last executing test programs: 16m2.278369202s ago: executing program 4 (id=2603): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000200)=""/73) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) readv(r4, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1) landlock_restrict_self(0xffffffffffffffff, 0x1) landlock_restrict_self(r2, 0xe) landlock_restrict_self(r2, 0x9) sendmmsg$unix(r4, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) read(r2, &(0x7f0000000340)=""/42, 0x2a) socket(0x1e, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1e) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0x60000, 0xf000, 0x0, 0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xa000, 0xddccb000, 0xd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0x1}, {0x0, 0xdddd8000, 0x18, 0xe, 0x0, 0x4, 0x7f, 0x0, 0x80, 0xe, 0x2a, 0x6}, {0x10b002, 0x2000, 0xc, 0xfd, 0x80, 0x0, 0x3}, {0x1000, 0x0, 0xd, 0x0, 0x70, 0x80, 0x0, 0x0, 0xfd, 0x1c, 0x3, 0xa8}, {0x100026fff, 0x3000, 0xd, 0x4, 0x0, 0x8, 0x0, 0x0, 0x6, 0xfc, 0x86, 0x1}, {0xeeee8000, 0x3000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80, 0x0, 0x4}, {0xd000, 0x41000, 0x3, 0x82, 0xfe, 0x1, 0x4, 0xe}, {0x0, 0xfffa}, {0x1, 0xfffe}, 0x50011, 0x0, 0x0, 0x1, 0x1000000000000001, 0x0, 0x900, [0x0, 0x800000000, 0x2, 0x5]}) 16m0.647623358s ago: executing program 4 (id=2607): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x76, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x20}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$inet6(0x10, 0x3, 0x0) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r5) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82187201, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r7 = syz_open_procfs(0x0, &(0x7f0000019200)='net/route\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe6c) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d4e, 0x103) pread64(r7, &(0x7f0000019240)=""/102365, 0x18fdd, 0x400101) epoll_create1(0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r8, 0x802c550a, &(0x7f0000000500)=@urb_type_control={0x2, {0x0, 0x1}, 0x6, 0x80, &(0x7f0000000000)={0x80, 0x14, 0xf801, 0x200}, 0x8, 0x8001, 0x0, 0x0, 0x1676ab34, 0xdffffff9, 0x0}) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x0) r10 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x8086e1, 0x0, 0x1, 0xfffffffd}, &(0x7f0000000500), &(0x7f0000000140), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r10, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x400, 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r10, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd22, 0x6000000, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {}, {0x7, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x7f}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) 16m0.50641024s ago: executing program 4 (id=2608): r0 = socket$inet(0x2, 0x5, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123301, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) fsopen(&(0x7f0000000040)='afs\x00', 0x0) r5 = userfaultfd(0x1) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) close(0x3) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_pressure(r7, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r8, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, 0x0, 0x80) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, 0x0) r9 = dup2(r4, r6) ioctl$SNDCTL_DSP_SPEED(r9, 0xc0045002, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x100, 0x40202) r10 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r10, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x400004}}, 0x2e) 15m55.982102448s ago: executing program 4 (id=2617): socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x1}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x478) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0x7000000) shmget$private(0x0, 0x400000, 0x800, &(0x7f000000e000/0x400000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200048cc}, 0x404c044) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1f00, 0x12) setrlimit(0x2, &(0x7f00000000c0)={0xee32, 0x1}) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) keyctl$setperm(0x5, 0x0, 0x40022) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000814}], 0x1, 0x48891) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xde, &(0x7f0000000040)=0xf2f, 0x4) syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b3, 0x800, 0x1, 0x2082, 0x0, 0x0}, &(0x7f0000000180), &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(0x0, r5, r6, &(0x7f0000000040)=@IORING_OP_URING_CMD=@ublk_cmd_sqes=@ublk_io_need_get_data_sqe={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0107522, 0x0, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, '\x00', {0x3, 0x4b6, 0x7, &(0x7f00000005c0)=@buf_1k="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"}}) 15m54.001163353s ago: executing program 4 (id=2619): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0c000000100100000b000000e0"], 0xec}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x1, 0x3}, 0x10) close(r2) r3 = socket(0x2, 0x80805, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) waitid(0x0, r4, 0x0, 0x8, 0x0) wait4(r4, 0x0, 0x1, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0xc0580, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xe6, &(0x7f00000001c0)=""/95, &(0x7f0000000280)=0x5f) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r7, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r7, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x2, 0xd) ioctl$DVB_DEMUX_DMX_SET_FILTER(r7, 0x403c6f2b, &(0x7f0000000080)={0x6, {"4b81b0c732e92eb1fd60fbf401687d72", "1cea03ca4fe1c1f1e31253bda1f1fed5", "d80190bae206002cb2a1a28cde21dbfd"}, 0x2, 0x7}) 15m50.473115387s ago: executing program 4 (id=2624): socket$nl_route(0x10, 0x3, 0x0) socket(0xf, 0x5, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0x2}, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) ioctl$FBIOBLANK(r2, 0x4611, 0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) quotactl_fd$Q_GETFMT(r2, 0xffffffff80000402, 0x0, 0x0) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f00000000c0)={0x9, 0x14, 0x200012, 0x10015, 0x9, 0xc0cc, 0x2, 0x8c, 0xffffffffffffffff}) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ioprio_get$uid(0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0x80000000, &(0x7f0000000000)) pread64(0xffffffffffffffff, &(0x7f0000001600)=""/4103, 0x1007, 0x97) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="0d882dbd7000fdfc11250100000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x8c0}, 0x10) ioctl$BLKROSET(0xffffffffffffffff, 0x401070cd, 0x0) io_setup(0x20fe, &(0x7f0000000540)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_pgetevents(r6, 0x4, 0x4, &(0x7f00000000c0)=[{}, {}, {}, {}], &(0x7f0000000040), 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_clone(0x2008480, 0x0, 0x0, 0x0, 0x0, 0x0) 15m35.226243085s ago: executing program 32 (id=2624): socket$nl_route(0x10, 0x3, 0x0) socket(0xf, 0x5, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0x2}, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) ioctl$FBIOBLANK(r2, 0x4611, 0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) quotactl_fd$Q_GETFMT(r2, 0xffffffff80000402, 0x0, 0x0) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f00000000c0)={0x9, 0x14, 0x200012, 0x10015, 0x9, 0xc0cc, 0x2, 0x8c, 0xffffffffffffffff}) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ioprio_get$uid(0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0x80000000, &(0x7f0000000000)) pread64(0xffffffffffffffff, &(0x7f0000001600)=""/4103, 0x1007, 0x97) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="0d882dbd7000fdfc11250100000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x8c0}, 0x10) ioctl$BLKROSET(0xffffffffffffffff, 0x401070cd, 0x0) io_setup(0x20fe, &(0x7f0000000540)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_pgetevents(r6, 0x4, 0x4, &(0x7f00000000c0)=[{}, {}, {}, {}], &(0x7f0000000040), 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_clone(0x2008480, 0x0, 0x0, 0x0, 0x0, 0x0) 41.200303772s ago: executing program 3 (id=5470): r0 = epoll_create1(0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595e, 0x10000, 0x1, 0x52}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x8, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x1, {0x2, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r5, &(0x7f0000000100)={0x8}) shutdown(r5, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r5, &(0x7f0000000140)={0x2000200b}) 40.99761114s ago: executing program 3 (id=5471): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYRESDEC=r0, @ANYRESOCT=0x0, @ANYRESDEC=r0, @ANYRES16=r0, @ANYBLOB="b5175f4b787a34383a3743369e4f175fc3e3e91ad026b35e1eb864a1cdf0453a682069bba7286eeeaaf9372803f8e5172d4eaf45b8ba9d772170e5aa8155f7f6d393e201cf933efce386548a9feb83b5a47c7a6e766356c72361c246743de6c77c39f76d289be64e90a2e7013aae9990c03db418549da05952cb48", @ANYRES16=r0], 0xff2e) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f00000000c0)={0x28, 0x0, 0x2710}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000180)='+', 0x1, 0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a00)=ANY=[], 0xfc}}, 0x844) sendmmsg$alg(r3, &(0x7f000000a200)=[{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f00000004c0)="37a774618c4a4df393b3bbe4f27ba2973e0270355414e6c1b39be488e3fdc6d17b54ae5de7d6871ea213a8046005fb9943365a6dc3a1fd711b4bf88495a341b98dca3890d47cd34464d06fa747b21a349df60483cd2eaf0cd6277c8e949e795137f3e7ac6db067cbb87df6ad3ab23207731a60406b0a35be3378e57f98349959ab569763068efbb1cce3d7570a5f054188fee500d1f7902029f75f148133a22d9f615b3398d2c3ddd0533f6041a6619b2b870c3d11cbb9df99194320b645b1b1dc9dadaaf3ba2d22d2874bbb2253052133c3373d010450d0f7c046ee186eecf39ea05d85cb436c537bec3d00ce573f5308c6f32a665092f809c72aed41b2e54e38cab56471b7e45e90d91eedc00c47c522ffed37d1ea8a97a45da6346732852ca54f2b1d55559925a7ed308d3ae653796267ff76a4dfd3cff90259bbfef71bb8a87daa1c7093875ef1debb9711b81becc6e847abeb47ed099cdffd036f3bdb77aa3ca8f4cfe506b8921e14ac004a52dd99b9c31e60f85ab28bf0840ec095203d7c62c6c9adbdd01a6599c67a", 0x18c}], 0x1, 0x0, 0x0, 0x20004004}], 0x1, 0x4804) recvfrom(r2, &(0x7f00000001c0)=""/62, 0x3e, 0x40000042, 0x0, 0x48) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10045, 0x7, r5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0x4008af12, &(0x7f0000000080)={0x0, 0x7ff}) fchdir(r7) pwritev2(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000200)="aee2b8c3", 0x4}], 0x1, 0x7, 0x6, 0x1) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x80) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) accept4(r8, 0x0, 0x0, 0x800) 39.934856444s ago: executing program 3 (id=5479): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0xeb, @remote, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000580), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, "b86290069962eb21", "c0ca6b79955b9fcb0f8045ab47a09c4b4a94ff7ad3d8b71e5492e37315f600d4", "e421626a", "85866235ad1782a2"}, 0x38) 39.779296878s ago: executing program 3 (id=5482): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(r0, &(0x7f00000000c0)='./file0\x00', 0x0) fchdir(r1) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mount$fuseblk(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x0, 0x1151400, 0x0) 39.569808585s ago: executing program 3 (id=5485): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x24, r3, 0x201, 0x3ffffd, 0x800000, {{}, {}, {0x8, 0x11, 0x84e}}}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x20040010) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000006a00)=[{{0x0, 0x0, &(0x7f0000002900)=[{0x0}, {&(0x7f00000010c0)}, {&(0x7f0000001880)="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", 0xda7}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0x101d0) 39.294206595s ago: executing program 3 (id=5488): setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000000c0)=0x6, 0x4) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) sendmsg$nl_route_sched(r0, 0x0, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, 0x0, {0x10}, {0x3}, {0xa, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4409c}, 0x0) 38.791157414s ago: executing program 33 (id=5488): setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000000c0)=0x6, 0x4) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) sendmsg$nl_route_sched(r0, 0x0, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, 0x0, {0x10}, {0x3}, {0xa, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4409c}, 0x0) 10.953519975s ago: executing program 5 (id=5629): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="09000000040000000c0000000b"], 0x50) r0 = syz_clone(0x0, 0x0, 0xffffff36, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x80000000, 0x0) ptrace(0x10, r0) r1 = syz_pidfd_open(r0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) waitid$P_PIDFD(0x3, r1, 0x0, 0xa000000c, 0x0) 10.499177373s ago: executing program 0 (id=5632): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x4000, 0x3, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367, 0x0, r6}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000", @ANYRES32=0x0], 0x48) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002340), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000022c0)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000b00)='./file0\x00', 0x0, 0x1802020, 0x0) 9.880869543s ago: executing program 1 (id=5636): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, {&(0x7f0000000140)=""/110, 0x6e, 0x0, 0x1, 0x2}}, 0x48) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0xc, @mcast1}, 0x1c) 9.499963045s ago: executing program 0 (id=5638): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000880)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x5, 0x10}, 0xc) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x4, 0x94, 0xfffffffd, 0x5}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x3}}, 0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x1}, 0xc) write$cgroup_pid(r1, &(0x7f0000000440), 0x12) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000600)={0x0, @in6={{0xa, 0x4e22, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c) 8.887272915s ago: executing program 1 (id=5641): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000}) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f00000001c0)) ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f0000000080)=""/194) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x8000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 8.802929638s ago: executing program 5 (id=5642): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000080)=@other={'decodes', ' ', 'io+mem'}, 0xf) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg$sock(r0, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f00000051c0)=[{&(0x7f0000004fc0)="14733f9daa4e98c0c2", 0x9}], 0x1}}], 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x5, {0x1, 0x1, 0x4}, 0xfe}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004012}, 0x20000050) 8.751727596s ago: executing program 2 (id=5644): read$FUSE(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x32, 0x0}) syz_open_dev$media(0x0, 0x66, 0x180502) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) fallocate(r0, 0x2c, 0xc, 0x9) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd04, 0x24dfdbff, {0x0, 0x0, 0x0, r8, {0x4, 0xa}, {}, {0xfff2, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xcdb281c6bf69a511}, 0x4800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) readahead(0xffffffffffffffff, 0x8, 0x6) write$rfkill(r1, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc00c64b5, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) vmsplice(r0, &(0x7f0000002440)=[{&(0x7f0000000280)="49cdfa6ed47b174e070de233070512b7b7ba972ae6afa18cea0fdd1244f9e34f0fed71035601d171a98ae8032a5114f121a4a5b3c4113277f4a90af2c163d41e429a3886b6f9c4f5b61b2e6b32711b568240e85f437edcd8ec1d2e30367c9461e42ffefdcbe215a2bfff73b5e6ab716527c8dc2a7e655cbc45201b83aa587e6c1be3f8605a61d7fd82f9fbefb589ad36d5b24c175c922731c8ded91793ba", 0x9e}, {&(0x7f0000000380)="caf438486f7c1394f7b8a7072ffd43dcfbe32853683c1dcf465a5c5016bf30ec27eb14b138c9b96377a0c322e8b6bb07341256d456d4065960b2185874cad0eb11df0ef05971a9891f", 0x49}, {&(0x7f00000004c0)="15acc4553e1b33e19eb46a923c96f9487079a5fb31b7fb7f251056fd5538f7c03fd350d87d331eb792a9dd24eb119ddffe14b52aec3b901b4358518c925a808209977235d474b12f8f82cfe497ee4ab0c6523d2b998a30bf51981a1af769b3381e99fadb65d9b78be14e6b9f93d5b02a59a9d14fcb779e2e0974576ba036d55bb374093e570d68993824529a5a26cfd21bb3d6f4de5620ed8c903bfb7866f8e5930473b92451eaaab2693013d4fe808b2965a0ef1c77ca108d3f6a14fd0066ae251d4f0a", 0xc4}, {&(0x7f00000005c0)="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", 0xfc}, {&(0x7f00000006c0)="ba49ec662c88432e37e24286027e086f61de0239564b89716314fc7e4da277241f99f7e3953cef18de5c4c244cda254890a2133050795706f3a4156a656781a210262abd64cda0aeb2436756604d7d251bfba1d21d45d7b30edc07f40387b1560f9ed4e65ca7e3fd6ae52493775d9f2d97e5c353d8f7120b4b5507", 0x7b}, {&(0x7f0000000740)="0e8252dd608fc946f0b462571761a9f31d1c7bb8f1217df229687df4c5852c184e09ecff8a1fb30a86ca55b98545204c2e7562b963b98f47d3951eb794fe9460fbf38b40dc8054418a1fa6dbc9f23b4e", 0x50}, {&(0x7f0000001300)="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", 0xffe}, {&(0x7f0000002300)="473834ffd48c4917c962a1408940e8", 0xf}, {&(0x7f0000002340)="1a4b071618fa641640e21bcbb2a4f7a88857eac733a7a76517bf0a2f7bb495b9a6679309f40baf6e32b9d86ab7a747260913032c70762b795a7a0102bbc29b4d306d90a1c093d60381455206522f966b9c1eeee20892caab47c1078ec31a36358e53618aaba16e3e1c9164c734e89b7846bedaaa1df8dc232b10db3b2fc3ef76", 0x80}, {&(0x7f00000023c0)="abbec5f997fb2dded29b53f54ea5c1d150b6fbdf924947e0382db1c8fe6898ba9964e883c548821e7c022e5ae1b60d0f4b484b30878a209d3883761e1293ef20aa15f31497f6e37b99ea4425aecc55ab7817bda1f620e8ff98ba3e8bc81c6a6b2316948f50119b", 0x67}], 0xa, 0x5) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r10, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @loopback}, r11}}, 0x30) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000), 0x0, 0x0, 0x2) 8.505225796s ago: executing program 5 (id=5645): pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f00000003c0)="e1", 0x1, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) splice(r1, 0x0, r0, 0x0, 0xfea8, 0xa) 8.415374385s ago: executing program 6 (id=5646): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x80) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x3000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 8.398461235s ago: executing program 0 (id=5647): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x92}, 0x1, 0x0, 0x0, 0x40080c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}]}}]}, 0x3c}}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0xa888, r4, 0x40003e}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)="82", 0x1}], 0x1}, 0x80004) 8.233546931s ago: executing program 2 (id=5648): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='vegas', 0x5) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100114, 0x0, 0xfffffffffffffd25) 8.155343091s ago: executing program 6 (id=5649): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 8.124476139s ago: executing program 5 (id=5650): mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000000000/0x4000)=nil) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r1) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x80000006) r3 = dup(r0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) 8.105244653s ago: executing program 2 (id=5651): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x9}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40480c0}, 0x20040084) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 8.033308899s ago: executing program 1 (id=5652): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$kcm(0x10, 0x2, 0x10) close(0x3) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x12b000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000540)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0xa, r3}, 0x10) sendmmsg$inet6(r0, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8c4) 7.775586667s ago: executing program 0 (id=5653): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000002200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1}, @ptr={0x70742a85, 0x80000, 0x0, 0x0, 0x1, 0x11}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0x3a}}, &(0x7f0000000600)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 7.764353546s ago: executing program 1 (id=5654): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) read$FUSE(r3, 0x0, 0x0) close(0x3) 7.729324177s ago: executing program 6 (id=5655): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x0, {0x0, 0x1, 0x4}, 0x2}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="00010100004000", 0x7}, {&(0x7f0000000080)='%y', 0x2}], 0x2}, 0x4004) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r4}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r4, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}}, 0x18) sendmmsg(r0, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000340)="462ebbe6d9073d6fa34c2d28aa708936bb19e656da2f34ecdbf8f27b8f9dd2ec16ada05787201e46e7036b00bbb65ff0a8cadc7fb7831750f1edb022515b25d6e1fa50dad846b3ee57a293373af86975a635ca51bb40ed19", 0x58}, {&(0x7f00000003c0)="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", 0x6a2}], 0x2}}], 0x1, 0xf5) 7.686510204s ago: executing program 5 (id=5656): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000280)=0x4c6, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000440)=@xdp={0x2c, 0x8, r4, 0x5}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="a9", 0x5e0}], 0x1}, 0x20008110) 7.581567648s ago: executing program 2 (id=5657): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) recvmmsg(r0, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000180)=""/15, 0xf}, {&(0x7f0000000500)=""/194, 0xc2}], 0x2}, 0x9}], 0x2, 0x10100, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) 7.423944355s ago: executing program 2 (id=5658): ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x28, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff25, 0x0, 0x0, 0x0, 0xa}, 0xfffffffffffffd48) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x73, 0x2, 0x2, 0x4002804c4, 0x9, 0x8000000000000000, 0xc595, 0x0, 0x4, 0xefffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2002d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.208374642s ago: executing program 2 (id=5659): read$FUSE(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x32, 0x0}) syz_open_dev$media(0x0, 0x66, 0x180502) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) fallocate(r0, 0x2c, 0xc, 0x9) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd04, 0x24dfdbff, {0x0, 0x0, 0x0, r8, {0x4, 0xa}, {}, {0xfff2, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xcdb281c6bf69a511}, 0x4800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) readahead(0xffffffffffffffff, 0x8, 0x6) write$rfkill(r1, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc00c64b5, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) vmsplice(r0, &(0x7f0000002440)=[{&(0x7f0000000280)="49cdfa6ed47b174e070de233070512b7b7ba972ae6afa18cea0fdd1244f9e34f0fed71035601d171a98ae8032a5114f121a4a5b3c4113277f4a90af2c163d41e429a3886b6f9c4f5b61b2e6b32711b568240e85f437edcd8ec1d2e30367c9461e42ffefdcbe215a2bfff73b5e6ab716527c8dc2a7e655cbc45201b83aa587e6c1be3f8605a61d7fd82f9fbefb589ad36d5b24c175c922731c8ded91793ba", 0x9e}, {&(0x7f0000000380)="caf438486f7c1394f7b8a7072ffd43dcfbe32853683c1dcf465a5c5016bf30ec27eb14b138c9b96377a0c322e8b6bb07341256d456d4065960b2185874cad0eb11df0ef05971a9891f", 0x49}, {&(0x7f00000004c0)="15acc4553e1b33e19eb46a923c96f9487079a5fb31b7fb7f251056fd5538f7c03fd350d87d331eb792a9dd24eb119ddffe14b52aec3b901b4358518c925a808209977235d474b12f8f82cfe497ee4ab0c6523d2b998a30bf51981a1af769b3381e99fadb65d9b78be14e6b9f93d5b02a59a9d14fcb779e2e0974576ba036d55bb374093e570d68993824529a5a26cfd21bb3d6f4de5620ed8c903bfb7866f8e5930473b92451eaaab2693013d4fe808b2965a0ef1c77ca108d3f6a14fd0066ae251d4f0a", 0xc4}, {&(0x7f00000005c0)="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", 0xfc}, {&(0x7f00000006c0)="ba49ec662c88432e37e24286027e086f61de0239564b89716314fc7e4da277241f99f7e3953cef18de5c4c244cda254890a2133050795706f3a4156a656781a210262abd64cda0aeb2436756604d7d251bfba1d21d45d7b30edc07f40387b1560f9ed4e65ca7e3fd6ae52493775d9f2d97e5c353d8f7120b4b5507", 0x7b}, {&(0x7f0000000740)="0e8252dd608fc946f0b462571761a9f31d1c7bb8f1217df229687df4c5852c184e09ecff8a1fb30a86ca55b98545204c2e7562b963b98f47d3951eb794fe9460fbf38b40dc8054418a1fa6dbc9f23b4e", 0x50}, {&(0x7f0000001300)="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", 0xfff}, {&(0x7f0000002300)="473834ffd48c4917c962a1408940e8", 0xf}, {&(0x7f0000002340)="1a4b071618fa641640e21bcbb2a4f7a88857eac733a7a76517bf0a2f7bb495b9a6679309f40baf6e32b9d86ab7a747260913032c70762b795a7a0102bbc29b4d306d90a1c093d60381455206522f966b9c1eeee20892caab47c1078ec31a36358e53618aaba16e3e1c9164c734e89b7846bedaaa1df8dc232b10db3b2fc3ef76", 0x80}, {&(0x7f00000023c0)="abbec5f997fb2dded29b53f54ea5c1d150b6fbdf924947e0382db1c8fe6898ba9964e883c548821e7c022e5ae1b60d0f4b484b30878a209d3883761e1293ef20aa15f31497f6e37b99ea4425aecc55ab7817bda1f620e8ff98ba3e8bc81c6a6b2316948f50119b", 0x67}], 0xa, 0x5) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r10, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @loopback}, r11}}, 0x30) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000), 0x0, 0x0, 0x2) 7.028169289s ago: executing program 0 (id=5660): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003a80)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x7, 0x2}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 6.243823029s ago: executing program 6 (id=5661): r0 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x2cc}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) readv(r1, 0x0, 0x0) 5.134180851s ago: executing program 6 (id=5662): r0 = socket$xdp(0x2c, 0x3, 0x0) unshare(0x22020600) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x800}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000240)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000040)={0x2c, 0xa, r2}, 0x10) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000a40), 0x4) 3.958897416s ago: executing program 1 (id=5663): getpid() r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r1, 0x410, &(0x7f0000000200)={0x1, 0x3, 0x1000000000000001, 0x9b}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) futimesat(r0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={{0x77359400}, {0x77359400}}) 2.945222727s ago: executing program 1 (id=5664): syz_usb_connect(0x3, 0x36, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_pidfd_open(0x0, 0x0) r1 = socket(0x18, 0x4, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f00000009c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000980)={&(0x7f0000000440)={0x504, r2, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x244, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4e, 0x5, "f008203768815fa03473c84732637d695a2667689d38a9e11cf55f7b31c3fe2e42b6b77ade44286dff668fc7312ab51139b7c1f6f95bfa6e92485866f3fbb4c2caf0a719c72c3dbc77b3"}, @ETHTOOL_A_BITSET_VALUE={0xb1, 0x4, "f1242193a67279bcf2fcf80f43259ab333d95cc57bc7eeb435a491e6916ab9d99cee35abcaf748dcbfd738259a42230ebed4f391b9fef250e7e4cd4dad9af16ab3d11092cc4e6ccae841b3242a0b6920af938b1926eeeb8ab24ad178fbf64f88a2decdbb709abcb9902ed2e0dbec91d891ebe8f78be85e05fde112c5600b3d266dde4e77b612da91d4c6e562ef57ae230fa7ce8d9c3381fccbf601f049a2cf587b7312b2c1d23e5392bca18c0e"}, @ETHTOOL_A_BITSET_BITS={0xec, 0x3, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '{{-+%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '($(*(]*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x16\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd0}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x60e}, @ETHTOOL_A_BITSET_MASK={0x3e, 0x5, "d626036ad374c4e5dea7e9c17f254bc2bbb9f7a467aafef206f5781303734584ef70739c335693b997a32815aa302d699ed5ec16230b4874e4a4"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xb}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x27c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1a4, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, ']*,!\'&\'-.^%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}]}, {0x4}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '!\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffe}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7b2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb415}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\n.]\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}, @ETHTOOL_A_BITSET_MASK={0xd4, 0x5, "821ca3a638f87eefc6f2a9521b6c09a5c0c964156983df2fa00bdadeff4e52597029ca24cec00b1e95bce3f4ce22a223cfc565b0c1ef1dc50c76cb06585469f3eb4a5130e294ab48e0a8fdbb67e51766abe144577322c4b95cd452e71cfb988a354beac0c16a0258655862d11bc9e1b1392dc1aa95f15cc24db93d6b9f62954cd9cee80f9e054f655c10b990aed4e3685be973b00502e5afa3a8c5e062ddffd82ee1e5c7080352e008aec1216151fbb2a9747a31dafe83428100cb683a3c1d4174f9fc2943ebde23b81a2d0d006605a2"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x504}, 0x1, 0x0, 0x0, 0x90}, 0x811) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010027bd7000fedbdf2500000000", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x80) 49.923627ms ago: executing program 5 (id=5665): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r3, 0x4068aea3, &(0x7f00000003c0)={0xa3, 0x0, &(0x7f00000002c0)}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000340)={0x5, 0x0, [{0x9a7, 0x0, 0x100}, {0xb7b, 0x0, 0x2}, {0x37d, 0x0, 0x3}, {0xb67, 0x0, 0x6}, {0x4b564d01, 0x0, 0x200}]}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xf3b8, 0x0, 0x8000001000, 0x400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x0, 0x3, 0x4], 0xeeee8000, 0x140640}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 40.624452ms ago: executing program 0 (id=5666): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x200, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x541d9}}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f00000000c0), 0x1, 0x2643) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000100)={0x1, 0x3, 0x3, &(0x7f0000000000)={0x20, "e551595944bd993e9f61070b25787d91f7dd2a35446df6de515c5a5ae4e1e1b0fb"}}) sendto$inet6(r1, &(0x7f0000000000)="d30e", 0x2, 0x40d1, &(0x7f00000007c0)={0xa, 0x4e20, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) shutdown(r1, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setsockopt(r1, 0x84, 0x82, &(0x7f0000000080)="1a4f30d089f5bd5b", 0x8) 0s ago: executing program 6 (id=5667): socket$inet(0x2, 0x3, 0x4) syz_open_dev$swradio(&(0x7f00000002c0), 0x0, 0x2) epoll_create1(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x803, 0x0) pipe2(&(0x7f0000000100), 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x22, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x40}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0xfffffffe, 0x0, {0xa, 0x0, 0x46, 0xfe, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFA_RT_PRIORITY={0x8, 0x42, 0x2}]}, 0x48}}, 0x0) kernel console output (not intermixed with test programs): sconnect, device number 104 [ 2070.067973][T23487] usb 4-1: new full-speed USB device number 114 using dummy_hcd [ 2070.242222][T26725] netlink: 'syz.0.4994': attribute type 5 has an invalid length. [ 2070.254212][T23487] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 2070.292278][T23487] usb 4-1: config 0 has no interface number 0 [ 2070.298449][T23487] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 2070.313259][T23487] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2070.326061][T23487] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2070.340132][T23487] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2070.349410][T23487] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2070.366027][T23487] usb 4-1: Product: syz [ 2070.370830][T23487] usb 4-1: SerialNumber: syz [ 2070.416886][T23487] usb 4-1: config 0 descriptor?? [ 2070.459416][T23487] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 2070.487303][T23487] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input166 [ 2070.808409][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2070.808496][T20410] usb 4-1: USB disconnect, device number 114 [ 2070.815703][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 2070.871211][T20410] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 2070.980039][T16622] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 2071.047356][T26735] tipc: Enabling of bearer rejected, failed to enable media [ 2071.153200][T16622] usb 2-1: Using ep0 maxpacket: 32 [ 2071.168632][T16622] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 2071.181216][T16622] usb 2-1: config 0 has no interface number 0 [ 2071.190285][T16622] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 2071.206569][T16622] usb 2-1: config 0 interface 196 has no altsetting 0 [ 2071.220695][T16622] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 2071.231442][T16622] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2071.259808][T16890] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 2071.270216][T16622] usb 2-1: Product: syz [ 2071.279488][T16622] usb 2-1: Manufacturer: syz [ 2071.295432][T16622] usb 2-1: SerialNumber: syz [ 2071.329153][T16622] usb 2-1: config 0 descriptor?? [ 2071.341293][T26738] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2071.420258][T16890] usb 1-1: Using ep0 maxpacket: 32 [ 2071.440762][T16890] usb 1-1: too many configurations: 17, using maximum allowed: 8 [ 2071.461811][T16890] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2071.538391][T16890] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2071.573277][T16890] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2071.601919][T16890] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2071.628128][T16890] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2071.646055][T16890] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2071.660726][T16890] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2071.681953][T16890] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2071.706721][T16890] usb 1-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 2071.723175][T16890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2071.743569][T16890] usb 1-1: Product: syz [ 2071.766700][T16890] usb 1-1: Manufacturer: syz [ 2071.785675][T16890] usb 1-1: SerialNumber: syz [ 2071.809893][T16890] usb 1-1: config 0 descriptor?? [ 2071.821178][T16890] etas_es58x 1-1:0.0: Starting syz syz (Serial Number syz) [ 2071.997040][T16622] ipheth 2-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 2072.043026][T16890] usb 1-1: USB disconnect, device number 102 [ 2072.071809][T16622] ipheth 2-1:0.196: Apple iPhone USB Ethernet device attached [ 2072.609901][T23487] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 2072.800606][T23487] usb 4-1: Using ep0 maxpacket: 8 [ 2072.822208][T23487] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2072.863511][T23487] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 2072.911813][T23487] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 2072.947247][T23487] usb 4-1: SerialNumber: syz [ 2072.981138][T23487] usb 4-1: config 0 descriptor?? [ 2073.015463][T23487] uvcvideo 4-1:0.0: Found UVC 0.00 device (05ac:8501) [ 2073.045229][T23487] uvcvideo 4-1:0.0: No valid video chain found. [ 2073.552470][ C1] ipheth 2-1:0.196: ipheth_rcvbulk_callback: callback retval: -22 [ 2073.718404][T16890] usb 2-1: USB disconnect, device number 105 [ 2074.063207][T16890] ipheth 2-1:0.196: Apple iPhone USB Ethernet now disconnected [ 2075.431866][T23487] usb 4-1: USB disconnect, device number 115 [ 2076.119264][T26850] tipc: Enabling of bearer rejected, failed to enable media [ 2076.190172][T16622] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 2076.369779][T16622] usb 2-1: Using ep0 maxpacket: 32 [ 2076.568437][T16622] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 2076.590003][T23487] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 2076.662511][T16622] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2076.713482][T26871] netlink: 'syz.3.5034': attribute type 1 has an invalid length. [ 2076.721732][T26871] netlink: 'syz.3.5034': attribute type 2 has an invalid length. [ 2076.729559][T26871] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5034'. [ 2076.735145][T16622] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2076.777582][T23487] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2076.811088][T16622] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2076.812111][T23487] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2076.878751][T16622] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2076.896778][T23487] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2076.942686][T23487] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2076.943314][T16622] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2076.959971][T23487] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2077.025542][T16622] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2077.043091][T23487] usb 3-1: config 0 descriptor?? [ 2077.067712][T16622] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2077.100845][T16622] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2077.135891][T16622] usb 2-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 2077.159988][T16890] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 2077.182710][T16622] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2077.218884][T16622] usb 2-1: Product: syz [ 2077.237419][T16622] usb 2-1: Manufacturer: syz [ 2077.255981][T16622] usb 2-1: SerialNumber: syz [ 2077.281174][T16622] usb 2-1: config 0 descriptor?? [ 2077.303646][T16622] etas_es58x 2-1:0.0: Starting syz syz (Serial Number syz) [ 2077.320950][T16890] usb 4-1: Using ep0 maxpacket: 32 [ 2077.347945][T16890] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 2077.410018][T16890] usb 4-1: config 0 has no interface number 0 [ 2077.457976][T16890] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2077.523119][T16890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2077.533196][T23487] plantronics 0003:047F:FFFF.007E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 2077.549164][T16890] usb 4-1: Product: syz [ 2077.558488][T16890] usb 4-1: Manufacturer: syz [ 2077.578361][T16890] usb 4-1: SerialNumber: syz [ 2077.618825][T16622] usb 2-1: USB disconnect, device number 106 [ 2077.627384][T16890] usb 4-1: config 0 descriptor?? [ 2077.656845][T16890] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2077.946556][T16890] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2078.009098][T16890] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2078.089632][T20410] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 2078.290595][T20410] usb 1-1: Using ep0 maxpacket: 32 [ 2078.312081][T20410] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2078.349197][T20410] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2078.358832][T23487] usb 4-1: USB disconnect, device number 116 [ 2078.359269][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2078.403347][T26920] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5046'. [ 2078.415879][T23487] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2078.424475][T20410] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2078.481740][T20410] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 2078.494798][T23487] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2078.503919][T20410] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2078.545477][T20410] usb 1-1: config 0 descriptor?? [ 2078.582725][T23487] quatech2 4-1:0.51: device disconnected [ 2078.944708][ C0] plantronics 0003:047F:FFFF.007E: usb_submit_urb(ctrl) failed: -1 [ 2078.957855][T16622] usb 3-1: USB disconnect, device number 108 [ 2079.085038][T20410] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.007F/input/input168 [ 2079.158470][T26942] netlink: 27 bytes leftover after parsing attributes in process `syz.1.5055'. [ 2079.203927][T20410] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.007F/input/input169 [ 2079.387906][T20410] kye 0003:0458:5011.007F: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 2079.482815][T20410] usb 1-1: USB disconnect, device number 103 [ 2079.660915][T26953] fido_id[26953]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 2080.210069][T23487] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 2080.235262][T26980] bridge3: entered promiscuous mode [ 2080.250537][T26980] bridge3: entered allmulticast mode [ 2080.294049][T26987] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5076'. [ 2080.304049][T26987] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5076'. [ 2080.313713][T26987] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5076'. [ 2080.381066][T23487] usb 3-1: Using ep0 maxpacket: 16 [ 2080.393341][T23487] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2080.414331][T23487] usb 3-1: config 0 has no interfaces? [ 2080.452677][T23487] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 2080.469680][T23487] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2080.498194][T23487] usb 3-1: Product: syz [ 2080.512116][T23487] usb 3-1: Manufacturer: syz [ 2080.530561][T23487] usb 3-1: SerialNumber: syz [ 2080.543578][T27001] sit0: entered promiscuous mode [ 2080.553687][T23487] usb 3-1: config 0 descriptor?? [ 2080.559028][T27001] netlink: 'syz.1.5082': attribute type 1 has an invalid length. [ 2080.585556][T27001] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5082'. [ 2080.824913][T23487] usb 3-1: USB disconnect, device number 109 [ 2080.834961][T27010] syzkaller1: entered promiscuous mode [ 2080.851501][T27010] syzkaller1: entered allmulticast mode [ 2080.990515][T20410] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 2081.129319][T27018] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5089'. [ 2081.160895][T20410] usb 2-1: Using ep0 maxpacket: 32 [ 2081.182007][T20410] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2081.214644][T20410] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2081.226112][T20410] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2081.261673][T20410] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 2081.291868][T20410] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2081.328871][T20410] usb 2-1: config 0 descriptor?? [ 2081.795055][T20410] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0080/input/input170 [ 2081.839458][T20410] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0080/input/input171 [ 2081.986649][T20410] kye 0003:0458:5011.0080: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 2082.031998][T20410] usb 2-1: USB disconnect, device number 107 [ 2082.085621][T27044] fido_id[27044]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 2082.617057][T27057] input: syz0 as /devices/virtual/input/input172 [ 2082.730532][T20410] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 2082.900025][T20410] usb 6-1: Using ep0 maxpacket: 8 [ 2082.915418][T20410] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2082.937863][T20410] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2082.973624][T20410] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2082.994479][T23487] hid_parser_main: 11 callbacks suppressed [ 2082.994501][T23487] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 2083.008908][T20410] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2083.061334][T20410] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2083.067012][T23487] hid-generic 0000:0000:0000.0081: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2083.092739][T20410] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2083.397451][T20410] usb 6-1: GET_CAPABILITIES returned 0 [ 2083.422066][T20410] usbtmc 6-1:16.0: can't read capabilities [ 2083.649870][T23487] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 2083.662299][T20410] usb 6-1: USB disconnect, device number 109 [ 2083.850318][T23487] usb 2-1: Using ep0 maxpacket: 16 [ 2083.859434][T23487] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2083.897476][T23487] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2083.931216][T23487] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 2083.950305][T23487] usb 2-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 2083.965615][T23487] usb 2-1: Manufacturer: syz [ 2083.986641][T23487] usb 2-1: config 0 descriptor?? [ 2084.395196][T27090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5118'. [ 2084.439082][T23487] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:041E:3100.0082/input/input173 [ 2084.536124][T23487] creative-sb0540 0003:041E:3100.0082: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 2084.573846][T27105] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5122'. [ 2084.654696][T23487] usb 2-1: USB disconnect, device number 108 [ 2084.719481][T27106] fido_id[27106]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 2085.289883][T20410] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 2085.439847][T20410] usb 3-1: Using ep0 maxpacket: 32 [ 2085.452027][T20410] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 2085.463936][T20410] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2085.489202][T20410] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2085.501069][T20410] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2085.511542][T16890] usb 6-1: new full-speed USB device number 110 using dummy_hcd [ 2085.521931][T20410] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2085.556648][T20410] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2085.582123][T20410] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2085.594589][T20410] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2085.614717][T20410] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2085.632735][T24906] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 2085.633543][T20410] usb 3-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 2085.657295][T20410] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2085.682730][T20410] usb 3-1: Product: syz [ 2085.687136][T20410] usb 3-1: Manufacturer: syz [ 2085.692981][T20410] usb 3-1: SerialNumber: syz [ 2085.702040][T16890] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2085.719868][T20410] usb 3-1: config 0 descriptor?? [ 2085.736194][T20410] etas_es58x 3-1:0.0: Starting syz syz (Serial Number syz) [ 2085.743655][T16890] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2085.765636][T16890] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2085.775459][T16890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2085.796361][T24906] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2085.828891][T24906] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2085.844503][T24906] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 2085.854278][T24906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2085.867323][T24906] usb 2-1: config 0 descriptor?? [ 2085.897043][T24906] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2085.988532][T20410] usb 3-1: USB disconnect, device number 110 [ 2086.024905][T16890] usb 6-1: usb_control_msg returned -32 [ 2086.040673][T16890] usbtmc 6-1:16.0: can't read capabilities [ 2086.116726][T27124] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5130'. [ 2086.130031][T27124] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5130'. [ 2086.154217][T24906] usb 2-1: USB disconnect, device number 109 [ 2086.419993][T23487] usb 1-1: new low-speed USB device number 104 using dummy_hcd [ 2086.430002][T16890] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 2086.575383][T23487] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 2086.596424][T16890] usb 4-1: Using ep0 maxpacket: 32 [ 2086.603032][T23487] usb 1-1: config 0 has no interface number 0 [ 2086.610492][T16890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2086.610705][T23487] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2086.627260][T16890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2086.667745][T23487] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 2086.679446][T23487] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2086.689142][T16890] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2086.728025][T16890] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 2086.738241][T23487] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2086.744179][T16890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2086.786532][T23487] usb 1-1: config 0 descriptor?? [ 2086.790994][T27152] Invalid argument reading file caps for ./file0 [ 2086.807493][T27146] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2086.808873][T16890] usb 4-1: config 0 descriptor?? [ 2086.861770][T23487] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 2087.239918][T16622] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 2087.252373][T27146] usbtmc 6-1:16.0: send_request_dev_dep_msg_in returned -90 [ 2087.308383][T20410] usb 1-1: USB disconnect, device number 104 [ 2087.390964][T16890] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0083/input/input174 [ 2087.552085][T16622] usb 2-1: Using ep0 maxpacket: 8 [ 2087.588720][T16890] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0083/input/input175 [ 2087.632116][T16622] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2087.736829][T16622] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 2087.757638][T16622] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 2087.766932][T16622] usb 2-1: SerialNumber: syz [ 2087.821362][T16890] kye 0003:0458:5011.0083: input,hiddev1,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 2087.836869][T16622] usb 2-1: config 0 descriptor?? [ 2087.899659][T16890] usb 4-1: USB disconnect, device number 117 [ 2087.966678][T16622] uvcvideo 2-1:0.0: Found UVC 0.00 device (05ac:8501) [ 2087.998069][T16622] uvcvideo 2-1:0.0: No valid video chain found. [ 2088.039914][T27170] fido_id[27170]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 2088.319365][T27174] binder: 27173:27174 ioctl 40046205 0 returned -22 [ 2088.359402][T23487] usb 6-1: USB disconnect, device number 110 [ 2088.780078][T23487] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 2088.969816][T23487] usb 6-1: Using ep0 maxpacket: 16 [ 2089.005375][T23487] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2089.056978][T23487] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 2089.109521][T23487] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 53 [ 2089.133810][T16890] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 2089.155077][T23487] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 2089.223974][T23487] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2089.272528][T23487] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2089.302150][T23487] usb 6-1: SerialNumber: syz [ 2089.342528][T16890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2089.343360][T27182] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2089.399259][T16890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2089.421546][ T30] audit: type=1326 audit(1782474583.928:3325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27191 comm="syz.0.5159" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f890ec code=0x0 [ 2089.451535][T27182] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2089.476741][T16890] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2089.477475][T23487] hub 6-1:1.0: bad descriptor, ignoring hub [ 2089.541235][T23487] hub 6-1:1.0: probe with driver hub failed with error -5 [ 2089.555935][T16890] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2089.597349][T16890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2089.633205][T16890] usb 3-1: config 0 descriptor?? [ 2089.824327][T27182] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2089.855132][T27182] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2090.034579][T27195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5160'. [ 2090.060286][T27195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5160'. [ 2090.128536][T16890] plantronics 0003:047F:FFFF.0084: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 2090.165916][T24906] usb 2-1: USB disconnect, device number 110 [ 2090.327424][T23487] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 2090.341867][ T30] audit: type=1326 audit(1782474584.878:3326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27200 comm="syz.3.5163" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fff0ec code=0x0 [ 2090.560380][T16890] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 2090.610799][T24906] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 2090.768042][T16890] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2090.772258][T24906] usb 2-1: Using ep0 maxpacket: 32 [ 2090.787388][T16890] usb 1-1: string descriptor 0 read error: -22 [ 2090.791963][T24906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2090.805412][T24906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2090.805788][T16890] usb 1-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.40 [ 2090.817818][T24906] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2090.837769][T16890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2090.848688][T24906] usb 2-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 2090.858408][T24906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2090.887844][T24906] usb 2-1: config 0 descriptor?? [ 2091.323640][T24906] pantherlord 0003:0810:0002.0085: unknown main item tag 0x0 [ 2091.347691][T16890] hid_mf 0003:0079:1801.0086: unknown main item tag 0x0 [ 2091.352713][T24906] pantherlord 0003:0810:0002.0085: unknown main item tag 0x0 [ 2091.369104][T24906] pantherlord 0003:0810:0002.0085: unknown main item tag 0x0 [ 2091.369683][T16890] hid_mf 0003:0079:1801.0086: unknown main item tag 0x0 [ 2091.378245][T24906] pantherlord 0003:0810:0002.0085: unknown main item tag 0x0 [ 2091.385718][T20410] usb 6-1: USB disconnect, device number 111 [ 2091.417264][T16890] hid_mf 0003:0079:1801.0086: unknown main item tag 0x0 [ 2091.417391][T24906] pantherlord 0003:0810:0002.0085: unknown main item tag 0x0 [ 2091.433151][T20410] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 2091.448837][T24906] pantherlord 0003:0810:0002.0085: unknown main item tag 0x0 [ 2091.448976][T16890] hid_mf 0003:0079:1801.0086: unknown main item tag 0x0 [ 2091.467982][T24906] pantherlord 0003:0810:0002.0085: hidraw1: USB HID v0.00 Device [HID 0810:0002] on usb-dummy_hcd.1-1/input0 [ 2091.510245][T24906] pantherlord 0003:0810:0002.0085: Force feedback for PantherLord/GreenAsia devices by Anssi Hannula [ 2091.564967][T24906] usb 2-1: USB disconnect, device number 111 [ 2091.580540][T16622] usb 4-1: new full-speed USB device number 118 using dummy_hcd [ 2091.701428][T27229] fido_id[27229]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 2091.751335][T16890] hid_mf 0003:0079:1801.0086: hidraw1: USB HID vf.ff Device [HID 0079:1801] on usb-dummy_hcd.0-1/input0 [ 2091.779374][T16622] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2091.802239][T16890] hid_mf 0003:0079:1801.0086: Invalid report, this should never happen! [ 2091.817941][T16622] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2091.833554][T16890] hid_mf 0003:0079:1801.0086: Force feedback init failed. [ 2091.852124][T16622] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2091.873087][T16890] usb 1-1: USB disconnect, device number 105 [ 2091.879160][T16622] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 2091.902491][T16622] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2091.939092][T16622] usb 4-1: config 0 descriptor?? [ 2092.079228][T27236] fido_id[27236]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 2092.212338][T23487] usb 3-1: USB disconnect, device number 111 [ 2092.531757][T16622] hid-picolcd 0003:04D8:F002.0087: No report with id 0xf3 found [ 2092.578018][T16622] hid-picolcd 0003:04D8:F002.0087: No report with id 0xf4 found [ 2092.668519][T16622] usb 4-1: USB disconnect, device number 118 [ 2092.789909][T23487] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 2093.089830][T16890] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 2093.291077][T16890] usb 6-1: Using ep0 maxpacket: 8 [ 2093.345903][T16890] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2093.448216][T27268] input: syz1 as /devices/virtual/input/input176 [ 2093.459107][T16890] usb 6-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 2093.525037][T16890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 2093.586379][T16890] usb 6-1: SerialNumber: syz [ 2093.650439][T23487] usb 3-1: Using ep0 maxpacket: 8 [ 2093.653345][T16890] usb 6-1: config 0 descriptor?? [ 2093.729563][T16890] uvcvideo 6-1:0.0: Found UVC 0.00 device (05ac:8501) [ 2093.739496][T23487] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2093.830092][T24906] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 2093.858530][T16890] uvcvideo 6-1:0.0: No valid video chain found. [ 2093.944826][T23487] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 2093.981249][T23487] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 2093.998821][T23487] usb 3-1: SerialNumber: syz [ 2094.036430][T23487] usb 3-1: config 0 descriptor?? [ 2094.095292][T24906] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2094.137227][T24906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2094.172711][T24906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2094.204474][T24906] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2094.240069][T24906] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2094.280915][T23487] uvcvideo 3-1:0.0: Found UVC 0.00 device (05ac:8501) [ 2094.288769][T24906] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2094.298138][T23487] uvcvideo 3-1:0.0: No valid video chain found. [ 2094.306802][T24906] usb 4-1: Manufacturer: syz [ 2094.326652][T24906] usb 4-1: config 0 descriptor?? [ 2094.592011][T23487] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 2094.795909][T23487] usb 2-1: Using ep0 maxpacket: 16 [ 2094.843046][T23487] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2094.890836][T24906] appleir 0003:05AC:8243.0088: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 2094.905148][T23487] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2094.938567][T23487] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 2095.011214][T23487] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2095.073367][T23487] usb 2-1: config 0 descriptor?? [ 2095.234741][T24906] usb 4-1: USB disconnect, device number 119 [ 2095.760373][T23487] usb 2-1: string descriptor 0 read error: -71 [ 2095.824151][T23487] usb 2-1: Max retries (5) exceeded reading string descriptor 200 [ 2095.882874][T23487] letsketch 0003:6161:4D15.0089: probe with driver letsketch failed with error -32 [ 2095.982826][T23487] usb 2-1: USB disconnect, device number 112 [ 2096.094049][T24906] usb 3-1: USB disconnect, device number 112 [ 2096.474791][T24906] usb 6-1: USB disconnect, device number 112 [ 2096.609620][T27316] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5186'. [ 2096.753395][T27321] input: syz1 as /devices/virtual/input/input177 [ 2097.280940][T16890] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 2097.430113][T24906] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 2097.451717][T16890] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2097.471684][T16890] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2097.483231][T16890] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2097.493414][T16890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2097.505093][T27336] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2097.513092][T16622] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 2097.525566][T16890] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 2097.569913][T20410] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 2097.631235][T24906] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2097.658382][T24906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2097.670142][T24906] usb 4-1: Product: syz [ 2097.674356][T24906] usb 4-1: Manufacturer: syz [ 2097.679153][T24906] usb 4-1: SerialNumber: syz [ 2097.679973][T16622] usb 6-1: Using ep0 maxpacket: 32 [ 2097.687789][T24906] usb 4-1: config 0 descriptor?? [ 2097.706631][T16622] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 2097.740351][T16622] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 2097.753509][T20410] usb 2-1: Using ep0 maxpacket: 16 [ 2097.780418][T20410] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 2097.791010][T16622] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 2097.801224][T20410] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 2097.809575][T16622] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 2097.821248][T20410] usb 2-1: Product: syz [ 2097.825881][T20410] usb 2-1: Manufacturer: syz [ 2097.831740][T20410] usb 2-1: SerialNumber: syz [ 2097.836408][T16622] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 2097.860256][T16890] usb 1-1: USB disconnect, device number 106 [ 2097.867558][T20410] usb 2-1: config 0 descriptor?? [ 2097.883142][T16622] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 2097.896498][T16622] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2097.937742][T16622] usb 6-1: Product: syz [ 2097.958090][T16622] usb 6-1: Manufacturer: syz [ 2097.971952][T16622] usb 6-1: SerialNumber: syz [ 2097.977129][T24906] usb 4-1: USB disconnect, device number 120 [ 2098.021162][T16622] usb 6-1: config 0 descriptor?? [ 2098.261120][T20410] usb 2-1: USB disconnect, device number 113 [ 2098.261335][T23487] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 2098.303606][T20908] udevd[20908]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 2098.436293][T23487] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2098.446308][T23487] usb 3-1: string descriptor 0 read error: -22 [ 2098.453223][T23487] usb 3-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.40 [ 2098.463133][T23487] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2098.471660][T16622] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 2098.482994][T16622] input input178: Device does not respond to id packet M [ 2098.496799][T16622] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 2098.503176][T16622] input input178: Device does not respond to id packet P [ 2098.512055][T16622] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 2098.518118][T16622] input input178: Device does not respond to id packet B [ 2098.526481][T16622] input input178: Device does not respond to id packet N [ 2098.723701][T27346] input: syz0 as /devices/virtual/input/input179 [ 2098.729500][T16622] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 2098.755789][T16622] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 2098.768001][T16622] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 2098.783387][T16622] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 2098.792459][T27348] input: syz0 as /devices/virtual/input/input180 [ 2098.865045][T16622] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input178 [ 2098.913866][T23487] hid_parser_main: 4028 callbacks suppressed [ 2098.913887][T23487] nti 0003:0757:0A00.008A: unknown main item tag 0x0 [ 2098.916676][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.928657][T23487] nti 0003:0757:0A00.008A: unknown main item tag 0x0 [ 2098.938177][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 2098.958908][T16622] usb 6-1: USB disconnect, device number 113 [ 2098.973471][T23487] nti 0003:0757:0A00.008A: unknown main item tag 0x0 [ 2099.008400][T23487] nti 0003:0757:0A00.008A: unknown main item tag 0x0 [ 2099.049549][T23487] nti 0003:0757:0A00.008A: unknown main item tag 0x0 [ 2099.080052][T23487] nti 0003:0757:0A00.008A: unknown main item tag 0x0 [ 2099.116642][T23487] nti 0003:0757:0A00.008A: unknown main item tag 0x0 [ 2099.144034][T23487] nti 0003:0757:0A00.008A: unknown main item tag 0x0 [ 2099.174613][T23487] nti 0003:0757:0A00.008A: unknown main item tag 0x0 [ 2099.201377][T23487] nti 0003:0757:0A00.008A: unknown main item tag 0x0 [ 2099.345367][T23487] nti 0003:0757:0A00.008A: hidraw0: USB HID vff.7f Device [HID 0757:0a00] on usb-dummy_hcd.2-1/input0 [ 2099.395114][T23487] usb 3-1: USB disconnect, device number 113 [ 2099.531153][T27362] fido_id[27362]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 2100.240095][T23487] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 2100.279954][T16622] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 2100.410080][T23487] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2100.447717][T23487] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2100.461969][T16622] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 2100.473551][T23487] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 2100.474665][T16622] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2100.502925][T23487] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2100.534261][T16622] usb 3-1: config 0 descriptor?? [ 2100.539991][T23487] usb 4-1: Product: syz [ 2100.557326][T23487] usb 4-1: Manufacturer: syz [ 2100.559111][T16622] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 2100.570097][T23487] usb 4-1: SerialNumber: syz [ 2100.596714][T23487] usb 4-1: config 0 descriptor?? [ 2100.619879][T23487] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 2100.675024][T23487] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2100.709410][T23487] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 2100.742973][T23487] usb 4-1: media controller created [ 2100.803000][T23487] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2100.927765][T23487] DVB: Unable to find symbol tda10046_attach() [ 2100.947446][T23487] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 2100.965216][T16622] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 2100.973114][T23487] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 2101.299946][T20410] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 2101.469913][T20410] usb 1-1: Using ep0 maxpacket: 8 [ 2101.481562][T20410] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2101.499825][T20410] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2101.520105][T20410] usb 1-1: Product: syz [ 2101.526205][T20410] usb 1-1: Manufacturer: syz [ 2101.540275][T20410] usb 1-1: SerialNumber: syz [ 2101.552246][T20410] usb 1-1: config 0 descriptor?? [ 2101.779159][T16622] gspca_cpia1: usb_control_msg 03, error -71 [ 2101.791668][T16622] cpia1 3-1:0.0: unexpected systemstate: 00 [ 2101.811478][T16622] usb 3-1: USB disconnect, device number 114 [ 2101.835480][T20410] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2101.929813][T16890] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 2102.001497][T23487] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 2102.025042][T23487] usb 4-1: USB disconnect, device number 121 [ 2102.105688][T16890] usb 2-1: Using ep0 maxpacket: 8 [ 2102.147947][T16890] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2102.181351][T16890] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 2102.212520][T16890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 2102.236604][T16890] usb 2-1: SerialNumber: syz [ 2102.249032][T16890] usb 2-1: config 0 descriptor?? [ 2102.265469][T16890] uvcvideo 2-1:0.0: Found UVC 0.00 device (05ac:8501) [ 2102.280294][T16890] uvcvideo 2-1:0.0: No valid video chain found. [ 2102.588293][T27418] syzkaller1: entered promiscuous mode [ 2102.614929][T27418] syzkaller1: entered allmulticast mode [ 2102.646487][T20410] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2102.706965][T20410] usb 1-1: USB disconnect, device number 107 [ 2103.669855][T20410] usb 1-1: new full-speed USB device number 108 using dummy_hcd [ 2103.864453][T20410] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 2103.917798][T20410] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 2103.957528][T20410] usb 1-1: Product: syz [ 2103.982945][T20410] usb 1-1: Manufacturer: syz [ 2104.010773][T20410] usb 1-1: SerialNumber: syz [ 2104.056201][T20410] usb 1-1: config 0 descriptor?? [ 2104.479164][T20410] usb 1-1: USB disconnect, device number 108 [ 2104.638362][T27448] veth1_to_bond: entered allmulticast mode [ 2104.664170][T27448] veth1_to_bond: entered promiscuous mode [ 2104.678813][T27448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5241'. [ 2104.723443][T27448] veth1_to_bond (unregistering): left allmulticast mode [ 2104.736840][T27448] veth1_to_bond (unregistering): left promiscuous mode [ 2104.830617][T23487] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 2104.960985][T16622] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 2104.994166][T23487] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2105.022997][T23487] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2105.049355][T23487] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2105.066350][T23487] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2105.092870][T23487] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2105.114704][T23487] usb 3-1: config 0 descriptor?? [ 2105.131809][T16622] usb 6-1: Using ep0 maxpacket: 8 [ 2105.147182][T16622] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2105.169347][T16622] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2105.179302][T16622] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2105.198690][T16622] usb 6-1: config 0 descriptor?? [ 2105.419315][T16622] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2105.440090][T24906] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 2105.505632][T16622] usb 2-1: USB disconnect, device number 114 [ 2105.543273][T23487] plantronics 0003:047F:FFFF.008B: reserved main item tag 0xd [ 2105.574623][T23487] plantronics 0003:047F:FFFF.008B: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 2105.593639][T24906] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2105.610109][T24906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2105.622563][T24906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2105.633329][T24906] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2105.653451][T20410] usb 6-1: USB disconnect, device number 114 [ 2105.671276][T24906] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2105.724625][T24906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2105.766354][T24906] usb 1-1: config 0 descriptor?? [ 2105.854401][T16622] usb 3-1: USB disconnect, device number 115 [ 2106.226285][T24906] plantronics 0003:047F:FFFF.008C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 2106.243985][ T30] audit: type=1326 audit(1782474600.768:3327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27478 comm="syz.1.5253" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcf0ec code=0x7fc00000 [ 2106.283518][T20410] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 2106.770194][T24906] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 2106.853334][ T30] audit: type=1326 audit(1782474601.388:3328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27478 comm="syz.1.5253" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fcf108 code=0x7fc00000 [ 2106.930132][T24906] usb 6-1: Using ep0 maxpacket: 32 [ 2106.950591][T27501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5260'. [ 2106.968937][T24906] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 2106.984403][T24906] usb 6-1: config 0 has no interface number 0 [ 2107.002479][T24906] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 2107.031128][T24906] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 2107.050130][T24906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2107.065477][T27503] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5261'. [ 2107.070057][T24906] usb 6-1: Product: syz [ 2107.114383][T24906] usb 6-1: Manufacturer: syz [ 2107.135748][T24906] usb 6-1: SerialNumber: syz [ 2107.152650][T24906] usb 6-1: config 0 descriptor?? [ 2107.171090][T27492] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2107.425568][T27492] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2107.870022][T16890] usb 4-1: new full-speed USB device number 123 using dummy_hcd [ 2108.041757][T16890] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 2108.061804][T23487] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 2108.069588][T16890] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 2108.089774][T16890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2108.099868][T27527] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5272'. [ 2108.120195][T16890] usb 4-1: Product: syz [ 2108.124801][T27527] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5272'. [ 2108.134710][T16890] usb 4-1: Manufacturer: syz [ 2108.139354][T16890] usb 4-1: SerialNumber: syz [ 2108.162449][T16890] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 2108.261230][T16622] usb 1-1: USB disconnect, device number 109 [ 2108.476152][T24906] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2108.506899][T24906] asix 6-1:0.188: probe with driver asix failed with error -71 [ 2108.530806][T24906] usb 6-1: USB disconnect, device number 115 [ 2108.585827][T16890] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 2109.339809][T16890] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 2109.499832][T16890] usb 3-1: Using ep0 maxpacket: 32 [ 2109.506673][T16890] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2109.516420][T16890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2109.532275][T16890] usb 3-1: config 0 descriptor?? [ 2109.653317][T27550] veth1_to_bond: entered allmulticast mode [ 2109.661221][T27550] veth1_to_bond: entered promiscuous mode [ 2109.668648][T27550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5281'. [ 2109.758814][T27550] veth1_to_bond (unregistering): left allmulticast mode [ 2109.785898][T16890] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2109.798312][T27550] veth1_to_bond (unregistering): left promiscuous mode [ 2109.831043][T16890] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2109.870991][T16890] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2109.879265][T16890] usb 3-1: media controller created [ 2109.897701][T16890] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2109.941798][T27550] bond0: (slave bond_slave_1): Releasing backup interface [ 2109.987609][T16890] az6027: usb out operation failed. (-71) [ 2110.026181][T16890] az6027: usb out operation failed. (-71) [ 2110.032197][T16890] stb0899_attach: Driver disabled by Kconfig [ 2110.038592][T16890] az6027: no front-end attached [ 2110.038592][T16890] [ 2110.046761][T16890] az6027: usb out operation failed. (-71) [ 2110.055206][T16890] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2110.086133][T16890] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input183 [ 2110.162499][T16890] dvb-usb: schedule remote query interval to 400 msecs. [ 2110.197728][T16890] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2110.239012][T16890] usb 3-1: USB disconnect, device number 117 [ 2110.375882][T16890] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2110.683635][T23487] usb 4-1: USB disconnect, device number 123 [ 2111.009970][T24906] psmouse serio11: Failed to reset mouse on : -5 [ 2111.209235][T27598] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5302'. [ 2111.219797][T16890] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 2111.423262][T16890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2111.458916][T16890] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2111.474022][T16890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2111.487186][T16890] usb 2-1: config 0 descriptor?? [ 2111.721808][T16890] usbhid 2-1:0.0: can't add hid device: -71 [ 2111.739222][T16890] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2111.770290][T16890] usb 2-1: USB disconnect, device number 115 [ 2111.834913][T27622] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5312'. [ 2111.844407][T27622] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5312'. [ 2111.889875][T16622] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 2112.060353][T16622] usb 1-1: Using ep0 maxpacket: 16 [ 2112.080194][T16622] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 2112.097620][T16622] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2112.119488][T16622] usb 1-1: Product: syz [ 2112.130467][T16622] usb 1-1: Manufacturer: syz [ 2112.135627][T16622] usb 1-1: SerialNumber: syz [ 2112.249955][T16890] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 2112.409832][T16890] usb 2-1: Using ep0 maxpacket: 32 [ 2112.426659][T16890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2112.440576][T16890] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 2112.451964][T16890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2112.491887][T16890] usb 2-1: config 0 descriptor?? [ 2112.508560][T16890] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2112.530258][T16890] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2113.024245][T16890] usb 2-1: USB disconnect, device number 116 [ 2113.058293][T16890] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 2113.597552][T16622] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 2113.610216][T23487] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 2113.623635][T16622] usb 1-1: USB disconnect, device number 110 [ 2113.781699][T23487] usb 6-1: Using ep0 maxpacket: 32 [ 2113.804676][T23487] usb 6-1: too many configurations: 17, using maximum allowed: 8 [ 2113.824357][T23487] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2113.847376][T23487] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2113.859810][T23487] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2113.873486][T23487] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2113.885878][T23487] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2113.902374][T23487] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2113.914392][T23487] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2113.926654][T23487] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2113.948359][T23487] usb 6-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 2113.958032][T23487] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2113.967731][T23487] usb 6-1: Product: syz [ 2113.972665][T23487] usb 6-1: Manufacturer: syz [ 2113.977460][T23487] usb 6-1: SerialNumber: syz [ 2113.987324][T23487] usb 6-1: config 0 descriptor?? [ 2114.006578][T23487] etas_es58x 6-1:0.0: Starting syz syz (Serial Number syz) [ 2114.222538][T16622] usb 6-1: USB disconnect, device number 116 [ 2114.779833][T24906] misc userio: Buffer overflowed, userio client isn't keeping up [ 2115.090470][T23487] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 2115.273945][T23487] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2115.300849][T23487] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2115.326412][T23487] usb 1-1: Product: syz [ 2115.338801][T23487] usb 1-1: Manufacturer: syz [ 2115.356209][T23487] usb 1-1: SerialNumber: syz [ 2115.397429][T23487] usb 1-1: can't set config #1, error -71 [ 2115.417871][T23487] usb 1-1: USB disconnect, device number 111 [ 2115.769784][T16622] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 2115.856129][T24906] input: PS/2 Generic Mouse as /devices/serio11/input/input184 [ 2115.925487][T16622] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2115.946803][T16622] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2115.957850][T16622] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2115.979235][T16622] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2115.989218][T16622] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2116.013596][T16622] usb 6-1: config 0 descriptor?? [ 2116.110095][T24906] psmouse serio11: Failed to enable mouse on [ 2116.459831][T24906] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 2116.467715][T16622] plantronics 0003:047F:FFFF.008D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 2116.640112][T24906] usb 1-1: Using ep0 maxpacket: 8 [ 2116.663806][T24906] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2116.684693][T27685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2116.742225][T24906] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2116.764525][T27685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2116.792493][T24906] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2116.805193][T24906] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2116.822142][T24906] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2116.867493][T24906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2117.122994][T24906] usb 1-1: usb_control_msg returned -71 [ 2117.130635][T24906] usbtmc 1-1:16.0: can't read capabilities [ 2117.158221][T24906] usb 1-1: USB disconnect, device number 112 [ 2117.864446][T27733] input: syz1 as /devices/virtual/input/input185 [ 2118.420717][T12762] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 2118.596964][T12762] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2118.608301][T12762] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2118.619301][T12762] usb 1-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.ba [ 2118.628498][T12762] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2118.644249][T12762] usb 1-1: config 0 descriptor?? [ 2118.720898][T23487] usb 6-1: USB disconnect, device number 117 [ 2118.743498][T15496] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 2118.826858][ T3368] netdevsim netdevsim3 netdevsim3 (unregistering): left allmulticast mode [ 2118.932127][T15496] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2118.974176][T15496] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2118.988106][T15496] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2119.014917][T15496] usb 3-1: config 0 descriptor?? [ 2119.096294][T12762] hid_parser_main: 4005 callbacks suppressed [ 2119.096337][T12762] stadia 0003:18D1:9400.008E: unknown main item tag 0x7 [ 2119.112959][T12762] stadia 0003:18D1:9400.008E: item fetching failed at offset 1/5 [ 2119.155288][T12762] stadia 0003:18D1:9400.008E: parse failed [ 2119.163797][T12762] stadia 0003:18D1:9400.008E: probe with driver stadia failed with error -22 [ 2119.236451][T15496] usbhid 3-1:0.0: can't add hid device: -71 [ 2119.244243][T15496] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2119.261782][T15496] usb 3-1: USB disconnect, device number 118 [ 2119.355637][T12762] usb 1-1: USB disconnect, device number 113 [ 2119.486842][T27765] netlink: 'syz.1.5370': attribute type 1 has an invalid length. [ 2119.603187][T27765] bond4: entered promiscuous mode [ 2119.609163][T27765] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2119.652560][T27770] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2119.665024][T27770] bond4: (slave gre2): The slave device specified does not support setting the MAC address [ 2119.684751][T27770] bond4: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 2119.696306][T27770] bond4: (slave gre2): making interface the new active one [ 2119.710842][T15496] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 2119.714431][T27770] gre2: entered promiscuous mode [ 2119.725086][T27770] bond4: (slave gre2): Enslaving as an active interface with an up link [ 2119.870330][T15496] usb 3-1: Using ep0 maxpacket: 32 [ 2119.897956][T15496] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2119.929884][T15496] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 2119.957443][T15496] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2119.976073][T27780] Failed to get privilege flags for destination (handle=0x0:0x0) [ 2119.996157][T15496] usb 3-1: config 0 descriptor?? [ 2120.033202][T15496] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2120.069923][T15496] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2120.285556][ T3368] team0: left allmulticast mode [ 2120.303737][ T3368] team_slave_0: left allmulticast mode [ 2120.317224][ T3368] team_slave_1: left allmulticast mode [ 2120.332083][ T3368] bridge2: left allmulticast mode [ 2120.345183][ T3368] geneve1: left allmulticast mode [ 2120.368409][ T3368] team0: left promiscuous mode [ 2120.380563][ T3368] team_slave_0: left promiscuous mode [ 2120.398026][ T3368] team_slave_1: left promiscuous mode [ 2120.405796][ T3368] bridge2: left promiscuous mode [ 2120.420061][ T3368] geneve1: left promiscuous mode [ 2120.446104][ T3368] bridge0: port 3(team0) entered disabled state [ 2120.460083][ T3368] bridge_slave_1: left allmulticast mode [ 2120.466025][ T3368] bridge_slave_1: left promiscuous mode [ 2120.472773][ T3368] bridge0: port 2(bridge_slave_1) entered disabled state [ 2120.487504][ T3368] : left allmulticast mode [ 2120.493090][ T3368] : left promiscuous mode [ 2120.497791][ T3368] bridge0: port 1() entered disabled state [ 2120.508154][T12762] usb 3-1: USB disconnect, device number 119 [ 2120.527958][T12762] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 2120.561375][T15496] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 2120.572645][ T3368] veth13: left allmulticast mode [ 2120.583440][ T3368] veth13: left promiscuous mode [ 2120.589419][ T3368] bridge5: port 3(veth13) entered disabled state [ 2120.606432][ T3368] veth0_to_bond: left allmulticast mode [ 2120.615074][ T3368] veth0_to_bond: left promiscuous mode [ 2120.625313][ T3368] bridge5: port 2(veth0_to_bond) entered disabled state [ 2120.645131][ T3368] veth11: left allmulticast mode [ 2120.659792][ T3368] veth11: left promiscuous mode [ 2120.665142][ T3368] bridge5: port 1(veth11) entered disabled state [ 2120.683836][ T3368] dvmrp8: left allmulticast mode [ 2120.714165][ T3368] tipc: Resetting bearer [ 2120.766564][T15496] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2120.785742][T15496] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2120.822216][T15496] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 2120.832447][T15496] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2120.880102][T15496] usb 1-1: config 0 descriptor?? [ 2120.979848][T16622] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 2121.082018][ T3368] tipc: Disabling bearer [ 2121.128705][ T3368] team0: Port device geneve1 removed [ 2121.129945][T16622] usb 2-1: Using ep0 maxpacket: 32 [ 2121.141676][T16622] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 2121.152977][T16622] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2121.165304][T16622] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2121.177548][T16622] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2121.189589][T16622] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2121.202196][T16622] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2121.204281][ T3368] team0: Port device bridge2 removed [ 2121.213992][T16622] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2121.229567][T16622] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2121.241533][T16622] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2121.253712][ T3368] team0: Port device bridge4 removed [ 2121.264039][T16622] usb 2-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 2121.274108][T16622] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2121.282642][T16622] usb 2-1: Product: syz [ 2121.286871][T16622] usb 2-1: Manufacturer: syz [ 2121.291714][T16622] usb 2-1: SerialNumber: syz [ 2121.306987][T16622] usb 2-1: config 0 descriptor?? [ 2121.309309][ T3368] bond0 (unregistering): (slave lo): Releasing backup interface [ 2121.315346][T16622] etas_es58x 2-1:0.0: Starting syz syz (Serial Number syz) [ 2121.323928][T15496] cm6533_jd 0003:0D8C:0022.008F: unknown main item tag 0x0 [ 2121.337123][T12762] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 2121.346020][ T3368] bond0 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 2121.357651][T15496] cm6533_jd 0003:0D8C:0022.008F: unknown main item tag 0x0 [ 2121.366484][ T3368] bond0 (unregistering): Released all slaves [ 2121.374948][T15496] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.008F/input/input186 [ 2121.406353][ T3368] bond1 (unregistering): Released all slaves [ 2121.421162][T15496] cm6533_jd 0003:0D8C:0022.008F: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 2121.510708][T12762] usb 3-1: Using ep0 maxpacket: 8 [ 2121.531218][ T5289] 8021q: adding VLAN 0 to HW filter on device eth5 [ 2121.553071][T12762] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 2121.581559][T12762] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2121.608027][T12762] usb 3-1: Product: syz [ 2121.617136][T24906] usb 1-1: USB disconnect, device number 114 [ 2121.647405][T12762] usb 3-1: Manufacturer: syz [ 2121.660738][T12762] usb 3-1: SerialNumber: syz [ 2121.674499][T12762] usb 3-1: config 0 descriptor?? [ 2121.819127][ T3368] tipc: Disabling bearer [ 2121.853576][ T3368] tipc: Left network mode [ 2121.872521][T16622] usb 2-1: USB disconnect, device number 117 [ 2121.919138][T12762] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 2123.102466][T24906] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 2123.178568][T12762] usb write operation failed. (-71) [ 2123.187983][T12762] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2123.199431][T12762] dvbdev: DVB: registering new adapter (Terratec H7) [ 2123.217150][T12762] usb 3-1: media controller created [ 2123.255467][ T5289] 8021q: adding VLAN 0 to HW filter on device eth6 [ 2123.258926][T12762] usb read operation failed. (-71) [ 2123.267307][T24906] usb 1-1: Using ep0 maxpacket: 8 [ 2123.276432][T24906] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 2123.290441][T12762] usb write operation failed. (-71) [ 2123.297111][T24906] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 2123.339810][T15496] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 2123.557757][T16622] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 2123.604915][T12762] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 2123.632576][T24906] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 2123.660056][T24906] usb 1-1: config 250 has no interface number 0 [ 2123.676429][T24906] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 2123.678658][T12762] usb 3-1: USB disconnect, device number 120 [ 2123.701570][T24906] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2123.732557][T24906] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2123.758217][T16622] usb 6-1: Using ep0 maxpacket: 8 [ 2123.764992][T24906] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 2123.789744][T24906] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 2123.824237][T16622] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2123.828915][T15496] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2123.895570][T24906] usb 1-1: config 250 interface 228 has no altsetting 0 [ 2123.904176][T15496] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2123.922947][T24906] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 2123.939151][T24906] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 2123.947523][T15496] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2123.971724][T24906] usb 1-1: Product: syz [ 2123.975437][ T5637] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2123.976008][T15496] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2123.995254][T24906] usb 1-1: SerialNumber: syz [ 2123.995602][ T5637] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2124.001540][T15496] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2124.013877][ T5637] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2124.021881][T24906] hub 1-1:250.228: bad descriptor, ignoring hub [ 2124.026802][ T5637] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2124.039095][T24906] hub 1-1:250.228: probe with driver hub failed with error -5 [ 2124.051507][T15496] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2124.052032][ T5637] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2124.061509][T15496] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2124.076100][T15496] usb 2-1: Product: syz [ 2124.080510][T15496] usb 2-1: Manufacturer: syz [ 2124.102708][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2124.112370][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2124.120012][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2124.128671][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2124.139197][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2124.152987][T16622] usb 6-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 2124.162710][T16622] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 2124.177227][T16622] usb 6-1: SerialNumber: syz [ 2124.242422][T16622] usb 6-1: config 0 descriptor?? [ 2124.258620][T24906] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 115 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 2124.263144][T16622] uvcvideo 6-1:0.0: Found UVC 0.00 device (05ac:8501) [ 2124.279011][T16622] uvcvideo 6-1:0.0: No valid video chain found. [ 2124.342350][T15496] cdc_wdm 2-1:1.0: skipping garbage [ 2124.370881][T15496] cdc_wdm 2-1:1.0: skipping garbage [ 2124.397063][T15496] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 2124.423056][T15496] cdc_wdm 2-1:1.0: Unknown control protocol [ 2124.827720][ T3368] team0 (unregistering): Port device team_slave_1 removed [ 2124.918599][T16622] usb 2-1: USB disconnect, device number 118 [ 2124.945099][ T3368] team0 (unregistering): Port device team_slave_0 removed [ 2125.087643][T27826] usb 1-1: reset high-speed USB device number 115 using dummy_hcd [ 2125.832061][T27864] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5394'. [ 2125.860417][T27864] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5394'. [ 2125.920475][T15496] usb 1-1: USB disconnect, device number 115 [ 2125.970370][T15496] usblp0: removed [ 2126.049575][ T3368] IPVS: stop unused estimator thread 0... [ 2126.216444][T27873] input: syz0 as /devices/virtual/input/input187 [ 2126.254934][T16622] usb 6-1: USB disconnect, device number 118 [ 2126.272115][ T5637] Bluetooth: hci2: command tx timeout [ 2126.741200][T27897] syzkaller1: entered promiscuous mode [ 2126.786564][T27897] syzkaller1: entered allmulticast mode [ 2126.973345][ T5289] 8021q: adding VLAN 0 to HW filter on device eth7 [ 2127.208211][T27910] tipc: Enabled bearer , priority 0 [ 2127.425141][T27925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5408'. [ 2127.676825][T27844] bridge0: port 1(bridge_slave_0) entered blocking state [ 2127.691895][T27844] bridge0: port 1(bridge_slave_0) entered disabled state [ 2127.730275][T27844] bridge_slave_0: entered allmulticast mode [ 2127.786769][T27844] bridge_slave_0: entered promiscuous mode [ 2127.939973][T27899] tipc: Disabling bearer [ 2127.995056][T27844] bridge0: port 2(bridge_slave_1) entered blocking state [ 2128.011227][T27844] bridge0: port 2(bridge_slave_1) entered disabled state [ 2128.032297][T27844] bridge_slave_1: entered allmulticast mode [ 2128.055887][T27844] bridge_slave_1: entered promiscuous mode [ 2128.246066][T27844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2128.306090][T27844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2128.349963][ T5637] Bluetooth: hci2: command tx timeout [ 2128.514448][T27844] team0: Port device team_slave_0 added [ 2128.528815][T27844] team0: Port device team_slave_1 added [ 2128.691171][T27844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2128.698349][T27844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2128.738001][T27844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2128.787198][ T5289] 8021q: adding VLAN 0 to HW filter on device eth8 [ 2128.807450][T27844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2128.815523][T27844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2128.844238][T27844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2128.860606][T16622] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 2129.019792][T16622] usb 2-1: Using ep0 maxpacket: 16 [ 2129.041065][T16622] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2129.075537][T16622] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2129.092469][T16622] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2129.102943][T16622] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2129.111717][T16622] usb 2-1: Product: syz [ 2129.116132][T16622] usb 2-1: Manufacturer: syz [ 2129.121101][T16622] usb 2-1: SerialNumber: syz [ 2129.161582][T27844] hsr_slave_0: entered promiscuous mode [ 2129.162072][T16622] usb 2-1: 0:2 : does not exist [ 2129.177455][T27844] hsr_slave_1: entered promiscuous mode [ 2129.200862][T27844] debugfs: 'hsr0' already exists in 'hsr' [ 2129.213110][T27844] Cannot create hsr debugfs directory [ 2129.323417][T27977] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5420'. [ 2129.341050][T27977] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5420'. [ 2129.365664][T16622] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 2129.374412][T27977] netlink: 'syz.5.5420': attribute type 3 has an invalid length. [ 2129.415731][T27982] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5422'. [ 2129.443136][T27982] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5422'. [ 2129.488955][T16622] usb 2-1: USB disconnect, device number 119 [ 2129.673872][T20828] udevd[20828]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2130.199975][T16622] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 2130.230662][T27999] kvm: user requested TSC rate below hardware speed [ 2130.264062][T27999] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 2130.287370][T27999] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 2130.396083][T16622] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2130.425473][T16622] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2130.435656][ T5637] Bluetooth: hci2: command tx timeout [ 2130.462136][T16622] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2130.475757][T16622] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2130.507791][T16622] usb 3-1: config 0 descriptor?? [ 2130.978178][T16622] keytouch 0003:0926:3333.0090: fixing up Keytouch IEC report descriptor [ 2131.062813][T16622] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0090/input/input188 [ 2131.083619][T28020] netlink: 'syz.0.5434': attribute type 4 has an invalid length. [ 2131.537371][T16622] keytouch 0003:0926:3333.0090: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 2131.592784][T16622] usb 3-1: USB disconnect, device number 121 [ 2131.782202][T28038] fido_id[28038]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 2132.170141][T15496] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 2132.366126][T15496] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 2132.390517][T15496] usb 1-1: config 0 has no interface number 0 [ 2132.422630][T15496] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2132.463681][T15496] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2132.494871][T15496] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2132.509922][ T5637] Bluetooth: hci2: command tx timeout [ 2132.530017][T15496] usb 1-1: Product: syz [ 2132.539411][T15496] usb 1-1: Manufacturer: syz [ 2132.593014][T27844] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2132.603809][T15496] usb 1-1: SerialNumber: syz [ 2132.621209][T27844] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2132.642445][T27844] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2132.644358][T15496] usb 1-1: config 0 descriptor?? [ 2132.705775][T27844] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2132.729507][T15496] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 2132.740524][T27844] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2132.797361][T27844] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2132.830089][T27844] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2132.917311][T27844] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2133.329959][T15496] usb 1-1: USB disconnect, device number 116 [ 2133.349635][T27844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2133.382349][T28090] all: renamed from bridge_slave_1 (while UP) [ 2133.432140][T27844] 8021q: adding VLAN 0 to HW filter on device team0 [ 2133.484812][ T85] bridge0: port 1(bridge_slave_0) entered blocking state [ 2133.492033][ T85] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2133.575363][T15273] bridge0: port 2(bridge_slave_1) entered blocking state [ 2133.582588][T15273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2133.761679][T27844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2133.830132][T27844] veth0_vlan: entered promiscuous mode [ 2133.858834][T27844] veth1_vlan: entered promiscuous mode [ 2133.905098][T27844] veth0_macvtap: entered promiscuous mode [ 2133.956874][T27844] veth1_macvtap: entered promiscuous mode [ 2134.007223][T27844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2134.036637][T27844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2134.078114][ T85] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2134.088528][ T85] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2134.107796][ T85] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2134.120426][ T85] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2134.366010][T10899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2134.391470][T10899] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2134.487974][ T85] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2134.511809][ T85] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2134.956248][T15496] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 2135.450064][T24855] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 2135.669209][T24855] usb 1-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40 [ 2135.714503][T24855] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2135.749477][T24855] usb 1-1: Product: syz [ 2135.768168][T24855] usb 1-1: Manufacturer: syz [ 2135.803148][T24855] usb 1-1: SerialNumber: syz [ 2136.123561][T28170] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2137.152295][T24855] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 2137.182454][T24855] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2137.535820][T28203] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5477'. [ 2137.596574][T24855] usb 1-1: USB disconnect, device number 117 [ 2137.803369][T28214] syzkaller1: entered promiscuous mode [ 2137.827362][T28214] syzkaller1: entered allmulticast mode [ 2138.263791][T24855] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 2138.432723][T24855] usb 1-1: Using ep0 maxpacket: 16 [ 2138.441059][T24855] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2138.463947][T24855] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 2138.489800][T24906] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 2138.498882][T24855] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 2138.514232][T24855] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2138.535443][T24855] usb 1-1: Product: syz [ 2138.544838][T24855] usb 1-1: Manufacturer: syz [ 2138.555725][T24855] usb 1-1: SerialNumber: syz [ 2138.678832][T24906] usb 3-1: Using ep0 maxpacket: 16 [ 2138.698186][T24906] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 2138.717990][T24906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2138.766764][T24906] usb 3-1: Product: syz [ 2138.771405][T24906] usb 3-1: Manufacturer: syz [ 2138.778704][T24906] usb 3-1: SerialNumber: syz [ 2138.804762][T28256] netlink: 'syz.1.5492': attribute type 10 has an invalid length. [ 2138.809774][T24855] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 2138.846592][T28256] 8021q: adding VLAN 0 to HW filter on device team0 [ 2138.855066][T24855] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2138.895042][T28256] bond0: (slave team0): Enslaving as an active interface with an up link [ 2139.019250][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2139.044651][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2139.053656][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2139.065389][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2139.075160][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2139.204198][T24855] usb 1-1: 2:1 : bogus bTerminalLink 6 [ 2139.492409][T24906] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 2139.508037][T24855] usb 1-1: USB disconnect, device number 118 [ 2139.590347][T24906] usb 3-1: USB disconnect, device number 122 [ 2139.596805][T20907] udevd[20907]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2139.971888][T28268] bridge0: port 1(bridge_slave_0) entered blocking state [ 2139.979369][T28268] bridge0: port 1(bridge_slave_0) entered disabled state [ 2139.990077][T28268] bridge_slave_0: entered allmulticast mode [ 2140.002476][T28268] bridge_slave_0: entered promiscuous mode [ 2140.017646][T28268] bridge0: port 2(bridge_slave_1) entered blocking state [ 2140.025424][T28268] bridge0: port 2(bridge_slave_1) entered disabled state [ 2140.033502][T28268] bridge_slave_1: entered allmulticast mode [ 2140.041865][T28268] bridge_slave_1: entered promiscuous mode [ 2140.090931][T28268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2140.113829][T28268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2140.139793][T24855] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 2140.160959][T28268] team0: Port device team_slave_0 added [ 2140.169905][T28268] team0: Port device team_slave_1 added [ 2140.248327][T28268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2140.256506][T28268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2140.304808][T28301] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5501'. [ 2140.314102][T24855] usb 6-1: Using ep0 maxpacket: 32 [ 2140.317032][T28268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2140.324162][T24855] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 2140.342547][T28299] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5500'. [ 2140.353169][T24855] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2140.366913][T24855] usb 6-1: config 0 descriptor?? [ 2140.383989][T24855] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 2140.412301][T28268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2140.425553][T28268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2140.454984][T28268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2140.607837][T28268] hsr_slave_0: entered promiscuous mode [ 2140.633500][T28268] hsr_slave_1: entered promiscuous mode [ 2140.642882][T28268] debugfs: 'hsr0' already exists in 'hsr' [ 2140.648672][T28268] Cannot create hsr debugfs directory [ 2140.739168][T28313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5507'. [ 2140.820739][T28316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5508'. [ 2141.056378][T28268] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2141.068236][T28268] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2141.081806][T28268] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2141.092005][T28268] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2141.102618][T28268] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2141.116827][T28268] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2141.126097][T28268] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2141.142712][T20410] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 2141.144093][T28268] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2141.160372][ T50] Bluetooth: hci2: command tx timeout [ 2141.303209][T28268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2141.332366][T20410] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2141.343959][T20410] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 2141.355655][T20410] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 50757, setting to 1024 [ 2141.368944][T20410] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 2141.372464][T28268] 8021q: adding VLAN 0 to HW filter on device team0 [ 2141.382800][T20410] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2141.404051][T10856] bridge0: port 1(bridge_slave_0) entered blocking state [ 2141.411249][T10856] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2141.424621][T10856] bridge0: port 2(bridge_slave_1) entered blocking state [ 2141.431831][T10856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2141.441837][T20410] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2141.450882][T20410] usb 2-1: Product: syz [ 2141.455064][T20410] usb 2-1: Manufacturer: syz [ 2141.459647][T20410] usb 2-1: SerialNumber: syz [ 2141.487415][T20410] cdc_mbim 2-1:1.0: skipping garbage [ 2141.561321][T28268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2141.570379][T16890] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 2141.662576][T28268] veth0_vlan: entered promiscuous mode [ 2141.677711][T28268] veth1_vlan: entered promiscuous mode [ 2141.684686][T28342] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5515'. [ 2141.708977][T28321] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2141.728861][T28268] veth0_macvtap: entered promiscuous mode [ 2141.730474][T28321] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2141.743377][T16890] usb 1-1: Using ep0 maxpacket: 32 [ 2141.753867][T28268] veth1_macvtap: entered promiscuous mode [ 2141.762839][T16890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 128, changing to 11 [ 2141.775147][T16890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 2141.777748][T28268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2141.789375][T16890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2141.801794][T28268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2141.811396][T16890] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 2141.811426][T16890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2141.811446][T16890] usb 1-1: Product: syz [ 2141.811488][T16890] usb 1-1: Manufacturer: syz [ 2141.811503][T16890] usb 1-1: SerialNumber: syz [ 2141.815430][T16890] usb 1-1: config 0 descriptor?? [ 2141.863506][ T3368] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2141.867881][T16890] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input189 [ 2141.886673][ T3368] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2141.890500][ T4979] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2141.910249][ T3368] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2141.922025][ T3368] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2141.944302][ T4979] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2141.994578][ T4979] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2142.126120][ T4979] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2142.156874][T20907] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2142.193211][ T4979] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2142.208610][ T4979] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2142.236287][T24855] gspca_vc032x: reg_r err -71 [ 2142.242992][T24855] gspca_vc032x: I2c Bus Busy Wait 00 [ 2142.256962][ T4979] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2142.270846][T24855] gspca_vc032x: I2c Bus Busy Wait 00 [ 2142.274258][T24906] usb 1-1: USB disconnect, device number 119 [ 2142.276280][ C0] xpad 1-1:0.0: xpad_irq_in - usb_submit_urb failed with result -19 [ 2142.290245][T15273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2142.308279][T24855] gspca_vc032x: I2c Bus Busy Wait 00 [ 2142.315553][T24855] gspca_vc032x: I2c Bus Busy Wait 00 [ 2142.318585][T15273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2142.321001][T24855] gspca_vc032x: I2c Bus Busy Wait 00 [ 2142.321015][T24855] gspca_vc032x: I2c Bus Busy Wait 00 [ 2142.321024][T24855] gspca_vc032x: I2c Bus Busy Wait 00 [ 2142.355966][T24855] gspca_vc032x: I2c Bus Busy Wait 00 [ 2142.363258][T24855] gspca_vc032x: I2c Bus Busy Wait 00 [ 2142.376299][T24855] gspca_vc032x: I2c Bus Busy Wait 00 [ 2142.383600][T24855] gspca_vc032x: I2c Bus Busy Wait 00 [ 2142.395420][T24855] gspca_vc032x: I2c Bus Busy Wait 00 [ 2142.403184][T24855] gspca_vc032x: I2c Bus Busy Wait 00 [ 2142.414692][T15273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2142.418856][T24855] gspca_vc032x: I2c Bus Busy Wait 00 [ 2142.434016][T28321] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2142.441326][T28321] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2142.448614][T24855] gspca_vc032x: I2c Bus Busy Wait 00 [ 2142.452010][T15273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2142.456436][T24855] gspca_vc032x: I2c Bus Busy Wait 00 [ 2142.467913][T20410] cdc_mbim 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2142.476644][T20410] cdc_mbim 2-1:1.0: setting rx_max = 2048 [ 2142.482661][T24855] gspca_vc032x: I2c Bus Busy Wait 00 [ 2142.488440][T24855] gspca_vc032x: I2c Bus Busy Wait 00 [ 2142.494285][T24855] gspca_vc032x: Unknown sensor... [ 2142.499556][T24855] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 2142.519028][T24855] usb 6-1: USB disconnect, device number 119 [ 2142.679560][T20410] cdc_mbim 2-1:1.0: setting tx_max = 184 [ 2142.693705][T20410] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 2142.771102][T20410] wwan wwan0: port wwan0mbim0 attached [ 2142.802507][T20410] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, c6:7d:05:fa:f9:c6 [ 2143.042734][T20410] usb 2-1: USB disconnect, device number 120 [ 2143.061452][T20410] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 2143.167264][T20410] wwan wwan0: port wwan0mbim0 disconnected [ 2143.241710][ T50] Bluetooth: hci2: command tx timeout [ 2143.610209][T24855] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 2143.636323][T28379] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5522'. [ 2143.692369][T28383] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5523'. [ 2143.792747][T24855] usb 6-1: Using ep0 maxpacket: 32 [ 2143.807053][T24855] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2143.866686][T24855] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2143.920119][T24855] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2143.958848][T24855] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2144.015118][T24855] usb 6-1: config 0 descriptor?? [ 2144.100301][T20410] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 2144.259858][T20410] usb 3-1: Using ep0 maxpacket: 16 [ 2144.287094][T20410] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 2144.322565][T20410] usb 3-1: config 0 has no interface number 0 [ 2144.345491][T20410] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2144.360034][T20410] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2144.373561][T20410] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2144.384015][T20410] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2144.393042][T20410] usb 3-1: Product: syz [ 2144.398434][T20410] usb 3-1: SerialNumber: syz [ 2144.430806][T20410] usb 3-1: config 0 descriptor?? [ 2144.442914][T20410] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 2144.462512][T20410] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input190 [ 2144.529071][T24855] ft260 0003:0403:6030.0091: unknown main item tag 0x0 [ 2144.563897][T24855] ft260 0003:0403:6030.0091: unknown main item tag 0x0 [ 2144.693987][T24855] ft260 0003:0403:6030.0091: chip code: 0000 0000 [ 2144.838727][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2144.850534][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2144.858194][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2144.865432][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2144.872961][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2144.880521][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2144.887719][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2144.895097][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2144.903055][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2144.917429][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2144.938437][T20410] usb 3-1: USB disconnect, device number 123 [ 2144.944573][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 2144.960318][T24855] ft260 0003:0403:6030.0091: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0 [ 2145.018316][T20410] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 2145.104501][T24855] ft260 0003:0403:6030.0091: failed to retrieve status: -32, no wakeup [ 2145.310188][ T50] Bluetooth: hci2: command tx timeout [ 2145.412629][T15496] usb 6-1: USB disconnect, device number 120 [ 2145.907860][T28436] netlink: 'syz.1.5534': attribute type 1 has an invalid length. [ 2145.941693][ T3282] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2146.109068][T28443] netlink: 'syz.1.5534': attribute type 10 has an invalid length. [ 2146.125589][T28443] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5534'. [ 2146.208522][T28438] bond5: (slave veth19): Enslaving as an active interface with a down link [ 2146.239491][T28440] bond5: (slave dummy0): making interface the new active one [ 2146.250471][T28440] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 2146.260135][T28443] dummy0: entered promiscuous mode [ 2146.295926][T28443] bond5: (slave dummy0): Releasing active interface [ 2146.795278][ T3282] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2147.276365][ T3282] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2147.330649][T15496] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 2147.364952][T28467] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5544'. [ 2147.391642][ T50] Bluetooth: hci2: command tx timeout [ 2147.503678][T15496] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 2147.513824][ T3282] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2147.539630][T28465] syzkaller1: entered promiscuous mode [ 2147.567245][T15496] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 2147.580718][T28465] syzkaller1: entered allmulticast mode [ 2147.638742][T15496] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 2147.684750][T15496] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2147.723715][T15496] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2147.751553][T15496] usb 1-1: Manufacturer: syz [ 2147.782391][T15496] usb 1-1: config 0 descriptor?? [ 2147.845136][T15496] igorplugusb 1-1:0.0: endpoint incorrect [ 2148.261006][T24855] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 2148.284442][T15496] usb 1-1: USB disconnect, device number 120 [ 2148.492716][T24855] usb 2-1: config 0 has no interfaces? [ 2148.522803][T24855] usb 2-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 2148.549112][T24855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2148.593878][T24855] usb 2-1: config 0 descriptor?? [ 2148.853905][T28480] kvm: pic: level sensitive irq not supported [ 2148.854145][ T3282] bridge_slave_1: left allmulticast mode [ 2148.894150][ T3282] bridge_slave_1: left promiscuous mode [ 2148.903054][ T3282] bridge0: port 2(bridge_slave_1) entered disabled state [ 2148.924023][ T3282] bridge_slave_0: left allmulticast mode [ 2148.943048][ T3282] bridge_slave_0: left promiscuous mode [ 2148.965709][ T3282] bridge0: port 1(bridge_slave_0) entered disabled state [ 2149.550936][ T3282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2149.563430][ T3282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2149.574034][ T3282] bond0 (unregistering): Released all slaves [ 2149.599997][T15496] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 2149.621357][T12762] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 2149.743887][T28497] 8021q: adding VLAN 0 to HW filter on device .` [ 2149.762218][T28497] bridge0: port 3(team0) entered blocking state [ 2149.768567][T28497] bridge0: port 3(team0) entered listening state [ 2149.775430][T12762] usb 1-1: device descriptor read/64, error -71 [ 2149.781788][T15496] usb 6-1: Using ep0 maxpacket: 32 [ 2149.809181][T28497] 8021q: adding VLAN 0 to HW filter on device team0 [ 2149.816871][T15496] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 2149.838660][T15496] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 2149.854266][T28497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2149.861408][T15496] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2149.877154][T15496] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 2149.896277][T15496] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 2149.917213][T28497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2149.924793][T15496] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2149.933604][T15496] usb 6-1: Product: syz [ 2149.939319][T15496] usb 6-1: Manufacturer: syz [ 2149.945190][T28497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2149.952972][T15496] usb 6-1: SerialNumber: syz [ 2149.968661][T28497] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2149.980065][T28497] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2149.981267][ C1] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 2149.993314][T28497] hsr0: left promiscuous mode [ 2150.003734][T15496] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input192 [ 2150.027086][T28497] veth0_virt_wifi: left allmulticast mode [ 2150.039093][T28497] veth1_macvtap: left promiscuous mode [ 2150.040105][T12762] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 2150.046276][T28497] veth0_macvtap: left promiscuous mode [ 2150.065104][T28497] veth0_macvtap: entered promiscuous mode [ 2150.072248][T28497] veth1_macvtap: entered promiscuous mode [ 2150.083045][T28497] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2150.090693][T28497] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 2150.104003][T28497] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2150.117683][T28497] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2150.128040][T28497] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2150.143372][T28497] A link change request failed with some changes committed already. Interface veth1_to_bod may have been left with an inconsistent configuration, please check. [ 2150.180078][T12762] usb 1-1: device descriptor read/64, error -71 [ 2150.214741][T28512] syzkaller0: entered promiscuous mode [ 2150.220719][T15496] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 2150.220859][T28512] syzkaller0: entered allmulticast mode [ 2150.229306][T15496] (id 0x00) [ 2150.288854][ T5289] 8021q: adding VLAN 0 to HW filter on device eth5 [ 2150.296112][T12762] usb usb1-port1: attempt power cycle [ 2150.305794][T12846] bridge0: port 1(bridge_slave_0) entered blocking state [ 2150.310375][T15496] rc_core: IR keymap rc-imon-pad not found [ 2150.313022][T12846] bridge0: port 1(bridge_slave_0) entered listening state [ 2150.318893][T15496] Registered IR keymap rc-empty [ 2150.331499][T15496] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 2150.352612][T12846] bridge0: port 2(bridge_slave_1) entered blocking state [ 2150.354258][T15496] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 2150.359833][T12846] bridge0: port 2(bridge_slave_1) entered listening state [ 2150.368349][T12846] bridge4: port 2(veth0_to_bond) entered blocking state [ 2150.383545][T12846] bridge4: port 2(veth0_to_bond) entered forwarding state [ 2150.413077][T10899] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 2150.425936][T15496] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0 [ 2150.439284][T15496] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0/input193 [ 2150.462339][T15496] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:121> initialized [ 2150.640154][T12762] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 2150.674367][T12762] usb 1-1: device descriptor read/8, error -71 [ 2150.929932][T12762] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 2150.990647][T12762] usb 1-1: device descriptor read/8, error -71 [ 2151.100410][T12762] usb usb1-port1: unable to enumerate USB device [ 2151.523295][T12762] usb 6-1: USB disconnect, device number 121 [ 2151.529476][T28524] imon:send_packet: packet tx failed (-71) [ 2151.551310][T28524] imon:vfd_write: send packet #2 failed [ 2153.062690][T28540] kernel profiling enabled (shift: 0) [ 2156.270883][T10899] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 2156.415517][T28546] bridge0: port 3(team0) entered disabled state [ 2156.422176][T28546] bridge0: port 1(bridge_slave_0) entered disabled state [ 2156.507194][T28546] bridge1: port 2(veth0_to_bond) entered disabled state [ 2156.527018][T28546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2156.578696][T28546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2156.645234][T10899] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 2156.654362][T10899] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 2157.007345][ T3282] hsr_slave_0: left promiscuous mode [ 2157.020886][ T3282] hsr_slave_1: left promiscuous mode [ 2157.040943][ T3282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2157.050824][ T3282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2157.061243][ T3282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2157.068777][ T3282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2157.107929][ T3282] veth1_macvtap: left promiscuous mode [ 2157.116389][ T3282] veth0_macvtap: left promiscuous mode [ 2157.122635][ T3282] veth1_vlan: left promiscuous mode [ 2157.128189][ T3282] veth0_vlan: left promiscuous mode [ 2157.353437][T28575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5573'. [ 2157.382563][T28575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5573'. [ 2157.407352][T28575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5573'. [ 2157.515167][ T3282] team0 (unregistering): Port device team_slave_1 removed [ 2157.559344][ T3282] team0 (unregistering): Port device team_slave_0 removed [ 2157.747378][T24855] usb 1-1: new full-speed USB device number 125 using dummy_hcd [ 2157.975867][T24855] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2157.984301][T24855] usb 1-1: not running at top speed; connect to a high speed hub [ 2157.994004][T24855] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 2158.002726][T24855] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 2158.012304][T24855] usb 1-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 2158.037734][T24855] usb 1-1: config 14 has no interface number 0 [ 2158.053101][T24855] usb 1-1: config 14 has no interface number 1 [ 2158.068597][T24855] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 2158.080973][T24855] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 2158.094130][T24855] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2158.106203][T24855] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 2158.123418][T24855] usb 1-1: config 14 interface 57 has no altsetting 0 [ 2158.131020][T24855] usb 1-1: config 14 interface 228 has no altsetting 0 [ 2158.142777][T24855] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 2158.152993][T24855] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2158.161821][T24855] usb 1-1: Product: syz [ 2158.166153][T24855] usb 1-1: Manufacturer: syz [ 2158.175493][T24855] usb 1-1: SerialNumber: syz [ 2158.190683][T28594] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5579'. [ 2158.351648][T28602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5579'. [ 2158.422130][T24532] usb 2-1: USB disconnect, device number 121 [ 2158.653615][T24855] legousbtower 1-1:14.57: interrupt endpoints not found [ 2158.789894][T20410] usb 6-1: new full-speed USB device number 122 using dummy_hcd [ 2158.810294][ T5289] 8021q: adding VLAN 0 to HW filter on device eth6 [ 2158.860697][T28612] bridge0: port 3(team0) entered disabled state [ 2158.867526][T28612] bridge0: port 2(bridge_slave_1) entered disabled state [ 2158.875430][T28612] bridge0: port 1(bridge_slave_0) entered disabled state [ 2158.899911][T24532] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 2158.927333][T28612] bridge4: port 2(veth0_to_bond) entered disabled state [ 2158.945759][T28612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2158.956556][T28612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2158.981616][T20410] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 2158.992674][T20410] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2159.013066][T20410] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2159.024410][T20410] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2159.036478][T20410] usb 6-1: Product: syz [ 2159.041558][T20410] usb 6-1: Manufacturer: syz [ 2159.046210][T20410] usb 6-1: SerialNumber: syz [ 2159.050102][T24532] usb 2-1: Using ep0 maxpacket: 16 [ 2159.057402][T20410] usb 6-1: config 0 descriptor?? [ 2159.068043][T24855] legousbtower 1-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 2159.083850][T24532] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2159.088043][T20410] usb 6-1: selecting invalid altsetting 0 [ 2159.102198][T24855] legousbtower 1-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 2159.105766][T24532] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 2159.121483][T24532] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2159.129785][T24532] usb 2-1: Product: syz [ 2159.134304][T24532] usb 2-1: Manufacturer: syz [ 2159.139057][T24532] usb 2-1: SerialNumber: syz [ 2159.156050][T24532] usb 2-1: config 0 descriptor?? [ 2159.246064][T28612] ÿ: left promiscuous mode [ 2159.284558][T16225] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2159.330823][T16225] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 2159.374463][T16225] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2159.426731][T24906] usb 6-1: USB disconnect, device number 122 [ 2159.426785][ C0] usb 6-1: Unable to submit urb #0: -19 at snd_usb_queue_pending_output_urbs [ 2159.442052][ C0] dummy_hcd dummy_hcd.5: timer fired with no URBs pending? [ 2159.451336][T16225] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 2159.462648][T28605] usb 6-1: cannot submit urb 0, error -19: no device [ 2159.479803][T16225] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2159.501101][T16225] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 2159.540066][T16225] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2159.561684][T16225] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 2159.953387][T15496] usb 1-1: USB disconnect, device number 125 [ 2159.983150][T15496] legousbtower 1-1:14.228: LEGO USB Tower #-160 now disconnected [ 2160.352464][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.358854][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.374592][ T5289] 8021q: adding VLAN 0 to HW filter on device eth7 [ 2160.830087][T16890] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 2161.011673][T16890] usb 6-1: config 0 has no interfaces? [ 2161.018647][T16890] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2161.059719][T16890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2161.081643][T16890] usb 6-1: config 0 descriptor?? [ 2161.190087][T24906] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 2161.217857][T28663] netlink: 'syz.6.5590': attribute type 1 has an invalid length. [ 2161.230671][T28663] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5590'. [ 2161.244828][ T5289] 8021q: adding VLAN 0 to HW filter on device eth8 [ 2161.337293][T16890] usb 6-1: USB disconnect, device number 123 [ 2161.364605][T24906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2161.389618][T24906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2161.416732][T24906] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2161.451975][T24906] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2161.481542][T24906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2161.505573][T24906] usb 1-1: config 0 descriptor?? [ 2161.540155][T15496] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 2161.591857][T24532] usb 2-1: USB disconnect, device number 122 [ 2161.713345][T15496] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2161.748297][T15496] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2161.778984][T15496] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2161.803158][T15496] usb 3-1: config 0 descriptor?? [ 2161.895927][T28675] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2161.963037][T24906] plantronics 0003:047F:FFFF.0092: reserved main item tag 0xd [ 2162.017975][T24906] plantronics 0003:047F:FFFF.0092: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 2162.052135][T15496] usbhid 3-1:0.0: can't add hid device: -71 [ 2162.068527][T15496] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2162.105862][T15496] usb 3-1: USB disconnect, device number 124 [ 2162.312620][T24906] usb 1-1: USB disconnect, device number 126 [ 2162.610825][T15496] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 2162.783646][T15496] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2162.821923][T15496] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 2162.832415][T15496] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2162.846015][T15496] usb 3-1: config 0 descriptor?? [ 2162.929413][T28690] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2162.954004][T28690] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2163.302908][T28668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2163.338768][T28668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2163.772014][T15496] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 2163.781349][T28668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2163.814705][T15496] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input195 [ 2163.825356][T28668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2163.897757][T28713] batman_adv: batadv0: Adding interface: dummy0 [ 2163.906787][T28713] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2163.977575][T28713] batman_adv: batadv0: Interface activated: dummy0 [ 2164.030538][T28721] batadv0: mtu less than device minimum [ 2164.089254][T28721] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2164.101144][T28721] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2164.112973][T28721] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2164.124726][T28721] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2164.136489][T28721] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2164.148166][T28721] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2164.159994][T28721] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2164.171736][T28721] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2164.284332][T16890] usb 3-1: USB disconnect, device number 125 [ 2164.284396][ C1] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 2164.779515][T15496] hid-generic 0000:0000:0000.0093: unknown main item tag 0x7 [ 2164.801692][T15496] hid-generic 0000:0000:0000.0093: ignoring exceeding usage max [ 2164.821389][T15496] hid-generic 0000:0000:0000.0093: unknown main item tag 0x0 [ 2164.838276][T15496] hid-generic 0000:0000:0000.0093: unknown main item tag 0x0 [ 2164.863216][T15496] hid-generic 0000:0000:0000.0093: unknown main item tag 0x0 [ 2164.884446][T28739] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5614'. [ 2164.900048][T15496] hid-generic 0000:0000:0000.0093: unknown main item tag 0x0 [ 2164.911789][T15496] hid-generic 0000:0000:0000.0093: unknown main item tag 0x0 [ 2164.929930][T15496] hid-generic 0000:0000:0000.0093: unknown main item tag 0x0 [ 2164.951080][T15496] hid-generic 0000:0000:0000.0093: unknown main item tag 0x0 [ 2164.964514][T15496] hid-generic 0000:0000:0000.0093: unknown main item tag 0x0 [ 2164.993845][T15496] hid-generic 0000:0000:0000.0093: unknown main item tag 0x0 [ 2165.036121][T15496] hid-generic 0000:0000:0000.0093: hidraw0: HID v0.00 Device [syz0] on syz0 [ 2165.213291][T28745] fido_id[28745]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2165.270358][ T2173] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 2165.430232][ T2173] usb 2-1: Using ep0 maxpacket: 8 [ 2165.451993][ T2173] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2165.489520][ T2173] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2165.504229][ T2173] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2165.514598][ T2173] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2165.525420][ T2173] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2165.539471][ T2173] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2165.549294][ T2173] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2166.066955][ T3282] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 2166.085924][ T3282] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 2166.107492][ T3282] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 2166.600237][T28806] netlink: 184 bytes leftover after parsing attributes in process `syz.2.5630'. [ 2166.610048][T28806] netlink: 184 bytes leftover after parsing attributes in process `syz.2.5630'. [ 2166.619158][T28806] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5630'. [ 2166.628789][T28806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5630'. [ 2166.661215][T16720] usb 2-1: USB disconnect, device number 123 [ 2166.855169][T28809] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5631'. [ 2166.867255][T28809] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5631'. [ 2167.399149][T28819] netlink: 'syz.1.5634': attribute type 1 has an invalid length. [ 2168.753135][T28851] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5642'. [ 2169.191823][T28859] syzkaller0: entered promiscuous mode [ 2169.203431][T28859] syzkaller0: entered allmulticast mode [ 2169.380903][T28868] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5649'. [ 2169.563064][T28868] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5649'. [ 2170.014843][T28888] syzkaller0: entered promiscuous mode [ 2170.033778][T28888] syzkaller0: entered allmulticast mode [ 2171.101865][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88804f7b5c00: rx timeout, send abort [ 2171.116293][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88804f7b5c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 2173.373859][T28880] net_ratelimit: 11 callbacks suppressed [ 2173.373880][T28880] Set syz1 is full, maxelem 65536 reached [ 2177.359916][T28916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2177.403325][T28916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2177.800263][T16890] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 2177.860708][T28937] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5671'. [ 2177.979982][T16890] usb 1-1: Using ep0 maxpacket: 8 [ 2177.987610][T16890] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2178.007479][T16890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2178.055899][T16890] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2178.071305][T16890] pvrusb2: ********** [ 2178.083646][T16890] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2178.107310][T16890] pvrusb2: Important functionality might not be entirely working. [ 2178.127315][T16890] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2178.175963][T16890] pvrusb2: ********** [ 2178.250007][ T2367] pvrusb2: Invalid write control endpoint [ 2178.346919][T28956] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5675'. [ 2178.513337][T24855] usb 1-1: USB disconnect, device number 127 [ 2178.591093][ T2367] pvrusb2: Invalid write control endpoint [ 2178.615820][ T2367] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2178.662057][ T2367] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2178.692770][ T2367] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2178.728590][ T2367] pvrusb2: Device being rendered inoperable [ 2178.750583][ T2367] cx25840 3-0044: Unable to detect h/w, assuming cx23887 [ 2178.771117][ T2367] cx25840 3-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 2178.869869][ T2367] pvrusb2: Attached sub-driver cx25840 [ 2178.898249][ T2367] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2178.944937][ T2367] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2221.791800][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.798329][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 2264.830121][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 2283.232598][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.239171][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 2326.749904][ T31] INFO: task kworker/1:19:12764 blocked for more than 143 seconds. [ 2326.758609][ T31] Tainted: G L syzkaller #0 [ 2326.765250][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2326.774122][ T31] task:kworker/1:19 state:D stack:21632 pid:12764 tgid:12764 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 2326.786609][ T31] Workqueue: usb_hub_wq hub_event [ 2326.791842][ T31] Call Trace: [ 2326.795141][ T31] [ 2326.798058][ T31] __schedule+0x17d9/0x56c0 [ 2326.803428][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 2326.808570][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 2326.813836][ T31] ? __pfx___schedule+0x10/0x10 [ 2326.818732][ T31] ? schedule+0x90/0x2b0 [ 2326.823124][ T31] schedule+0x164/0x2b0 [ 2326.827314][ T31] usb_kill_urb+0x1cf/0x2f0 [ 2326.832802][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 2326.837862][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2326.844993][ T31] usb_start_wait_urb+0x22a/0x5b0 [ 2326.850299][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 2326.855911][ T31] usb_control_msg+0x234/0x3e0 [ 2326.860970][ T31] hub_port_init+0xb0b/0x28c0 [ 2326.865659][ T31] hub_event+0x24e8/0x4d30 [ 2326.870161][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 2326.875306][ T31] ? __pfx_hub_event+0x10/0x10 [ 2326.880183][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 2326.885943][ T31] ? rcu_is_watching+0x15/0xb0 [ 2326.891055][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 2326.896775][ T31] process_scheduled_works+0xa8e/0x14e0 [ 2326.902408][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2326.908401][ T31] ? assign_work+0x3cf/0x5d0 [ 2326.913833][ T31] worker_thread+0xa47/0xfb0 [ 2326.918448][ T31] ? __kthread_parkme+0x71/0x1f0 [ 2326.923744][ T31] kthread+0x388/0x470 [ 2326.927823][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2326.933089][ T31] ? __pfx_kthread+0x10/0x10 [ 2326.937705][ T31] ret_from_fork+0x514/0xb70 [ 2326.942372][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2326.947498][ T31] ? __switch_to+0xc89/0x1420 [ 2326.952551][ T31] ? __pfx_kthread+0x10/0x10 [ 2326.957165][ T31] ret_from_fork_asm+0x1a/0x30 [ 2326.962062][ T31] [ 2326.965196][ T31] [ 2326.965196][ T31] Showing all locks held in the system: [ 2326.972993][ T31] 1 lock held by khungtaskd/31: [ 2326.977922][ T31] #0: ffffffff8e959c20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2326.988270][ T31] 2 locks held by getty/5382: [ 2326.993074][ T31] #0: ffff888035b480a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2327.002956][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 2327.013343][ T31] 2 locks held by kworker/0:8/5723: [ 2327.018536][ T31] #0: ffff88813fe4f140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 2327.029632][ T31] #1: ffffc9000457fc40 ((work_completion)(&m->mpeg_thread)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 2327.041975][ T31] 5 locks held by kworker/1:19/12764: [ 2327.047355][ T31] #0: ffff888021eab540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 2327.058721][ T31] #1: ffffc90004d0fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 2327.071191][ T31] #2: ffff88802ae971d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 2327.080202][ T31] #3: ffff88802af5b568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 2327.090253][ T31] #4: ffff88802ad6a560 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 2327.100361][ T31] 5 locks held by kworker/u8:6/12846: [ 2327.105778][ T31] [ 2327.108103][ T31] ============================================= [ 2327.108103][ T31] [ 2327.116607][ T31] NMI backtrace for cpu 1 [ 2327.116624][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2327.116646][ T31] Tainted: [L]=SOFTLOCKUP [ 2327.116652][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2327.116663][ T31] Call Trace: [ 2327.116670][ T31] [ 2327.116677][ T31] dump_stack_lvl+0xe8/0x150 [ 2327.116706][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 2327.116841][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2327.116865][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 2327.116893][ T31] sys_info+0x135/0x170 [ 2327.116914][ T31] watchdog+0xfd7/0x1030 [ 2327.116949][ T31] ? watchdog+0x1c7/0x1030 [ 2327.116981][ T31] kthread+0x388/0x470 [ 2327.117003][ T31] ? __pfx_watchdog+0x10/0x10 [ 2327.117028][ T31] ? __pfx_kthread+0x10/0x10 [ 2327.117049][ T31] ret_from_fork+0x514/0xb70 [ 2327.117073][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2327.117093][ T31] ? __switch_to+0xc89/0x1420 [ 2327.117124][ T31] ? __pfx_kthread+0x10/0x10 [ 2327.117146][ T31] ret_from_fork_asm+0x1a/0x30 [ 2327.117185][ T31] [ 2327.117193][ T31] Sending NMI from CPU 1 to CPUs 0: [ 2327.233346][ C0] NMI backtrace for cpu 0 [ 2327.233373][ C0] CPU: 0 UID: 0 PID: 12846 Comm: kworker/u8:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 2327.233397][ C0] Tainted: [L]=SOFTLOCKUP [ 2327.233404][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2327.233415][ C0] Workqueue: 0x0 (events_unbound) [ 2327.233440][ C0] RIP: 0010:update_curr_dl_se+0x5c7/0x1340 [ 2327.233470][ C0] Code: 79 04 00 00 90 0f 0b 90 e9 70 04 00 00 a8 02 0f 84 68 04 00 00 48 8b 44 24 08 4c 8d 68 40 4d 89 ee 49 c1 ee 03 41 80 3c 16 00 <74> 22 4d 89 fc 49 89 ff 4c 89 ef e8 79 f9 97 00 4c 89 ff 4d 89 e7 [ 2327.233485][ C0] RSP: 0018:ffffc900058e78a0 EFLAGS: 00000046 [ 2327.233499][ C0] RAX: ffff8880b863bb58 RBX: ffff8880b863b118 RCX: 00000000fffffb0e [ 2327.233512][ C0] RDX: dffffc0000000000 RSI: ffff8880b863bbac RDI: 1ffff110170c7775 [ 2327.233525][ C0] RBP: 00000000000004f1 R08: 0000000000000000 R09: 1ffffffff2065a7e [ 2327.233537][ C0] R10: dffffc0000000000 R11: fffffbfff2065a7f R12: 1ffff110170c7773 [ 2327.233550][ C0] R13: ffff8880b863bb98 R14: 1ffff110170c7773 R15: ffff8880b863b100 [ 2327.233563][ C0] FS: 0000000000000000(0000) GS:ffff888125226000(0000) knlGS:0000000000000000 [ 2327.233578][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2327.233590][ C0] CR2: 00005611138f7168 CR3: 000000007e458000 CR4: 00000000003526f0 [ 2327.233605][ C0] Call Trace: [ 2327.233611][ C0] [ 2327.233623][ C0] update_curr+0x1d4/0x440 [ 2327.233643][ C0] dequeue_entities+0x1af/0x3bd0 [ 2327.233662][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 2327.233687][ C0] ? sched_clock+0x3f/0x60 [ 2327.233702][ C0] ? sched_clock_cpu+0x74/0x440 [ 2327.233718][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 2327.233741][ C0] ? raw_spin_rq_lock_nested+0xb2/0x160 [ 2327.233774][ C0] dequeue_task_fair+0xc1/0x3d0 [ 2327.233795][ C0] __schedule+0x6e1/0x56c0 [ 2327.233817][ C0] ? __lock_acquire+0x683/0x2cf0 [ 2327.233846][ C0] ? __pfx___schedule+0x10/0x10 [ 2327.233872][ C0] ? schedule+0x90/0x2b0 [ 2327.233896][ C0] schedule+0x164/0x2b0 [ 2327.233919][ C0] worker_thread+0xc12/0xfb0 [ 2327.233956][ C0] kthread+0x388/0x470 [ 2327.233973][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2327.233996][ C0] ? __pfx_kthread+0x10/0x10 [ 2327.234014][ C0] ret_from_fork+0x514/0xb70 [ 2327.234034][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 2327.234052][ C0] ? __switch_to+0xc89/0x1420 [ 2327.234078][ C0] ? __pfx_kthread+0x10/0x10 [ 2327.234097][ C0] ret_from_fork_asm+0x1a/0x30 [ 2327.234125][ C0] [ 2327.479399][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2327.486245][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2327.496932][ T31] Tainted: [L]=SOFTLOCKUP [ 2327.501245][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2327.511286][ T31] Call Trace: [ 2327.514552][ T31] [ 2327.517464][ T31] vpanic+0x56c/0xa60 [ 2327.521436][ T31] ? __pfx___schedule+0x10/0x10 [ 2327.526274][ T31] ? __pfx_vpanic+0x10/0x10 [ 2327.530770][ T31] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 2327.536939][ T31] panic+0xc5/0xd0 [ 2327.540657][ T31] ? __pfx_panic+0x10/0x10 [ 2327.545063][ T31] ? preempt_schedule_common+0x82/0xd0 [ 2327.550518][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 2327.555894][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 2327.562044][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 2327.568192][ T31] watchdog+0x1030/0x1030 [ 2327.572522][ T31] ? watchdog+0x1c7/0x1030 [ 2327.576935][ T31] kthread+0x388/0x470 [ 2327.580994][ T31] ? __pfx_watchdog+0x10/0x10 [ 2327.585667][ T31] ? __pfx_kthread+0x10/0x10 [ 2327.590252][ T31] ret_from_fork+0x514/0xb70 [ 2327.594833][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2327.599931][ T31] ? __switch_to+0xc89/0x1420 [ 2327.604603][ T31] ? __pfx_kthread+0x10/0x10 [ 2327.609180][ T31] ret_from_fork_asm+0x1a/0x30 [ 2327.613948][ T31] [ 2327.617214][ T31] Kernel Offset: disabled [ 2327.621527][ T31] Rebooting in 86400 seconds..