last executing test programs: 8m25.884042516s ago: executing program 0 (id=562): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x26, &(0x7f0000000200)=0x7, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x8602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r3, 0x80184153, &(0x7f00000002c0)={0x0, &(0x7f0000000080)}) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 8m24.235488687s ago: executing program 0 (id=563): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_1\x00'}) r5 = socket(0x1a, 0x3, 0x2) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2, &(0x7f0000000400)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r8 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r9, 0x29, 0xb, &(0x7f0000000200)=0x10000, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x1f, 0x6, 0x638, 0xe8, 0xe8, 0x208, 0x448, 0x0, 0x568, 0x568, 0x568, 0x568, 0x568, 0x6, &(0x7f0000000280), {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, [0xffffff00, 0x5f4d09207f29c680, 0x0, 0xff000000], [0x0, 0x0, 0xffffffff, 0xff000000], 'veth0_to_bond\x00', 'nicvf0\x00', {0xff}, {}, 0x8a, 0x84, 0x4, 0x7}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x10, 0x2f3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0xa2}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x7, 0x5, 0x1, [0x0, 0x1, 0x7c2, 0xb9, 0xb2, 0x4, 0x9, 0x2, 0xbca4, 0x3, 0x18a1, 0x6, 0x7, 0x0, 0xff2b, 0x92e], 0x8}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3c}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@srh={{0x30}, {0x3b, 0x0, 0x0, 0x4, 0xfff7, 0x0, 0x40}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x7}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x698) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) bind$inet(r5, &(0x7f0000000140)={0x2, 0x4e24, @multicast2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r8, 0xab00, r10) r11 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_SOCK(r8, 0xab00, r10) ioctl$NBD_SET_FLAGS(r11, 0xab0a, 0x1000001000104) ioctl$NBD_DO_IT(r8, 0xab03) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000080)={0x2, 0x8}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000240)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000010020001280080001006873720014000280080001004166c688b9deac3d1bd1c95f13b76b38038782641b1305198c1e19b610196ce308d36c2c1fc809c71d331cdb9ea8bb09c9663bb12ad79f4496c42fbf8b52295acab9f18b192ab98cc9aeb49069dd2948489079dc4190f317cc2644bd2311490d2a1d083040e2263fea9fbe0c7c67516781c8e2ed831432ea0b709c432c9354d35fa7b22a74a22ede8a3eef3125ebe32e477026ba378e29777e096ecdf1cd85de40d956780ec0e51bfb3419f3d7c8991aec6349fb8efe04f7e8bbbea6b6f524a05bda4d42262caaf90b6b84bd919a6b33dbc11accdf2846673b9df7801a9bbcd84a924c84e0711d5c8dac583dfcb71ce973b43428289e53b50b151a41d7f9ac8bf1deee32ff6f52445029022e36cd65258c0bd1e5489c806b2d8d7e2e30bd9cd4653cd7624da280dd44d572c503093d6dcb45b83477a9b667ca", @ANYRES32=r12, @ANYBLOB="08000200", @ANYRES32=r13, @ANYBLOB="0500110001000000"], 0x48}}, 0x0) 8m16.421779452s ago: executing program 0 (id=566): socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000005c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfc}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 8m15.513313594s ago: executing program 0 (id=567): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000180)='mqueue\x00', 0x101008, &(0x7f0000000440)='\x93\x9fE\\\xa6H8\xa6x\x85\xd7\xea\x8cE\xaeX`\xf3\x87s\xb6\xa7P/\xec*sr^,\xeaB\xe4\xca\xbd\x11in3G;b\x86FC\a\x06\x81]\xcf\xe9\xdb\xdb\x01\xfb5m\xa9\xd7P\xe83\x84/\x89\xccDJ\xbc\xd6\x98\x00\xe9\xa8\xf8\x8c\xc5\xbe\x8f\xae\x8eVq$^\xbd\xff\xedN\x88x\x89\t\xcb\xc9_0\xe1\xd5\xc4\xe2\xa9=\xc2h\xe0\x06)\xbd\xb0\xfb\xfa\xe8O\xf3\x06\xce\x19`\xd0\xb3\x02%\xaa\fl[\x80tz>\x1a\x96\tG\x86P\x19\xed\xecB$\x9b{\xec\xe3\xd84\xa4\xfc\x16\xea\xfcE\xc2\x133d') chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@o_path={0x0}, 0x18) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x10, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x92}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$binfmt_format(0xffffff9c, &(0x7f0000000240)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) r2 = io_uring_setup(0xc8e, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES2(r2, 0xd, &(0x7f0000000380)={0x60, 0x1, 0x0, 0x0, 0x0}, 0x20) write$binfmt_format(r1, &(0x7f0000000000)='0\x00', 0x1) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) process_madvise(r4, 0x0, 0x0, 0x15, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f0000000280)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x66, 0x0, &(0x7f0000001300)="e0b9547ed387dbe9abc89b6f5becb9161980a1571069bfd43f46c1674ad205f5be53c414feb5d57c49bff5486595fd074e5c81e821d8befc50c145e38f879bbf3250d564c78d50f7b1350b67dba467bcd060c724c2e282947894837cd6817623c76301755054", 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, 0x0}, 0x50) 8m10.202165698s ago: executing program 0 (id=569): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x280, 0xa, 0xffdd, 0x0, 0x3e, 0x180, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 8m7.537645712s ago: executing program 0 (id=570): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f0000000240)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000940)=[@ip_retopts={{0x10}}], 0x10}, 0x40008d4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001180)=ANY=[@ANYBLOB="6c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c00128009000100626f6e64000000003c00028008001400"], 0x6c}, 0x1, 0xba01}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0}, &(0x7f0000000680)=0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x151200, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) acct(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1df46237f8169d63) setfsuid(r3) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r6, 0x0, 0x22, 0x0, &(0x7f0000000c80)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000002240), r2) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r7, &(0x7f0000002300)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x30, r8, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4081}, 0x4) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB='6'], 0x118) setrlimit(0x8, &(0x7f0000000080)) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r9, 0x29, 0x3, &(0x7f0000000140)=0x10001, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) r10 = openat$cgroup_ro(r7, &(0x7f00000002c0)='blkio.bfq.idle_time\x00', 0x0, 0x0) fchown(r1, r3, r5) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r2) sendmsg$rds(r10, &(0x7f00000021c0)={&(0x7f0000000300)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/78, 0x4e}, {&(0x7f00000003c0)=""/53, 0x35}, {&(0x7f0000000400)=""/243, 0xf3}, {&(0x7f0000000500)=""/31, 0x1f}, {&(0x7f00000011c0)=""/4096, 0x1000}], 0x5, &(0x7f0000000f00)=[@cswp={0x58, 0x114, 0x7, {{0x1, 0x8d}, &(0x7f0000000540)=0x6, &(0x7f00000006c0)=0x5ea, 0x7c, 0x4c40, 0x9, 0x1000000000, 0xd, 0x1}}, @cswp={0x58, 0x114, 0x7, {{0x4, 0x4248}, &(0x7f0000000700)=0x7f, &(0x7f0000000740)=0x4, 0x3, 0x4e2, 0x6, 0x40, 0x49, 0xffffffffffffffff}}, @fadd={0x58, 0x114, 0x6, {{0x6b0a, 0xdc10}, &(0x7f0000000780)=0x4, &(0x7f00000007c0)=0xfffffffffffffff9, 0xffffffff, 0x0, 0x7, 0x7fff, 0x8, 0x6}}, @cswp={0x58, 0x114, 0x7, {{0x82, 0x849f}, &(0x7f0000000800)=0x1d, &(0x7f0000000840)=0x80000000, 0x6, 0x1, 0x9, 0x8001, 0x4, 0x40}}, @rdma_args={0x48, 0x114, 0x1, {{0xffffffff, 0x1}, {&(0x7f0000000880)=""/27, 0x1b}, &(0x7f00000008c0)=[{&(0x7f0000000a00)=""/250, 0xfa}], 0x1, 0x64c0668dd44e3b3, 0x47c}}, @mask_fadd={0x58, 0x114, 0x8, {{0x9, 0x101}, &(0x7f0000000900)=0x96e, &(0x7f0000000980)=0x800, 0xf, 0xb0, 0x8, 0x6, 0x20, 0x6}}, @rdma_args={0x48, 0x114, 0x1, {{0x101}, {&(0x7f0000000b00)=""/196, 0xc4}, &(0x7f0000000ec0)=[{&(0x7f0000000c00)=""/39, 0x27}, {&(0x7f0000000c40)=""/99, 0x63}, {&(0x7f0000000cc0)=""/199, 0xc7}, {&(0x7f0000000dc0)=""/224, 0xe0}], 0x4, 0x0, 0x8001}}], 0x248, 0x800}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40c800c0}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="bc00af8a", @ANYRES16=r11, @ANYBLOB="21072cbd7000fbdbdf2542000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f70730000000005008300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f70730000000005008300010000001a0001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000500830000000000"], 0xb4}, 0x1, 0x0, 0x0, 0x4000054}, 0x20000804) 8m2.326901016s ago: executing program 32 (id=570): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f0000000240)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000940)=[@ip_retopts={{0x10}}], 0x10}, 0x40008d4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001180)=ANY=[@ANYBLOB="6c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c00128009000100626f6e64000000003c00028008001400"], 0x6c}, 0x1, 0xba01}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0}, &(0x7f0000000680)=0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x151200, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) acct(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1df46237f8169d63) setfsuid(r3) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r6, 0x0, 0x22, 0x0, &(0x7f0000000c80)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000002240), r2) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r7, &(0x7f0000002300)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x30, r8, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4081}, 0x4) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB='6'], 0x118) setrlimit(0x8, &(0x7f0000000080)) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r9, 0x29, 0x3, &(0x7f0000000140)=0x10001, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) r10 = openat$cgroup_ro(r7, &(0x7f00000002c0)='blkio.bfq.idle_time\x00', 0x0, 0x0) fchown(r1, r3, r5) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r2) sendmsg$rds(r10, &(0x7f00000021c0)={&(0x7f0000000300)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/78, 0x4e}, {&(0x7f00000003c0)=""/53, 0x35}, {&(0x7f0000000400)=""/243, 0xf3}, {&(0x7f0000000500)=""/31, 0x1f}, {&(0x7f00000011c0)=""/4096, 0x1000}], 0x5, &(0x7f0000000f00)=[@cswp={0x58, 0x114, 0x7, {{0x1, 0x8d}, &(0x7f0000000540)=0x6, &(0x7f00000006c0)=0x5ea, 0x7c, 0x4c40, 0x9, 0x1000000000, 0xd, 0x1}}, @cswp={0x58, 0x114, 0x7, {{0x4, 0x4248}, &(0x7f0000000700)=0x7f, &(0x7f0000000740)=0x4, 0x3, 0x4e2, 0x6, 0x40, 0x49, 0xffffffffffffffff}}, @fadd={0x58, 0x114, 0x6, {{0x6b0a, 0xdc10}, &(0x7f0000000780)=0x4, &(0x7f00000007c0)=0xfffffffffffffff9, 0xffffffff, 0x0, 0x7, 0x7fff, 0x8, 0x6}}, @cswp={0x58, 0x114, 0x7, {{0x82, 0x849f}, &(0x7f0000000800)=0x1d, &(0x7f0000000840)=0x80000000, 0x6, 0x1, 0x9, 0x8001, 0x4, 0x40}}, @rdma_args={0x48, 0x114, 0x1, {{0xffffffff, 0x1}, {&(0x7f0000000880)=""/27, 0x1b}, &(0x7f00000008c0)=[{&(0x7f0000000a00)=""/250, 0xfa}], 0x1, 0x64c0668dd44e3b3, 0x47c}}, @mask_fadd={0x58, 0x114, 0x8, {{0x9, 0x101}, &(0x7f0000000900)=0x96e, &(0x7f0000000980)=0x800, 0xf, 0xb0, 0x8, 0x6, 0x20, 0x6}}, @rdma_args={0x48, 0x114, 0x1, {{0x101}, {&(0x7f0000000b00)=""/196, 0xc4}, &(0x7f0000000ec0)=[{&(0x7f0000000c00)=""/39, 0x27}, {&(0x7f0000000c40)=""/99, 0x63}, {&(0x7f0000000cc0)=""/199, 0xc7}, {&(0x7f0000000dc0)=""/224, 0xe0}], 0x4, 0x0, 0x8001}}], 0x248, 0x800}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40c800c0}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="bc00af8a", @ANYRES16=r11, @ANYBLOB="21072cbd7000fbdbdf2542000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f70730000000005008300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f70730000000005008300010000001a0001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000500830000000000"], 0xb4}, 0x1, 0x0, 0x0, 0x4000054}, 0x20000804) 23.489776312s ago: executing program 2 (id=721): syz_io_uring_setup(0x498, &(0x7f0000000400)={0x0, 0x707b, 0x1000, 0x4, 0x288}, &(0x7f0000000340), 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000300)=[0x0, 0x0], 0x2}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000002"], 0x34}}, 0x0) r2 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x2d3e, 0x7fa9, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000480)=ANY=[@ANYBLOB="12010003232db72024040178cb880102030109122d00010285e00c0904e94003a6c7a009090504000002000101090507104000fe1009090509ff000480010ff8f1450b87e911ac61d74d3706a9027d35e759da196641c3e6e5de32c372aff7a14256"], &(0x7f00000005c0)={0x0, 0x0, 0x8, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r6}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x200, 0x1, &(0x7f0000000440)=[r6], &(0x7f0000000180)=[0xfb], &(0x7f0000000400)=[r7], &(0x7f0000000340)}) 21.340164003s ago: executing program 1 (id=722): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000080000000000000000000010085000000"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r0, &(0x7f00000014c0)=ANY=[], 0x46b) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000403f5f201d0650c16fce0102030109021b00010000100509043300011870fd00090582020002"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) mount$tmpfs(0x0, 0x0, 0x0, 0x80, &(0x7f0000000100)=ANY=[]) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000008c0)) epoll_create1(0x0) epoll_create1(0x0) 15.794161465s ago: executing program 2 (id=723): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000180)={0x40, 0x0, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x40}}, 0x0) r2 = fsmount(r0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events.local\x00', 0x26e1, 0x0) close(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000060000000000000000000000850000004100000085"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000006000000000000000000850000000f000000850000000e00000095614c414c918128dce018b5c307c6b2906015e197fb18d3f7297ec4ec1ec209be9cac153892e0aad91c0c7e5ecb7a204ab6dd6e3fff067423448ac184e75759b27bbc4820f4ed63e11bc9fa05c798241309dcb2380433c13fa6c1289edbf48ecedd44a75becf6bef57395efe8fe8818f4"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getpeername$llc(r5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0xb) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bind$netlink(r6, 0x0, 0x0) close(r6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r3, 0x18000000000002a0, 0x8, 0x0, &(0x7f0000001240)="b9ff03076804268c", 0x0, 0x303, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000440), 0x10) r9 = socket$vsock_stream(0x28, 0x1, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="c0000000000101040000000000000000020000007400018014000180080001000000000008000200e00000020c00028005000100000000004300028005000100060000000c00038005000100000000000c0002"], 0xc0}}, 0x0) connect$vsock_stream(r9, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000200)='E', 0x1}], 0x1) accept4$unix(r3, 0x0, 0x0, 0x80000) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$cgroup_pressure(r2, &(0x7f0000000300)='cpu.pressure\x00', 0x2, 0x0) 13.991799865s ago: executing program 1 (id=724): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x8001, 0x7}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x17, &(0x7f0000000100)=0x9, 0x4) r4 = syz_io_uring_setup(0x6c7f, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r8, 0x0, &(0x7f0000000100)='4', 0x1}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) fspick(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x1) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ff3000/0x4000)=nil) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) bind$inet6(r9, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r9, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r9, &(0x7f0000000040)='\x00', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000080)='cubic\x00', 0x6) shutdown(r9, 0x1) io_uring_enter(r4, 0x7f5f, 0x0, 0x0, 0x0, 0x0) shutdown(r7, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 12.392021196s ago: executing program 2 (id=725): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0) fadvise64(r0, 0x0, 0x0, 0x5) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000003c0)={'filter\x00', 0x7, 0x4, 0x418, 0x110, 0x110, 0x110, 0x330, 0x330, 0x330, 0x4, &(0x7f0000000040), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @local, @local, 0xf, 0xffffffff}}}, {{@arp={@empty, @rand_addr=0x64010100, 0xff000000, 0xffffff00, 0x0, 0xa, {@mac=@random="3991aa8edad1", {[0x0, 0xff, 0xff, 0x1fe, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x1, 0x1, 0x6, 0x3, 0x4, 0x6, '\x00', 'nicvf0\x00', {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac, @private=0xa010101, @broadcast, 0xc4ed5cbf70f6b4f7}}}, {{@arp={@remote, @empty, 0xff, 0xff, 0xb, 0x7, {@mac=@local, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@remote, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x3, 0x6, 0x5, 0x6, 0x1, 0x5, 'macvlan0\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x0, 0x320}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="88ba3450759f", @empty, @remote, @loopback, 0x2, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000300)={0x16, 0x98, 0xfa00, {0x0, 0x3, 0xffffffffffffffff, 0x0, 0x1, @in6={0xa, 0x4e21, 0xfff, @mcast2, 0x7}}}, 0xa0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x5, 0x2}) 9.82752135s ago: executing program 1 (id=726): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000edfebd000000000000000000000085000000200d82960e539008b38656232ae7000000850000007d0000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x4, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000006700)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace(0x420e, r4) pwrite64(r3, &(0x7f0000006740)="1fffdf83", 0x4, 0x1) migrate_pages(0x0, 0x6, &(0x7f0000001300)=0x80000000d, &(0x7f0000001340)=0x10000000000001) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x5, 0x0, {0x0}, {0xffffffffffffffff}, 0x1, 0x7fffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000140)=r5, 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x8, 0x8000, 0x3, 0x4200c, 0xffffffffffffffff, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000340)="e02742f4680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000200)) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc4c85512, &(0x7f0000000680)={{0x0, 0x5, 0x3, 0x1b0, 'syz1\x00', 0x4}, 0x0, [0x9, 0x89, 0xe1, 0x4, 0x800, 0xc000000, 0xe5d, 0x0, 0x6, 0x1, 0x400, 0x8, 0x4, 0x27db1425, 0xb, 0x3, 0x7, 0x2, 0x9, 0x6, 0x7e, 0x5a, 0x6, 0x8, 0x85, 0x76, 0xffffffffffffff00, 0x8591, 0x9, 0x6, 0xffffffff, 0x7, 0x0, 0x1, 0x3, 0x8, 0x81, 0xb, 0xc, 0x8, 0x7f, 0x2000000000000007, 0x2, 0x5, 0x4, 0xd2ce, 0x9, 0x7fffffffffffffff, 0x7, 0x0, 0xd52, 0x2, 0x40000002, 0x6, 0x7f, 0x6c, 0x7, 0xffffffff, 0x763, 0x5, 0x6, 0x1, 0xa, 0x0, 0xfff, 0x93a3, 0x9, 0x2, 0x7, 0x800, 0x4, 0xffffffffffffffff, 0x6, 0x8e, 0x6818, 0x80000001, 0x0, 0x401, 0xf5b, 0x6, 0x300000000, 0xffffffff, 0x0, 0x5, 0x8001, 0x8af, 0x1f8, 0x8000000000000001, 0x1ff, 0xd8c, 0x0, 0x1, 0x4, 0xf, 0x485, 0x8, 0x0, 0x3, 0x100, 0x8, 0x9, 0x2, 0x8, 0x5, 0x4, 0xffff, 0x3, 0xe, 0x984, 0x8, 0x1ff, 0x3, 0x5a91, 0x0, 0xcade, 0x961, 0x8000000000000000, 0xd9, 0x80, 0x0, 0x9, 0xfffffffffffffffe, 0x9, 0x80, 0x46, 0x2, 0x1]}) 9.237778858s ago: executing program 2 (id=727): r0 = socket(0x10, 0x80003, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0xfffffffd, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x78}, 0x1, 0x8000004}, 0x0) 7.479369581s ago: executing program 2 (id=728): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000080000000000000000000010085000000"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r0, &(0x7f00000014c0)=ANY=[], 0x46b) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000403f5f201d0650c16fce0102030109021b00010000100509043300011870fd00090582020002"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) mount$tmpfs(0x0, 0x0, 0x0, 0x80, &(0x7f0000000100)=ANY=[]) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000008c0)) epoll_create1(0x0) epoll_create1(0x0) 7.205734945s ago: executing program 1 (id=729): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000180)={0x40, r1, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x40}}, 0x0) r2 = fsmount(r0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events.local\x00', 0x26e1, 0x0) close(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000060000000000000000000000850000004100000085"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000006000000000000000000850000000f000000850000000e00000095614c414c918128dce018b5c307c6b2906015e197fb18d3f7297ec4ec1ec209be9cac153892e0aad91c0c7e5ecb7a204ab6dd6e3fff067423448ac184e75759b27bbc4820f4ed63e11bc9fa05c798241309dcb2380433c13fa6c1289edbf48ecedd44a75becf6bef57395efe8fe8818f4"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getpeername$llc(r5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0xb) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bind$netlink(r6, 0x0, 0x0) close(r6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r3, 0x18000000000002a0, 0x8, 0x0, &(0x7f0000001240)="b9ff03076804268c", 0x0, 0x303, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000440), 0x10) r9 = socket$vsock_stream(0x28, 0x1, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="c0000000000101040000000000000000020000007400018014000180080001000000000008000200e00000020c00028005000100000000004300028005000100060000000c00038005000100000000000c0002"], 0xc0}}, 0x0) connect$vsock_stream(r9, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000200)='E', 0x1}], 0x1) accept4$unix(r3, 0x0, 0x0, 0x80000) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$cgroup_pressure(r2, &(0x7f0000000300)='cpu.pressure\x00', 0x2, 0x0) 4.782323331s ago: executing program 1 (id=730): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x8001, 0x7}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x17, &(0x7f0000000100)=0x9, 0x4) r4 = syz_io_uring_setup(0x6c7f, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r8, 0x0, &(0x7f0000000100)='4', 0x1}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) fspick(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x1) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ff3000/0x4000)=nil) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) bind$inet6(r9, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r9, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r9, &(0x7f0000000040)='\x00', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000080)='cubic\x00', 0x6) shutdown(r9, 0x1) io_uring_enter(r4, 0x7f5f, 0x0, 0x0, 0x0, 0x0) shutdown(r7, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 702.351049ms ago: executing program 1 (id=731): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x8, 0x10, 0x3, 0x2, {{0x1c, 0x4, 0x2, 0x2, 0x70, 0x66, 0x0, 0x4, 0x4, 0x0, @private=0xa010101, @multicast2, {[@timestamp={0x44, 0x14, 0x8, 0x0, 0x5, [0x4, 0x7, 0x6, 0x8]}, @timestamp_addr={0x44, 0xc, 0xd, 0x1, 0x4, [{@remote, 0x40}]}, @timestamp={0x44, 0x20, 0x89, 0x0, 0x3, [0x3, 0x9, 0x7fffffff, 0x5a14, 0x8000, 0xd, 0x7ff]}, @ssrr={0x89, 0x1b, 0x67, [@remote, @rand_addr=0x64010101, @empty, @loopback, @private=0xa010100, @private=0xa010102]}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/stat\x00') lseek(r1, 0xd, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, 0x0, &(0x7f0000000180)) getdents64(r1, 0x0, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="13100000660091"], 0xfe33) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2\x00', 0x1ff) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000001bc0)=[{{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='~', 0x1}], 0x1}}, {{&(0x7f00000022c0)={0x2, 0x20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000002300)="ef", 0x1}], 0x1}}], 0x2, 0x1005) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'vlan1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x48}, 0x1, 0xba01}, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x76, &(0x7f0000000140)=@assoc_value={r6}, 0x8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x22, 0x3, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000001}, {}, 0x200}}, 0xb8}, 0x1, 0x0, 0x0, 0x2000}, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r9, 0x29, 0x4c, 0x0, 0x0) syz_emit_ethernet(0xf87, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[@routing={0x84}], "223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb53104c7919b7cf28fa555fc9460df11e72eddebb2fc4eb6f83b16e0d65307e4210dfc209f0c68df65b57f420fd215546b798af6b6ab7bfb2fe6bd6142f877852717370b1ca39d199c149c3ead97c4e16229ce4c08a111a0fc64651c21e9174dd72442a9ae2a42d9433c7b54c8dd4b59203f9a2e227e9b043eb430e606cf98f3428ac8511948dd553bc0728c0626fbda71bd2a1d734d605e27bdb0be93b7b91284689e31fccb70c15f2c39da9011c84d36fe4b4b36ff26e45a34685fc638dbdaa068a3d3d4f5d44b74afc0fc7956e5fcc3fe405ac6d292d1d90f257f18fe14a3192d28ed369956aa2f91f9fee773cf7fb5d90705347eeadc1af86de78a498fa1a20e5b3f481a0595769654d969299506d8ffbc172a7fb9453a8a3787e80b167936863f2cc16c1d03481bd40e1abcf87a292559771572136932bf30e48174012a1d4d5f138f93140af2ceb9c821c7966ea7592d762975b5b33ef141b6b91eb388c91b924945c3231d0f299adb5a36e0c95a17872e7ebf0bc0e33baf5c46f9e2087b77bad0794d519ce7bc8674a70f3545d020454ded22f164185df3b4f952b132947b75333993fd73a6bac5836dd5720e559bcb82a4926734c5c3b1287c5fec219a99f71eb398430001f007306e9232c269c2886357f75d935e8de054341ac36f1df1fc77fbc347d90660f4d5658cfeb9e289f70968a7c0b38ae34c4bfa46b47964e223ac34f472e3231e8c285add5713592c76c062c3477beb55b279846f04f8d6a5ce2743c6a2020f0c5164953b8dca7e57239dc8a7f507bcf77767ab0b4602437171a09c8e80f5a165c4c37eaae386cfcb927dd1a935fa717fa1608792b34bafbc20cf11a678455894ede62788309ab7a7075535847a2b48260a613e521b01d75648263ad78e6176528dbf3e6c4e4d72066e617be5387183a51dd97d2e846c5d173b51e17a4c8d78a49c914cbe44236c52c78de45b44f9d80bc6f77c75135922a84579bce77baa71311889f5b7b90c5124b8298d5e9c81c442d60df00795854d3213a1ac254c8963c109f68b3ff5451c381f6fb56c116f86b71f988d1e9f732280cbf3d4e9791fefc4bdec5dc293fb77b02d5aab6bd8cd179b7e425126b7f78c0d004bc6470ecc2bbc422bd06a6bd8f717009509e6a88b01347b7a62b9dea6f7a7446a371f422499a6e66eeb6a7b0beb4a86a61f875a9bfe0f5d5f0d0e4c85852afaea97d74ebc80d6491a8a1c998c4b5bc34b3edaeba2df902cd5e14e016720e6c3c8b15287b2471c34251e26dc442720cd5d984e30b110b7370f233f865b9ac129fdf49ff02b303d7d4f91039d3bb58a9d64d7a72d8b8eba6b45a000370d4f0e9c0d411768441372e7112e5d4e7d70a9d6b428b8b85ee6209d6f73e7b024740c052166deeb843e4ab78d1d354d75a5827ff0d49d8964e75785f3594c7299c0917b48f3b2efb81a4c3a7d6e0f1cf50efe0360963c2e3ee390ed2a4c39f42e856eced0f2ee7beacd2ecbece493e911ca0460584323ea6d4a0c00864693c979cae38f0c5841bfaeebf609d1075163c120fea0bd0207d2dd07e5e2e0a5afe3efee0ee6bb9a926a8dba7a27a82c5421a5b20bfb5dbdef532a12435fcd899f15603209831711e0dcfaaf2104b2016f087fce44848c70b65a34b9be83df2064391fc5a8d169dc1943d226e57ab5ba06c656273d4efba73a8a61aae19df4d2445f3ce7e649af1b4ffc86106c9092ddd0aafeb45653d181cb32b06a1dd41573495f15c3b8c0019ba72a2eb163dfcbdbb235322ae27d7116af506f295c2424ab9191aa8ce0e4617b212af21983f8d2b19d7fdeec881f6fa448acc7c3e133b6f281583fad4467c05801e69f6ffc1ae2e1f54655534d884c2f8f60303da33ccbe47a293643edb61c7d9fad4e3e54028bc64be8e5b1da53446869b136660b8e96ff96c48641ece275967b27b291c5c240b3399b5b901b699227735f821938bc88ded45bada2b257b1a4bcab7ed6647f2027e5680c87329e9cfdba6bde2f2a9b676be016001702bebbabb2eae3eba01d6f49ab70245a4c5ef0e136b531e1843487b3f69c5b811217d6d2f5e71b47f40c28117bd09a88bb21887a06e2cc164d4281d0df47cbd5781f1524098d89ccae32f24c5f9d86469106685fdc683ad5e873030b621dc00354e0621106da90aca69bb53848dd57251a45bc1898aca9bc84c9a8d2f8aabeed888560771c8cb03aab02620430fec8e9740880790060ccbffd5b8edaa219ca61587eff1b1b03ae8af53059f121efdec8b3ee8aba06f494a5b4575bc848d5a9773d2346f75811cb82a078fc960c9bd374555d78b1b4ba0b438ef00e8aa75810ca5efc5c70936e2cb0e515912cb7f625a2130a9ad58f29e58ae6eac5c3f15f22f0163ee6dead6947c4390b92c8dfb146fec7bfc0b37e8ff2c9de90c30f2d8b5e334107f9835bc47fbc193c60ebd5ac4e677c7fd5b6261ff96e97c185c726ec02941bc2336946f181fd2aff43f0e95f06105a049fcb8e4e3738407d6356856f533f17fae281a3be9f2050ae3d19d1b8350d424087ac9b7875824a9b7e098775b53d6ec960fc052ecd165d17a7897de75f15316a072bb9ccf6ce1ec085bb5356c271b985a437a32f12308fc927410fd444bcded9859e7b8a3cfaaf29ebfb92cc7cbfad2559bbe4f90e189e8708e93827b221869cc78fa41fd5bcb6577b7dfe4c3927dc25a58aa84419f76e71d1f3c10cbb5e52ab2bebe0d39bdffda0fa1b55fe3a03683f882a82dd58498d62b101acd710fd436aa7409fe3cf5352dffb399d560323e14d564bdb3121b89c1f43fc9a892b799cd32f7ce2ededb868920b4547735ef0bf3e148251a4f65dddb7f96b2f33734522a8cffdc51520ac98926b3406e96618cf15a042a67239e755afc70ec6a9c99f8e08ec2946e5901364d85223a63d49572519137d93b6b0798e72acf9da120e706ee73367dec1450a68def886c149bcd734469e10b933899501011cd548e99d638821d5709fde050ab382d4896ecfd7999d40ea9c690c26d396545224c8f9e19705593df2688eb592e2476a0193f7054ab6f703d41c545a80bf285bbc7cc735bd306c9ea5eb64f40752fd4c741d9b6e03cd41b636ef8f5e810047a21c0b24c6fde1f2e98f2f27730c90d93af9e7564e4e209a61ff626b666fcc4f75f7d560da688169ff0af5e674a0b89a99fb54bb438a65f953c2db0faec2ce09cec33b6d25620b5a0393ac473fed48a38beaca5223997419876d571ce969b83b5b3ae54de83dd89fd92ed2a93c087828bef49a24ed1a97778c47fdc691a94fd5b437dfe494b5c6fadf499d9d15583b0439d3d5ecb61a32a2508a6960be6009accfd1d5d75a16dbc4121c6ef07bda12646792449c18a56e7aa3893f3f0e55a8e09ca64193dd29ea24ed8614ee8e717f046dd99a8e3750506655331125a502aa89c0d7e8e30c36a4be22cd911322695144d3bf034f38ef32d49431d50da583d08a3e4c5862483cdd52d031b12c89fdaafc3334e877e464134baece883d301193a9c27311a987d4dae82a061f48182cc747cd64441e88b68e26e4975f0fdde3129a9e6af80009962581d5349676df9c73b81514b175709d9193749660f480bd4009b528c1db4f76f42b6a175126603c39a374e890f871c97b2eebb4500451d827cc15497dc5ae89edc6f47f25db7efa4b4b2afbbb2ee543e3db8d20fe93faf300247f59075921e8b2f2a025af8a1d46f274e0c6cb4be0293c7c16c88e98d7d189e9733e4c0e3b96be4aa3fa6ecf42732e0b1432d38aeaf2330d92713cd5580ce42bfe47fb98fea64783de23f456300dd193008211a5ba408d32dedbf12aa8237a6e1a2c9890a2c1011855241fea186906a5139d1c300be57dc7ff493de80010520d10fc3eda0ee9cd413e075d3dc02258fdab567a16e43edbeecc366a69d8d75512f43a2b79cbb9132cdcd00c531730d05f1eabf66613d6e7ebb8c4c3f4f7efd415d41049786352808b22a3bde40121968af39c8f00296001662adc72b7963c8bafab4a496b50f3237a29d19ad4a51a62b1c77a04c14004734189cf7ec49e3d041a1e5658d080f09df77f39782e7133968c1f39ab3ae2a5f24a60073288f3c5825dafd614a379b8b905aaf961caa14ffa38de0d632918d31e4a9291b0f0789248e232e4276840a1ed0257300e522d83111dffd424b1b33148981e3794b2b649ba9174e6697bcc96049f4f3dcc7cf4ca97e2006ec8a146014bb49184632e4fb159a34b6530e959e60a6b4e0427cc697f14cfe6bb7a662a6f5012744f3cf2307abc19c58449864d98fcfebc5d598cd32a1c38c207896468fe8da75eb1edb1d6e7cb1eab671e4e92f139c81d79f15df2a2dc075acc982dec769e2f49aad0fdf594cb590e054616e4f4582b6c4a149ae45d844903ef68d211df2a180178e178b7c7a5012ccf8a1e677586588620365e6111f5192ecfdbd97e2284128de02e08ebc13d4bb4d114faa1e6c16c51c12da2c52d68f73640ce866ce4e794b9fafdc392c91c1f824bc301b3069a02b9c86d2ffac3ed63ddee130cbc248d6a3345d3f9553db78077072d569a6633f8bdbdb1a209a8be9b6830225994f9021b57ddd6a44e8ea40b205c6cf437f45bffaef053a5916dcc6de62ee02bdb8ce3acec8ad97fc95dab1307d254790c71f32e4678957cf0121dccabe73a03c6cacbcbdaad8801b04d9836555a982c357a06e2db7e9bf62aed8cdebbb7a71a2410b929015b61f16e54bffd038996a717b9c7cc3696d8a1205e8266bf782c3a45b0e31461d6a3ed62396088833f69248b24fbf6f81dcc08b98826c3bd2325ade54f614f2d4a153e3e3527d93978483f2bfeada6b64bc43f2a725c30e843d13e6ab34cfc38d488b3ef50cd04318fac1f89905f017644cfa2de058ad399871d1316264813c2289d0b6cfeddfbca36ce93fd4a1bfc93bb74453cfbb9c6ca22320ffc9cb0a3fff046a5678c066e617cd3ac024dfead04b99877f448b78208938585c7563efe815ff0cc47da5fff521d9730ddc89f4aeceadd06f2ea6b9ae72c9407aa550a0155db3b4bc6aaa382a30552f699cb6a1af9972a8ccc483f98952dfbde3d712ea8673eacdbb77490d833fc90f0f02e7c073d2917db70831496a88defc10667dc4c1b7399191bdc7857eb090e79c332bf9f71bb5377178e6232800c93d22318dc5ab8d5dfa2f074a6c23acb61c89f2f078ec91e9817e11a4c8295c19634b5ca2df74"}}}}}, 0x0) 0s ago: executing program 2 (id=732): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x8001, 0x7}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x17, &(0x7f0000000100)=0x9, 0x4) r4 = syz_io_uring_setup(0x6c7f, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r8, 0x0, &(0x7f0000000100)='4', 0x1}) r9 = userfaultfd(0x80801) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) ioctl$UFFDIO_COPY(r9, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) fspick(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x1) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ff3000/0x4000)=nil) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) bind$inet6(r10, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r10, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r10, &(0x7f0000000040)='\x00', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000000080)='cubic\x00', 0x6) shutdown(r10, 0x1) io_uring_enter(r4, 0x7f5f, 0x0, 0x0, 0x0, 0x0) shutdown(r7, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:8454' (ED25519) to the list of known hosts. syzkaller login: [ 285.684545][ T3170] cgroup: Unknown subsys name 'net' [ 286.360345][ T3170] cgroup: Unknown subsys name 'cpuset' [ 286.429987][ T3170] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 335.922978][ T3170] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 392.154486][ T3180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.255894][ T3180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.064181][ T3189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.113136][ T3189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.615550][ T3180] hsr_slave_0: entered promiscuous mode [ 400.645390][ T3180] hsr_slave_1: entered promiscuous mode [ 406.035135][ T3189] hsr_slave_0: entered promiscuous mode [ 406.049738][ T3189] hsr_slave_1: entered promiscuous mode [ 406.062859][ T3189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 406.068468][ T3189] Cannot create hsr debugfs directory [ 407.276269][ T3180] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 407.442164][ T3180] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 407.808695][ T3180] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 408.032353][ T3180] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 412.549537][ T3189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 412.768341][ T3189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 413.152583][ T3189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 413.289705][ T3189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 420.220735][ T3180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.200265][ T3189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.401401][ T3189] veth0_vlan: entered promiscuous mode [ 448.643953][ T3189] veth1_vlan: entered promiscuous mode [ 449.614449][ T3189] veth0_macvtap: entered promiscuous mode [ 450.024263][ T3189] veth1_macvtap: entered promiscuous mode [ 450.392671][ T3180] veth0_vlan: entered promiscuous mode [ 451.122405][ T3180] veth1_vlan: entered promiscuous mode [ 451.264055][ T3189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.273930][ T3189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.276304][ T3189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.291910][ T3189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.680727][ T3180] veth0_macvtap: entered promiscuous mode [ 452.872049][ T3180] veth1_macvtap: entered promiscuous mode [ 455.001919][ T3180] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.003445][ T3180] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.004616][ T3180] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.005841][ T3180] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.274027][ T3189] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 461.919653][ T1823] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 462.019674][ T3810] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 462.361437][ T1823] usb 2-1: Using ep0 maxpacket: 32 [ 462.498796][ T1823] usb 2-1: config 62 has an invalid interface number: 61 but max is 1 [ 462.501975][ T1823] usb 2-1: config 62 has an invalid interface number: 93 but max is 1 [ 462.503908][ T1823] usb 2-1: config 62 has an invalid interface number: 219 but max is 1 [ 462.505735][ T1823] usb 2-1: config 62 has 3 interfaces, different from the descriptor's value: 2 [ 462.509222][ T1823] usb 2-1: config 62 has no interface number 0 [ 462.511013][ T1823] usb 2-1: config 62 has no interface number 1 [ 462.512647][ T1823] usb 2-1: config 62 has no interface number 2 [ 462.606469][ T1823] usb 2-1: config 62 interface 61 altsetting 5 endpoint 0x1 has invalid maxpacket 1568, setting to 64 [ 462.610779][ T1823] usb 2-1: config 62 interface 61 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 462.613301][ T1823] usb 2-1: config 62 interface 93 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 462.616249][ T1823] usb 2-1: too many endpoints for config 62 interface 219 altsetting 208: 139, using maximum allowed: 30 [ 462.620360][ T1823] usb 2-1: config 62 interface 219 altsetting 208 has a duplicate endpoint with address 0x1, skipping [ 462.622833][ T1823] usb 2-1: config 62 interface 219 altsetting 208 has 2 endpoint descriptors, different from the interface descriptor's value: 139 [ 462.625113][ T1823] usb 2-1: config 62 interface 61 has no altsetting 0 [ 462.627994][ T1823] usb 2-1: config 62 interface 93 has no altsetting 0 [ 462.629849][ T1823] usb 2-1: config 62 interface 219 has no altsetting 0 [ 462.818114][ T3810] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 462.820289][ T1823] usb 2-1: New USB device found, idVendor=0bda, idProduct=0158, bcdDevice=5a.e9 [ 462.822321][ T1823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.822989][ T1823] usb 2-1: Product: syz [ 462.823531][ T1823] usb 2-1: Manufacturer: syz [ 462.826464][ T3810] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 462.851582][ T1823] usb 2-1: SerialNumber: syz [ 462.931061][ T3810] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 462.933503][ T3810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 462.945893][ T3810] usb 1-1: SerialNumber: syz [ 464.366604][ T3810] usb 1-1: 0:2 : does not exist [ 464.375446][ T3810] usb 1-1: unit 5: unexpected type 0x0a [ 464.895191][ T3810] usb 1-1: USB disconnect, device number 2 [ 466.483864][ T3872] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 466.876569][ T1823] ums-realtek 2-1:62.61: USB Mass Storage device detected [ 467.179318][ T1823] ums-realtek 2-1:62.93: USB Mass Storage device detected [ 467.510546][ T1823] ums-realtek 2-1:62.219: USB Mass Storage device detected [ 468.112455][ T1823] usb 2-1: USB disconnect, device number 2 [ 473.033772][ T3930] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 475.500258][ T3810] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 475.630676][ T3886] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 475.755171][ T3810] usb 1-1: config 1 interface 0 altsetting 9 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 475.761067][ T3810] usb 1-1: config 1 interface 0 has no altsetting 0 [ 475.805854][ T3810] usb 1-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.40 [ 475.811774][ T3810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.813498][ T3810] usb 1-1: Product: С [ 475.814633][ T3810] usb 1-1: Manufacturer: ⵽톨ᨛ셋ၟ඘꜅쁅諑띏㿛䉘깼謇퀨햲␰ဓ灑ﲞ幰蕌桥⇳䄭簂赺烷䐢丢汶⎕ᷮᬾ渑슿圸࿾Ⱅ坮ৡⷓᘗﭱꪡ뉣띔៵䑸큑⤋䝰ꁊ孋떡߻읬ማ턙㓦褪跉廝踈颗鄦驹⌦皥ᵑ멅㧤ꀘ댦 [ 475.822921][ T3810] usb 1-1: SerialNumber: 矮ݯ萬ꓕ脩橺ẛ♞ᘷ쏂緁쥳氌闤뽧⡳쎀軓嬥ퟀ⑞补䉷ꮵిꇴ珼阻艵䦦㧱큫ﴈ [ 475.848298][ T3886] usb 2-1: Using ep0 maxpacket: 16 [ 475.999261][ T3886] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.000758][ T3886] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 476.169128][ T3886] usb 2-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice= 7.fb [ 476.170593][ T3886] usb 2-1: New USB device strings: Mfr=7, Product=130, SerialNumber=11 [ 476.171704][ T3886] usb 2-1: Product: syz [ 476.172591][ T3886] usb 2-1: Manufacturer: syz [ 476.173532][ T3886] usb 2-1: SerialNumber: syz [ 476.302033][ T3886] usb 2-1: config 0 descriptor?? [ 476.492888][ T3886] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 476.496333][ T3886] imon 2-1:0.0: unable to initialize intf0, err -19 [ 476.511689][ T3886] imon:imon_probe: failed to initialize context! [ 476.512725][ T3886] imon 2-1:0.0: unable to register, err -19 [ 478.102183][ T3934] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5'. [ 480.473366][ T3935] process 'syz.0.6' launched './file2' with NULL argv: empty string added [ 480.785541][ T36] usb 2-1: USB disconnect, device number 3 [ 481.915920][ T3810] usbhid 1-1:1.0: can't add hid device: -32 [ 481.943306][ T3810] usbhid 1-1:1.0: probe with driver usbhid failed with error -32 [ 483.094873][ T1823] usb 1-1: USB disconnect, device number 3 [ 494.633158][ T3971] Zero length message leads to an empty skb [ 498.951823][ T3881] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 499.501660][ T3881] usb 2-1: config 1 interface 0 altsetting 9 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 499.506173][ T3881] usb 2-1: config 1 interface 0 has no altsetting 0 [ 499.608691][ T3881] usb 2-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.40 [ 499.610112][ T3881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.611136][ T3881] usb 2-1: Product: С [ 499.612000][ T3881] usb 2-1: Manufacturer: ⵽톨ᨛ셋ၟ඘꜅쁅諑띏㿛䉘깼謇퀨햲␰ဓ灑ﲞ幰蕌桥⇳䄭簂赺烷䐢丢汶⎕ᷮᬾ渑슿圸࿾Ⱅ坮ৡⷓᘗﭱꪡ뉣띔៵䑸큑⤋䝰ꁊ孋떡߻읬ማ턙㓦褪跉廝踈颗鄦驹⌦皥ᵑ멅㧤ꀘ댦 [ 499.613641][ T3881] usb 2-1: SerialNumber: 矮ݯ萬ꓕ脩橺ẛ♞ᘷ쏂緁쥳氌闤뽧⡳쎀軓嬥ퟀ⑞补䉷ꮵిꇴ珼阻艵䦦㧱큫ﴈ [ 504.005025][ T3994] netlink: 'syz.0.12': attribute type 4 has an invalid length. [ 504.399322][ T3881] usbhid 2-1:1.0: can't add hid device: -71 [ 504.405094][ T3881] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 504.535392][ T3881] usb 2-1: USB disconnect, device number 4 [ 507.635036][ T4004] input: syz0 as /devices/virtual/input/input0 [ 511.569530][ T3892] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 511.968065][ T3892] usb 1-1: Using ep0 maxpacket: 16 [ 512.082165][ T3892] usb 1-1: config 0 has no interfaces? [ 512.228824][ T3892] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 512.230336][ T3892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.231398][ T3892] usb 1-1: Product: syz [ 512.232267][ T3892] usb 1-1: Manufacturer: syz [ 512.233205][ T3892] usb 1-1: SerialNumber: syz [ 512.435339][ T3892] usb 1-1: config 0 descriptor?? [ 514.793046][ T36] usb 1-1: USB disconnect, device number 4 [ 524.809140][ T3892] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 525.004003][ T3892] usb 2-1: Using ep0 maxpacket: 8 [ 525.523264][ T3892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 525.526128][ T3892] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 525.695312][ T3892] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 525.701823][ T3892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.703234][ T3892] usb 2-1: Product: syz [ 525.704463][ T3892] usb 2-1: Manufacturer: syz [ 525.706214][ T3892] usb 2-1: SerialNumber: syz [ 525.784611][ T3892] usb 2-1: config 0 descriptor?? [ 527.353011][ T4041] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17'. [ 529.894215][ T4053] sch_fq: defrate 6 ignored. [ 534.743187][ T4056] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 535.493797][ T4057] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 537.658755][ T4059] input: syz0 as /devices/virtual/input/input1 [ 540.530462][ T36] usb 2-1: USB disconnect, device number 5 [ 542.563231][ T36] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 542.751265][ T4072] xt_TCPMSS: Only works on TCP SYN packets [ 542.993711][ T36] usb 1-1: config 1 interface 0 altsetting 9 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 542.995243][ T36] usb 1-1: config 1 interface 0 has no altsetting 0 [ 543.009101][ T4072] GUP no longer grows the stack in syz.1.22 (4072): 400000004000-40000000a000 (400000002000) [ 543.014385][ T4072] CPU: 0 UID: 0 PID: 4072 Comm: syz.1.22 Not tainted 6.14.0-rc1-syzkaller-g245aece3750d #0 [ 543.015105][ T4072] Hardware name: riscv-virtio,qemu (DT) [ 543.015722][ T4072] Call Trace: [ 543.016112][ T4072] [] dump_backtrace+0x2e/0x3c [ 543.018469][ T4072] [] show_stack+0x30/0x3c [ 543.018888][ T4072] [] dump_stack_lvl+0x12e/0x1a6 [ 543.019445][ T4072] [] dump_stack+0x1c/0x24 [ 543.020061][ T4072] [] gup_vma_lookup+0x1e0/0x1ee [ 543.020634][ T4072] [] __get_user_pages+0x1fe/0x35d4 [ 543.021199][ T4072] [] get_user_pages_remote+0x2a0/0xa74 [ 543.021823][ T4072] [] __access_remote_vm+0x28a/0xb04 [ 543.022248][ T4072] [] access_remote_vm+0x32/0x44 [ 543.022723][ T4072] [] proc_pid_cmdline_read+0x460/0x7c4 [ 543.023346][ T4072] [] vfs_readv+0x522/0x718 [ 543.023766][ T4072] [] do_preadv+0x1b4/0x250 [ 543.024211][ T4072] [] __riscv_sys_preadv+0x88/0xc4 [ 543.024692][ T4072] [] syscall_handler+0x94/0x118 [ 543.025183][ T4072] [] do_trap_ecall_u+0x1aa/0x216 [ 543.025835][ T4072] [] handle_exception+0x146/0x152 [ 543.174027][ T36] usb 1-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.40 [ 543.175511][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.176752][ T36] usb 1-1: Product: С [ 543.188872][ T36] usb 1-1: Manufacturer: ⵽톨ᨛ셋ၟ඘꜅쁅諑띏㿛䉘깼謇퀨햲␰ဓ灑ﲞ幰蕌桥⇳䄭簂赺烷䐢丢汶⎕ᷮᬾ渑슿圸࿾Ⱅ坮ৡⷓᘗﭱꪡ뉣띔៵䑸큑⤋䝰ꁊ孋떡߻읬ማ턙㓦褪跉廝踈颗鄦驹⌦皥ᵑ멅㧤ꀘ댦 [ 543.191300][ T36] usb 1-1: SerialNumber: 矮ݯ萬ꓕ脩橺ẛ♞ᘷ쏂緁쥳氌闤뽧⡳쎀軓嬥ퟀ⑞补䉷ꮵిꇴ珼阻艵䦦㧱큫ﴈ [ 548.079577][ T36] usbhid 1-1:1.0: can't add hid device: -71 [ 548.082185][ T36] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 548.194703][ T36] usb 1-1: USB disconnect, device number 5 [ 556.360165][ T4099] batadv_slave_0: entered promiscuous mode [ 557.356150][ T4099] dvmrp1: entered allmulticast mode [ 558.551002][ T4101] netlink: 36 bytes leftover after parsing attributes in process `syz.1.25'. [ 565.526302][ T4115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.29'. [ 568.605136][ T4120] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 570.070804][ T3810] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 570.362991][ T3810] usb 2-1: Using ep0 maxpacket: 8 [ 570.458651][ T3810] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 570.460202][ T3810] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 570.461323][ T3810] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 570.462629][ T3810] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 570.464684][ T3810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 570.478383][ T3810] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 570.657741][ T3810] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 570.659127][ T3810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.660181][ T3810] usb 2-1: Product: syz [ 570.661050][ T3810] usb 2-1: Manufacturer: syz [ 570.662217][ T3810] usb 2-1: SerialNumber: syz [ 570.746483][ T3810] usb 2-1: config 0 descriptor?? [ 570.844217][ T3810] hub 2-1:0.0: bad descriptor, ignoring hub [ 570.845906][ T3810] hub 2-1:0.0: probe with driver hub failed with error -5 [ 570.933266][ T3810] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input2 [ 571.451965][ T4134] FAULT_INJECTION: forcing a failure. [ 571.451965][ T4134] name failslab, interval 1, probability 0, space 0, times 1 [ 571.454283][ T4134] CPU: 0 UID: 0 PID: 4134 Comm: syz.0.33 Not tainted 6.14.0-rc1-syzkaller-g245aece3750d #0 [ 571.454580][ T4134] Hardware name: riscv-virtio,qemu (DT) [ 571.454692][ T4134] Call Trace: [ 571.454786][ T4134] [] dump_backtrace+0x2e/0x3c [ 571.455119][ T4134] [] show_stack+0x30/0x3c [ 571.455361][ T4134] [] dump_stack_lvl+0x12e/0x1a6 [ 571.455704][ T4134] [] dump_stack+0x1c/0x24 [ 571.456037][ T4134] [] should_fail_ex+0x48c/0x5cc [ 571.456417][ T4134] [] should_failslab+0xba/0x102 [ 571.456741][ T4134] [] kmem_cache_alloc_node_noprof+0x27e/0x3f0 [ 571.457011][ T4134] [] __alloc_skb+0x32c/0x42a [ 571.457371][ T4134] [] netlink_alloc_large_skb+0x7a/0x13e [ 571.457776][ T4134] [] netlink_sendmsg+0x660/0xdc6 [ 571.458119][ T4134] [] __sock_sendmsg+0xcc/0x160 [ 571.458367][ T4134] [] ____sys_sendmsg+0x5ce/0x79e [ 571.458603][ T4134] [] ___sys_sendmsg+0x144/0x1e6 [ 571.458858][ T4134] [] __sys_sendmsg+0x188/0x22a [ 571.459111][ T4134] [] __riscv_sys_sendmsg+0x70/0xa2 [ 571.459385][ T4134] [] syscall_handler+0x94/0x118 [ 571.459639][ T4134] [] do_trap_ecall_u+0x1aa/0x216 [ 571.459985][ T4134] [] handle_exception+0x146/0x152 [ 572.186516][ T3904] usb 2-1: USB disconnect, device number 6 [ 582.389253][ T3904] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 582.611119][ T3904] usb 2-1: device descriptor read/64, error -71 [ 582.630514][ T3810] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 582.960251][ T3904] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 583.209853][ T3810] usb 1-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 583.211230][ T3810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.265048][ T3904] usb 2-1: device descriptor read/64, error -71 [ 583.306477][ T3810] usb 1-1: config 0 descriptor?? [ 583.414339][ T3904] usb usb2-port1: attempt power cycle [ 583.898989][ T3904] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 583.939879][ T3904] usb 2-1: device descriptor read/8, error -71 [ 584.241829][ T3904] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 584.311646][ T3904] usb 2-1: device descriptor read/8, error -71 [ 584.421554][ T3904] usb usb2-port1: unable to enumerate USB device [ 586.479553][ T3810] uclogic 0003:28BD:0055.0001: interface is invalid, ignoring [ 586.619481][ T3810] usb 1-1: USB disconnect, device number 6 [ 595.700720][ T36] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 596.491216][ T36] usb 1-1: config 1 interface 0 altsetting 9 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 596.493727][ T36] usb 1-1: config 1 interface 0 has no altsetting 0 [ 596.611865][ T36] usb 1-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.40 [ 596.615157][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.635168][ T36] usb 1-1: Product: С [ 596.640335][ T36] usb 1-1: Manufacturer: ⵽톨ᨛ셋ၟ඘꜅쁅諑띏㿛䉘깼謇퀨햲␰ဓ灑ﲞ幰蕌桥⇳䄭簂赺烷䐢丢汶⎕ᷮᬾ渑슿圸࿾Ⱅ坮ৡⷓᘗﭱꪡ뉣띔៵䑸큑⤋䝰ꁊ孋떡߻읬ማ턙㓦褪跉廝踈颗鄦驹⌦皥ᵑ멅㧤ꀘ댦 [ 596.643740][ T36] usb 1-1: SerialNumber: 矮ݯ萬ꓕ脩橺ẛ♞ᘷ쏂緁쥳氌闤뽧⡳쎀軓嬥ퟀ⑞补䉷ꮵిꇴ珼阻艵䦦㧱큫ﴈ [ 603.059298][ T36] usbhid 1-1:1.0: can't add hid device: -32 [ 603.062099][ T36] usbhid 1-1:1.0: probe with driver usbhid failed with error -32 [ 603.745322][ T3810] usb 1-1: USB disconnect, device number 7 [ 605.629443][ T4209] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 628.916735][ T4237] block device autoloading is deprecated and will be removed. [ 636.420618][ T3810] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 636.560473][ T919] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 636.760656][ T919] usb 1-1: device descriptor read/64, error -71 [ 636.861591][ T3810] usb 2-1: config 1 interface 0 altsetting 9 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 636.864086][ T3810] usb 2-1: config 1 interface 0 has no altsetting 0 [ 637.056265][ T3810] usb 2-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.40 [ 637.062706][ T3810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.064100][ T3810] usb 2-1: Product: С [ 637.065228][ T3810] usb 2-1: Manufacturer: ⵽톨ᨛ셋ၟ඘꜅쁅諑띏㿛䉘깼謇퀨햲␰ဓ灑ﲞ幰蕌桥⇳䄭簂赺烷䐢丢汶⎕ᷮᬾ渑슿圸࿾Ⱅ坮ৡⷓᘗﭱꪡ뉣띔៵䑸큑⤋䝰ꁊ孋떡߻읬ማ턙㓦褪跉廝踈颗鄦驹⌦皥ᵑ멅㧤ꀘ댦 [ 637.070431][ T3810] usb 2-1: SerialNumber: 矮ݯ萬ꓕ脩橺ẛ♞ᘷ쏂緁쥳氌闤뽧⡳쎀軓嬥ퟀ⑞补䉷ꮵిꇴ珼阻艵䦦㧱큫ﴈ [ 637.119053][ T919] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 637.414524][ T919] usb 1-1: device descriptor read/64, error -71 [ 637.621734][ T919] usb usb1-port1: attempt power cycle [ 638.258889][ T919] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 638.336714][ T919] usb 1-1: device descriptor read/8, error -71 [ 638.719762][ T919] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 638.840214][ T919] usb 1-1: device descriptor read/8, error -71 [ 639.200609][ T919] usb usb1-port1: unable to enumerate USB device [ 640.628624][ T3810] usbhid 2-1:1.0: can't add hid device: -71 [ 640.632674][ T3810] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 640.751334][ T3810] usb 2-1: USB disconnect, device number 11 [ 649.744207][ T3810] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 650.130486][ T3810] usb 2-1: Using ep0 maxpacket: 8 [ 650.240908][ T3810] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 650.243705][ T3810] usb 2-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 650.245828][ T3810] usb 2-1: config 6 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 650.386767][ T3810] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 650.400442][ T3810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.403838][ T3810] usb 2-1: Product: syz [ 650.406305][ T3810] usb 2-1: Manufacturer: syz [ 650.419440][ T3810] usb 2-1: SerialNumber: syz [ 650.661155][ T3810] hso 2-1:6.0: Can't find BULK IN endpoint [ 651.119212][ T3810] usb 2-1: USB disconnect, device number 12 [ 663.639278][ T36] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 663.965202][ T36] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 130, changing to 11 [ 663.982928][ T36] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 663.985512][ T36] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 663.999594][ T36] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 664.082145][ T36] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 664.084844][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 664.102410][ T36] usb 1-1: SerialNumber: syz [ 664.295935][ T4307] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 665.153444][ T36] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 665.171851][ T36] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12 [ 665.262875][ T36] usb 1-1: USB disconnect, device number 12 [ 677.710538][ T4329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.65'. [ 677.712083][ T4329] netlink: 'syz.1.65': attribute type 30 has an invalid length. [ 678.232560][ T4329] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.236698][ T4329] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.240864][ T4329] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.243273][ T4329] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 679.912232][ T3810] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 680.319377][ T3810] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 680.321861][ T3810] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 680.324001][ T3810] usb 1-1: config 0 has no interface number 0 [ 680.326570][ T3810] usb 1-1: config 0 interface 251 altsetting 0 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 680.348928][ T3810] usb 1-1: config 0 interface 251 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 680.351356][ T3810] usb 1-1: config 0 interface 251 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 9 [ 680.618372][ T3810] usb 1-1: New USB device found, idVendor=1199, idProduct=6839, bcdDevice= 5.65 [ 680.619940][ T3810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.621090][ T3810] usb 1-1: Product: syz [ 680.622034][ T3810] usb 1-1: Manufacturer: syz [ 680.622969][ T3810] usb 1-1: SerialNumber: syz [ 680.834617][ T3810] usb 1-1: config 0 descriptor?? [ 681.204286][ T3810] sierra 1-1:0.251: Sierra USB modem converter detected [ 681.828350][ T3810] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 681.961900][ T3810] usb 1-1: Sierra USB modem converter now attached to ttyUSB1 [ 682.323453][ T3810] usb 1-1: USB disconnect, device number 13 [ 682.623313][ T3810] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 682.794662][ T3810] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 682.825128][ T3810] sierra 1-1:0.251: device disconnected [ 702.935919][ T4485] Illegal XDP return value 1530629089 on prog (id 14) dev N/A, expect packet loss! [ 703.440131][ T4485] ======================================================= [ 703.440131][ T4485] WARNING: The mand mount option has been deprecated and [ 703.440131][ T4485] and is ignored by this kernel. Remove the mand [ 703.440131][ T4485] option from the mount to silence this warning. [ 703.440131][ T4485] ======================================================= [ 721.866572][ T4508] veth1_to_bond: entered allmulticast mode [ 721.890803][ T4508] veth1_to_bond: entered promiscuous mode [ 722.230061][ T4508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.73'. [ 722.323969][ T4506] veth1_to_bond: left promiscuous mode [ 722.362226][ T4506] veth1_to_bond: left allmulticast mode [ 724.040110][ T36] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 724.303932][ T36] usb 1-1: config 1 interface 0 altsetting 9 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 724.305647][ T36] usb 1-1: config 1 interface 0 has no altsetting 0 [ 724.356293][ T36] usb 1-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.40 [ 724.358664][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.359876][ T36] usb 1-1: Product: С [ 724.360861][ T36] usb 1-1: Manufacturer: ⵽톨ᨛ셋ၟ඘꜅쁅諑띏㿛䉘깼謇퀨햲␰ဓ灑ﲞ幰蕌桥⇳䄭簂赺烷䐢丢汶⎕ᷮᬾ渑슿圸࿾Ⱅ坮ৡⷓᘗﭱꪡ뉣띔៵䑸큑⤋䝰ꁊ孋떡߻읬ማ턙㓦褪跉廝踈颗鄦驹⌦皥ᵑ멅㧤ꀘ댦 [ 724.363168][ T36] usb 1-1: SerialNumber: 矮ݯ萬ꓕ脩橺ẛ♞ᘷ쏂緁쥳氌闤뽧⡳쎀軓嬥ퟀ⑞补䉷ꮵిꇴ珼阻艵䦦㧱큫ﴈ [ 726.935427][ T4519] netlink: 'syz.1.76': attribute type 4 has an invalid length. [ 727.782423][ T36] usbhid 1-1:1.0: can't add hid device: -71 [ 727.784979][ T36] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 727.907880][ T36] usb 1-1: USB disconnect, device number 14 [ 728.060415][ T4519] netlink: 'syz.1.76': attribute type 4 has an invalid length. [ 744.351130][ T4545] cgroup: noprefix used incorrectly [ 744.704024][ T4547] TCP: TCP_TX_DELAY enabled [ 754.301455][ T4552] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 767.780554][ T919] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 768.031746][ T919] usb 1-1: Using ep0 maxpacket: 16 [ 768.241608][ T919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 768.243063][ T919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 768.244129][ T919] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 768.245486][ T919] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 768.246531][ T919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.300054][ T919] usb 1-1: config 0 descriptor?? [ 770.235373][ T4593] netlink: 'syz.1.92': attribute type 21 has an invalid length. [ 770.249196][ T4593] netlink: 'syz.1.92': attribute type 6 has an invalid length. [ 770.250876][ T4593] netlink: 156 bytes leftover after parsing attributes in process `syz.1.92'. [ 772.043157][ T919] usbhid 1-1:0.0: can't add hid device: -71 [ 772.074652][ T919] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 772.256284][ T919] usb 1-1: USB disconnect, device number 15 [ 774.359523][ T36] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 774.558916][ T36] usb 1-1: Using ep0 maxpacket: 8 [ 774.598016][ T36] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 774.599836][ T36] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 774.601173][ T36] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 774.603003][ T36] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 774.604298][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.708133][ T36] usb 1-1: config 0 descriptor?? [ 775.570197][ T36] hid-picolcd 0003:04D8:C002.0002: item fetching failed at offset 6/7 [ 775.581931][ T36] hid-picolcd 0003:04D8:C002.0002: device report parse failed [ 775.583773][ T36] hid-picolcd 0003:04D8:C002.0002: probe with driver hid-picolcd failed with error -22 [ 776.162573][ T36] usb 1-1: USB disconnect, device number 16 [ 784.966397][ T4626] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.97'. [ 785.702207][ T919] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 785.911314][ T919] usb 1-1: device descriptor read/64, error -71 [ 786.181431][ T919] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 786.411440][ T919] usb 1-1: device descriptor read/64, error -71 [ 786.530161][ T919] usb usb1-port1: attempt power cycle [ 787.098537][ T919] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 787.163858][ T919] usb 1-1: device descriptor read/8, error -71 [ 787.491531][ T919] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 787.563607][ T919] usb 1-1: device descriptor read/8, error -71 [ 787.680069][ T919] usb usb1-port1: unable to enumerate USB device [ 801.690441][ T36] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 801.908845][ T36] usb 1-1: Using ep0 maxpacket: 32 [ 802.014405][ T36] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 802.016627][ T36] usb 1-1: config 0 has no interface number 0 [ 802.203522][ T36] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 802.205900][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.208988][ T36] usb 1-1: Product: syz [ 802.210566][ T36] usb 1-1: Manufacturer: syz [ 802.212056][ T36] usb 1-1: SerialNumber: syz [ 802.343201][ T36] usb 1-1: config 0 descriptor?? [ 802.542902][ T36] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 804.178957][ T36] usb 1-1: qt2_attach - failed to power on unit: -71 [ 804.183905][ T36] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71 [ 804.284491][ T36] usb 1-1: USB disconnect, device number 21 [ 813.259653][ T36] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 813.682016][ T36] usb 1-1: config 1 interface 0 altsetting 9 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 813.683515][ T36] usb 1-1: config 1 interface 0 has no altsetting 0 [ 813.763249][ T36] usb 1-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.40 [ 813.764724][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.766021][ T36] usb 1-1: Product: С [ 813.771261][ T36] usb 1-1: Manufacturer: ⵽톨ᨛ셋ၟ඘꜅쁅諑띏㿛䉘깼謇퀨햲␰ဓ灑ﲞ幰蕌桥⇳䄭簂赺烷䐢丢汶⎕ᷮᬾ渑슿圸࿾Ⱅ坮ৡⷓᘗﭱꪡ뉣띔៵䑸큑⤋䝰ꁊ孋떡߻읬ማ턙㓦褪跉廝踈颗鄦驹⌦皥ᵑ멅㧤ꀘ댦 [ 813.773380][ T36] usb 1-1: SerialNumber: 矮ݯ萬ꓕ脩橺ẛ♞ᘷ쏂緁쥳氌闤뽧⡳쎀軓嬥ퟀ⑞补䉷ꮵిꇴ珼阻艵䦦㧱큫ﴈ [ 818.434824][ T36] usbhid 1-1:1.0: can't add hid device: -71 [ 818.455125][ T36] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 818.558243][ T36] usb 1-1: USB disconnect, device number 22 [ 856.044422][ T4732] netlink: 9 bytes leftover after parsing attributes in process `syz.0.117'. [ 856.131121][ T4732] gretap0: entered promiscuous mode [ 862.370888][ T4742] netlink: 'syz.0.120': attribute type 16 has an invalid length. [ 862.373229][ T4742] netlink: 'syz.0.120': attribute type 3 has an invalid length. [ 862.375118][ T4742] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.120'. [ 872.905159][ T4757] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.124' sets config #1 [ 884.335282][ T4779] capability: warning: `syz.0.131' uses deprecated v2 capabilities in a way that may be insecure [ 890.889356][ T4790] netlink: 'syz.0.134': attribute type 1 has an invalid length. [ 891.081026][ T4790] netlink: 44150 bytes leftover after parsing attributes in process `syz.0.134'. [ 894.313685][ T4794] netlink: 16 bytes leftover after parsing attributes in process `syz.1.136'. [ 901.278457][ T4815] input: syz0 as /devices/virtual/input/input4 [ 904.465611][ T4799] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 905.990952][ T4836] syz_tun: entered allmulticast mode [ 906.074339][ T4832] syz_tun: left allmulticast mode [ 915.856487][ T4848] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 920.821293][ T919] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 921.252701][ T919] usb 1-1: device descriptor read/64, error -71 [ 921.611235][ T919] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 921.891006][ T919] usb 1-1: device descriptor read/64, error -71 [ 922.021257][ T919] usb usb1-port1: attempt power cycle [ 922.705924][ T919] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 922.755524][ T919] usb 1-1: device descriptor read/8, error -71 [ 923.090687][ T919] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 923.161610][ T919] usb 1-1: device descriptor read/8, error -71 [ 923.279775][ T919] usb usb1-port1: unable to enumerate USB device [ 929.320566][ T4861] syz_tun: entered allmulticast mode [ 929.641260][ T4861] new mount options do not match the existing superblock, will be ignored [ 929.702630][ T4860] syz_tun: left allmulticast mode [ 932.304748][ T4866] Process accounting resumed [ 932.794974][ T4866] Process accounting resumed [ 934.051413][ T36] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 934.304423][ T36] usb 1-1: Using ep0 maxpacket: 16 [ 934.389019][ T36] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 934.391750][ T36] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 934.662328][ T36] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 934.663665][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.664806][ T36] usb 1-1: Product: syz [ 934.665815][ T36] usb 1-1: Manufacturer: syz [ 934.687546][ T36] usb 1-1: SerialNumber: syz [ 935.722246][ T4868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 935.760769][ T4868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 936.245979][ T36] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 936.423004][ T36] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 937.202679][ T36] usb 1-1: USB disconnect, device number 27 [ 947.149655][ T919] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 947.323609][ C1] vxcan1: j1939_tp_rxtimer: 0xffffaf80314fb400: rx timeout, send abort [ 947.344696][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffffaf80314fb400: 0x1f000: (3) A timeout occurred and this is the connection abort to close the session. [ 947.412762][ T919] usb 1-1: Using ep0 maxpacket: 16 [ 947.553879][ T919] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 947.556066][ T919] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 947.591831][ T919] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 948.251416][ T919] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 948.253755][ T919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.255595][ T919] usb 1-1: Product: syz [ 948.298698][ T919] usb 1-1: Manufacturer: syz [ 948.310273][ T919] usb 1-1: SerialNumber: syz [ 949.472181][ T919] usb 1-1: 0:2 : does not exist [ 956.093649][ T919] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 962.276292][ T36] usb 1-1: USB disconnect, device number 28 [ 965.354133][ T5460] netlink: 40 bytes leftover after parsing attributes in process `syz.0.155'. [ 969.103856][ T5465] input: syz0 as /devices/virtual/input/input5 [ 975.508671][ T919] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 975.900998][ T919] usb 1-1: Using ep0 maxpacket: 8 [ 975.992593][ T919] usb 1-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=f9.c4 [ 975.995261][ T919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.075006][ T919] usb 1-1: config 0 descriptor?? [ 976.166396][ T919] cytherm 1-1:0.0: Cypress thermometer device now attached [ 976.495407][ T919] usb 1-1: USB disconnect, device number 29 [ 976.566078][ T919] cytherm 1-1:0.0: Cypress thermometer now disconnected [ 987.040599][ T3904] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 987.321439][ T3904] usb 1-1: Using ep0 maxpacket: 8 [ 987.402390][ T3904] usb 1-1: config 0 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 987.405030][ T3904] usb 1-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 987.422081][ T3904] usb 1-1: config 0 interface 0 has no altsetting 0 [ 987.424535][ T3904] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 987.426690][ T3904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.574822][ T3904] usb 1-1: config 0 descriptor?? [ 988.652585][ T3904] usbhid 1-1:0.0: can't add hid device: -71 [ 988.659679][ T3904] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 988.774301][ T3904] usb 1-1: USB disconnect, device number 30 [ 991.055452][ T5517] raw_sendmsg: syz.1.165 forgot to set AF_INET. Fix it! [ 993.796301][ T5519] netlink: 28 bytes leftover after parsing attributes in process `syz.1.166'. [ 999.923256][ T919] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1000.181881][ T919] usb 1-1: Using ep0 maxpacket: 32 [ 1000.258348][ T919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1000.260842][ T919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1000.265947][ T919] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1000.269041][ T919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.563921][ T919] usb 1-1: config 0 descriptor?? [ 1000.853846][ T919] hub 1-1:0.0: USB hub found [ 1001.343221][ T919] hub 1-1:0.0: 9 ports detected [ 1001.358219][ T919] hub 1-1:0.0: insufficient power available to use all downstream ports [ 1002.281183][ T919] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 1002.285520][ T919] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 1002.582806][ T919] usbhid 1-1:0.0: can't add hid device: -71 [ 1002.592604][ T919] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1002.700148][ T919] usb 1-1: USB disconnect, device number 31 [ 1010.430290][ T919] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1010.652614][ T919] usb 1-1: Using ep0 maxpacket: 8 [ 1010.771361][ T919] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1010.773726][ T919] usb 1-1: config 179 has no interface number 0 [ 1010.792370][ T919] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1010.794979][ T919] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1010.798236][ T919] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1010.800389][ T919] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1010.802559][ T919] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1010.805149][ T919] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1010.809043][ T919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.026533][ T5543] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1014.273486][ T5543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1014.321272][ T5543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1014.779588][ T5543] netlink: 12 bytes leftover after parsing attributes in process `syz.0.171'. [ 1026.219450][ T36] usb 1-1: USB disconnect, device number 32 [ 1026.219743][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1026.223516][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1052.759653][ T919] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1053.120307][ T919] usb 1-1: config 1 interface 0 altsetting 9 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1053.121887][ T919] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1053.228497][ T919] usb 1-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.40 [ 1053.229933][ T919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.230987][ T919] usb 1-1: Product: С [ 1053.231862][ T919] usb 1-1: Manufacturer: ⵽톨ᨛ셋ၟ඘꜅쁅諑띏㿛䉘깼謇퀨햲␰ဓ灑ﲞ幰蕌桥⇳䄭簂赺烷䐢丢汶⎕ᷮᬾ渑슿圸࿾Ⱅ坮ৡⷓᘗﭱꪡ뉣띔៵䑸큑⤋䝰ꁊ孋떡߻읬ማ턙㓦褪跉廝踈颗鄦驹⌦皥ᵑ멅㧤ꀘ댦 [ 1053.234015][ T919] usb 1-1: SerialNumber: 矮ݯ萬ꓕ脩橺ẛ♞ᘷ쏂緁쥳氌闤뽧⡳쎀軓嬥ퟀ⑞补䉷ꮵిꇴ珼阻艵䦦㧱큫ﴈ [ 1057.548202][ T919] usbhid 1-1:1.0: can't add hid device: -71 [ 1057.560344][ T919] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 1057.612666][ T919] usb 1-1: USB disconnect, device number 33 [ 1075.540848][ T919] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1075.750153][ T919] usb 1-1: Using ep0 maxpacket: 16 [ 1075.895774][ T919] usb 1-1: config 5 has an invalid interface number: 168 but max is 0 [ 1075.911647][ T919] usb 1-1: config 5 has an invalid descriptor of length 254, skipping remainder of the config [ 1075.920390][ T919] usb 1-1: config 5 has no interface number 0 [ 1075.922688][ T919] usb 1-1: too many endpoints for config 5 interface 168 altsetting 240: 38, using maximum allowed: 30 [ 1075.925556][ T919] usb 1-1: config 5 interface 168 altsetting 240 has 0 endpoint descriptors, different from the interface descriptor's value: 38 [ 1075.939665][ T919] usb 1-1: config 5 interface 168 has no altsetting 0 [ 1076.010946][ T919] usb 1-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 1076.019158][ T919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.021299][ T919] usb 1-1: Product: syz [ 1076.022954][ T919] usb 1-1: Manufacturer: syz [ 1076.025150][ T919] usb 1-1: SerialNumber: syz [ 1081.355019][ T919] pn533_usb 1-1:5.168: NFC: Could not find bulk-in or bulk-out endpoint [ 1090.594931][ T36] usb 1-1: USB disconnect, device number 34 [ 1092.107773][ T5664] capability: warning: `syz.0.194' uses 32-bit capabilities (legacy support in use) [ 1094.459406][ T34] audit: type=1800 audit(1093.590:2): pid=5667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.195" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1105.293644][ T5677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.198'. [ 1105.331243][ C0] vcan0: j1939_session_tx_dat: 0xffffaf8031653800: queue data error: -100 [ 1108.613111][ T5687] netlink: 20 bytes leftover after parsing attributes in process `syz.1.200'. [ 1108.766173][ T5689] netlink: 'syz.1.200': attribute type 2 has an invalid length. [ 1108.818228][ T5689] netlink: 'syz.1.200': attribute type 1 has an invalid length. [ 1120.653158][ T5698] netlink: 28 bytes leftover after parsing attributes in process `syz.0.203'. [ 1130.036587][ T5703] ip6erspan0: entered promiscuous mode [ 1143.574656][ T5719] netlink: 28 bytes leftover after parsing attributes in process `syz.1.211'. [ 1143.604751][ T5719] netlink: 28 bytes leftover after parsing attributes in process `syz.1.211'. [ 1160.861963][ T5754] netlink: 16 bytes leftover after parsing attributes in process `syz.0.221'. [ 1163.853130][ T5758] IPv6: sit1: Disabled Multicast RS [ 1168.339490][ T36] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1168.791215][ T36] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1168.793821][ T36] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1168.854603][ T36] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1168.860504][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1168.862566][ T36] usb 1-1: SerialNumber: syz [ 1169.782499][ T36] usb 1-1: 0:2 : does not exist [ 1169.785046][ T36] usb 1-1: unit 255 not found! [ 1169.881034][ T36] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1170.001789][ T36] usb 1-1: 5:0: cannot get min/max values for control 4 (id 5) [ 1170.348615][ T36] usb 1-1: USB disconnect, device number 35 [ 1178.245500][ T5796] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1178.663599][ T5796] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1178.822498][ T5797] tmpfs: Bad value for 'mpol' [ 1178.922745][ T5798] netlink: 16 bytes leftover after parsing attributes in process `syz.1.227'. [ 1200.731352][ T5831] netlink: 48 bytes leftover after parsing attributes in process `syz.1.236'. [ 1201.038497][ T5831] netlink: 20 bytes leftover after parsing attributes in process `syz.1.236'. [ 1201.103426][ T5831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.236'. [ 1223.660687][ T3810] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1223.878912][ T3810] usb 1-1: Using ep0 maxpacket: 32 [ 1224.550079][ T3810] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1224.551412][ T3810] usb 1-1: config 0 has no interface number 0 [ 1224.760629][ T3810] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1224.763064][ T3810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.764890][ T3810] usb 1-1: Product: syz [ 1224.766465][ T3810] usb 1-1: Manufacturer: syz [ 1224.776729][ T3810] usb 1-1: SerialNumber: syz [ 1224.905853][ T3810] usb 1-1: config 0 descriptor?? [ 1225.102298][ T3810] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1225.439350][ T5867] netlink: 56 bytes leftover after parsing attributes in process `syz.1.246'. [ 1225.441672][ T5867] netlink: 12 bytes leftover after parsing attributes in process `syz.1.246'. [ 1225.445101][ T5867] netlink: 31 bytes leftover after parsing attributes in process `syz.1.246'. [ 1225.498405][ T5867] netlink: 'syz.1.246': attribute type 3 has an invalid length. [ 1225.501659][ T5867] netlink: 'syz.1.246': attribute type 2 has an invalid length. [ 1225.503562][ T5867] netlink: 31 bytes leftover after parsing attributes in process `syz.1.246'. [ 1227.854784][ T3810] usb 1-1: qt2_attach - failed to power on unit: -71 [ 1227.861840][ T3810] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71 [ 1227.958054][ T3810] usb 1-1: USB disconnect, device number 36 [ 1239.916604][ T5887] netlink: 56 bytes leftover after parsing attributes in process `syz.0.251'. [ 1239.930937][ T5887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.251'. [ 1239.932044][ T5887] netlink: 31 bytes leftover after parsing attributes in process `syz.0.251'. [ 1239.933078][ T5887] netlink: 'syz.0.251': attribute type 3 has an invalid length. [ 1239.934114][ T5887] netlink: 'syz.0.251': attribute type 2 has an invalid length. [ 1239.935061][ T5887] netlink: 31 bytes leftover after parsing attributes in process `syz.0.251'. [ 1242.341018][ T5891] netlink: 28 bytes leftover after parsing attributes in process `syz.0.253'. [ 1242.342575][ T5891] netlink: 28 bytes leftover after parsing attributes in process `syz.0.253'. [ 1242.760511][ T5895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.254'. [ 1247.744809][ T5903] syz.1.257 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1248.014039][ T5905] netlink: 56 bytes leftover after parsing attributes in process `syz.0.258'. [ 1248.016617][ T5905] netlink: 12 bytes leftover after parsing attributes in process `syz.0.258'. [ 1248.023271][ T5905] netlink: 31 bytes leftover after parsing attributes in process `syz.0.258'. [ 1248.025718][ T5905] netlink: 'syz.0.258': attribute type 3 has an invalid length. [ 1248.034863][ T5905] netlink: 'syz.0.258': attribute type 2 has an invalid length. [ 1248.038432][ T5905] netlink: 31 bytes leftover after parsing attributes in process `syz.0.258'. [ 1249.700477][ T5910] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1282.536304][ T5961] netlink: 200 bytes leftover after parsing attributes in process `syz.1.275'. [ 1282.588891][ T5963] netlink: 16 bytes leftover after parsing attributes in process `syz.1.275'. [ 1282.594046][ T5961] netlink: 16 bytes leftover after parsing attributes in process `syz.1.275'. [ 1282.595125][ T5961] netlink: 24 bytes leftover after parsing attributes in process `syz.1.275'. [ 1282.607653][ T5963] netlink: 24 bytes leftover after parsing attributes in process `syz.1.275'. [ 1284.290362][ T5961] veth3: entered promiscuous mode [ 1284.292820][ T5961] veth3: entered allmulticast mode [ 1285.579913][ T5963] veth5: entered promiscuous mode [ 1285.581123][ T5963] veth5: entered allmulticast mode [ 1288.464728][ T5994] netlink: 165 bytes leftover after parsing attributes in process `syz.1.277'. [ 1288.590428][ T5994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.277'. [ 1288.592753][ T5994] netlink: 24 bytes leftover after parsing attributes in process `syz.1.277'. [ 1313.198210][ T34] audit: type=1326 audit(1312.330:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6015 comm="syz.1.282" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb8fa code=0x7fc00000 [ 1313.251451][ T3904] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1313.489721][ T3904] usb 1-1: device descriptor read/64, error -71 [ 1313.801633][ T3904] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1313.989583][ T3904] usb 1-1: device descriptor read/64, error -71 [ 1314.103998][ T3904] usb usb1-port1: attempt power cycle [ 1314.546010][ T3904] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1314.612595][ T3904] usb 1-1: device descriptor read/8, error -71 [ 1314.892749][ T3904] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1315.014304][ T3904] usb 1-1: device descriptor read/8, error -71 [ 1315.134139][ T3904] usb usb1-port1: unable to enumerate USB device [ 1318.056430][ T6063] netlink: 56 bytes leftover after parsing attributes in process `syz.1.288'. [ 1318.060154][ T6063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.288'. [ 1318.061749][ T6063] netlink: 31 bytes leftover after parsing attributes in process `syz.1.288'. [ 1318.064856][ T6063] netlink: 'syz.1.288': attribute type 3 has an invalid length. [ 1318.069236][ T6063] netlink: 'syz.1.288': attribute type 2 has an invalid length. [ 1318.071107][ T6063] netlink: 31 bytes leftover after parsing attributes in process `syz.1.288'. [ 1326.232294][ T6074] serio: Serial port ptm0 [ 1328.722178][ T6076] Device tree not included in the provided image [ 1333.481107][ T6081] syzkaller1: entered promiscuous mode [ 1333.483371][ T6081] syzkaller1: entered allmulticast mode [ 1345.089474][ T6096] netlink: 'syz.0.295': attribute type 1 has an invalid length. [ 1346.242412][ T6094] ipip0: entered promiscuous mode [ 1346.243763][ T6094] ipip0: entered allmulticast mode [ 1351.451946][ T3810] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1351.722422][ T3810] usb 1-1: config 1 interface 0 altsetting 9 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1351.724010][ T3810] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1351.959732][ T3810] usb 1-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.40 [ 1351.961074][ T3810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.962114][ T3810] usb 1-1: Product: С [ 1351.962953][ T3810] usb 1-1: Manufacturer: ⵽톨ᨛ셋ၟ඘꜅쁅諑띏㿛䉘깼謇퀨햲␰ဓ灑ﲞ幰蕌桥⇳䄭簂赺烷䐢丢汶⎕ᷮᬾ渑슿圸࿾Ⱅ坮ৡⷓᘗﭱꪡ뉣띔៵䑸큑⤋䝰ꁊ孋떡߻읬ማ턙㓦褪跉廝踈颗鄦驹⌦皥ᵑ멅㧤ꀘ댦 [ 1351.964595][ T3810] usb 1-1: SerialNumber: 矮ݯ萬ꓕ脩橺ẛ♞ᘷ쏂緁쥳氌闤뽧⡳쎀軓嬥ퟀ⑞补䉷ꮵిꇴ珼阻艵䦦㧱큫ﴈ [ 1357.466548][ T3810] usbhid 1-1:1.0: can't add hid device: -32 [ 1357.474031][ T3810] usbhid 1-1:1.0: probe with driver usbhid failed with error -32 [ 1358.661225][ T3810] usb 1-1: USB disconnect, device number 41 [ 1366.930176][ T3810] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1367.228664][ T3810] usb 1-1: Using ep0 maxpacket: 32 [ 1367.333651][ T3810] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1367.334984][ T3810] usb 1-1: config 0 has no interface number 0 [ 1367.409426][ T3810] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1367.410813][ T3810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1367.412113][ T3810] usb 1-1: Product: syz [ 1367.412971][ T3810] usb 1-1: Manufacturer: syz [ 1367.413915][ T3810] usb 1-1: SerialNumber: syz [ 1367.488406][ T3810] usb 1-1: config 0 descriptor?? [ 1367.535936][ T3810] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1368.089750][ T3810] usb 1-1: qt2_attach - failed to power on unit: -71 [ 1368.092801][ T3810] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71 [ 1368.181589][ T3810] usb 1-1: USB disconnect, device number 42 [ 1370.028917][ T6144] netlink: 20 bytes leftover after parsing attributes in process `syz.1.303'. [ 1370.092875][ T6144] geneve1: entered allmulticast mode [ 1380.280853][ T3810] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1380.613093][ T3810] usb 1-1: device descriptor read/64, error -71 [ 1381.022265][ T3810] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1381.211496][ T3810] usb 1-1: device descriptor read/64, error -71 [ 1381.325736][ T3810] usb usb1-port1: attempt power cycle [ 1381.750719][ T3810] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1381.786560][ T3810] usb 1-1: device descriptor read/8, error -71 [ 1382.100080][ T3810] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1382.135374][ T3810] usb 1-1: device descriptor read/8, error -71 [ 1382.260064][ T3810] usb usb1-port1: unable to enumerate USB device [ 1392.673516][ T6175] netlink: 'syz.0.310': attribute type 22 has an invalid length. [ 1392.675879][ T6175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.310'. [ 1399.799948][ T6190] netlink: 16 bytes leftover after parsing attributes in process `syz.0.315'. [ 1399.801314][ T6190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.315'. [ 1426.184163][ T6227] netlink: 24 bytes leftover after parsing attributes in process `syz.1.328'. [ 1439.610443][ T6239] mmap: syz.1.331 (6239) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1471.279213][ T6302] netlink: 12 bytes leftover after parsing attributes in process `syz.1.344'. [ 1471.489385][ T6302] netlink: 12 bytes leftover after parsing attributes in process `syz.1.344'. [ 1472.820596][ T3810] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1473.345143][ T3810] usb 1-1: Using ep0 maxpacket: 8 [ 1473.515254][ T3810] usb 1-1: config 254 has an invalid interface number: 152 but max is 0 [ 1473.529472][ T3810] usb 1-1: config 254 has no interface number 0 [ 1473.530700][ T3810] usb 1-1: too many endpoints for config 254 interface 152 altsetting 220: 213, using maximum allowed: 30 [ 1473.533229][ T3810] usb 1-1: config 254 interface 152 altsetting 220 has 0 endpoint descriptors, different from the interface descriptor's value: 213 [ 1473.534680][ T3810] usb 1-1: config 254 interface 152 has no altsetting 0 [ 1473.669672][ T3810] usb 1-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 1473.671139][ T3810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1473.672406][ T3810] usb 1-1: Product: syz [ 1473.673393][ T3810] usb 1-1: Manufacturer: syz [ 1473.674345][ T3810] usb 1-1: SerialNumber: syz [ 1475.701963][ T3810] mxuport 1-1:254.152: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 1475.718258][ T3810] mxuport 1-1:254.152: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 1475.720173][ T3810] mxuport 1-1:254.152: probe with driver mxuport failed with error -71 [ 1475.949835][ T3810] usb 1-1: USB disconnect, device number 47 [ 1479.200799][ T6321] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 1486.779413][ T6325] input: syz0 as /devices/virtual/input/input7 [ 1503.229411][ T3810] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1503.612699][ T3810] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1503.614235][ T3810] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1503.615435][ T3810] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1503.616581][ T3810] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1503.620760][ T3810] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1503.621900][ T3810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1503.691006][ T3810] usb 1-1: config 0 descriptor?? [ 1503.744478][ T6358] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1505.864308][ T3810] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1505.865701][ T3810] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1505.880642][ T3810] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1505.882277][ T3810] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1505.883292][ T3810] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1505.884248][ T3810] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1505.885193][ T3810] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1505.886282][ T3810] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1505.900520][ T3810] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1505.901799][ T3810] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1505.911546][ T3810] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1505.912819][ T3810] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1505.913817][ T3810] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1505.914873][ T3810] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1505.915842][ T3810] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1505.955466][ T3810] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 1506.130948][ T3810] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1507.143579][ T36] usb 1-1: USB disconnect, device number 48 [ 1516.179917][ T6391] trusted_key: syz.1.358 sent an empty control message without MSG_MORE. [ 1516.852643][ T6393] ubi31: attaching mtd0 [ 1516.885877][ T6393] ubi31: scanning is finished [ 1516.898320][ T6393] ubi31: empty MTD device detected [ 1517.363680][ T6393] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1517.365129][ T6393] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1517.366460][ T6393] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1517.370030][ T6393] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 1517.371115][ T6393] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1517.372110][ T6393] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1517.378203][ T6393] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1472986165 [ 1517.379696][ T6393] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1517.418274][ T6395] ubi31: background thread "ubi_bgt31d" started, PID 6395 [ 1522.658705][ T34] audit: type=1326 audit(1521.780:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6406 comm="syz.1.362" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb8fa code=0x0 [ 1524.385521][ T6408] netlink: 67 bytes leftover after parsing attributes in process `syz.1.362'. [ 1529.126349][ T6414] nvme_fabrics: missing parameter 'transport=%s' [ 1529.149167][ T6414] nvme_fabrics: missing parameter 'nqn=%s' [ 1531.295634][ T6416] nvme_fabrics: missing parameter 'transport=%s' [ 1531.321439][ T6416] nvme_fabrics: missing parameter 'nqn=%s' [ 1535.589450][ T3810] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1535.838916][ T3810] usb 1-1: Using ep0 maxpacket: 32 [ 1535.957897][ T3810] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 1535.959270][ T3810] usb 1-1: config 0 has no interface number 0 [ 1536.193071][ T3810] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1536.194752][ T3810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1536.195962][ T3810] usb 1-1: Product: syz [ 1536.205758][ T3810] usb 1-1: Manufacturer: syz [ 1536.210052][ T3810] usb 1-1: SerialNumber: syz [ 1536.259176][ T3810] usb 1-1: config 0 descriptor?? [ 1536.411509][ T3810] smsc95xx v2.0.0 [ 1539.636117][ T6421] xt_recent: Unsupported userspace flags (000000de) [ 1541.411230][ T6421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1541.461979][ T6421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1542.205419][ T6421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1542.261658][ T6421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1543.195050][ T3810] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -110 [ 1543.198867][ T3810] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 1543.404363][ T3810] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1543.422701][ T3810] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 1543.578474][ T3810] usb 1-1: USB disconnect, device number 49 [ 1553.096499][ T6444] sctp: [Deprecated]: syz.0.368 (pid 6444) Use of int in max_burst socket option deprecated. [ 1553.096499][ T6444] Use struct sctp_assoc_value instead [ 1557.029882][ T3904] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1557.298548][ T3904] usb 1-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 1557.299890][ T3904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1557.374183][ T3904] usb 1-1: config 0 descriptor?? [ 1561.705478][ T3904] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1561.709620][ T3904] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 1561.713164][ T3904] asix 1-1:0.0: probe with driver asix failed with error -71 [ 1561.888830][ T3904] usb 1-1: USB disconnect, device number 50 [ 1563.006058][ T34] audit: type=1326 audit(1562.140:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6468 comm="syz.1.372" exe="/syz-executor" sig=9 arch=c00000f3 syscall=98 compat=0 ip=0xdb8fa code=0x0 [ 1564.195854][ T34] audit: type=1326 audit(1563.330:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6468 comm="syz.1.372" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb8fa code=0x7ffc0000 [ 1564.235131][ T34] audit: type=1326 audit(1563.370:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6468 comm="syz.1.372" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb8fa code=0x7ffc0000 [ 1564.295994][ T34] audit: type=1326 audit(1563.430:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6468 comm="syz.1.372" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdb8fa code=0x7ffc0000 [ 1564.321922][ T34] audit: type=1326 audit(1563.440:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6468 comm="syz.1.372" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb8fa code=0x7ffc0000 [ 1564.325252][ T34] audit: type=1326 audit(1563.460:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6468 comm="syz.1.372" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb8fa code=0x7ffc0000 [ 1564.343404][ T34] audit: type=1326 audit(1563.460:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6468 comm="syz.1.372" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdb8fa code=0x7ffc0000 [ 1564.373673][ T34] audit: type=1326 audit(1563.460:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6468 comm="syz.1.372" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb8fa code=0x7ffc0000 [ 1564.386262][ T34] audit: type=1326 audit(1563.510:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6468 comm="syz.1.372" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb8fa code=0x7ffc0000 [ 1564.408405][ T34] audit: type=1326 audit(1563.520:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6468 comm="syz.1.372" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdb8fa code=0x7ffc0000 [ 1569.229283][ T6475] netlink: 40 bytes leftover after parsing attributes in process `syz.0.373'. [ 1597.414879][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1597.421204][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1597.422446][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1597.426555][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1597.436221][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1597.448365][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1597.450469][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1597.451500][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1597.452542][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1597.453540][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1597.454508][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1597.455464][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1597.456418][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1597.461177][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1597.463218][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1597.464950][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1597.466166][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1597.469763][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1597.471177][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1597.472874][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1597.479552][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1597.480599][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1597.481613][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1597.482592][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1597.483553][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1597.484517][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1597.485501][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1597.486460][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1597.504053][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1597.505269][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1597.506313][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1597.609774][ T36] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1605.782262][ T6528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.387'. [ 1608.900281][ T34] kauditd_printk_skb: 10 callbacks suppressed [ 1608.900608][ T34] audit: type=1326 audit(1608.030:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.1.388" exe="/syz-executor" sig=9 arch=c00000f3 syscall=98 compat=0 ip=0xdb8fa code=0x0 [ 1609.445282][ T6536] ptrace attach of "/syz-executor exec"[6535] was attempted by "/syz-executor exec"[6536] [ 1613.790620][ T36] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1614.038673][ T36] usb 1-1: Using ep0 maxpacket: 16 [ 1614.110371][ T36] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1614.111877][ T36] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1614.322173][ T36] usb 1-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 1614.323546][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1614.324794][ T36] usb 1-1: Product: syz [ 1614.325700][ T36] usb 1-1: Manufacturer: syz [ 1614.326577][ T36] usb 1-1: SerialNumber: syz [ 1614.390569][ T36] usb 1-1: config 0 descriptor?? [ 1614.535762][ T36] keyspan 1-1:0.0: Keyspan 2 port adapter converter detected [ 1614.551539][ T36] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 87 [ 1614.553355][ T36] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7 [ 1614.587782][ T36] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 1614.589902][ T36] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 1614.600330][ T36] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 1614.601893][ T36] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85 [ 1614.603391][ T36] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5 [ 1614.662793][ T36] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1614.832852][ T36] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 1614.834556][ T36] keyspan 1-1:0.0: unsupported endpoint type 0 [ 1614.835861][ T36] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 1614.848244][ T36] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 86 [ 1614.851872][ T36] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6 [ 1614.902325][ T36] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1625.670872][ T36] usb 1-1: USB disconnect, device number 51 [ 1625.880919][ T36] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1626.060267][ T36] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1626.212906][ T36] keyspan 1-1:0.0: device disconnected [ 1627.533709][ T6574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.393'. [ 1630.215994][ T6578] fuse: Unknown parameter '0x0000000000000005' [ 1638.230748][ T6594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.400'. [ 1644.320652][ T6604] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.403'. [ 1644.398852][ T6600] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.403'. [ 1659.032034][ T6629] netlink: 24 bytes leftover after parsing attributes in process `syz.1.410'. [ 1666.810151][ T36] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1667.182509][ T36] usb 1-1: Using ep0 maxpacket: 8 [ 1667.335382][ T36] usb 1-1: config 2 interface 0 has no altsetting 0 [ 1667.611214][ T36] usb 1-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 1667.614020][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1667.615968][ T36] usb 1-1: Product: syz [ 1667.663717][ T36] usb 1-1: Manufacturer: syz [ 1667.665780][ T36] usb 1-1: SerialNumber: syz [ 1669.211807][ T36] usb 1-1: USB disconnect, device number 52 [ 1683.194863][ T6672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.418'. [ 1683.196299][ T6672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.418'. [ 1695.812644][ T3904] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1696.170749][ T3904] usb 1-1: Using ep0 maxpacket: 32 [ 1696.344307][ T3904] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1696.364859][ T3904] usb 1-1: config 0 has no interface number 0 [ 1696.562870][ T3904] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1696.565318][ T3904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1696.579587][ T3904] usb 1-1: Product: syz [ 1696.581574][ T3904] usb 1-1: Manufacturer: syz [ 1696.583154][ T3904] usb 1-1: SerialNumber: syz [ 1696.892375][ T3904] usb 1-1: config 0 descriptor?? [ 1697.221073][ T3904] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1697.588589][ T3904] usb 1-1: qt2_attach - failed to power on unit: -71 [ 1697.591593][ T3904] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71 [ 1697.685788][ T3904] usb 1-1: USB disconnect, device number 53 [ 1710.060276][ T6730] tmpfs: Bad value for 'mpol' [ 1727.816279][ T6755] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1733.198575][ T6761] netlink: 20 bytes leftover after parsing attributes in process `syz.1.443'. [ 1733.262840][ T6761] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 1741.993226][ T6609] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1742.370684][ T6609] usb 1-1: Using ep0 maxpacket: 8 [ 1742.664581][ T6609] usb 1-1: config 4 has an invalid interface number: 244 but max is 0 [ 1742.669933][ T6609] usb 1-1: config 4 has no interface number 0 [ 1742.672102][ T6609] usb 1-1: config 4 interface 244 altsetting 210 bulk endpoint 0x1 has invalid maxpacket 1023 [ 1742.674192][ T6609] usb 1-1: config 4 interface 244 altsetting 210 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1742.676232][ T6609] usb 1-1: config 4 interface 244 altsetting 210 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1742.684020][ T6609] usb 1-1: config 4 interface 244 has no altsetting 0 [ 1742.841134][ T6609] usb 1-1: New USB device found, idVendor=05ac, idProduct=fa33, bcdDevice=cb.aa [ 1742.843528][ T6609] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1742.845494][ T6609] usb 1-1: Product: syz [ 1742.863309][ T6609] usb 1-1: Manufacturer: syz [ 1742.865789][ T6609] usb 1-1: SerialNumber: syz [ 1743.094671][ T6767] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1746.439248][ T6609] ipheth 1-1:4.244: Unable to find alternate settings interface [ 1746.541845][ T6609] usb 1-1: USB disconnect, device number 54 [ 1764.824932][ T6803] netlink: 12 bytes leftover after parsing attributes in process `syz.1.453'. [ 1771.680273][ T3904] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1771.930122][ T3904] usb 1-1: Using ep0 maxpacket: 32 [ 1772.044596][ T3904] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1772.059652][ T3904] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1772.062032][ T3904] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1772.063969][ T3904] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1772.431998][ T3904] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1772.434266][ T3904] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1772.436031][ T3904] usb 1-1: Product: syz [ 1772.451727][ T3904] usb 1-1: Manufacturer: syz [ 1772.453684][ T3904] usb 1-1: SerialNumber: syz [ 1773.189458][ T3904] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input8 [ 1773.698807][ T6809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1773.725496][ T6809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1773.800149][ T6609] usb 1-1: USB disconnect, device number 55 [ 1774.001992][ T6609] appletouch 1-1:1.0: input: appletouch disconnected [ 1774.622147][ T6832] batadv_slave_0: entered promiscuous mode [ 1783.534780][ T6837] netlink: 40 bytes leftover after parsing attributes in process `syz.0.458'. [ 1785.362677][ T6840] fuse: Invalid rootmode [ 1788.538922][ T6843] netlink: 56 bytes leftover after parsing attributes in process `syz.0.460'. [ 1788.541377][ T6843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.460'. [ 1788.543414][ T6843] netlink: 31 bytes leftover after parsing attributes in process `syz.0.460'. [ 1788.545473][ T6843] netlink: 'syz.0.460': attribute type 3 has an invalid length. [ 1788.560089][ T6843] netlink: 'syz.0.460': attribute type 2 has an invalid length. [ 1788.562328][ T6843] netlink: 31 bytes leftover after parsing attributes in process `syz.0.460'. [ 1793.719317][ T6849] futex_wake_op: syz.1.462 tries to shift op by -1; fix this program [ 1808.219482][ T34] audit: type=1326 audit(1807.350:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6859 comm="syz.1.467" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb8fa code=0x7fc00000 [ 1814.928598][ T6879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.470'. [ 1829.739797][ T6609] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1834.930146][ T6609] usb 1-1: device descriptor read/64, error -110 [ 1835.251142][ T6609] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1835.528529][ T6609] usb 1-1: device descriptor read/64, error -32 [ 1835.665277][ T6609] usb usb1-port1: attempt power cycle [ 1836.120283][ T6609] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1836.349901][ T6609] usb 1-1: device descriptor read/8, error -32 [ 1836.365126][ T6917] raw-gadget.0 gadget.0: failed to queue suspend event [ 1836.384538][ T6917] raw-gadget.0 gadget.0: failed to queue disconnect event [ 1839.630389][ T36] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1839.829784][ T36] usb 1-1: Using ep0 maxpacket: 8 [ 1839.941136][ T36] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1839.943576][ T36] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1839.945714][ T36] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 1839.953867][ T36] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 1839.956251][ T36] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1840.149674][ T36] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1840.152018][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1840.153895][ T36] usb 1-1: Product: syz [ 1840.155462][ T36] usb 1-1: Manufacturer: syz [ 1840.171176][ T36] usb 1-1: SerialNumber: syz [ 1840.302696][ T36] usb 1-1: config 0 descriptor?? [ 1842.612616][ T36] rc_core: IR keymap rc-imon-rsc not found [ 1842.614859][ T36] Registered IR keymap rc-empty [ 1842.792527][ T36] rc rc0: iMON Station as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1842.861827][ T36] input: iMON Station as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input9 [ 1843.120320][ T36] usb 1-1: USB disconnect, device number 60 [ 1844.862357][ T6960] netlink: 72 bytes leftover after parsing attributes in process `syz.1.480'. [ 1868.536539][ T6987] IPv6: Can't replace route, no match found [ 1869.730494][ T6988] netlink: 16 bytes leftover after parsing attributes in process `syz.0.489'. [ 1869.732803][ T6988] netlink: 16 bytes leftover after parsing attributes in process `syz.0.489'. [ 1883.523508][ T7001] netlink: 164 bytes leftover after parsing attributes in process `syz.1.494'. [ 1884.560001][ T36] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1884.850774][ T36] usb 1-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 1884.853280][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1884.983476][ T36] usb 1-1: config 0 descriptor?? [ 1885.884473][ T36] kaweth 1-1:0.0: Firmware present in device. [ 1886.229054][ T36] kaweth 1-1:0.0: Statistics collection: 0 [ 1886.231251][ T36] kaweth 1-1:0.0: Multicast filter limit: 0 [ 1886.233002][ T36] kaweth 1-1:0.0: MTU: 0 [ 1886.234613][ T36] kaweth 1-1:0.0: Read MAC address 00:00:00:00:00:00 [ 1888.241481][ T7003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1888.275603][ T7003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1888.415901][ T7003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1888.480523][ T7003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1888.924950][ T36] kaweth 1-1:0.0: kaweth interface created at eth1 [ 1889.102929][ T36] usb 1-1: USB disconnect, device number 61 [ 1890.286535][ T7030] netlink: 'syz.1.497': attribute type 2 has an invalid length. [ 1890.289046][ T7030] netlink: 132 bytes leftover after parsing attributes in process `syz.1.497'. [ 1910.352609][ T6609] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1910.648550][ T6609] usb 1-1: Using ep0 maxpacket: 32 [ 1910.782006][ T6609] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1910.784233][ T6609] usb 1-1: config 0 has no interface number 0 [ 1910.866479][ T6609] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1910.871500][ T6609] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1910.873358][ T6609] usb 1-1: Product: syz [ 1910.874819][ T6609] usb 1-1: Manufacturer: syz [ 1910.876642][ T6609] usb 1-1: SerialNumber: syz [ 1911.044473][ T6609] usb 1-1: config 0 descriptor?? [ 1911.145310][ T6609] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1911.572565][ T6609] usb 1-1: qt2_attach - failed to power on unit: -71 [ 1911.629066][ T6609] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71 [ 1911.719607][ T6609] usb 1-1: USB disconnect, device number 62 [ 1912.344657][ T7070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.506'. [ 1914.529602][ T7074] netlink: 64 bytes leftover after parsing attributes in process `syz.1.507'. [ 1914.806474][ T7074] tmpfs: Bad value for 'mpol' [ 1922.395502][ T7086] tmpfs: Bad value for 'mpol' [ 1922.910195][ T7088] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1922.921618][ T7088] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1922.939952][ T7088] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1922.966370][ T7088] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1922.987768][ T7088] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1923.013131][ T7088] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1923.154127][ T7088] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1926.610423][ T3904] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1926.810203][ T3904] usb 1-1: Using ep0 maxpacket: 16 [ 1926.908720][ T3904] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 1926.910990][ T3904] usb 1-1: config 0 has no interface number 0 [ 1926.912921][ T3904] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 1927.161672][ T3904] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1927.163993][ T3904] usb 1-1: New USB device strings: Mfr=1, Product=10, SerialNumber=3 [ 1927.165858][ T3904] usb 1-1: Product: syz [ 1927.169105][ T3904] usb 1-1: Manufacturer: syz [ 1927.173809][ T3904] usb 1-1: SerialNumber: syz [ 1927.303581][ T3904] usb 1-1: config 0 descriptor?? [ 1930.148910][ T7091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1930.159622][ T7091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1930.574444][ T3904] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.214/input/input10 [ 1937.999412][ T6609] usb 1-1: USB disconnect, device number 63 [ 1938.482041][ T7119] Device tree not included in the provided image [ 1944.474300][ T3904] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1944.791698][ T3904] usb 1-1: config 1 interface 0 altsetting 9 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1944.794302][ T3904] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1945.060443][ T3904] usb 1-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.40 [ 1945.063152][ T3904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1945.065374][ T3904] usb 1-1: Product: С [ 1945.079318][ T3904] usb 1-1: Manufacturer: ⵽톨ᨛ셋ၟ඘꜅쁅諑띏㿛䉘깼謇퀨햲␰ဓ灑ﲞ幰蕌桥⇳䄭簂赺烷䐢丢汶⎕ᷮᬾ渑슿圸࿾Ⱅ坮ৡⷓᘗﭱꪡ뉣띔៵䑸큑⤋䝰ꁊ孋떡߻읬ማ턙㓦褪跉廝踈颗鄦驹⌦皥ᵑ멅㧤ꀘ댦 [ 1945.090392][ T3904] usb 1-1: SerialNumber: 矮ݯ萬ꓕ脩橺ẛ♞ᘷ쏂緁쥳氌闤뽧⡳쎀軓嬥ퟀ⑞补䉷ꮵిꇴ珼阻艵䦦㧱큫ﴈ [ 1949.414007][ T3904] usbhid 1-1:1.0: can't add hid device: -71 [ 1949.418050][ T3904] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 1949.463731][ T3904] usb 1-1: USB disconnect, device number 64 [ 1962.173195][ T7165] netlink: 40 bytes leftover after parsing attributes in process `syz.1.526'. [ 1964.712358][ T6609] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 1965.046329][ T6609] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1965.161195][ T6609] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1965.166470][ T6609] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1965.174253][ T6609] usb 1-1: Product: syz [ 1965.175227][ T6609] usb 1-1: Manufacturer: syz [ 1965.187538][ T6609] usb 1-1: SerialNumber: syz [ 1967.711336][ T7167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1967.745374][ T7167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1968.452313][ T6609] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 1968.456569][ T6609] cdc_ncm 1-1:1.0: bind() failure [ 1968.954765][ T6609] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1968.990232][ T6609] cdc_ncm 1-1:1.1: bind() failure [ 1979.408836][ T3904] usb 1-1: USB disconnect, device number 65 [ 1982.050007][ T7198] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1982.068916][ T7211] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1984.384904][ T7222] lo speed is unknown, defaulting to 1000 [ 1984.409659][ T7222] lo speed is unknown, defaulting to 1000 [ 1984.441933][ T7222] lo speed is unknown, defaulting to 1000 [ 1984.650617][ T7222] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1985.574220][ T7222] lo speed is unknown, defaulting to 1000 [ 1985.593866][ T7222] lo speed is unknown, defaulting to 1000 [ 1985.688534][ T6609] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 1986.171492][ T6609] usb 1-1: config 0 has an invalid interface number: 120 but max is 0 [ 1986.172782][ T6609] usb 1-1: config 0 has no interface number 0 [ 1986.173882][ T6609] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x2 has invalid maxpacket 6400, setting to 64 [ 1986.175038][ T6609] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 64 [ 1986.296000][ T6609] usb 1-1: New USB device found, idVendor=e828, idProduct=cea8, bcdDevice=50.03 [ 1986.299432][ T6609] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1986.300560][ T6609] usb 1-1: Product: syz [ 1986.301449][ T6609] usb 1-1: Manufacturer: syz [ 1986.302295][ T6609] usb 1-1: SerialNumber: syz [ 1986.382576][ T6609] usb 1-1: config 0 descriptor?? [ 1986.413489][ T7225] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1986.441109][ T7225] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1988.813673][ T6609] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1988.815714][ T6609] usb 1-1: MIDIStreaming interface descriptor not found [ 1989.398247][ T6609] usb 1-1: USB disconnect, device number 66 [ 1998.745358][ T7267] fuse: Bad value for 'rootmode' [ 1999.032706][ T7267] netlink: 20 bytes leftover after parsing attributes in process `syz.1.539'. [ 2000.636027][ T7269] netlink: 56 bytes leftover after parsing attributes in process `syz.0.540'. [ 2000.638699][ T7269] netlink: 12 bytes leftover after parsing attributes in process `syz.0.540'. [ 2000.640078][ T7269] netlink: 31 bytes leftover after parsing attributes in process `syz.0.540'. [ 2000.641368][ T7269] netlink: 'syz.0.540': attribute type 3 has an invalid length. [ 2000.642364][ T7269] netlink: 'syz.0.540': attribute type 2 has an invalid length. [ 2000.643339][ T7269] netlink: 31 bytes leftover after parsing attributes in process `syz.0.540'. [ 2003.916125][ T7274] lo speed is unknown, defaulting to 1000 [ 2009.439532][ T6609] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 2009.981238][ T6609] usb 1-1: Using ep0 maxpacket: 8 [ 2010.106345][ T6609] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2010.142527][ T6609] usb 1-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2010.144999][ T6609] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2010.265429][ T6609] usb 1-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.40 [ 2010.269987][ T6609] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2010.271898][ T6609] usb 1-1: Product: syz [ 2010.273413][ T6609] usb 1-1: Manufacturer: syz [ 2010.274879][ T6609] usb 1-1: SerialNumber: syz [ 2011.149600][ T6609] appletouch 1-1:1.0: Failed to read mode from device. [ 2011.155165][ T6609] appletouch 1-1:1.0: probe with driver appletouch failed with error -5 [ 2016.890016][ T36] usb 1-1: USB disconnect, device number 67 [ 2026.480669][ T7329] netlink: 56 bytes leftover after parsing attributes in process `syz.0.546'. [ 2026.482117][ T7329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.546'. [ 2026.483194][ T7329] netlink: 31 bytes leftover after parsing attributes in process `syz.0.546'. [ 2026.484221][ T7329] netlink: 'syz.0.546': attribute type 3 has an invalid length. [ 2026.485203][ T7329] netlink: 'syz.0.546': attribute type 2 has an invalid length. [ 2026.486213][ T7329] netlink: 31 bytes leftover after parsing attributes in process `syz.0.546'. [ 2038.622944][ T7348] netlink: 56 bytes leftover after parsing attributes in process `syz.0.552'. [ 2038.625379][ T7348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.552'. [ 2038.626600][ T7348] netlink: 31 bytes leftover after parsing attributes in process `syz.0.552'. [ 2038.628769][ T7348] netlink: 'syz.0.552': attribute type 3 has an invalid length. [ 2038.629885][ T7348] netlink: 'syz.0.552': attribute type 2 has an invalid length. [ 2038.630938][ T7348] netlink: 31 bytes leftover after parsing attributes in process `syz.0.552'. [ 2041.700219][ T7353] trusted_key: encrypted_key: insufficient parameters specified [ 2041.759950][ T7353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.553'. [ 2050.390099][ T7370] nbd: nbd0 already in use [ 2065.270091][ T7395] x_tables: duplicate underflow at hook 1 [ 2066.351457][ T7399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.563'. [ 2066.354126][ T7399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.563'. [ 2068.084238][ T62] block nbd0: Receive control failed (result -32) [ 2068.084388][ T848] block nbd0: Receive control failed (result -32) [ 2068.286264][ T7395] block nbd0: shutting down sockets [ 2098.356072][ T7423] lo speed is unknown, defaulting to 1000 [ 2111.581209][ T7423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2111.740846][ T7423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2121.186071][ T7423] hsr_slave_0: entered promiscuous mode [ 2121.203286][ T7423] hsr_slave_1: entered promiscuous mode [ 2121.215987][ T7423] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2121.218737][ T7423] Cannot create hsr debugfs directory [ 2125.875929][ T7423] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2126.142116][ T7423] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2126.336650][ T7423] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2126.992563][ T7423] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2133.956591][ T7759] netlink: 'syz.1.582': attribute type 13 has an invalid length. [ 2139.545223][ T7760] netlink: 'syz.1.582': attribute type 5 has an invalid length. [ 2140.037739][ T36] Dead loop on virtual device ipvlan1, fix it urgently! [ 2140.088470][ T11] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2140.630473][ T11] Dead loop on virtual device ipvlan1, fix it urgently! [ 2140.728836][ T3904] Dead loop on virtual device ipvlan1, fix it urgently! [ 2141.711186][ T11] Dead loop on virtual device ipvlan1, fix it urgently! [ 2141.736392][ T11] Dead loop on virtual device ipvlan1, fix it urgently! [ 2142.153869][ T3904] Dead loop on virtual device ipvlan1, fix it urgently! [ 2143.821747][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2144.155226][ T7423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2145.443508][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 2151.750748][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2153.053070][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 2166.460097][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2168.387930][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 2171.971091][ T7809] netlink: 108 bytes leftover after parsing attributes in process `syz.1.589'. [ 2172.024440][ T7809] netlink: 108 bytes leftover after parsing attributes in process `syz.1.589'. [ 2172.049372][ T7809] netlink: 84 bytes leftover after parsing attributes in process `syz.1.589'. [ 2180.566600][ T7423] veth0_vlan: entered promiscuous mode [ 2181.087440][ T7423] veth1_vlan: entered promiscuous mode [ 2183.606138][ T7423] veth0_macvtap: entered promiscuous mode [ 2183.970443][ T7423] veth1_macvtap: entered promiscuous mode [ 2185.923353][ T7423] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2185.925858][ T7423] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2185.958803][ T7423] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2185.961013][ T7423] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2192.073609][ T7840] usb usb1: usbfs: process 7840 (syz.2.571) did not claim interface 0 before use [ 2197.194350][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2197.206262][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 2204.130265][ T7868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2204.216047][ T7868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2217.030533][ T7883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.601'. [ 2243.855130][ T7909] netlink: 'syz.1.611': attribute type 21 has an invalid length. [ 2254.364493][ T7923] netlink: 'syz.2.615': attribute type 1 has an invalid length. [ 2256.709609][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2256.718187][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 2276.590562][ T7943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.622'. [ 2291.624086][ T7958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2291.683336][ T7958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2322.531205][ T8004] netlink: 56 bytes leftover after parsing attributes in process `syz.1.641'. [ 2322.532763][ T8004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.641'. [ 2322.533983][ T8004] netlink: 31 bytes leftover after parsing attributes in process `syz.1.641'. [ 2322.552375][ T8004] netlink: 'syz.1.641': attribute type 3 has an invalid length. [ 2322.553724][ T8004] netlink: 'syz.1.641': attribute type 2 has an invalid length. [ 2322.554869][ T8004] netlink: 31 bytes leftover after parsing attributes in process `syz.1.641'. [ 2324.429684][ T8007] random: crng reseeded on system resumption [ 2330.543091][ T34] audit: type=1326 audit(2329.660:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8014 comm="syz.2.645" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb8fa code=0x0 [ 2351.488132][ T8042] netlink: 44 bytes leftover after parsing attributes in process `syz.2.653'. [ 2351.489784][ T8042] netlink: 43 bytes leftover after parsing attributes in process `syz.2.653'. [ 2351.505428][ T8042] netlink: 'syz.2.653': attribute type 5 has an invalid length. [ 2351.544261][ T8042] netlink: 43 bytes leftover after parsing attributes in process `syz.2.653'. [ 2357.218919][ T8051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2357.223061][ T8051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2369.371402][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 2374.606178][ T8073] netlink: 12 bytes leftover after parsing attributes in process `syz.2.661'. [ 2374.611589][ T8073] netlink: 12 bytes leftover after parsing attributes in process `syz.2.661'. [ 2379.583568][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2385.069782][ T8088] netlink: 'syz.1.665': attribute type 21 has an invalid length. [ 2385.072035][ T8088] netlink: 'syz.1.665': attribute type 20 has an invalid length. [ 2385.074206][ T8088] IPv6: NLM_F_CREATE should be specified when creating new route [ 2393.909477][ T8095] geneve2: entered promiscuous mode [ 2393.911726][ T8095] geneve2: entered allmulticast mode [ 2394.565235][ T8100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2394.631871][ T8100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2395.394667][ T8095] syz.2.668 (8095): attempted to duplicate a private mapping with mremap. This is not supported. [ 2406.672312][ T34] audit: type=1800 audit(2405.800:28): pid=8112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.671" name="/newroot/346/file0" dev="tmpfs" ino=1849 res=0 errno=0 [ 2410.114815][ T34] audit: type=1326 audit(2409.250:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8124 comm="syz.1.673" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb8fa code=0x0 [ 2422.983114][ T8142] TCP: out of memory -- consider tuning tcp_mem [ 2426.763304][ T8144] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 2436.473149][ T8160] netlink: 32 bytes leftover after parsing attributes in process `syz.2.682'. [ 2446.640787][ T34] audit: type=1326 audit(2445.780:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8176 comm="syz.1.687" exe="/syz-executor" sig=9 arch=c00000f3 syscall=98 compat=0 ip=0xdb8fa code=0x0 [ 2447.768294][ T34] audit: type=1326 audit(2446.900:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8176 comm="syz.1.687" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb8fa code=0x7ffc0000 [ 2447.790836][ T34] audit: type=1326 audit(2446.920:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8176 comm="syz.1.687" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb8fa code=0x7ffc0000 [ 2447.808438][ T34] audit: type=1326 audit(2446.940:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8176 comm="syz.1.687" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdb8fa code=0x7ffc0000 [ 2447.811290][ T34] audit: type=1326 audit(2446.940:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8176 comm="syz.1.687" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb8fa code=0x7ffc0000 [ 2447.838428][ T34] audit: type=1326 audit(2446.970:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8176 comm="syz.1.687" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdb8fa code=0x7ffc0000 [ 2447.840769][ T34] audit: type=1326 audit(2446.970:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8176 comm="syz.1.687" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb8fa code=0x7ffc0000 [ 2447.859760][ T34] audit: type=1326 audit(2446.970:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8176 comm="syz.1.687" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb8fa code=0x7ffc0000 [ 2447.910227][ T34] audit: type=1326 audit(2447.040:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8176 comm="syz.1.687" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdb8fa code=0x7ffc0000 [ 2447.942407][ T34] audit: type=1326 audit(2447.080:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8176 comm="syz.1.687" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb8fa code=0x7ffc0000 [ 2449.670741][ T8181] netlink: 56 bytes leftover after parsing attributes in process `syz.2.688'. [ 2449.672962][ T8181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.688'. [ 2449.674155][ T8181] netlink: 31 bytes leftover after parsing attributes in process `syz.2.688'. [ 2449.675243][ T8181] netlink: 'syz.2.688': attribute type 3 has an invalid length. [ 2449.676242][ T8181] netlink: 'syz.2.688': attribute type 2 has an invalid length. [ 2449.698469][ T8181] netlink: 31 bytes leftover after parsing attributes in process `syz.2.688'. [ 2467.213928][ T8200] netlink: 56 bytes leftover after parsing attributes in process `syz.2.693'. [ 2467.215551][ T8200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.693'. [ 2467.220931][ T8200] netlink: 31 bytes leftover after parsing attributes in process `syz.2.693'. [ 2467.222362][ T8200] netlink: 'syz.2.693': attribute type 3 has an invalid length. [ 2467.223437][ T8200] netlink: 'syz.2.693': attribute type 2 has an invalid length. [ 2467.224437][ T8200] netlink: 31 bytes leftover after parsing attributes in process `syz.2.693'. [ 2484.431408][ T8220] netlink: 56 bytes leftover after parsing attributes in process `syz.2.699'. [ 2484.432919][ T8220] netlink: 12 bytes leftover after parsing attributes in process `syz.2.699'. [ 2484.434037][ T8220] netlink: 31 bytes leftover after parsing attributes in process `syz.2.699'. [ 2484.435120][ T8220] netlink: 'syz.2.699': attribute type 3 has an invalid length. [ 2484.436188][ T8220] netlink: 'syz.2.699': attribute type 2 has an invalid length. [ 2484.441967][ T8220] netlink: 31 bytes leftover after parsing attributes in process `syz.2.699'. [ 2486.642959][ T8225] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2486.696484][ T8225] wg1: entered promiscuous mode [ 2486.699164][ T8225] wg1: entered allmulticast mode [ 2489.262842][ T8229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2489.304235][ T8229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2505.324006][ T8252] netlink: 56 bytes leftover after parsing attributes in process `syz.1.705'. [ 2505.325773][ T8252] netlink: 12 bytes leftover after parsing attributes in process `syz.1.705'. [ 2505.379706][ T8252] netlink: 31 bytes leftover after parsing attributes in process `syz.1.705'. [ 2505.384785][ T8252] netlink: 'syz.1.705': attribute type 3 has an invalid length. [ 2505.386637][ T8252] netlink: 'syz.1.705': attribute type 2 has an invalid length. [ 2505.395539][ T8252] netlink: 31 bytes leftover after parsing attributes in process `syz.1.705'. [ 2505.871145][ T8254] netlink: 28 bytes leftover after parsing attributes in process `syz.2.706'. [ 2507.945653][ T8258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2507.965978][ T8258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2521.583267][ T8272] netlink: 56 bytes leftover after parsing attributes in process `syz.2.711'. [ 2521.584778][ T8272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.711'. [ 2521.585939][ T8272] netlink: 31 bytes leftover after parsing attributes in process `syz.2.711'. [ 2521.592251][ T8272] netlink: 'syz.2.711': attribute type 3 has an invalid length. [ 2521.593454][ T8272] netlink: 'syz.2.711': attribute type 2 has an invalid length. [ 2521.629609][ T8272] netlink: 31 bytes leftover after parsing attributes in process `syz.2.711'. [ 2528.433521][ T8277] cgroup: name respecified [ 2528.519813][ T8277] siw: device registration error -23 [ 2533.749454][ T8284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2533.756494][ T8284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2535.255524][ T8288] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 2535.259195][ T8288] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 2535.260582][ T8288] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 2539.750933][ T8293] netlink: 56 bytes leftover after parsing attributes in process `syz.1.717'. [ 2539.762523][ T8293] netlink: 12 bytes leftover after parsing attributes in process `syz.1.717'. [ 2539.769990][ T8293] netlink: 31 bytes leftover after parsing attributes in process `syz.1.717'. [ 2539.772249][ T8293] netlink: 'syz.1.717': attribute type 3 has an invalid length. [ 2539.774052][ T8293] netlink: 'syz.1.717': attribute type 2 has an invalid length. [ 2539.775781][ T8293] netlink: 31 bytes leftover after parsing attributes in process `syz.1.717'. [ 2545.464819][ T8303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2545.509773][ T8303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2554.196219][ T8309] netlink: 56 bytes leftover after parsing attributes in process `syz.2.723'. [ 2554.218830][ T8309] netlink: 12 bytes leftover after parsing attributes in process `syz.2.723'. [ 2554.220212][ T8309] netlink: 31 bytes leftover after parsing attributes in process `syz.2.723'. [ 2554.221507][ T8309] netlink: 'syz.2.723': attribute type 3 has an invalid length. [ 2554.222684][ T8309] netlink: 'syz.2.723': attribute type 2 has an invalid length. [ 2554.223744][ T8309] netlink: 31 bytes leftover after parsing attributes in process `syz.2.723'. [ 2561.903053][ T8323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2561.945247][ T8323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2562.552156][ T8326] netlink: 56 bytes leftover after parsing attributes in process `syz.1.729'. [ 2562.553529][ T8326] netlink: 12 bytes leftover after parsing attributes in process `syz.1.729'. [ 2562.554575][ T8326] netlink: 31 bytes leftover after parsing attributes in process `syz.1.729'. [ 2562.555602][ T8326] netlink: 'syz.1.729': attribute type 3 has an invalid length. [ 2562.556564][ T8326] netlink: 'syz.1.729': attribute type 2 has an invalid length. [ 2562.561801][ T8326] netlink: 31 bytes leftover after parsing attributes in process `syz.1.729'. [ 2568.973698][ T8332] netlink: 4079 bytes leftover after parsing attributes in process `syz.1.731'. [ 2570.203287][ T8332] vlan3: entered allmulticast mode [ 2570.205092][ T8332] vlan1: entered allmulticast mode [ 2570.206084][ T8332] veth0_vlan: entered allmulticast mode [ 2570.628271][ T8332] Dead loop on virtual device ipvlan1, fix it urgently! [ 2570.629686][ T8332] Insufficient stack space to handle exception! [ 2570.630283][ T8332] Task stack: [0xffff8f8001b10000..0xffff8f8001b18000] [ 2570.630628][ T8332] Overflow stack: [0xffffaf806ed75070..0xffffaf806ed76070] [ 2570.630999][ T8332] CPU: 1 UID: 0 PID: 8332 Comm: syz.1.731 Not tainted 6.14.0-rc1-syzkaller-g245aece3750d #0 [ 2570.631519][ T8332] Hardware name: riscv-virtio,qemu (DT) [ 2570.631996][ T8332] epc : vsnprintf+0x32/0xaba [ 2570.632606][ T8332] ra : sprintf+0x9e/0xc8 [ 2570.633153][ T8332] epc : ffffffff8622dd8a ra : ffffffff8622ea32 sp : ffff8f8001b0ff90 [ 2570.633607][ T8332] gp : ffffffff89c1d3c0 tp : 0000000000000000 t0 : b7418ddcaab401d6 [ 2570.633993][ T8332] t1 : ffff8f8001b100e0 t2 : 0000000000000246 s0 : ffff8f8001b100d0 [ 2570.634375][ T8332] s1 : 1ffff1f000361ffc a0 : ffff8f8001b10310 a1 : 000000007fffffff [ 2570.634754][ T8332] a2 : ffffffff8684f0c0 a3 : ffff8f8001b10180 a4 : ffff8f8001b0ffe0 [ 2570.635126][ T8332] a5 : ffff8f8001b10060 a6 : 0000000041b59000 a7 : ffff8f8001b10267 [ 2570.635517][ T8332] s2 : ffff8f8001b10140 s3 : ffff8f8001b10060 s4 : ffffffff8684f0c0 [ 2570.635905][ T8332] s5 : ffff8f8001b10310 s6 : ffff8f8001b10480 s7 : dfffffff00000000 [ 2570.636301][ T8332] s8 : 0000000000000001 s9 : 0000000000000000 s10: ffff8f8001b10480 [ 2570.636738][ T8332] s11: 1ffff1f000362092 t3 : 1ffff1f00036201c t4 : fffff1ef0036204c [ 2570.637101][ T8332] t5 : fffff1ef0036204d t6 : ffff8f8001b10278 [ 2570.637469][ T8332] status: 0000000200000120 badaddr: ffff8f8001b0ff98 cause: 000000000000000f [ 2570.638577][ T8332] Kernel panic - not syncing: Kernel stack overflow [ 2570.639326][ T8332] CPU: 1 UID: 0 PID: 8332 Comm: syz.1.731 Not tainted 6.14.0-rc1-syzkaller-g245aece3750d #0 [ 2570.639826][ T8332] Hardware name: riscv-virtio,qemu (DT) [ 2570.640055][ T8332] Call Trace: [ 2570.640247][ T8332] [] dump_backtrace+0x2e/0x3c [ 2570.640819][ T8332] [] show_stack+0x30/0x3c [ 2570.641263][ T8332] [] dump_stack_lvl+0x110/0x1a6 [ 2570.641909][ T8332] [] dump_stack+0x1c/0x24 [ 2570.642547][ T8332] [] panic+0x38c/0x86a [ 2570.642832][ T8332] [] handle_bad_stack+0xd4/0x110 [ 2570.643130][ T8332] [] sprintf+0x9e/0xc8 [ 2570.643690][ T8332] SMP: stopping secondary CPUs VM DIAGNOSIS: 18:33:57 Registers: info registers vcpu 0 CPU#0 V = 0 pc ffffffff8007f0c8 mhartid 0000000000000000 mstatus 0000000a000001a0 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000200 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000444 medeleg 0000000000f0b509 hedeleg 000000000000b109 mtvec 00000000800004f0 stvec ffffffff86268630 vstvec 0000000000000000 mepc ffffffff80067178 sepc ffffffff80259dae vsepc 0000000000000000 mcause 8000000000000003 scause 8000000000000001 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 000000008004a000 sscratch 0000000000000000 satp 905f6000000b0f4c x0/zero 0000000000000000 x1/ra ffffffff8007f0c4 x2/sp ffff8f8000007e30 x3/gp ffffffff89c1d3c0 x4/tp ffffffff88246000 x5/t0 4b952e4da9267483 x6/t1 fffffffef13a4900 x7/t2 0000000000000005 x8/s0 ffff8f8000007e60 x9/s1 ffffffff8680b828 x10/a0 0000000000000001 x11/a1 0000000000000004 x12/a2 0000000000000001 x13/a3 ffffffff8007f0c4 x14/a4 0000000000000000 x15/a5 ffffffff88246000 x16/a6 fffffffef13a4901 x17/a7 0000000000000003 x18/s2 0000000000000000 x19/s3 ffffffff90fcb3a0 x20/s4 ffffaf8011a99400 x21/s5 0000000000000004 x22/s6 ffffffff86857e00 x23/s7 ffffffff8665d000 x24/s8 ffffffff8007ee06 x25/s9 0000000000000000 x26/s10 ffffffff88207da0 x27/s11 1ffffffff1040fa8 x28/t3 ffffffff88246b30 x29/t4 fffffffef13a4900 x30/t5 fffffffef13a4901 x31/t6 0000000000000009 fcsr 0000000000000000 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 CPU#1 V = 0 pc ffffffff81db2ab8 mhartid 0000000000000001 mstatus 0000000a000001a0 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000022 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000444 medeleg 0000000000f0b509 hedeleg 000000000000b109 mtvec 00000000800004f0 stvec ffffffff86268630 vstvec 0000000000000000 mepc ffffffff80088636 sepc ffffffff8622dd8a vsepc 0000000000000000 mcause 0000000000000009 scause 000000000000000f vscause 0000000000000000 mtval 0000000000000000 stval ffff8f8001b0ff98 htval 0000000000000000 mtval2 0000000000000000 mscratch 0000000080048000 sscratch 0000000000000000 satp 905f500000098b73 x0/zero 0000000000000000 x1/ra ffffffff81db2a8e x2/sp ffffaf806ed75940 x3/gp ffffffff89c1d3c0 x4/tp ffffaf801ba2b480 x5/t0 6666666666663c5b x6/t1 0000000000000000 x7/t2 666666666666663c x8/s0 ffffaf806ed75980 x9/s1 ffffffff90fb9d80 x10/a0 ffffffff90fb9dc8 x11/a1 000000000000001f x12/a2 0000000000080000 x13/a3 ffffffff81db2a8e x14/a4 1ffffffff21f73b9 x15/a5 ffff8f800006d000 x16/a6 0000000000000003 x17/a7 fffffffff3f3f3f3 x18/s2 0000000000000061 x19/s3 0000000000000000 x20/s4 0000000000000000 x21/s5 0000000000000000 x22/s6 ffffffff81db2a20 x23/s7 0000000000000000 x24/s8 ffffffff90dda2e5 x25/s9 0000000000000010 x26/s10 fffffffef21f73bb x27/s11 dfffffff00000000 x28/t3 ffffffff802cb7e4 x29/t4 fffff5ef0ddaeb18 x30/t5 fffff5ef0ddaeb19 x31/t6 ffffffff90dda2b7 fcsr 0000000000000000 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000