last executing test programs: 3m6.405031658s ago: executing program 1 (id=522): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff}]}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'vlan0\x00'}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000c1001000000000001c000000850000000e00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r3 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc00000000000000140000000000"], 0x68}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000600)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x0, 0x4}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) close(0x3) close(0x4) syz_usb_connect(0x2, 0x36, &(0x7f0000000f00)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce0102030109022400010000000009040000020de67a0009050402000200000009058102"], 0x0) 2m59.449659009s ago: executing program 1 (id=533): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0xd, 0xa, 0x100, "3258c5c0d60400080000450d00000f002000a2ed55554e241247000000f600", 0x32435750}) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) 2m57.816290362s ago: executing program 1 (id=536): syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB]) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 2m56.600126188s ago: executing program 1 (id=542): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000500)={0x0, 0x3, 0x4, "3d878068"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m52.904487896s ago: executing program 1 (id=547): openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r1, r1, r1}, 0x0, 0x0, 0x0) 2m51.230808388s ago: executing program 1 (id=550): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=@newtaction={0xf50, 0x30, 0x25, 0x0, 0x0, {}, [{0xf3c, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x4}, [{}, {}, {}, {0x0, 0x0, 0x4000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x100}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}], [{}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0xe8, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x1, 0xff, 0x4, 0x6}, {0x8, 0xa, 0x9, 0xe5ad}, {0x2, 0xfd, 0x3, 0x7}]}]}, {0xa4, 0x6, "aef41341fdedc57514e9e6b7c9a7d6c6f2710911ea3f03808c1cd540f74547537bf4bd3de3af39a159c644fdacd41501de3816424920bd50948bb71277cbcb3af35a087dfca43335c1d1f7676239b2932026b5e5e0d02760eb4305f349000de9580b5ad411948e208801ff4e11df28aa70701228e871fa62bd8e1d2b3abd2494e13f35b5933263a1b9ee64b0161ef7cc4e38117db59c3db871f9eb7078642fdf"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xf50}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mount$9p_virtio(&(0x7f00000000c0), 0x0, 0x0, 0x20000cc, 0x0) r4 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x400}, &(0x7f0000000240), &(0x7f0000000100), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_NAPI(r4, 0x1b, &(0x7f0000000040)={0xffffff01, 0x3}, 0x1) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x4c) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x81) 2m42.379244558s ago: executing program 3 (id=555): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = io_uring_setup(0x7, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x33, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2m37.368799313s ago: executing program 3 (id=562): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m35.662480075s ago: executing program 32 (id=550): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=@newtaction={0xf50, 0x30, 0x25, 0x0, 0x0, {}, [{0xf3c, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x4}, [{}, {}, {}, {0x0, 0x0, 0x4000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x100}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}], [{}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0xe8, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x1, 0xff, 0x4, 0x6}, {0x8, 0xa, 0x9, 0xe5ad}, {0x2, 0xfd, 0x3, 0x7}]}]}, {0xa4, 0x6, "aef41341fdedc57514e9e6b7c9a7d6c6f2710911ea3f03808c1cd540f74547537bf4bd3de3af39a159c644fdacd41501de3816424920bd50948bb71277cbcb3af35a087dfca43335c1d1f7676239b2932026b5e5e0d02760eb4305f349000de9580b5ad411948e208801ff4e11df28aa70701228e871fa62bd8e1d2b3abd2494e13f35b5933263a1b9ee64b0161ef7cc4e38117db59c3db871f9eb7078642fdf"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xf50}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mount$9p_virtio(&(0x7f00000000c0), 0x0, 0x0, 0x20000cc, 0x0) r4 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x400}, &(0x7f0000000240), &(0x7f0000000100), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_NAPI(r4, 0x1b, &(0x7f0000000040)={0xffffff01, 0x3}, 0x1) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x4c) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x81) 2m33.169837523s ago: executing program 3 (id=570): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x9fe, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 2m29.588456731s ago: executing program 3 (id=573): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) read$FUSE(0xffffffffffffffff, &(0x7f0000000700)={0x2020}, 0x2020) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd70102030109024d00010000000009040000050095c20009050000000000000007058433c4"], 0x0) 2m25.336500655s ago: executing program 3 (id=582): r0 = socket$l2tp(0x2, 0x2, 0x73) unshare(0x8040480) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x5) 2m24.032803345s ago: executing program 3 (id=586): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) 2m8.733994956s ago: executing program 33 (id=586): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) 37.539504862s ago: executing program 2 (id=760): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x12, &(0x7f00000001c0)={@private2}, 0x14) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/16) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) mkdirat$cgroup_root(0xffffffffffffff9c, 0xfffffffffffffffd, 0x1ff) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x2, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @ioapic={0x1000, 0xc000000, 0xfffffffb, 0xaaf, 0x0, [{0x4, 0x6, 0x2, '\x00', 0xfe}, {0x4, 0xe7, 0x9, '\x00', 0x7}, {0xf7, 0x8, 0x0, '\x00', 0x1}, {0x1, 0x5, 0x6, '\x00', 0x1}, {0xd2, 0x2, 0x5, '\x00', 0x6}, {0xe, 0x50, 0x0, '\x00', 0x9}, {0x7, 0x6, 0x7c, '\x00', 0x3}, {0x81, 0x8, 0x8, '\x00', 0x2}, {0xb, 0x80, 0xa, '\x00', 0x7}, {0x2, 0x9, 0x8, '\x00', 0x7}, {0xe, 0x80, 0x0, '\x00', 0x3}, {0x6, 0x40, 0x3, '\x00', 0x5}, {0x81, 0x81, 0x6, '\x00', 0x6}, {0x3, 0x2, 0x6, '\x00', 0x8}, {0x4, 0x2, 0x81}, {0x5, 0x0, 0x9, '\x00', 0x4}, {0x2, 0x9, 0xc1, '\x00', 0x3}, {0x5, 0x7, 0x5, '\x00', 0x9}, {0x23, 0x6, 0xb6, '\x00', 0x2}, {0x88, 0x3, 0x3f, '\x00', 0x4}, {0x8, 0xc, 0x3, '\x00', 0x3}, {0x0, 0x8, 0x6, '\x00', 0x5}, {0x6, 0x0, 0x8, '\x00', 0x10}, {0x40, 0x5, 0x81, '\x00', 0x5}]}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x6, 0x7, 0x5, 0x180, 0x0, 0x0, 0xf1, 0x9, 0x8, 0x5, 0x0, 0x9, 0x0, 0x8, 0x0, 0xbd9], 0x1, 0x1c4292}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x24040000) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r7, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 25.088792334s ago: executing program 2 (id=780): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000001800470001"], 0x17) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000025a000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x8, &(0x7f00000021c0)=[{0x4, 0xffffffff, 0x3}], 0x1, 0x1c3, 0x0, 0x0, 0x38, 0x16}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000b40)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r1, 0x0, &(0x7f0000343000/0xf000)=nil, 0xf000, 0x8000004004000004}) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000000)={0xc, 0x0}) ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, &(0x7f0000000040)={0x28, 0x7, r1, r2, 0x3, 0x1, 0x3fff}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 19.571073197s ago: executing program 2 (id=790): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x12, &(0x7f00000001c0)={@private2}, 0x14) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/16) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) mkdirat$cgroup_root(0xffffffffffffff9c, 0xfffffffffffffffd, 0x1ff) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x2, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @ioapic={0x1000, 0xc000000, 0xfffffffb, 0xaaf, 0x0, [{0x4, 0x6, 0x2, '\x00', 0xfe}, {0x4, 0xe7, 0x9, '\x00', 0x7}, {0xf7, 0x8, 0x0, '\x00', 0x1}, {0x1, 0x5, 0x6, '\x00', 0x1}, {0xd2, 0x2, 0x5, '\x00', 0x6}, {0xe, 0x50, 0x0, '\x00', 0x9}, {0x7, 0x6, 0x7c, '\x00', 0x3}, {0x81, 0x8, 0x8, '\x00', 0x2}, {0xb, 0x80, 0xa, '\x00', 0x7}, {0x2, 0x9, 0x8, '\x00', 0x7}, {0xe, 0x80, 0x0, '\x00', 0x3}, {0x6, 0x40, 0x3, '\x00', 0x5}, {0x81, 0x81, 0x6, '\x00', 0x6}, {0x3, 0x2, 0x6, '\x00', 0x8}, {0x4, 0x2, 0x81}, {0x5, 0x0, 0x9, '\x00', 0x4}, {0x2, 0x9, 0xc1, '\x00', 0x3}, {0x5, 0x7, 0x5, '\x00', 0x9}, {0x23, 0x6, 0xb6, '\x00', 0x2}, {0x88, 0x3, 0x3f, '\x00', 0x4}, {0x8, 0xc, 0x3, '\x00', 0x3}, {0x0, 0x8, 0x6, '\x00', 0x5}, {0x6, 0x0, 0x8, '\x00', 0x10}, {0x40, 0x5, 0x81, '\x00', 0x5}]}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x6, 0x7, 0x5, 0x180, 0x0, 0x0, 0xf1, 0x9, 0x8, 0x5, 0x0, 0x9, 0x0, 0x8, 0x0, 0xbd9], 0x1, 0x1c4292}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x24040000) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 16.025190562s ago: executing program 5 (id=800): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000012c0)={{0x12, 0x1, 0x110, 0x27, 0xaa, 0x18, 0x8, 0x402, 0x5602, 0x4983, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x50, 0xf, "", [{{0x9, 0x4, 0x58, 0x0, 0x0, 0x52, 0xb4, 0xa6, 0x2c}}]}}]}}, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x26, @string={0x26, 0x3, "c647ec282cf980b7de4c6c8dd960147b3a387c0139d5c360a34917aa80d4d11f704b83bf"}}}, &(0x7f0000000480)={0x44, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000340)={0x20, 0x81, 0x1, "86"}, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x3, "231bd0"}, &(0x7f0000000500)=ANY=[@ANYBLOB="20840200000066248ceca9b903701350eabeb09ede9160a9c96fb22d73f2f97fd9023a2233be75d0cdd1ed51cf037510b6bd7c5621b6a239abad736ee867d32378c2de0471c7e5febcf429213276ba17ec96a9e5628a0ecdf5017756664863bc8e703fdd879355385e8959cc939d3ff21a90fec836d26e3da067efcb5b0adb290ad2f19a97ce937da11f78aae4fc533191f9d00bcf8be4890c38f0c57d32f00ad24e0ee538a0d630dbfd38"], &(0x7f0000000440)={0x20, 0x85, 0x3, "ee6bba"}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0xb, 0xfffff038}, {0x20, 0x81, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmmsg(r1, &(0x7f0000001c00), 0x400000000000159, 0x40840) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x42002, 0x0) fallocate(r4, 0x11, 0x600, 0x7c000) 15.630369971s ago: executing program 0 (id=802): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x6}}, 0x20) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) 14.879819025s ago: executing program 0 (id=805): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ppoll(&(0x7f0000000240)=[{r0, 0x241c}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000000540)={0x2020}, 0x2020) 13.297524539s ago: executing program 0 (id=807): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$vimc2(0xffffff9c, &(0x7f0000000500), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0xdf9e32a0640bc3f8, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x8, 0x27fd, 0x7fff, 0x440, 0x3, 0xd, 0x22, {0x45, 0x80}, 0xcd, 0x3}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x3, 0x0, 0xf, 0x80000006}, 0x0, 0x0) syz_open_procfs(0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x100013, 0xffffffffffffffff, 0x7f571000) r3 = openat$urandom(0xffffffffffffff9c, 0x0, 0x50000, 0x0) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000080)=0x7b56) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000880)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a7309002500000000000f4743f490c585108c1331c7749299a25a705f5096cb268cbc60efd680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca512b5f379c4eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7f804bb4713019a83353dc519d11c3cc1c22a3b86cf3c645413fcea0ce9ded703699d2bb6a4a663b99b6069da5aaf64785a58847440f064b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200216032811fadcf1e0f49a514df529061e09ce45e3f303a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a250200000000000000d23d324205000000000000000a617f22133b6cb5087f4c6057942ad995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a3cff46591ccaff3075b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8841416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedcbefc5990d7fed29a002ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d559b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756d732533c2722e03002293e37966611602f297de6ff5408777d7a93c45cee3ee5c56e8a3e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f6579ef62866a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c909cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc562507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f80000000000001700000000000000000000000000000000000200"}) 11.411977937s ago: executing program 4 (id=809): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004041) r0 = io_uring_setup(0x1978, &(0x7f0000000040)={0x0, 0xca72, 0x1cc90, 0x0, 0x20002fb}) socket$inet(0x2, 0x80001, 0x84) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x3, {0x11, 0x0, 0x0, '\x00', {0x9ca7a16b958dcf33, 0xf602, 0x6, 0xfffffff3, 0x0, 0x0, 0x0, '\x00', 0xfffffffffffffffe, 0x0, 0x1ff, 0x0, {}, {0x5, 0x2}, {0xfffffffffffffffb, 0x4}, {0x5}, 0x60, 0x0, 0x7fff}}}}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 10.715492035s ago: executing program 5 (id=810): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000a000100aaaaaaaaaa000000300012800c0001006d6163766c616e002000028008000300030000000a0004000180c200"], 0x5c}}, 0x0) 9.953314248s ago: executing program 0 (id=812): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff}]}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'vlan0\x00'}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000c1001000000000001c000000850000000e00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r4 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc00000000000000140000000000"], 0x68}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000600)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x0, 0x4}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) close(0x3) close(0x4) syz_usb_connect(0x2, 0x36, &(0x7f0000000f00)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce0102030109022400010000000009040000020de67a0009050402000200000009058102"], 0x0) 9.929036299s ago: executing program 5 (id=813): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYRES16=r2, @ANYBLOB="01002bbd7000fddbdf253700000008000300", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x90) 9.812503478s ago: executing program 4 (id=814): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x20, 0x1, 0xffffffff, 0x0, {0xa, 0x10, 0x40, 0x4, 0x20, 0x0, 0x0, 0x6}, [@FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x30}, 0x1, 0x0, 0x0, 0xc011}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@getrule={0x14, 0x22, 0x100, 0x70bd2b, 0x25dfdbff, {}, [""]}, 0x14}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfbffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0xe, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x5, 0xa, 0x3}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}}, 0x800) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$igmp(0x2, 0x3, 0x2) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000180)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 9.533309173s ago: executing program 6 (id=815): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x6}}, 0x20) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) 9.230753199s ago: executing program 5 (id=816): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000001800470001"], 0x17) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%pI4 \x00'}, 0x20) 8.716497138s ago: executing program 4 (id=817): r0 = syz_open_dev$evdev(0x0, 0x0, 0x40400) r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f0000000080)=0x18) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) gettid() futex(&(0x7f0000000240)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000080)="1a0000000200", 0x6) sendto$inet6(r3, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56545, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xe, 0xe}, {0x0, 0xf}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffff3}]}, 0x2c}}, 0x0) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r3, &(0x7f0000006700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/31, 0x1f}, 0x11}], 0x621, 0x10162, 0x0) 8.531026744s ago: executing program 6 (id=818): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e7cc6120c4108a81ad7d010203010902"], 0x0) 8.457029426s ago: executing program 5 (id=819): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mkdir(0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) fsetxattr$security_evm(r0, &(0x7f0000000000), &(0x7f0000000200)=@v2={0x5, 0x3, 0x6, 0x3}, 0x9, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) pwritev2(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000100)="3f6c5b761046b0a77db63c34e13408e27fcea6c7605a226d926b187e4d85c6dc144795bcb7eb57aa924187b4915c60848ced868e669e7383365c1b98ccdf87f4db91bf74c981a25caf0102470956f6b38a96d397cb995a13c9f1c474091c01e8c3c09a356e7dac9e7405acd7d332ba3fbb177cd8b2ffba8cc8d01264085fa41b35c651a946b8f2034baaa01bc5c5b1179e2e6e82dc3f059c52451ba5abc1044990b6d53f87b45e2d4474bd7139e5b14d776da51f", 0xb4}, {&(0x7f00000003c0)="87348b520f8a493ad8a047181df6537bdb1a05021f46d8199da66dd518ae99529927d7ba3d466263445843914d169d37b43a394b7f72563bb2b3f4d7d82ce7f5fd8465297d841e964f9ebefcab497fd319e92f52", 0x54}, {&(0x7f0000000500)="f92c1e79acd0f7cdc8d83328244f9958c71163a4241065d197e16cc0f83b426f50", 0x21}, {&(0x7f0000000540)="2f3a267f685a2d1298bed1b1df1e89e1fd29af64d0999594571ec52aa9ef8d2142b7d0ee618cd40d6c820d028cd41af19d307be674027c1096e85f739afb383cde82b296fa62d3e85d13dc0ba6", 0x4d}, {&(0x7f00000006c0)="e41f05dc16087eaa615d6cc17c724db20ecf037f8905b4dea665493313177818e3e477555bd1c25db400e697f0761b9c895f030e8bb59b367b32f2a4d15a3cc7d71de311161fdd79c9bd23764c8b8b4c28175e6412e8285def8ef3048ef079d7c1c8fb7038e6937bbc02e50d", 0x6c}], 0x5, 0x9, 0x1, 0x1c) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) openat$dir(0xffffffffffffff9c, 0x0, 0xa1c3, 0x6) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)={0x0, 0xfffffefc, 0xffdffff8, 0x8, 0x15, "000000000000000000000000000000f30200"}) syz_open_pts(0xffffffffffffffff, 0x61c0) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x0, 0x0, 0x9e25, 0x0, 0xc}, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000340)=0x8) mount$bpf(0x0, 0x0, 0x0, 0x5805040, &(0x7f0000000100)=ANY=[@ANYBLOB="7569ce8f", @ANYRESHEX=0x0, @ANYBLOB=',\x00']) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xd4}}, 0x4000010) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x4000) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) dup2(r3, r3) 5.717164125s ago: executing program 2 (id=820): r0 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x65) 5.265840318s ago: executing program 5 (id=821): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x800, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4004002) socket(0x1d, 0x2, 0x6) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1ce241, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000100)=0x1, 0x4) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 5.218745521s ago: executing program 0 (id=822): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$vimc2(0xffffff9c, &(0x7f0000000500), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0xdf9e32a0640bc3f8, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x8, 0x27fd, 0x7fff, 0x440, 0x3, 0xd, 0x22, {0x45, 0x80}, 0xcd, 0x3}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x3, 0x0, 0xf, 0x80000006}, 0x0, 0x0) syz_open_procfs(0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x100013, 0xffffffffffffffff, 0x7f571000) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x50000, 0x0) ioctl$RNDADDTOENTCNT(r3, 0x40045201, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000880)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a7309002500000000000f4743f490c585108c1331c7749299a25a705f5096cb268cbc60efd680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca512b5f379c4eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7f804bb4713019a83353dc519d11c3cc1c22a3b86cf3c645413fcea0ce9ded703699d2bb6a4a663b99b6069da5aaf64785a58847440f064b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200216032811fadcf1e0f49a514df529061e09ce45e3f303a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a250200000000000000d23d324205000000000000000a617f22133b6cb5087f4c6057942ad995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a3cff46591ccaff3075b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8841416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedcbefc5990d7fed29a002ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d559b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756d732533c2722e03002293e37966611602f297de6ff5408777d7a93c45cee3ee5c56e8a3e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f6579ef62866a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c909cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc562507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f80000000000001700000000000000000000000000000000000200"}) 4.737415543s ago: executing program 6 (id=823): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000a000100aaaaaaaaaa000000300012800c0001006d6163766c616e002000028008000300030000000a0004000180c200"], 0x5c}}, 0x0) 3.837167253s ago: executing program 2 (id=824): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 3.650250376s ago: executing program 4 (id=825): syz_emit_ethernet(0x16c, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x136, 0x3a, 0xff, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xf8, 0xfffffffc, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, '\x00'/12}, {0x18, 0xc, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d"}, {0x0, 0xc, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f"}]}}}}}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@tracing={0x0, 0x5}}, 0x20) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 3.365153001s ago: executing program 6 (id=826): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYRES16=r2, @ANYBLOB="01002bbd7000fddbdf253700000008000300", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x90) 2.620033223s ago: executing program 4 (id=827): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x20, 0x1, 0xffffffff, 0x0, {0xa, 0x10, 0x40, 0x4, 0x20, 0x0, 0x0, 0x6}, [@FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x30}, 0x1, 0x0, 0x0, 0xc011}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@getrule={0x14, 0x22, 0x100, 0x70bd2b, 0x25dfdbff, {}, [""]}, 0x14}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfbffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0xe, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x5, 0xa, 0x3}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}}, 0x800) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000180)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 2.59724201s ago: executing program 6 (id=828): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) sendmmsg$inet(r1, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="93", 0x1}], 0x1}}], 0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x6}}, 0x20) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) 2.27674844s ago: executing program 0 (id=829): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x34, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) r2 = creat(0x0, 0x13a) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007a0001060000000045c9d4517cebcd526930a0d2"], 0x18}], 0x1}, 0x4004080) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c000000100001042bbd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a1c001280110001006272696467655f736c6132f378046a43340d0580"], 0x3c}, 0x1, 0x0, 0x0, 0x240400c4}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20) r7 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r7, &(0x7f0000001380)={0x2020}, 0x2020) r8 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x820000, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) writev(r8, &(0x7f0000000300)=[{&(0x7f0000000340)="f3e6", 0x2}], 0x1) 1.691028718s ago: executing program 6 (id=830): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x12, &(0x7f00000001c0)={@private2}, 0x14) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/16) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) mkdirat$cgroup_root(0xffffffffffffff9c, 0xfffffffffffffffd, 0x1ff) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x2, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @ioapic={0x1000, 0xc000000, 0xfffffffb, 0xaaf, 0x0, [{0x4, 0x6, 0x2, '\x00', 0xfe}, {0x4, 0xe7, 0x9, '\x00', 0x7}, {0xf7, 0x8, 0x0, '\x00', 0x1}, {0x1, 0x5, 0x6, '\x00', 0x1}, {0xd2, 0x2, 0x5, '\x00', 0x6}, {0xe, 0x50, 0x0, '\x00', 0x9}, {0x7, 0x6, 0x7c, '\x00', 0x3}, {0x81, 0x8, 0x8, '\x00', 0x2}, {0xb, 0x80, 0xa, '\x00', 0x7}, {0x2, 0x9, 0x8, '\x00', 0x7}, {0xe, 0x80, 0x0, '\x00', 0x3}, {0x6, 0x40, 0x3, '\x00', 0x5}, {0x81, 0x81, 0x6, '\x00', 0x6}, {0x3, 0x2, 0x6, '\x00', 0x8}, {0x4, 0x2, 0x81}, {0x5, 0x0, 0x9, '\x00', 0x4}, {0x2, 0x9, 0xc1, '\x00', 0x3}, {0x5, 0x7, 0x5, '\x00', 0x9}, {0x23, 0x6, 0xb6, '\x00', 0x2}, {0x88, 0x3, 0x3f, '\x00', 0x4}, {0x8, 0xc, 0x3, '\x00', 0x3}, {0x0, 0x8, 0x6, '\x00', 0x5}, {0x6, 0x0, 0x8, '\x00', 0x10}, {0x40, 0x5, 0x81, '\x00', 0x5}]}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x6, 0x7, 0x5, 0x180, 0x0, 0x0, 0xf1, 0x9, 0x8, 0x5, 0x0, 0x9, 0x0, 0x8, 0x0, 0xbd9], 0x1, 0x1c4292}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x24040000) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 980.210518ms ago: executing program 4 (id=831): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mkdir(0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) fsetxattr$security_evm(r0, &(0x7f0000000000), &(0x7f0000000200)=@v2={0x5, 0x3, 0x6, 0x3}, 0x9, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) pwritev2(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000100)="3f6c5b761046b0a77db63c34e13408e27fcea6c7605a226d926b187e4d85c6dc144795bcb7eb57aa924187b4915c60848ced868e669e7383365c1b98ccdf87f4db91bf74c981a25caf0102470956f6b38a96d397cb995a13c9f1c474091c01e8c3c09a356e7dac9e7405acd7d332ba3fbb177cd8b2ffba8cc8d01264085fa41b35c651a946b8f2034baaa01bc5c5b1179e2e6e82dc3f059c52451ba5abc1044990b6d53f87b45e2d4474bd7139e5b14d776da51f", 0xb4}, {&(0x7f00000003c0)="87348b520f8a493ad8a047181df6537bdb1a05021f46d8199da66dd518ae99529927d7ba3d466263445843914d169d37b43a394b7f72563bb2b3f4d7d82ce7f5fd8465297d841e964f9ebefcab497fd319e92f52", 0x54}, {&(0x7f0000000500)="f92c1e79acd0f7cdc8d83328244f9958c71163a4241065d197e16cc0f83b426f50", 0x21}, {&(0x7f0000000540)="2f3a267f685a2d1298bed1b1df1e89e1fd29af64d0999594571ec52aa9ef8d2142b7d0ee618cd40d6c820d028cd41af19d307be674027c1096e85f739afb383cde82b296fa62d3e85d13dc0ba6", 0x4d}, {&(0x7f00000006c0)="e41f05dc16087eaa615d6cc17c724db20ecf037f8905b4dea665493313177818e3e477555bd1c25db400e697f0761b9c895f030e8bb59b367b32f2a4d15a3cc7d71de311161fdd79c9bd23764c8b8b4c28175e6412e8285def8ef3048ef079d7c1c8fb7038e6937bbc02e50d", 0x6c}], 0x5, 0x9, 0x1, 0x1c) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) openat$dir(0xffffffffffffff9c, 0x0, 0xa1c3, 0x6) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)={0x0, 0xfffffefc, 0xffdffff8, 0x8, 0x15, "000000000000000000000000000000f30200"}) syz_open_pts(0xffffffffffffffff, 0x61c0) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x0, 0x0, 0x9e25, 0x0, 0xc}, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000340)=0x8) mount$bpf(0x0, 0x0, 0x0, 0x5805040, &(0x7f0000000100)=ANY=[@ANYBLOB="7569ce8f", @ANYRESHEX=0x0, @ANYBLOB=',\x00']) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xd4}}, 0x4000010) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x4000) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) dup2(r3, r3) 0s ago: executing program 2 (id=832): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff}]}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'vlan0\x00'}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r4 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc00000000000000140000000000"], 0x68}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000600)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x0, 0x4}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) close(0x3) close(0x4) syz_usb_connect(0x2, 0x36, &(0x7f0000000f00)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce0102030109022400010000000009040000020de67a0009050402000200000009058102"], 0x0) kernel console output (not intermixed with test programs): changing to 11 [ 368.602422][ T5677] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 368.620420][ T5677] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 368.633214][ T5677] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 368.660318][ T5677] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 368.800173][ T5677] usb 3-1: config 168 interface 0 has no altsetting 0 [ 368.829559][ T5677] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 368.841047][ T5677] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 368.992330][ T5677] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 369.006215][ T5677] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 369.023862][ T5677] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 369.047163][ T5677] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 369.100181][ T5677] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 369.114180][ T5677] usb 3-1: config 168 interface 0 has no altsetting 0 [ 369.134450][ T5677] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 369.144145][ T5677] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 369.171673][ T5677] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 369.213910][ T5677] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 369.278509][ T5677] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 369.323878][ T5677] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 369.371893][ T5677] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 369.423940][ T5677] usb 3-1: config 168 interface 0 has no altsetting 0 [ 369.476941][ T5677] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 369.508510][ T5677] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.543343][ T5677] usb 3-1: Product: syz [ 369.571346][ T5677] usb 3-1: Manufacturer: syz [ 369.591505][ T5677] usb 3-1: SerialNumber: syz [ 369.660047][ T24] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 369.834120][ T24] usb 2-1: device descriptor read/64, error -71 [ 370.038812][ T5677] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 370.106339][ T5677] usb 3-1: USB disconnect, device number 13 [ 370.113492][ T24] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 370.270536][ T5679] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 370.286475][ T24] usb 2-1: device descriptor read/64, error -71 [ 370.421150][ T24] usb usb2-port1: attempt power cycle [ 370.441525][ T5679] usb 4-1: device descriptor read/64, error -71 [ 370.730165][ T5679] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 370.800526][ T24] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 370.868079][ T24] usb 2-1: device descriptor read/8, error -71 [ 370.933866][ T5679] usb 4-1: device descriptor read/64, error -71 [ 371.093525][ T5679] usb usb4-port1: attempt power cycle [ 371.130052][ T24] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 371.181484][ T24] usb 2-1: device descriptor read/8, error -71 [ 371.316313][ T24] usb usb2-port1: unable to enumerate USB device [ 371.481814][ T5679] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 371.522717][ T5679] usb 4-1: device descriptor read/8, error -71 [ 371.794510][ T5679] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 371.858606][ T5679] usb 4-1: device descriptor read/8, error -71 [ 371.985112][ T5679] usb usb4-port1: unable to enumerate USB device [ 373.459898][ T7258] overlayfs: failed to resolve '/ile0': -2 [ 374.031439][ T7275] fuse: Bad value for 'fd' [ 374.851935][ T9] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 374.920100][ T5679] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 375.045736][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 375.045866][ T9] usb 1-1: config 0 has no interface number 0 [ 375.045976][ T9] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 375.047229][ T9] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 375.047528][ T9] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 375.047657][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.052841][ T5679] usb 4-1: device descriptor read/64, error -71 [ 375.078076][ T9] usb 1-1: config 0 descriptor?? [ 375.088841][ T7281] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 375.157771][ T9] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 375.290301][ T5679] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 375.353409][ T9] usb 1-1: USB disconnect, device number 13 [ 375.424321][ T5679] usb 4-1: device descriptor read/64, error -71 [ 375.535863][ T5679] usb usb4-port1: attempt power cycle [ 375.900155][ T5679] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 375.922474][ T5679] usb 4-1: device descriptor read/8, error -71 [ 376.090082][ T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 376.160049][ T5679] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 376.191847][ T5679] usb 4-1: device descriptor read/8, error -71 [ 376.230016][ T24] usb 3-1: device descriptor read/64, error -71 [ 376.301236][ T5679] usb usb4-port1: unable to enumerate USB device [ 376.479849][ T24] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 376.632302][ T24] usb 3-1: device descriptor read/64, error -71 [ 376.773328][ T7306] nvme_fabrics: missing parameter 'transport=%s' [ 376.793075][ T24] usb usb3-port1: attempt power cycle [ 376.806364][ T7306] nvme_fabrics: missing parameter 'nqn=%s' [ 376.850140][ T5677] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 377.033807][ T5677] usb 2-1: too many configurations: 53, using maximum allowed: 8 [ 377.141190][ T5677] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 377.164066][ T5677] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.181716][ T24] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 377.193298][ T5677] usb 2-1: Product: syz [ 377.209931][ T5677] usb 2-1: Manufacturer: syz [ 377.240234][ T24] usb 3-1: device descriptor read/8, error -71 [ 377.251392][ T5677] usb 2-1: SerialNumber: syz [ 377.529392][ T7318] overlayfs: failed to resolve '/ile0': -2 [ 377.700333][ T24] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 378.082660][ T24] usb 3-1: device descriptor read/8, error -71 [ 378.203354][ T24] usb usb3-port1: unable to enumerate USB device [ 378.939389][ T5677] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 378.982155][ T5677] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 379.038307][ T5677] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 379.143001][ T5677] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 379.243216][ T5677] usb 2-1: USB disconnect, device number 15 [ 380.267541][ T29] audit: type=1326 audit(1778996260.938:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7354 comm="syz.0.454" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee2b39ce59 code=0x0 [ 380.323813][ T5592] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 380.481048][ T7360] netlink: 'syz.0.454': attribute type 1 has an invalid length. [ 380.542607][ T5592] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 380.587561][ T5592] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 380.640670][ T5592] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 380.890037][ T5679] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 381.008897][ T5592] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 381.225307][ T5592] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 381.235253][ T5592] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.250424][ T5592] usb 2-1: Product: syz [ 381.254834][ T5592] usb 2-1: Manufacturer: syz [ 381.259807][ T5592] usb 2-1: SerialNumber: syz [ 381.296019][ T5592] usb 2-1: config 0 descriptor?? [ 381.350377][ T5592] garmin_gps 2-1:0.0: Garmin GPS usb/tty converter detected [ 381.366310][ T5679] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 381.383235][ T5592] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 381.408509][ T5679] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 60731, setting to 64 [ 381.425976][ T5592] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 381.458784][ T5679] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 381.499906][ T5679] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.543804][ T5592] usb 2-1: USB disconnect, device number 16 [ 381.552092][ T5679] usb 1-1: Product: syz [ 381.565843][ T5679] usb 1-1: Manufacturer: syz [ 381.576028][ T5592] garmin_gps 2-1:0.0: device disconnected [ 381.585997][ T5679] usb 1-1: SerialNumber: syz [ 381.626202][ T5679] usb 1-1: config 0 descriptor?? [ 381.671261][ T7360] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 381.682235][ T7360] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 381.757613][ C0] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71) [ 381.768942][ T5679] mcba_usb 1-1:0.0: Microchip CAN BUS Analyzer connected [ 381.769348][ C0] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71) [ 382.211794][ T7373] netlink: 16 bytes leftover after parsing attributes in process `syz.3.460'. [ 383.081588][ T5679] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 383.299886][ T5679] usb 2-1: too many configurations: 53, using maximum allowed: 8 [ 383.418814][ T5679] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 383.445856][ T5679] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.483869][ T5679] usb 2-1: Product: syz [ 383.498287][ T5679] usb 2-1: Manufacturer: syz [ 383.521712][ T5679] usb 2-1: SerialNumber: syz [ 383.553015][ T5677] usb 1-1: USB disconnect, device number 14 [ 383.660778][ T5677] mcba_usb 1-1:0.0 can0: device disconnected [ 384.683660][ T5677] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 384.859978][ T5677] usb 5-1: Using ep0 maxpacket: 32 [ 384.905617][ T5677] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 384.905769][ T5677] usb 5-1: config 0 has no interface number 0 [ 384.905889][ T5677] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 384.938068][ T5677] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 384.938208][ T5677] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.938322][ T5677] usb 5-1: Product: syz [ 384.938409][ T5677] usb 5-1: Manufacturer: syz [ 384.938524][ T5677] usb 5-1: SerialNumber: syz [ 384.976340][ T5677] usb 5-1: config 0 descriptor?? [ 385.115399][ T5677] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 385.115559][ T5677] em28xx 5-1:0.132: Video interface 132 found: [ 385.198272][ T5679] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 385.198507][ T5679] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 385.198617][ T5679] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 385.261088][ T5679] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 385.337139][ T5679] usb 2-1: USB disconnect, device number 17 [ 385.438688][ T5677] em28xx 5-1:0.132: unknown em28xx chip ID (39) [ 385.976651][ T5677] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 385.976854][ T5677] em28xx 5-1:0.132: board has no eeprom [ 386.037041][ T5677] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 386.037292][ T5677] em28xx 5-1:0.132: analog set to bulk mode. [ 386.042878][ T806] em28xx 5-1:0.132: Registering V4L2 extension [ 386.092869][ T5677] usb 5-1: USB disconnect, device number 6 [ 386.108490][ T5677] em28xx 5-1:0.132: Disconnecting em28xx [ 387.281127][ T7426] netlink: 48 bytes leftover after parsing attributes in process `syz.1.474'. [ 388.584839][ T29] audit: type=1326 audit(1778996269.238:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.4.477" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2b7d59ce59 code=0x0 [ 388.996838][ T806] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 389.032093][ T806] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 389.066851][ T806] em28xx 5-1:0.132: No AC97 audio processor [ 389.089720][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 389.098338][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.158647][ T806] usb 5-1: Decoder not found [ 389.191837][ T806] em28xx 5-1:0.132: failed to create media graph [ 389.246787][ T806] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 389.301773][ T806] em28xx 5-1:0.132: Remote control support is not available for this card. [ 389.369044][ T5677] em28xx 5-1:0.132: Closing input extension [ 389.426931][ T5677] em28xx 5-1:0.132: Freeing device [ 389.497874][ T6127] udevd[6127]: setting mode of /dev/bus/usb/005/006 to 020664 failed: No such file or directory [ 389.595372][ T6127] udevd[6127]: setting owner of /dev/bus/usb/005/006 to uid=0, gid=0 failed: No such file or directory [ 389.843777][ T5677] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 390.061936][ T5677] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 390.139234][ T5677] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 60731, setting to 64 [ 390.259571][ T5677] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 390.326807][ T5677] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.380632][ T5677] usb 5-1: Product: syz [ 390.414765][ T5677] usb 5-1: Manufacturer: syz [ 390.443895][ T5677] usb 5-1: SerialNumber: syz [ 390.501143][ T5677] usb 5-1: config 0 descriptor?? [ 390.508245][ T29] audit: type=1326 audit(1778996271.178:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7471 comm="syz.0.485" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee2b39ce59 code=0x7ffc0000 [ 390.535729][ T7445] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 390.581557][ T7445] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 390.620979][ T806] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 390.641454][ T29] audit: type=1326 audit(1778996271.178:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7471 comm="syz.0.485" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee2b39ce59 code=0x7ffc0000 [ 391.084985][ T806] usb 2-1: too many configurations: 53, using maximum allowed: 8 [ 391.374826][ T29] audit: type=1326 audit(1778996271.208:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7471 comm="syz.0.485" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee2b39ce59 code=0x7ffc0000 [ 391.392326][ C1] mcba_usb 5-1:0.0 can0: Tx URB aborted (-71) [ 391.444288][ T29] audit: type=1326 audit(1778996271.218:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7471 comm="syz.0.485" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee2b39ce59 code=0x7ffc0000 [ 391.525465][ T5677] mcba_usb 5-1:0.0: Microchip CAN BUS Analyzer connected [ 391.525788][ C1] mcba_usb 5-1:0.0 can0: Tx URB aborted (-71) [ 391.587791][ T806] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 391.614807][ T806] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.673663][ T806] usb 2-1: Product: syz [ 391.711564][ T806] usb 2-1: Manufacturer: syz [ 391.739143][ T29] audit: type=1326 audit(1778996271.238:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7471 comm="syz.0.485" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fee2b39ce59 code=0x7ffc0000 [ 391.806365][ T806] usb 2-1: SerialNumber: syz [ 391.925029][ T29] audit: type=1326 audit(1778996271.238:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7471 comm="syz.0.485" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee2b39ce59 code=0x7ffc0000 [ 392.139877][ T29] audit: type=1326 audit(1778996271.238:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7471 comm="syz.0.485" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee2b39ce59 code=0x7ffc0000 [ 392.307211][ T29] audit: type=1326 audit(1778996271.238:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7471 comm="syz.0.485" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee2b39ce59 code=0x7ffc0000 [ 392.481641][ T29] audit: type=1326 audit(1778996271.238:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7471 comm="syz.0.485" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee2b39ce59 code=0x7ffc0000 [ 392.555903][ T7488] netlink: 48 bytes leftover after parsing attributes in process `syz.3.488'. [ 392.726476][ T5677] usb 5-1: USB disconnect, device number 7 [ 392.812382][ T5677] mcba_usb 5-1:0.0 can0: device disconnected [ 393.270073][ T7494] loop2: detected capacity change from 0 to 7 [ 393.360870][ T7494] Dev loop2: unable to read RDB block 7 [ 393.383065][ T7494] loop2: unable to read partition table [ 393.560655][ T7494] loop2: partition table beyond EOD, truncated [ 393.613719][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 393.613788][ T29] audit: type=1326 audit(1778996274.288:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7471 comm="syz.0.485" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fee2b35d68e code=0x7ffc0000 [ 393.688506][ T7494] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 394.127513][ T29] audit: type=1326 audit(1778996274.348:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7471 comm="syz.0.485" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fee2b39ce59 code=0x7ffc0000 [ 394.170611][ T806] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 394.183322][ T806] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 394.196342][ T806] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 394.322198][ T806] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 394.339068][ T29] audit: type=1326 audit(1778996274.378:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7471 comm="syz.0.485" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fee2b39ce59 code=0x7ffc0000 [ 394.462081][ T806] usb 2-1: USB disconnect, device number 18 [ 394.860241][ T7502] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3415132644 (218568489216 ns) > initial count (61062497600 ns). Using initial count to start timer. [ 394.884612][ T7503] team0: entered promiscuous mode [ 394.912755][ T7503] team_slave_0: entered promiscuous mode [ 394.957594][ T7503] team_slave_1: entered promiscuous mode [ 395.002203][ T7503] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 395.104533][ T7508] netlink: 28 bytes leftover after parsing attributes in process `syz.3.494'. [ 396.214431][ T806] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 396.686338][ T29] audit: type=1326 audit(1778996277.308:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7526 comm="syz.2.500" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ec399ce59 code=0x0 [ 396.756262][ T806] usb 1-1: Using ep0 maxpacket: 16 [ 396.812485][ T806] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 396.883620][ T806] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 396.935388][ T806] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.035177][ T806] usb 1-1: config 0 descriptor?? [ 397.230826][ T5677] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 398.116018][ T5677] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 398.196602][ T5677] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 60731, setting to 64 [ 398.221458][ T806] sony 0003:054C:024B.0002: unknown main item tag 0x0 [ 398.250968][ T806] sony 0003:054C:024B.0002: unknown main item tag 0x0 [ 398.277381][ T5677] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 398.288414][ T806] sony 0003:054C:024B.0002: unknown main item tag 0x0 [ 398.301495][ T5677] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.323971][ T806] sony 0003:054C:024B.0002: unknown main item tag 0x0 [ 398.336623][ T5677] usb 3-1: Product: syz [ 398.358351][ T806] sony 0003:054C:024B.0002: unknown main item tag 0x0 [ 398.378047][ T5677] usb 3-1: Manufacturer: syz [ 398.389990][ T806] sony 0003:054C:024B.0002: unknown main item tag 0x0 [ 398.397856][ T5677] usb 3-1: SerialNumber: syz [ 398.417725][ T806] sony 0003:054C:024B.0002: unknown main item tag 0x0 [ 398.464468][ T806] sony 0003:054C:024B.0002: unknown main item tag 0x0 [ 398.473616][ T5677] usb 3-1: config 0 descriptor?? [ 398.492755][ T7535] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 398.509961][ T806] sony 0003:054C:024B.0002: unknown main item tag 0x0 [ 398.541943][ T7535] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 398.573178][ T806] sony 0003:054C:024B.0002: unknown main item tag 0x0 [ 398.681550][ T806] sony 0003:054C:024B.0002: hiddev0,hidraw0: USB HID v0.08 Device [HID 054c:024b] on usb-dummy_hcd.0-1/input0 [ 398.697424][ C1] mcba_usb 3-1:0.0 can0: Tx URB aborted (-71) [ 398.714741][ T5677] mcba_usb 3-1:0.0: Microchip CAN BUS Analyzer connected [ 398.715074][ C1] mcba_usb 3-1:0.0 can0: Tx URB aborted (-71) [ 398.742716][ T806] sony 0003:054C:024B.0002: failed to claim input [ 398.902664][ T806] usb 1-1: USB disconnect, device number 15 [ 398.979568][ T7552] loop2: detected capacity change from 0 to 7 [ 398.994581][ T7552] Dev loop2: unable to read RDB block 7 [ 399.000922][ T7552] loop2: unable to read partition table [ 399.015811][ T7552] loop2: partition table beyond EOD, truncated [ 399.032105][ T7552] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 399.190326][ T5679] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 399.213264][ T7554] netlink: 28 bytes leftover after parsing attributes in process `syz.3.507'. [ 399.400108][ T5679] usb 5-1: Using ep0 maxpacket: 16 [ 399.444112][ T5679] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 399.522302][ T5679] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 399.585528][ T5679] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.648390][ T5679] usb 5-1: Product: syz [ 399.689201][ T5679] usb 5-1: Manufacturer: syz [ 399.717303][ T5679] usb 5-1: SerialNumber: syz [ 399.807270][ T5679] usb 5-1: config 0 descriptor?? [ 399.932821][ T5679] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 399.985477][ T5679] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 400.015603][ T7555] fido_id[7555]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 400.155015][ T9] usb 3-1: USB disconnect, device number 18 [ 400.216435][ T9] mcba_usb 3-1:0.0 can0: device disconnected [ 400.233275][ T5592] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 400.452508][ T5592] usb 4-1: too many configurations: 53, using maximum allowed: 8 [ 400.530126][ T806] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 400.532276][ T5679] em28xx 5-1:0.0: chip ID is em2765 [ 400.690264][ T5592] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 400.757409][ T806] usb 2-1: device descriptor read/64, error -71 [ 400.910267][ T5592] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.346277][ T5592] usb 4-1: Product: syz [ 401.352760][ T5592] usb 4-1: Manufacturer: syz [ 401.352851][ T806] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 401.365427][ T5592] usb 4-1: SerialNumber: syz [ 401.415953][ T5679] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 401.426278][ T5679] em28xx 5-1:0.0: board has no eeprom [ 401.550294][ T5679] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 401.550403][ T806] usb 2-1: device descriptor read/64, error -71 [ 401.604562][ T5679] em28xx 5-1:0.0: dvb set to bulk mode. [ 401.632861][ T9] em28xx 5-1:0.0: Binding DVB extension [ 401.661258][ T806] usb usb2-port1: attempt power cycle [ 401.707286][ T7574] fuse: Unknown parameter '0x0000000000000004' [ 401.749372][ T5679] usb 5-1: USB disconnect, device number 8 [ 401.800650][ T5679] em28xx 5-1:0.0: Disconnecting em28xx [ 402.035738][ T806] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 402.103130][ T806] usb 2-1: device descriptor read/8, error -71 [ 402.171661][ T9] em28xx 5-1:0.0: Registering input extension [ 402.209161][ T5679] em28xx 5-1:0.0: Closing input extension [ 402.332657][ T5679] em28xx 5-1:0.0: Freeing device [ 402.381690][ T806] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 402.454039][ T806] usb 2-1: device descriptor read/8, error -71 [ 402.602415][ T806] usb usb2-port1: unable to enumerate USB device [ 402.841777][ T5592] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 402.887471][ T5592] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 402.910031][ T5592] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 402.954334][ T5592] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 403.022733][ T5592] usb 4-1: USB disconnect, device number 16 [ 403.061055][ T5679] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 403.259902][ T5679] usb 5-1: Using ep0 maxpacket: 16 [ 403.918545][ T7596] Can't find ip_set type has [ 404.799365][ T7606] netlink: 28 bytes leftover after parsing attributes in process `syz.1.519'. [ 405.262303][ T7612] loop2: detected capacity change from 0 to 7 [ 405.299868][ T7612] Dev loop2: unable to read RDB block 7 [ 405.316776][ T7612] loop2: unable to read partition table [ 405.335934][ T7612] loop2: partition table beyond EOD, truncated [ 405.346629][ T7612] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 406.566971][ T806] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 406.760140][ T29] audit: type=1326 audit(1778996286.978:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7616 comm="syz.1.522" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe9099ce59 code=0x0 [ 406.899129][ T806] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.954019][ T806] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 407.027906][ T806] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.051456][ T5679] usb 5-1: unable to get BOS descriptor or descriptor too short [ 407.126896][ T5679] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 407.166374][ T5679] usb 5-1: can't read configurations, error -71 [ 407.181473][ T806] usb 4-1: config 0 descriptor?? [ 407.277542][ T806] pwc: Askey VC010 type 2 USB webcam detected. [ 407.286645][ T24] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 407.515388][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 407.571303][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 60731, setting to 64 [ 407.666157][ T24] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 407.677938][ T806] pwc: recv_control_msg error -32 req 02 val 2b00 [ 407.714680][ T806] pwc: recv_control_msg error -32 req 02 val 2700 [ 407.736784][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.766189][ T806] pwc: recv_control_msg error -32 req 02 val 2c00 [ 407.792155][ T24] usb 2-1: Product: syz [ 407.841758][ T24] usb 2-1: Manufacturer: syz [ 407.861554][ T806] pwc: recv_control_msg error -32 req 04 val 1000 [ 407.882080][ T24] usb 2-1: SerialNumber: syz [ 407.910545][ T806] pwc: recv_control_msg error -32 req 04 val 1300 [ 407.940345][ T806] pwc: recv_control_msg error -32 req 04 val 1400 [ 407.951934][ T24] usb 2-1: config 0 descriptor?? [ 407.961116][ T7624] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 407.991584][ T7624] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 407.994270][ T806] pwc: recv_control_msg error -32 req 02 val 2000 [ 408.017435][ T806] pwc: recv_control_msg error -32 req 02 val 2100 [ 408.029058][ T806] pwc: recv_control_msg error -32 req 04 val 1500 [ 408.057019][ T806] pwc: recv_control_msg error -71 req 02 val 2500 [ 408.079113][ T806] pwc: recv_control_msg error -71 req 02 val 2400 [ 408.132557][ C1] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 408.136108][ T5228] mcba_usb 2-1:0.0 can0: bit-timing not yet defined [ 408.144642][ T806] pwc: recv_control_msg error -71 req 02 val 2600 [ 408.155417][ T24] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected [ 408.155856][ C1] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 408.193182][ T806] pwc: recv_control_msg error -71 req 02 val 2900 [ 408.208809][ T806] pwc: recv_control_msg error -71 req 02 val 2800 [ 408.260800][ T806] pwc: recv_control_msg error -71 req 04 val 1100 [ 408.283204][ T806] pwc: recv_control_msg error -71 req 04 val 1200 [ 408.309059][ T806] pwc: Registered as video103. [ 408.344769][ T806] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input14 [ 408.441847][ T5679] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 408.481205][ T806] usb 4-1: USB disconnect, device number 17 [ 408.668728][ T5679] usb 1-1: device descriptor read/64, error -71 [ 408.955341][ T5679] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 409.186437][ T5679] usb 1-1: device descriptor read/64, error -71 [ 409.377000][ T5679] usb usb1-port1: attempt power cycle [ 410.254757][ T5679] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 410.922943][ T5679] usb 1-1: device descriptor read/8, error -71 [ 411.573400][ T5679] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 412.127170][ T7657] Can't find ip_set type has [ 412.329956][ T5679] usb 1-1: device not accepting address 19, error -71 [ 412.340960][ T5679] usb usb1-port1: unable to enumerate USB device [ 412.360317][ T9] usb 2-1: USB disconnect, device number 23 [ 412.368163][ T9] mcba_usb 2-1:0.0 can0: device disconnected [ 413.007106][ T7663] netlink: 28 bytes leftover after parsing attributes in process `syz.0.532'. [ 413.104396][ T7663] veth0_to_team: entered promiscuous mode [ 413.288525][ T7668] vivid-001: disconnect [ 413.315115][ T7667] vivid-001: reconnect [ 413.357794][ T7663] veth0_to_team: entered allmulticast mode [ 414.147049][ T7675] loop2: detected capacity change from 0 to 7 [ 414.220471][ T7675] Dev loop2: unable to read RDB block 7 [ 414.259013][ T7675] loop2: unable to read partition table [ 414.270898][ T7675] loop2: partition table beyond EOD, truncated [ 414.301636][ T7675] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 415.621322][ T806] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 415.689969][ T24] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 415.824808][ T806] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 415.857946][ T806] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 415.871406][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 415.897935][ T806] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.912194][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 415.957973][ T806] usb 1-1: config 0 descriptor?? [ 415.967525][ T24] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 415.988609][ T29] audit: type=1326 audit(1778996296.648:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7702 comm="syz.3.543" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd12a19ce59 code=0x0 [ 416.010809][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 416.046539][ T806] pwc: Askey VC010 type 2 USB webcam detected. [ 416.077259][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.122796][ T24] usb 2-1: config 0 descriptor?? [ 416.452918][ T24] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 416.474615][ T806] pwc: recv_control_msg error -32 req 02 val 2b00 [ 416.511534][ T806] pwc: recv_control_msg error -32 req 02 val 2700 [ 416.541746][ T806] pwc: recv_control_msg error -32 req 02 val 2c00 [ 416.567092][ T806] pwc: recv_control_msg error -32 req 04 val 1000 [ 416.589501][ T806] pwc: recv_control_msg error -32 req 04 val 1300 [ 416.616250][ T806] pwc: recv_control_msg error -32 req 04 val 1400 [ 416.631856][ T806] pwc: recv_control_msg error -32 req 02 val 2000 [ 416.662508][ T806] pwc: recv_control_msg error -32 req 02 val 2100 [ 416.698649][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 416.727747][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 60731, setting to 64 [ 416.770620][ T24] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 416.789836][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.806778][ T24] usb 4-1: Product: syz [ 416.817064][ T24] usb 4-1: Manufacturer: syz [ 416.830028][ T24] usb 4-1: SerialNumber: syz [ 416.870541][ T24] usb 4-1: config 0 descriptor?? [ 416.901340][ T806] pwc: recv_control_msg error -71 req 02 val 2500 [ 416.976890][ T806] pwc: recv_control_msg error -71 req 02 val 2400 [ 417.003667][ T7706] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 417.274608][ T806] pwc: recv_control_msg error -71 req 02 val 2600 [ 417.599495][ T7706] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 417.613669][ T7711] Can't find ip_set type has [ 417.640608][ T806] pwc: recv_control_msg error -71 req 02 val 2900 [ 417.719972][ T806] pwc: recv_control_msg error -71 req 02 val 2800 [ 417.740118][ T806] pwc: recv_control_msg error -71 req 04 val 1100 [ 417.794064][ T806] pwc: recv_control_msg error -71 req 04 val 1200 [ 417.808521][ C1] mcba_usb 4-1:0.0 can0: Tx URB aborted (-71) [ 417.852815][ T24] mcba_usb 4-1:0.0: Microchip CAN BUS Analyzer connected [ 417.853178][ C1] mcba_usb 4-1:0.0 can0: Tx URB aborted (-71) [ 417.880068][ T806] pwc: Registered as video103. [ 417.922171][ T806] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input15 [ 418.034284][ T806] usb 1-1: USB disconnect, device number 20 [ 418.880566][ T24] usb 2-1: USB disconnect, device number 24 [ 418.910351][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 419.060011][ T806] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 419.130654][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 419.172032][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 419.244018][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 419.264451][ T5679] usb 4-1: USB disconnect, device number 18 [ 419.271050][ T806] usb 1-1: Using ep0 maxpacket: 32 [ 419.307703][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.350938][ T806] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 419.372757][ T9] usb 5-1: Product: syz [ 419.402821][ T9] usb 5-1: Manufacturer: syz [ 419.418246][ T9] usb 5-1: SerialNumber: syz [ 419.475818][ T806] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 419.475916][ T5679] mcba_usb 4-1:0.0 can0: device disconnected [ 419.492246][ T806] usb 1-1: config 0 interface 0 has no altsetting 0 [ 419.513274][ T806] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 419.523532][ T806] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.532330][ T806] usb 1-1: Product: syz [ 419.537051][ T806] usb 1-1: Manufacturer: syz [ 419.542300][ T806] usb 1-1: SerialNumber: syz [ 419.558137][ T806] usb 1-1: config 0 descriptor?? [ 419.845184][ T9] usb 5-1: config 0 descriptor?? [ 419.936938][ T9] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 419.969261][ T9] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 420.107651][ T7730] tipc: Failed to remove unknown binding: 66,0,0/0:2917079618/2917079619 [ 420.128975][ T29] audit: type=1326 audit(1778996300.798:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7718 comm="syz.0.545" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee2b39ce59 code=0x7ffc0000 [ 420.159936][ T7730] tipc: Failed to remove unknown binding: 66,0,0/0:2917079618/2917079619 [ 420.164242][ T806] gs_usb 1-1:0.0: Configuring for 52 interfaces [ 420.242072][ T29] audit: type=1326 audit(1778996300.798:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7718 comm="syz.0.545" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee2b39ce59 code=0x7ffc0000 [ 420.270500][ T29] audit: type=1326 audit(1778996300.798:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7718 comm="syz.0.545" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7fee2b39ce59 code=0x7ffc0000 [ 420.298092][ T29] audit: type=1326 audit(1778996300.798:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7718 comm="syz.0.545" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee2b39ce59 code=0x7ffc0000 [ 420.389834][ T29] audit: type=1326 audit(1778996300.828:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7718 comm="syz.0.545" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fee2b39caeb code=0x7ffc0000 [ 420.501437][ T29] audit: type=1326 audit(1778996300.828:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7718 comm="syz.0.545" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fee2b39caeb code=0x7ffc0000 [ 420.638560][ T9] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 420.683269][ T29] audit: type=1326 audit(1778996300.838:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7718 comm="syz.0.545" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fee2b35d68e code=0x7ffc0000 [ 420.805924][ T806] gs_usb 1-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 420.855350][ T806] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 420.888114][ T29] audit: type=1326 audit(1778996301.048:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7718 comm="syz.0.545" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee2b39ce59 code=0x7ffc0000 [ 421.005896][ T29] audit: type=1326 audit(1778996301.048:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7718 comm="syz.0.545" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee2b39ce59 code=0x7ffc0000 [ 421.050045][ T806] usb 1-1: USB disconnect, device number 21 [ 421.101753][ T9] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 421.147429][ T24] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 421.155260][ T9] em28xx 5-1:0.0: board has no eeprom [ 421.164553][ T29] audit: type=1326 audit(1778996301.048:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7718 comm="syz.0.545" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fee2b39ce59 code=0x7ffc0000 [ 421.260042][ T9] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 421.267033][ T29] audit: type=1326 audit(1778996301.048:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7718 comm="syz.0.545" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee2b39ce59 code=0x7ffc0000 [ 421.519454][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 421.802019][ T29] audit: type=1326 audit(1778996301.058:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7718 comm="syz.0.545" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee2b39ce59 code=0x7ffc0000 [ 422.446483][ T29] audit: type=1326 audit(1778996301.058:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7718 comm="syz.0.545" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fee2b39ce59 code=0x7ffc0000 [ 422.584845][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 422.623139][ T9] em28xx 5-1:0.0: dvb set to bulk mode. [ 422.922246][ T29] audit: type=1326 audit(1778996301.058:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7718 comm="syz.0.545" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee2b39ce59 code=0x7ffc0000 [ 423.406755][ T29] audit: type=1326 audit(1778996301.098:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7718 comm="syz.0.545" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee2b39ce59 code=0x7ffc0000 [ 423.778182][ T5679] em28xx 5-1:0.0: Binding DVB extension [ 423.795668][ T29] audit: type=1326 audit(1778996301.128:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7718 comm="syz.0.545" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fee2b39ce59 code=0x7ffc0000 [ 424.588161][ T29] audit: type=1326 audit(1778996301.128:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7718 comm="syz.0.545" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee2b39ce59 code=0x7ffc0000 [ 425.367131][ T29] audit: type=1326 audit(1778996301.128:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7718 comm="syz.0.545" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee2b39ce59 code=0x7ffc0000 [ 425.385212][ T9] usb 5-1: USB disconnect, device number 11 [ 426.021337][ T29] audit: type=1326 audit(1778996301.148:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7718 comm="syz.0.545" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fee2b39ce59 code=0x7ffc0000 [ 426.624962][ T29] audit: type=1326 audit(1778996301.148:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7718 comm="syz.0.545" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee2b39ce59 code=0x7ffc0000 [ 427.970849][ T9] em28xx 5-1:0.0: Disconnecting em28xx [ 428.041270][ T29] audit: type=1326 audit(1778996301.148:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7718 comm="syz.0.545" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee2b39ce59 code=0x7ffc0000 [ 428.854341][ T29] audit: type=1326 audit(1778996301.168:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7718 comm="syz.0.545" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fee2b39ce59 code=0x7ffc0000 [ 428.988568][ T29] audit: type=1326 audit(1778996301.168:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7718 comm="syz.0.545" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee2b39ce59 code=0x7ffc0000 [ 429.029015][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 429.038977][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.099274][ T29] audit: type=1326 audit(1778996301.168:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7718 comm="syz.0.545" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee2b39ce59 code=0x7ffc0000 [ 429.140878][ T24] usb 3-1: Product: syz [ 429.300927][ T24] usb 3-1: config 0 descriptor?? [ 429.319193][ T29] audit: type=1326 audit(1778996301.218:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7718 comm="syz.0.545" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fee2b39ce59 code=0x7ffc0000 [ 429.352423][ T24] usb 3-1: can't set config #0, error -71 [ 429.457955][ T24] usb 3-1: USB disconnect, device number 19 [ 429.513208][ T5679] em28xx 5-1:0.0: Registering input extension [ 429.523647][ T29] audit: type=1326 audit(1778996301.218:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7718 comm="syz.0.545" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee2b39ce59 code=0x7ffc0000 [ 429.576398][ T9] em28xx 5-1:0.0: Closing input extension [ 429.666243][ T29] audit: type=1326 audit(1778996301.228:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7718 comm="syz.0.545" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fee2b39ce59 code=0x7ffc0000 [ 429.671328][ T7756] fuse: Bad value for 'fd' [ 429.734584][ T9] em28xx 5-1:0.0: Freeing device [ 429.801916][ T29] audit: type=1326 audit(1778996301.228:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7718 comm="syz.0.545" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee2b39ce59 code=0x7ffc0000 [ 430.130928][ T5679] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 430.477644][ T5679] usb 4-1: Using ep0 maxpacket: 16 [ 430.953651][ T7765] Can't find ip_set type hash:n [ 431.011580][ T5679] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 431.155839][ T5679] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 431.237562][ T5679] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.293062][ T5679] usb 4-1: Product: syz [ 431.302610][ T5679] usb 4-1: Manufacturer: syz [ 431.322121][ T5679] usb 4-1: SerialNumber: syz [ 431.448741][ T5679] usb 4-1: config 0 descriptor?? [ 431.694920][ T5679] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 431.741275][ T24] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 431.764728][ T5679] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 431.966039][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 432.032381][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 432.043662][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 432.043731][ T29] audit: type=1326 audit(1778996312.698:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7773 comm="syz.2.558" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ec399ce59 code=0x0 [ 432.163895][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 432.222648][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 432.297564][ T5679] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 432.341374][ T24] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 432.376589][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.412324][ T24] usb 1-1: Product: syz [ 432.427402][ T24] usb 1-1: Manufacturer: syz [ 432.447379][ T24] usb 1-1: SerialNumber: syz [ 432.500313][ T24] usb 1-1: config 0 descriptor?? [ 432.530459][ T806] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 432.581854][ T24] garmin_gps 1-1:0.0: Garmin GPS usb/tty converter detected [ 432.597837][ T24] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 432.635920][ T24] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 432.739209][ T806] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 432.770932][ T24] usb 1-1: USB disconnect, device number 22 [ 432.805267][ T806] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 60731, setting to 64 [ 432.805328][ T5679] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 432.805440][ T5679] em28xx 4-1:0.0: board has no eeprom [ 432.874493][ T24] garmin_gps 1-1:0.0: device disconnected [ 432.951719][ T806] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 432.979928][ T806] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.026581][ T806] usb 3-1: Product: syz [ 433.066189][ T806] usb 3-1: Manufacturer: syz [ 433.086159][ T806] usb 3-1: SerialNumber: syz [ 433.112146][ T5679] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 433.117591][ T806] usb 3-1: config 0 descriptor?? [ 433.165604][ T7777] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 433.189154][ T5679] em28xx 4-1:0.0: dvb set to bulk mode. [ 433.197102][ T7777] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 433.231921][ T9] em28xx 4-1:0.0: Binding DVB extension [ 433.286981][ T5679] usb 4-1: USB disconnect, device number 19 [ 433.439102][ T5679] em28xx 4-1:0.0: Disconnecting em28xx [ 434.176667][ C1] mcba_usb 3-1:0.0 can0: Tx URB aborted (-71) [ 434.183510][ T806] mcba_usb 3-1:0.0: Microchip CAN BUS Analyzer connected [ 434.183923][ C1] mcba_usb 3-1:0.0 can0: Tx URB aborted (-71) [ 434.541279][ T9] em28xx 4-1:0.0: Registering input extension [ 434.578383][ T5679] em28xx 4-1:0.0: Closing input extension [ 434.727496][ T5228] mcba_usb 3-1:0.0 can0: bit-timing not yet defined [ 434.746786][ T5679] em28xx 4-1:0.0: Freeing device [ 434.759358][ T7789] tipc: Failed to remove unknown binding: 66,0,0/0:2528189653/2528189654 [ 434.827760][ T7789] tipc: Failed to remove unknown binding: 66,0,0/0:2528189653/2528189654 [ 435.154109][ T5679] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 435.379413][ T5679] usb 4-1: Using ep0 maxpacket: 16 [ 435.416624][ T5679] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 435.452526][ T5679] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 435.494021][ T9] usb 3-1: USB disconnect, device number 20 [ 435.507613][ T5679] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.556202][ T9] mcba_usb 3-1:0.0 can0: device disconnected [ 435.563166][ T5679] usb 4-1: Product: syz [ 435.596956][ T5679] usb 4-1: Manufacturer: syz [ 435.621753][ T5679] usb 4-1: SerialNumber: syz [ 435.677982][ T5679] usb 4-1: config 0 descriptor?? [ 435.783809][ T5679] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 435.813469][ T5679] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 436.240724][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 436.420934][ T5679] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 436.433224][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 436.479134][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 436.542599][ T7809] fuse: Bad value for 'fd' [ 436.562549][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 436.598225][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.629206][ T9] usb 3-1: Product: syz [ 436.650856][ T9] usb 3-1: Manufacturer: syz [ 436.665698][ T9] usb 3-1: SerialNumber: syz [ 436.697881][ T9] usb 3-1: config 0 descriptor?? [ 436.805224][ T9] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 436.858527][ T9] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 436.933182][ T5679] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 436.967544][ T5679] em28xx 4-1:0.0: board has no eeprom [ 437.140223][ T5679] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 437.186408][ T5679] em28xx 4-1:0.0: dvb set to bulk mode. [ 437.210209][ T5592] em28xx 4-1:0.0: Binding DVB extension [ 437.296173][ T5679] usb 4-1: USB disconnect, device number 20 [ 437.343004][ T5679] em28xx 4-1:0.0: Disconnecting em28xx [ 437.445669][ T9] em28xx 3-1:0.0: chip ID is em2765 [ 438.252375][ T7821] Can't find ip_set type hash:n [ 438.338179][ T9] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 438.358226][ T9] em28xx 3-1:0.0: board has no eeprom [ 438.429812][ T9] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 438.462751][ T9] em28xx 3-1:0.0: dvb set to bulk mode. [ 438.548158][ T5592] em28xx 4-1:0.0: Registering input extension [ 438.594506][ T5679] em28xx 4-1:0.0: Closing input extension [ 438.601204][ T9] usb 3-1: USB disconnect, device number 21 [ 438.644929][ T9] em28xx 3-1:0.0: Disconnecting em28xx [ 438.758331][ T5679] em28xx 4-1:0.0: Freeing device [ 438.772314][ T5592] em28xx 3-1:0.0: Binding DVB extension [ 438.914087][ T5586] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 438.924908][ T5586] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 438.934246][ T5586] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 438.952893][ T5586] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 438.981015][ T5586] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 439.345436][ T5592] em28xx 3-1:0.0: Registering input extension [ 439.406399][ T9] em28xx 3-1:0.0: Closing input extension [ 441.722416][ T5586] Bluetooth: hci5: command tx timeout [ 441.764315][ T9] em28xx 3-1:0.0: Freeing device [ 442.184046][ T5592] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 442.374983][ T5592] usb 5-1: Using ep0 maxpacket: 16 [ 442.826445][ T5592] usb 5-1: device descriptor read/all, error -71 [ 442.915394][ T29] audit: type=1326 audit(1778996323.588:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7843 comm="syz.2.574" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ec399ce59 code=0x0 [ 443.442931][ T9] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 443.506571][ T7853] tipc: Failed to remove unknown binding: 66,0,0/0:3988283623/3988283624 [ 443.539190][ T7853] tipc: Failed to remove unknown binding: 66,0,0/0:3988283623/3988283624 [ 443.666647][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 443.732095][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 60731, setting to 64 [ 443.803743][ T5586] Bluetooth: hci5: command tx timeout [ 443.832385][ T9] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 443.850499][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.859034][ T9] usb 3-1: Product: syz [ 443.865686][ T9] usb 3-1: Manufacturer: syz [ 443.886794][ T9] usb 3-1: SerialNumber: syz [ 443.904387][ T9] usb 3-1: config 0 descriptor?? [ 443.914174][ T7850] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 443.948220][ T7850] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 444.092504][ C0] mcba_usb 3-1:0.0 can0: Tx URB aborted (-71) [ 444.101782][ T9] mcba_usb 3-1:0.0: Microchip CAN BUS Analyzer connected [ 444.102217][ C0] mcba_usb 3-1:0.0 can0: Tx URB aborted (-71) [ 444.213804][ T5592] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 444.418904][ T5592] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.473066][ T5592] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 444.493917][ T7865] fuse: Bad value for 'fd' [ 444.525609][ T5592] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 444.578241][ T5592] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 444.669108][ T6868] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.703830][ T5592] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 444.754051][ T5592] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.786772][ T5592] usb 4-1: Product: syz [ 444.807216][ T5592] usb 4-1: Manufacturer: syz [ 444.821473][ T5592] usb 4-1: SerialNumber: syz [ 444.888219][ T5592] usb 4-1: config 0 descriptor?? [ 444.906500][ T6868] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.963222][ T5592] garmin_gps 4-1:0.0: Garmin GPS usb/tty converter detected [ 445.014397][ T5592] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 445.059873][ T5592] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 445.172659][ T5592] usb 4-1: USB disconnect, device number 21 [ 445.187313][ T6868] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.228408][ T5592] garmin_gps 4-1:0.0: device disconnected [ 445.816480][ T6868] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.904119][ T5586] Bluetooth: hci5: command tx timeout [ 446.142737][ T7874] Can't find ip_set type hash:n [ 446.490886][ T806] usb 3-1: USB disconnect, device number 22 [ 446.596666][ T806] mcba_usb 3-1:0.0 can0: device disconnected [ 447.106344][ T24] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 447.110473][ T7893] vivid-003: disconnect [ 447.720957][ T7891] vivid-003: reconnect [ 447.879809][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 447.892518][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 447.910409][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 447.920301][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.928549][ T24] usb 1-1: Product: syz [ 447.933441][ T24] usb 1-1: Manufacturer: syz [ 447.938275][ T24] usb 1-1: SerialNumber: syz [ 447.959923][ T5586] Bluetooth: hci5: command tx timeout [ 447.967945][ T24] usb 1-1: config 0 descriptor?? [ 447.996475][ T24] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 448.006427][ T24] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 448.099542][ T7898] netlink: 12 bytes leftover after parsing attributes in process `syz.4.587'. [ 448.162357][ T6868] bridge_slave_1: left allmulticast mode [ 448.215726][ T6868] bridge_slave_1: left promiscuous mode [ 448.234078][ T6868] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.312391][ T6868] bridge_slave_0: left allmulticast mode [ 448.402878][ T6868] bridge_slave_0: left promiscuous mode [ 448.469939][ T6868] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.658299][ T24] em28xx 1-1:0.0: chip ID is em2765 [ 448.886412][ T7904] tipc: Failed to remove unknown binding: 66,0,0/0:3921378709/3921378710 [ 448.935632][ T7904] tipc: Failed to remove unknown binding: 66,0,0/0:3921378709/3921378710 [ 449.330810][ T24] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 449.361592][ T24] em28xx 1-1:0.0: board has no eeprom [ 449.481439][ T24] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 449.517193][ T24] em28xx 1-1:0.0: dvb set to bulk mode. [ 449.552158][ T5677] em28xx 1-1:0.0: Binding DVB extension [ 449.606530][ T24] usb 1-1: USB disconnect, device number 23 [ 449.673220][ T24] em28xx 1-1:0.0: Disconnecting em28xx [ 450.125175][ T5677] em28xx 1-1:0.0: Registering input extension [ 450.194134][ T24] em28xx 1-1:0.0: Closing input extension [ 450.416405][ T24] em28xx 1-1:0.0: Freeing device [ 450.503521][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 450.546649][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 450.553205][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 450.622774][ T6868] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.703779][ T6868] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.786614][ T6868] bond0 (unregistering): Released all slaves [ 450.813635][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.908827][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 451.005633][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 451.112153][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 451.486391][ T9] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 451.496665][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.506141][ T9] usb 5-1: Product: syz [ 451.511507][ T9] usb 5-1: Manufacturer: syz [ 451.516324][ T9] usb 5-1: SerialNumber: syz [ 451.530944][ T9] usb 5-1: config 0 descriptor?? [ 451.559396][ T9] garmin_gps 5-1:0.0: Garmin GPS usb/tty converter detected [ 451.671874][ T9] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 451.766011][ T9] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 451.852351][ T9] usb 5-1: USB disconnect, device number 14 [ 451.920445][ T9] garmin_gps 5-1:0.0: device disconnected [ 453.123051][ T7935] Can't find ip_set type hash:ne [ 454.410959][ T6868] hsr_slave_0: left promiscuous mode [ 454.445909][ T7949] netlink: 12 bytes leftover after parsing attributes in process `syz.4.597'. [ 454.486693][ T6868] hsr_slave_1: left promiscuous mode [ 454.532118][ T6868] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.574216][ T6868] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.634213][ T6868] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.686100][ T6868] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.824211][ T6868] veth1_macvtap: left promiscuous mode [ 454.865766][ T6868] veth0_macvtap: left promiscuous mode [ 454.888647][ T6868] veth1_vlan: left promiscuous mode [ 454.919865][ T6868] veth0_vlan: left promiscuous mode [ 456.370846][ T7961] tipc: Failed to remove unknown binding: 66,0,0/0:2529840934/2529840935 [ 456.449433][ T7961] tipc: Failed to remove unknown binding: 66,0,0/0:2529840934/2529840935 [ 456.539882][ T806] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 456.770947][ T806] usb 3-1: Using ep0 maxpacket: 16 [ 456.833673][ T806] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 456.862943][ T806] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 456.896003][ T806] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 456.969108][ T806] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.009286][ T806] usb 3-1: Product: syz [ 457.016731][ T806] usb 3-1: Manufacturer: syz [ 457.031159][ T806] usb 3-1: SerialNumber: syz [ 457.110737][ T806] usb 3-1: config 0 descriptor?? [ 457.163745][ T806] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 457.217253][ T806] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 457.852320][ T806] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 457.909299][ T806] em28xx 3-1:0.0: Config register raw data: 0x00 [ 458.194157][ T6868] team0 (unregistering): Port device team_slave_1 removed [ 458.305006][ T6868] team0 (unregistering): Port device team_slave_0 removed [ 459.633200][ T7986] Can't find ip_set type hash:ne [ 460.037335][ T5592] usb 3-1: USB disconnect, device number 23 [ 460.162673][ T5592] em28xx 3-1:0.0: Disconnecting em28xx [ 460.212555][ T5592] em28xx 3-1:0.0: Freeing device [ 462.585180][ T8007] loop2: detected capacity change from 0 to 7 [ 462.756179][ T8007] Dev loop2: unable to read RDB block 7 [ 462.804265][ T8007] loop2: unable to read partition table [ 462.856941][ T8007] loop2: partition table beyond EOD, truncated [ 462.874972][ T8013] loop3: detected capacity change from 0 to 7 [ 462.899273][ T8007] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 462.938031][ T8013] Dev loop3: unable to read RDB block 7 [ 462.963400][ T8013] loop3: unable to read partition table [ 463.012469][ T8013] loop3: partition table beyond EOD, truncated [ 463.051741][ T8013] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 463.758487][ T7826] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.793865][ T7826] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.866686][ T7826] bridge_slave_0: entered allmulticast mode [ 463.908579][ T7826] bridge_slave_0: entered promiscuous mode [ 464.006591][ T7826] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.020860][ T7826] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.028500][ T7826] bridge_slave_1: entered allmulticast mode [ 464.056153][ T7826] bridge_slave_1: entered promiscuous mode [ 464.431864][ T7826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.554574][ T7826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.505756][ T5580] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 465.539106][ T8042] Can't find ip_set type hash:ne [ 465.556283][ T5580] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 465.566903][ T5580] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 465.582305][ T5580] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 465.599775][ T5580] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 465.680994][ T7826] team0: Port device team_slave_0 added [ 465.852275][ T7826] team0: Port device team_slave_1 added [ 466.261993][ T7826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.298358][ T7826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.404028][ T7826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.462824][ T7826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.502538][ T7826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.536878][ T8056] vivid-004: disconnect [ 466.654963][ T8055] vivid-004: reconnect [ 466.755336][ T7826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.719960][ T5586] Bluetooth: hci2: command tx timeout [ 467.987926][ T7826] hsr_slave_0: entered promiscuous mode [ 468.066608][ T7826] hsr_slave_1: entered promiscuous mode [ 468.075490][ T7826] debugfs: 'hsr0' already exists in 'hsr' [ 468.079941][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 468.081587][ T7826] Cannot create hsr debugfs directory [ 468.333630][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 468.379401][ T9] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 468.415159][ T9] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.447526][ T9] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.487050][ T9] usb 1-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 468.531946][ T9] usb 1-1: config 7 interface 0 has no altsetting 0 [ 468.567977][ T9] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 468.628296][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.047744][ T34] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.460307][ T24] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 469.603539][ T34] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.821041][ T5586] Bluetooth: hci2: command tx timeout [ 469.943055][ T9] input: HID 0458:5010 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:7.0/0003:0458:5010.0003/input/input21 [ 470.342878][ T34] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.360178][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 470.380491][ T9] kye 0003:0458:5010.0003: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.0-1/input0 [ 470.391787][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 470.419407][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 470.443108][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 470.455193][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.519974][ T24] usb 5-1: Product: syz [ 470.532627][ T9] usb 1-1: USB disconnect, device number 24 [ 470.562159][ T24] usb 5-1: Manufacturer: syz [ 470.592591][ T24] usb 5-1: SerialNumber: syz [ 470.819039][ T5228] 8021q: adding VLAN 0 to HW filter on device eth1 [ 470.836346][ T24] usb 5-1: 0:2 : does not exist [ 470.873484][ T5586] Bluetooth: hci1: unexpected event 0x18 length: 247 > 23 [ 471.018929][ T34] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.165966][ T8087] fido_id[8087]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 471.557457][ T24] usb 5-1: USB disconnect, device number 15 [ 471.888658][ T6106] udevd[6106]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 471.889786][ T5586] Bluetooth: hci2: command tx timeout [ 472.429387][ T8097] vivid-004: disconnect [ 472.593784][ T8095] vivid-004: reconnect [ 472.622863][ T7826] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 472.696694][ T7826] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 472.795515][ T7826] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 472.906046][ T7826] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 472.943997][ T34] bridge_slave_1: left allmulticast mode [ 472.976871][ T34] bridge_slave_1: left promiscuous mode [ 473.004728][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.065952][ T34] bridge_slave_0: left allmulticast mode [ 473.091834][ T34] bridge_slave_0: left promiscuous mode [ 473.115288][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.959901][ T5586] Bluetooth: hci2: command tx timeout [ 475.023915][ T806] hid_parser_main: 28 callbacks suppressed [ 475.024003][ T806] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 475.128078][ T806] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 475.687405][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 476.043122][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 476.203899][ T34] bond0 (unregistering): Released all slaves [ 476.300685][ T7826] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 476.422824][ T7826] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 476.497320][ T7826] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 476.568550][ T7826] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 477.255235][ T8137] vivid-000: disconnect [ 477.278807][ T8136] vivid-000: reconnect [ 477.716704][ T34] hsr_slave_0: left promiscuous mode [ 477.767833][ T34] hsr_slave_1: left promiscuous mode [ 477.807192][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.838763][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.895185][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.920796][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.954098][ T34] veth1_macvtap: left promiscuous mode [ 477.961681][ T34] veth0_macvtap: left promiscuous mode [ 477.974373][ T34] veth1_vlan: left promiscuous mode [ 477.989946][ T34] veth0_vlan: left promiscuous mode [ 478.011704][ T24] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 478.037630][ T24] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 478.080131][ T5677] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 478.089124][ T24] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.00 Device [syz0] on syz0 [ 478.284912][ T5677] usb 1-1: Using ep0 maxpacket: 16 [ 479.442847][ T5586] Bluetooth: hci0: unexpected event 0x18 length: 247 > 23 [ 480.324859][ T34] team0 (unregistering): Port device team_slave_1 removed [ 480.474948][ T34] team0 (unregistering): Port device team_slave_0 removed [ 481.216444][ T5677] usb 1-1: unable to get BOS descriptor or descriptor too short [ 481.272958][ T5677] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 481.315519][ T5677] usb 1-1: can't read configurations, error -71 [ 481.645492][ T5228] 8021q: adding VLAN 0 to HW filter on device eth2 [ 482.611492][ T8171] vivid-004: disconnect [ 482.642772][ T5677] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 482.770262][ T8169] vivid-004: reconnect [ 482.869155][ T5677] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 482.939012][ T5677] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 482.974717][ T5677] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.001559][ T7826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.025740][ T5677] usb 1-1: Product: syz [ 483.040079][ T5677] usb 1-1: Manufacturer: syz [ 483.057146][ T5677] usb 1-1: SerialNumber: syz [ 483.118266][ T5677] usb 1-1: config 0 descriptor?? [ 483.225056][ T7826] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.315754][ T6865] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.323484][ T6865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 483.438827][ T6865] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.446596][ T6865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 483.474469][ T5592] usb 1-1: USB disconnect, device number 27 [ 483.713581][ T8181] xt_hashlimit: size too large, truncated to 1048576 [ 483.872560][ T24] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 483.970728][ T8041] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.980513][ T8041] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.988725][ T8041] bridge_slave_0: entered allmulticast mode [ 484.006319][ T8041] bridge_slave_0: entered promiscuous mode [ 484.049786][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 484.074402][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 484.112986][ T8041] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.123915][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 484.132468][ T8041] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.141705][ T8041] bridge_slave_1: entered allmulticast mode [ 484.158423][ T8041] bridge_slave_1: entered promiscuous mode [ 484.159838][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.200805][ T24] usb 5-1: Product: syz [ 484.216839][ T24] usb 5-1: Manufacturer: syz [ 484.237641][ T24] usb 5-1: SerialNumber: syz [ 484.265434][ T24] usb 5-1: config 0 descriptor?? [ 484.333973][ T24] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 484.358222][ T24] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 484.554166][ T8041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.651699][ T8041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.966646][ T24] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 484.977076][ T8041] team0: Port device team_slave_0 added [ 485.052325][ T8041] team0: Port device team_slave_1 added [ 485.294526][ T8041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.312127][ T8041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.351281][ T8041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.420408][ T8041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.427916][ T8041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.456661][ T24] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 485.500558][ T24] em28xx 5-1:0.0: board has no eeprom [ 485.512989][ T8041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.622974][ T24] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 485.661345][ T24] em28xx 5-1:0.0: dvb set to bulk mode. [ 485.687855][ T5677] em28xx 5-1:0.0: Binding DVB extension [ 485.754008][ T24] usb 5-1: USB disconnect, device number 16 [ 485.803693][ T24] em28xx 5-1:0.0: Disconnecting em28xx [ 486.153770][ T5677] em28xx 5-1:0.0: Registering input extension [ 486.196594][ T8041] hsr_slave_0: entered promiscuous mode [ 486.197099][ T24] em28xx 5-1:0.0: Closing input extension [ 486.271665][ T8041] hsr_slave_1: entered promiscuous mode [ 486.328339][ T8041] debugfs: 'hsr0' already exists in 'hsr' [ 486.349349][ T24] em28xx 5-1:0.0: Freeing device [ 486.362623][ T8041] Cannot create hsr debugfs directory [ 486.410039][ T5228] 8021q: adding VLAN 0 to HW filter on device eth3 [ 487.508890][ T8212] fuse: Unknown parameter 'group_i00000000000000000000' [ 487.898205][ T8219] vivid-000: disconnect [ 487.942802][ T8218] vivid-000: reconnect [ 488.565764][ T5586] Bluetooth: hci1: unexpected event 0x18 length: 247 > 23 [ 488.972363][ T8041] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 489.148790][ T8041] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 489.164912][ T24] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 489.191687][ T8041] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 489.293803][ T8041] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 489.346906][ T8041] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 489.391420][ T24] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 489.434256][ T24] usb 5-1: config 0 has no interface number 0 [ 489.462363][ T24] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 489.463812][ T8041] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 489.550019][ T24] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 489.552498][ T8041] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 489.614410][ T24] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 489.651214][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.683610][ T8041] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 489.702951][ T24] usb 5-1: config 0 descriptor?? [ 489.735123][ T8230] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 489.825539][ T24] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 490.091382][ T9] usb 5-1: USB disconnect, device number 17 [ 490.091521][ C1] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 490.675075][ T7826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.029814][ T8041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.330928][ T8041] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.489220][ T6844] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.496641][ T6844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.763462][ T6865] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.770917][ T6865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.805249][ T5677] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 492.000253][ T5677] usb 3-1: Using ep0 maxpacket: 16 [ 492.059028][ T5677] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 492.125049][ T5677] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 492.165977][ T5677] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.199444][ T5677] usb 3-1: Product: syz [ 492.218114][ T5677] usb 3-1: Manufacturer: syz [ 492.238673][ T5677] usb 3-1: SerialNumber: syz [ 492.291032][ T5677] usb 3-1: config 0 descriptor?? [ 492.338989][ T5228] 8021q: adding VLAN 0 to HW filter on device eth4 [ 492.367111][ T5677] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 492.404168][ T5677] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 493.055076][ T5677] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 493.535495][ T5677] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 493.595194][ T5677] em28xx 3-1:0.0: board has no eeprom [ 493.741971][ T5677] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 493.769225][ T5677] em28xx 3-1:0.0: dvb set to bulk mode. [ 493.803462][ T24] em28xx 3-1:0.0: Binding DVB extension [ 493.812231][ T7826] veth0_vlan: entered promiscuous mode [ 493.894102][ T5677] usb 3-1: USB disconnect, device number 24 [ 493.947309][ T5677] em28xx 3-1:0.0: Disconnecting em28xx [ 494.023559][ T7826] veth1_vlan: entered promiscuous mode [ 494.428901][ T24] em28xx 3-1:0.0: Registering input extension [ 494.467481][ T5677] em28xx 3-1:0.0: Closing input extension [ 494.553258][ T8279] vivid-003: disconnect [ 494.624178][ T5677] em28xx 3-1:0.0: Freeing device [ 494.673992][ T8278] vivid-003: reconnect [ 494.684235][ T7826] veth0_macvtap: entered promiscuous mode [ 494.909315][ T8282] fuse: Unknown parameter 'group_i00000000000000000000' [ 494.944014][ T7826] veth1_macvtap: entered promiscuous mode [ 495.250412][ T7826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 495.439511][ T7826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 495.635233][ T6857] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.680252][ T6857] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.744448][ T6857] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.824346][ T6868] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.530990][ T24] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 496.762809][ T24] usb 3-1: config 0 has no interfaces? [ 496.798336][ T24] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 496.847417][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.914827][ T24] usb 3-1: config 0 descriptor?? [ 497.259400][ T8300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.284034][ T8300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.118168][ T24] usb 3-1: USB disconnect, device number 25 [ 498.151539][ T8041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.528601][ T5580] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 498.543167][ T5580] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 498.554450][ T5580] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 498.575214][ T5580] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 498.587618][ T5580] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 498.777639][ T8323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.674'. [ 498.868544][ T8325] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 499.120951][ T5228] 8021q: adding VLAN 0 to HW filter on device eth5 [ 499.293287][ T5679] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 499.468340][ T29] audit: type=1804 audit(1778996380.118:201): pid=8331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.675" name="bus" dev="ramfs" ino=18683 res=1 errno=0 [ 499.521369][ T5679] usb 5-1: Using ep0 maxpacket: 16 [ 499.567063][ T5679] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.596482][ T29] audit: type=1804 audit(1778996380.178:202): pid=8331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.675" name="bus" dev="ramfs" ino=18683 res=1 errno=0 [ 499.633832][ T5679] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.679491][ T5679] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 499.725759][ T5679] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.799408][ T5679] usb 5-1: config 0 descriptor?? [ 499.923487][ T5679] usbhid 5-1:0.0: fixing wrong optional hid class descriptors count [ 499.975955][ T5679] usbhid 5-1:0.0: can't add hid device: -22 [ 500.022486][ T5679] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 500.681539][ T5580] Bluetooth: hci4: command tx timeout [ 501.303800][ T97] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.599186][ T97] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.855559][ T97] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.097734][ T97] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.169500][ T8041] veth0_vlan: entered promiscuous mode [ 502.352279][ T8041] veth1_vlan: entered promiscuous mode [ 502.726970][ T5677] usb 5-1: USB disconnect, device number 18 [ 502.760101][ T5580] Bluetooth: hci4: command tx timeout [ 503.189490][ T8363] vivid-003: disconnect [ 503.250810][ T8362] vivid-003: reconnect [ 503.810350][ T97] bridge_slave_1: left allmulticast mode [ 503.842257][ T97] bridge_slave_1: left promiscuous mode [ 503.875224][ T97] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.936279][ T97] bridge_slave_0: left allmulticast mode [ 503.957825][ T97] bridge_slave_0: left promiscuous mode [ 503.965318][ T8372] fuse: Unknown parameter 'group_id00000000000000000000' [ 503.977632][ T97] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.839909][ T5580] Bluetooth: hci4: command tx timeout [ 505.136233][ T97] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 505.238865][ T97] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 505.291693][ T97] bond0 (unregistering): Released all slaves [ 505.385345][ T5228] 8021q: adding VLAN 0 to HW filter on device eth6 [ 505.520826][ T5592] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 505.651597][ T5580] Bluetooth: hci3: unexpected event 0x18 length: 247 > 23 [ 505.691116][ T97] hsr_slave_0: left promiscuous mode [ 505.762257][ T5592] usb 5-1: New USB device found, idVendor=041e, idProduct=4095, bcdDevice= 0.40 [ 505.777559][ T97] hsr_slave_1: left promiscuous mode [ 505.777605][ T5592] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.796682][ T5592] usb 5-1: Product: syz [ 505.805928][ T5592] usb 5-1: Manufacturer: â°‰ [ 505.808252][ T97] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 505.811031][ T5592] usb 5-1: SerialNumber: syz [ 505.845359][ T97] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 505.900240][ T97] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 505.922958][ T97] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 506.020542][ T97] veth1_macvtap: left promiscuous mode [ 506.045270][ T97] veth0_macvtap: left promiscuous mode [ 506.069734][ T97] veth1_vlan: left promiscuous mode [ 506.100717][ T97] veth0_vlan: left promiscuous mode [ 506.821902][ T5592] usb 5-1: USB disconnect, device number 19 [ 506.919894][ T5580] Bluetooth: hci4: command tx timeout [ 507.005020][ T6127] udevd[6127]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 507.699835][ T5677] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 507.870550][ T5677] usb 1-1: Using ep0 maxpacket: 32 [ 507.915340][ T5677] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 507.951208][ T5677] usb 1-1: config 0 has no interface number 0 [ 507.983940][ T5677] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 508.025206][ T5677] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 508.086117][ T5677] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 508.126969][ T5677] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.147001][ T5677] usb 1-1: Product: syz [ 508.171759][ T5677] usb 1-1: Manufacturer: syz [ 508.188837][ T5677] usb 1-1: SerialNumber: syz [ 508.248766][ T5677] usb 1-1: config 0 descriptor?? [ 508.256367][ T97] team0 (unregistering): Port device team_slave_1 removed [ 508.349196][ T97] team0 (unregistering): Port device team_slave_0 removed [ 508.548967][ T5677] radio-si470x 1-1:0.35: this is not a si470x device. [ 508.616024][ T5677] radio-raremono 1-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 508.834371][ T5677] radio-raremono 1-1:0.35: V4L2 device registered as radio48 [ 508.892376][ T24] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 509.059462][ T8276] usb 1-1: USB disconnect, device number 28 [ 509.107103][ T24] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 509.123031][ T8276] radio-raremono 1-1:0.35: Thanko's Raremono disconnected [ 509.142372][ T24] usb 5-1: config 0 has no interface number 0 [ 509.202262][ T24] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 509.238413][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.284647][ T24] usb 5-1: Product: syz [ 509.318956][ T24] usb 5-1: Manufacturer: syz [ 509.352839][ T24] usb 5-1: SerialNumber: syz [ 509.406317][ T24] usb 5-1: config 0 descriptor?? [ 509.525930][ T8041] veth0_macvtap: entered promiscuous mode [ 509.679671][ T8041] veth1_macvtap: entered promiscuous mode [ 509.729408][ T24] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 509.788450][ T24] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 509.856228][ T24] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 509.883819][ T24] usb 5-1: media controller created [ 510.044120][ T8041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.165622][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 510.233521][ T8041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 510.477262][ T8403] vivid-004: disconnect [ 510.553974][ T8402] vivid-004: reconnect [ 510.606654][ T6844] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.654268][ T6844] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.713211][ T6844] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.751535][ T6844] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.986649][ T24] usb 5-1: USB disconnect, device number 20 [ 511.220726][ T8414] fuse: Unknown parameter 'group_id00000000000000000000' [ 511.818064][ T8317] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.841056][ T8317] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.863524][ T8317] bridge_slave_0: entered allmulticast mode [ 511.896868][ T8317] bridge_slave_0: entered promiscuous mode [ 511.969274][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.981357][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 512.000785][ T8317] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.022620][ T8317] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.041071][ T8317] bridge_slave_1: entered allmulticast mode [ 512.064689][ T8317] bridge_slave_1: entered promiscuous mode [ 512.404429][ T8317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.514041][ T8317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.841689][ T8317] team0: Port device team_slave_0 added [ 512.918588][ T8317] team0: Port device team_slave_1 added [ 513.190643][ T8317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.225373][ T8317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.319817][ T8317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.398692][ T8317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.435619][ T8317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.547581][ T8317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 514.153339][ T8317] hsr_slave_0: entered promiscuous mode [ 514.195006][ T8317] hsr_slave_1: entered promiscuous mode [ 514.232686][ T8317] debugfs: 'hsr0' already exists in 'hsr' [ 514.258351][ T8317] Cannot create hsr debugfs directory [ 514.300201][ T5228] 8021q: adding VLAN 0 to HW filter on device eth7 [ 514.974681][ T5580] Bluetooth: hci1: unexpected event 0x18 length: 247 > 23 [ 517.126895][ T8317] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 517.253802][ T8317] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 517.293282][ T8317] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 517.377457][ T8317] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 517.416934][ T8317] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 517.497480][ T8317] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 517.553724][ T8317] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 517.654299][ T8317] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 518.088910][ T6868] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.136391][ T6868] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.390847][ T6865] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.441082][ T6865] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.332961][ T8317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 523.803665][ T8317] 8021q: adding VLAN 0 to HW filter on device team0 [ 523.860519][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.867991][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.038916][ T97] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.046608][ T97] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.865577][ T5228] 8021q: adding VLAN 0 to HW filter on device eth8 [ 532.144511][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 532.209873][ T5679] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 532.365328][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 532.421555][ T5679] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 532.442513][ T9] usb 3-1: New USB device found, idVendor=09e8, idProduct=0021, bcdDevice= 0.40 [ 532.462137][ T5679] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 532.483953][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.510289][ T5679] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 532.533039][ T9] usb 3-1: Product: syz [ 532.550685][ T9] usb 3-1: Manufacturer: syz [ 532.572405][ T9] usb 3-1: SerialNumber: syz [ 532.590849][ T5679] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 532.618373][ T5679] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 532.678295][ T5679] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 532.737267][ T5679] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 532.768891][ T5679] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 532.830067][ T5679] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 532.936165][ T5679] usb 5-1: string descriptor 0 read error: -22 [ 532.946253][ T9] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 532.972055][ T5679] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 532.988553][ T9] usb 3-1: MIDIStreaming interface descriptor not found [ 533.033481][ T5679] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.137650][ T5679] adutux 5-1:168.0: interrupt endpoints not found [ 533.503242][ T3094] usb 5-1: USB disconnect, device number 21 [ 533.547747][ T8317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.800657][ T5677] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 533.831584][ T9] usb 3-1: USB disconnect, device number 26 [ 533.950075][ T5677] usb 7-1: device descriptor read/64, error -71 [ 534.137778][ T8600] program syz.0.729 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 534.231243][ T5677] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 534.356331][ T6268] udevd[6268]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 534.427538][ T5677] usb 7-1: device descriptor read/64, error -71 [ 534.572634][ T5677] usb usb7-port1: attempt power cycle [ 535.031920][ T5677] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 535.424611][ T5677] usb 7-1: device descriptor read/8, error -71 [ 536.200265][ T5677] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 541.766607][ T5677] usb 7-1: device descriptor read/8, error -110 [ 541.990474][ T5677] usb usb7-port1: unable to enumerate USB device [ 542.839201][ T8629] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.735'. [ 542.982482][ T8317] veth0_vlan: entered promiscuous mode [ 543.154110][ T8317] veth1_vlan: entered promiscuous mode [ 543.501523][ T5677] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 543.665255][ T8317] veth0_macvtap: entered promiscuous mode [ 543.723071][ T5677] usb 7-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 543.734103][ T24] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 543.777729][ T5677] usb 7-1: config 0 interface 0 has no altsetting 0 [ 543.833364][ T5677] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 543.843936][ T8317] veth1_macvtap: entered promiscuous mode [ 543.856044][ T5677] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 543.867848][ T5677] usb 7-1: Product: syz [ 543.878899][ T5677] usb 7-1: Manufacturer: syz [ 543.888019][ T5677] usb 7-1: SerialNumber: syz [ 543.914822][ T24] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 543.934463][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 543.956041][ T5677] usb 7-1: config 0 descriptor?? [ 543.967236][ T24] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 543.996164][ T8625] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 544.085360][ T24] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 544.107601][ T5677] usb 7-1: selecting invalid altsetting 0 [ 544.114316][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 544.134854][ T8317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 544.148325][ T24] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 544.202041][ T24] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 544.214156][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 544.259776][ T24] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 544.266671][ T8317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 544.326670][ T24] usb 5-1: string descriptor 0 read error: -22 [ 544.344923][ T24] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 544.378224][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.464005][ T6865] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.478786][ T24] adutux 5-1:168.0: interrupt endpoints not found [ 544.480883][ T6865] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.547502][ T6865] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.596365][ T6865] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.749224][ T5677] usb 5-1: USB disconnect, device number 22 [ 545.682478][ T8660] fuse: Bad value for 'fd' [ 545.750935][ T3094] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 545.957862][ T3094] usb 1-1: Using ep0 maxpacket: 32 [ 546.008244][ T3094] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.060874][ T3094] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 546.100589][ T3094] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 546.135927][ T3094] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.184726][ T3094] usb 1-1: config 0 descriptor?? [ 546.264429][ T3094] hub 1-1:0.0: USB hub found [ 546.600206][ T3094] hub 1-1:0.0: 1 port detected [ 546.796057][ T8636] snd-usb-audio 7-1:0.0: Runtime PM usage count underflow! [ 546.947880][ T5592] usb 7-1: USB disconnect, device number 6 [ 547.225362][ T3094] hub 1-1:0.0: activate --> -90 [ 547.838268][ T3094] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 547.838860][ T24] usb 1-1: USB disconnect, device number 29 [ 547.876121][ T3094] usb 1-1-port1: attempt power cycle [ 549.896856][ T8712] netlink: 8 bytes leftover after parsing attributes in process `syz.6.751'. [ 550.239982][ T24] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 550.419807][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 550.449957][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.488804][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.523565][ T24] usb 7-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 550.552590][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.602299][ T24] usb 7-1: config 0 descriptor?? [ 550.697184][ T24] usbhid 7-1:0.0: fixing wrong optional hid class descriptors count [ 550.744739][ T24] usbhid 7-1:0.0: can't add hid device: -22 [ 550.791440][ T24] usbhid 7-1:0.0: probe with driver usbhid failed with error -22 [ 551.303298][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.342757][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.631869][ T6865] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.671708][ T24] usb 3-1: new low-speed USB device number 27 using dummy_hcd [ 551.688122][ T6865] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.935274][ T24] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 551.963055][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 552.006832][ T24] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 552.081566][ T24] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 552.124001][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 552.170841][ T24] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 552.264581][ T24] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 552.301577][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 552.356961][ T24] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 552.429270][ T24] usb 3-1: string descriptor 0 read error: -22 [ 552.456641][ T24] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 552.473110][ T8738] netlink: 40 bytes leftover after parsing attributes in process `syz.5.565'. [ 552.493241][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.632056][ T24] adutux 3-1:168.0: interrupt endpoints not found [ 552.861359][ T5592] usb 3-1: USB disconnect, device number 27 [ 553.109784][ T24] usb 7-1: USB disconnect, device number 7 [ 553.257523][ T8744] fuse: Bad value for 'fd' [ 553.308104][ T29] audit: type=1326 audit(1778996433.978:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8746 comm="syz.4.756" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2b7d59ce59 code=0x0 [ 553.516986][ T8758] netlink: 'syz.4.756': attribute type 1 has an invalid length. [ 553.844324][ T5592] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 554.030796][ T24] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 554.070532][ T5592] usb 7-1: config 0 has an invalid interface number: 88 but max is 0 [ 554.103725][ T5592] usb 7-1: config 0 has no interface number 0 [ 554.134354][ T5592] usb 7-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 554.170725][ T5592] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.199383][ T5592] usb 7-1: Product: syz [ 554.225754][ T5592] usb 7-1: Manufacturer: syz [ 554.249824][ T5592] usb 7-1: SerialNumber: syz [ 554.274516][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 554.307467][ T5592] usb 7-1: config 0 descriptor?? [ 554.318266][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 60731, setting to 64 [ 554.382047][ T24] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 554.431550][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.481599][ T24] usb 5-1: Product: syz [ 554.527378][ T24] usb 5-1: Manufacturer: syz [ 554.560521][ T24] usb 5-1: SerialNumber: syz [ 554.608445][ T24] usb 5-1: config 0 descriptor?? [ 554.612821][ T5592] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 554.656305][ T8758] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 554.679327][ T8758] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 554.883379][ C1] mcba_usb 5-1:0.0 can0: Tx URB aborted (-71) [ 554.932133][ T24] mcba_usb 5-1:0.0: Microchip CAN BUS Analyzer connected [ 554.932542][ C1] mcba_usb 5-1:0.0 can0: Tx URB aborted (-71) [ 556.864550][ T24] usb 5-1: USB disconnect, device number 23 [ 556.932987][ T24] mcba_usb 5-1:0.0 can0: device disconnected [ 557.671644][ T8797] netlink: 40 bytes leftover after parsing attributes in process `syz.4.764'. [ 558.499134][ T8802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 559.187555][ T5592] gspca_m5602: Failed to find a sensor [ 559.260937][ T5592] ALi m5602 7-1:0.88: ALi m5602 webcam failed [ 559.333301][ T5592] usb 7-1: USB disconnect, device number 8 [ 559.650354][ T8814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.767'. [ 559.822114][ T5592] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 559.963150][ T8818] fuse: Bad value for 'fd' [ 560.020159][ T3094] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 560.044725][ T5592] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 560.062893][ T5592] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 560.142016][ T5592] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 560.185234][ T5592] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 560.209162][ T5592] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 560.236712][ T5592] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 560.248479][ T5592] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 560.264144][ T3094] usb 5-1: Using ep0 maxpacket: 16 [ 560.285180][ T5592] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 560.288365][ T3094] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.320428][ T5592] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 560.338643][ T5592] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 560.358191][ T3094] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.388433][ T5592] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 560.398493][ T3094] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 560.415106][ T5592] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 560.430127][ T3094] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.439454][ T5592] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 560.472919][ T3094] usb 5-1: config 0 descriptor?? [ 560.493939][ T5592] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 560.544096][ T5592] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 560.572315][ T3094] usbhid 5-1:0.0: fixing wrong optional hid class descriptors count [ 560.595766][ T3094] usbhid 5-1:0.0: can't add hid device: -22 [ 560.628698][ T3094] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 562.807265][ T5592] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 562.876484][ T5592] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.953977][ T5592] usb 7-1: can't set config #168, error -71 [ 563.037363][ T5592] usb 7-1: USB disconnect, device number 9 [ 563.448454][ T29] audit: type=1326 audit(1778996444.118:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8838 comm="syz.0.774" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee2b39ce59 code=0x0 [ 563.808815][ T8276] usb 5-1: USB disconnect, device number 24 [ 563.824778][ T8842] netlink: 'syz.0.774': attribute type 1 has an invalid length. [ 564.201177][ T24] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 564.415832][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 564.472060][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 60731, setting to 64 [ 564.562072][ T24] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 564.616228][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.679938][ T24] usb 1-1: Product: syz [ 564.700165][ T24] usb 1-1: Manufacturer: syz [ 564.726330][ T24] usb 1-1: SerialNumber: syz [ 564.795335][ T24] usb 1-1: config 0 descriptor?? [ 564.834428][ T8842] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 564.892324][ T8842] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 565.161580][ C1] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71) [ 565.199930][ T24] mcba_usb 1-1:0.0: Microchip CAN BUS Analyzer connected [ 565.200272][ C1] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71) [ 565.782268][ T24] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 566.000969][ T24] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 566.051148][ T24] usb 5-1: config 0 has no interface number 0 [ 566.112467][ T24] usb 5-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 566.174782][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.224174][ T24] usb 5-1: Product: syz [ 566.249672][ T24] usb 5-1: Manufacturer: syz [ 566.268068][ T24] usb 5-1: SerialNumber: syz [ 566.352629][ T24] usb 5-1: config 0 descriptor?? [ 566.657693][ T24] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 566.797647][ T5592] usb 1-1: USB disconnect, device number 34 [ 566.821277][ T5592] mcba_usb 1-1:0.0 can0: device disconnected [ 568.161150][ T29] audit: type=1326 audit(1778996448.818:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8871 comm="syz.6.783" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d41b9ce59 code=0x7ffc0000 [ 568.192683][ T8874] fuse: Bad value for 'fd' [ 568.313257][ T29] audit: type=1326 audit(1778996448.828:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8871 comm="syz.6.783" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d41b9ce59 code=0x7ffc0000 [ 568.474879][ T29] audit: type=1326 audit(1778996448.868:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8871 comm="syz.6.783" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f0d41b9ce59 code=0x7ffc0000 [ 568.691160][ T29] audit: type=1326 audit(1778996448.868:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8871 comm="syz.6.783" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d41b9ce59 code=0x7ffc0000 [ 568.875972][ T29] audit: type=1326 audit(1778996448.868:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8871 comm="syz.6.783" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d41b9ce59 code=0x7ffc0000 [ 571.851870][ T24] gspca_m5602: Failed to find a sensor [ 571.902708][ T24] ALi m5602 5-1:0.88: ALi m5602 webcam failed [ 571.981423][ T24] usb 5-1: USB disconnect, device number 25 [ 572.818809][ T29] audit: type=1326 audit(1778996453.488:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8903 comm="syz.0.791" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee2b39ce59 code=0x0 [ 573.314761][ T3094] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 573.415432][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 573.425702][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 573.539983][ T3094] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 573.601597][ T3094] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 60731, setting to 64 [ 573.667524][ T8907] kvm: pic: level sensitive irq not supported [ 573.683740][ T3094] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 573.702032][ T8907] kvm: pic: non byte read [ 573.824148][ T3094] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.892960][ T3094] usb 1-1: Product: syz [ 573.918622][ T3094] usb 1-1: Manufacturer: syz [ 573.959483][ T3094] usb 1-1: SerialNumber: syz [ 573.996753][ T3094] usb 1-1: config 0 descriptor?? [ 574.039525][ T8906] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 574.080458][ T8906] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 574.298439][ C0] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71) [ 574.308341][ T3094] mcba_usb 1-1:0.0: Microchip CAN BUS Analyzer connected [ 574.308764][ C0] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71) [ 575.398052][ T8930] netlink: 8 bytes leftover after parsing attributes in process `syz.5.798'. [ 576.097014][ T24] usb 1-1: USB disconnect, device number 35 [ 576.164312][ T24] mcba_usb 1-1:0.0 can0: device disconnected [ 576.480877][ T3094] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 576.730828][ T3094] usb 6-1: config 0 has an invalid interface number: 88 but max is 0 [ 576.773016][ T3094] usb 6-1: config 0 has no interface number 0 [ 576.840802][ T3094] usb 6-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 576.898255][ T3094] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.953612][ T3094] usb 6-1: Product: syz [ 576.969481][ T3094] usb 6-1: Manufacturer: syz [ 577.013547][ T3094] usb 6-1: SerialNumber: syz [ 577.085776][ T3094] usb 6-1: config 0 descriptor?? [ 577.271392][ T24] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 577.395064][ T3094] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 577.500396][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 577.542226][ T24] usb 7-1: config 0 has no interfaces? [ 577.601617][ T24] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 577.663560][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.708721][ T24] usb 7-1: Product: syz [ 577.745418][ T24] usb 7-1: Manufacturer: syz [ 577.777857][ T24] usb 7-1: SerialNumber: syz [ 577.862111][ T24] usb 7-1: config 0 descriptor?? [ 578.166928][ T9] usb 7-1: USB disconnect, device number 10 [ 581.038510][ T3094] gspca_m5602: Failed to find a sensor [ 581.038568][ T3094] ALi m5602 6-1:0.88: ALi m5602 webcam failed [ 581.072604][ T3094] usb 6-1: USB disconnect, device number 2 [ 581.464788][ T8976] netlink: 8 bytes leftover after parsing attributes in process `syz.5.810'. [ 582.199165][ T29] audit: type=1326 audit(1778996462.868:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8982 comm="syz.0.812" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee2b39ce59 code=0x0 [ 582.436217][ T8988] netlink: 'syz.0.812': attribute type 1 has an invalid length. [ 583.021014][ T3094] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 583.254831][ T3094] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 583.313921][ T3094] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 60731, setting to 64 [ 583.406908][ T3094] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 583.467611][ T3094] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.520197][ T3094] usb 1-1: Product: syz [ 583.561011][ T3094] usb 1-1: Manufacturer: syz [ 583.599042][ T3094] usb 1-1: SerialNumber: syz [ 583.683957][ T3094] usb 1-1: config 0 descriptor?? [ 583.716270][ T8988] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 583.759439][ T8988] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 583.823389][ T9010] overlayfs: failed to resolve './bus': -2 [ 583.962406][ T5592] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 584.485572][ T5592] usb 7-1: Using ep0 maxpacket: 32 [ 585.263346][ T5592] usb 7-1: config 0 has no interfaces? [ 585.921911][ T5592] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 585.944698][ T5592] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.959895][ T5592] usb 7-1: Product: syz [ 585.964314][ T5592] usb 7-1: Manufacturer: syz [ 585.968991][ T5592] usb 7-1: SerialNumber: syz [ 586.011060][ T5592] usb 7-1: config 0 descriptor?? [ 586.243721][ T8678] usb 7-1: USB disconnect, device number 11 [ 586.308971][ C0] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71) [ 586.339451][ T3094] mcba_usb 1-1:0.0: Microchip CAN BUS Analyzer connected [ 586.340058][ C0] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71) [ 586.558735][ T8276] usb 1-1: USB disconnect, device number 36 [ 586.598345][ T8276] mcba_usb 1-1:0.0 can0: device disconnected [ 587.244850][ T9027] random: crng reseeded on system resumption [ 588.469867][ T3094] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 588.624643][ T3094] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 588.624740][ T3094] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 588.624827][ T3094] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 588.624907][ T3094] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 588.625047][ T3094] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 588.625139][ T3094] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.652676][ T3094] usb 3-1: config 0 descriptor?? [ 588.951262][ T3094] hdpvr 3-1:0.0: unexpected answer of status request, len 0 [ 588.951359][ T3094] hdpvr 3-1:0.0: device init failed [ 588.951622][ T3094] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 590.360906][ T3094] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 590.570489][ T3094] usb 1-1: Using ep0 maxpacket: 8 [ 590.611822][ T3094] usb 1-1: unable to get BOS descriptor or descriptor too short [ 590.650230][ T3094] usb 1-1: config 4 interface 0 has no altsetting 0 [ 590.738283][ T3094] usb 1-1: string descriptor 0 read error: -22 [ 590.763765][ T3094] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 590.808595][ T3094] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 590.842237][ T5586] Bluetooth: hci2: command 0x0406 tx timeout [ 590.976363][ T3094] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 591.066400][ T3094] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 591.142222][ T3094] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 591.194953][ T3094] usb 1-1: media controller created [ 591.237074][ T9055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.829'. [ 591.444215][ T9068] overlayfs: failed to resolve './bus': -2 [ 591.499307][ T8678] usb 3-1: USB disconnect, device number 28 [ 591.523534][ T3094] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 592.489840][ C0] ===================================================== [ 592.497158][ C0] BUG: KMSAN: uninit-value in __flush_smp_call_function_queue+0x343/0x1810 [ 592.505926][ C0] __flush_smp_call_function_queue+0x343/0x1810 [ 592.512339][ C0] generic_smp_call_function_single_interrupt+0x1c/0x30 [ 592.519449][ C0] __sysvec_call_function_single+0x48/0x350 [ 592.525531][ C0] sysvec_call_function_single+0x7c/0x90 [ 592.531410][ C0] asm_sysvec_call_function_single+0x1f/0x30 [ 592.537551][ C0] pv_native_safe_halt+0x13/0x20 [ 592.542675][ C0] default_idle+0xd/0x20 [ 592.547063][ C0] arch_cpu_idle+0xd/0x20 [ 592.551538][ C0] default_idle_call+0x3f/0x70 [ 592.556453][ C0] do_idle+0x6ad/0xa10 [ 592.560675][ C0] cpu_startup_entry+0x5f/0x80 [ 592.565581][ C0] rest_init+0x1df/0x260 [ 592.569982][ C0] start_kernel+0x6d7/0x8b0 [ 592.574809][ C0] x86_64_start_reservations+0x28/0x30 [ 592.580494][ C0] x86_64_start_kernel+0x139/0x140 [ 592.585764][ C0] common_startup_64+0x13e/0x147 [ 592.590891][ C0] [ 592.593276][ C0] Local variable warn created at: [ 592.598357][ C0] __dquot_alloc_space+0x4d/0x1cd0 [ 592.603642][ C0] shmem_inode_acct_blocks+0x376/0x5d0 [ 592.609272][ C0] [ 592.611679][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 592.620746][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 592.630900][ C0] ===================================================== [ 592.637907][ C0] Disabling lock debugging due to kernel taint [ 592.644126][ C0] Kernel panic - not syncing: kmsan.panic set ... [ 592.650647][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G B syzkaller #0 PREEMPT(full) [ 592.661302][ C0] Tainted: [B]=BAD_PAGE [ 592.665523][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 592.675708][ C0] Call Trace: [ 592.679057][ C0] [ 592.681966][ C0] __dump_stack+0x26/0x30 [ 592.686439][ C0] dump_stack_lvl+0x50/0x1c0 [ 592.691170][ C0] ? dump_stack+0x12/0x25 [ 592.695637][ C0] dump_stack+0x1e/0x25 [ 592.699926][ C0] vpanic+0x7b4/0x1430 [ 592.704166][ C0] panic+0x15d/0x160 [ 592.708254][ C0] kmsan_report+0x31a/0x320 [ 592.712922][ C0] ? __msan_warning+0x1b/0x30 [ 592.717739][ C0] ? __flush_smp_call_function_queue+0x343/0x1810 [ 592.724329][ C0] ? generic_smp_call_function_single_interrupt+0x1c/0x30 [ 592.731618][ C0] ? __sysvec_call_function_single+0x48/0x350 [ 592.737841][ C0] ? sysvec_call_function_single+0x7c/0x90 [ 592.743801][ C0] ? asm_sysvec_call_function_single+0x1f/0x30 [ 592.750098][ C0] ? pv_native_safe_halt+0x13/0x20 [ 592.755360][ C0] ? default_idle+0xd/0x20 [ 592.759928][ C0] ? arch_cpu_idle+0xd/0x20 [ 592.764594][ C0] ? default_idle_call+0x3f/0x70 [ 592.769701][ C0] ? do_idle+0x6ad/0xa10 [ 592.774077][ C0] ? cpu_startup_entry+0x5f/0x80 [ 592.779158][ C0] ? rest_init+0x1df/0x260 [ 592.783739][ C0] ? start_kernel+0x6d7/0x8b0 [ 592.788531][ C0] ? x86_64_start_reservations+0x28/0x30 [ 592.794329][ C0] ? x86_64_start_kernel+0x139/0x140 [ 592.799766][ C0] ? common_startup_64+0x13e/0x147 [ 592.805050][ C0] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 592.811633][ C0] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 592.817852][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 592.823136][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 592.829146][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 592.834425][ C0] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 592.840923][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 592.846213][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 592.852196][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 592.857486][ C0] __msan_warning+0x1b/0x30 [ 592.862144][ C0] __flush_smp_call_function_queue+0x343/0x1810 [ 592.868579][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 592.873894][ C0] generic_smp_call_function_single_interrupt+0x1c/0x30 [ 592.881018][ C0] __sysvec_call_function_single+0x48/0x350 [ 592.887089][ C0] sysvec_call_function_single+0x7c/0x90 [ 592.892894][ C0] [ 592.895899][ C0] [ 592.898907][ C0] asm_sysvec_call_function_single+0x1f/0x30 [ 592.905059][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 592.910950][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 15 0d 00 55 48 89 e5 fb f4 <5d> e9 87 f1 03 00 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 592.930698][ C0] RSP: 0018:ffffffff92603d78 EFLAGS: 00000252 [ 592.936892][ C0] RAX: ffff8881aa610000 RBX: ffffffff92628980 RCX: 0000000000b394da [ 592.944971][ C0] RDX: ffff88823ea92e48 RSI: 0000000000000001 RDI: 000000000013599c [ 592.953055][ C0] RBP: ffffffff92603d78 R08: ffffea000000000f R09: 0000000000000007 [ 592.961136][ C0] R10: ffff88823f195df7 R11: ffffffff81b73100 R12: 0000000000000000 [ 592.969208][ C0] R13: 0000000000000000 R14: ffffffff92629540 R15: 0000000000000000 [ 592.977287][ C0] ? __pfx_task_is_throttled_fair+0x10/0x10 [ 592.983396][ C0] default_idle+0xd/0x20 [ 592.987798][ C0] arch_cpu_idle+0xd/0x20 [ 592.992283][ C0] default_idle_call+0x3f/0x70 [ 592.997209][ C0] do_idle+0x6ad/0xa10 [ 593.001431][ C0] cpu_startup_entry+0x5f/0x80 [ 593.006352][ C0] rest_init+0x1df/0x260 [ 593.010773][ C0] start_kernel+0x6d7/0x8b0 [ 593.015417][ C0] x86_64_start_reservations+0x28/0x30 [ 593.021049][ C0] x86_64_start_kernel+0x139/0x140 [ 593.026436][ C0] common_startup_64+0x13e/0x147 [ 593.031596][ C0] [ 593.034978][ C0] Kernel Offset: disabled [ 593.039347][ C0] Rebooting in 86400 seconds..