T5699] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 542.887184][ T5699] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 542.894081][ T5699] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input62 [ 542.920262][ T5699] imon 2-1:0.0: iMON device (15c2:0041) on usb<2:35> initialized [ 542.986406][ T9088] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 543.145721][ T9088] usb 5-1: Using ep0 maxpacket: 16 [ 543.146669][ T9088] usb 5-1: New USB device found: idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 543.149138][ T9088] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 543.149170][ T9088] usb 5-1: config 0 interface 0 has no altsetting 0 [ 543.154500][ T9088] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.154526][ T9088] usb 5-1: Product: syz [ 543.154571][ T9088] usb 5-1: Manufacturer: syz [ 543.154586][ T9088] usb 5-1: SerialNumber: syz [ 543.231271][ T9088] usb 5-1: config 0 descriptor?? [ 543.458065][ T9088] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input63 [ 543.805668][ T9088] rc_core: IR keymap rc-imon-pad not found [ 543.805687][ T9088] Registered IR keymap rc-empty [ 543.805801][ T9088] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 543.805820][ T9088] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 543.867028][ T9088] rc rc1: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1 [ 543.887524][ T9088] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1/input64 [ 543.907124][ T9088] imon 5-1:0.0: iMON device (15c2:0041) on usb<5:42> initialized [ 546.177600][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 546.178581][T10584] usb 2-1: USB disconnect, device number 35 [ 546.359592][T10828] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1368'. [ 546.384799][T10803] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 546.401759][T10803] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 546.492442][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 546.492857][ T992] usb 5-1: USB disconnect, device number 42 [ 547.175753][ T992] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 547.335846][ T992] usb 2-1: Using ep0 maxpacket: 8 [ 547.340307][ T992] usb 2-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 547.340793][ T992] usb 2-1: config 0 has no interfaces? [ 547.340816][ T992] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.380055][ T992] usb 2-1: config 0 descriptor?? [ 547.894107][ T992] usb 2-1: USB disconnect, device number 36 [ 548.774631][ T31] kauditd_printk_skb: 27 callbacks suppressed [ 548.774652][ T31] audit: type=1326 audit(1794399727.409:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10854 comm="syz.1.1376" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff4f1c code=0x0 [ 549.642374][ T31] audit: type=1800 audit(1794399728.279:2113): pid=10834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1369" name="bus" dev="ramfs" ino=40615 res=0 errno=-4 [ 549.897244][T10864] tipc: Enabled bearer , priority 0 [ 549.901396][T10864] syzkaller0: entered promiscuous mode [ 549.901412][T10864] syzkaller0: entered allmulticast mode [ 549.965912][T10864] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 549.997054][T10864] tipc: Resetting bearer [ 550.021388][T10863] tipc: Resetting bearer [ 550.068169][T10863] tipc: Disabling bearer [ 550.315514][T10870] syzkaller0: entered promiscuous mode [ 550.315538][T10870] syzkaller0: entered allmulticast mode [ 551.587237][ T31] audit: type=1804 audit(1794399730.229:2114): pid=10895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1389" name="bus" dev="ramfs" ino=40779 res=1 errno=0 [ 551.638767][ T31] audit: type=1804 audit(1794399730.279:2115): pid=10895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1389" name="bus" dev="ramfs" ino=40779 res=1 errno=0 [ 551.785742][T10822] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 551.937760][T10822] usb 5-1: Using ep0 maxpacket: 8 [ 551.954152][T10822] usb 5-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 551.954919][T10822] usb 5-1: config 0 has no interfaces? [ 551.954945][T10822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.998713][T10822] usb 5-1: config 0 descriptor?? [ 552.410302][T10822] usb 5-1: USB disconnect, device number 43 [ 552.615757][ T30] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 552.705562][T10821] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 552.767819][ T30] usb 6-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 552.780185][ T30] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 552.780226][ T30] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 552.780256][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.783765][ T30] usb 6-1: config 0 descriptor?? [ 552.830846][ T30] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 552.859644][T10821] usb 2-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 552.862058][T10821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.889369][T10821] usb 2-1: config 0 descriptor?? [ 553.073356][T10906] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1393'. [ 553.144311][T10823] usb 6-1: USB disconnect, device number 27 [ 553.368777][T10821] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 553.373656][T10821] [drm:udl_init] *ERROR* Selecting channel failed [ 553.495385][T10821] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 553.495407][T10821] [drm] Initialized udl on minor 1 [ 553.589783][T10821] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 553.622302][T10821] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 553.632321][ T30] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 553.666894][T10821] usb 2-1: USB disconnect, device number 37 [ 553.809869][ T30] usb 6-1: New USB device found: idVendor=0ccd, idProduct=0080, bcdDevice=1.00 [ 553.811234][ T30] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 553.811293][ T30] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 34, changing to 9 [ 553.811333][ T30] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 553.813374][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.813392][ T30] usb 6-1: Product: syz [ 553.813402][ T30] usb 6-1: Manufacturer: syz [ 553.813412][ T30] usb 6-1: SerialNumber: syz [ 553.947355][T10919] tipc: Enabled bearer , priority 0 [ 553.948212][T10919] syzkaller0: entered promiscuous mode [ 553.948233][T10919] syzkaller0: entered allmulticast mode [ 554.000072][T10919] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 554.104456][T10921] tipc: Resetting bearer [ 554.153222][T10917] tipc: Resetting bearer [ 554.229187][T10917] tipc: Disabling bearer [ 554.300810][ T30] snd-usb-6fire 6-1:1.0: can't set first interface. [ 554.300843][ T30] snd-usb-6fire 6-1:1.0: probe with driver snd-usb-6fire failed with error -5 [ 554.304788][ T30] usb 6-1: USB disconnect, device number 28 [ 554.455585][T10584] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 554.502797][T10932] create_pit_timer: 17 callbacks suppressed [ 554.502818][T10932] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 554.539802][T10932] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 554.606402][T10584] usb 1-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 554.609176][T10584] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 554.609228][T10584] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.646494][T10584] usb 1-1: config 0 descriptor?? [ 554.661689][T10584] pwc: Askey VC010 type 2 USB webcam detected. [ 554.842032][ T31] audit: type=1804 audit(1794399733.479:2116): pid=10941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1402" name="bus" dev="ramfs" ino=41384 res=1 errno=0 [ 554.865971][ T31] audit: type=1804 audit(1794399733.479:2117): pid=10941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.1402" name="bus" dev="ramfs" ino=41384 res=1 errno=0 [ 554.921463][T10943] netlink: 'syz.4.1403': attribute type 1 has an invalid length. [ 555.063520][T10943] bond2: entered promiscuous mode [ 555.072929][T10943] 8021q: adding VLAN 0 to HW filter on device bond2 [ 555.121536][T10584] pwc: recv_control_msg error -32 req 02 val 2b00 [ 555.132278][T10584] pwc: recv_control_msg error -32 req 02 val 2700 [ 555.139788][T10584] pwc: recv_control_msg error -32 req 02 val 2c00 [ 555.154993][T10584] pwc: recv_control_msg error -32 req 04 val 1000 [ 555.162776][T10584] pwc: recv_control_msg error -32 req 04 val 1300 [ 555.172948][T10584] pwc: recv_control_msg error -32 req 04 val 1400 [ 555.175350][T10584] pwc: recv_control_msg error -32 req 02 val 2000 [ 555.191760][T10584] pwc: recv_control_msg error -32 req 02 val 2100 [ 555.207092][T10584] pwc: recv_control_msg error -32 req 04 val 1500 [ 555.208978][T10584] pwc: recv_control_msg error -32 req 02 val 2500 [ 555.210855][T10584] pwc: recv_control_msg error -32 req 02 val 2400 [ 555.229534][T10946] macvtap1: entered allmulticast mode [ 555.247049][T10584] pwc: recv_control_msg error -32 req 02 val 2600 [ 555.268488][T10584] pwc: recv_control_msg error -32 req 02 val 2900 [ 555.292795][T10948] netlink: 1996 bytes leftover after parsing attributes in process `syz.5.1404'. [ 555.349930][T10943] macvtap2: entered allmulticast mode [ 555.471339][T10946] bond2: (slave bridge3): making interface the new active one [ 555.471365][T10946] bridge3: entered promiscuous mode [ 555.489831][T10584] pwc: recv_control_msg error -71 req 04 val 1100 [ 555.490416][T10584] pwc: recv_control_msg error -71 req 04 val 1200 [ 555.534269][T10946] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 555.544724][T10584] pwc: Registered as video103. [ 555.558501][T10584] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input65 [ 555.584806][T10584] usb 1-1: USB disconnect, device number 44 [ 556.090139][ T31] audit: type=1326 audit(1794399734.729:2118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10953 comm="syz.4.1406" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744ef1c code=0x7ffc0000 [ 556.091648][ T31] audit: type=1326 audit(1794399734.729:2119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10953 comm="syz.4.1406" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744ef1c code=0x7ffc0000 [ 556.093068][ T31] audit: type=1326 audit(1794399734.729:2120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10953 comm="syz.4.1406" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744ef1c code=0x7ffc0000 [ 556.095870][ T31] audit: type=1326 audit(1794399734.739:2121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10953 comm="syz.4.1406" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744ef1c code=0x7ffc0000 [ 556.171896][ T31] audit: type=1326 audit(1794399734.809:2122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10953 comm="syz.4.1406" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=244 compat=1 ip=0xf744ef1c code=0x7ffc0000 [ 556.228627][ T31] audit: type=1326 audit(1794399734.869:2123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10953 comm="syz.4.1406" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744ef1c code=0x7ffc0000 [ 556.228793][ T31] audit: type=1326 audit(1794399734.869:2124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10953 comm="syz.4.1406" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744ef1c code=0x7ffc0000 [ 556.230135][ T31] audit: type=1326 audit(1794399734.869:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10953 comm="syz.4.1406" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf744ef1c code=0x7ffc0000 [ 556.519386][T10959] tipc: Enabling of bearer rejected, already enabled [ 556.540139][T10959] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) ! [ 557.199315][T10973] tipc: Enabled bearer , priority 0 [ 557.203427][T10973] syzkaller0: entered promiscuous mode [ 557.203444][T10973] syzkaller0: entered allmulticast mode [ 557.215893][T10823] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 557.261729][T10973] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 557.350654][T10974] tipc: Resetting bearer [ 557.365562][T10823] usb 7-1: Using ep0 maxpacket: 8 [ 557.366463][T10823] usb 7-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 557.367635][T10823] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 557.367684][T10823] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 557.367703][T10823] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 557.367720][T10823] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 557.367738][T10823] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 557.367754][T10823] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 557.367782][T10823] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.507646][T10972] tipc: Resetting bearer [ 557.608107][T10972] tipc: Disabling bearer [ 557.712820][T10823] usb 7-1: GET_CAPABILITIES returned 0 [ 557.712864][T10823] usbtmc 7-1:16.0: can't read capabilities [ 557.960013][ C0] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 557.981282][T10965] usbtmc 7-1:16.0: Unable to send data, error -71 [ 557.996918][T10823] usb 7-1: USB disconnect, device number 25 [ 558.595736][T10823] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 558.757914][T10823] usb 5-1: Using ep0 maxpacket: 16 [ 558.758671][T10823] usb 5-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 558.760010][T10823] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 558.760027][T10823] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 558.791059][T10823] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.791085][T10823] usb 5-1: Product: syz [ 558.791099][T10823] usb 5-1: Manufacturer: syz [ 558.791114][T10823] usb 5-1: SerialNumber: syz [ 558.905820][T10823] usb 5-1: 0:2 : does not exist [ 559.447670][T10982] netlink: 292 bytes leftover after parsing attributes in process `syz.4.1415'. [ 559.465336][ T30] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 559.487015][T10823] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 559.625579][ T30] usb 1-1: Using ep0 maxpacket: 32 [ 559.632834][ T30] usb 1-1: New USB device found: idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 559.635374][ T30] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 559.635402][ T30] usb 1-1: config 0 has no interface number 0 [ 559.671866][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.671899][ T30] usb 1-1: Product: syz [ 559.671915][ T30] usb 1-1: Manufacturer: syz [ 559.671931][ T30] usb 1-1: SerialNumber: syz [ 559.707880][ T30] usb 1-1: config 0 descriptor?? [ 559.711951][T10823] usb 5-1: USB disconnect, device number 44 [ 559.840721][T10436] udevd[10436]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 560.199366][ T30] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 560.199400][ T30] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 560.306273][T10995] vlan5: left allmulticast mode [ 560.306300][T10995] bridge3: left allmulticast mode [ 560.343099][T11000] tipc: Enabled bearer , priority 0 [ 560.343695][T11001] syzkaller0: entered promiscuous mode [ 560.343717][T11001] syzkaller0: entered allmulticast mode [ 560.414223][T11005] tipc: Resetting bearer [ 560.415028][T10996] tipc: Resetting bearer [ 560.890175][T10996] tipc: Disabling bearer [ 561.080987][T11011] bridge0: port 4(bridge_slave_0) entered blocking state [ 561.082439][T11011] bridge0: port 4(bridge_slave_0) entered disabled state [ 561.118024][T11013] bridge0: port 4(bridge_slave_0) entered disabled state [ 561.152587][T11010] vlan3: left allmulticast mode [ 561.152605][T11010] bridge_slave_0: left allmulticast mode [ 561.152639][T11010] vlan3: left promiscuous mode [ 561.152648][T11010] bridge_slave_0: left promiscuous mode [ 561.153728][T11010] bridge0: port 2(vlan3) entered disabled state [ 561.209678][T11010] macvlan2: left allmulticast mode [ 561.209700][T11010] macvlan2: left promiscuous mode [ 561.209886][T11010] bridge0: port 1(macvlan2) entered disabled state [ 561.214831][T11010] vlan2: left promiscuous mode [ 561.214848][T11010] .`: left promiscuous mode [ 561.267502][T11010] bridge0: port 3(vlan2) entered disabled state [ 561.842813][T10375] IPVS: starting estimator thread 0... [ 561.928158][T11023] IPVS: using max 39 ests per chain, 93600 per kthread [ 562.908626][ T30] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 562.908895][ T30] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 562.954449][ T30] usb 1-1: USB disconnect, device number 45 [ 563.059304][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.059364][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.032435][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 564.032454][ T31] audit: type=1326 audit(1794399742.669:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11041 comm="syz.5.1431" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743ef1c code=0x7ffc0000 [ 564.033734][ T31] audit: type=1326 audit(1794399742.669:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11041 comm="syz.5.1431" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743ef1c code=0x7ffc0000 [ 564.100313][ T31] audit: type=1326 audit(1794399742.739:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11041 comm="syz.5.1431" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf743ef1c code=0x7ffc0000 [ 564.100374][ T31] audit: type=1326 audit(1794399742.739:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11041 comm="syz.5.1431" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743ef1c code=0x7ffc0000 [ 564.102144][ T31] audit: type=1326 audit(1794399742.739:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11041 comm="syz.5.1431" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743ef1c code=0x7ffc0000 [ 564.111949][ T31] audit: type=1326 audit(1794399742.749:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11041 comm="syz.5.1431" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=470 compat=1 ip=0xf743ef1c code=0x7ffc0000 [ 564.125811][ T31] audit: type=1326 audit(1794399742.759:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11041 comm="syz.5.1431" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743ef1c code=0x7ffc0000 [ 564.233612][ T31] audit: type=1326 audit(1794399742.869:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11041 comm="syz.5.1431" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743ef1c code=0x7ffc0000 [ 564.233653][ T31] audit: type=1326 audit(1794399742.869:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11041 comm="syz.5.1431" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf743ef1c code=0x7ffc0000 [ 564.233683][ T31] audit: type=1326 audit(1794399742.869:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11041 comm="syz.5.1431" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743ef1c code=0x7ffc0000 [ 565.312629][T11054] tipc: Enabled bearer , priority 0 [ 565.313273][T11054] syzkaller0: entered promiscuous mode [ 565.313292][T11054] syzkaller0: entered allmulticast mode [ 565.387727][T11054] tipc: Resetting bearer [ 565.455188][T11050] tipc: Resetting bearer [ 565.502092][T10813] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 565.534503][T11050] tipc: Disabling bearer [ 565.656398][T10813] usb 7-1: Using ep0 maxpacket: 8 [ 565.657217][T10813] usb 7-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 565.658486][T10813] usb 7-1: config 0 has no interfaces? [ 565.658519][T10813] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.684374][T10813] usb 7-1: config 0 descriptor?? [ 566.127091][T10813] usb 7-1: USB disconnect, device number 26 [ 567.927822][T11081] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1440'. [ 568.795742][T10820] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 568.905762][T11096] netlink: 892 bytes leftover after parsing attributes in process `syz.6.1447'. [ 568.947116][T10820] usb 1-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 568.948929][T10820] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 568.948968][T10820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.953865][T10820] usb 1-1: config 0 descriptor?? [ 568.996808][T10820] pwc: Askey VC010 type 2 USB webcam detected. [ 569.175391][T10820] pwc: send_video_command error -71 [ 569.175414][T10820] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 569.180972][T10820] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 569.217020][T10820] usb 1-1: USB disconnect, device number 46 [ 569.745553][T10820] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 569.896352][T10820] usb 1-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 569.899489][T10820] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.899540][T10820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.902804][T10820] usb 1-1: config 0 descriptor?? [ 569.946035][T10820] pwc: Askey VC010 type 2 USB webcam detected. [ 570.349497][T10820] pwc: recv_control_msg error -32 req 02 val 2b00 [ 570.351943][T10820] pwc: recv_control_msg error -32 req 02 val 2700 [ 570.358351][T10820] pwc: recv_control_msg error -32 req 02 val 2c00 [ 570.379361][T10820] pwc: recv_control_msg error -32 req 04 val 1000 [ 570.388362][T10820] pwc: recv_control_msg error -32 req 04 val 1300 [ 570.389425][T10820] pwc: recv_control_msg error -32 req 04 val 1400 [ 570.392069][T10820] pwc: recv_control_msg error -32 req 02 val 2000 [ 570.393595][T10820] pwc: recv_control_msg error -32 req 02 val 2100 [ 570.394437][T10820] pwc: recv_control_msg error -32 req 04 val 1500 [ 570.395404][T10820] pwc: recv_control_msg error -32 req 02 val 2500 [ 570.440929][T10820] pwc: recv_control_msg error -32 req 02 val 2400 [ 570.654893][T10820] pwc: recv_control_msg error -71 req 02 val 2900 [ 570.663764][T10820] pwc: recv_control_msg error -71 req 02 val 2800 [ 570.664438][T10820] pwc: recv_control_msg error -71 req 04 val 1100 [ 570.682073][T10820] pwc: recv_control_msg error -71 req 04 val 1200 [ 570.696140][T10820] pwc: Registered as video103. [ 570.714224][T10820] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input66 [ 570.744533][T10820] usb 1-1: USB disconnect, device number 47 [ 572.333684][T11145] tipc: Enabled bearer , priority 0 [ 572.335039][T11145] syzkaller0: entered promiscuous mode [ 572.335063][T11145] syzkaller0: entered allmulticast mode [ 572.395940][T11145] tipc: Resetting bearer [ 572.405638][T11144] tipc: Resetting bearer [ 572.584762][T11144] tipc: Disabling bearer [ 573.129470][ T31] kauditd_printk_skb: 24 callbacks suppressed [ 573.129490][ T31] audit: type=1326 audit(1794399751.769:2162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11153 comm="syz.4.1462" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744ef1c code=0x7ffc0000 [ 573.129539][ T31] audit: type=1326 audit(1794399751.769:2163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11153 comm="syz.4.1462" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744ef1c code=0x7ffc0000 [ 573.132942][ T31] audit: type=1326 audit(1794399751.769:2164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11153 comm="syz.4.1462" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf744ef1c code=0x7ffc0000 [ 573.133183][ T31] audit: type=1326 audit(1794399751.769:2165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11153 comm="syz.4.1462" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744ef1c code=0x7ffc0000 [ 573.134197][ T31] audit: type=1326 audit(1794399751.769:2166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11153 comm="syz.4.1462" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744ef1c code=0x7ffc0000 [ 573.246490][ T31] audit: type=1326 audit(1794399751.869:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11153 comm="syz.4.1462" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=470 compat=1 ip=0xf744ef1c code=0x7ffc0000 [ 573.246556][ T31] audit: type=1326 audit(1794399751.869:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11153 comm="syz.4.1462" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744ef1c code=0x7ffc0000 [ 573.246609][ T31] audit: type=1326 audit(1794399751.889:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11153 comm="syz.4.1462" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744ef1c code=0x7ffc0000 [ 573.348058][ T31] audit: type=1326 audit(1794399751.989:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11153 comm="syz.4.1462" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf744ef1c code=0x7ffc0000 [ 573.383353][ T31] audit: type=1326 audit(1794399751.989:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11153 comm="syz.4.1462" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744ef1c code=0x7ffc0000 [ 575.105861][T10813] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 575.257043][T10813] usb 6-1: Using ep0 maxpacket: 32 [ 575.259064][T10813] usb 6-1: New USB device found: idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 575.260576][T10813] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 575.260602][T10813] usb 6-1: config 0 has no interface number 0 [ 575.262770][T10813] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.262789][T10813] usb 6-1: Product: syz [ 575.262799][T10813] usb 6-1: Manufacturer: syz [ 575.262809][T10813] usb 6-1: SerialNumber: syz [ 575.298862][T10813] usb 6-1: config 0 descriptor?? [ 575.333982][T10813] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 575.548877][T10813] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 575.579249][T10813] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 575.886437][T10821] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 576.034514][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 576.043819][ T30] usb 6-1: USB disconnect, device number 29 [ 576.046115][T10821] usb 5-1: Using ep0 maxpacket: 16 [ 576.054442][T10821] usb 5-1: New USB device found: idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 576.072262][T10821] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 576.072301][T10821] usb 5-1: config 0 interface 0 has no altsetting 0 [ 576.101179][ T30] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 576.120290][T10821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.120319][T10821] usb 5-1: Product: syz [ 576.120333][T10821] usb 5-1: Manufacturer: syz [ 576.120346][T10821] usb 5-1: SerialNumber: syz [ 576.161871][ T30] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 576.178832][T10821] usb 5-1: config 0 descriptor?? [ 576.181765][ T30] quatech2 6-1:0.51: device disconnected [ 576.452308][T10821] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input67 [ 576.907662][T11201] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 576.925720][T10821] rc_core: IR keymap rc-imon-pad not found [ 576.925738][T10821] Registered IR keymap rc-empty [ 576.925845][T10821] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 576.925864][T10821] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 576.984180][T10821] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 577.003390][T10821] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input68 [ 577.029577][T10821] imon 5-1:0.0: iMON device (15c2:0041) on usb<5:45> initialized [ 577.178894][T11206] IPVS: Error connecting to the multicast addr [ 577.206835][ C0] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 577.218253][T10819] usb 5-1: USB disconnect, device number 45 [ 578.048535][T11212] tipc: Enabled bearer , priority 0 [ 578.049625][T11212] syzkaller0: entered promiscuous mode [ 578.049647][T11212] syzkaller0: entered allmulticast mode [ 578.092289][T11212] tipc: Resetting bearer [ 578.123116][T11211] tipc: Resetting bearer [ 578.257662][T11211] tipc: Disabling bearer [ 578.677328][T11219] tipc: Enabled bearer , priority 0 [ 578.678148][T11219] syzkaller0: entered promiscuous mode [ 578.678164][T11219] syzkaller0: entered allmulticast mode [ 578.716446][T11219] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 578.729933][ T31] kauditd_printk_skb: 23 callbacks suppressed [ 578.729947][ T31] audit: type=1326 audit(1794399757.369:2195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11220 comm="syz.0.1478" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73def1c code=0x7ffc0000 [ 578.729982][ T31] audit: type=1326 audit(1794399757.369:2196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11220 comm="syz.0.1478" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73def1c code=0x7ffc0000 [ 578.775999][ T31] audit: type=1326 audit(1794399757.389:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11220 comm="syz.0.1478" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf73def1c code=0x7ffc0000 [ 578.776143][ T31] audit: type=1326 audit(1794399757.389:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11220 comm="syz.0.1478" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73def1c code=0x7ffc0000 [ 578.776272][ T31] audit: type=1326 audit(1794399757.389:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11220 comm="syz.0.1478" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73def1c code=0x7ffc0000 [ 578.885364][ T31] audit: type=1326 audit(1794399757.499:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11220 comm="syz.0.1478" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=470 compat=1 ip=0xf73def1c code=0x7ffc0000 [ 578.885689][ T31] audit: type=1326 audit(1794399757.499:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11220 comm="syz.0.1478" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73def1c code=0x7ffc0000 [ 578.923470][ T31] audit: type=1326 audit(1794399757.499:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11220 comm="syz.0.1478" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73def1c code=0x7ffc0000 [ 578.923630][ T31] audit: type=1326 audit(1794399757.559:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11220 comm="syz.0.1478" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf73def1c code=0x7ffc0000 [ 578.923749][ T31] audit: type=1326 audit(1794399757.559:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11220 comm="syz.0.1478" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73def1c code=0x7ffc0000 [ 579.138993][T11222] tipc: Resetting bearer [ 579.144636][T11218] tipc: Resetting bearer [ 579.250578][T11218] tipc: Disabling bearer [ 579.799138][T11229] loop8: detected capacity change from 0 to 16384 [ 580.038657][T11230] loop8: detected capacity change from 16384 to 16383 [ 581.795824][T10821] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 581.965874][T10821] usb 2-1: Using ep0 maxpacket: 32 [ 581.968804][T10821] usb 2-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 581.985267][T10821] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 581.985298][T10821] usb 2-1: config 0 has no interface number 0 [ 581.985356][T10821] usb 2-1: config 0 interface 184 has no altsetting 0 [ 582.021725][T10821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.021771][T10821] usb 2-1: Product: syz [ 582.021781][T10821] usb 2-1: Manufacturer: syz [ 582.021791][T10821] usb 2-1: SerialNumber: syz [ 582.058411][T10821] usb 2-1: config 0 descriptor?? [ 582.147699][T10819] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 582.305770][T10819] usb 1-1: Using ep0 maxpacket: 8 [ 582.307033][T10819] usb 1-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 582.308538][T10819] usb 1-1: config 0 has no interfaces? [ 582.308563][T10819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.349815][T10819] usb 1-1: config 0 descriptor?? [ 582.740560][T10821] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 582.740585][T10821] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 583.087948][T10819] usb 1-1: USB disconnect, device number 48 [ 583.279291][T11262] tipc: Enabled bearer , priority 0 [ 583.280062][T11262] syzkaller0: entered promiscuous mode [ 583.280084][T11262] syzkaller0: entered allmulticast mode [ 583.314164][T11262] tipc: Resetting bearer [ 583.327832][T11261] tipc: Resetting bearer [ 583.370100][T11261] tipc: Disabling bearer [ 585.253424][T10821] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 585.253454][T10821] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 585.253468][T10821] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 585.253685][T10821] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 585.323200][T10821] usb 2-1: USB disconnect, device number 38 [ 585.786273][T11286] bridge0: entered allmulticast mode [ 585.807669][T11286] team0: left allmulticast mode [ 585.807709][T11286] team0: left promiscuous mode [ 585.808004][T11286] bridge0: port 6(team0) entered disabled state [ 585.946020][T11286] bridge0: port 5(bond0) entered disabled state [ 585.977880][T11286] ip6gretap0: left allmulticast mode [ 585.978111][T11286] ip6gretap0: left promiscuous mode [ 585.978320][T11286] bridge0: port 4(ip6gretap0) entered disabled state [ 586.007190][T11286] syz_tun: left allmulticast mode [ 586.007216][T11286] syz_tun: left promiscuous mode [ 586.019663][T11286] bridge0: port 2(syz_tun) entered disabled state [ 586.041941][T11286] vlan3: left allmulticast mode [ 586.041974][T11286] bridge_slave_0: left allmulticast mode [ 586.042266][T11286] vlan3: left promiscuous mode [ 586.042852][T11286] bridge_slave_0: left promiscuous mode [ 586.043419][T11286] bridge0: port 1(vlan3) entered disabled state [ 586.082845][T11286] vlan2: left promiscuous mode [ 586.082873][T11286] bond0: left promiscuous mode [ 586.110607][T11286] bridge0: port 3(vlan2) entered disabled state [ 588.467522][ T31] kauditd_printk_skb: 27 callbacks suppressed [ 588.467540][ T31] audit: type=1326 audit(1794399767.109:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11311 comm="syz.6.1505" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86f1c code=0x7ffc0000 [ 588.469427][ T31] audit: type=1326 audit(1794399767.109:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11311 comm="syz.6.1505" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86f1c code=0x7ffc0000 [ 588.474064][ T31] audit: type=1326 audit(1794399767.109:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11311 comm="syz.6.1505" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f86f1c code=0x7ffc0000 [ 588.474286][ T31] audit: type=1326 audit(1794399767.109:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11311 comm="syz.6.1505" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86f1c code=0x7ffc0000 [ 588.476731][ T31] audit: type=1326 audit(1794399767.109:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11311 comm="syz.6.1505" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86f1c code=0x7ffc0000 [ 588.613301][ T31] audit: type=1326 audit(1794399767.259:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11311 comm="syz.6.1505" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=470 compat=1 ip=0xf7f86f1c code=0x7ffc0000 [ 588.617667][ T31] audit: type=1326 audit(1794399767.259:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11311 comm="syz.6.1505" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86f1c code=0x7ffc0000 [ 588.617819][ T31] audit: type=1326 audit(1794399767.259:2239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11311 comm="syz.6.1505" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86f1c code=0x7ffc0000 [ 588.671768][ T31] audit: type=1326 audit(1794399767.289:2240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11311 comm="syz.6.1505" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f86f1c code=0x7ffc0000 [ 588.671814][ T31] audit: type=1326 audit(1794399767.289:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11311 comm="syz.6.1505" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86f1c code=0x7ffc0000 [ 589.746977][T11324] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1510'. [ 589.747044][T11324] batadv_slave_0: Caught tx_queue_len zero misconfig [ 590.707026][T10573] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 590.855953][T10573] usb 6-1: Using ep0 maxpacket: 8 [ 590.859333][T10573] usb 6-1: unable to get BOS descriptor or descriptor too short [ 590.859376][T10573] usb 6-1: New USB device found: idVendor=2b73, idProduct=000a, bcdDevice=0.40 [ 590.865617][T10573] usb 6-1: config 1 has an invalid descriptor of length 253, skipping remainder of the config [ 590.865644][T10573] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 590.918878][T10573] usb 6-1: New USB device strings: Mfr=244, Product=1, SerialNumber=3 [ 590.918906][T10573] usb 6-1: Product: syz [ 590.919136][T10573] usb 6-1: Manufacturer: syz [ 590.919154][T10573] usb 6-1: SerialNumber: syz [ 591.203958][T10573] usb 6-1: 0:1 : does not exist [ 591.205285][T10573] usb 6-1: 6:0: failed to get current value for ch 0 (-71) [ 591.247087][T10573] usb 6-1: 6:0: cannot get RANGE values for control 2 (id 6) [ 591.247271][T10573] usb 6-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 591.247292][T10573] usb 6-1: [6] FU [PCM Capture Volume] ch = 1, val = 0/1/1 [ 591.277615][T10573] usb 6-1: 6:0: failed to get current value for ch 1 (-71) [ 591.278626][T10573] usb 6-1: 6:0: failed to get current value for ch 0 (-71) [ 591.306663][T10573] usb 6-1: 6:0: failed to get current value for ch 1 (-71) [ 591.306995][T10573] usb 6-1: unit 0 not found! [ 591.409258][T10573] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 591.425910][T10573] usb 6-1: USB disconnect, device number 30 [ 591.505926][T10820] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 591.561599][T11337] udevd[11337]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 591.686841][T10820] usb 5-1: New USB device found: idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 591.688230][T10820] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 591.688257][T10820] usb 5-1: config 0 has no interfaces? [ 591.688277][T10820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.736150][T10820] usb 5-1: config 0 descriptor?? [ 593.014693][T11365] syzkaller0: entered promiscuous mode [ 593.014712][T11365] syzkaller0: entered allmulticast mode [ 594.828336][T11382] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.828460][T11382] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.960614][T11390] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1525'. [ 594.960631][T11390] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1525'. [ 595.005724][ T30] usb 5-1: USB disconnect, device number 46 [ 595.011329][T11386] 8021q: adding VLAN 0 to HW filter on device bond2 [ 595.058896][T10820] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 595.122135][T11389] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.177579][T11390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 595.208850][T11390] bond2: (slave bond0): making interface the new active one [ 595.222109][T11390] bond2: (slave bond0): Enslaving as an active interface with an up link [ 595.224196][T11391] vlan3: left allmulticast mode [ 595.224218][T11391] bridge_slave_0: left allmulticast mode [ 595.224239][T11391] vlan3: left promiscuous mode [ 595.224251][T11391] bridge_slave_0: left promiscuous mode [ 595.224523][T11391] bridge0: port 3(vlan3) entered disabled state [ 595.246519][T10820] usb 1-1: Using ep0 maxpacket: 8 [ 595.248476][T10820] usb 1-1: New USB device found: idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 595.288475][T10820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.288495][T10820] usb 1-1: Product: syz [ 595.288506][T10820] usb 1-1: Manufacturer: syz [ 595.288516][T10820] usb 1-1: SerialNumber: syz [ 595.331564][T10820] usb 1-1: config 0 descriptor?? [ 595.352548][T10820] radio-usb-si4713 1-1:0.0: Si4713 development board discovered: (10C4:8244) [ 595.443881][T11386] bond2 (unregistering): (slave bond0): Releasing active interface [ 595.475207][T11386] bond2 (unregistering): Released all slaves [ 595.535674][ T30] usb 5-1: new low-speed USB device number 47 using dummy_hcd [ 595.649349][ T31] kauditd_printk_skb: 76 callbacks suppressed [ 595.649392][ T31] audit: type=1326 audit(1794399774.289:2318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11397 comm="syz.5.1528" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743ef1c code=0x7ffc0000 [ 595.649576][ T31] audit: type=1326 audit(1794399774.289:2319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11397 comm="syz.5.1528" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743ef1c code=0x7ffc0000 [ 595.650263][ T31] audit: type=1326 audit(1794399774.289:2320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11397 comm="syz.5.1528" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743ef1c code=0x7ffc0000 [ 595.650478][ T31] audit: type=1326 audit(1794399774.289:2321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11397 comm="syz.5.1528" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743ef1c code=0x7ffc0000 [ 595.650653][ T31] audit: type=1326 audit(1794399774.289:2322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11397 comm="syz.5.1528" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf743ef1c code=0x7ffc0000 [ 595.651093][ T31] audit: type=1326 audit(1794399774.289:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11397 comm="syz.5.1528" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743ef1c code=0x7ffc0000 [ 595.651238][ T31] audit: type=1326 audit(1794399774.289:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11397 comm="syz.5.1528" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743ef1c code=0x7ffc0000 [ 595.651955][ T31] audit: type=1326 audit(1794399774.289:2325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11397 comm="syz.5.1528" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743ef1c code=0x7ffc0000 [ 595.652099][ T31] audit: type=1326 audit(1794399774.289:2326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11397 comm="syz.5.1528" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743ef1c code=0x7ffc0000 [ 595.652281][ T31] audit: type=1326 audit(1794399774.289:2327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11397 comm="syz.5.1528" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=328 compat=1 ip=0xf743ef1c code=0x7ffc0000 [ 595.849728][ T30] usb 5-1: New USB device found: idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 595.851457][ T30] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 595.851483][ T30] usb 5-1: config 0 has no interface number 0 [ 595.851526][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.928819][T10573] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 595.939797][ T30] usb 5-1: config 0 descriptor?? [ 596.087721][ T30] viperboard 5-1:0.143: version 0.00 found at bus 005 address 047 [ 596.117959][T10820] radio-usb-si4713 1-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 596.118344][T10820] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 596.124771][T10820] usb 1-1: USB disconnect, device number 49 [ 596.142971][T10573] usb 2-1: New USB device found: idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 596.160652][T10573] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 596.160680][T10573] usb 2-1: config 0 has no interface number 0 [ 596.180095][T10573] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.180122][T10573] usb 2-1: Product: syz [ 596.180138][T10573] usb 2-1: Manufacturer: syz [ 596.180152][T10573] usb 2-1: SerialNumber: syz [ 596.211717][ T30] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 596.211752][ T30] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 596.240163][T10573] usb 2-1: config 0 descriptor?? [ 596.449411][T10573] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 596.466487][T10573] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 596.466844][T10573] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 596.466893][T10573] usb 2-1: media controller created [ 596.530686][T10573] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 596.650116][T10573] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 596.809164][T10820] usb 5-1: USB disconnect, device number 47 [ 597.735597][T10820] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 597.896479][T10820] usb 7-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 597.898684][T10820] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 597.898766][T10820] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.940229][T10820] usb 7-1: config 0 descriptor?? [ 597.960929][T10820] pwc: Askey VC010 type 2 USB webcam detected. [ 598.164326][T10820] pwc: send_video_command error -71 [ 598.164345][T10820] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 598.164877][T10820] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 598.195023][T10820] usb 7-1: USB disconnect, device number 27 [ 598.631999][T10813] usb 2-1: USB disconnect, device number 39 [ 598.655741][ T30] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 598.806635][ T30] usb 7-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 598.809567][ T30] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 598.809617][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.846742][ T30] usb 7-1: config 0 descriptor?? [ 598.871801][ T30] pwc: Askey VC010 type 2 USB webcam detected. [ 599.277708][ T30] pwc: recv_control_msg error -32 req 02 val 2b00 [ 599.306052][ T30] pwc: recv_control_msg error -32 req 02 val 2700 [ 599.307532][ T30] pwc: recv_control_msg error -32 req 02 val 2c00 [ 599.333237][ T30] pwc: recv_control_msg error -32 req 04 val 1000 [ 599.342311][ T30] pwc: recv_control_msg error -32 req 04 val 1300 [ 599.344735][ T30] pwc: recv_control_msg error -32 req 04 val 1400 [ 599.373196][ T30] pwc: recv_control_msg error -32 req 02 val 2000 [ 599.384262][ T30] pwc: recv_control_msg error -32 req 02 val 2100 [ 599.397205][ T30] pwc: recv_control_msg error -32 req 04 val 1500 [ 599.399088][ T30] pwc: recv_control_msg error -32 req 02 val 2500 [ 599.404496][ T30] pwc: recv_control_msg error -32 req 02 val 2400 [ 599.647051][ T30] pwc: recv_control_msg error -71 req 02 val 2900 [ 599.648711][ T30] pwc: recv_control_msg error -71 req 02 val 2800 [ 599.650167][ T30] pwc: recv_control_msg error -71 req 04 val 1100 [ 599.650539][ T30] pwc: recv_control_msg error -71 req 04 val 1200 [ 599.692710][ T30] pwc: Registered as video103. [ 599.705700][ T30] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input69 [ 599.748828][ T30] usb 7-1: USB disconnect, device number 28 [ 600.665749][ T30] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 600.815601][ T30] usb 7-1: Using ep0 maxpacket: 16 [ 600.816369][ T30] usb 7-1: New USB device found: idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 600.817931][ T30] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 600.817953][ T30] usb 7-1: config 0 interface 0 has no altsetting 0 [ 600.864449][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.864483][ T30] usb 7-1: Product: syz [ 600.864494][ T30] usb 7-1: Manufacturer: syz [ 600.864505][ T30] usb 7-1: SerialNumber: syz [ 600.892403][ T30] usb 7-1: config 0 descriptor?? [ 601.145817][ T30] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input70 [ 601.527036][ T30] rc_core: IR keymap rc-imon-pad not found [ 601.527052][ T30] Registered IR keymap rc-empty [ 601.527118][ T30] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 601.527131][ T30] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 601.548181][ T30] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 601.597026][ T30] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input71 [ 601.618873][ T30] imon 7-1:0.0: iMON device (15c2:0041) on usb<7:29> initialized [ 601.815207][ C1] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 601.826592][ T30] usb 7-1: USB disconnect, device number 29 [ 602.054044][ T31] kauditd_printk_skb: 58 callbacks suppressed [ 602.054060][ T31] audit: type=1326 audit(1794399780.689:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11464 comm="syz.4.1545" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf744ef1c code=0x0 [ 604.307207][T11487] tipc: Enabled bearer , priority 0 [ 604.308799][T11487] mac80211_hwsim hwsim15 syzkaller0: entered promiscuous mode [ 604.308818][T11487] mac80211_hwsim hwsim15 syzkaller0: entered allmulticast mode [ 604.341484][T11487] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 604.408172][T11487] tipc: Resetting bearer [ 604.635891][T10820] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 604.787198][T10820] usb 6-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 604.788355][T10820] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 604.788391][T10820] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.796464][T10820] usb 6-1: config 0 descriptor?? [ 604.847186][T10820] pwc: Askey VC010 type 2 USB webcam detected. [ 604.895886][ T30] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 605.045643][ T30] usb 2-1: Using ep0 maxpacket: 32 [ 605.053406][ T30] usb 2-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 605.070905][ T30] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 605.070937][ T30] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 605.070958][ T30] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 605.071007][ T30] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 605.071030][ T30] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 605.071055][ T30] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 605.071099][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.150574][ T30] usb 2-1: config 0 descriptor?? [ 605.200300][T10820] pwc: send_video_command error -71 [ 605.200328][T10820] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 605.200434][T10820] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 605.258151][T10820] usb 6-1: USB disconnect, device number 31 [ 605.372095][ T30] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 40 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 605.416642][T10819] tipc: Node number set to 1960260631 [ 605.705743][ C0] usblp0: nonzero read bulk status received: -71 [ 605.708091][ T10] usb 2-1: USB disconnect, device number 40 [ 605.791172][T11495] usblp0: removed [ 605.805657][T10820] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 605.825821][T10819] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 605.957687][T10820] usb 6-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 605.960903][T10820] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 605.960962][T10820] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.995700][T10819] usb 7-1: Using ep0 maxpacket: 32 [ 605.996570][T10819] usb 7-1: New USB device found: idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 606.003440][T10820] usb 6-1: config 0 descriptor?? [ 606.010784][T10819] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 606.010811][T10819] usb 7-1: config 0 has no interface number 0 [ 606.052314][T10819] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.052335][T10819] usb 7-1: Product: syz [ 606.052345][T10819] usb 7-1: Manufacturer: syz [ 606.052355][T10819] usb 7-1: SerialNumber: syz [ 606.061861][T10820] pwc: Askey VC010 type 2 USB webcam detected. [ 606.088004][T10819] usb 7-1: config 0 descriptor?? [ 606.108381][T10819] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 606.340921][T10819] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 606.379013][T10819] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 606.542536][T10820] pwc: recv_control_msg error -32 req 02 val 2b00 [ 606.572744][T10820] pwc: recv_control_msg error -32 req 02 val 2700 [ 606.594661][T10820] pwc: recv_control_msg error -32 req 02 val 2c00 [ 606.617527][T10820] pwc: recv_control_msg error -32 req 04 val 1000 [ 606.633079][T10820] pwc: recv_control_msg error -32 req 04 val 1300 [ 606.675880][T10820] pwc: recv_control_msg error -32 req 04 val 1400 [ 606.699849][T10820] pwc: recv_control_msg error -32 req 02 val 2000 [ 606.701666][T10820] pwc: recv_control_msg error -32 req 02 val 2100 [ 606.720303][T10820] pwc: recv_control_msg error -32 req 04 val 1500 [ 606.760263][T10820] pwc: recv_control_msg error -32 req 02 val 2500 [ 606.761556][T10820] pwc: recv_control_msg error -32 req 02 val 2400 [ 606.797915][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 606.798445][T10573] usb 7-1: USB disconnect, device number 30 [ 606.847179][T10573] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 606.872132][T10573] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 606.887979][T10573] quatech2 7-1:0.51: device disconnected [ 606.992846][T10820] pwc: recv_control_msg error -71 req 02 val 2900 [ 607.005229][T10820] pwc: recv_control_msg error -71 req 02 val 2800 [ 607.013120][T10820] pwc: recv_control_msg error -71 req 04 val 1100 [ 607.013631][T10820] pwc: recv_control_msg error -71 req 04 val 1200 [ 607.090592][T10820] pwc: Registered as video103. [ 607.115302][T10820] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input72 [ 607.198553][T10820] usb 6-1: USB disconnect, device number 32 [ 607.756600][ T31] audit: type=1804 audit(1794399786.399:2387): pid=11527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1564" name="bus" dev="ramfs" ino=43899 res=1 errno=0 [ 607.797814][ T31] audit: type=1804 audit(1794399786.429:2388): pid=11527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1564" name="bus" dev="ramfs" ino=43899 res=1 errno=0 [ 610.709183][T10573] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 610.856409][T10573] usb 5-1: New USB device found: idVendor=046d, idProduct=c314, bcdDevice=0.40 [ 610.857849][T10573] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 610.857872][T10573] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.859618][T10573] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 610.859647][T10573] usb 5-1: Product: syz [ 610.859659][T10573] usb 5-1: Manufacturer: syz [ 610.915072][T10573] hub 5-1:4.0: USB hub found [ 611.150561][T10573] hub 5-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 611.235663][T10820] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 611.330238][T11574] 8021q: adding VLAN 0 to HW filter on device bond4 [ 611.396611][T10820] usb 1-1: Using ep0 maxpacket: 32 [ 611.403820][T10820] usb 1-1: New USB device found: idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 611.405752][T10820] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 611.405818][T10820] usb 1-1: config 0 has no interface number 0 [ 611.437663][T11574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1575'. [ 611.437681][T11574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1575'. [ 611.442458][T10820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.442478][T10820] usb 1-1: Product: syz [ 611.442488][T10820] usb 1-1: Manufacturer: syz [ 611.442499][T10820] usb 1-1: SerialNumber: syz [ 611.444938][T11574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 611.494976][T10820] usb 1-1: config 0 descriptor?? [ 611.518351][T10820] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 611.540750][T11574] bond4: (slave bond0): Enslaving as an active interface with a down link [ 611.633737][T11578] bond4 (unregistering): (slave bond0): Releasing active interface [ 611.653119][T11578] bond4 (unregistering): Released all slaves [ 611.784046][T10820] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 611.806035][T10820] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 612.259949][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 612.260682][T10573] usb 1-1: USB disconnect, device number 50 [ 612.291197][T10573] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 612.321021][T10573] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 612.323097][T10573] quatech2 1-1:0.51: device disconnected [ 613.378081][T10813] usb 5-1: USB disconnect, device number 48 [ 615.186471][T10573] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 615.337495][T10573] usb 7-1: New USB device found: idVendor=0711, idProduct=0900, bcdDevice=1.00 [ 615.350515][T10573] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 615.369524][T10573] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.369544][T10573] usb 7-1: Product: syz [ 615.369554][T10573] usb 7-1: Manufacturer: syz [ 615.369564][T10573] usb 7-1: SerialNumber: syz [ 615.417420][T10573] sisusb 7-1:1.0: Invalid USB2VGA device [ 615.417439][T10573] sisusb 7-1:1.0: probe with driver sisusb failed with error -22 [ 616.918816][T11645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1590'. [ 616.918843][T11645] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1590'. [ 616.974508][T11639] tipc: Enabling of bearer rejected, already enabled [ 616.975058][T11641] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) ! [ 617.169292][T11642] 8021q: adding VLAN 0 to HW filter on device bond3 [ 617.252820][T11645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 617.269362][T11645] bond3: (slave bond0): Enslaving as an active interface with a down link [ 617.346077][T11647] bond3 (unregistering): (slave bond0): Releasing active interface [ 617.382803][T11647] bond3 (unregistering): Released all slaves [ 617.955313][ C1] [ 617.957706][ C1] ============================= [ 617.962577][ C1] [ BUG: Invalid wait context ] [ 617.967458][ C1] syzkaller #0 Tainted: G L [ 617.973438][ C1] ----------------------------- [ 617.978287][ C1] swapper/1/0 is trying to lock: [ 617.983220][ C1] ffff8880464e9bc8 (&gpc->lock){....}-{3:3}, at: kvm_xen_set_evtchn_fast+0x208/0x8d0 [ 617.992719][ C1] other info that might help us debug this: [ 617.998617][ C1] context-{2:2} [ 618.002096][ C1] locks held by swapper/1/0: 1, on CPU#1: [ 618.007837][ C1] #0: ffff8880464ea118 (&kvm->srcu){.?.+}-{0:0}, at: kvm_xen_set_evtchn_fast+0x1d2/0x8d0 [ 618.017829][ C1] stack backtrace: [ 618.021564][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 618.032080][ C1] Tainted: [L]=SOFTLOCKUP [ 618.036446][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 618.046541][ C1] Call Trace: [ 618.049837][ C1] [ 618.052696][ C1] dump_stack_lvl+0xe8/0x150 [ 618.057321][ C1] __lock_acquire+0xf5b/0x2de0 [ 618.062140][ C1] lock_acquire+0x115/0x350 [ 618.066661][ C1] ? kvm_xen_set_evtchn_fast+0x208/0x8d0 [ 618.072308][ C1] ? xa_load+0x1db/0x210 [ 618.076575][ C1] _raw_read_lock_irqsave+0x48/0x60 [ 618.081792][ C1] ? kvm_xen_set_evtchn_fast+0x208/0x8d0 [ 618.087435][ C1] kvm_xen_set_evtchn_fast+0x208/0x8d0 [ 618.092905][ C1] ? kvm_xen_set_evtchn_fast+0x1d2/0x8d0 [ 618.098565][ C1] xen_timer_callback+0x109/0x220 [ 618.103627][ C1] ? __pfx_xen_timer_callback+0x10/0x10 [ 618.109193][ C1] __hrtimer_run_queues+0x371/0xa10 [ 618.114445][ C1] hrtimer_interrupt+0x4cd/0xaa0 [ 618.119433][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 618.125457][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 618.131131][ C1] [ 618.134099][ C1] [ 618.137042][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 618.143041][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 618.148690][ C1] Code: 2a 92 02 e9 03 18 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 ca 23 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 618.168570][ C1] RSP: 0018:ffffc900001a7e40 EFLAGS: 00000246 [ 618.174663][ C1] RAX: 000000000192e841 RBX: ffffffff819ca8c0 RCX: 8000000000000001 [ 618.182652][ C1] RDX: 0000000000000001 RSI: ffffffff8e6a7727 RDI: ffffffff8c8e9b80 [ 618.190645][ C1] RBP: ffffc900001a7f10 R08: ffff8880b8333d9b R09: 1ffff110170667b3 [ 618.198632][ C1] R10: dffffc0000000000 R11: ffffed10170667b4 R12: 0000000000000000 [ 618.206619][ C1] R13: 1ffff11003ed0bb8 R14: 1ffff92000034fd0 R15: dffffc0000000000 [ 618.214626][ C1] ? do_idle+0x2e0/0x540 [ 618.218892][ C1] default_idle+0x9/0x20 [ 618.223166][ C1] default_idle_call+0x72/0xb0 [ 618.227965][ C1] do_idle+0x2e0/0x540 [ 618.232052][ C1] ? __pfx_do_idle+0x10/0x10 [ 618.237180][ C1] ? do_idle+0x4d2/0x540 [ 618.241489][ C1] cpu_startup_entry+0x43/0x60 [ 618.246468][ C1] start_secondary+0x101/0x110 [ 618.251253][ C1] common_startup_64+0x13e/0x157 [ 618.256232][ C1] [ 618.385572][T10573] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 618.486285][T11620] bond0: (slave netdevsim0): Releasing backup interface [ 618.577295][T10573] usb 5-1: Using ep0 maxpacket: 16 [ 618.578033][T10573] usb 5-1: New USB device found: idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 618.579351][T10573] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 618.579374][T10573] usb 5-1: config 0 interface 0 has no altsetting 0 [ 618.581929][T10573] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.581954][T10573] usb 5-1: Product: syz [ 618.581969][T10573] usb 5-1: Manufacturer: syz [ 618.581983][T10573] usb 5-1: SerialNumber: syz [ 618.592637][T10573] usb 5-1: config 0 descriptor?? [ 618.788129][T10813] usb 7-1: USB disconnect, device number 31 [ 618.855379][T10573] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input73 [ 619.175839][T10573] rc_core: IR keymap rc-imon-pad not found [ 619.175861][T10573] Registered IR keymap rc-empty [ 619.175947][T10573] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 619.175966][T10573] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 619.266372][T10573] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 619.280168][T10573] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input74 [ 619.294285][T10573] imon 5-1:0.0: iMON device (15c2:0041) on usb<5:49> initialized [ 619.466695][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 619.467003][T10820] usb 5-1: USB disconnect, device number 49 [ 624.496766][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.496817][ T1319] ieee802154 phy1 wpan1: encryption failed: -22