last executing test programs: 9.636959985s ago: executing program 2 (id=342): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x2d) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8004, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) timer_create(0x6, &(0x7f0000000200)={0x0, 0x21, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$admmidi(&(0x7f0000000080), 0x2, 0x242c3) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, &(0x7f0000000000)={0x4, 0x3, 0x2}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x1a}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x62040200) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x31, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfc, {0x2, 0x10, 0x10, 0x0, 0x0, 0x4, 0x0, 0x6, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) socket$nl_route(0x10, 0x3, 0x0) 8.283901356s ago: executing program 4 (id=350): syz_usb_connect$uac2(0x2, 0x80, &(0x7f00000003c0)=ANY=[], 0x0) 7.902625333s ago: executing program 2 (id=352): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000440)=""/124) (async) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000440)=""/124) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0100000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c000180140003000000000000000000000000000000000114000400000000000000000000000000000000010c00028005000100000000000c00068008000200ac14141808000740000000001c0019800800010000040000080001008000000008000100400400004c001880080001"], 0x12c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0100000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c000180140003000000000000000000000000000000000114000400000000000000000000000000000000010c00028005000100000000000c00068008000200ac14141808000740000000001c0019800800010000040000080001008000000008000100400400004c001880080001"], 0x12c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x25, "fe20c636e8a191c88b3ba8eed5ffbeef79f8774a31a37bdbc40d3a784b8fb11dd2904d8720"}, &(0x7f0000000100)=0x2d) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={r3, 0x88, &(0x7f00000004c0)=[@in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e23, 0x0, @loopback, 0x7}, @in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e21, 0xfffffff9, @local, 0x4da}, @in={0x2, 0x4e23, @broadcast}]}, &(0x7f00000002c0)=0xc) socketpair(0x29, 0x2, 0x1ff, &(0x7f0000000000)) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) syz_open_dev$sndctrl(&(0x7f0000000300), 0xfffffffc, 0x0) (async) r5 = syz_open_dev$sndctrl(&(0x7f0000000300), 0xfffffffc, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f00000000c0)=0x81) readv(r5, &(0x7f0000000400)=[{&(0x7f0000000380)=""/123, 0x7b}], 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000140)={{0xbffffffd, 0x1, 0xffffffff, 0xfffffff8, 'syz1\x00', 0x20}, 0x6, 0x2, 0x5, 0x0, 0x0, 0x4ff, 'syz0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001700)=@newlink={0x6c, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10060}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0xd, @multicast}}]}]}, @IFLA_MTU={0x8, 0x4, 0x48f}]}, 0x6c}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001700)=@newlink={0x6c, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10060}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0xd, @multicast}}]}]}, @IFLA_MTU={0x8, 0x4, 0x48f}]}, 0x6c}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x125842, 0x0) (async) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x125842, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r7, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r9, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$packet(0x11, 0x2, 0x300) (async) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r10, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_int(r10, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r10, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf85, 0x3}, 0x1c) syz_emit_ethernet(0x7c, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x7, 0x6, "4a9e6c", 0x46, 0x2f, 0xe78c6d029ffc7582, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x9]}, {0xca88, 0x88be, 0x4, {{0x5, 0x1, 0x3, 0x3, 0x1, 0x0, 0x0, 0x35}, 0x1, {0xc289}}}, {0x8, 0x22eb, 0x1, {{0xe, 0x2, 0x0, 0x1, 0x0, 0x3, 0x2, 0x4}, 0x2, {0x4, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) 7.588391249s ago: executing program 2 (id=354): socket$nl_netfilter(0x10, 0x3, 0xc) 7.577985143s ago: executing program 2 (id=355): r0 = syz_io_uring_setup(0x48ce, &(0x7f0000000140)={0x0, 0xd353, 0x3201, 0x3, 0x19a}, &(0x7f0000000080)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000000), 0x560c89bb) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x20) ioctl$int_in(r5, 0x5452, &(0x7f0000000340)=0xffffffff) splice(r4, 0x0, r6, 0x0, 0x8000, 0x0) r7 = epoll_create(0x2) r8 = openat$dlm_plock(0xffffff9c, &(0x7f0000000100), 0x101002, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f00000001c0)={0x8}) socket$nl_generic(0x10, 0x3, 0x10) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000340)={0x2e, 0xb, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x1, 0x3b7, 0x0, 0x0, 0x1000, 0x7}}}, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000002c0)={0x2e, 0x1, 0x0, r9, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, r10, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000040)=@any_dev={0x1, 0xd8c, 0x0, 0x0, 0x1000, 0x2, 0xffffffffffffffff, 0x0, 0xa1}}}, &(0x7f00000003c0)) 6.644188548s ago: executing program 2 (id=357): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x7ffc0000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) syz_usb_connect$uac2(0x4, 0x8b, &(0x7f0000000000)=ANY=[], 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, 0x0) r2 = getuid() sendmsg$nl_xfrm(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)=@allocspi={0x214, 0x16, 0x2, 0x70bd25, 0x25dfdbfe, {{{@in=@broadcast, @in6=@mcast2, 0x4e22, 0x0, 0x4e21, 0xf, 0xa, 0x20, 0x20, 0xff, 0x0, r2}, {@in=@broadcast, 0x4d3, 0x2a}, @in=@broadcast, {0x8, 0x7ff, 0xff, 0x1, 0x6, 0x8, 0x9, 0x3}, {0x0, 0x7dfc, 0xa6e, 0x3}, {0xfff, 0x9}, 0x70bd28, 0x3504, 0xa, 0x1, 0xb, 0x2}, 0x9, 0x5950}, [@algo_comp={0x11e, 0x3, {{'lzjh\x00'}, 0x6b0, "52ca4203acdc2bef2c2168826201c8d3ae2339d6c6879e40c047c3fa67bd57d80d8c0a5912ea10b4c35d11a34f0bf836efd27f2ce832fb5808c84ed48588484fc09a16be1e07f3ee147eee54e0cd17b78cdf12341090d9d765c92cae6837af94a2d18216772985007af4915ccfa42bf4ef6f9cf9270e7188448de9823eb1872751d5e6d6e72d6c4245f6995dc2a8305ef345d6536db4090e8cad93a7436c1eaee61c7f6324018f3716958a01969d8507d151012e9af72ad6471784d93fd9e8550cfb4aed8d3223946b2d989adb9b34bec619ef84278b"}}]}, 0x214}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x142, 0x14) write(r3, &(0x7f0000000080)='4', 0x1) 5.870698541s ago: executing program 3 (id=359): syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8, @ANYBLOB="02"], 0x0) 5.409671453s ago: executing program 0 (id=360): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6) r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x6, @local, 0x4e21, 0x0, 'lblc\x00', 0x0, 0x1000, 0xf}, 0x2c) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) r1 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000000)=@rc={0xa, @any, 0xff}, 0x80, 0x0}, 0x0) 5.406169225s ago: executing program 1 (id=361): socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES32=r0, @ANYBLOB="eb91"], 0x40c}, 0x1, 0x0, 0x0, 0x800}, 0x4800) socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x803, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x20000400) cachestat(r1, 0x0, 0x0, 0xee) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x0, &(0x7f0000000780)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mlock2(&(0x7f0000cbf000/0x2000)=nil, 0x2000, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="640000001000010429bd700000000000e0000000", @ANYRES32=0x0, @ANYBLOB="00010000316f0600300012800b00010067656e65766500002000028008"], 0x64}}, 0x20000000) socket$kcm(0x29, 0x7, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='\x00', 0x2, 0x0) write(r4, &(0x7f0000000280)='0', 0x1) mq_open(&(0x7f0000000600)='\x00', 0xc0, 0xa, &(0x7f0000000640)={0x5, 0x2, 0xffffd74f, 0xd630}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4f20, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000140), 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f00000039c0), 0x0, 0x0) 5.243663349s ago: executing program 0 (id=362): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) munlock(&(0x7f000000d000/0x3000)=nil, 0x3000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x100) dup3(r2, r1, 0x80000) 5.163882306s ago: executing program 4 (id=363): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x2d) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8004, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) timer_create(0x6, &(0x7f0000000200)={0x0, 0x21, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$admmidi(&(0x7f0000000080), 0x2, 0x242c3) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, &(0x7f0000000000)={0x4, 0x3, 0x2}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x1a}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x62040200) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x31, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfc, {0x2, 0x10, 0x10, 0x0, 0x0, 0x4, 0x0, 0x6, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) socket$nl_route(0x10, 0x3, 0x0) 5.062806898s ago: executing program 1 (id=364): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) r4 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000340)={0xffff, 0xfff, 0x1, 0x2, 0x100, 0x80, 0x8000, 0x2}, 0x20) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000004340), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc0f8565c, &(0x7f0000000000)={0x0, 0xe, 0x0, {0xa, @pix_mp={0x8, 0xfffffffe, 0x41414270, 0x6, 0x1, [{0x0, 0x100}, {0xffffffff, 0x40}, {0x2, 0xffffffff}, {}, {}, {}, {0x10001, 0x7}], 0x83, 0x0, 0x4}}, 0xfffffffc}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000580)={0x0, 0x488, 0x30}, &(0x7f00000005c0)=0xc) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x7fffffff}]}}]}, 0x48}}, 0x4000090) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r7 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0xe0, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_NET_NS_FD={0x8, 0x1c, r7}, @IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x34, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @multicast}, {0xa, 0x4, @local}, {0xa, 0x4, @broadcast}]}, @IFLA_MACVLAN_FLAGS={0x6}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @random="b9b5a61907e6"}, @IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x4c, 0x5, 0x0, 0x1, [{0xa, 0x4, @multicast}, {0xa, 0x4, @local}, {0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, {0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, {0xa, 0x4, @link_local}, {0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}]}]}}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x7, 0x40}) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r1) sendmsg$TIPC_CMD_GET_LINKS(r9, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x24, r10, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x1}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc001}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000002100)={{0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x118, 0xd}, 0xfffffffa, 0xffff0001, 0x7, 0x5, 0x0, 0xffffffffffffffff, 0x6}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3801000010000100fdffffbf00010000e000000200000000000000000000000000000000000000000000ffff7f000001000307944e23000c020020203c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f000001000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c25080000000000020000000000000083000000000000000000000000000000fcffffffffffffffff7f0000000000001f00000000000000ff0100000000000002000000fcffffff000000002abd700000000000020000fd20000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000ae7a00"/236], 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x20000810) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x5, 0x6}, {0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d6, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x3, 0x0, 0x0, 0x400000}}, 0xe8) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r9, 0x1, &(0x7f0000000540)={0x1081, r1}, 0x1) connect$inet6(r12, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 5.036537506s ago: executing program 0 (id=365): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000a8aaba536d62467b9016f0128b9d1871e076fe199ff28852d249cb523c286890e4bca41f40072beaee12c168430c72e7895c3cbf60729696f54b66c17e3df0a6f69d46fba652af66690aad96a2701920cd0d1e4d2f0777ffea40e76dbc92c71d2047d8178e286b0e018cd52a080a9d87e63bb78fcd32cb0efca0bfffcafe7bf0f4f74b3633ca51a0af3f98fe8bf4545975c7affe2a7a19e2514e17c3054b5cff77120690201c47bc8183b7297dead4858e31db72f238e6886ed02e9e5ad513f55e83bbbfb7e582157057fd5cfa89cf0ad12cb7bcf2a4e5918e6a3ffd1a3c8620d1b0bc688a0cb1c245208c8f0aff2a30112cda18b157f090f1104d487d0e848803349bcf15668220160f66b1dfe9dccb56991a6655180012aa88a26d3a0df5e479c7ba9ff1ca31a6bee93a2dbfc84f8f69019351facee1957bcb5f", @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) preadv(r0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/2, 0x2}], 0x1, 0x10, 0x1) 4.625562852s ago: executing program 1 (id=366): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f0000000440)=ANY=[@ANYRES32=r0], &(0x7f0000000000)='syzkaller\x00', 0x8, 0xff1, &(0x7f00000013c0)=""/4081, 0x41000, 0xc}, 0x94) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCG_STATS(r2, 0x80089203, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) r4 = syz_open_dev$radio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) write$tun(r1, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@generic={0x1, 0x6, "9b00", 0x0, 0x11, 0xff, @loopback={0x12}, @mcast2}}}, 0x36) 4.467329033s ago: executing program 3 (id=367): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000c7000000000000000000"], 0x50) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = gettid() getpid() rt_tgsigqueueinfo(r6, r6, 0x5, &(0x7f0000000640)={0x2, 0x4, 0x2}) r7 = accept4$unix(0xffffffffffffffff, &(0x7f0000000400), &(0x7f0000000500)=0x6e, 0x81000) r8 = openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) fsopen(0x0, 0x1) close(0x3) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) r10 = fanotify_init(0x200, 0x0) fanotify_mark(r10, 0x1, 0x3a, r9, 0x0) r11 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000006c0)={0x0, 0x30b7, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r11, r12, r13, r14, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r16 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r16, 0x29, 0xcd, &(0x7f0000000400)="e6c9b4d64071435c455218382c430224c8f0245366631eeb1eefafcb9c7ee46cfe5d1a6a15c0acf0b2194ca4b16a9a06c9d5e43afdb55b46847a76117ea7555c46cb9d6f096a3d9f728db9d85ccd00", 0x4f) syz_emit_ethernet(0x1a, &(0x7f0000000000)=ANY=[@ANYRESOCT=r4], 0x0) r17 = dup(r16) syz_emit_ethernet(0x3e, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800470000300000000000059078ac1414320a01e001008307d3ac1e000100000000006884c7b6e1ad2224bab9264882e2cb306ecd75aa7d17788dea206a588cab5d7f4466ad30c39082eddd9c4fe5d822875270d00b37efacfd12", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00fffd90780000"], 0x0) syz_ublk_setup_queues(r17, r15, &(0x7f0000000180)={0x0, 0x8009f4a, 0x800, 0x103, 0x255}, &(0x7f0000001000)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2100, 0x10000004, 0x0, r17}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e4, 0x4, 0xfffffffe, 0x40000146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90e, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8dcf, 0x0, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r5, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bind(r7, &(0x7f0000000540)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x4, 0x1, 0x1, 0x4, {0xa, 0x4e24, 0x6, @loopback, 0xffffffff}}}, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r18 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r19 = ioctl$KVM_CREATE_VM(r18, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r19, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r19, 0xae41, 0x0) 4.340970657s ago: executing program 0 (id=368): mbind(&(0x7f0000bdb000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x41, &(0x7f0000000180), &(0x7f0000000140)=0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet(0xa, 0x801, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d455200000008000240000000013400030064"], 0x104}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000000201317f4fedc74ae33700c82588f7edf671aa88a65246"], 0x1c}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r5, @ANYBLOB="0000000100000000b7080000000000007b8af8ff005323f679a200000000000007020000f8ffff86560437ccffb703000008000000b70400000100000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x9af8dba271b76fd5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe, 0x0, &(0x7f00000001c0)="14fd54ab72df97e6256c00000000", 0x0, 0x7fb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) semget$private(0x0, 0x4000000009, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="01980000131300000500110042d12355625abaa2f60600000008001b000b000000180012800e00010077697265677561"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4044000) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0xfff3, 0xfff1}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) 4.319437295s ago: executing program 1 (id=369): socket$netlink(0x10, 0x3, 0x13) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) time(0xffffffffffffffff) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0x1, 0xfa14, 0xffffffff}, 0x0) madvise(&(0x7f0000c38000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f00005e0000/0x2000)=nil, 0x2000, 0x10) r2 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x86) fchdir(r4) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80482, 0x0) write$vga_arbiter(r5, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xc) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) ioctl$KVM_CAP_DIRTY_LOG_RING(r4, 0x4068aea3, &(0x7f0000000380)={0xc0, 0x0, 0x22000}) close_range(r6, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x41555856, 0x3b770135f6ed5c90, 0x2) 3.636036802s ago: executing program 2 (id=370): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x40) r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0xb, 0x6, 0x9, 0xb49, 0x9, 0x4000008, 0x2, 0x3}, 0x0) syz_usb_connect(0x6, 0x36, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYRESHEX=r1, @ANYBLOB="8da0facffb4d7278ebb55a8a69cc3eb2b8c5847ffcefdfc4e0f90f20029756640e92e405813a", @ANYRES64=r0, @ANYBLOB="a72e39fcf75ea1f4d7cbf7526c4067e7984c1d561adeeb8a253e805dda3ca044674817b1ae7cb2e343c96713a4696bddf579fed759a4a0b8d2aac970c45266ae4ef545edbfb0bfcce55c4adf6f682d7db8bb054b79a798080ef9a2613c72911a377011646ddeeb8b87089c02a591f9225bcca1358c047a4a24028252ba9f75701a1e1519b0614ee4fd61d32cf227ad0d77b870416bc3178150a383f491", @ANYRES16=r3, @ANYRESDEC=r0], 0x30}}, 0x40) r4 = socket$netlink(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000001c0)) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet(r3, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000200081dc000000000300000002170000070000030b000001080001000a010102"], 0x24}, 0x1, 0x0, 0x0, 0x20000895}, 0x0) r6 = accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0, 0x80800) getsockname$packet(r6, 0x0, 0x0) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000240)={0x0, 0x1, 0x6, @random="c71019c2a60b"}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3.393583907s ago: executing program 4 (id=371): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@multicast, @multicast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @multicast2}}}}, 0x0) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x1, 0x70bd29, 0x2ddfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2834d, 0x104}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x8, 0x80}}]}]}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40c1}, 0x4040010) 3.347029357s ago: executing program 3 (id=372): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000160000402505a1a4400001020301090264ed02010070000904000001020d0000052406000105240008000d240f010000000000000000ed0524"], 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r2, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000f, 0x2010, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x161d02) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x1, 0x40055}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r3, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, 0x2f, 0x9, 0x70bd27, 0x25dfdbfd, {0x4}, [@nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4, 0x6}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) socketpair$unix(0x1, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x101142, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioprio_set$pid(0x2, 0x0, 0x6000) 3.014615631s ago: executing program 4 (id=373): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000080)={0x1000000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x1, 0x4, 0x10000, 0x1000000, &(0x7f0000000000/0x1000000)=nil, 0x0, r2}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000200)={0x10000, 0x1000000, 0x8}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000340)={0x10000, 0x1000000}) (async) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000040), 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r8, 0x4028700f, &(0x7f0000000140)={0x2, 0x0, {0x0, 0x5, 0x0, 0x18, 0x0, 0x5c, 0x4}}) pread64(r8, &(0x7f00000014c0)=""/4104, 0x1008, 0x10000) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0xb4}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) capset(&(0x7f00000000c0)={0x20071026}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x20) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f00006ac000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f000040b000/0x4000)=nil) socket$inet_mptcp(0x2, 0x1, 0x106) 2.260069805s ago: executing program 1 (id=374): bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x3, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ca08100100010102030109023e0001010080fa0904000002ff00000007058302000200070504020002"], 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) syz_usb_ep_write(r0, 0x83, 0x0, 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) syz_usb_ep_write(r0, 0x83, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x30, 0x0) landlock_restrict_self(r1, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x35c, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) close(0x3) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) syz_usb_ep_write(r0, 0x83, 0x0, 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) syz_usb_ep_write(r0, 0x83, 0x0, 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) 1.997622647s ago: executing program 0 (id=375): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x20, 0x1, 0x7, 0xfe, 0x0, 0xbeff, 0x0}) r1 = fsopen(&(0x7f0000000300)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='//127.0.0.1/share\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) gettid() ioctl$DVB_DEMUX_DMX_EXPBUF(r2, 0xc00c6f3e, &(0x7f0000000000)={0x8, 0x80000, r2}) fcntl$notify(r3, 0x402, 0x0) 1.744553536s ago: executing program 3 (id=376): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x358, 0xffffffff, 0x1b8, 0x0, 0x1b8, 0xfeffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff000000, 0xff000000], 'hsr0\x00', 'sit0\x00', {0xff}, {}, 0x87, 0x23, 0x4, 0x15}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x8}, @empty, [0xff], [0x0, 0x0, 0xffffffff], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xa4, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x84, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb36f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8890}, 0x8000) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'wlan0\x00', &(0x7f0000000000)=@ethtool_stats={0x11}}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4038587a, &(0x7f0000000500)={{r1, &(0x7f00000003c0)='$.{@(@^)^\x00', 0x480000, &(0x7f0000000400)={@align=0x4, {0x5e88, 0x4, 0x8, 0x8}}, 0x5, &(0x7f0000000440)={@_ha_fsid}, &(0x7f0000000480)=0xfffffff3}, {[0x8001, 0x9, 0x8, 0x845]}, 0x9, 0x1f, &(0x7f00000004c0)=""/31}) bind$vsock_stream(r2, &(0x7f0000000540)={0x28, 0x0, 0x2710, @host}, 0x10) 1.727543536s ago: executing program 0 (id=377): mknod$loop(&(0x7f00000001c0)='./file0\x00', 0xe100, 0x0) (async) r0 = socket$inet_sctp(0x2, 0x5, 0x84) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000000c0), &(0x7f00000001c0)=0x8) r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r2 = syz_open_dev$midi(&(0x7f0000000080), 0x3, 0x8ac02) syz_usb_disconnect(r1) (async, rerun: 32) readv(r2, &(0x7f0000000600)=[{&(0x7f0000001340)=""/4073, 0xfe9}], 0x1) (async, rerun: 32) close(r2) 1.487331825s ago: executing program 3 (id=378): syz_usb_connect(0x3, 0x5f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100193ac931040206582a3b50102030109024d0001027f400909040c07027b85530009058103030000000622023ed13729711a6e3f7ee9e3c2f767f89a2dee56136e3bbee236b084ecfe5b5c6c09059a"], 0x0) 1.040517836s ago: executing program 4 (id=379): socket$inet6(0xa, 0x80002, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') utimensat(r2, 0x0, &(0x7f0000000040)={{0x0, 0x3ffffffe}, {0x0, 0x3fffffff}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x68) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2b}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040804}, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000020301040000000000000000000040200800010001"], 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000004000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) mprotect(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x2000002) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001100010027bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2882001ad06dee63e5d2415a1422008e2655a400766c"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90a2c342030985a5}, 0x40) 901.035501ms ago: executing program 4 (id=380): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000580)={0x1, 0x0, [{0x287, 0x0, 0x6}]}) r5 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x2a) close(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) r9 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r9, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r9, 0x0, 0x0) syz_usb_control_io$uac3(r9, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000000006db472b015469d1df86823e1164aac0d232709f51ee397847c2e38542e6aab42665bb852c2921fcf9f24bc7a36fe7452079681f9fd97d8893b87ddac19b073407f89b73ba391d71a067b60cc249739fead3ac100a7f7cfc3c7766513c199c8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r11, {0x0, 0xffe0}, {}, {0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) r12 = socket(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_emit_ethernet(0x1011, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], 0x0) readv(r1, &(0x7f0000003d40)=[{0x0, 0xea}, {&(0x7f0000002c00)=""/4108, 0x100c}], 0x2) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, &(0x7f00000002c0)="06781c5fa0fff159ecd732088e5bfb55e0bebb2a45cb5c207137dc7aa0f9a5bedfa3dc9f8c154e5b683c167fbffa0093773b64e6e7f54901c51d73fb72efb17d51e8ffbfd4725d9a300141841d62098fae68db8450ca25e051afba936794c1e88e0e6370c14556", 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 444.38779ms ago: executing program 1 (id=381): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x9, 0x0, 0x8bb4, 0x7fff}, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) r2 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000140), 0x4) signalfd4(r0, &(0x7f0000000000)={[0xa, 0x7]}, 0x8, 0x80800) ioctl$sock_SIOCINQ(r1, 0x541b, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r5, &(0x7f0000000980)={0x23b, 0x7d, 0x0, {{0x500, 0xfa, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox%\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x13\xf6\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00', 0x5e, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x9d,;\x9e\x1dR\xc3\xd6\xda\x9b\xf6\x99\xfa\x88\xda\xcel\xde{\xa4\xa4\x00\xb4\xb0\xb4\xdb\xf6\xc6\x9ai\xd0\x17\xce\xc4Y\x06\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1a'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, 0xffffffffffffffff}}, 0x23b) syz_open_dev$media(0x0, 0x10, 0x101000) fcntl$notify(r3, 0x402, 0x20) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x300) mkdirat(0xffffffffffffff9c, 0x0, 0x22) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x10000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400, 0xc010}, [@IFLA_MTU={0x23, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000780)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x1}}}}}}, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x1}}}, 0x4) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0), 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 3 (id=382): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r2, 0x700, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={0xffffffffffffffff, &(0x7f0000000500)="7c7acf3c2e1a5fcd45ffb2d359d8ed352e88e0ef7843a6bc82096294a112176252598064f5d41bc714c022be5136a106a546bb335aee0e0d1aaa5e76654683303ecb65b61789d4104685c4d6bd58af296de4d2d16e81", &(0x7f0000000580)=""/10}, 0x1c) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'pim6reg1\x00', &(0x7f00000001c0)=@ethtool_pauseparam={0x1b, 0x4, 0x62, 0x5}}) r3 = socket$kcm(0x10, 0x2, 0x0) removexattr(&(0x7f0000000280)='./file2\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="73656308000000792e0600000000"]) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa, 0x0, 0x6, 0x0, 0x4000000000000009, 0x10200}) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ceec0b442ba9642c7aac9b094b01bec426396ab9007e5a3b9394192de421ce2626527804455b77dfb8009c000859d851237bd14e3822e7f5792f1a5f815a2001c0da9b4b15638238c93c496c732c1b861631734a75a2e9300a86be8d63aa88b27a3d3ce3c108d0ca362e849f6089d1a590a553d6c367d7ef76e087815820a30735a1937875cb1cc222fd0dc1c62e7c82b728d3399dac52dd63255a1f5b08e013ae8d71c20452bf81519f5f6cb1f365203395dbc850d71109ea438e274825fcec72ed9a70a6b4ef1ba98cd4206f4bb82c1e76993211d444d9a5be2589a85bd36b04007c800d006600294a2e7d2d2c5c2e000000000400398079000b8008005200ac1e00010c0040000900000000000000b3be003a36c7ebeee6ef9be407dc55a34913000fbcf322db750439b661f5248f546fa48bce31a277a521974c78c2d3cc5d29b48d601d5e17587615a7fcce3c42761a6ed5979f7e721782451a16c4047d0e8a4a3addabe34243118629cb2319b8c10000002000a680e351d4278fb8fcee6aed32c221691bb246d47a507fa33c16a8fc8da208002000", @ANYRES32=0x0, @ANYBLOB="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"], 0x7d8}, 0x1, 0x0, 0x0, 0x4}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0) futex_waitv(&(0x7f0000002140)=[{0x40, 0x0, 0x82}, {0x6, 0x0, 0x8ab2f6c706f9ba89}, {0x5, 0x0}, {0x8, 0x0, 0x2}, {0x0, 0x0, 0x82}, {0x0, 0x0, 0x82}, {0x395, 0x0, 0x2}, {0x100000001, 0x0, 0x2}, {0x81, 0x0, 0x82}, {0x185, 0x0, 0x2}, {0xfe, 0x0, 0x2}, {0x7, 0x0, 0x82}, {0x40, 0x0, 0x82}, {0xc4, 0x0, 0x82}, {0x80000000, 0x0}, {0x36c90000, 0x0, 0x82}, {0x2, 0x0, 0x2}, {0x3, 0x0, 0x82}, {0x8638, 0x0, 0x2}, {0x4, 0x0, 0x82}, {0x7, 0x0, 0x82}, {0x3, 0x0, 0x82}, {0x9, 0x0, 0x80}, {0xd, 0x0, 0x82}, {0x2, 0x0, 0x82}, {0x3, 0x0, 0x82}, {0x9, 0x0, 0x82}, {0x16, 0x0, 0x82}, {0x2, 0x0, 0x2}, {0x1, 0x0, 0x2}, {0x5, 0x0, 0x2}, {0x101, 0x0}, {0x9, 0x0, 0x2}, {0x5, 0x0, 0x2}, {0x8000000000000000, 0x0, 0x2}, {0x8, 0x0, 0x2}, {0x401, 0x0, 0x2}, {0x5d, 0x0, 0x82}, {0x100000001, 0x0}, {0x20000000000, 0x0, 0x82}, {0x5, 0x0, 0x82}, {0x9, 0x0, 0x82}, {0x8, 0x0, 0x82}, {0x2, 0x0, 0x82}, {0x4, 0x0, 0x82}, {0xfffffffffffff26c, 0x0, 0x2}, {0x8, 0x0, 0x2}, {0x5, 0x0, 0x82}, {0x1, 0x0, 0x2}, {0x3, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0x7, 0x0, 0x82}, {0x1, 0x0, 0x82}, {0xfff, 0x0, 0x82}], 0x36, 0x0, 0x0, 0x1) ftruncate(0xffffffffffffffff, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) socket$inet_udp(0x2, 0x2, 0x0) kernel console output (not intermixed with test programs): 0 [ 85.168216][ T5716] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.299302][ T5611] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 85.316637][ T25] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 85.456970][ T5728] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 85.457905][ T5728] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 85.471201][ T5611] usb 1-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 85.482194][ T5611] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 85.482226][ T5611] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 85.482269][ T5611] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.482508][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 85.483309][ T25] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 85.516038][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.516072][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.516091][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 85.516129][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.585352][ T5611] usb 1-1: config 0 descriptor?? [ 85.596318][ T25] usb 5-1: config 0 descriptor?? [ 85.607322][ T5721] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 85.744689][ T5732] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6'. [ 85.771526][ T5732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6'. [ 86.081238][ T25] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 86.081281][ T25] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 86.083515][ T25] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 86.083546][ T25] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 86.083571][ T25] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 86.083597][ T25] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 86.083623][ T25] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 86.083648][ T25] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 86.083673][ T25] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 86.083697][ T25] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 86.181073][ T25] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0001/input/input5 [ 86.340964][ T5611] cypress 0003:04B4:BCA1.0002: hidraw0: USB HID v7f.fd Device [HID 04b4:bca1] on usb-dummy_hcd.0-1/input0 [ 86.441306][ T5740] usb usb8: usbfs: process 5740 (syz.2.7) did not claim interface 0 before use [ 86.477363][ T25] microsoft 0003:045E:07DA.0001: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 86.554367][ T25] usb 5-1: USB disconnect, device number 2 [ 86.935840][ T9] cfg80211: failed to load regulatory.db [ 86.960835][ T5748] fido_id[5748]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 86.999334][ T5616] Bluetooth: hci0: command tx timeout [ 86.999390][ T5619] Bluetooth: hci3: command tx timeout [ 87.054455][ T5703] usb 1-1: USB disconnect, device number 2 [ 87.080662][ T5616] Bluetooth: hci4: command tx timeout [ 87.080697][ T5616] Bluetooth: hci1: command tx timeout [ 87.080747][ T5619] Bluetooth: hci2: command tx timeout [ 87.083739][ T5753] faux_driver vgem: [drm] Unknown color mode 55545; guessing buffer size. [ 87.839669][ T5713] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 87.872653][ T5764] process 'syz.3.12' launched '/dev/fd/5' with NULL argv: empty string added [ 87.943445][ T5764] syz.3.12 uses obsolete (PF_INET,SOCK_PACKET) [ 87.988856][ T5713] usb 3-1: device descriptor read/64, error -71 [ 88.011723][ T5753] nvme_fabrics: missing parameter 'transport=%s' [ 88.011741][ T5753] nvme_fabrics: missing parameter 'nqn=%s' [ 88.230472][ T5713] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 88.359164][ T5713] usb 3-1: device descriptor read/64, error -71 [ 88.376061][ T5768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13'. [ 88.412687][ T5775] batadv_slave_1: entered promiscuous mode [ 88.414286][ T5776] batadv_slave_1: left promiscuous mode [ 88.469671][ T5713] usb usb3-port1: attempt power cycle [ 88.502744][ T5774] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.808457][ T5713] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 88.839792][ T5713] usb 3-1: device descriptor read/8, error -71 [ 89.078550][ T5713] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 89.102264][ T5713] usb 3-1: device descriptor read/8, error -71 [ 89.219319][ T5713] usb usb3-port1: unable to enumerate USB device [ 89.431524][ T5712] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 89.490852][ T5789] fuse: Unknown parameter '0x0000000000000008' [ 89.532754][ T5789] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16'. [ 89.589237][ T5712] usb 2-1: Using ep0 maxpacket: 32 [ 89.594903][ T5712] usb 2-1: unable to get BOS descriptor or descriptor too short [ 89.594971][ T5712] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 89.597904][ T5712] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 89.597932][ T5712] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 89.597959][ T5712] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 89.597980][ T5712] usb 2-1: config 128 has no interface number 0 [ 89.598024][ T5712] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 89.598050][ T5712] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 89.598073][ T5712] usb 2-1: config 128 interface 127 has no altsetting 0 [ 89.661637][ T5712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.661667][ T5712] usb 2-1: Product: syz [ 89.661682][ T5712] usb 2-1: Manufacturer: syz [ 89.661697][ T5712] usb 2-1: SerialNumber: syz [ 89.961870][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 90.107945][ T5712] usb 2-1: USB disconnect, device number 2 [ 90.112640][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 90.112688][ T9] usb 4-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 90.113685][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.113704][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 90.113744][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 90.123830][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 90.123855][ T9] usb 4-1: Product: syz [ 90.123868][ T9] usb 4-1: Manufacturer: syz [ 90.240380][ T9] uvcvideo 4-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 90.240407][ T9] uvcvideo 4-1:1.0: No valid video chain found. [ 90.305280][ T5613] udevd[5613]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 90.659618][ T5799] netlink: 56 bytes leftover after parsing attributes in process `syz.3.19'. [ 90.858431][ T30] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 90.878822][ T5723] usb 4-1: USB disconnect, device number 2 [ 90.974392][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 91.011046][ T30] usb 3-1: unable to get BOS descriptor or descriptor too short [ 91.011105][ T30] usb 3-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 91.012636][ T30] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 32 [ 91.016457][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.016484][ T30] usb 3-1: Product: syz [ 91.016499][ T30] usb 3-1: Manufacturer: syz [ 91.016514][ T30] usb 3-1: SerialNumber: syz [ 91.085679][ T5797] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 91.126407][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 91.130303][ T9] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 91.133693][ T9] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.133721][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 91.133752][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.143798][ T9] usb 2-1: config 0 descriptor?? [ 91.984762][ T30] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 91.990798][ T5801] input: syz1 as /devices/virtual/input/input6 [ 92.119424][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 92.119550][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 92.157414][ T9] usb 2-1: USB disconnect, device number 3 [ 92.395234][ T30] usb 3-1: USB disconnect, device number 6 [ 93.238837][ T5723] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 93.481230][ T5729] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 93.520137][ T5703] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 93.636648][ T5729] usb 4-1: New USB device found, idVendor=0499, idProduct=1718, bcdDevice= 0.40 [ 93.639863][ T5729] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.639886][ T5729] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 93.639965][ T5729] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 93.646781][ T5729] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.646832][ T5729] usb 4-1: Product: syz [ 93.646845][ T5729] usb 4-1: Manufacturer: syz [ 93.646858][ T5729] usb 4-1: SerialNumber: syz [ 93.684210][ T5703] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 93.694047][ T5703] usb 5-1: config index 0 descriptor too short (expected 65183, got 72) [ 93.708977][ T5703] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.709002][ T5703] usb 5-1: Product: syz [ 93.709015][ T5703] usb 5-1: Manufacturer: syz [ 93.709027][ T5703] usb 5-1: SerialNumber: syz [ 93.961035][ T9] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 94.185285][ T5833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.196883][ T5713] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 94.200816][ T5833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.230944][ T5833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.231338][ T5833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.391148][ T5713] usb 1-1: unable to get BOS descriptor or descriptor too short [ 94.391205][ T5713] usb 1-1: New USB device found, idVendor=1b3d, idProduct=01da, bcdDevice=a3.cd [ 94.392660][ T5713] usb 1-1: config 255 has an invalid interface number: 199 but max is 0 [ 94.392684][ T5713] usb 1-1: config 255 has no interface number 0 [ 94.392714][ T5713] usb 1-1: config 255 interface 199 has no altsetting 0 [ 94.396124][ T5713] usb 1-1: string descriptor 0 read error: -22 [ 94.396277][ T5713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.475666][ T5713] ftdi_sio 1-1:255.199: FTDI USB Serial Device converter detected [ 94.503237][ T5713] ftdi_sio ttyUSB0: unknown device type: 0xa3cd [ 94.686460][ T5703] usb 1-1: USB disconnect, device number 3 [ 94.693459][ T5703] ftdi_sio 1-1:255.199: device disconnected [ 94.826037][ T5839] vlan2: entered allmulticast mode [ 94.826060][ T5839] bond0: entered allmulticast mode [ 94.826074][ T5839] bond_slave_0: entered allmulticast mode [ 94.826090][ T5839] bond_slave_1: entered allmulticast mode [ 95.007946][ T5729] usb 4-1: USB disconnect, device number 3 [ 95.018586][ T9] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 95.018972][ T9] ath9k_htc: Failed to initialize the device [ 95.160637][ T9] usb 5-1: ath9k_htc: USB layer deinitialized [ 95.245838][ T9] usb 5-1: USB disconnect, device number 3 [ 95.508133][ T31] kauditd_printk_skb: 151 callbacks suppressed [ 95.508154][ T31] audit: type=1326 audit(1789916917.621:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5841 comm="syz.3.33" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6fcf0ec code=0x0 [ 95.618548][ T5713] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 95.848998][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 95.971506][ T5861] netlink: 20 bytes leftover after parsing attributes in process `syz.1.37'. [ 96.021389][ T9] usb 1-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 96.030104][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.034561][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.034586][ T9] usb 1-1: Product: syz [ 96.034598][ T9] usb 1-1: Manufacturer: syz [ 96.034611][ T9] usb 1-1: SerialNumber: syz [ 96.085776][ T9] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 96.259146][ T5869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.259660][ T5869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.578515][ T5713] usb 3-1: device descriptor read/64, error -71 [ 96.628530][ T5876] vivid-003: ================= START STATUS ================= [ 96.628633][ T5876] vivid-003: Radio HW Seek Mode: Bounded [ 96.628658][ T5876] vivid-003: Radio Programmable HW Seek: false [ 96.628679][ T5876] vivid-003: RDS Rx I/O Mode: Block I/O [ 96.628699][ T5876] vivid-003: Generate RBDS Instead of RDS: false [ 96.632852][ T5876] vivid-003: RDS Reception: true [ 96.636286][ T5876] vivid-003: RDS Program Type: 0 inactive [ 96.636354][ T5876] vivid-003: RDS PS Name: inactive [ 96.636430][ T5876] vivid-003: RDS Radio Text: inactive [ 96.636832][ T5876] vivid-003: RDS Traffic Announcement: false inactive [ 96.640987][ T5876] vivid-003: RDS Traffic Program: false inactive [ 96.641014][ T5876] vivid-003: RDS Music: false inactive [ 96.641099][ T5876] vivid-003: ================== END STATUS ================== [ 96.813548][ T5883] syz.4.41 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 96.858442][ T5713] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 96.988999][ T5713] usb 3-1: device descriptor read/64, error -71 [ 97.109990][ T5713] usb usb3-port1: attempt power cycle [ 97.372707][ T5888] netlink: 'syz.0.36': attribute type 29 has an invalid length. [ 97.470213][ T5713] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 97.491281][ T5713] usb 3-1: device descriptor read/8, error -71 [ 97.659811][ T9] gspca_mr97310a: reg read [21] error -110 [ 97.659874][ T9] mr97310a 1-1:1.0: probe with driver mr97310a failed with error -110 [ 97.738453][ T5713] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 97.761324][ T5713] usb 3-1: device descriptor read/8, error -71 [ 97.868715][ T5713] usb usb3-port1: unable to enumerate USB device [ 98.002773][ T31] audit: type=1326 audit(1789916920.121:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5891 comm="syz.3.44" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fcf0ec code=0x0 [ 98.071835][ T5893] openvswitch: netlink: nsh attr 251 is out of range max 3 [ 98.588459][ T9] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 98.739266][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 98.741676][ T9] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 98.741695][ T9] usb 5-1: config 0 has no interface number 0 [ 98.741747][ T9] usb 5-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 98.741769][ T9] usb 5-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 98.741840][ T9] usb 5-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 98.741865][ T9] usb 5-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 98.744033][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.744049][ T9] usb 5-1: Product: syz [ 98.744058][ T9] usb 5-1: Manufacturer: syz [ 98.744066][ T9] usb 5-1: SerialNumber: syz [ 98.747644][ T9] usb 5-1: config 0 descriptor?? [ 98.769920][ T9] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.119/input/input7 [ 99.024772][ T5679] usb 1-1: USB disconnect, device number 4 [ 99.072951][ T5713] usb 5-1: USB disconnect, device number 4 [ 99.688426][ T30] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 99.828504][ T30] usb 4-1: device descriptor read/64, error -71 [ 99.949585][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 99.976700][ T5916] geneve2: entered allmulticast mode [ 100.069098][ T30] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 100.098404][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 100.099583][ T9] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 100.101304][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.101335][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.101374][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.112349][ T9] usb 5-1: config 0 descriptor?? [ 100.220064][ T30] usb 4-1: device descriptor read/64, error -71 [ 100.329734][ T30] usb usb4-port1: attempt power cycle [ 100.616294][ T9] savu 0003:1E7D:2D5A.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 100.656819][ T5928] ip6gre1: entered promiscuous mode [ 100.656844][ T5928] ip6gre1: entered allmulticast mode [ 100.691180][ T30] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 100.710160][ T30] usb 4-1: device descriptor read/8, error -71 [ 100.846107][ T5932] netlink: 'syz.1.56': attribute type 12 has an invalid length. [ 100.846129][ T5932] netlink: 'syz.1.56': attribute type 29 has an invalid length. [ 100.846142][ T5932] netlink: 148 bytes leftover after parsing attributes in process `syz.1.56'. [ 100.846158][ T5932] netlink: 59 bytes leftover after parsing attributes in process `syz.1.56'. [ 100.867803][ T9] usb 5-1: USB disconnect, device number 5 [ 100.959455][ T30] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 100.980642][ T30] usb 4-1: device descriptor read/8, error -71 [ 101.090889][ T30] usb usb4-port1: unable to enumerate USB device [ 101.511018][ T5952] netlink: 20 bytes leftover after parsing attributes in process `syz.2.60'. [ 101.626508][ T5957] syzkaller0: entered promiscuous mode [ 101.626527][ T5957] syzkaller0: entered allmulticast mode [ 101.908443][ T988] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 102.040331][ T988] usb 2-1: device descriptor read/64, error -71 [ 102.279340][ T988] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 102.408440][ T988] usb 2-1: device descriptor read/64, error -71 [ 102.522579][ T988] usb usb2-port1: attempt power cycle [ 102.607264][ T5968] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 102.828438][ T5723] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 102.858523][ T988] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 102.879238][ T988] usb 2-1: device descriptor read/8, error -71 [ 102.938423][ T9] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 102.978447][ T5723] usb 1-1: Using ep0 maxpacket: 16 [ 102.979056][ T5723] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 102.980630][ T5723] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.980660][ T5723] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.980681][ T5723] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 102.980712][ T5723] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.982955][ T5723] usb 1-1: config 0 descriptor?? [ 103.118974][ T9] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 103.122241][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.122267][ T9] usb 4-1: Product: syz [ 103.122279][ T9] usb 4-1: Manufacturer: syz [ 103.122288][ T9] usb 4-1: SerialNumber: syz [ 103.127493][ T9] usb 4-1: config 0 descriptor?? [ 103.169087][ T988] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 103.172158][ T9] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 103.197104][ T988] usb 2-1: device descriptor read/8, error -71 [ 103.298697][ T988] usb usb2-port1: unable to enumerate USB device [ 103.805223][ T5723] usbhid 1-1:0.0: can't add hid device: -71 [ 103.805294][ T5723] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 103.836945][ T5723] usb 1-1: USB disconnect, device number 5 [ 104.358498][ T5619] Bluetooth: hci2: command tx timeout [ 104.420431][ T5996] netlink: 'syz.0.70': attribute type 1 has an invalid length. [ 104.477660][ T5996] Invalid option length (0) for dns_resolver key [ 104.727154][ T6001] netlink: 72 bytes leftover after parsing attributes in process `syz.4.71'. [ 104.785519][ T6007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.71'. [ 104.796899][ T5977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.802208][ T5977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.178497][ T31] audit: type=1326 audit(1789916927.291:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.1.73" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f340ec code=0x0 [ 105.304116][ T6013] vivid-007: disconnect [ 105.308074][ T6013] netlink: 28 bytes leftover after parsing attributes in process `syz.1.73'. [ 105.628548][ T30] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 105.781195][ T30] usb 1-1: Using ep0 maxpacket: 16 [ 105.784488][ T30] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 105.786148][ T30] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 105.790625][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.790648][ T30] usb 1-1: Product: syz [ 105.790661][ T30] usb 1-1: Manufacturer: syz [ 105.790673][ T30] usb 1-1: SerialNumber: syz [ 105.797653][ T30] usb 1-1: config 0 descriptor?? [ 105.805114][ T30] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 105.805146][ T30] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 105.951775][ T6011] vivid-007: reconnect [ 106.456579][ T30] em28xx 1-1:0.0: unknown em28xx chip ID (229) [ 106.539642][ T988] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 106.710253][ T988] usb 2-1: Invalid ep0 maxpacket: 16 [ 106.838459][ T988] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 106.998506][ T988] usb 2-1: Invalid ep0 maxpacket: 16 [ 106.998861][ T988] usb usb2-port1: attempt power cycle [ 107.115916][ T9] gspca_stk1135: reg_w 0x1b err -71 [ 107.116958][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 107.116973][ T9] gspca_stk1135: Sensor write failed [ 107.116998][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 107.117006][ T9] gspca_stk1135: Sensor write failed [ 107.117024][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 107.117029][ T9] gspca_stk1135: Sensor read failed [ 107.117047][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 107.117052][ T9] gspca_stk1135: Sensor read failed [ 107.117056][ T9] gspca_stk1135: Detected sensor type unknown (0x0) [ 107.117084][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 107.117094][ T9] gspca_stk1135: Sensor read failed [ 107.117118][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 107.117127][ T9] gspca_stk1135: Sensor read failed [ 107.117153][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 107.117162][ T9] gspca_stk1135: Sensor write failed [ 107.117179][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 107.117184][ T9] gspca_stk1135: Sensor write failed [ 107.117243][ T9] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 107.123835][ T9] usb 4-1: USB disconnect, device number 8 [ 107.220616][ T30] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 107.220660][ T30] em28xx 1-1:0.0: board has no eeprom [ 107.329263][ T30] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 107.329294][ T30] em28xx 1-1:0.0: dvb set to bulk mode. [ 107.335209][ T5713] em28xx 1-1:0.0: Binding DVB extension [ 107.338563][ T988] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 107.367345][ T988] usb 2-1: Invalid ep0 maxpacket: 16 [ 107.388113][ T30] usb 1-1: USB disconnect, device number 6 [ 107.406961][ T30] em28xx 1-1:0.0: Disconnecting em28xx [ 107.461062][ T6041] netlink: 20 bytes leftover after parsing attributes in process `syz.0.80'. [ 107.502536][ T5713] em28xx 1-1:0.0: Registering input extension [ 107.502753][ T30] em28xx 1-1:0.0: Closing input extension [ 107.528664][ T988] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 107.550370][ T988] usb 2-1: Invalid ep0 maxpacket: 16 [ 107.551023][ T988] usb usb2-port1: unable to enumerate USB device [ 107.592070][ T30] em28xx: Freeing device [ 107.595963][ T5633] udevd[5633]: setting owner of /dev/bus/usb/001/006 to uid=0, gid=0 failed: No such file or directory [ 107.908436][ T30] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 107.964767][ T6047] netlink: 20 bytes leftover after parsing attributes in process `syz.3.82'. [ 108.060209][ T30] usb 1-1: Using ep0 maxpacket: 16 [ 108.062075][ T30] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 108.063321][ T30] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.063343][ T30] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.063356][ T30] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 108.063381][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.139057][ T30] usb 1-1: config 0 descriptor?? [ 108.377388][ T31] audit: type=1326 audit(1789916930.491:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.4.83" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f050ec code=0x0 [ 109.132563][ T30] usbhid 1-1:0.0: can't add hid device: -71 [ 109.132713][ T30] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 109.162579][ T30] usb 1-1: USB disconnect, device number 7 [ 109.578519][ T5679] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 109.592034][ T6066] netlink: 392 bytes leftover after parsing attributes in process `syz.4.89'. [ 109.668951][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 109.748512][ T5679] usb 2-1: Using ep0 maxpacket: 32 [ 109.754148][ T5679] usb 2-1: unable to get BOS descriptor or descriptor too short [ 109.754204][ T5679] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 109.782719][ T5679] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 109.782747][ T5679] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 109.787621][ T5679] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.787649][ T5679] usb 2-1: Product: syz [ 109.787663][ T5679] usb 2-1: Manufacturer: syz [ 109.787677][ T5679] usb 2-1: SerialNumber: syz [ 109.819212][ T9] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 109.820647][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.820691][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 109.820710][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 109.820729][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.820786][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.902166][ T5679] usb 2-1: selecting invalid altsetting 1 [ 110.123347][ T5613] udevd[5613]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 110.151621][ T6060] warning: `syz.1.87' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 110.270722][ T6075] fuse: Bad value for 'fd' [ 110.289657][ T988] usb 2-1: USB disconnect, device number 13 [ 111.170987][ T9] gud 1-1:1.0: Failed to add properties (error=-71) [ 111.171014][ T9] gud 1-1:1.0: probe with driver gud failed with error -71 [ 111.259283][ T9] usb 1-1: USB disconnect, device number 8 [ 111.802861][ T6095] loop5: detected capacity change from 0 to 7 [ 111.889319][ T6099] trusted_key: encrypted_key: insufficient parameters specified [ 112.274008][ T6095] Dev loop5: unable to read RDB block 7 [ 112.274055][ T6095] loop5: unable to read partition table [ 112.274299][ T6095] loop5: partition table beyond EOD, truncated [ 112.278760][ T6095] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 112.807055][ T6133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.807538][ T6133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.038499][ T5679] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 113.189310][ T5679] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 113.195941][ T5679] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.195971][ T5679] usb 3-1: Product: syz [ 113.195986][ T5679] usb 3-1: Manufacturer: syz [ 113.196000][ T5679] usb 3-1: SerialNumber: syz [ 113.232695][ T5679] usb 3-1: config 0 descriptor?? [ 113.374102][ T6144] netlink: 20 bytes leftover after parsing attributes in process `syz.3.108'. [ 113.445915][ T5679] usb 3-1: USB disconnect, device number 11 [ 113.506695][ T6148] fuse: Bad value for 'group_id' [ 113.506717][ T6148] fuse: Bad value for 'group_id' [ 113.648369][ T6153] netlink: 'syz.4.110': attribute type 6 has an invalid length. [ 113.648394][ T6153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.110'. [ 113.788449][ T30] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 113.888430][ T5713] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 113.938471][ T30] usb 1-1: Using ep0 maxpacket: 8 [ 113.939298][ T30] usb 1-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=b3.a3 [ 113.940340][ T30] usb 1-1: config 2 has an invalid interface number: 241 but max is 0 [ 113.940364][ T30] usb 1-1: config 2 has no interface number 0 [ 113.940408][ T30] usb 1-1: config 2 interface 241 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 113.940429][ T30] usb 1-1: config 2 interface 241 has no altsetting 0 [ 113.942667][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.942689][ T30] usb 1-1: Product: syz [ 113.942702][ T30] usb 1-1: Manufacturer: syz [ 113.942716][ T30] usb 1-1: SerialNumber: syz [ 114.021608][ T30] ti_usb_3410_5052 1-1:2.241: TI USB 3410 1 port adapter converter detected [ 114.021866][ T30] ti_usb_3410_5052 1-1:2.241: missing endpoints [ 114.080682][ T5713] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 114.081450][ T6158] netlink: 'syz.2.112': attribute type 7 has an invalid length. [ 114.086203][ T5713] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 114.086229][ T5713] usb 5-1: Product: syz [ 114.086244][ T5713] usb 5-1: SerialNumber: syz [ 114.091668][ T6159] netlink: 'syz.2.112': attribute type 7 has an invalid length. [ 114.142930][ T5713] usb 5-1: config 0 descriptor?? [ 114.145466][ T5713] hso 5-1:0.0: Not our interface [ 114.173055][ T6148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.173580][ T6148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.498404][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 114.648405][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 114.648982][ T9] usb 2-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 114.649982][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.653649][ T9] usb 2-1: config 0 descriptor?? [ 114.687210][ T9] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 114.738889][ T30] usb 1-1: USB disconnect, device number 9 [ 114.869765][ T31] audit: type=1326 audit(1789916936.991:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6166 comm="syz.1.114" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f340ec code=0x7ffc0000 [ 114.870030][ T31] audit: type=1326 audit(1789916936.991:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6166 comm="syz.1.114" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f340ec code=0x7ffc0000 [ 114.870508][ T31] audit: type=1326 audit(1789916936.991:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6166 comm="syz.1.114" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f340ec code=0x7ffc0000 [ 114.870625][ T31] audit: type=1326 audit(1789916936.991:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6166 comm="syz.1.114" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f340ec code=0x7ffc0000 [ 114.871564][ T31] audit: type=1326 audit(1789916936.991:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6166 comm="syz.1.114" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=91 compat=1 ip=0xf7f340ec code=0x7ffc0000 [ 114.871613][ T31] audit: type=1326 audit(1789916936.991:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6166 comm="syz.1.114" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f340ec code=0x7ffc0000 [ 114.871660][ T31] audit: type=1326 audit(1789916936.991:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6166 comm="syz.1.114" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f340ec code=0x7ffc0000 [ 114.872430][ T31] audit: type=1326 audit(1789916936.991:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6166 comm="syz.1.114" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f340ec code=0x7ffc0000 [ 114.872476][ T31] audit: type=1326 audit(1789916936.991:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6166 comm="syz.1.114" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f340ec code=0x7ffc0000 [ 114.873986][ T31] audit: type=1326 audit(1789916936.991:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6166 comm="syz.1.114" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7f340ec code=0x7ffc0000 [ 115.138476][ T30] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 115.295400][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 115.305964][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 115.307298][ T9] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 115.307359][ T9] usb 2-1: media controller created [ 115.328379][ T30] usb 1-1: Using ep0 maxpacket: 8 [ 115.329105][ T30] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 115.332239][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.332260][ T30] usb 1-1: Product: syz [ 115.332273][ T30] usb 1-1: Manufacturer: syz [ 115.332286][ T30] usb 1-1: SerialNumber: syz [ 115.352676][ T30] usb 1-1: config 0 descriptor?? [ 115.401143][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 115.402479][ T30] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 115.402528][ T30] pctv452e: pctv452e_power_ctrl: 1 [ 115.402528][ T30] [ 115.402579][ T30] usb 1-1: selecting invalid altsetting 3 [ 115.402594][ T30] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 115.402594][ T30] [ 115.402642][ T30] dvb-usb: bulk message failed: -22 (5/0) [ 115.405120][ T30] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 115.407123][ T30] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 115.407181][ T30] usb 1-1: media controller created [ 115.407628][ T30] dvb-usb: bulk message failed: -22 (8/0) [ 115.407644][ T30] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 115.476432][ T30] dvb-usb: MAC address reading failed. [ 115.510956][ T5713] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 115.563088][ T30] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 115.576994][ T6173] cxusb: i2c rd: len=245 is too big! [ 115.576994][ T6173] [ 115.594416][ T6180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.594985][ T6180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.595660][ T9] DVB: Unable to find symbol lgdt330x_attach() [ 115.595675][ T9] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 115.596485][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 115.596503][ T9] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 115.650551][ T9] usb 2-1: USB disconnect, device number 14 [ 115.671422][ T5713] usb 3-1: Using ep0 maxpacket: 32 [ 115.672528][ T5713] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 115.678643][ T5713] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 115.678667][ T5713] usb 3-1: config 0 has no interface number 0 [ 115.678707][ T5713] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 115.687149][ T5713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.687173][ T5713] usb 3-1: Product: syz [ 115.687186][ T5713] usb 3-1: Manufacturer: syz [ 115.687199][ T5713] usb 3-1: SerialNumber: syz [ 115.703146][ T5713] usb 3-1: config 0 descriptor?? [ 115.712094][ T6178] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 115.785085][ T30] DVB: Unable to find symbol stb0899_attach() [ 115.785128][ T30] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 115.868624][ T30] rc_core: IR keymap rc-tt-1500 not found [ 115.868644][ T30] Registered IR keymap rc-empty [ 115.873833][ T30] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 115.880342][ T30] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input9 [ 115.888665][ T30] dvb-usb: schedule remote query interval to 100 msecs. [ 115.888686][ T30] pctv452e: pctv452e_power_ctrl: 0 [ 115.888686][ T30] [ 115.888696][ T30] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 115.946043][ T6178] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 115.994005][ T5346] dvb-usb: bulk message failed: -22 (4/0) [ 115.994035][ T5346] dvb-usb: error -22 while querying for an remote control event. [ 116.077435][ T9] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 116.092980][ T5346] usb 1-1: USB disconnect, device number 10 [ 116.222861][ T5346] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 116.697346][ T5346] usb 5-1: USB disconnect, device number 6 [ 116.795006][ T5713] asix 3-1:0.188 (unnamed net_device) (uninitialized): invalid PHY address: 78 [ 116.813525][ T6198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.120'. [ 117.131584][ T6201] sctp: [Deprecated]: syz.4.121 (pid 6201) Use of int in max_burst socket option. [ 117.131584][ T6201] Use struct sctp_assoc_value instead [ 117.131955][ T6205] sctp: [Deprecated]: syz.4.121 (pid 6205) Use of int in max_burst socket option. [ 117.131955][ T6205] Use struct sctp_assoc_value instead [ 117.349141][ T5713] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 117.522247][ T5713] usb 1-1: unable to get BOS descriptor or descriptor too short [ 117.526461][ T5713] usb 1-1: not running at top speed; connect to a high speed hub [ 117.526499][ T5713] usb 1-1: New USB device found, idVendor=045e, idProduct=0184, bcdDevice=36.a1 [ 117.532010][ T5713] usb 1-1: config 4 has an invalid interface number: 84 but max is 0 [ 117.532039][ T5713] usb 1-1: config 4 has no interface number 0 [ 117.532082][ T5713] usb 1-1: config 4 interface 84 altsetting 1 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 117.532108][ T5713] usb 1-1: config 4 interface 84 has no altsetting 0 [ 117.536113][ T5713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.536137][ T5713] usb 1-1: Product: syz [ 117.536152][ T5713] usb 1-1: Manufacturer: syz [ 117.536166][ T5713] usb 1-1: SerialNumber: syz [ 117.550374][ T6207] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 118.047971][ T6220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.125'. [ 118.048876][ T6220] netlink: 12 bytes leftover after parsing attributes in process `syz.4.125'. [ 118.141180][ T6221] program syz.3.124 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.240653][ T5713] usb 1-1: USB disconnect, device number 11 [ 118.471299][ T6233] input: syz0 as /devices/virtual/input/input10 [ 119.218977][ T5713] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 119.277362][ T9] usb 3-1: USB disconnect, device number 12 [ 119.322619][ T6243] IPv6: Can't replace route, no match found [ 119.348610][ T5713] usb 1-1: device descriptor read/64, error -71 [ 119.352668][ T6243] netlink: 64 bytes leftover after parsing attributes in process `syz.1.130'. [ 119.389432][ T6243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.398696][ T6243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.439661][ T6248] veth0: entered promiscuous mode [ 119.589595][ T5713] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 119.609172][ T30] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 119.718746][ T5713] usb 1-1: device descriptor read/64, error -71 [ 119.758426][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 119.759785][ T30] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 119.763705][ T30] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 119.763723][ T30] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.763735][ T30] usb 2-1: config 0 has no interface number 0 [ 119.763768][ T30] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 119.763783][ T30] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 119.763796][ T30] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 119.771441][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.771467][ T30] usb 2-1: Product: syz [ 119.771480][ T30] usb 2-1: Manufacturer: syz [ 119.771492][ T30] usb 2-1: SerialNumber: syz [ 119.783988][ T30] usb 2-1: config 0 descriptor?? [ 119.829635][ T5713] usb usb1-port1: attempt power cycle [ 119.968455][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 119.969270][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 119.970611][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 119.970640][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 119.973622][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.973646][ T9] usb 3-1: Product: syz [ 119.973660][ T9] usb 3-1: Manufacturer: syz [ 119.973673][ T9] usb 3-1: SerialNumber: syz [ 120.042097][ T9] usb 3-1: config 0 descriptor?? [ 120.070656][ T9] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 120.070691][ T9] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 120.168400][ T5713] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 120.189101][ T5713] usb 1-1: device descriptor read/8, error -71 [ 120.428406][ T5713] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 120.449033][ T5713] usb 1-1: device descriptor read/8, error -71 [ 120.558835][ T5713] usb usb1-port1: unable to enumerate USB device [ 120.657034][ T9] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 120.657787][ T9] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 120.907699][ T5619] Bluetooth: hci0: SCO packet for unknown connection handle 2850 [ 120.932417][ T6265] capability: warning: `syz.3.136' uses deprecated v2 capabilities in a way that may be insecure [ 120.967452][ T5619] Bluetooth: hci0: Malformed LE Event: 0x0d [ 120.969809][ T5619] Bluetooth: hci0: Malformed LE Event: 0x0d [ 121.040749][ T5713] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 121.045926][ T6265] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 121.045952][ T6265] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 121.106502][ T6265] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 121.106526][ T6265] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 121.134395][ T6265] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 121.134419][ T6265] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 121.167533][ T6265] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 121.167556][ T6265] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 121.189482][ T5713] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 121.194391][ T6265] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 121.194417][ T6265] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 121.196556][ T5713] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.196590][ T5713] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.196648][ T5713] usb 5-1: config 0 interface 0 has no altsetting 0 [ 121.196684][ T5713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.217283][ T5713] usb 5-1: config 0 descriptor?? [ 121.269435][ T9] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 121.270485][ T9] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 121.276714][ T9] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 121.522198][ T6248] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 121.525154][ T6248] bond1 (unregistering): Released all slaves [ 121.590955][ T9] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 121.591667][ T9] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 121.592128][ T9] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 121.594355][ T6245] veth0: left promiscuous mode [ 121.627388][ T9] usb 3-1: USB disconnect, device number 13 [ 121.682982][ T5713] hid-multitouch 0003:0EEF:72C4.0004: hidraw0: USB HID v0.00 Joystick [HID 0eef:72c4] on usb-dummy_hcd.4-1/input0 [ 121.856670][ T9] usb 5-1: USB disconnect, device number 7 [ 122.042411][ T6281] netlink: 32 bytes leftover after parsing attributes in process `syz.0.138'. [ 122.241411][ T5713] usb 2-1: USB disconnect, device number 15 [ 122.314597][ T6285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.139'. [ 122.858660][ T5346] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 123.009042][ T5346] usb 5-1: Using ep0 maxpacket: 8 [ 123.011134][ T5346] usb 5-1: unable to get BOS descriptor or descriptor too short [ 123.011179][ T5346] usb 5-1: New USB device found, idVendor=04da, idProduct=80a3, bcdDevice=b2.28 [ 123.012712][ T5346] usb 5-1: config 245 has an invalid interface number: 221 but max is 0 [ 123.012730][ T5346] usb 5-1: config 245 has no interface number 0 [ 123.012755][ T5346] usb 5-1: config 245 interface 221 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0 [ 123.012768][ T5346] usb 5-1: config 245 interface 221 altsetting 1 bulk endpoint 0x6 has invalid maxpacket 0 [ 123.012783][ T5346] usb 5-1: config 245 interface 221 altsetting 1 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 123.012798][ T5346] usb 5-1: config 245 interface 221 has no altsetting 0 [ 123.015151][ T5346] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.015166][ T5346] usb 5-1: Product: syz [ 123.015174][ T5346] usb 5-1: Manufacturer: syz [ 123.015182][ T5346] usb 5-1: SerialNumber: syz [ 123.260114][ T5679] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 123.322914][ T5346] usb 5-1: USB disconnect, device number 8 [ 123.390899][ T6304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.144'. [ 123.411468][ T5679] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 123.412481][ T5679] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 123.412510][ T5679] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 123.412524][ T5679] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 123.415749][ T5679] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.415765][ T5679] usb 4-1: Product: syz [ 123.415773][ T5679] usb 4-1: Manufacturer: syz [ 123.415781][ T5679] usb 4-1: SerialNumber: syz [ 123.425570][ T5679] usb 4-1: config 0 descriptor?? [ 123.470858][ T5679] usb 4-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress f8 [ 123.521836][ T6304] netlink: 'syz.1.144': attribute type 29 has an invalid length. [ 123.521853][ T6304] netlink: 'syz.1.144': attribute type 29 has an invalid length. [ 124.297638][ T5713] usb 4-1: USB disconnect, device number 9 [ 124.419239][ T31] kauditd_printk_skb: 88 callbacks suppressed [ 124.419257][ T31] audit: type=1326 audit(1789916946.541:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6318 comm="syz.1.148" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f340ec code=0x7ffc0000 [ 124.420556][ T31] audit: type=1326 audit(1789916946.541:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6318 comm="syz.1.148" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f340ec code=0x7ffc0000 [ 124.421139][ T31] audit: type=1326 audit(1789916946.541:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6318 comm="syz.1.148" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f340ec code=0x7ffc0000 [ 124.421184][ T31] audit: type=1326 audit(1789916946.541:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6318 comm="syz.1.148" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f340ec code=0x7ffc0000 [ 124.422596][ T31] audit: type=1326 audit(1789916946.541:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6318 comm="syz.1.148" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f340ec code=0x7ffc0000 [ 124.422646][ T31] audit: type=1326 audit(1789916946.541:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6318 comm="syz.1.148" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f340ec code=0x7ffc0000 [ 124.425229][ T31] audit: type=1326 audit(1789916946.541:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6318 comm="syz.1.148" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=19 compat=1 ip=0xf7f340ec code=0x7ffc0000 [ 124.425276][ T31] audit: type=1326 audit(1789916946.541:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6318 comm="syz.1.148" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f340ec code=0x7ffc0000 [ 124.425316][ T31] audit: type=1326 audit(1789916946.541:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6318 comm="syz.1.148" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f340ec code=0x7ffc0000 [ 124.425773][ T31] audit: type=1326 audit(1789916946.541:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6318 comm="syz.1.148" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f340ec code=0x7ffc0000 [ 125.866410][ T6356] netlink: 'syz.2.153': attribute type 7 has an invalid length. [ 125.868130][ T6356] netlink: 'syz.2.153': attribute type 8 has an invalid length. [ 125.868147][ T6356] netlink: 'syz.2.153': attribute type 13 has an invalid length. [ 126.040395][ T6341] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2870834618 (5741669236 ns) > initial count (396924862 ns). Using initial count to start timer. [ 126.040519][ T6334] bridge1: entered promiscuous mode [ 126.040539][ T6334] bridge1: entered allmulticast mode [ 126.062176][ T6334] team0: Port device bridge1 added [ 126.067049][ T6337] bridge0: port 3(team0) entered blocking state [ 126.067275][ T6337] bridge0: port 3(team0) entered disabled state [ 126.067510][ T6337] team0: entered allmulticast mode [ 126.067524][ T6337] team_slave_0: entered allmulticast mode [ 126.067555][ T6337] team_slave_1: entered allmulticast mode [ 126.156095][ T6337] team0: entered promiscuous mode [ 126.156122][ T6337] team_slave_0: entered promiscuous mode [ 126.156361][ T6337] team_slave_1: entered promiscuous mode [ 126.163342][ T6337] bridge0: port 3(team0) entered blocking state [ 126.163482][ T6337] bridge0: port 3(team0) entered forwarding state [ 127.017486][ T6367] usb usb8: usbfs: process 6367 (syz.4.156) did not claim interface 0 before use [ 127.468439][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 127.608862][ T9] usb 1-1: device descriptor read/64, error -71 [ 127.860037][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 127.988473][ T9] usb 1-1: device descriptor read/64, error -71 [ 128.061133][ T5679] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 128.078037][ T6394] netlink: 20 bytes leftover after parsing attributes in process `syz.1.162'. [ 128.098681][ T9] usb usb1-port1: attempt power cycle [ 128.212700][ T5679] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 128.213851][ T5679] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.225332][ T5679] usb 4-1: config 0 descriptor?? [ 128.237825][ T5679] cp210x 4-1:0.0: cp210x converter detected [ 128.289347][ T988] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 128.449955][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 128.453440][ T988] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 128.454939][ T988] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.459225][ T988] usb 5-1: config 0 descriptor?? [ 128.479102][ T9] usb 1-1: device descriptor read/8, error -71 [ 128.502586][ T988] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 128.648415][ T5679] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 128.728373][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 128.777075][ T9] usb 1-1: device descriptor read/8, error -71 [ 128.889025][ T9] usb usb1-port1: unable to enumerate USB device [ 128.905507][ T988] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 128.921361][ T5679] usb 4-1: cp210x converter now attached to ttyUSB0 [ 129.069189][ T6382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.077836][ T6382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.308779][ T988] gspca_cpia1: usb_control_msg 02, error -71 [ 129.308802][ T988] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 129.314539][ T988] usb 5-1: USB disconnect, device number 9 [ 130.844026][ T5712] usb 4-1: USB disconnect, device number 10 [ 130.864491][ T5712] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 130.887967][ T5712] cp210x 4-1:0.0: device disconnected [ 130.960109][ T5713] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 131.120528][ T5713] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 131.121842][ T5713] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.121864][ T5713] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.121887][ T5713] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.124993][ T5713] usb 1-1: config 0 descriptor?? [ 131.288398][ T5679] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 131.378558][ T5712] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 131.439066][ T5679] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 131.440103][ T5679] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.440152][ T5679] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 131.440174][ T5679] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 131.440196][ T5679] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 131.440238][ T5679] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.550812][ T5712] usb 2-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 131.552279][ T5712] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 131.552306][ T5712] usb 2-1: config 0 has no interface number 0 [ 131.552371][ T5712] usb 2-1: too many endpoints for config 0 interface 255 altsetting 0: 130, using maximum allowed: 30 [ 131.552413][ T5712] usb 2-1: config 0 interface 255 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.552437][ T5712] usb 2-1: config 0 interface 255 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.552460][ T5712] usb 2-1: config 0 interface 255 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 131.552537][ T5712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.586042][ T5712] usb 2-1: config 0 descriptor?? [ 131.609074][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 131.740665][ T5713] usbhid 1-1:0.0: can't add hid device: -71 [ 131.740765][ T5713] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 131.771651][ T9] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 131.772369][ T5713] usb 1-1: USB disconnect, device number 20 [ 131.772963][ T9] usb 3-1: config 1 has an invalid interface number: 27 but max is 1 [ 131.772986][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.773004][ T9] usb 3-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 131.773025][ T9] usb 3-1: config 1 has no interface number 2 [ 131.773076][ T9] usb 3-1: config 1 interface 1 has no altsetting 0 [ 131.780992][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.781016][ T9] usb 3-1: Product: syz [ 131.781029][ T9] usb 3-1: Manufacturer: syz [ 131.781042][ T9] usb 3-1: SerialNumber: syz [ 132.117150][ T5712] hid_parser_main: 221 callbacks suppressed [ 132.117178][ T5712] microsoft 0003:045E:009D.0005: unknown main item tag 0x0 [ 132.117209][ T5712] microsoft 0003:045E:009D.0005: unknown main item tag 0x0 [ 132.117265][ T5712] microsoft 0003:045E:009D.0005: unknown main item tag 0x0 [ 132.117292][ T5712] microsoft 0003:045E:009D.0005: unknown main item tag 0x0 [ 132.117318][ T5712] microsoft 0003:045E:009D.0005: unknown main item tag 0x0 [ 132.117344][ T5712] microsoft 0003:045E:009D.0005: unknown main item tag 0x0 [ 132.117397][ T5712] microsoft 0003:045E:009D.0005: unknown main item tag 0x0 [ 132.117423][ T5712] microsoft 0003:045E:009D.0005: unknown main item tag 0x0 [ 132.117448][ T5712] microsoft 0003:045E:009D.0005: unknown main item tag 0x0 [ 132.117475][ T5712] microsoft 0003:045E:009D.0005: unknown main item tag 0x0 [ 132.210619][ T5712] microsoft 0003:045E:009D.0005: hidraw0: USB HID v6f.fd Device [HID 045e:009d] on usb-dummy_hcd.1-1/input255 [ 132.420787][ T988] usb 2-1: USB disconnect, device number 16 [ 132.527465][ T9] speedtch 3-1:1.0: usbatm_usb_probe: invalid endpoint 07! [ 132.527501][ T9] usb 3-1: selecting invalid altsetting 0 [ 132.527593][ T9] speedtch 3-1:1.0: probe with driver speedtch failed with error -22 [ 132.594025][ T6445] netlink: 3914 bytes leftover after parsing attributes in process `syz.0.179'. [ 132.622593][ T5679] [drm] Initialized gud 1.0.0 for 5-1:1.0 on minor 1 [ 132.706289][ T6434] syzkaller1: entered promiscuous mode [ 132.706316][ T6434] syzkaller1: entered allmulticast mode [ 132.736862][ T9] speedtch 3-1:1.27: speedtch_bind: setting interface to 1 failed (-71)! [ 132.741072][ T9] usb 3-1: selecting invalid altsetting 0 [ 132.741100][ T9] speedtch 3-1:1.27: usbatm_usb_probe: bind failed: -71! [ 132.741149][ T9] speedtch 3-1:1.27: probe with driver speedtch failed with error -71 [ 132.754218][ T9] usb 3-1: selecting invalid altsetting 0 [ 132.754248][ T9] usbtest 3-1:1.1: probe with driver usbtest failed with error -22 [ 132.754587][ T9] usb 3-1: selecting invalid altsetting 0 [ 132.764641][ T9] speedtch 3-1:1.1: probe with driver speedtch failed with error -22 [ 132.774611][ T9] usb 3-1: USB disconnect, device number 14 [ 133.002789][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.002872][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.188408][ T25] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 133.338345][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 133.339743][ T25] usb 1-1: New USB device found, idVendor=17cc, idProduct=1021, bcdDevice= 0.40 [ 133.341427][ T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 133.344903][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.344959][ T25] usb 1-1: Product: syz [ 133.344974][ T25] usb 1-1: Manufacturer: syz [ 133.344988][ T25] usb 1-1: SerialNumber: syz [ 133.638691][ T25] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 133.638780][ T25] usb 1-1: MIDIStreaming interface descriptor not found [ 133.925568][ T25] usb 1-1: USB disconnect, device number 21 [ 134.065865][ T5617] udevd[5617]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 134.284516][ T6473] macvtap1: entered promiscuous mode [ 134.284540][ T6473] vlan0: entered promiscuous mode [ 134.291065][ T6473] macvtap1: entered allmulticast mode [ 134.291084][ T6473] vlan0: entered allmulticast mode [ 134.291096][ T6473] veth0_vlan: entered allmulticast mode [ 134.869697][ T6481] binder: 6480:6481 ioctl c0306201 80000180 returned -14 [ 135.064247][ T6486] fuse: Bad value for 'fd' [ 135.828487][ T988] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 135.831942][ T6498] ip6erspan0: entered allmulticast mode [ 135.885022][ T6500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.194'. [ 135.978397][ T988] usb 3-1: Using ep0 maxpacket: 16 [ 135.979190][ T988] usb 3-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 135.980473][ T988] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.980500][ T988] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 135.980525][ T988] usb 3-1: config 0 interface 0 has no altsetting 0 [ 135.980558][ T988] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.986236][ T988] usb 3-1: config 0 descriptor?? [ 136.138493][ T5723] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 136.288376][ T5723] usb 2-1: Using ep0 maxpacket: 32 [ 136.290094][ T5723] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 136.291421][ T5723] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 136.291445][ T5723] usb 2-1: config 0 has no interface number 0 [ 136.291498][ T5723] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 136.293925][ T5723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.293948][ T5723] usb 2-1: Product: syz [ 136.293962][ T5723] usb 2-1: Manufacturer: syz [ 136.294005][ T5723] usb 2-1: SerialNumber: syz [ 136.297200][ T5723] usb 2-1: config 0 descriptor?? [ 136.303940][ T6500] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 136.416232][ T6506] loop5: detected capacity change from 0 to 7 [ 136.419196][ T6506] Dev loop5: unable to read RDB block 7 [ 136.419246][ T6506] loop5: unable to read partition table [ 136.419520][ T6506] loop5: partition table beyond EOD, truncated [ 136.419537][ T6506] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 136.424906][ T25] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 136.461090][ T988] usbhid 3-1:0.0: can't add hid device: -71 [ 136.461192][ T988] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 136.480334][ T988] usb 3-1: USB disconnect, device number 15 [ 136.529882][ T6500] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 136.638386][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 136.642830][ T25] usb 1-1: unable to get BOS descriptor or descriptor too short [ 136.642882][ T25] usb 1-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=2f.cb [ 136.644124][ T25] usb 1-1: config 4 has an invalid descriptor of length 55, skipping remainder of the config [ 136.644149][ T25] usb 1-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 136.646648][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.646671][ T25] usb 1-1: Product: syz [ 136.646686][ T25] usb 1-1: Manufacturer: syz [ 136.646734][ T25] usb 1-1: SerialNumber: syz [ 136.733047][ T5723] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 136.733304][ T5723] asix 2-1:0.188: probe with driver asix failed with error -71 [ 136.761477][ T5723] usb 2-1: USB disconnect, device number 17 [ 136.906559][ T6502] netlink: 148 bytes leftover after parsing attributes in process `syz.0.195'. [ 136.990163][ T6502] netlink: 148 bytes leftover after parsing attributes in process `syz.0.195'. [ 136.991509][ T6515] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 137.378417][ T5712] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 137.529784][ T5712] usb 3-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice= 0.00 [ 137.532189][ T5712] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 137.532235][ T5712] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.808205][ T5712] usb 3-1: USB disconnect, device number 16 [ 137.928470][ T5679] Console: switching to colour frame buffer device 128x48 [ 137.945636][ T5679] gud 5-1:1.0: [drm] fb0: guddrmfb frame buffer device [ 138.101841][ T5712] usb 5-1: USB disconnect, device number 10 [ 138.147316][ T5712] Console: switching to colour VGA+ 80x25 [ 138.155376][ T6533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.155771][ T6533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.382597][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 138.538681][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 138.543339][ T9] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 138.567559][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.567589][ T9] usb 4-1: Product: 馪㥕턆瀸鯮눈엇ᷬ﹧朖足檊涵阈췑롋嶤ᣋ倫椀蛜ɳ䖭칧뱓⪕ [ 138.567609][ T9] usb 4-1: Manufacturer: ᰁ [ 138.567623][ T9] usb 4-1: SerialNumber: syz [ 138.843696][ T9] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 138.856948][ T5713] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 138.974594][ T6549] fuse: Bad value for 'fd' [ 139.029863][ T5713] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 139.036403][ T5713] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 139.036470][ T5713] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 139.036512][ T5713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.125161][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 139.128874][ T6547] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 139.154804][ T5713] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 139.228537][ T9] usb 4-1: USB disconnect, device number 11 [ 139.346731][ T5622] udevd[5622]: setting owner of /dev/bus/usb/004/011 to uid=0, gid=0 failed: No such file or directory [ 139.434858][ T25] usb 1-1: USB disconnect, device number 22 [ 139.569872][ T5613] udevd[5613]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 139.920280][ T5723] usb 3-1: USB disconnect, device number 17 [ 140.311642][ T6563] netlink: 'syz.1.207': attribute type 5 has an invalid length. [ 140.649834][ T6567] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 140.925003][ T6573] netlink: 12 bytes leftover after parsing attributes in process `syz.1.209'. [ 140.993062][ T6585] netlink: 12 bytes leftover after parsing attributes in process `syz.1.209'. [ 141.048526][ T6573] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.080159][ T6585] macvlan2: entered promiscuous mode [ 141.080177][ T6585] macvlan2: entered allmulticast mode [ 141.084590][ T6585] bond1: entered allmulticast mode [ 141.084626][ T6585] bond1: entered promiscuous mode [ 141.092580][ T6585] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 141.106104][ T6585] team0: Port device macvlan2 added [ 141.172697][ T988] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 141.191146][ T5723] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 141.351601][ T988] usb 5-1: Using ep0 maxpacket: 16 [ 141.352431][ T5723] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 141.354811][ T988] usb 5-1: unable to get BOS descriptor or descriptor too short [ 141.354841][ T988] usb 5-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 141.395654][ T988] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 141.395720][ T988] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 71, changing to 7 [ 141.427507][ T988] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.427537][ T988] usb 5-1: Product: syz [ 141.427551][ T988] usb 5-1: Manufacturer: syz [ 141.427565][ T988] usb 5-1: SerialNumber: syz [ 141.454660][ T5723] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.454719][ T5723] usb 4-1: Product: syz [ 141.454734][ T5723] usb 4-1: Manufacturer: syz [ 141.454748][ T5723] usb 4-1: SerialNumber: syz [ 141.493253][ T5723] usb 4-1: config 0 descriptor?? [ 141.519461][ T5723] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 141.600146][ T6587] syzkaller0: entered promiscuous mode [ 141.600164][ T6587] syzkaller0: entered allmulticast mode [ 141.724681][ T6591] netlink: 20 bytes leftover after parsing attributes in process `syz.1.214'. [ 141.727588][ T988] usb 5-1: BAAD HEADSET ADAPTER c_chmask mismatch [ 141.916401][ T988] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 141.948207][ T988] usb 5-1: USB disconnect, device number 11 [ 142.062663][ T5613] udevd[5613]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.095159][ T6578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.095445][ T6578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.176919][ T25] usb 4-1: USB disconnect, device number 12 [ 142.413363][ T6600] fuse: Unknown parameter '' [ 142.785776][ T6603] fuse: Bad value for 'fd' [ 143.063122][ T6607] lo: entered promiscuous mode [ 143.083421][ T6607] tunl0: entered promiscuous mode [ 143.100417][ T6607] gre0: entered promiscuous mode [ 143.198071][ T6607] gretap0: entered promiscuous mode [ 143.287757][ T6607] erspan0: entered promiscuous mode [ 143.350563][ T6607] ip_vti0: entered promiscuous mode [ 143.410824][ T6607] ip6_vti0: entered promiscuous mode [ 143.450000][ T6607] sit0: entered promiscuous mode [ 143.513793][ T6607] ip6tnl0: entered promiscuous mode [ 143.550709][ T6607] ip6gre0: entered promiscuous mode [ 143.596767][ T6607] syz_tun: entered promiscuous mode [ 143.665217][ T6607] ip6gretap0: entered promiscuous mode [ 143.682251][ T6607] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.683601][ T6607] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.730949][ T6607] bridge0: entered promiscuous mode [ 145.190322][ T6642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.224'. [ 145.311848][ T6645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.312354][ T6645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.341974][ T6643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.377236][ T6643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.526094][ T5723] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 145.699364][ T5723] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 145.700478][ T5723] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.700516][ T5723] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 145.700529][ T5723] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 145.700542][ T5723] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 145.700582][ T5723] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.445386][ T6648] capability: warning: `syz.4.225' uses 32-bit capabilities (legacy support in use) [ 146.446543][ T6648] syz.4.225 (6648): drop_caches: 0 [ 147.423300][ T6662] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 148.926759][ T5723] usb 4-1: USB disconnect, device number 13 [ 149.192842][ T6677] lo: entered allmulticast mode [ 149.212464][ T6676] lo: left allmulticast mode [ 149.882976][ T6681] mmap: syz.1.234 (6681) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 150.071396][ T6704] IPVS: set_ctl: invalid protocol: 22 224.0.0.1:20000 [ 150.325556][ T6706] bridge_slave_0: left allmulticast mode [ 150.325586][ T6706] bridge_slave_0: left promiscuous mode [ 150.326861][ T6706] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.395597][ T6710] netlink: 'syz.1.240': attribute type 6 has an invalid length. [ 150.410036][ T6706] bridge_slave_1: left allmulticast mode [ 150.410063][ T6706] bridge_slave_1: left promiscuous mode [ 150.410302][ T6706] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.484842][ T6706] bond0: (slave bond_slave_0): Releasing backup interface [ 150.560593][ T6706] bond0: (slave bond_slave_1): Releasing backup interface [ 150.636990][ T6706] team0: Port device team_slave_0 removed [ 150.659389][ T6706] team0: Port device team_slave_1 removed [ 150.664087][ T6706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.664105][ T6706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.677788][ T6706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.677810][ T6706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.694120][ T6706] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 150.779821][ T5723] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 150.828505][ T988] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 150.929075][ T5723] usb 5-1: Using ep0 maxpacket: 32 [ 150.931742][ T5723] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 150.934191][ T5723] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 150.934233][ T5723] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 150.934270][ T5723] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 150.934296][ T5723] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 150.934322][ T5723] usb 5-1: config 0 interface 0 has no altsetting 0 [ 150.987094][ T988] usb 1-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 151.002896][ T988] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 151.002963][ T988] usb 1-1: config 0 interface 0 has no altsetting 0 [ 151.002997][ T988] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.034176][ T5723] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 151.034209][ T5723] usb 5-1: Product: syz [ 151.034224][ T5723] usb 5-1: Manufacturer: syz [ 151.034238][ T5723] usb 5-1: SerialNumber: syz [ 151.086518][ T988] usb 1-1: config 0 descriptor?? [ 151.087869][ T5723] usb 5-1: config 0 descriptor?? [ 151.088154][ T6724] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 151.123021][ T5723] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 151.164894][ T5723] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 151.300410][ T6723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.300758][ T6723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.304692][ T6723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.305022][ T6723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.359352][ T6744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.361379][ T6744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.393520][ T5723] usb 5-1: USB disconnect, device number 12 [ 151.424963][ T5723] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 151.611917][ T988] hid_parser_main: 222 callbacks suppressed [ 151.611935][ T988] lenovo 0003:17EF:60A4.0006: unknown main item tag 0x0 [ 151.611955][ T988] lenovo 0003:17EF:60A4.0006: unknown main item tag 0x0 [ 151.611971][ T988] lenovo 0003:17EF:60A4.0006: unknown main item tag 0x0 [ 151.611986][ T988] lenovo 0003:17EF:60A4.0006: unknown main item tag 0x0 [ 151.612001][ T988] lenovo 0003:17EF:60A4.0006: unknown main item tag 0x0 [ 151.612016][ T988] lenovo 0003:17EF:60A4.0006: unknown main item tag 0x0 [ 151.612031][ T988] lenovo 0003:17EF:60A4.0006: unknown main item tag 0x0 [ 151.612046][ T988] lenovo 0003:17EF:60A4.0006: unknown main item tag 0x0 [ 151.612061][ T988] lenovo 0003:17EF:60A4.0006: unknown main item tag 0x0 [ 151.612076][ T988] lenovo 0003:17EF:60A4.0006: unknown main item tag 0x0 [ 151.658626][ T988] lenovo 0003:17EF:60A4.0006: hidraw0: USB HID v0.00 Device [HID 17ef:60a4] on usb-dummy_hcd.0-1/input0 [ 151.733739][ T5346] usb 1-1: USB disconnect, device number 23 [ 151.990613][ T6749] fido_id[6749]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 152.362391][ T6752] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 152.362421][ T6752] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 152.363132][ T6752] vhci_hcd vhci_hcd.0: Device attached [ 152.548477][ T988] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 152.608408][ T9] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 152.608569][ T5723] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 152.608849][ T988] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 152.765843][ T5723] usb 3-1: New USB device found, idVendor=0300, idProduct=8cfc, bcdDevice= 0.2c [ 152.766835][ T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 152.767711][ T9] usb 5-1: config 0 has no interfaces? [ 152.767743][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.768421][ T5723] usb 3-1: config 127 has an invalid interface number: 24 but max is 0 [ 152.768443][ T5723] usb 3-1: config 127 has no interface number 0 [ 152.779667][ T5723] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.779693][ T5723] usb 3-1: Product: syz [ 152.779706][ T5723] usb 3-1: Manufacturer: syz [ 152.779718][ T5723] usb 3-1: SerialNumber: syz [ 152.799323][ T6774] binder: 6773:6774 ioctl c040aed4 80000000 returned -22 [ 152.873690][ T9] usb 5-1: config 0 descriptor?? [ 153.103562][ T5712] usb 5-1: USB disconnect, device number 13 [ 153.122196][ T6760] usbip_core: unknown command [ 153.122212][ T6760] vhci_hcd: unknown pdu 0 [ 153.122222][ T6760] usbip_core: unknown command [ 153.152068][ T1205] vhci_hcd vhci_hcd.4: stop threads [ 153.152494][ T1205] vhci_hcd vhci_hcd.4: release socket [ 153.154399][ T1205] vhci_hcd vhci_hcd.4: disconnect device [ 153.161430][ T5723] usb-storage 3-1:127.24: USB Mass Storage device detected [ 153.213245][ T988] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 153.349402][ T5723] usb 3-1: USB disconnect, device number 18 [ 153.377124][ T5613] udevd[5613]: setting owner of /dev/bus/usb/003/018 to uid=0, gid=0 failed: No such file or directory [ 153.700448][ T6794] : renamed from dummy0 (while UP) [ 153.934154][ T6803] syzkaller1: entered promiscuous mode [ 153.934179][ T6803] syzkaller1: entered allmulticast mode [ 154.209250][ T5712] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 154.286951][ T6822] bond0: (slave wlan0): Error: Device can not be enslaved while up [ 154.358538][ T5712] usb 3-1: Using ep0 maxpacket: 8 [ 154.359465][ T5712] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 154.386813][ T5712] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 154.386844][ T5712] usb 3-1: config 0 has no interface number 0 [ 154.386884][ T5712] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 154.386906][ T5712] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 154.386930][ T5712] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 101, changing to 10 [ 154.386954][ T5712] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 26213, setting to 1024 [ 154.386978][ T5712] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.465451][ T5712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.465480][ T5712] usb 3-1: Product: syz [ 154.465494][ T5712] usb 3-1: Manufacturer: syz [ 154.465508][ T5712] usb 3-1: SerialNumber: syz [ 154.502962][ T5712] usb 3-1: config 0 descriptor?? [ 154.503868][ T6803] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 154.693786][ T13] IPVS: starting estimator thread 0... [ 154.779376][ T6830] IPVS: using max 48 ests per chain, 115200 per kthread [ 154.930656][ T6803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.931043][ T6803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.933676][ T6804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.934055][ T6804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.100551][ T5712] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 155.139698][ T5712] usb 3-1: USB disconnect, device number 19 [ 155.348562][ T988] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 155.500056][ T988] usb 4-1: Using ep0 maxpacket: 32 [ 155.501816][ T988] usb 4-1: New USB device found, idVendor=0421, idProduct=0223, bcdDevice=b1.bd [ 155.501856][ T988] usb 4-1: too many configurations: 21, using maximum allowed: 8 [ 155.503887][ T988] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.508849][ T988] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.509784][ T988] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.511711][ T988] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.512647][ T988] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.516955][ T988] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.517922][ T988] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.518982][ T988] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.529000][ T988] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.529022][ T988] usb 4-1: Product: syz [ 155.529034][ T988] usb 4-1: Manufacturer: syz [ 155.529047][ T988] usb 4-1: SerialNumber: syz [ 155.551691][ T988] usb 4-1: config 0 descriptor?? [ 155.806434][ T6835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.807015][ T6835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.837608][ T988] rndis_host 4-1:0.0: rndis: master #0/ffff88802bf7d000 slave #1/0000000000000000 [ 155.839465][ T988] cdc_acm 4-1:0.0: Zero length descriptor references [ 155.839491][ T988] cdc_acm 4-1:0.0: probe with driver cdc_acm failed with error -22 [ 155.854345][ T988] usb 4-1: USB disconnect, device number 14 [ 155.998605][ T5712] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 156.032222][ T5713] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 156.152292][ T5712] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 156.154041][ T5712] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 156.154068][ T5712] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.154086][ T5712] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 156.154142][ T5712] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.155930][ T5712] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 156.155956][ T5712] usb 2-1: Product: syz [ 156.155970][ T5712] usb 2-1: Manufacturer: syz [ 156.210268][ T5713] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 156.243055][ T5713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.243085][ T5713] usb 5-1: Product: syz [ 156.243100][ T5713] usb 5-1: Manufacturer: syz [ 156.243114][ T5713] usb 5-1: SerialNumber: syz [ 156.247448][ T5712] cdc_wdm 2-1:1.0: skipping garbage [ 156.247468][ T5712] cdc_wdm 2-1:1.0: skipping garbage [ 156.306735][ T5712] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 156.306760][ T5712] cdc_wdm 2-1:1.0: Unknown control protocol [ 156.329234][ T25] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 156.431740][ T5713] usb 2-1: USB disconnect, device number 18 [ 156.978581][ T5712] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 157.018507][ T5713] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 157.057836][ T31] kauditd_printk_skb: 70 callbacks suppressed [ 157.057856][ T31] audit: type=1326 audit(1789916979.171:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6875 comm="syz.0.277" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x0 [ 157.113437][ T6881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.117557][ T6881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.129931][ T5712] usb 4-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 157.131803][ T5712] usb 4-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 157.131828][ T5712] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 157.131846][ T5712] usb 4-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 157.131880][ T5712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.145710][ T5712] ims_pcu 4-1:1.0: Max IN packet size is too small (0) [ 157.145806][ T5712] ims_pcu 4-1:1.0: probe with driver ims_pcu failed with error -22 [ 157.300385][ T5713] usb usb2-port1: Cannot enable. Maybe the USB cable is bad? [ 157.353564][ T988] usb 4-1: USB disconnect, device number 15 [ 157.398656][ T5712] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 157.518434][ T5346] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 157.549444][ T5712] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 157.550606][ T5712] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.550629][ T5712] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 157.550649][ T5712] usb 1-1: config 1 has no interface number 0 [ 157.550667][ T5712] usb 1-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 157.550747][ T5712] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 157.553505][ T5712] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.553527][ T5712] usb 1-1: Product: syz [ 157.553540][ T5712] usb 1-1: Manufacturer: syz [ 157.553554][ T5712] usb 1-1: SerialNumber: syz [ 157.678441][ T5713] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 157.699249][ T5346] usb 3-1: Using ep0 maxpacket: 16 [ 157.700577][ T5346] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 157.702431][ T5346] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 157.702456][ T5346] usb 3-1: config 0 has no interface number 0 [ 157.702572][ T5346] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.751771][ T5346] usb 3-1: config 0 descriptor?? [ 157.960771][ T25] usb 5-1: Service connection timeout for: 256 [ 157.960797][ T25] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 158.007496][ T25] ath9k_htc: Failed to initialize the device [ 158.029606][ T25] usb 5-1: ath9k_htc: USB layer deinitialized [ 158.253530][ T988] usb 5-1: USB disconnect, device number 14 [ 158.365547][ T5346] usbhid 3-1:0.1: can't add hid device: -71 [ 158.365661][ T5346] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 158.387357][ T5346] usb 3-1: USB disconnect, device number 20 [ 159.188427][ T5713] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 159.230330][ T25] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 159.339182][ T5713] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 159.340220][ T5713] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.340251][ T5713] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.340288][ T5713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.344072][ T5713] usb 3-1: config 0 descriptor?? [ 159.410502][ T25] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 159.416541][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.416600][ T25] usb 4-1: Product: syz [ 159.416615][ T25] usb 4-1: Manufacturer: syz [ 159.416630][ T25] usb 4-1: SerialNumber: syz [ 159.456742][ T25] usb 4-1: config 0 descriptor?? [ 159.613838][ T5723] usb 1-1: USB disconnect, device number 24 [ 159.889664][ T6977] netlink: 'syz.1.287': attribute type 32 has an invalid length. [ 159.889689][ T6977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.287'. [ 159.889727][ T6977] netlink: 'syz.1.287': attribute type 32 has an invalid length. [ 159.959629][ T5713] usbhid 3-1:0.0: can't add hid device: -71 [ 159.959745][ T5713] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 159.988088][ T5713] usb 3-1: USB disconnect, device number 21 [ 160.011490][ T5723] usb 4-1: USB disconnect, device number 16 [ 160.196345][ T6990] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.307008][ T5713] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 160.438941][ T5713] usb 3-1: device descriptor read/64, error -71 [ 160.443448][ T6997] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.292'. [ 160.595853][ T7003] netlink: 24 bytes leftover after parsing attributes in process `syz.1.294'. [ 160.609365][ T5723] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 160.623881][ T7003] netlink: 20 bytes leftover after parsing attributes in process `syz.1.294'. [ 160.688050][ T7008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.294'. [ 160.688406][ T5713] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 160.758441][ T5723] usb 1-1: Using ep0 maxpacket: 16 [ 160.759392][ T5723] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 160.762605][ T5723] usb 1-1: config index 0 descriptor too short (expected 65532, got 18) [ 160.762630][ T5723] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 160.762642][ T5723] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 160.794422][ T5723] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.794449][ T5723] usb 1-1: Product: syz [ 160.794461][ T5723] usb 1-1: Manufacturer: syz [ 160.794474][ T5723] usb 1-1: SerialNumber: syz [ 160.820692][ T5723] r8152-cfgselector 1-1: Unknown version 0x0000 [ 160.820715][ T5723] r8152-cfgselector 1-1: config 0 descriptor?? [ 160.839206][ T5713] usb 3-1: device descriptor read/64, error -71 [ 160.948956][ T5713] usb usb3-port1: attempt power cycle [ 161.298505][ T5713] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 161.331830][ T5713] usb 3-1: device descriptor read/8, error -71 [ 161.388139][ T6995] netlink: 20 bytes leftover after parsing attributes in process `syz.0.291'. [ 161.388167][ T6995] openvswitch: netlink: Flow key attr not present in new flow. [ 161.443905][ T5723] r8152-cfgselector 1-1: USB disconnect, device number 25 [ 161.580776][ T5713] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 161.600719][ T5713] usb 3-1: device descriptor read/8, error -71 [ 161.708885][ T5713] usb usb3-port1: unable to enumerate USB device [ 162.489083][ T7028] fuse: Bad value for 'fd' [ 162.562231][ T7034] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=117440522 (469762088 ns) > initial count (832 ns). Using initial count to start timer. [ 162.651535][ T5723] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 162.805376][ T5723] usb 3-1: New USB device found, idVendor=2040, idProduct=8265, bcdDevice=b5.a3 [ 162.808439][ T5723] usb 3-1: config 2 has an invalid interface number: 12 but max is 0 [ 162.808463][ T5723] usb 3-1: config 2 has an invalid descriptor of length 214, skipping remainder of the config [ 162.808479][ T5723] usb 3-1: config 2 has no interface number 0 [ 162.808519][ T5723] usb 3-1: config 2 interface 12 altsetting 7 endpoint 0x81 has invalid maxpacket 54531, setting to 64 [ 162.808542][ T5723] usb 3-1: config 2 interface 12 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.808565][ T5723] usb 3-1: config 2 interface 12 has no altsetting 0 [ 162.821384][ T5723] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.821409][ T5723] usb 3-1: Product: syz [ 162.821422][ T5723] usb 3-1: Manufacturer: syz [ 162.821435][ T5723] usb 3-1: SerialNumber: syz [ 162.869395][ T7024] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 163.401529][ T5723] usb 3-1: USB disconnect, device number 26 [ 163.612940][ T7047] bridge0: port 3(team0) entered disabled state [ 163.613380][ T7047] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.615504][ T7047] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.008563][ T7047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.029843][ T7047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.308383][ T5723] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 164.405677][ T7071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.309'. [ 164.461060][ T5723] usb 2-1: New USB device found, idVendor=0921, idProduct=1200, bcdDevice=d6.6b [ 164.467554][ T5723] usb 2-1: config 213 has an invalid interface number: 27 but max is 0 [ 164.467582][ T5723] usb 2-1: config 213 has no interface number 0 [ 164.467640][ T5723] usb 2-1: config 213 interface 27 has no altsetting 0 [ 164.481297][ T5723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.484256][ T5723] usb 2-1: Product: syz [ 164.484274][ T5723] usb 2-1: Manufacturer: syz [ 164.484287][ T5723] usb 2-1: SerialNumber: syz [ 164.714768][ T7047] vlan0: left allmulticast mode [ 164.714794][ T7047] veth0_vlan: left allmulticast mode [ 164.714816][ T7047] vlan0: left promiscuous mode [ 164.761900][ T812] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.762630][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.762723][ T812] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.762760][ T812] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.555359][ T7091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.315'. [ 165.584004][ T7087] netlink: 24 bytes leftover after parsing attributes in process `syz.0.314'. [ 165.660824][ T7094] lo: left promiscuous mode [ 165.750329][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.758403][ T7101] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 165.828653][ T10] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 165.968603][ T988] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 165.982450][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 165.982502][ T10] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 165.984014][ T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 165.984079][ T10] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 165.989388][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.989414][ T10] usb 1-1: Product: syz [ 165.989427][ T10] usb 1-1: Manufacturer: syz [ 165.989440][ T10] usb 1-1: SerialNumber: syz [ 166.123626][ T988] usb 3-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 166.125753][ T988] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.143452][ T988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.143479][ T988] usb 3-1: Product: syz [ 166.143492][ T988] usb 3-1: Manufacturer: syz [ 166.143535][ T988] usb 3-1: SerialNumber: syz [ 166.161104][ T988] usb 3-1: config 0 descriptor?? [ 166.233178][ T10] usb 1-1: unit 4: unexpected type 0x03 [ 166.370084][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 166.374000][ T988] cdc_subset 3-1:0.0: probe with driver cdc_subset failed with error -22 [ 166.481750][ T10] usb 1-1: USB disconnect, device number 26 [ 166.520860][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 166.532720][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.532746][ T9] usb 4-1: Product: syz [ 166.532785][ T9] usb 4-1: Manufacturer: syz [ 166.532799][ T9] usb 4-1: SerialNumber: syz [ 166.582759][ T5634] udevd[5634]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 166.640927][ T7098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.644982][ T7098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.695500][ T988] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 166.837293][ T9] usb 3-1: USB disconnect, device number 27 [ 166.896342][ T5723] belkin_sa 2-1:213.27: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 166.934331][ T5723] usb 2-1: bcdDevice: d66b, bfc: 0 [ 166.949558][ T5723] usb 2-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 166.975940][ T5723] usb 2-1: USB disconnect, device number 21 [ 167.010295][ T5723] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 167.011231][ T5723] belkin_sa 2-1:213.27: device disconnected [ 167.117511][ T7105] netlink: 28 bytes leftover after parsing attributes in process `syz.3.317'. [ 167.139756][ T9] usb 4-1: USB disconnect, device number 17 [ 167.261806][ T5346] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 167.398413][ T5346] usb 1-1: device descriptor read/64, error -71 [ 167.608247][ T31] audit: type=1400 audit(1789916989.721:346): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3A3AEA pid=7119 comm="syz.2.322" [ 167.648448][ T5713] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 167.648646][ T5346] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 167.788485][ T5346] usb 1-1: device descriptor read/64, error -71 [ 167.798632][ T988] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 167.798816][ T988] ath9k_htc: Failed to initialize the device [ 167.800912][ T9] usb 4-1: ath9k_htc: USB layer deinitialized [ 167.812175][ T5713] usb 5-1: Using ep0 maxpacket: 16 [ 167.831820][ T5713] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 167.845741][ T5713] usb 5-1: config 0 has an invalid interface number: 78 but max is 0 [ 167.845772][ T5713] usb 5-1: config 0 has no interface number 0 [ 167.846582][ T5713] usb 5-1: too many endpoints for config 0 interface 78 altsetting 47: 190, using maximum allowed: 30 [ 167.846623][ T5713] usb 5-1: config 0 interface 78 altsetting 47 has 0 endpoint descriptors, different from the interface descriptor's value: 190 [ 167.846649][ T5713] usb 5-1: config 0 interface 78 has no altsetting 0 [ 167.846685][ T5713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.895614][ T5713] usb 5-1: config 0 descriptor?? [ 167.909073][ T5346] usb usb1-port1: attempt power cycle [ 168.008742][ T5723] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 168.101259][ T5713] usb 5-1: string descriptor 0 read error: -71 [ 168.115375][ T5713] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 168.121947][ T5713] gspca_sonixj: reg_w1 err -71 [ 168.122113][ T5713] sonixj 5-1:0.78: probe with driver sonixj failed with error -71 [ 168.128118][ T5713] usb 5-1: USB disconnect, device number 15 [ 168.159551][ T5723] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 168.161020][ T5723] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.161042][ T5723] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.161066][ T5723] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.164061][ T5723] usb 3-1: config 0 descriptor?? [ 168.268968][ T5346] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 168.295134][ T5346] usb 1-1: device descriptor read/8, error -71 [ 168.383029][ T5723] usbhid 3-1:0.0: can't add hid device: -71 [ 168.383113][ T5723] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 168.406622][ T5723] usb 3-1: USB disconnect, device number 28 [ 168.538457][ T5346] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 168.559058][ T5346] usb 1-1: device descriptor read/8, error -71 [ 168.668711][ T5346] usb usb1-port1: unable to enumerate USB device [ 168.848449][ T988] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 169.009219][ T988] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.40 [ 169.011257][ T988] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 169.011278][ T988] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.011301][ T988] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.015523][ T988] usb 3-1: config 0 descriptor?? [ 169.065813][ T988] pegasus_notetaker 3-1:0.0: packet size is too small (0) [ 169.065962][ T988] pegasus_notetaker 3-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 169.138398][ T5723] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 169.229655][ T988] usbhid 3-1:0.0: can't add hid device: -71 [ 169.229769][ T988] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 169.256571][ T988] usb 3-1: USB disconnect, device number 29 [ 169.298888][ T5723] usb 4-1: Using ep0 maxpacket: 32 [ 169.299648][ T5723] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 169.300782][ T5723] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.300810][ T5723] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.300839][ T5723] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.304505][ T5723] usb 4-1: config 0 descriptor?? [ 169.659931][ T7147] netlink: 71 bytes leftover after parsing attributes in process `syz.4.329'. [ 169.687519][ T7147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.329'. [ 169.722924][ T5723] hid_parser_main: 851 callbacks suppressed [ 169.722946][ T5723] ft260 0003:0403:6030.0007: unknown main item tag 0x0 [ 169.722966][ T5723] ft260 0003:0403:6030.0007: unknown main item tag 0x0 [ 169.811293][ T5723] ft260 0003:0403:6030.0007: chip code: 0000 0000 [ 170.014275][ T5723] ft260 0003:0403:6030.0007: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 170.140086][ T7161] vim2m vim2m.0: vidioc_s_fmt queue busy [ 170.229016][ T5723] ft260 0003:0403:6030.0007: failed to retrieve status: -71, no wakeup [ 170.229744][ T5723] ft260 0003:0403:6030.0007: failed to retrieve status: -71 [ 170.230980][ T5723] ft260 0003:0403:6030.0007: failed to reset I2C controller: -71 [ 170.393312][ T5723] usb 4-1: USB disconnect, device number 18 [ 170.442061][ T31] audit: type=1400 audit(1789916992.551:347): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=7166 comm="syz.0.332" [ 170.489726][ T5713] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 170.642500][ T5713] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 170.675323][ T5713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.675344][ T5713] usb 3-1: Product: syz [ 170.675353][ T5713] usb 3-1: Manufacturer: syz [ 170.675362][ T5713] usb 3-1: SerialNumber: syz [ 171.410332][ T7180] syzkaller1: entered promiscuous mode [ 171.410358][ T7180] syzkaller1: entered allmulticast mode [ 171.568426][ T5346] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 171.719410][ T5346] usb 2-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 171.722124][ T5346] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.722167][ T5346] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.722181][ T5346] usb 2-1: config 0 interface 0 has no altsetting 0 [ 171.722201][ T5346] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.752938][ T5346] usb 2-1: config 0 descriptor?? [ 171.946698][ T5713] rtl8150 3-1:1.0: couldn't reset the device [ 171.946950][ T5713] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 172.042284][ T7184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.334'. [ 172.172533][ T7187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.178898][ T7187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.221809][ T5346] uclogic 0003:5543:0522.0008: unknown main item tag 0x0 [ 172.221860][ T5346] uclogic 0003:5543:0522.0008: unknown main item tag 0x0 [ 172.221877][ T5346] uclogic 0003:5543:0522.0008: unknown main item tag 0x0 [ 172.221892][ T5346] uclogic 0003:5543:0522.0008: unknown main item tag 0x0 [ 172.221908][ T5346] uclogic 0003:5543:0522.0008: unknown main item tag 0x0 [ 172.221923][ T5346] uclogic 0003:5543:0522.0008: unknown main item tag 0x0 [ 172.221938][ T5346] uclogic 0003:5543:0522.0008: unknown main item tag 0x0 [ 172.221953][ T5346] uclogic 0003:5543:0522.0008: unknown main item tag 0x0 [ 172.288181][ T5346] uclogic 0003:5543:0522.0008: hidraw0: USB HID vff.fa Device [HID 5543:0522] on usb-dummy_hcd.1-1/input0 [ 172.403349][ T7187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.416895][ T7187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.437443][ T7187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.450478][ T7187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.508241][ T7187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.513886][ T7197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.530075][ T7187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.530565][ T7197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.181731][ T5723] usb 3-1: USB disconnect, device number 30 [ 173.848721][ T7223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.341'. [ 173.871229][ T7223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.897926][ T7223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.365091][ T5713] usb 2-1: USB disconnect, device number 22 [ 174.988448][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 175.080724][ T25] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 175.149403][ T9] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 175.155137][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.155157][ T9] usb 4-1: Product: syz [ 175.155166][ T9] usb 4-1: Manufacturer: syz [ 175.155174][ T9] usb 4-1: SerialNumber: syz [ 175.192741][ T9] usb 4-1: config 0 descriptor?? [ 175.197057][ T9] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 175.229586][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 175.231659][ T25] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 175.233157][ T25] usb 1-1: config 116 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 175.233180][ T25] usb 1-1: config 116 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 175.233202][ T25] usb 1-1: config 116 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 0 [ 175.238991][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.239015][ T25] usb 1-1: Product: syz [ 175.239028][ T25] usb 1-1: Manufacturer: syz [ 175.239042][ T25] usb 1-1: SerialNumber: syz [ 175.403871][ T9] gspca_sunplus: reg_r err -71 [ 175.406609][ T9] usb 4-1: USB disconnect, device number 19 [ 175.499641][ T25] em28xx 1-1:116.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 175.828629][ T25] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 175.958941][ T25] usb 5-1: device descriptor read/64, error -71 [ 175.960734][ T7259] netlink: 36 bytes leftover after parsing attributes in process `syz.2.352'. [ 175.962964][ T7258] netlink: 36 bytes leftover after parsing attributes in process `syz.2.352'. [ 175.965071][ T7259] netlink: 64 bytes leftover after parsing attributes in process `syz.2.352'. [ 175.966843][ T7258] netlink: 64 bytes leftover after parsing attributes in process `syz.2.352'. [ 176.084234][ T7259] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 176.084326][ T7258] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 176.102807][ T7258] af_packet: tpacket_rcv: packet too big, clamped from 110 to 4294967272. macoff=96 [ 176.188450][ T5713] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 176.198490][ T25] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 176.338398][ T25] usb 5-1: device descriptor read/64, error -71 [ 176.339023][ T5713] usb 2-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 176.340023][ T5713] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.340053][ T5713] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.340092][ T5713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.448871][ T25] usb usb5-port1: attempt power cycle [ 176.798434][ T25] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 176.819463][ T25] usb 5-1: device descriptor read/8, error -71 [ 176.944363][ T5713] usbhid 2-1:1.0: can't add hid device: -71 [ 176.944454][ T5713] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 176.966754][ T5713] usb 2-1: USB disconnect, device number 23 [ 177.058561][ T25] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 177.079329][ T25] usb 5-1: device descriptor read/8, error -71 [ 177.188684][ T25] usb usb5-port1: unable to enumerate USB device [ 178.288397][ T25] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 178.383145][ T5723] usb 1-1: USB disconnect, device number 31 [ 178.439185][ T25] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 178.440433][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.440459][ T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 178.441679][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 178.441703][ T25] usb 4-1: SerialNumber: syz [ 178.499199][ T43] IPVS: starting estimator thread 0... [ 178.541352][ T7307] netlink: 20 bytes leftover after parsing attributes in process `syz.1.361'. [ 178.541405][ T7307] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 178.608447][ T7305] IPVS: using max 26 ests per chain, 62400 per kthread [ 178.747015][ T25] usb 4-1: 0:2 : does not exist [ 178.866847][ T25] usb 4-1: USB disconnect, device number 20 [ 178.904746][ T5633] udevd[5633]: setting mode of /dev/bus/usb/004/020 to 020664 failed: No such file or directory [ 178.904883][ T5633] udevd[5633]: setting owner of /dev/bus/usb/004/020 to uid=0, gid=0 failed: No such file or directory [ 178.982961][ T7316] netlink: 12 bytes leftover after parsing attributes in process `syz.1.364'. [ 178.992432][ T5613] udevd[5613]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 179.097428][ T7316] 8021q: adding VLAN 0 to HW filter on device bond2 [ 179.739415][ T7343] xt_IDLETIMER: label is empty or not nul-terminated [ 179.757107][ T7343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.368'. [ 180.561797][ T7351] netlink: 20 bytes leftover after parsing attributes in process `syz.2.370'. [ 180.661253][ T7353] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 180.662099][ T7353] batman_adv: batadv0: Adding interface: netdevsim0 [ 180.662111][ T7353] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 180.662131][ T7353] batman_adv: batadv0: Interface activated: netdevsim0 [ 180.662443][ T7353] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 180.968372][ T5723] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 181.121196][ T5723] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 181.126777][ T5723] usb 4-1: config index 0 descriptor too short (expected 60772, got 100) [ 181.126797][ T5723] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.126808][ T5723] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 181.126835][ T5723] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 181.132537][ T5723] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.132560][ T5723] usb 4-1: Product: syz [ 181.132573][ T5723] usb 4-1: Manufacturer: syz [ 181.132586][ T5723] usb 4-1: SerialNumber: syz [ 181.152247][ T5723] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 181.152295][ T5723] cdc_ncm 4-1:1.0: bind() failure [ 181.953911][ T5346] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 182.005356][ T25] usb 4-1: USB disconnect, device number 21 [ 182.109241][ T5346] usb 2-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 182.111874][ T5346] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.114469][ T5346] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.114490][ T5346] usb 2-1: Product: syz [ 182.114499][ T5346] usb 2-1: Manufacturer: syz [ 182.114507][ T5346] usb 2-1: SerialNumber: syz [ 182.197898][ T5346] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 182.531298][ T9] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 182.668358][ T9] usb 1-1: device descriptor read/64, error -71 [ 182.688374][ T5723] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 182.835303][ T5346] gspca_mr97310a: reg write [19] error -71 [ 182.835361][ T5346] mr97310a 2-1:1.0: probe with driver mr97310a failed with error -71 [ 182.845794][ T5346] usb 2-1: USB disconnect, device number 24 [ 182.878389][ T5723] usb 4-1: Using ep0 maxpacket: 16 [ 182.879290][ T5723] usb 4-1: New USB device found, idVendor=2040, idProduct=8265, bcdDevice=b5.a3 [ 182.880804][ T5723] usb 4-1: config 2 has an invalid interface number: 12 but max is 0 [ 182.880831][ T5723] usb 4-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 182.880850][ T5723] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 182.880869][ T5723] usb 4-1: config 2 has no interface number 0 [ 182.880913][ T5723] usb 4-1: config 2 interface 12 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.880940][ T5723] usb 4-1: config 2 interface 12 altsetting 7 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 182.880964][ T5723] usb 4-1: config 2 interface 12 altsetting 7 endpoint 0x8A has invalid wMaxPacketSize 0 [ 182.880986][ T5723] usb 4-1: config 2 interface 12 has no altsetting 0 [ 182.883637][ T5723] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.883662][ T5723] usb 4-1: Product: syz [ 182.883678][ T5723] usb 4-1: Manufacturer: syz [ 182.883692][ T5723] usb 4-1: SerialNumber: syz [ 182.920537][ T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 183.058548][ T9] usb 1-1: device descriptor read/64, error -71 [ 183.170523][ T9] usb usb1-port1: attempt power cycle [ 183.223595][ T5723] em28xx 4-1:2.12: New device syz syz @ 480 Mbps (2040:8265, interface 12, class 12) [ 183.223621][ T5723] em28xx 4-1:2.12: Video interface 12 found: [ 183.223631][ T5723] em28xx 4-1:2.12: DVB interface 12 found: [ 183.278661][ T5723] em28xx 4-1:2.12: unknown em28xx chip ID (0) [ 183.309799][ T5346] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 183.341646][ T5723] em28xx 4-1:2.12: reading from i2c device at 0xa0 failed (error=-5) [ 183.341668][ T5723] em28xx 4-1:2.12: board has no eeprom [ 183.399354][ T5723] em28xx 4-1:2.12: Identified as Hauppauge WinTV-dualHD DVB (card=99) [ 183.399376][ T5723] em28xx 4-1:2.12: Currently, V4L2 is not supported on this model [ 183.399385][ T5723] em28xx 4-1:2.12: dvb set to bulk mode. [ 183.454044][ T7379] netlink: 16 bytes leftover after parsing attributes in process `syz.1.381'. [ 183.459002][ T5723] em28xx 4-1:2.12: unknown em28xx chip ID (0) [ 183.473910][ T5346] usb 5-1: Using ep0 maxpacket: 16 [ 183.480837][ T5346] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 183.491268][ T5346] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.491301][ T5346] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.491317][ T5346] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 183.491332][ T5346] usb 5-1: config 0 interface 0 has no altsetting 0 [ 183.491354][ T5346] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.495195][ T5346] usb 5-1: config 0 descriptor?? [ 183.522169][ T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 183.553725][ T9] usb 1-1: device descriptor read/8, error -71 [ 183.598496][ T5723] em28xx 4-1:2.12: reading from i2c device at 0xa0 failed (error=-5) [ 183.598527][ T5723] em28xx 4-1:2.12: board has no eeprom [ 183.688351][ T5723] em28xx 4-1:2.12: Identified as Hauppauge WinTV-dualHD DVB (card=99) [ 183.688386][ T5723] em28xx 4-1:2.12: dvb ts2 set to bulk mode. [ 183.738459][ T7377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.738831][ T7377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.798881][ T9] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 183.829176][ T9] usb 1-1: device descriptor read/8, error -71 [ 183.939036][ T9] usb usb1-port1: unable to enumerate USB device [ 183.947590][ T7385] netlink: 'syz.3.382': attribute type 10 has an invalid length. [ 183.979084][ T7385] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 183.982875][ T7385] team0: Port device netdevsim1 added [ 184.003406][ T9] em28xx 4-1:2.12: Binding DVB extension [ 184.003443][ T9] em28xx 4-1:2.12: no endpoint for DVB mod ** replaying previous printk message ** [ 184.003443][ T9] em28xx 4-1:2.12: no endpoint for DVB mode and transfer type 1 [ 184.003460][ T9] em28xx 4-1:2.12: failed to pre-allocate USB transfer buffers for DVB. [ 184.003482][ T9] em28xx 4-1:2.12: Binding DVB extension [ 184.003496][ T9] em28xx 4-1:2.12: no endpoint for DVB mode and transfer type 1 [ 184.003505][ T9] em28xx 4-1:2.12: failed to pre-allocate USB transfer buffers for DVB. [ 184.003522][ T9] em28xx 4-1:2.12: Registering input extension [ 184.003676][ T9] em28xx 4-1:2.12: Remote control support is not available for this card. [ 184.005082][ T7385] netlink: 'syz.3.382': attribute type 10 has an invalid length. [ 184.016000][ T5723] usb 4-1: USB disconnect, device number 22 [ 184.018660][ T5723] em28xx 4-1:2.12: Disconnecting em28xx #1 [ 184.018676][ T5723] em28xx 4-1:2.12: Disconnecting em28xx [ 184.018695][ T5723] em28xx 4-1:2.12: Closing input extension [ 184.018713][ T5723] em28xx 4-1:2.12: Closing input extension [ 184.018726][ T5723] list_del corruption, ffff888075ef0250->next is NULL [ 184.019193][ T5723] ------------[ cut here ]------------ [ 184.019201][ T5723] kernel BUG at lib/list_debug.c:53! [ 184.019221][ T5723] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 184.136501][ T5723] CPU: 0 UID: 0 PID: 5723 Comm: kworker/0:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 184.147459][ T5723] Tainted: [L]=SOFTLOCKUP [ 184.151781][ T5723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 184.161838][ T5723] Workqueue: usb_hub_wq hub_event [ 184.166895][ T5723] RIP: 0010:__list_del_entry_valid_or_report+0xdf/0x190 [ 184.173830][ T5723] Code: 49 39 1f 0f 85 9e 00 00 00 b0 01 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc cc 48 c7 c7 c0 9d 6d 8c 48 89 de e8 62 75 3d fc 90 <0f> 0b 48 c7 c7 20 9e 6d 8c 48 89 de e8 50 75 3d fc 90 0f 0b 4c 89 [ 184.193440][ T5723] RSP: 0000:ffffc90004dff380 EFLAGS: 00010246 [ 184.199511][ T5723] RAX: 0000000000000033 RBX: ffff888075ef0250 RCX: e32765b7b2d2d800 [ 184.207491][ T5723] RDX: ffffc90019728000 RSI: 000000000000439b RDI: 000000000000439c [ 184.215460][ T5723] RBP: dead000000000100 R08: ffffffff81a5c210 R09: 0000000000000000 [ 184.223441][ T5723] R10: dffffc0000000000 R11: fffffbfff20f4570 R12: 1ffffffff1fd0e39 [ 184.231431][ T5723] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 184.239411][ T5723] FS: 0000000000000000(0000) GS:ffff888124cd2000(0000) knlGS:0000000000000000 [ 184.248351][ T5723] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 184.254938][ T5723] CR2: 000000000c2f1f5c CR3: 000000007a6b6000 CR4: 00000000003526f0 [ 184.262910][ T5723] Call Trace: [ 184.266201][ T5723] [ 184.269135][ T5723] ? __pfx_em28xx_ir_fini+0x10/0x10 [ 184.274351][ T5723] em28xx_close_extension+0x15a/0x390 [ 184.279747][ T5723] em28xx_usb_disconnect+0x16b/0x2f0 [ 184.285058][ T5723] usb_unbind_interface+0x295/0x9f0 [ 184.290260][ T5723] ? kernfs_remove_by_name_ns+0x101/0x140 [ 184.295996][ T5723] ? kernfs_remove_by_name_ns+0x101/0x140 [ 184.301727][ T5723] ? __pfx_usb_unbind_interface+0x10/0x10 [ 184.307458][ T5723] device_release_driver_internal+0x4f5/0x880 [ 184.313539][ T5723] bus_remove_device+0x444/0x560 [ 184.318510][ T5723] ? __pfx_bus_remove_device+0x10/0x10 [ 184.323984][ T5723] ? kernfs_remove_by_name_ns+0x101/0x140 [ 184.329702][ T5723] device_del+0x524/0x8f0 [ 184.334042][ T5723] ? __pfx_device_del+0x10/0x10 [ 184.338922][ T5723] ? kobject_put+0x516/0x550 [ 184.343532][ T5723] usb_disable_device+0x3d4/0x8d0 [ 184.348570][ T5723] usb_disconnect+0x346/0x9a0 [ 184.353271][ T5723] hub_event+0x1bbb/0x4d30 [ 184.357702][ T5723] ? __lock_acquire+0x747/0x2de0 [ 184.362667][ T5723] ? register_lock_class+0x31/0x2e0 [ 184.367876][ T5723] ? __pfx_hub_event+0x10/0x10 [ 184.372644][ T5723] ? rcu_is_watching+0x16/0xb0 [ 184.377416][ T5723] ? process_scheduled_works+0x97a/0x1630 [ 184.383135][ T5723] process_scheduled_works+0xc3d/0x1630 [ 184.388695][ T5723] ? __pfx_process_scheduled_works+0x10/0x10 [ 184.394675][ T5723] ? assign_work+0x3cf/0x5d0 [ 184.399284][ T5723] worker_thread+0xa47/0xfb0 [ 184.403899][ T5723] kthread+0x38b/0x480 [ 184.407964][ T5723] ? __pfx_worker_thread+0x10/0x10 [ 184.413080][ T5723] ? __pfx_kthread+0x10/0x10 [ 184.417684][ T5723] ret_from_fork+0x514/0xb70 [ 184.422285][ T5723] ? __pfx_ret_from_fork+0x10/0x10 [ 184.427404][ T5723] ? __switch_to+0xc89/0x1420 [ 184.432094][ T5723] ? __pfx_kthread+0x10/0x10 [ 184.436700][ T5723] ret_from_fork_asm+0x1a/0x30 [ 184.441492][ T5723] [ 184.444506][ T5723] Modules linked in: [ 184.448967][ T5723] ---[ end trace 0000000000000000 ]--- [ 184.460420][ T7385] team0: Port device netdevsim1 removed [ 184.462879][ T7385] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 184.466744][ T7385] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 184.467829][ T5723] RIP: 0010:__list_del_entry_valid_or_report+0xdf/0x190 [ 184.467868][ T5723] Code: 49 39 1f 0f 85 9e 00 00 00 b0 01 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc cc 48 c7 c7 c0 9d 6d 8c 48 89 de e8 62 75 3d fc 90 <0f> 0b 48 c7 c7 20 9e 6d 8c 48 89 de e8 50 75 3d fc 90 0f 0b 4c 89 [ 184.467888][ T5723] RSP: 0000:ffffc90004dff380 EFLAGS: 00010246 [ 184.467908][ T5723] RAX: 0000000000000033 RBX: ffff888075ef0250 RCX: e32765b7b2d2d800 [ 184.467924][ T5723] RDX: ffffc90019728000 RSI: 000000000000439b RDI: 000000000000439c [ 184.467938][ T5723] RBP: dead000000000100 R08: ffffffff81a5c210 R09: 0000000000000000 [ 184.467954][ T5723] R10: dffffc0000000000 R11: fffffbfff20f4570 R12: 1ffffffff1fd0e39 [ 184.467970][ T5723] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 184.467985][ T5723] FS: 0000000000000000(0000) GS:ffff888124cd2000(0000) knlGS:0000000000000000 [ 184.468002][ T5723] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 184.468017][ T5723] CR2: 000000000c2f1f5c CR3: 000000007f140000 CR4: 00000000003526f0 [ 184.468040][ T5723] Kernel panic - not syncing: Fatal exception [ 184.591391][ T5723] Kernel Offset: disabled [ 184.595714][ T5723] Rebooting in 86400 seconds..