last executing test programs: 3m55.543142077s ago: executing program 0 (id=245): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f00000001c0)={0x1d, r1}, 0x10) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) 3m54.923342261s ago: executing program 0 (id=250): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000000), 0xffffff98) splice(r1, 0x0, r2, 0x0, 0x80000000, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m54.522688704s ago: executing program 0 (id=252): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d300", 0x38}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000280)=""/69, 0x53}, {&(0x7f0000000200)=""/32, 0x20}], 0x3}, 0x0) 3m53.794713952s ago: executing program 0 (id=255): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000280)='./file0/../file0/../file0/../file0\x00') 3m53.423174622s ago: executing program 0 (id=261): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0xd49, 0x200006, 0x81, 0x4, 0xfff8, 0x0, 0x1001, 0x4000000000a, 0x4bfd, 0xb6, 0x200000000002, 0xffff, 0x3, 0x1, 0x9, 0x100000090], 0xc000, 0x28657}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r0, 0x5, 0x4) 3m52.487116412s ago: executing program 0 (id=270): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000e4c5ad101d0620c0159c010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000380)={0x20, 0x14, 0x3, "3f6dc4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m51.905579528s ago: executing program 32 (id=270): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000e4c5ad101d0620c0159c010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000380)={0x20, 0x14, 0x3, "3f6dc4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m1.837091959s ago: executing program 4 (id=1749): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) readv(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000) 1m1.479008726s ago: executing program 4 (id=1755): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 59.441647389s ago: executing program 4 (id=1772): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x80000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) 59.084901071s ago: executing program 4 (id=1774): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 58.873328737s ago: executing program 4 (id=1776): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x21801, 0x6536d5ef40a93735}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x4}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) 58.581269255s ago: executing program 4 (id=1779): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f00000003c0)}], 0x3}], 0x1, 0x40800) r0 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x298, 0x168, 0x0, 0x0, 0x200, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x298}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4, 0x11000000]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 58.021371494s ago: executing program 33 (id=1779): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f00000003c0)}], 0x3}], 0x1, 0x40800) r0 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x298, 0x168, 0x0, 0x0, 0x200, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x298}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4, 0x11000000]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 5.228469214s ago: executing program 2 (id=2183): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0xfffffffffffffffe, 0x4, 0x20000e695, 0x9, 0x400, 0x6, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000200d1, 0xfffffffffffffffc, 0x6, 0x4, 0x0, 0xfffffffffffffe], 0x0, 0x8340}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004000000080000002b"], 0x50) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.951756504s ago: executing program 2 (id=2185): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x800000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f00000005c0)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"c718ae3ddd25e4c2826499cb6a055b56a5a7336f377a556f824db28eb6743cf045afd0e932534b9eb3b847abbcef63c85319991745999ed89ff49783a84d57cf175a89f8733d74a1bdddcb0a6c3f7535e7976e79da1b52de6403f6710d606fafaf685ec19f369b7829b12aa2b8cd2ab52f9c688683979cdb9516cb61f2adb9aefd44fee30bddb81ebefa818f31f60d89a4e390920c7ed0e2512fd59f719e734b0a1d1f3ff7babb54258a1585514aac0b000000733671e0543929c06f72fc598939003ac6777f3497523536fd25ac4f1e265f5038fa7455f2cc6131d4a189a16b0f0b89e6a495e1d95b840c36488adc22cb2d1b8af57f6dce7214152ba1b3c0d3ad0a6db821518e44b24cb36a02d76ea11a1c45879fc77e7bb2af8c345ddddf49f41228df2114f2c27d16499fa36097a5015ad61a6a9484c09e0a2dfb50f7b7ca71135dc32804a80380a6e20e0ae03be775e472cd31d6a31e615937c38e746a5cf6c9d8194242990dd497a2c52ab50300000000000000cebbd983c3f86dbe92c4b751c04693cb09af88521ab305ceabf6d2bab40bb1b219fbe95ace2f6c49fea798e76b4ef336dff5ac0f7ab022b800ac1aa42fd231b52465a410177ed85dcc9c6d794e2aa0b90cdc409541aa85fa16e3cbc3a9d6c83ffd4d01e5ba898555eeffccf0cb28ce5df0ba31cb793675276162de2fdcb486455bca57edf4fb14e1533554eb22527d66a28a960c430f6136927f54e670c46292454fe28485f35405025844fd24fe846f6656c77d9b5f2b4750ac4805897b02c85caba80000bb96f71f468c9e746d860238b3b113ab1eef51e1507f8832d5d69528083d44548e491477cda51d7e083a134097438e9d7ea34eae8a2e6b516327db9310c7478a37f5c562037196131cc7c84fa29c3c2576f2ae7570b5a98aaa49ca7ddfd5a8c046ce82e4a2d06082ad7a3ab0dfbe208630b1410b674781855752c9c57c1c5ab0a74a336ce89b3a9c0d37a3ca4e698a798a85faf7f4f1dc020b7dd5750062c9810c4bc1ad7afe338f2b0f29059e684fe16098eb30da105be01ca11a293635dfc6d25ecc770ba72792fd3c6851d951b770d0f9edafb1cb4241350d85b04ed737a9bfd7e8301c43b65a95dda76d6850860ba3195040b14c8ad1a8b52472785521147182352a1dbd93595cbc26e813ccd75e16f9247fe82ed150c121f0041022522ec76476f0a9cffa3be1d3ffffffffffffffff29358bbfd8b7a12fe94a0355beb9420eee0a5c11220100c782b89e9430de84b220e8c0df4bd40be3400c58f149319f891fe86fba751dab3326bf2deb9e782b37ec9c7adf36025a091a4b3600000000000000000000000000000000000000000000000000000000000000000600"}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000640)={{0x7ffd0fff, 0x6000, 0x13, 0xa, 0x4, 0x45, 0x1, 0x8, 0x5, 0x1, 0x90, 0x4}, {0x0, 0xd000, 0x0, 0x6, 0x0, 0xfa, 0x90, 0x2, 0x9, 0x9, 0x7, 0xff}, {0xddcd1000, 0xeeef0000, 0xb, 0x6, 0x3, 0x12, 0x81, 0xcc, 0x8, 0x7f, 0x3, 0x6}, {0x3000, 0xdddd0000, 0xa, 0x8, 0xca, 0x0, 0x5, 0x1, 0x5, 0x5, 0xf, 0x4}, {0xf000, 0x9000, 0xc, 0xc, 0x9, 0x1, 0xf, 0x40, 0xc1, 0x55, 0xc, 0x2}, {0x58000, 0x58000, 0x4, 0x4, 0x7, 0x30, 0x4, 0xe2, 0xfe, 0xb8, 0x1, 0x3}, {0xdddd0000, 0x10000, 0x8, 0x7, 0x8, 0x7, 0x80, 0x1, 0x2, 0x7, 0x5, 0x4}, {0x200000, 0x58000, 0xa, 0x0, 0x54, 0x1, 0x8, 0xfa, 0x7, 0xfa, 0x2, 0x1}, {0x40000, 0x1ff}, {0xe002, 0x4}, 0x1b121490a35abb7c, 0x0, 0x200000, 0x180, 0x5, 0x100, 0x70000, [0x10000, 0x8, 0xa1, 0x101]}) 4.827379795s ago: executing program 6 (id=2187): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd09032800030020000000600000000004730081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 4.627146544s ago: executing program 6 (id=2188): r0 = socket$key(0xf, 0x3, 0x2) socket$kcm(0xa, 0x5, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in6=@mcast1, 0x4e22, 0x0, 0x4e22, 0x48, 0x2}, {0xfffffffffffffffc, 0x0, 0x0, 0x10001, 0x5, 0x5, 0x5, 0xfffffffffffffffd}, {0x2, 0xffffffffffff90df, 0x0, 0x20000000000000}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@loopback, 0x4d4, 0x6c}, 0x2, @in=@broadcast, 0x3502, 0x4, 0x1, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 4.626552424s ago: executing program 2 (id=2189): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bff000/0x400000)=nil) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000200)={{0x50000, 0x1, 0x9, 0x1, 0xcd, 0x9, 0x6, 0x1, 0x0, 0x7, 0x5, 0xeb}, {0x3000, 0x80a0000, 0x9, 0xe, 0x5, 0x4, 0x4, 0x14, 0x4, 0x5, 0x0, 0x1}, {0x8000000, 0x102f8000, 0x1e, 0x5, 0x16, 0x7, 0x81, 0x3, 0x80, 0x1, 0xe, 0x78}, {0xeeef0000, 0x6000, 0x4, 0x3, 0x6, 0x9, 0xc3, 0x0, 0x0, 0x0, 0x80, 0x2e}, {0x2, 0x2000, 0xa, 0xff, 0x8, 0x8, 0x6, 0x7, 0x8, 0x6, 0x4, 0xfc}, {0x10d000, 0x0, 0x9, 0xb9, 0x6, 0x5, 0x52, 0x6, 0x5, 0x1, 0xd, 0x9}, {0xdddd1000, 0x0, 0x0, 0x1, 0xa, 0x8, 0x4, 0x63, 0x1c, 0x4, 0x1, 0xd}, {0xdddd1000, 0x4000, 0xa, 0x23, 0x2, 0x3, 0x9, 0x4a, 0x7, 0x7, 0x43, 0x6}, {0x4, 0x5}, {0xffff1000}, 0x40020012, 0x0, 0xdddd0000, 0x152690, 0xf, 0x4000, 0x10000, [0x1, 0x1004, 0x6, 0x1000]}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000340)={0x2, 0x0, @ioapic={0x0, 0xfffffffe, 0x7ffffffd, 0xfffffff5, 0x0, [{0x86, 0x40, 0x3, '\x00', 0x2}, {0x2a, 0xff, 0xad, '\x00', 0x10}, {0x32, 0x23, 0xb, '\x00', 0xfe}, {0x0, 0x1, 0x82, '\x00', 0x72}, {0x26, 0x1, 0x0, '\x00', 0xff}, {0x0, 0x8, 0xfd, '\x00', 0x7}, {0xcf, 0x20, 0xc5, '\x00', 0xe6}, {0x6, 0x9, 0x5, '\x00', 0xe}, {0x5, 0x7f, 0x7, '\x00', 0x4d}, {0xc, 0xd, 0x0, '\x00', 0x3b}, {0x0, 0x8, 0x0, '\x00', 0x8}, {0x7, 0x6, 0x0, '\x00', 0x3}, {0x2, 0xc0, 0xa, '\x00', 0x4}, {0x6, 0x7, 0x7, '\x00', 0xfe}, {0x8, 0x5, 0x9, '\x00', 0xa9}, {0x6, 0x6, 0x8}, {0xff, 0x5, 0x6, '\x00', 0xda}, {0x5, 0xfd, 0x6, '\x00', 0x8}, {0x45, 0x4, 0xff, '\x00', 0x6}, {0x9, 0x9, 0x7a, '\x00', 0x36}, {0x80, 0xa, 0x4, '\x00', 0x5}, {0x2, 0x9, 0x8, '\x00', 0xc4}, {0x3, 0xff, 0x12, '\x00', 0x6}, {0x4, 0xa9, 0x1c, '\x00', 0xa}]}}) 4.174979498s ago: executing program 2 (id=2191): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}}) r2 = dup(r1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r3, 0x0) write$UHID_INPUT(r2, &(0x7f0000001c00)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd84568b8f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df", 0x1000}}, 0xfffffe38) 3.146950373s ago: executing program 1 (id=2194): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000200)={0x1d, r1}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYRES64=r0, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000c00)=@nat={'nat\x00', 0x670, 0x5, 0x338, 0x2d0, 0x228, 0xfeffffff, 0x2d0, 0x2d0, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'veth0\x00', 'wlan0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) sendmsg$sock(r2, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) 3.145860099s ago: executing program 6 (id=2195): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x2000000000001005, 0x19dff, 0x4}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, r3, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000380)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x2000000000001005, 0x19dff, 0x80000}}}, 0x90) 3.114337368s ago: executing program 2 (id=2196): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff4000/0x9000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x42}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89e, 0xc000, 0x8, 0xc1}) unshare(0x22020400) syz_open_procfs(0x0, &(0x7f0000000180)='cgroup\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.946413393s ago: executing program 1 (id=2199): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1a5042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r2 = dup(r1) mmap(&(0x7f00002e8000/0x4000)=nil, 0x4000, 0x3000002, 0x28011, r2, 0x0) read$FUSE(r2, &(0x7f00000042c0)={0x2020}, 0xfffffe15) 2.892340738s ago: executing program 2 (id=2200): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008200122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0xffffffffffffff57, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x8, 0x80}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 2.765262559s ago: executing program 5 (id=2201): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000930000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b77, &(0x7f0000000040)={0x0, 0x8000c89f, 0xc880, 0x7, 0x20002f3}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x404, 0x1, 0xbf22, 0x20, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x200002, 0x1}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x100, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x9}}}, 0x24}}, 0x40000) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x725b, &(0x7f0000000000)={0x32, 0x6, 0x2}) 2.750059946s ago: executing program 6 (id=2202): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) read$FUSE(r0, &(0x7f000000b040)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f000000d080)="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", 0x2000, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x90, 0x0, 0x45, {0x6, 0x0, 0x0, 0xfa0, 0xffffffff, 0x0, {0xfffffffffffffffe, 0x2, 0x0, 0x0, 0x5, 0xf7fe, 0x3, 0x0, 0xfffffff7, 0x4000, 0x1, r2, 0x0, 0x0, 0xfffff8af}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) 2.13719621s ago: executing program 5 (id=2205): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="3801000010000100fefffffffddbdf25fe889637429010eb0f82000000000001fc010000000000000000000000000001000107144e230005000000803c000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0200000000000000ffffffffffffffff2a000000000000001f00000000000000b80700000000000002000000fcffffffbcfbffff2abd700000000000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x4c881}, 0x40) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xe}, @in=@private=0xa010100, 0x4e1f, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x80000002, 0x0, 0xffffffffffeffffa}, {0x626ab0b8}, 0x4, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x4d4, 0x32}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0xb7, 0xf58b, 0xfffffffe, 0x8}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 1.395189736s ago: executing program 6 (id=2208): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x95, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.3272698s ago: executing program 5 (id=2209): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xe, 0x5}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8}, @TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0xc}]}}]}, 0x44}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.228602938s ago: executing program 3 (id=2210): socket$inet6_sctp(0xa, 0x1, 0x84) socket$rxrpc(0x21, 0x2, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.101550075s ago: executing program 3 (id=2211): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0xd, 0xffe0}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN={0x8}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x400}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9", 0x4}], 0x1}], 0x1, 0x40800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 878.134132ms ago: executing program 5 (id=2212): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = io_uring_setup(0x76fc, &(0x7f0000000340)={0x0, 0x3c3b, 0x1000, 0x5, 0x2d2}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000540)=[{0x0}], 0x27) r2 = io_uring_setup(0x7627, &(0x7f00000002c0)={0x0, 0x653f, 0x10000, 0x1, 0x1c9, 0x0, r1}) io_uring_register$IORING_REGISTER_FILES(r2, 0x1e, &(0x7f0000000000)=[r1], 0x1) 746.481105ms ago: executing program 3 (id=2213): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x1401, 0x300, 0x70bd25, 0x25dfdbff}, 0x10}}, 0x20000015) recvmsg(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001240)=""/47, 0x2f}], 0x1}, 0x10002) 622.600564ms ago: executing program 1 (id=2214): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000006080)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0xc}, {}, {0xa, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x4, 0xfb}}, @filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_ACT={0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7, 0x2, 0x7, 0x7, 0x5}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x84}, 0x40010) 621.820355ms ago: executing program 3 (id=2215): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x2, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 590.799282ms ago: executing program 5 (id=2216): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ac0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x10000}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x20000000) 582.073047ms ago: executing program 6 (id=2217): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008200122010009058103"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000680)={0x40, 0x0, 0x4, "0c8ac451"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001000)={0x2c, &(0x7f0000000e40)={0x40, 0x6, 0x4, "5b937672"}, 0x0, 0x0, 0x0, 0x0}) 320.386659ms ago: executing program 1 (id=2218): sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, 0x0) ppoll(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) 251.549123ms ago: executing program 1 (id=2219): r0 = socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044c02}, 0x20008800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027000000000008000100"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40004) 249.452763ms ago: executing program 3 (id=2220): r0 = epoll_create1(0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) socket(0x1d, 0x2, 0x6) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000002c0)={0xa002a014}) 245.074254ms ago: executing program 5 (id=2221): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x4, 0x0, @loopback, @broadcast}, "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"}}, 0xfce) 123.539083ms ago: executing program 3 (id=2222): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x5f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000003c0)={0x1, 0x0, [{0x1, 0x0, 0x2, 0x8fba, 0x3, 0x61, 0x18bd589f}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 1 (id=2223): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x2, 0x1000, 0xfffffffd}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, &(0x7f0000000280)=0x0) r6 = socket$inet6(0xa, 0x3, 0xff) r7 = dup2(r6, r6) syz_ublk_setup_queues(r0, r5, &(0x7f0000000540)={0x0, 0x1460, 0x11, 0x3, 0xb2, 0x0, r7}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xca33, 0x0, 0x6, 0x273, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1e3c, 0xb155c4dedb2408a4, 0x9, 0x102, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf39, 0x1000, 0x3, 0x102c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2e84, 0x1000, 0x2, 0x21b, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x40, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x6}, 0x0, r4, '\x00', {0x1, 0x48a, 0x0, 0x0}}, 0x0) kernel console output (not intermixed with test programs): [HID 046d:c287] on usb-dummy_hcd.3-1/input0 [ 215.497097][ T7800] logitech 0003:046D:C287.001B: no inputs found [ 215.533426][ T7800] usb 4-1: USB disconnect, device number 18 [ 215.539990][ T24] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 215.637603][ T8897] fido_id[8897]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 215.727146][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 215.734486][ T24] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 215.756661][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.792617][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.806010][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 215.819306][ T24] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 215.829593][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.844109][ T24] usb 5-1: config 0 descriptor?? [ 216.292198][ T24] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.001C/input/input17 [ 216.401869][ T24] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.001C/input/input18 [ 216.498079][ T24] kye 0003:0458:5013.001C: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 216.538853][ T24] usb 5-1: USB disconnect, device number 15 [ 216.670188][ T8923] fido_id[8923]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 216.957164][ T5724] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 217.131272][ T5724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.181097][ T5724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.230237][ T5724] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 217.288372][ T5724] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 217.327269][ T5724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.355819][ T5724] usb 3-1: config 0 descriptor?? [ 217.527248][ T24] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 217.557138][ T7791] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 217.697142][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 217.713211][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.724701][ T7791] usb 4-1: Using ep0 maxpacket: 32 [ 217.729065][ T24] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 217.747664][ T7791] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 217.748155][ T24] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 217.760249][ T7791] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 217.778660][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 217.792243][ T7791] usb 4-1: config 0 interface 0 has no altsetting 0 [ 217.794910][ T7791] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 217.809386][ T7791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.818258][ T7791] usb 4-1: Product: syz [ 217.825188][ T7791] usb 4-1: Manufacturer: syz [ 217.830523][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 217.834236][ T7791] usb 4-1: SerialNumber: syz [ 217.853340][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 217.860920][ T7791] usb 4-1: config 0 descriptor?? [ 217.863607][ T24] usb 5-1: SerialNumber: syz [ 217.872767][ T5724] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 217.915041][ T8944] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 217.937845][ T8944] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 217.957287][ T24] hub 5-1:1.0: bad descriptor, ignoring hub [ 217.970329][ T24] hub 5-1:1.0: probe with driver hub failed with error -5 [ 218.184020][ T24] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 218.228556][ T24] usb 5-1: USB disconnect, device number 16 [ 218.300225][ T7791] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 218.702927][ T7791] gs_usb 4-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 218.847118][ T7789] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 218.857073][ T7792] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 218.867111][ T7790] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 218.965420][ T24] usb 4-1: USB disconnect, device number 19 [ 218.997196][ T7789] usb 6-1: Using ep0 maxpacket: 16 [ 219.007324][ T7792] usb 2-1: Using ep0 maxpacket: 16 [ 219.014222][ T7789] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 219.030060][ T7792] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 219.106527][ T7789] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.116056][ T7790] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 219.134862][ T7792] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 219.148398][ T7790] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 96, setting to 64 [ 219.160973][ T7789] usb 6-1: config 0 descriptor?? [ 219.166033][ T7792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.175675][ T7790] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 219.188979][ T7792] usb 2-1: Product: syz [ 219.197345][ T7789] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 219.203642][ T7792] usb 2-1: Manufacturer: syz [ 219.211870][ T7792] usb 2-1: SerialNumber: syz [ 219.218518][ T7790] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 219.233616][ T7790] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 219.243391][ T7790] usb 5-1: SerialNumber: syz [ 219.248487][ T7792] r8152-cfgselector 2-1: Unknown version 0x0000 [ 219.255595][ T7792] r8152-cfgselector 2-1: config 0 descriptor?? [ 219.269443][ T8944] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 219.292443][ T7790] hub 5-1:1.0: bad descriptor, ignoring hub [ 219.299041][ T7790] hub 5-1:1.0: probe with driver hub failed with error -5 [ 219.551720][ T7790] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 219.608377][ T7790] usb 5-1: USB disconnect, device number 17 [ 219.782154][ T7792] r8152-cfgselector 2-1: USB disconnect, device number 16 [ 219.797121][ T24] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 219.940013][ T5724] usb 3-1: USB disconnect, device number 24 [ 219.970248][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 219.994543][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 220.028007][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 220.047730][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 220.078783][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 220.105173][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.135748][ T24] usb 4-1: config 0 descriptor?? [ 220.414342][ T7789] gspca_sonixj: reg_w1 err -71 [ 220.450646][ T7789] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 220.475395][ T7789] usb 6-1: USB disconnect, device number 11 [ 220.634889][ T24] hid_parser_main: 2115 callbacks suppressed [ 220.634915][ T24] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 220.674479][ T24] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 220.699020][ T24] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 220.716806][ T24] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 220.736708][ T24] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 220.756283][ T24] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 220.764219][ T24] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 220.772130][ T24] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 220.794196][ T24] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 220.805317][ T24] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 220.864355][ T24] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 220.919683][ T24] usb 4-1: USB disconnect, device number 20 [ 221.113464][ T9032] fido_id[9032]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 222.192816][ T24] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 222.298376][ T9056] input: syz1 as /devices/virtual/input/input19 [ 222.402302][ T24] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 222.402338][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.402374][ T24] usb 4-1: Product: syz [ 222.402389][ T24] usb 4-1: Manufacturer: syz [ 222.402404][ T24] usb 4-1: SerialNumber: syz [ 222.852159][ T24] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 222.913023][ T9073] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 223.020097][ T5724] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 223.131307][ T9083] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1103'. [ 223.143219][ T9083] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1103'. [ 223.209296][ T5724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.226407][ T5724] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 223.252073][ T9084] usblp0:failed reading printer status (-32) [ 223.255447][ T5724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.280732][ T7789] usb 4-1: USB disconnect, device number 21 [ 223.314450][ T5724] usb 2-1: config 0 descriptor?? [ 223.316418][ T7789] usblp0: removed [ 223.555563][ T5724] usbhid 2-1:0.0: can't add hid device: -71 [ 223.577247][ T5724] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 223.620085][ T5724] usb 2-1: USB disconnect, device number 17 [ 224.087704][ T5724] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 224.247707][ T5724] usb 2-1: Using ep0 maxpacket: 32 [ 224.261303][ T5724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.292088][ T5724] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 224.327234][ T5724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.364350][ T5724] usb 2-1: config 0 descriptor?? [ 224.399133][ T5724] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 224.413011][ T9119] netlink: 'syz.3.1119': attribute type 9 has an invalid length. [ 224.432284][ T5724] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 224.437681][ T9119] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.1119'. [ 224.486044][ T9122] netlink: 'syz.2.1120': attribute type 12 has an invalid length. [ 224.494137][ T9122] netlink: 'syz.2.1120': attribute type 29 has an invalid length. [ 224.502675][ T9122] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1120'. [ 224.516254][ T9122] netlink: 'syz.2.1120': attribute type 1 has an invalid length. [ 224.526404][ T9123] netlink: 'syz.2.1120': attribute type 12 has an invalid length. [ 224.541694][ T9123] netlink: 'syz.2.1120': attribute type 29 has an invalid length. [ 224.550528][ T9123] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1120'. [ 224.560762][ T9123] netlink: 'syz.2.1120': attribute type 1 has an invalid length. [ 224.660948][ C1] ldusb 2-1:0.0: Ring buffer overflow, 8 bytes dropped [ 224.816579][ T9129] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 224.995500][ C0] ldusb 2-1:0.0: Ring buffer overflow, 8 bytes dropped [ 226.085418][ T7789] usb 2-1: USB disconnect, device number 18 [ 226.118404][ T7789] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 226.566752][ T9177] input: syz1 as /devices/virtual/input/input20 [ 226.852410][ T9183] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1143'. [ 226.880613][ T9183] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1143'. [ 226.913291][ T9183] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1143'. [ 226.956887][ T9186] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.1144'. [ 226.978516][ T9186] netlink: Conntrack attr has 4 unknown bytes [ 227.778105][ T9211] netlink: 'syz.5.1153': attribute type 20 has an invalid length. [ 227.798689][ T9211] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1153'. [ 227.828678][ T60] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.838072][ T9211] netlink: 'syz.5.1153': attribute type 20 has an invalid length. [ 227.861489][ T60] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.896334][ T60] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.933042][ T60] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.197100][ T5724] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 228.270671][ T9228] __nla_validate_parse: 1 callbacks suppressed [ 228.270693][ T9228] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1161'. [ 228.287322][ T7814] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 228.303938][ T9228] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1161'. [ 228.372033][ T5724] usb 4-1: config 1 interface 0 has no altsetting 0 [ 228.409316][ T9228] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1161'. [ 228.410400][ T5724] usb 4-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.40 [ 228.433226][ T9228] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1161'. [ 228.434720][ T5724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.456363][ T5724] usb 4-1: Product: syz [ 228.460688][ T5724] usb 4-1: Manufacturer: syz [ 228.465340][ T5724] usb 4-1: SerialNumber: syz [ 228.470058][ T7814] usb 3-1: Using ep0 maxpacket: 8 [ 228.476906][ T7814] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 228.487241][ T7814] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 228.508182][ T7814] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 228.519075][ T7814] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 228.530410][ T7814] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 228.540688][ T7814] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 228.553853][ T7814] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 228.563456][ T7814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.754157][ T5724] usbhid 4-1:1.0: can't add hid device: -71 [ 228.767313][ T5724] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 228.791753][ T5724] usb 4-1: USB disconnect, device number 22 [ 228.824219][ T7814] usb 3-1: usb_control_msg returned -32 [ 228.837261][ T7814] usbtmc 3-1:16.0: can't read capabilities [ 228.914212][ T9239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.922826][ T9239] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.934430][ T9239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.007756][ T9239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.018776][ T9239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.033869][ T9239] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 229.045050][ T9239] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 229.060865][ T9239] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 229.088077][ T7652] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.095402][ T7652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.120501][ T7652] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.127787][ T7652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.211047][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 229.221122][ T9243] usbtmc 3-1:16.0: Unable to send data, error -71 [ 229.229456][ T9243] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 229.240289][ T5724] usb 3-1: USB disconnect, device number 25 [ 229.927119][ T7791] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 229.951219][ T9266] netlink: 384 bytes leftover after parsing attributes in process `syz.2.1176'. [ 229.959690][ T7792] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 229.968036][ T9266] netlink: 384 bytes leftover after parsing attributes in process `syz.2.1176'. [ 229.984321][ T9266] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1176'. [ 230.087092][ T7791] usb 5-1: Using ep0 maxpacket: 16 [ 230.101040][ T7791] usb 5-1: too many configurations: 123, using maximum allowed: 8 [ 230.126273][ T7791] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.149632][ T7792] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 230.163505][ T7791] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.175294][ T7792] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 230.189000][ T7792] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 230.200741][ T7791] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.212501][ T7792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.225460][ T7791] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.246771][ T7791] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.259636][ T9259] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 230.280295][ T7791] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.293890][ T7792] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 230.305250][ T7791] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.326204][ T7791] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.346040][ T7791] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 230.380937][ T7791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 230.409957][ T7791] usb 5-1: SerialNumber: syz [ 230.429380][ T7791] usb 5-1: config 0 descriptor?? [ 230.475445][ T7791] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input21 [ 230.730720][ T4985] bcm5974 5-1:0.0: could not read from device [ 230.773979][ T4985] bcm5974 5-1:0.0: could not read from device [ 230.802901][ T4985] bcm5974 5-1:0.0: could not read from device [ 230.816013][ T7791] usb 5-1: USB disconnect, device number 18 [ 230.864464][ T4985] bcm5974 5-1:0.0: could not read from device [ 230.891362][ T7792] usb 4-1: USB disconnect, device number 23 [ 231.135659][ T9286] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 232.523546][ T9334] netlink: 'syz.1.1204': attribute type 14 has an invalid length. [ 232.533865][ T9334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1204'. [ 232.564552][ T9334] netlink: 'syz.1.1204': attribute type 14 has an invalid length. [ 232.583813][ T9334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1204'. [ 233.891256][ T9368] netlink: 'syz.1.1219': attribute type 13 has an invalid length. [ 233.912340][ T9368] netlink: 'syz.1.1219': attribute type 17 has an invalid length. [ 234.121497][ T9368] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 234.531310][ T29] audit: type=1326 audit(1781387613.222:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9377 comm="syz.3.1223" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f297d39ce59 code=0x0 [ 234.708748][ T9390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1228'. [ 234.719025][ T9390] netlink: 'syz.1.1228': attribute type 9 has an invalid length. [ 234.817553][ T7792] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 234.972090][ T9397] kvm: kvm [9396]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 234.982631][ T9397] kvm: kvm [9396]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 234.993391][ T7792] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.017446][ T7792] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 235.035433][ T7792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.057746][ T7792] usb 5-1: Product: syz [ 235.069289][ T7792] usb 5-1: Manufacturer: syz [ 235.079773][ T7792] usb 5-1: SerialNumber: syz [ 235.351809][ T9409] bridge2: entered promiscuous mode [ 235.376819][ T9409] bridge2: entered allmulticast mode [ 236.030594][ T9426] loop3: detected capacity change from 0 to 7 [ 236.043469][ T9426] Dev loop3: unable to read RDB block 7 [ 236.050486][ T9426] loop3: unable to read partition table [ 236.056523][ T9426] loop3: partition table beyond EOD, truncated [ 236.063751][ T9426] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 236.124405][ T7792] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 236.137680][ T7792] cdc_ncm 5-1:1.0: setting rx_max = 16384 [ 236.326013][ T7792] cdc_ncm 5-1:1.0: setting tx_max = 88 [ 236.403524][ T7792] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 236.407704][ T5724] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 236.428732][ T7792] usb 5-1: USB disconnect, device number 19 [ 236.439757][ T7792] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 236.581279][ T7296] udevd[7296]: setting mode of /dev/bus/usb/005/019 to 020664 failed: No such file or directory [ 236.603378][ T7296] udevd[7296]: setting owner of /dev/bus/usb/005/019 to uid=0, gid=0 failed: No such file or directory [ 236.628833][ T5724] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 236.643989][ T5724] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 236.667254][ T5724] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 236.690956][ T5724] usb 3-1: config 220 has no interface number 2 [ 236.711003][ T5724] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 236.724847][ T5724] usb 3-1: config 220 interface 0 has no altsetting 0 [ 236.733248][ T5724] usb 3-1: config 220 interface 76 has no altsetting 0 [ 236.740846][ T5724] usb 3-1: config 220 interface 1 has no altsetting 0 [ 236.752933][ T5724] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 236.768691][ T5724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.780067][ T5724] usb 3-1: Product: syz [ 236.784788][ T5724] usb 3-1: Manufacturer: syz [ 236.790440][ T5724] usb 3-1: SerialNumber: syz [ 237.042753][ T5724] usb 3-1: selecting invalid altsetting 0 [ 237.059924][ T5724] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 237.068972][ T5724] uvcvideo 3-1:220.0: No valid video chain found. [ 237.090112][ T5724] usb 3-1: selecting invalid altsetting 0 [ 237.102750][ T5724] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 237.128506][ T7800] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 237.157994][ T5724] usb 3-1: USB disconnect, device number 26 [ 237.291059][ T7800] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 237.315254][ T7800] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.347473][ T7800] usb 4-1: config 0 descriptor?? [ 237.965686][ T9468] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 238.169263][ T9472] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1261'. [ 238.582123][ T7800] usb 4-1: Cannot set autoneg [ 238.588775][ T7800] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 238.620926][ T7800] usb 4-1: USB disconnect, device number 24 [ 239.916524][ T9512] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 240.746593][ T9541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.764779][ T9541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.790243][ T9543] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1290'. [ 240.829352][ T9543] 8021q: adding VLAN 0 to HW filter on device bond4 [ 240.874994][ T9543] 8021q: adding VLAN 0 to HW filter on device bond4 [ 240.885647][ T9543] bond4: (slave ip6tnl3): The slave device specified does not support setting the MAC address [ 240.898559][ T9543] bond4: (slave ip6tnl3): Error -95 calling set_mac_address [ 241.553013][ T9558] loop5: detected capacity change from 0 to 8 [ 241.795845][ T9558] Dev loop5: unable to read RDB block 8 [ 241.811315][ C1] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 241.821164][ C1] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 241.827419][ T9558] loop5: unable to read partition table [ 241.845947][ T9558] loop5: partition table beyond EOD, truncated [ 241.865847][ T9558] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 242.137377][ T5000] Dev loop5: unable to read RDB block 8 [ 242.157130][ T5000] loop5: unable to read partition table [ 242.167380][ T5000] loop5: partition table beyond EOD, truncated [ 242.615348][ T9588] netlink: 'syz.5.1307': attribute type 13 has an invalid length. [ 242.623545][ T9588] netlink: 'syz.5.1307': attribute type 17 has an invalid length. [ 242.647880][ T7800] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 242.667186][ T24] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 242.736228][ T9588] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 242.807815][ T7800] usb 4-1: Using ep0 maxpacket: 16 [ 242.819508][ T7800] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 242.851626][ T7800] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 242.862810][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 242.871766][ T24] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 242.882177][ T7800] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 242.891966][ T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 242.902413][ T7800] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.910611][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 242.921276][ T7800] usb 4-1: Product: syz [ 242.925620][ T7800] usb 4-1: Manufacturer: syz [ 242.930872][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 242.941639][ T7800] usb 4-1: SerialNumber: syz [ 242.948023][ T24] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 242.966465][ T7800] usb 4-1: config 0 descriptor?? [ 242.995541][ T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 243.006141][ T7800] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 243.028804][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.042473][ T7800] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 243.279608][ T24] usb 2-1: usb_control_msg returned -32 [ 243.288911][ T24] usbtmc 2-1:16.0: can't read capabilities [ 243.602182][ T7800] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 243.615859][ T7800] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 243.836147][ T7800] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 243.847233][ T7800] em28xx 4-1:0.0: No AC97 audio processor [ 243.862566][ T7800] usb 4-1: USB disconnect, device number 25 [ 243.880830][ T7800] em28xx 4-1:0.0: Disconnecting em28xx [ 243.912741][ T7800] em28xx 4-1:0.0: Freeing device [ 244.014268][ T9612] usbtmc 2-1:16.0: usb_clear_halt returned -32 [ 244.149979][ T9618] netlink: 'syz.2.1319': attribute type 13 has an invalid length. [ 244.159565][ T9618] netlink: 'syz.2.1319': attribute type 17 has an invalid length. [ 244.216114][ T5709] usb 2-1: USB disconnect, device number 19 [ 244.308597][ T9618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.319429][ T9618] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.342419][ T9618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.440987][ T9618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.489663][ T9618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.517440][ T9618] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 244.530482][ T9618] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 244.561662][ T9618] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 244.619836][ T7652] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.627089][ T7652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.667921][ T7652] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.675144][ T7652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.847054][ T7800] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 244.915242][ T29] audit: type=1804 audit(1781387623.602:470): pid=9631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1324" name="bus" dev="ramfs" ino=29502 res=1 errno=0 [ 245.021528][ T7800] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.051786][ T7800] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 245.077095][ T7800] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 245.111154][ T7800] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 245.156324][ T7800] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 245.172202][ T7800] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 245.199556][ T7800] usb 4-1: Manufacturer: syz [ 245.222625][ T7800] usb 4-1: config 0 descriptor?? [ 245.607278][ T7800] rc_core: IR keymap rc-hauppauge not found [ 245.633632][ T7800] Registered IR keymap rc-empty [ 245.684963][ T7800] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 245.733756][ T7800] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 245.784418][ T7800] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 245.838165][ T7800] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input22 [ 245.872048][ T7800] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 245.908206][ T7800] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 245.937491][ T7800] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 245.969087][ T7800] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 246.008195][ T7800] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 246.058072][ T7800] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 246.088401][ T7800] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 246.118251][ T7800] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 246.158515][ T7800] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 246.186447][ T5724] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 246.208234][ T7800] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 246.233967][ T7800] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 246.244840][ T7800] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 246.261436][ T7800] usb 4-1: USB disconnect, device number 26 [ 246.337552][ T5724] usb 6-1: Using ep0 maxpacket: 32 [ 246.350539][ T5724] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=8c.92 [ 246.367149][ T5724] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.389618][ T5724] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 246.467265][ T24] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 246.634119][ T24] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 246.668620][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.687164][ T24] usb 3-1: Product: syz [ 246.693061][ T24] usb 3-1: Manufacturer: syz [ 246.707209][ T24] usb 3-1: SerialNumber: syz [ 246.725127][ T24] usb 3-1: config 0 descriptor?? [ 246.739005][ T24] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 246.867170][ T7792] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 247.041159][ T7792] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.052187][ T7792] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.070691][ T7792] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 247.097137][ T7792] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 247.111393][ T7792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.130153][ T7792] usb 2-1: config 0 descriptor?? [ 247.622736][ T7792] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 247.848462][ T5694] usb 6-1: USB disconnect, device number 12 [ 247.855338][ T7792] usb 2-1: USB disconnect, device number 20 [ 247.951453][ T9701] fido_id[9701]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 247.974588][ T24] gspca_sunplus: reg_w_riv err -71 [ 247.993988][ T24] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 248.042995][ T24] usb 3-1: USB disconnect, device number 27 [ 248.857478][ T9722] xt_hashlimit: size too large, truncated to 1048576 [ 249.945801][ T9749] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1371'. [ 250.376386][ T9763] dlm: non-version read from control device 16 [ 250.411153][ T9763] dlm: non-version read from control device 16 [ 250.431856][ T9763] dlm: non-version read from control device 16 [ 250.441918][ T9763] dlm: non-version read from control device 16 [ 251.810419][ T9814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1394'. [ 251.939249][ T9818] loop5: detected capacity change from 0 to 7 [ 251.962977][ T9818] Dev loop5: unable to read RDB block 7 [ 251.978306][ T9818] loop5: unable to read partition table [ 252.014620][ T9818] loop5: partition table beyond EOD, truncated [ 252.036523][ T9818] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 252.583017][ T9829] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.593710][ T9829] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.697115][ T9832] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.704431][ T9832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.712103][ T9832] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.719356][ T9832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.729831][ T9832] bridge0: entered promiscuous mode [ 252.774042][ T9832] bridge0: entered allmulticast mode [ 253.727733][ T5694] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 253.891096][ T5694] usb 6-1: unable to get BOS descriptor or descriptor too short [ 253.920044][ T5694] usb 6-1: not running at top speed; connect to a high speed hub [ 253.949210][ T5694] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 253.982407][ T5694] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 254.000960][ T5694] usb 6-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 254.020419][ T9862] syzkaller1: entered promiscuous mode [ 254.022149][ T5694] usb 6-1: config 14 has no interface number 0 [ 254.038251][ T9862] syzkaller1: entered allmulticast mode [ 254.044158][ T5694] usb 6-1: config 14 has no interface number 1 [ 254.064201][ T5694] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 254.086825][ T5694] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 254.130343][ T5694] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 254.155704][ T5694] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.177347][ T5694] usb 6-1: config 14 interface 57 has no altsetting 0 [ 254.194415][ T5694] usb 6-1: config 14 interface 228 has no altsetting 0 [ 254.210277][ T5694] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 254.226995][ T5694] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.246862][ T5694] usb 6-1: Product: syz [ 254.257288][ T5694] usb 6-1: Manufacturer: syz [ 254.267173][ T5694] usb 6-1: SerialNumber: syz [ 254.708716][ T5694] legousbtower 6-1:14.57: interrupt endpoints not found [ 255.109207][ T5694] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 255.180678][ T5694] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 255.815896][ T9879] usb 6-1: Couldn't submit interrupt_in_urb -90 [ 255.847438][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.853884][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.007422][ T5709] usb 6-1: USB disconnect, device number 13 [ 256.117790][ T5709] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected [ 256.146775][ T9882] : entered promiscuous mode [ 256.809765][ T9903] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1431'. [ 257.236016][ T9917] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 257.363650][ T9925] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 258.451453][ T9955] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1451'. [ 258.471840][ T9955] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1451'. [ 258.836846][ T9968] syz_tun: entered allmulticast mode [ 258.910094][ T9968] syz_tun (unregistering): left allmulticast mode [ 259.462826][ T9989] usb usb8: usbfs: process 9989 (syz.4.1465) did not claim interface 0 before use [ 259.712924][ T9993] nftables ruleset with unbound set [ 260.129628][ T5709] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 260.257723][ T5724] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 260.298124][ T5709] usb 2-1: Using ep0 maxpacket: 8 [ 260.336273][ T5709] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 260.359761][ T5709] usb 2-1: config 179 has no interface number 0 [ 260.377077][ T5709] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 260.397113][ T5709] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 260.418513][ T5709] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 260.440119][ T5709] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 260.441407][ T5724] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 260.462006][ T5709] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 260.473296][ T5724] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 260.486827][ T5724] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 260.496373][ T5724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.498898][ T5709] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 260.520681][T10002] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 260.542528][ T5724] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 260.544004][ T5709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.591477][T10000] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 260.845194][ T5724] usb 3-1: USB disconnect, device number 28 [ 261.024932][ T7790] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input23 [ 261.199568][ T7790] usb 2-1: USB disconnect, device number 21 [ 261.205616][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 261.205675][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 261.676763][T10014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1475'. [ 262.083867][T10022] netlink: 'syz.1.1479': attribute type 1 has an invalid length. [ 262.260976][T10022] bond5: entered promiscuous mode [ 262.284087][T10022] bond5: entered allmulticast mode [ 262.308803][T10022] 8021q: adding VLAN 0 to HW filter on device bond5 [ 262.439630][T10025] erspan1: entered allmulticast mode [ 262.515066][T10025] bond5: (slave erspan1): making interface the new active one [ 262.561898][T10025] erspan1: entered promiscuous mode [ 262.587959][T10025] bond5: (slave erspan1): Enslaving as an active interface with an up link [ 263.990758][ T29] audit: type=1326 audit(1781387642.682:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10080 comm="syz.1.1502" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fba67b96bd7 code=0x7ffc0000 [ 264.057754][ T29] audit: type=1326 audit(1781387642.682:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10080 comm="syz.1.1502" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fba67b3e1d9 code=0x7ffc0000 [ 264.090207][ T29] audit: type=1326 audit(1781387642.682:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10080 comm="syz.1.1502" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fba67b96bd7 code=0x7ffc0000 [ 264.121111][ T29] audit: type=1326 audit(1781387642.682:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10080 comm="syz.1.1502" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fba67b3e1d9 code=0x7ffc0000 [ 264.147449][ T29] audit: type=1326 audit(1781387642.682:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10080 comm="syz.1.1502" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fba67b96bd7 code=0x7ffc0000 [ 264.205330][ T29] audit: type=1326 audit(1781387642.682:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10080 comm="syz.1.1502" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fba67b3e1d9 code=0x7ffc0000 [ 264.273059][ T29] audit: type=1326 audit(1781387642.682:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10080 comm="syz.1.1502" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fba67b96bd7 code=0x7ffc0000 [ 264.298735][T10062] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1494'. [ 264.332987][T10062] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 264.349587][ T29] audit: type=1326 audit(1781387642.682:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10080 comm="syz.1.1502" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fba67b3e1d9 code=0x7ffc0000 [ 264.413287][ T29] audit: type=1326 audit(1781387642.682:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10080 comm="syz.1.1502" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fba67b96bd7 code=0x7ffc0000 [ 264.495180][ T29] audit: type=1326 audit(1781387642.682:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10080 comm="syz.1.1502" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fba67b3e1d9 code=0x7ffc0000 [ 265.033679][T10096] trusted_key: syz.2.1507 sent an empty control message without MSG_MORE. [ 265.147351][ T5724] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 265.177077][ T5694] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 265.297883][ T5724] usb 5-1: Using ep0 maxpacket: 32 [ 265.305150][ T5724] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 265.319754][ T5724] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 265.337131][ T5694] usb 6-1: Using ep0 maxpacket: 32 [ 265.342476][ T5724] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 265.353278][ T5694] usb 6-1: config 0 has an invalid interface number: 151 but max is 0 [ 265.361884][ T5694] usb 6-1: config 0 has no interface number 0 [ 265.368678][ T5724] usb 5-1: Product: syz [ 265.372958][ T5694] usb 6-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 265.384308][ T5724] usb 5-1: Manufacturer: syz [ 265.389480][ T5724] usb 5-1: SerialNumber: syz [ 265.394184][ T5694] usb 6-1: config 0 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 265.409531][ T5694] usb 6-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 265.420016][ T5724] usb 5-1: config 0 descriptor?? [ 265.425451][ T5694] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.433907][T10094] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 265.434487][ T5694] usb 6-1: Product: syz [ 265.445939][ T5694] usb 6-1: Manufacturer: syz [ 265.452146][ T5694] usb 6-1: SerialNumber: syz [ 265.474203][ T5694] usb 6-1: config 0 descriptor?? [ 265.631217][ T5904] udevd[5904]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 265.771577][ T7792] usb 5-1: USB disconnect, device number 20 [ 265.789653][ T5709] usb 6-1: USB disconnect, device number 14 [ 265.982686][T10112] netlink: 'syz.1.1512': attribute type 1 has an invalid length. [ 266.084925][T10112] 8021q: adding VLAN 0 to HW filter on device bond6 [ 266.208971][T10114] bond6: (slave syz_tun): Enslaving as an active interface with an up link [ 266.389245][T10120] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.1514'. [ 266.827599][T10139] batadv_slave_1: entered promiscuous mode [ 266.853799][T10138] batadv_slave_1: left promiscuous mode [ 267.150584][T10153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1528'. [ 268.322264][T10186] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1543'. [ 268.608189][ T5709] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 268.770357][ T5709] usb 5-1: config 0 has no interfaces? [ 268.784297][T10206] kvm: vcpu 1024: requested lapic timer restore with starting count register 0x390=4013106938 (32104855504 ns) > initial count (3341777952 ns). Using initial count to start timer. [ 268.805067][ T5709] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 268.816683][ T5709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.826224][ T5709] usb 5-1: Product: syz [ 268.830880][ T5709] usb 5-1: Manufacturer: syz [ 268.835791][ T5709] usb 5-1: SerialNumber: syz [ 268.843660][ T5709] usb 5-1: config 0 descriptor?? [ 268.987062][ T7790] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 269.149151][ T5709] usb 5-1: USB disconnect, device number 21 [ 269.163085][ T7790] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 269.173903][ T7790] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.193973][ T7790] usb 4-1: Product: syz [ 269.199534][ T7790] usb 4-1: Manufacturer: syz [ 269.204235][ T7790] usb 4-1: SerialNumber: syz [ 269.493297][ T7790] rtl8150 4-1:1.0: couldn't reset the device [ 269.507139][ T7790] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 269.536781][ T7790] usb 4-1: USB disconnect, device number 27 [ 271.055817][T10266] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1575'. [ 272.270270][T10287] netlink: 'syz.3.1581': attribute type 1 has an invalid length. [ 272.351685][T10287] bond2: entered promiscuous mode [ 272.357630][T10287] 8021q: adding VLAN 0 to HW filter on device bond2 [ 272.466782][T10287] 8021q: adding VLAN 0 to HW filter on device bond2 [ 272.509821][T10287] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 272.544397][T10287] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 272.590928][T10287] bond2: (slave ip6gre1): making interface the new active one [ 272.616305][T10287] ip6gre1: entered promiscuous mode [ 272.645310][T10287] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 273.862688][T10343] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1592'. [ 273.907073][ T5694] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 274.077484][ T5694] usb 2-1: Using ep0 maxpacket: 8 [ 274.095375][ T5694] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 274.130809][ T5694] usb 2-1: config 0 has no interface number 0 [ 274.154467][ T5694] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 274.199407][ T5694] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 274.257385][ T5694] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 274.320269][ T5694] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 274.370499][ T5694] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 274.394630][ T5694] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.423895][ T5694] usb 2-1: config 0 descriptor?? [ 274.452966][ T5694] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 274.518215][ T5709] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 274.700941][ T5709] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 274.717159][ T5709] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 274.743876][ T5709] usb 6-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 274.761989][ T5709] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 274.792992][ T5709] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 274.815847][ T5709] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.824616][ T5709] usb 6-1: Product: syz [ 274.829387][ T5709] usb 6-1: Manufacturer: syz [ 274.834043][ T5709] usb 6-1: SerialNumber: syz [ 274.855186][T10353] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 275.075226][T10353] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 275.450471][T10381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1608'. [ 275.701534][T10353] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 275.921670][ T5709] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 275.936838][ T5709] cdc_ncm 6-1:1.0: dwNtbInMaxSize=15 is too small. Using 2048 [ 275.973857][ T5709] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 276.156082][ T5709] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 276.210721][ T5709] usb 6-1: USB disconnect, device number 15 [ 276.239293][ T5709] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 276.387288][ T7790] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 276.547090][ T7790] usb 3-1: Using ep0 maxpacket: 32 [ 276.569759][ T7790] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 276.587210][ T7790] usb 3-1: config 0 has no interface number 0 [ 276.599979][ T7790] usb 3-1: config 0 interface 184 has no altsetting 0 [ 276.610308][ T7790] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 276.620160][ T7790] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.628988][ T7790] usb 3-1: Product: syz [ 276.633332][ T7790] usb 3-1: Manufacturer: syz [ 276.638562][ T7790] usb 3-1: SerialNumber: syz [ 276.646637][ T7800] usb 2-1: USB disconnect, device number 22 [ 276.654111][ T7790] usb 3-1: config 0 descriptor?? [ 276.694449][ T7800] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 276.814535][T10409] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 276.839194][T10411] netlink: 208240 bytes leftover after parsing attributes in process `syz.5.1622'. [ 277.377434][ T5724] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 277.570640][ T5724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.597677][ T5724] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 277.612304][ T5724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.661316][ T5724] usb 2-1: config 0 descriptor?? [ 277.909062][ T5724] usbhid 2-1:0.0: can't add hid device: -71 [ 277.922759][ T5724] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 277.951301][ T5724] usb 2-1: USB disconnect, device number 23 [ 278.101530][ T7790] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 278.134153][ T7790] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 278.161829][ T7790] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 278.174952][ T7790] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 278.185071][ T7790] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 278.195947][ T7790] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 278.217746][ T7790] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 278.232700][ T7790] usb 3-1: USB disconnect, device number 29 [ 278.389319][ T7789] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 278.558209][ T7789] usb 2-1: Using ep0 maxpacket: 32 [ 278.588670][ T7789] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.600251][ T7789] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 278.610524][ T7789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.628723][ T7789] usb 2-1: config 0 descriptor?? [ 278.637847][ T7789] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 278.665723][ T7789] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 279.126072][ T7790] usb 2-1: USB disconnect, device number 24 [ 279.149571][ T7790] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 281.192095][T10454] syz_tun: entered promiscuous mode [ 281.204106][T10454] syz_tun: left promiscuous mode [ 281.238494][ T7790] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 281.397462][ T7790] usb 2-1: Using ep0 maxpacket: 32 [ 281.416507][ T7790] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 281.436629][ T7790] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 281.468463][ T7790] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 281.487901][ T7790] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 281.506761][ T7790] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 281.530412][ T7790] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 281.555771][ T7790] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 281.585503][ T7790] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.622763][ T7790] usb 2-1: config 0 descriptor?? [ 281.884599][ T7790] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 25 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 282.078649][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 282.078669][ T29] audit: type=1326 audit(1781387660.772:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10466 comm="syz.5.1643" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fca8819ce59 code=0x0 [ 282.193395][ C1] usblp0: nonzero read bulk status received: -71 [ 282.194659][ T7792] usb 2-1: USB disconnect, device number 25 [ 282.414173][T10464] usblp0: removed [ 282.567840][ T5724] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 282.742720][ T5724] usb 4-1: Using ep0 maxpacket: 16 [ 282.762904][ T5724] usb 4-1: unable to get BOS descriptor or descriptor too short [ 282.786377][ T5724] usb 4-1: config 13 has an invalid interface number: 50 but max is 0 [ 282.795401][ T5724] usb 4-1: config 13 has no interface number 0 [ 282.802100][ T5724] usb 4-1: config 13 interface 50 altsetting 158 bulk endpoint 0x8 has invalid maxpacket 16 [ 282.813097][ T5724] usb 4-1: config 13 interface 50 has no altsetting 0 [ 282.845468][ T5724] usb 4-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 282.860234][ T5724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.887186][ T5724] usb 4-1: Product: syz [ 282.891578][ T5724] usb 4-1: Manufacturer: syz [ 282.901717][ T5724] usb 4-1: SerialNumber: syz [ 282.919364][T10491] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 283.101343][T10505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1658'. [ 283.139404][T10491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.157855][T10491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.226442][T10491] ip6tnl1: entered allmulticast mode [ 283.247812][T10491] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1651'. [ 283.283777][ T5724] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 283.295154][ T5724] usb 4-1: MIDIStreaming interface descriptor not found [ 283.400048][T10516] hub 1-0:1.0: USB hub found [ 283.421842][T10516] hub 1-0:1.0: 1 port detected [ 283.466003][T10518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1661'. [ 283.563710][ T5724] usb 4-1: USB disconnect, device number 28 [ 283.775486][ T6222] udevd[6222]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 283.790275][T10525] usb usb8: usbfs: process 10525 (syz.5.1664) did not claim interface 0 before use [ 284.437087][ T7790] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 284.607103][ T7790] usb 4-1: Using ep0 maxpacket: 8 [ 284.689469][ T7790] usb 4-1: unable to get BOS descriptor or descriptor too short [ 284.713777][ T7790] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 284.730263][ T5724] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 284.734190][ T7790] usb 4-1: can't read configurations, error -71 [ 284.907028][ T5724] usb 6-1: Using ep0 maxpacket: 16 [ 284.919007][ T5724] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 284.947074][ T5724] usb 6-1: config 0 interface 0 has no altsetting 0 [ 284.956312][ T5724] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 284.969696][ T5724] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.987240][ T5724] usb 6-1: Product: syz [ 284.992974][ T5724] usb 6-1: Manufacturer: syz [ 285.007005][ T5724] usb 6-1: SerialNumber: syz [ 285.019335][ T5724] usb 6-1: config 0 descriptor?? [ 285.290764][ T5724] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input24 [ 285.462968][T10547] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1673'. [ 285.530928][T10547] IPv6: Can't replace route, no match found [ 285.607174][ T5724] rc_core: IR keymap rc-imon-pad not found [ 285.616562][ T5724] Registered IR keymap rc-empty [ 285.630748][ T5724] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 285.661550][ T5724] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 285.699763][ T5724] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 285.731719][ T5724] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input25 [ 285.757344][ T7792] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 285.771474][ T5724] imon 6-1:0.0: iMON device (15c2:0041, intf0) on usb<6:16> initialized [ 285.939128][ T7792] usb 3-1: Using ep0 maxpacket: 16 [ 285.967887][ T7792] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 286.002903][ T7792] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 286.037885][ T7792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.063523][ T7792] usb 3-1: Product: syz [ 286.079602][ T7792] usb 3-1: Manufacturer: syz [ 286.088181][ T7792] usb 3-1: SerialNumber: syz [ 286.106626][ T7792] r8152-cfgselector 3-1: Unknown version 0x0000 [ 286.121714][ T7792] r8152-cfgselector 3-1: config 0 descriptor?? [ 286.158839][ C1] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 286.169637][ T5724] usb 6-1: USB disconnect, device number 16 [ 286.596298][ T7790] r8152-cfgselector 3-1: USB disconnect, device number 30 [ 288.603678][T10601] netlink: 'syz.3.1695': attribute type 5 has an invalid length. [ 288.697109][ T5709] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 288.879223][ T5709] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.899117][ T5709] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 288.918922][ T5709] usb 3-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 288.938892][ T5709] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.971715][ T5709] usb 3-1: config 0 descriptor?? [ 289.357469][ T7800] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 289.673428][ T7800] usb 6-1: unable to get BOS descriptor or descriptor too short [ 289.698052][ T7800] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 289.706773][ T7800] usb 6-1: can't read configurations, error -71 [ 291.346456][T10660] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1716'. [ 291.360417][T10660] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1716'. [ 291.369980][T10660] netlink: 6 bytes leftover after parsing attributes in process `syz.5.1716'. [ 291.434917][ T7792] usb 3-1: USB disconnect, device number 31 [ 291.893914][T10672] input: syz1 as /devices/virtual/input/input26 [ 293.637071][ T7792] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 293.801957][ T7792] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 293.839824][ T7792] usb 4-1: config 0 interface 0 has no altsetting 0 [ 293.857840][ T7792] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 293.870371][ T7792] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 293.893608][ T7792] usb 4-1: Product: syz [ 293.908581][ T7792] usb 4-1: Manufacturer: syz [ 293.920746][ T7792] usb 4-1: SerialNumber: syz [ 293.953528][ T7792] usb 4-1: config 0 descriptor?? [ 293.988470][ T7792] usb 4-1: selecting invalid altsetting 0 [ 294.008394][T10718] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1739'. [ 294.326487][ T24] usb 4-1: USB disconnect, device number 31 [ 294.326487][ C0] usb 4-1: Unable to submit urb #1: -19 at snd_usb_queue_pending_output_urbs [ 294.336253][T10707] usb 4-1: cannot submit urb 0, error -19: no device [ 294.521159][ T6222] udevd[6222]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 294.613218][T10735] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1744'. [ 294.917481][T10749] netlink: 'syz.4.1749': attribute type 10 has an invalid length. [ 294.948127][T10749] team0: Port device dummy0 added [ 294.975747][T10749] netlink: 'syz.4.1749': attribute type 10 has an invalid length. [ 295.029540][T10749] team0: Port device dummy0 removed [ 295.093707][T10749] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 295.210745][T10761] all: renamed from lo (while UP) [ 295.347069][ T5724] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 295.472625][T10770] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1757'. [ 295.521546][ T5724] usb 2-1: unable to get BOS descriptor or descriptor too short [ 295.540957][ T5724] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 295.560952][ T5724] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 295.580817][ T5724] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 295.609446][ T5724] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 295.614970][T10770] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1757'. [ 295.635911][ T5724] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 295.659617][ T5724] usb 2-1: config 1 interface 1 has no altsetting 0 [ 295.669389][ T84] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.684360][ T84] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.699332][ T5724] usb 2-1: string descriptor 0 read error: -22 [ 295.707773][ T5724] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 295.730156][ T5724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.828597][ T84] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.865152][ T84] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.446567][ T29] audit: type=1326 audit(1781387675.132:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10762 comm="syz.4.1755" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3a79d9ce59 code=0x0 [ 296.543854][T10792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1767'. [ 296.582547][T10792] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1767'. [ 297.281886][ T5724] usb 2-1: USB disconnect, device number 26 [ 297.427815][T10805] binder: 10804:10805 ioctl c0306201 200000000040 returned -14 [ 298.019730][ T7792] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 298.191565][ T7792] usb 2-1: Using ep0 maxpacket: 16 [ 298.213638][ T7792] usb 2-1: config 0 has no interfaces? [ 298.234939][ T7792] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 298.266672][ T7792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.288728][ T7792] usb 2-1: Product: syz [ 298.310291][ T7792] usb 2-1: Manufacturer: syz [ 298.315688][ T7792] usb 2-1: SerialNumber: syz [ 298.326257][ T7792] r8152-cfgselector 2-1: Unknown version 0x0000 [ 298.333545][ T7792] r8152-cfgselector 2-1: config 0 descriptor?? [ 298.375542][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.396803][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.583733][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.599389][ T7789] r8152-cfgselector 2-1: USB disconnect, device number 27 [ 298.660646][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.765326][T10826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1782'. [ 298.820419][T10826] erspan0: entered promiscuous mode [ 298.847212][T10826] macvtap1: entered promiscuous mode [ 298.864610][T10826] macvtap1: entered allmulticast mode [ 298.878620][T10826] erspan0: entered allmulticast mode [ 298.948521][ T5646] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 298.951098][T10828] erspan0: left allmulticast mode [ 298.974470][ T5646] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 298.981923][T10828] erspan0: left promiscuous mode [ 298.989925][ T5646] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 299.000229][T10828] macvtap1: left promiscuous mode [ 299.006682][T10831] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 299.015405][ T5646] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 299.015475][T10828] macvtap1: left allmulticast mode [ 299.031608][ T5646] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 299.153696][ T5632] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 299.161993][ T5632] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 299.172399][ T5632] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 299.183859][ T5632] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 299.195871][ T5632] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 299.234085][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.252872][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.464645][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.478803][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.828120][T10846] netlink: 'syz.2.1790': attribute type 2 has an invalid length. [ 299.866254][T10846] netlink: 'syz.2.1790': attribute type 2 has an invalid length. [ 300.384360][ T35] bridge_slave_0: left allmulticast mode [ 300.390586][ T35] bridge_slave_0: left promiscuous mode [ 300.396522][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.277299][ T5646] Bluetooth: hci3: command tx timeout [ 301.289760][T10844] syz.3.1787 (10844): drop_caches: 2 [ 301.296875][T10873] faux_driver vgem: [drm] Unknown color mode 3; guessing buffer size. [ 301.326437][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.366425][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.421877][ T35] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 301.451289][ T35] bond0 (unregistering): Released all slaves [ 301.757647][ T7800] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 301.839840][ T5295] 8021q: adding VLAN 0 to HW filter on device eth5 [ 301.965900][ T7800] usb 6-1: unable to get BOS descriptor or descriptor too short [ 301.979262][T10890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1800'. [ 301.994346][ T7800] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 302.021070][ T7800] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 302.031697][T10892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1800'. [ 302.044392][ T7800] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 302.068853][ T7800] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.078013][ T7800] usb 6-1: Product: syz [ 302.082662][ T7800] usb 6-1: Manufacturer: syz [ 302.090412][ T7800] usb 6-1: SerialNumber: syz [ 302.125131][ T7800] usb 6-1: selecting invalid altsetting 1 [ 302.135314][ T7800] usb 6-1: unit 6 not found! [ 302.149603][T10890] team1: entered promiscuous mode [ 302.155880][T10890] team1: entered allmulticast mode [ 302.162928][T10890] 8021q: adding VLAN 0 to HW filter on device team1 [ 302.245191][T10892] team2: entered promiscuous mode [ 302.250498][T10892] team2: entered allmulticast mode [ 302.256331][T10892] 8021q: adding VLAN 0 to HW filter on device team2 [ 302.340243][ T35] hsr_slave_0: left promiscuous mode [ 302.346869][ T35] hsr_slave_1: left promiscuous mode [ 302.363916][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.384436][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.404502][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.416323][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.442874][ T35] veth1_macvtap: left promiscuous mode [ 302.452634][ T35] veth0_macvtap: left promiscuous mode [ 302.461512][ T35] veth1_vlan: left promiscuous mode [ 302.467144][ T35] veth0_vlan: left promiscuous mode [ 302.995919][ T35] team0 (unregistering): Port device team_slave_1 removed [ 303.027875][ T35] team0 (unregistering): Port device team_slave_0 removed [ 303.137178][ T7800] usb 6-1: 2:0: failed to get current value for ch 0 (-71) [ 303.294523][ T7800] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 303.326133][ T7800] usb 6-1: USB disconnect, device number 19 [ 303.357071][ T5646] Bluetooth: hci3: command tx timeout [ 303.423235][ T5904] udevd[5904]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 303.752979][T10832] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.794128][T10832] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.829741][T10832] bridge_slave_0: entered allmulticast mode [ 303.869545][T10832] bridge_slave_0: entered promiscuous mode [ 303.899053][T10832] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.928233][T10832] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.964602][T10832] bridge_slave_1: entered allmulticast mode [ 304.029950][T10832] bridge_slave_1: entered promiscuous mode [ 304.176487][T10832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.218272][T10832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.341206][T10832] team0: Port device team_slave_0 added [ 304.369752][T10832] team0: Port device team_slave_1 added [ 304.518283][T10832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.540504][T10832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.589794][T10832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.611069][T10832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.626989][T10832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.718106][T10832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.910593][T10958] netlink: 'syz.3.1820': attribute type 13 has an invalid length. [ 305.051774][T10832] hsr_slave_0: entered promiscuous mode [ 305.070137][T10832] hsr_slave_1: entered promiscuous mode [ 305.089125][T10832] debugfs: 'hsr0' already exists in 'hsr' [ 305.108554][T10832] Cannot create hsr debugfs directory [ 305.448440][ T5646] Bluetooth: hci3: command tx timeout [ 305.461862][ T5295] 8021q: adding VLAN 0 to HW filter on device eth6 [ 306.228813][ T7800] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 306.386460][T10832] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 306.404275][ T7800] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 306.418521][T10832] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 306.426019][ T7800] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 306.438912][ T7800] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 306.448347][T10832] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 306.465491][ T7800] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 306.483007][T10832] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 306.490486][ T7800] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 306.504235][T10832] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 306.517363][ T24] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 306.525448][ T7800] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 306.546442][T10832] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 306.556199][T10832] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 306.563377][ T7800] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 306.573780][ T7800] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 306.586173][T10832] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 306.595979][ T7800] usb 3-1: Product: syz [ 306.602297][ T7800] usb 3-1: Manufacturer: syz [ 306.624727][T10991] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 306.658253][ T7800] cdc_wdm 3-1:1.0: skipping garbage [ 306.683046][ T7800] cdc_wdm 3-1:1.0: skipping garbage [ 306.690379][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 306.712566][ T24] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 306.742367][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.759803][ T7800] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 306.774426][ T24] usb 2-1: Product: syz [ 306.779227][ T7800] cdc_wdm 3-1:1.0: Unknown control protocol [ 306.788955][ T24] usb 2-1: Manufacturer: syz [ 306.804951][ T24] usb 2-1: SerialNumber: syz [ 306.823765][ T24] usb 2-1: config 0 descriptor?? [ 306.957233][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 306.964101][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 306.973386][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 306.980026][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 306.986885][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 306.993515][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 307.000486][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 307.007168][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 307.014088][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 307.020761][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 307.027732][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 307.034365][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 307.044141][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 307.050791][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 307.057782][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 307.064422][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 307.065994][ T24] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 307.071179][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 307.085775][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 307.092787][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 307.099419][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 307.115342][ T5295] 8021q: adding VLAN 0 to HW filter on device eth7 [ 307.181341][T10832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.202027][ T5694] usb 3-1: USB disconnect, device number 32 [ 307.202201][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 307.305428][T10832] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.369145][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.376524][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.461181][ T7671] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.468478][ T7671] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.517949][ T5646] Bluetooth: hci3: command tx timeout [ 307.746240][T11041] netlink: 'syz.3.1844': attribute type 10 has an invalid length. [ 307.769639][T11041] team0: Failed to send options change via netlink (err -105) [ 307.779258][T11041] team0: Port device dummy0 added [ 307.794986][T11041] netlink: 'syz.3.1844': attribute type 10 has an invalid length. [ 307.820242][T11041] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 307.833341][T11041] team0: Failed to send options change via netlink (err -105) [ 307.843095][T11041] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 307.858014][T11041] team0: Port device dummy0 removed [ 307.868654][T11041] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 307.885259][T10832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.048459][T10832] veth0_vlan: entered promiscuous mode [ 308.099829][ T24] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 308.133624][ T24] usb 2-1: USB disconnect, device number 28 [ 308.140448][T10832] veth1_vlan: entered promiscuous mode [ 308.340822][T10832] veth0_macvtap: entered promiscuous mode [ 308.400440][T10832] veth1_macvtap: entered promiscuous mode [ 308.512986][T10832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.559569][T11065] netlink: 'syz.2.1851': attribute type 1 has an invalid length. [ 308.601654][T11065] bond1: entered promiscuous mode [ 308.614396][T11065] 8021q: adding VLAN 0 to HW filter on device bond1 [ 308.640216][T10832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.676341][T11065] 8021q: adding VLAN 0 to HW filter on device bond1 [ 308.685067][T11065] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 308.700539][T11065] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 308.718325][T11065] bond1: (slave ip6gre1): making interface the new active one [ 308.727269][T11065] ip6gre1: entered promiscuous mode [ 308.734603][T11065] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 308.755055][ T5295] 8021q: adding VLAN 0 to HW filter on device eth8 [ 308.762061][ T7789] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 308.778726][ T7635] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.795156][ T7635] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.819267][ T1159] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.838090][ T1159] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.877430][ T5694] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 308.945731][ T7789] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 308.984092][ T7789] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.044880][ T7789] usb 6-1: config 0 descriptor?? [ 309.060957][ T5694] usb 4-1: Using ep0 maxpacket: 32 [ 309.087627][ T5694] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 309.102159][ T7789] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 309.111988][ T5694] usb 4-1: config 0 has no interface number 0 [ 309.143658][ T5694] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 309.165393][ T7669] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.184890][ T5694] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.211787][ T7669] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.223814][ T5694] usb 4-1: Product: syz [ 309.239658][ T5694] usb 4-1: Manufacturer: syz [ 309.255247][ T5694] usb 4-1: SerialNumber: syz [ 309.290141][ T5694] usb 4-1: config 0 descriptor?? [ 309.314849][ T5694] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 309.370012][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.391306][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.499165][ T7789] cpia1 6-1:0.0: unexpected state after lo power cmd: 00 [ 309.544105][ T5694] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 309.592553][ T5694] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 309.701024][ T7789] gspca_cpia1: usb_control_msg 01, error -32 [ 309.728799][ T7789] gspca_cpia1: usb_control_msg 01, error -71 [ 309.756018][ T7789] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 309.798464][ T5709] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 309.807446][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 6 [ 309.824118][ T7789] usb 6-1: USB disconnect, device number 20 [ 309.896388][T11094] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 309.977798][ T5709] usb 2-1: Using ep0 maxpacket: 32 [ 309.987490][ T5709] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 309.996898][ T5709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.013899][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 310.015652][ T7790] usb 4-1: USB disconnect, device number 32 [ 310.032851][ T5709] usb 2-1: config 0 descriptor?? [ 310.056334][ T5709] as10x_usb: device has been detected [ 310.071774][ T7790] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 310.086265][ T5709] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 310.097253][ T5694] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 310.108159][ T5709] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 310.130086][ T7790] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 310.155829][ T7790] quatech2 4-1:0.51: device disconnected [ 310.175540][ T5709] as10x_usb: error during firmware upload part1 [ 310.189440][ T5709] Registered device nBox DVB-T Dongle [ 310.247971][ T5709] usb 2-1: USB disconnect, device number 29 [ 310.268628][ T5694] usb 7-1: Using ep0 maxpacket: 32 [ 310.280410][ T5694] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.295010][ T5694] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.305156][ T5694] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 310.314613][ T5694] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.330714][ T5694] usb 7-1: config 0 descriptor?? [ 310.354577][ T5694] hub 7-1:0.0: USB hub found [ 310.355851][ T5709] Unregistered device nBox DVB-T Dongle [ 310.374023][ T5709] as10x_usb: device has been disconnected [ 310.558522][ T5694] hub 7-1:0.0: 1 port detected [ 310.701067][T11112] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 311.188985][ T5694] hub 7-1:0.0: activate --> -90 [ 311.306320][T11133] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.1876'. [ 311.427490][ T7800] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 311.592976][ T5709] usb 7-1: USB disconnect, device number 2 [ 311.616699][ T7800] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 311.638361][ T7800] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.655608][ T7800] usb 6-1: Product: syz [ 311.666119][ T7800] usb 6-1: Manufacturer: syz [ 311.676098][ T7800] usb 6-1: SerialNumber: syz [ 311.699976][ T7800] usb 6-1: config 0 descriptor?? [ 311.922973][ T7800] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 313.151062][ T7800] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 313.169901][ T7800] usb 6-1: USB disconnect, device number 21 [ 313.478130][T11172] xt_hashlimit: size too large, truncated to 1048576 [ 314.527039][ T7790] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 314.586152][ T7791] IPVS: starting estimator thread 0... [ 314.687386][T11198] IPVS: using max 29 ests per chain, 69600 per kthread [ 314.689045][ T7790] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.718680][ T7790] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 314.746276][ T7790] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 314.762155][ T7790] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 314.774384][ T7790] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 314.791508][ T7790] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 314.806992][ T7790] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 314.815422][ T7790] usb 4-1: Product: syz [ 314.821217][ T7790] usb 4-1: Manufacturer: syz [ 314.825881][ T7790] usb 4-1: SerialNumber: syz [ 314.834994][ T7790] usb 4-1: config 0 descriptor?? [ 315.066288][ T7790] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 315.085414][ T7790] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 315.159443][T11182] netlink: 45 bytes leftover after parsing attributes in process `syz.5.1893'. [ 315.210063][T11183] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1893'. [ 315.269975][ T7790] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 315.294490][ T7790] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 315.353544][ T7790] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 315.470999][ T7790] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 315.976676][ T29] audit: type=1326 audit(1781387694.662:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11202 comm="syz.2.1899" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f578819ce59 code=0x0 [ 316.279940][ T7790] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 316.310702][ T7790] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 316.373360][ T7790] usb 4-1: USB disconnect, device number 33 [ 317.282861][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.292950][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.562520][T11250] only policy match revision 0 supported [ 317.562544][T11250] unable to load match [ 318.202485][T11259] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 318.451401][T11266] netlink: 7 bytes leftover after parsing attributes in process `syz.6.1922'. [ 318.587028][ T7814] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 318.732056][T11272] syzkaller1: entered promiscuous mode [ 318.749306][T11272] syzkaller1: entered allmulticast mode [ 318.759425][ T7814] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.791651][ T7814] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 318.835363][ T7814] usb 6-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40 [ 318.882164][ T7814] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.905298][ T7814] usb 6-1: Product: syz [ 318.919050][ T7814] usb 6-1: Manufacturer: syz [ 318.936031][ T7814] usb 6-1: SerialNumber: syz [ 319.918706][ T7814] usb 6-1: USB disconnect, device number 22 [ 319.996737][ T5904] udevd[5904]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 320.790896][T11308] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1937'. [ 321.553835][T11336] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1946'. [ 321.583877][T11336] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1946'. [ 321.627611][ T7800] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 321.809166][ T7800] usb 2-1: Using ep0 maxpacket: 16 [ 321.860308][ T7800] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.890108][ T7800] usb 2-1: config 0 interface 0 has no altsetting 0 [ 321.924384][ T7800] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 321.946305][ T7800] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.970838][ T7800] usb 2-1: Product: syz [ 321.988642][ T7800] usb 2-1: Manufacturer: syz [ 322.003158][ T7800] usb 2-1: SerialNumber: syz [ 322.040793][ T7800] usb 2-1: config 0 descriptor?? [ 322.070822][ T7800] hub 2-1:0.0: bad descriptor, ignoring hub [ 322.104807][ T7800] hub 2-1:0.0: probe with driver hub failed with error -5 [ 322.129268][ T7800] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 322.143118][ T1159] usb 2-1: Failed to submit usb control message: -71 [ 322.150653][ T1159] usb 2-1: unable to send the bmi data to the device: -71 [ 322.159207][ T1159] usb 2-1: unable to get target info from device [ 322.167444][ T1159] usb 2-1: could not get target info (-71) [ 322.173489][ T1159] usb 2-1: could not probe fw (-71) [ 322.327111][ T7814] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 322.498719][ T7814] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 322.513179][ T7814] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 322.537912][ T7814] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 322.548147][ T7814] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 322.577090][ T7814] usb 6-1: SerialNumber: syz [ 322.817591][ T7791] usb 2-1: USB disconnect, device number 30 [ 322.821167][ T7814] usb 6-1: 0:2 : does not exist [ 322.918309][ T5709] IPVS: starting estimator thread 0... [ 323.039293][T11375] IPVS: using max 24 ests per chain, 57600 per kthread [ 323.051684][ T7814] usb 6-1: USB disconnect, device number 23 [ 323.204183][ T5904] udevd[5904]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 324.034219][T11404] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1964'. [ 325.195548][T11429] sctp: [Deprecated]: syz.2.1968 (pid 11429) Use of struct sctp_assoc_value in delayed_ack socket option. [ 325.195548][T11429] Use struct sctp_sack_info instead [ 325.756790][T11450] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1973'. [ 325.915095][T11457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1974'. [ 326.567603][ T5694] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 326.739061][ T5694] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.790583][ T5694] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.831214][ T5694] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 326.858724][ T5694] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.895686][ T5694] usb 6-1: config 0 descriptor?? [ 327.368128][ T5694] hid_parser_main: 5 callbacks suppressed [ 327.368156][ T5694] cp2112 0003:10C4:EA90.0020: unknown main item tag 0x0 [ 327.422115][ T5694] cp2112 0003:10C4:EA90.0020: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 327.620063][ T5694] cp2112 0003:10C4:EA90.0020: error requesting version [ 327.643779][ T5694] cp2112 0003:10C4:EA90.0020: probe with driver cp2112 failed with error -32 [ 327.901309][ T5694] usb 6-1: USB disconnect, device number 24 [ 328.714617][T11524] loop5: detected capacity change from 0 to 1631 [ 330.400641][T11562] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 331.017145][ T7814] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 331.177110][ T7814] usb 3-1: Using ep0 maxpacket: 8 [ 331.198115][ T7814] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.224624][ T7814] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 331.243958][ T7814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.273639][ T7814] usb 3-1: config 0 descriptor?? [ 331.301346][ T7814] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 331.320739][T11571] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2014'. [ 331.332369][T11571] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2014'. [ 331.764068][T11588] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.2020'. [ 332.762289][ T7791] usb 3-1: USB disconnect, device number 33 [ 334.395538][T11620] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2033'. [ 334.411175][T11620] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2033'. [ 334.817086][ T7791] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 334.853777][T11638] team0: entered allmulticast mode [ 334.870259][T11638] team_slave_0: entered allmulticast mode [ 334.887269][T11638] team_slave_1: entered allmulticast mode [ 334.936140][T11638] team0: left allmulticast mode [ 334.942267][T11638] team_slave_0: left allmulticast mode [ 334.948627][T11638] team_slave_1: left allmulticast mode [ 334.989889][ T7791] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x1E, changing to 0xE [ 335.024913][ T7791] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 39509, setting to 1024 [ 335.061452][ T7791] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 1024 [ 335.101591][ T7791] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 335.123110][ T7791] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.144494][ T7791] usb 7-1: Product: syz [ 335.153760][ T7791] usb 7-1: Manufacturer: syz [ 335.162546][ T7791] usb 7-1: SerialNumber: syz [ 335.185809][T11629] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 335.717501][ T7814] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 335.887019][ T7814] usb 6-1: Using ep0 maxpacket: 32 [ 335.898795][ T7814] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 335.919306][ T7814] usb 6-1: config 0 has no interface number 0 [ 335.925569][ T5709] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 335.928017][ T7814] usb 6-1: config 0 interface 184 has no altsetting 0 [ 335.960463][ T7814] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 335.977458][ T7814] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.987271][ T7814] usb 6-1: Product: syz [ 335.997569][ T7814] usb 6-1: Manufacturer: syz [ 336.009661][ T7814] usb 6-1: SerialNumber: syz [ 336.034804][ T7814] usb 6-1: config 0 descriptor?? [ 336.095863][ T5709] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 336.116959][ T5709] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 336.151763][ T5709] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 336.197276][ T5709] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 336.237871][ T7791] cdc_ncm 7-1:1.0: bind() failure [ 336.246319][ T5709] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 336.258701][T11671] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2054'. [ 336.276298][ T7791] cdc_ncm 7-1:1.1: probe with driver cdc_ncm failed with error -71 [ 336.292528][ T5709] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 336.328374][T11671] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2054'. [ 336.333053][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 336.347757][ T7791] cdc_mbim 7-1:1.1: probe with driver cdc_mbim failed with error -71 [ 336.358895][ T5709] usb 4-1: Product: syz [ 336.363787][ T7791] usbtest 7-1:1.1: probe with driver usbtest failed with error -71 [ 336.373113][ T5709] usb 4-1: Manufacturer: syz [ 336.404702][ T7791] usb 7-1: USB disconnect, device number 3 [ 336.444362][ T5709] cdc_wdm 4-1:1.0: skipping garbage [ 336.450641][ T5709] cdc_wdm 4-1:1.0: skipping garbage [ 336.492296][ T5709] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 336.522233][ T5709] cdc_wdm 4-1:1.0: Unknown control protocol [ 336.688847][ T29] audit: type=1326 audit(1781387715.382:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11679 comm="syz.1.2058" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba67b9ce59 code=0x7ffc0000 [ 336.760821][ T29] audit: type=1326 audit(1781387715.382:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11679 comm="syz.1.2058" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba67b9ce59 code=0x7ffc0000 [ 336.820712][ T29] audit: type=1326 audit(1781387715.382:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11679 comm="syz.1.2058" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba67b9ce59 code=0x7ffc0000 [ 336.853129][ T29] audit: type=1326 audit(1781387715.382:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11679 comm="syz.1.2058" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba67b9ce59 code=0x7ffc0000 [ 336.885015][T11682] gretap0: entered promiscuous mode [ 336.918372][ T29] audit: type=1326 audit(1781387715.382:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11679 comm="syz.1.2058" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fba67b9ce59 code=0x7ffc0000 [ 336.943439][T11682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2059'. [ 336.969708][T11682] gretap0: left promiscuous mode [ 337.003721][ T29] audit: type=1326 audit(1781387715.382:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11679 comm="syz.1.2058" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba67b9ce59 code=0x7ffc0000 [ 337.081633][ T29] audit: type=1326 audit(1781387715.382:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11679 comm="syz.1.2058" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba67b9ce59 code=0x7ffc0000 [ 337.136253][ T7814] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 337.183377][ T29] audit: type=1326 audit(1781387715.382:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11679 comm="syz.1.2058" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba67b9ce59 code=0x7ffc0000 [ 337.200939][ T7814] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 337.270097][ T29] audit: type=1326 audit(1781387715.382:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11679 comm="syz.1.2058" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fba67b9ce59 code=0x7ffc0000 [ 337.305424][ T29] audit: type=1326 audit(1781387715.382:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11679 comm="syz.1.2058" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba67b9ce59 code=0x7ffc0000 [ 337.456777][ T5724] usb 4-1: USB disconnect, device number 34 [ 337.466513][ T7814] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 337.490981][ T7814] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 337.527488][ T7814] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 337.549489][ T7814] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 337.570089][ T7814] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 337.601784][ T7814] usb 6-1: USB disconnect, device number 25 [ 338.707031][ T7814] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 338.867855][ T7814] usb 2-1: Using ep0 maxpacket: 8 [ 338.886812][ T7814] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 338.917949][ T7814] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 338.946356][ T7814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.982194][ T7814] usb 2-1: config 0 descriptor?? [ 339.011650][T11742] netlink: 'syz.2.2083': attribute type 13 has an invalid length. [ 339.137192][ T5709] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 339.268460][ T7814] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 339.316089][ T7814] usb 2-1: USB disconnect, device number 31 [ 339.333746][ T5709] usb 6-1: Using ep0 maxpacket: 16 [ 339.352199][ T5709] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 339.382555][ T5709] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 339.413050][ T5709] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 339.431402][ T5709] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.453041][ T5709] usb 6-1: Product: syz [ 339.461520][ T5709] usb 6-1: Manufacturer: syz [ 339.478192][ T5709] usb 6-1: SerialNumber: syz [ 339.513875][ T5709] usb 6-1: 0:2 : does not exist [ 339.712450][ T5709] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 339.850042][ T5709] usb 6-1: USB disconnect, device number 26 [ 340.004405][ T5904] udevd[5904]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 341.239225][ T7791] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 341.308636][T11785] loop5: detected capacity change from 0 to 2640 [ 341.321936][T11785] Buffer I/O error on dev loop5, logical block 0, async page read [ 341.332062][T11785] Buffer I/O error on dev loop5, logical block 0, async page read [ 341.340422][T11785] Buffer I/O error on dev loop5, logical block 0, async page read [ 341.348869][T11785] Buffer I/O error on dev loop5, logical block 0, async page read [ 341.356883][T11785] Buffer I/O error on dev loop5, logical block 0, async page read [ 341.367716][T11785] Buffer I/O error on dev loop5, logical block 0, async page read [ 341.375852][T11785] Buffer I/O error on dev loop5, logical block 0, async page read [ 341.384439][T11785] Buffer I/O error on dev loop5, logical block 0, async page read [ 341.393453][T11785] ldm_validate_partition_table(): Disk read failed. [ 341.408454][ T7791] usb 6-1: Using ep0 maxpacket: 16 [ 341.419190][T11785] Buffer I/O error on dev loop5, logical block 3, async page read [ 341.441033][ T7791] usb 6-1: config 0 has no interfaces? [ 341.453040][ T7791] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 341.468024][T11790] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 341.477235][ T7791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.493335][ T7791] usb 6-1: Product: syz [ 341.504329][T11785] loop5: unable to read partition table [ 341.513155][ T7791] usb 6-1: Manufacturer: syz [ 341.535204][ T7791] usb 6-1: SerialNumber: syz [ 341.562293][T11785] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 341.578340][ T7791] usb 6-1: config 0 descriptor?? [ 342.004264][T11777] syzkaller1: entered promiscuous mode [ 342.022660][T11777] syzkaller1: entered allmulticast mode [ 342.212713][ T5709] usb 6-1: USB disconnect, device number 27 [ 342.235608][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 342.235630][ T29] audit: type=1804 audit(1781387720.922:583): pid=11808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2107" name="/newroot/436/file1" dev="tmpfs" ino=2251 res=1 errno=0 [ 342.536999][ T7791] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 342.697158][ T7791] usb 3-1: Using ep0 maxpacket: 16 [ 342.710466][ T7791] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.749214][ T7791] usb 3-1: config 0 interface 0 has no altsetting 0 [ 342.772527][ T7791] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 342.808338][ T7791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.859698][ T7791] usb 3-1: config 0 descriptor?? [ 343.265733][T11827] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 343.277434][ T5709] syzkaller1: tun_net_xmit 90 [ 343.289862][T11827] syzkaller1: Linktype set failed because interface is up [ 343.352914][ T7791] nzxt-smart2 0003:1E71:2009.0021: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 343.429090][T11831] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2118'. [ 343.795351][ T7791] usb 3-1: USB disconnect, device number 34 [ 344.267204][ T7814] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 344.287256][ T5694] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 344.417975][ T7814] usb 2-1: Using ep0 maxpacket: 32 [ 344.432764][ T7814] usb 2-1: unable to get BOS descriptor or descriptor too short [ 344.452105][T11857] vlan1: entered allmulticast mode [ 344.458491][ T5694] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 344.459103][T11857] veth0_vlan: entered allmulticast mode [ 344.485964][ T7814] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 344.502799][ T5694] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.504181][T11857] gretap1: left promiscuous mode [ 344.518576][ T7814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.526611][T11857] vxlan0: left promiscuous mode [ 344.527492][T11857] bond1: left promiscuous mode [ 344.537789][ T5694] usb 6-1: config 0 descriptor?? [ 344.543390][T11857] ip6gre1: left promiscuous mode [ 344.555974][ T7814] usb 2-1: Product: syz [ 344.563573][ T5694] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 344.572887][ T7814] usb 2-1: Manufacturer: syz [ 344.583027][ T7814] usb 2-1: SerialNumber: syz [ 344.613788][ T7814] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 344.842320][ T7814] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 344.864888][ T7814] usb 2-1: 3:0: failed to get current value for ch 0 (-22) [ 344.911582][ T7814] usb 2-1: 3:0: cannot get min/max values for control 2 (id 3) [ 344.931176][ T7814] usb 2-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 344.941600][ T7814] usb 2-1: [3] FU [Mic Playback Volume] ch = 1, val = 0/1/1 [ 344.962087][ T7814] usb 2-1: 3:0: cannot get min/max values for control 3 (id 3) [ 344.989304][ T7814] usb 2-1: 3:0: cannot get min/max values for control 4 (id 3) [ 345.061245][ T7814] usb 2-1: 3:0: cannot get min/max values for control 3 (id 3) [ 345.108434][ T7814] usb 2-1: 3:0: cannot get min/max values for control 2 (id 3) [ 345.196548][ T7814] usb 2-1: USB disconnect, device number 32 [ 345.282042][ T5904] udevd[5904]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 345.664973][T11875] netlink: 'syz.1.2134': attribute type 1 has an invalid length. [ 345.799742][ T5694] usb 6-1: USB disconnect, device number 28 [ 345.823189][T11875] bond7: entered promiscuous mode [ 345.828818][T11875] 8021q: adding VLAN 0 to HW filter on device bond7 [ 346.059753][T11878] 8021q: adding VLAN 0 to HW filter on device bond7 [ 346.087696][T11878] bond7: (slave vti1): The slave device specified does not support setting the MAC address [ 346.129089][T11878] bond7: (slave vti1): Setting fail_over_mac to active for active-backup mode [ 346.220219][T11878] bond7: (slave vti1): making interface the new active one [ 346.230171][T11878] vti1: entered promiscuous mode [ 346.236809][T11878] bond7: (slave vti1): Enslaving as an active interface with an up link [ 346.507412][ T5694] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 346.667901][ T5694] usb 7-1: Using ep0 maxpacket: 8 [ 346.694703][ T5694] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 346.722221][ T5694] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 346.734019][ T5694] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 346.752538][ T5694] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 346.763567][ T5694] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 346.778348][ T5694] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 346.787584][ T5694] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.987059][ T7814] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 347.015068][ T5694] usb 7-1: GET_CAPABILITIES returned 0 [ 347.027818][ T5694] usbtmc 7-1:16.0: can't read capabilities [ 347.139270][ T7814] usb 6-1: Using ep0 maxpacket: 8 [ 347.158897][ T7814] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 347.174099][ T7814] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 347.185378][ T7814] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 347.195509][ T7814] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 347.216238][ T7814] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 347.230176][ T7814] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 347.239369][ T7814] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.254919][ T7791] usb 7-1: USB disconnect, device number 4 [ 347.447062][ T5709] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 347.471835][ T7814] usb 6-1: usb_control_msg returned -32 [ 347.487073][ T7814] usbtmc 6-1:16.0: can't read capabilities [ 347.612119][ T5709] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.634907][ T5709] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 347.657332][ T5709] usb 3-1: config 0 interface 0 has no altsetting 0 [ 347.664121][ T5709] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 347.682098][ T5709] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.702202][ T5709] usb 3-1: config 0 descriptor?? [ 347.727685][ T5709] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 347.748655][ T5709] dvb-usb: bulk message failed: -22 (3/0) [ 347.774169][ T5709] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 347.798812][ T5709] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 347.818670][ T5709] usb 3-1: media controller created [ 347.828254][ T7791] usb 6-1: USB disconnect, device number 29 [ 347.829028][T11905] usbtmc 6-1:16.0: usb_control_msg returned -71 [ 347.861181][T11913] usbtmc 6-1:16.0: send_request_dev_dep_msg_in returned -19 [ 347.871736][ T5709] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 347.923454][ T5709] dvb-usb: bulk message failed: -22 (6/0) [ 347.939578][T11907] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.2146'. [ 347.959158][ T5709] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 347.986716][ T5709] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input27 [ 348.010447][ T5709] dvb-usb: schedule remote query interval to 150 msecs. [ 348.019931][ T5709] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 348.064904][ T5709] usb 3-1: USB disconnect, device number 35 [ 348.179602][ T5709] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 349.017032][ T7814] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 349.186990][ T7814] usb 6-1: Using ep0 maxpacket: 32 [ 349.201156][ T7814] usb 6-1: config index 0 descriptor too short (expected 3659, got 75) [ 349.214067][ T7814] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 349.238158][ T7814] usb 6-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 349.253399][ T7814] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.282344][ T7814] usb 6-1: Product: syz [ 349.295070][ T7814] usb 6-1: Manufacturer: syz [ 349.311710][ T7814] usb 6-1: SerialNumber: syz [ 349.335197][ T7814] usb 6-1: config 0 descriptor?? [ 349.356387][ T7814] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 349.482479][T11943] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 349.691371][T11947] gre1: entered promiscuous mode [ 350.806415][ T7814] gspca_sunplus: reg_w_1 err -71 [ 350.828855][ T7814] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 350.872485][ T7814] usb 6-1: USB disconnect, device number 30 [ 351.827009][ T7814] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 351.874330][T12004] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 351.998898][ T7814] usb 4-1: Using ep0 maxpacket: 8 [ 352.006099][ T7814] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.026526][ T7814] usb 4-1: config 0 has no interfaces? [ 352.035653][ T7814] usb 4-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 352.047736][ T7814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.066624][ T7814] usb 4-1: config 0 descriptor?? [ 352.079487][ T5709] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 352.257004][ T5709] usb 6-1: Using ep0 maxpacket: 8 [ 352.270705][ T5709] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 352.271214][T12009] kvm: apic: phys broadcast and lowest prio [ 352.289465][ T5709] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 352.309463][ T7814] usb 4-1: USB disconnect, device number 35 [ 352.311293][ T5709] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 352.366317][ T5709] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 352.412852][ T5709] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 352.425907][ T5709] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.582943][T12023] loop6: detected capacity change from 0 to 2640 [ 352.594789][T12023] buffer_io_error: 329 callbacks suppressed [ 352.594875][T12023] Buffer I/O error on dev loop6, logical block 0, async page read [ 352.617705][T12023] Buffer I/O error on dev loop6, logical block 0, async page read [ 352.625980][T12023] Buffer I/O error on dev loop6, logical block 0, async page read [ 352.636470][T12023] Buffer I/O error on dev loop6, logical block 0, async page read [ 352.655859][T12023] Buffer I/O error on dev loop6, logical block 0, async page read [ 352.661243][ T5709] usb 6-1: GET_CAPABILITIES returned 0 [ 352.664521][T12023] Buffer I/O error on dev loop6, logical block 0, async page read [ 352.678956][T12023] Buffer I/O error on dev loop6, logical block 0, async page read [ 352.688366][T12023] Buffer I/O error on dev loop6, logical block 0, async page read [ 352.690644][ T5709] usbtmc 6-1:16.0: can't read capabilities [ 352.712751][T12023] ldm_validate_partition_table(): Disk read failed. [ 352.748463][T12023] Buffer I/O error on dev loop6, logical block 0, async page read [ 352.793940][T12023] Buffer I/O error on dev loop6, logical block 0, async page read [ 352.819462][T12023] Dev loop6: unable to read RDB block 0 [ 352.833245][T12023] loop6: unable to read partition table [ 352.875339][T12023] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 352.882798][T12005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.929794][T12005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.955068][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 352.994449][ T5709] usb 6-1: USB disconnect, device number 31 [ 354.115834][T12072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2203'. [ 354.127013][ T7814] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 354.160818][T12072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2203'. [ 354.178136][T12072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2203'. [ 354.197603][T12072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2203'. [ 354.218267][T12072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2203'. [ 354.304684][ T7814] usb 3-1: Using ep0 maxpacket: 32 [ 354.323225][ T7814] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.358577][ T7814] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.388512][ T7814] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 354.417287][ T7814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.439835][ T7814] usb 3-1: config 0 descriptor?? [ 354.469377][ T7814] hub 3-1:0.0: USB hub found [ 354.703138][ T7814] hub 3-1:0.0: 1 port detected [ 355.696617][T12093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2211'. [ 355.717140][T12093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2211'. [ 355.746101][T12093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2211'. [ 355.768515][T12093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2211'. [ 355.782941][ T7814] hub 3-1:0.0: hub_hub_status failed (err = -32) [ 355.811482][ T7814] hub 3-1:0.0: config failed, can't get hub status (err -32) [ 355.897922][ T7814] usbhid 3-1:0.0: can't add hid device: -32 [ 355.918262][ T7814] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 356.218211][T12100] netlink: 'syz.3.2215': attribute type 13 has an invalid length. [ 356.498957][ T5709] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 356.517193][T12113] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2219'. [ 356.529464][T12113] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.539059][T12113] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.603829][T12114] syzkaller1: entered promiscuous mode [ 356.621546][T12114] syzkaller1: entered allmulticast mode [ 356.669579][ T5709] usb 7-1: Using ep0 maxpacket: 32 [ 356.682803][ T5709] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.704706][ T5709] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.717348][T12115] ------------[ cut here ]------------ [ 356.723093][ T5709] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 356.723650][T12115] UBSAN: shift-out-of-bounds in ./include/net/xfrm.h:970:23 [ 356.740978][T12115] shift exponent -96 is negative [ 356.741152][ T5709] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.746001][T12115] CPU: 1 UID: 0 PID: 12115 Comm: syz.5.2221 Tainted: G L syzkaller #0 PREEMPT(full) [ 356.746032][T12115] Tainted: [L]=SOFTLOCKUP [ 356.746040][T12115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 356.746052][T12115] Call Trace: [ 356.746106][T12115] [ 356.746146][T12115] dump_stack_lvl+0xe8/0x150 [ 356.746273][T12115] ubsan_epilogue+0xa/0x30 [ 356.746310][T12115] __ubsan_handle_shift_out_of_bounds+0x36d/0x400 [ 356.746406][T12115] ? nf_nat_decode_session+0x21/0x260 [ 356.746516][T12115] ? nf_nat_decode_session+0x21/0x260 [ 356.746543][T12115] xfrm_selector_match+0xd5c/0x1140 [ 356.746568][T12115] __xfrm_policy_check+0x5d1/0x37b0 [ 356.746608][T12115] ? ktime_get+0x45/0x220 [ 356.746660][T12115] ? ktime_get+0x45/0x220 [ 356.746687][T12115] ? __pfx___xfrm_policy_check+0x10/0x10 [ 356.746708][T12115] ? ktime_get+0x1f5/0x220 [ 356.746735][T12115] ? lapic_next_event+0x11/0x20 [ 356.746766][T12115] ? clockevents_program_event+0x491/0x630 [ 356.746809][T12115] ? __hrtimer_rearm_deferred+0x99/0x440 [ 356.746835][T12115] ? rcu_is_watching+0x15/0xb0 [ 356.746864][T12115] ? trace_contention_end+0x3b/0x160 [ 356.746902][T12115] ? __pv_queued_spin_lock_slowpath+0x2e3/0xbc0 [ 356.747030][T12115] ? __lock_acquire+0x683/0x2cd0 [ 356.747053][T12115] ? __lock_acquire+0x683/0x2cd0 [ 356.747079][T12115] ? xfrm_input_state_lookup+0xcf/0xa60 [ 356.747135][T12115] xfrm_policy_check+0x475/0x880 [ 356.747202][T12115] ? lock_acquire+0x106/0x350 [ 356.747224][T12115] vti_rcv_cb+0x3b6/0x770 [ 356.747252][T12115] tunnel4_rcv_cb+0xd6/0x230 [ 356.747285][T12115] xfrm_rcv_cb+0x1c7/0x310 [ 356.747308][T12115] ? xfrm_rcv_cb+0x76/0x310 [ 356.747343][T12115] xfrm_input+0x4738/0x7760 [ 356.747392][T12115] vti_input+0x21f/0x330 [ 356.747417][T12115] ? __pfx_vti_input+0x10/0x10 [ 356.747451][T12115] tunnel4_rcv+0xdd/0x2d0 [ 356.747478][T12115] ? __pfx_tunnel4_rcv+0x10/0x10 [ 356.747505][T12115] ip_protocol_deliver_rcu+0x2dc/0x440 [ 356.747580][T12115] ? ip_local_deliver_finish+0x2ae/0x6f0 [ 356.747607][T12115] ip_local_deliver_finish+0x3bb/0x6f0 [ 356.747641][T12115] NF_HOOK+0x336/0x3c0 [ 356.747665][T12115] ? __pfx_ipt_do_table+0x10/0x10 [ 356.747710][T12115] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 356.747735][T12115] ? NF_HOOK+0x9e/0x3c0 [ 356.747758][T12115] ? __pfx_NF_HOOK+0x10/0x10 [ 356.747785][T12115] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 356.747816][T12115] ? ip_local_deliver+0x113/0x190 [ 356.747844][T12115] NF_HOOK+0x336/0x3c0 [ 356.747871][T12115] ? __pfx_ip_rcv_finish+0x10/0x10 [ 356.747895][T12115] ? NF_HOOK+0x9e/0x3c0 [ 356.747919][T12115] ? __pfx_NF_HOOK+0x10/0x10 [ 356.747945][T12115] ? __pfx_ip_rcv_finish+0x10/0x10 [ 356.747977][T12115] ? netif_receive_skb+0x102/0xbf0 [ 356.748048][T12115] ? __pfx_ip_rcv+0x10/0x10 [ 356.748071][T12115] netif_receive_skb+0x45b/0xbf0 [ 356.748100][T12115] ? __pfx_netif_receive_skb+0x10/0x10 [ 356.748123][T12115] ? __pfx__copy_from_iter+0x10/0x10 [ 356.748183][T12115] ? tun_rx_batched+0x185/0x790 [ 356.748251][T12115] tun_rx_batched+0x1de/0x790 [ 356.748277][T12115] ? __pfx_tun_rx_batched+0x10/0x10 [ 356.748296][T12115] ? tun_get_user+0x26ca/0x4350 [ 356.748349][T12115] ? tun_get_user+0x26ca/0x4350 [ 356.748378][T12115] ? tun_get_user+0x2373/0x4350 [ 356.748406][T12115] ? tun_get_user+0x2373/0x4350 [ 356.748432][T12115] ? __local_bh_enable_ip+0xd0/0x130 [ 356.748464][T12115] tun_get_user+0x2b04/0x4350 [ 356.748507][T12115] ? tun_get_user+0x26ca/0x4350 [ 356.748532][T12115] ? aa_file_perm+0x18b/0x15f0 [ 356.748602][T12115] ? aa_file_perm+0x4ed/0x15f0 [ 356.748620][T12115] ? __pfx_tun_get_user+0x10/0x10 [ 356.748650][T12115] ? __lock_acquire+0x683/0x2cd0 [ 356.748675][T12115] ? __pfx___futex_wait+0x10/0x10 [ 356.748707][T12115] ? ref_tracker_alloc+0x341/0x4b0 [ 356.748731][T12115] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 356.748754][T12115] ? tun_get+0x1c/0x2f0 [ 356.748782][T12115] ? tun_get+0x1c/0x2f0 [ 356.748816][T12115] ? tun_get+0x1c/0x2f0 [ 356.748844][T12115] ? tun_get+0x1c/0x2f0 [ 356.748877][T12115] tun_chr_write_iter+0x113/0x200 [ 356.748908][T12115] vfs_write+0x612/0xba0 [ 356.748971][T12115] ? __pfx_vfs_write+0x10/0x10 [ 356.749008][T12115] ? __fget_files+0x2a/0x420 [ 356.749046][T12115] ksys_write+0x150/0x270 [ 356.749074][T12115] ? __pfx_ksys_write+0x10/0x10 [ 356.749109][T12115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.749152][T12115] do_syscall_64+0x174/0x580 [ 356.749203][T12115] ? trace_irq_disable+0x3b/0x140 [ 356.749243][T12115] ? clear_bhb_loop+0x40/0x90 [ 356.749267][T12115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.749288][T12115] RIP: 0033:0x7fca8819ce59 [ 356.749338][T12115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.749376][T12115] RSP: 002b:00007fca890f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 356.749425][T12115] RAX: ffffffffffffffda RBX: 00007fca88416090 RCX: 00007fca8819ce59 [ 356.749439][T12115] RDX: 0000000000000fce RSI: 0000200000000840 RDI: 0000000000000003 [ 356.749451][T12115] RBP: 00007fca88232d6f R08: 0000000000000000 R09: 0000000000000000 [ 356.749462][T12115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.749473][T12115] R13: 00007fca88416128 R14: 00007fca88416090 R15: 00007fca8853fa48 [ 356.749506][T12115] [ 356.749575][T12115] ---[ end trace ]--- [ 356.866010][ T5709] usb 7-1: config 0 descriptor?? [ 356.868319][T12115] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 356.868343][T12115] CPU: 1 UID: 0 PID: 12115 Comm: syz.5.2221 Tainted: G L syzkaller #0 PREEMPT(full) [ 356.868372][T12115] Tainted: [L]=SOFTLOCKUP [ 356.868381][T12115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 356.868395][T12115] Call Trace: [ 356.868405][T12115] [ 356.868415][T12115] vpanic+0x56c/0xa60 [ 356.868453][T12115] ? __pfx_vpanic+0x10/0x10 [ 356.868480][T12115] ? irqentry_exit+0x218/0x8e0 [ 356.868511][T12115] panic+0xc5/0xd0 [ 356.868535][T12115] ? __pfx_panic+0x10/0x10 [ 356.868563][T12115] ? __pfx__printk+0x10/0x10 [ 356.868599][T12115] check_panic_on_warn+0x89/0xb0 [ 356.868628][T12115] __ubsan_handle_shift_out_of_bounds+0x36d/0x400 [ 356.868661][T12115] ? nf_nat_decode_session+0x21/0x260 [ 356.868694][T12115] ? nf_nat_decode_session+0x21/0x260 [ 356.868722][T12115] xfrm_selector_match+0xd5c/0x1140 [ 356.868747][T12115] __xfrm_policy_check+0x5d1/0x37b0 [ 356.868787][T12115] ? ktime_get+0x45/0x220 [ 356.868818][T12115] ? ktime_get+0x45/0x220 [ 356.868846][T12115] ? __pfx___xfrm_policy_check+0x10/0x10 [ 356.868869][T12115] ? ktime_get+0x1f5/0x220 [ 356.868899][T12115] ? lapic_next_event+0x11/0x20 [ 356.868920][T12115] ? clockevents_program_event+0x491/0x630 [ 356.868943][T12115] ? __hrtimer_rearm_deferred+0x99/0x440 [ 356.868971][T12115] ? rcu_is_watching+0x15/0xb0 [ 356.868994][T12115] ? trace_contention_end+0x3b/0x160 [ 356.869022][T12115] ? __pv_queued_spin_lock_slowpath+0x2e3/0xbc0 [ 356.869076][T12115] ? __lock_acquire+0x683/0x2cd0 [ 356.869100][T12115] ? __lock_acquire+0x683/0x2cd0 [ 356.869127][T12115] ? xfrm_input_state_lookup+0xcf/0xa60 [ 356.869165][T12115] xfrm_policy_check+0x475/0x880 [ 356.869199][T12115] ? lock_acquire+0x106/0x350 [ 356.869223][T12115] vti_rcv_cb+0x3b6/0x770 [ 356.869251][T12115] tunnel4_rcv_cb+0xd6/0x230 [ 356.869284][T12115] xfrm_rcv_cb+0x1c7/0x310 [ 356.869309][T12115] ? xfrm_rcv_cb+0x76/0x310 [ 356.869337][T12115] xfrm_input+0x4738/0x7760 [ 356.869386][T12115] vti_input+0x21f/0x330 [ 356.869412][T12115] ? __pfx_vti_input+0x10/0x10 [ 356.869448][T12115] tunnel4_rcv+0xdd/0x2d0 [ 356.869477][T12115] ? __pfx_tunnel4_rcv+0x10/0x10 [ 356.869507][T12115] ip_protocol_deliver_rcu+0x2dc/0x440 [ 356.869536][T12115] ? ip_local_deliver_finish+0x2ae/0x6f0 [ 356.869564][T12115] ip_local_deliver_finish+0x3bb/0x6f0 [ 356.869598][T12115] NF_HOOK+0x336/0x3c0 [ 356.869624][T12115] ? __pfx_ipt_do_table+0x10/0x10 [ 356.869647][T12115] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 356.869673][T12115] ? NF_HOOK+0x9e/0x3c0 [ 356.869698][T12115] ? __pfx_NF_HOOK+0x10/0x10 [ 356.869727][T12115] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 356.869760][T12115] ? ip_local_deliver+0x113/0x190 [ 356.869790][T12115] NF_HOOK+0x336/0x3c0 [ 356.869818][T12115] ? __pfx_ip_rcv_finish+0x10/0x10 [ 356.869843][T12115] ? NF_HOOK+0x9e/0x3c0 [ 356.869868][T12115] ? __pfx_NF_HOOK+0x10/0x10 [ 356.869896][T12115] ? __pfx_ip_rcv_finish+0x10/0x10 [ 356.869929][T12115] ? netif_receive_skb+0x102/0xbf0 [ 356.869952][T12115] ? __pfx_ip_rcv+0x10/0x10 [ 356.869978][T12115] netif_receive_skb+0x45b/0xbf0 [ 356.870007][T12115] ? __pfx_netif_receive_skb+0x10/0x10 [ 356.870030][T12115] ? __pfx__copy_from_iter+0x10/0x10 [ 356.870054][T12115] ? tun_rx_batched+0x185/0x790 [ 356.870077][T12115] tun_rx_batched+0x1de/0x790 [ 356.870102][T12115] ? __pfx_tun_rx_batched+0x10/0x10 [ 356.870121][T12115] ? tun_get_user+0x26ca/0x4350 [ 356.870152][T12115] ? tun_get_user+0x26ca/0x4350 [ 356.870189][T12115] ? tun_get_user+0x2373/0x4350 [ 356.870219][T12115] ? tun_get_user+0x2373/0x4350 [ 356.870248][T12115] ? __local_bh_enable_ip+0xd0/0x130 [ 356.870273][T12115] tun_get_user+0x2b04/0x4350 [ 356.870317][T12115] ? tun_get_user+0x26ca/0x4350 [ 356.870344][T12115] ? aa_file_perm+0x18b/0x15f0 [ 356.870368][T12115] ? aa_file_perm+0x4ed/0x15f0 [ 356.870386][T12115] ? __pfx_tun_get_user+0x10/0x10 [ 356.870418][T12115] ? __lock_acquire+0x683/0x2cd0 [ 356.870442][T12115] ? __pfx___futex_wait+0x10/0x10 [ 356.870477][T12115] ? ref_tracker_alloc+0x341/0x4b0 [ 356.870503][T12115] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 356.870527][T12115] ? tun_get+0x1c/0x2f0 [ 356.870556][T12115] ? tun_get+0x1c/0x2f0 [ 356.870590][T12115] ? tun_get+0x1c/0x2f0 [ 356.870618][T12115] ? tun_get+0x1c/0x2f0 [ 356.870652][T12115] tun_chr_write_iter+0x113/0x200 [ 356.870685][T12115] vfs_write+0x612/0xba0 [ 356.870722][T12115] ? __pfx_vfs_write+0x10/0x10 [ 356.870760][T12115] ? __fget_files+0x2a/0x420 [ 356.870792][T12115] ksys_write+0x150/0x270 [ 356.870822][T12115] ? __pfx_ksys_write+0x10/0x10 [ 356.870858][T12115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.870880][T12115] do_syscall_64+0x174/0x580 [ 356.870898][T12115] ? trace_irq_disable+0x3b/0x140 [ 356.870927][T12115] ? clear_bhb_loop+0x40/0x90 [ 356.870952][T12115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.870973][T12115] RIP: 0033:0x7fca8819ce59 [ 356.870994][T12115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.871011][T12115] RSP: 002b:00007fca890f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 356.871034][T12115] RAX: ffffffffffffffda RBX: 00007fca88416090 RCX: 00007fca8819ce59 [ 356.871049][T12115] RDX: 0000000000000fce RSI: 0000200000000840 RDI: 0000000000000003 [ 356.871062][T12115] RBP: 00007fca88232d6f R08: 0000000000000000 R09: 0000000000000000 [ 356.871075][T12115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.871087][T12115] R13: 00007fca88416128 R14: 00007fca88416090 R15: 00007fca8853fa48 [ 356.871119][T12115] [ 356.875139][T12115] Kernel Offset: disabled