last executing test programs: 11m5.127145284s ago: executing program 1 (id=121): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(r1, 0xc, 0x0, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x880) connect$inet(0xffffffffffffffff, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), 0xffffffffffffffff, 0x2}}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 11m3.883823459s ago: executing program 1 (id=123): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}], 0x20) sendto$inet(r0, &(0x7f0000000800)='-', 0x1, 0x240080d0, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x44}}, 0x1c) 11m2.67574098s ago: executing program 1 (id=132): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970001400078008000640000002000800084000000041eb10c03a5373d18ee1b6dee760a7b6bdcf56069c7f4b04f06d55aad93e5215599cc6444fd164f9f3813a3eb2248c867d24673f1bb94ffe02ddd298e1fbdb77eebaa98dac26bf38d2ee601644d2e28a6c906a1d7dd1fb883ed5886e1b21017b30be3febf2be7af443f964b4e21a7d208be1d6825b3fb7be3a7c7c91663e7f25a9a7ce224789f621ed3cfe27ded42a08d6a23ea2ec7ce6f7ec02ef172aed22bda2241f9e13cf1649d820a4e7a6209e52d93aab988166bd"], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000740)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="09008000", @ANYRES16=r5, @ANYBLOB="04002cbd7000fddbdf25020000000400050008000b00", @ANYRES32=r1, @ANYBLOB="060001004e22000005000400000000000400050014000700000000000000000000000000000000010500040001000000040005000500040002000000"], 0x5c}, 0x1, 0x0, 0x0, 0x44004}, 0x2000c010) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000200)=@buf={0xaa, &(0x7f0000000300)="ea3084caa7a764ae0f7ec2efbfe9837be01f2bc5ac8b19bfeb04467105c9a03cb6377cd990459a029cb54aa3d8c4953acc097ade1e69a5001f4bf20ef3edcd5afc437e3eae83cfb4d3cc79b0c98db863ff49993ef17f7cb7917f77960430eb82e78ee07e83bffb26bb4dd74804f03f49f1da615455e0fa56d1d18741c5baac66aa8cbd76ad2e5f7752e048d54360bb4df834e13553cfeb532a8a41fb2e8be7373ef8252eb7cae70c6dd9"}) r7 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000400)={0x0, 0x0, @pic={0x1, 0x2, 0x7f, 0x6, 0x8, 0x2, 0x9, 0xea, 0x8, 0x0, 0x9, 0x3, 0x4, 0x3, 0xa8, 0x2}}) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 10m58.234334409s ago: executing program 1 (id=135): socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0xe0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0xa}, 0x9c) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, 0x0, 0x0) madvise(&(0x7f0000dca000/0x1000)=nil, 0x1000, 0x65) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x40000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f0000000580)={0x80, 0x5, 0x6, 0x4, 0x8}) 10m56.261222381s ago: executing program 1 (id=130): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e04004220"], 0x7) 10m55.550466806s ago: executing program 1 (id=131): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) unshare(0x6a040000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x78, r6, 0x711, 0x70bd25, 0x255fdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x3c}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x20}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) unshare(0x40000800) timerfd_create(0x0, 0x0) r7 = gettid() r8 = syz_open_procfs(r7, &(0x7f0000000300)='net/snmp\x00') lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000140)) read$FUSE(r8, &(0x7f0000002bc0)={0x2020}, 0x2020) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a66000000000000000000bbee07cb010052f436dd2a00"/42, 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f747082f52a9d212fad09cdb0e8f21d5bc27bd49eb067a0689fff2a4", 0x24}], 0x2) 10m37.999296063s ago: executing program 32 (id=131): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) unshare(0x6a040000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x78, r6, 0x711, 0x70bd25, 0x255fdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x3c}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x20}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) unshare(0x40000800) timerfd_create(0x0, 0x0) r7 = gettid() r8 = syz_open_procfs(r7, &(0x7f0000000300)='net/snmp\x00') lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000140)) read$FUSE(r8, &(0x7f0000002bc0)={0x2020}, 0x2020) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a66000000000000000000bbee07cb010052f436dd2a00"/42, 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f747082f52a9d212fad09cdb0e8f21d5bc27bd49eb067a0689fff2a4", 0x24}], 0x2) 6m20.953077873s ago: executing program 2 (id=638): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x64, 0x6, 0x610, 0x550, 0x1f0, 0x408, 0x550, 0x120, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@length={{0x28}, {0x7, 0xb0, 0x81}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @loopback, [0x0, 0x0, 0xff0000ff], [0x0, 0x0, 0x0, 0xff000000], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@unspec=@connmark={{0x30}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv6=@private1, 0x0, 0x38}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x670) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000180)=0x1000) ppoll(&(0x7f0000000040)=[{r4, 0x20}], 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x5, &(0x7f0000fff000/0x1000)=nil, 0xc) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r4, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x4000) 6m19.829100308s ago: executing program 2 (id=639): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x18}}], 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 6m19.777386863s ago: executing program 2 (id=640): memfd_create(0x0, 0x2) r0 = socket$rxrpc(0x21, 0x2, 0xa) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) close(0xffffffffffffffff) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x80002) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) bind$rxrpc(r0, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x1, @mcast2, 0x8}}, 0x3d) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x150}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000003c0)={0x6, &(0x7f0000000500)=[{0xd, 0x81, 0x1, 0xc43e}, {0x7, 0x0, 0x91, 0x5}, {0x6, 0x6c, 0x0, 0x6}, {0xfff3, 0x6, 0xb6, 0x8}, {0x200, 0x5, 0x8, 0x5}, {0x5, 0x3, 0x0, 0x1}]}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001b700)=""/102392, 0x18ff8) 6m18.669215227s ago: executing program 2 (id=641): ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000280)={0x0, 0x0, 0xffffffffffffffff, 0x5, 0x80000}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_io_uring_setup(0x494, &(0x7f0000000400)={0x0, 0x2003f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r0, 0x3516, 0xf4f5, 0x0, 0x0, 0x0) 6m17.941161685s ago: executing program 2 (id=643): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) 6m15.676791537s ago: executing program 2 (id=648): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x2180, 0x0, 0xe4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') socket$inet_udplite(0x2, 0x2, 0x88) preadv(r2, 0x0, 0x0, 0x0, 0x5) socket(0x10, 0x3, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fadvise64(0xffffffffffffffff, 0x18, 0x0, 0x4) r3 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback, 0x4}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmsg$can_bcm(r3, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x10002) sendmmsg$unix(r3, &(0x7f0000000080)=[{{&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000300)="0959f8e5bf7530155a9d52a653dbef7c3208e77e59bc4b199aa4cca70be165d12a9e8990b5d41401400f7892747c5e1b24fa831b841e318eca11dd511bbe45db76f784034a056db0eae3335f23c3eb50e2840e3e723225ec2a9c9fe5061933b418eae4bb29abc563f2", 0x69}], 0x1, 0x0, 0x0, 0x20040850}}], 0x1, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="19072bbd7000fcdbdfff0604000400102cd2f58de039e63f57d7d97d890c9b50581c4cb0169823c024f7f9c2f89530fe541c50cc910f30ef6bcf44a6422af47cd22b7e070000000000000000bcadc1b8192bfc76c406c76c224aa69fc0843c230bb1cfbdfd24bedd43e86c1cd8b821608121fc54597acf"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x880) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 5m59.735449737s ago: executing program 33 (id=648): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x2180, 0x0, 0xe4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') socket$inet_udplite(0x2, 0x2, 0x88) preadv(r2, 0x0, 0x0, 0x0, 0x5) socket(0x10, 0x3, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fadvise64(0xffffffffffffffff, 0x18, 0x0, 0x4) r3 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback, 0x4}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmsg$can_bcm(r3, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x10002) sendmmsg$unix(r3, &(0x7f0000000080)=[{{&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000300)="0959f8e5bf7530155a9d52a653dbef7c3208e77e59bc4b199aa4cca70be165d12a9e8990b5d41401400f7892747c5e1b24fa831b841e318eca11dd511bbe45db76f784034a056db0eae3335f23c3eb50e2840e3e723225ec2a9c9fe5061933b418eae4bb29abc563f2", 0x69}], 0x1, 0x0, 0x0, 0x20040850}}], 0x1, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="19072bbd7000fcdbdfff0604000400102cd2f58de039e63f57d7d97d890c9b50581c4cb0169823c024f7f9c2f89530fe541c50cc910f30ef6bcf44a6422af47cd22b7e070000000000000000bcadc1b8192bfc76c406c76c224aa69fc0843c230bb1cfbdfd24bedd43e86c1cd8b821608121fc54597acf"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x880) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 3m47.585539803s ago: executing program 4 (id=958): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x440, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc8, 0x8fff, 0xffffffff, 0x5, 0x3ff, 0x802, 0x1600, 0x7, 0x1, 0x9, 0xe1cb, 0x8, 0xd4, 0x3, 0x80000000, 0x0, 0x100d5ee, 0x20, 0xf7fffff5, 0xffffeadb, 0x6, 0x4, 0x8, 0x4, 0x8000000, 0x8]}) 3m46.986561139s ago: executing program 4 (id=959): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K\x00\x00\x00\x00\x00\x00', 0x0) fsopen(0x0, 0x0) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) openat$dsp1(0xffffffffffffff9c, 0x0, 0x20080, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) set_mempolicy(0x8006, 0x0, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x6, 0x0, 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', &(0x7f0000000380)='./file0/file0\x00'}) io_uring_enter(r1, 0x3516, 0x4, 0x20, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, 0x0, 0x0) connect$inet6(r4, 0x0, 0x0) 3m45.969814134s ago: executing program 4 (id=962): socket$inet_udp(0x2, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'dvmrp0\x00', 0xe43986f95b0e4309}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xff40}, 0x1, 0x0, 0x0, 0x4004105}, 0x4008000) sched_setaffinity(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x2, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbabd, 0x81, 0x5, 0x1, 0xfff}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m41.183674251s ago: executing program 4 (id=969): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x56}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/39, 0x27}], 0x1, 0x0, 0xfffffffd) 3m39.775131003s ago: executing program 4 (id=974): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$netlink(0x10, 0x3, 0x8000000004) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r8, 0x3b85, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r9, 0x0, &(0x7f00005c8000/0x2000)=nil, 0x2000, 0x5}) writev(r7, &(0x7f0000000080)=[{0x0}], 0x1) shutdown(r2, 0x0) sendmmsg$inet_sctp(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000280)={0x0, 0x3ff}, 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x140, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x12c, 0x1, [@m_connmark={0x34, 0xf, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xb0, 0x3, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0x33, 0x10000000, 0x34e, 0xffff}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x140}}, 0x0) 3m38.634924499s ago: executing program 4 (id=978): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380", 0xb}], 0x1) 3m22.920746399s ago: executing program 34 (id=978): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380", 0xb}], 0x1) 12.101256518s ago: executing program 6 (id=1403): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x80801) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000080)={0x0, "3358583a39da66fa01d67cfd6ea87cce0a68f81fa4d4a9427e1bf7979fe0f77044948a13d36c547f71bab92b051175a5b00aa2fef0c02d3f500a17a96ff09f63233985641919ca834b8ec6c071979aefe99c3b765f7cef75ba7f54d8cbb657220f09767053b372d9ff4eadabc8ed2417549a7be7f05fe36272ce7e3acc6ef77ce791e839f83029a7df54ea3633f2f9325d83d31e50d169bf80508c2cdbeb746c8aa80436d9d9746589497241796d20ef1bf9be6b80522150b1d27f3dbefa97c98d5a52e3f22e1dcf71f7fc22917de751ad9e4c91ac034d6bc2c5b56020d055adf92189f95328ae4d853057e4081795ee5bc543089cf6d3d46221f8458a5f8918"}) 12.07102636s ago: executing program 6 (id=1405): socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000080)={@any, 0x3}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x20004000) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 11.667129949s ago: executing program 6 (id=1408): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 9.988085695s ago: executing program 0 (id=1414): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102392, 0x18ff8) open_tree(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r6, 0xffffffffffffffff}) close_range(0xffffffffffffffff, r4, 0x0) ioctl$SYNC_IOC_FILE_INFO(r7, 0xc0383e04, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000100000001800018014000200776c616e30000000000000000000000b08000700e80700000800070001000000080009007f000000080007000900000008000800080000000800"], 0x5c}, 0x1, 0x0, 0x0, 0x4084}, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.316256592s ago: executing program 0 (id=1417): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x56}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/39, 0x27}], 0x1, 0x0, 0xfffffffd) 7.246313132s ago: executing program 0 (id=1419): r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r2 = syz_io_uring_setup(0x487, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x42, 0x0, @fd_index=0x9, 0x2, 0x0, 0x7fd, 0x0, 0x1}) io_uring_enter(r2, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 6.117657637s ago: executing program 0 (id=1421): connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 4.603730279s ago: executing program 3 (id=1422): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40404) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) 4.332958244s ago: executing program 3 (id=1423): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shutdown(0xffffffffffffffff, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x64, 0x6, 0x5e0, 0x550, 0x1f0, 0x408, 0x550, 0x120, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@length={{0x28}, {0x7, 0xb0, 0x81}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @loopback, [0x0, 0x0, 0xff0000ff], [0x0, 0x0, 0x0, 0xff000000], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@unspec=@connmark={{0x30}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv6=@private1, 0x0, 0x38}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x640) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000180)=0x1000) ppoll(&(0x7f0000000040)=[{r4, 0x20}], 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x5, &(0x7f0000fff000/0x1000)=nil, 0xc) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r4, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x4000) 4.332658684s ago: executing program 0 (id=1424): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0xe5c, 0x80000) r3 = eventfd2(0xfffff919, 0x800) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r2, 0x8, 0x2, r3}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000180)={r2, 0x9, 0x2, r3}) 3.252440145s ago: executing program 3 (id=1425): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102392, 0x18ff8) open_tree(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r6, 0xffffffffffffffff}) close_range(0xffffffffffffffff, r4, 0x0) ioctl$SYNC_IOC_FILE_INFO(r7, 0xc0383e04, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000100000001800018014000200776c616e30000000000000000000000b08000700e80700000800070001000000080009007f000000080007000900000008000800080000000800"], 0x5c}, 0x1, 0x0, 0x0, 0x4084}, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.235966677s ago: executing program 5 (id=1426): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x915b, 0x1, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r1, 0x1, 0x0, 0x0, 0x2}) io_uring_enter(r1, 0x4c6e, 0xc67a, 0xc, 0x0, 0x0) 3.049144614s ago: executing program 6 (id=1427): bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x56}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/39, 0x27}], 0x1, 0x0, 0xfffffffd) 3.048946485s ago: executing program 0 (id=1428): syz_io_uring_setup(0x4175, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100153a42908f00a71729188110203010902240001060000000904020002ffffff0009050b0000000000000905", @ANYRES8], 0x0) 2.479753598s ago: executing program 3 (id=1429): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000340), 0x0, 0x0) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r0, 0xc0506107, &(0x7f0000000080)) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xd0}) 2.422417763s ago: executing program 5 (id=1430): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a28093020600", 0x13}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000880), 0x200000000000002, 0x862b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) 2.169062117s ago: executing program 3 (id=1431): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) syz_open_dev$sg(&(0x7f0000000000), 0xffffffffffffff10, 0x402402) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) shutdown(0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') read$FUSE(r6, 0x0, 0x0) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000040)) 1.349811933s ago: executing program 6 (id=1432): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x8000000004) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r7, 0x3b85, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f00000001c0)={0x28, 0x4, r8, 0x0, &(0x7f000060c000/0x3000)=nil, 0x3000, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r8, 0x0, &(0x7f00005c8000/0x2000)=nil, 0x2000, 0x5}) ioctl$IOMMU_IOAS_COPY(r7, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r8, r8, 0x2, 0xfffffffffffffffa, 0x3fff}) shutdown(r2, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000280)={0x0, 0x3ff}, 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x5c, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) 1.196074307s ago: executing program 3 (id=1433): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x3, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, &(0x7f0000000100)={@dev, @local, @broadcast}, &(0x7f0000000080)=0xc) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x8004}, 0x800) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000080)=0xf7e) read$dsp(r5, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xe) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001a40)=@raw={'raw\x00', 0x8, 0x3, 0x224, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x278, 0x358, 0x358, 0x278, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'netdevsim0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x280) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 1.113136345s ago: executing program 5 (id=1434): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_usb_connect(0x2, 0x68, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) 200.316151ms ago: executing program 6 (id=1435): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x181242, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000040)=0x25000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 187.738012ms ago: executing program 5 (id=1436): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x20000002, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x40000) 57.000414ms ago: executing program 5 (id=1437): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102392, 0x18ff8) open_tree(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r6, 0xffffffffffffffff}) close_range(0xffffffffffffffff, r4, 0x0) ioctl$SYNC_IOC_FILE_INFO(r7, 0xc0383e04, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000100000001800018014000200776c616e30000000000000000000000b08000700e80700000800070001000000080009007f000000080007000900000008000800080000000800"], 0x5c}, 0x1, 0x0, 0x0, 0x4084}, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 5 (id=1438): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @local}], 0x2c) sendmmsg$inet(r0, &(0x7f00000039c0), 0x0, 0xf0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f00000002c0)=0x10) kernel console output (not intermixed with test programs): g later): interface not active [ 462.550373][ T2177] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 462.578214][ T8911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.592936][ T8911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.652073][ T8911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.758633][ T2177] usb 1-1: no configurations [ 462.765276][ T2177] usb 1-1: can't read configurations, error -22 [ 462.796200][ T2177] usb usb1-port1: attempt power cycle [ 462.879283][ T8911] hsr_slave_0: entered promiscuous mode [ 462.896129][ T8911] hsr_slave_1: entered promiscuous mode [ 463.115774][ T145] tipc: Left network mode [ 463.210195][ T2177] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 463.262112][ T2177] usb 1-1: no configurations [ 463.267052][ T2177] usb 1-1: can't read configurations, error -22 [ 463.629040][ T2177] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 463.681538][ T2177] usb 1-1: no configurations [ 463.686224][ T2177] usb 1-1: can't read configurations, error -22 [ 463.740684][ T2177] usb usb1-port1: unable to enumerate USB device [ 463.884048][ T8911] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 463.899691][ T8911] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 463.912906][ T8911] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 464.370827][ T8911] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 464.385753][ T5772] Bluetooth: hci4: command tx timeout [ 466.473075][ T5772] Bluetooth: hci4: command tx timeout [ 466.896433][ T8911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.063124][ T8911] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.451123][ T1321] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.458379][ T1321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.793428][ T145] hsr_slave_0: left promiscuous mode [ 467.805472][ T145] hsr_slave_1: left promiscuous mode [ 467.819222][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 467.856523][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 467.901137][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.923975][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.942485][ T145] bridge_slave_1: left allmulticast mode [ 467.948430][ T145] bridge_slave_1: left promiscuous mode [ 467.965832][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.989530][ T145] bridge_slave_0: left allmulticast mode [ 467.996570][ T145] bridge_slave_0: left promiscuous mode [ 468.029813][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.102188][ T145] veth1_macvtap: left promiscuous mode [ 468.108105][ T145] veth0_macvtap: left promiscuous mode [ 468.124329][ T145] veth1_vlan: left promiscuous mode [ 468.129744][ T145] veth0_vlan: left promiscuous mode [ 468.316493][ T5962] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 468.428709][ T5830] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 468.516380][ T5962] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 468.535530][ T5962] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 468.550213][ T5962] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 468.559808][ T5962] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 468.578394][ T5962] usb 4-1: SerialNumber: syz [ 468.628073][ T5830] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 468.640158][ T5830] usb 1-1: config 0 has no interface number 0 [ 468.646402][ T5830] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 468.670193][ T5830] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 64 [ 468.697276][ T5830] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 468.707640][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.757236][ T5830] usb 1-1: config 0 descriptor?? [ 468.764625][ T9031] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 468.788742][ T5830] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 468.884097][ T5962] usb 4-1: 0:2 : does not exist [ 469.245368][ C0] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 469.354381][ T5830] usb 1-1: USB disconnect, device number 16 [ 469.832804][ T5962] usb 4-1: USB disconnect, device number 19 [ 469.945104][ T8950] udevd[8950]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 470.025926][ T145] team0 (unregistering): Port device team_slave_1 removed [ 470.135324][ T145] team0 (unregistering): Port device team_slave_0 removed [ 470.190418][ T5895] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 470.268478][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 470.388057][ T5895] usb 5-1: Using ep0 maxpacket: 8 [ 470.401845][ T5895] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 470.410499][ T5895] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 470.426268][ T5895] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 470.439074][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 470.454685][ T5895] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 470.470090][ T5895] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 470.499557][ T5895] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 470.509714][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.744613][ T5895] usb 5-1: usb_control_msg returned -32 [ 470.769538][ T5895] usbtmc 5-1:16.0: can't read capabilities [ 472.428097][ T145] bond0 (unregistering): Released all slaves [ 472.581685][ T9073] tmpfs: Unknown parameter 'mpoult' [ 472.657591][ T1068] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.664942][ T1068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.381474][ T5895] usb 5-1: USB disconnect, device number 12 [ 473.758555][ T8911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.138013][ T5895] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 476.380139][ T5895] usb 4-1: device descriptor read/64, error -71 [ 477.203841][ T5895] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 477.496341][ T5895] usb 4-1: device descriptor read/64, error -71 [ 477.620911][ T5895] usb usb4-port1: attempt power cycle [ 478.490136][ T5895] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 478.544715][ T5895] usb 4-1: device descriptor read/8, error -71 [ 478.682818][ T8911] veth0_vlan: entered promiscuous mode [ 478.727421][ T8911] veth1_vlan: entered promiscuous mode [ 479.057069][ T8911] veth0_macvtap: entered promiscuous mode [ 479.206376][ T8911] veth1_macvtap: entered promiscuous mode [ 479.296312][ T8911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.736730][ T8911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.806999][ T8911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.826079][ T8911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.836313][ T8911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.848082][ T8911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.863974][ T8911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.073872][ T8911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.110908][ T8911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.135713][ T8911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.149055][ T8911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.169261][ T8911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.190140][ T8911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.244790][ T8911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.295043][ T8911] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.378750][ T8911] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.391281][ T8911] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.404025][ T8911] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.110529][ T1321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.144966][ T1321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.200263][ T5830] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 481.280535][ T6135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.297933][ T6135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.413299][ T5830] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 481.430241][ T5830] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 481.460825][ T968] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 481.469739][ T5830] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 481.495098][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.547234][ T9156] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 481.593650][ T5830] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 481.630802][ T968] usb 1-1: device descriptor read/64, error -71 [ 481.886152][ T5895] usb 5-1: USB disconnect, device number 13 [ 481.921049][ T968] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 482.046957][ T9178] netlink: 'syz.5.750': attribute type 1 has an invalid length. [ 482.131828][ T968] usb 1-1: device descriptor read/64, error -71 [ 482.820388][ T968] usb usb1-port1: attempt power cycle [ 483.240515][ T968] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 483.271173][ T968] usb 1-1: device descriptor read/8, error -71 [ 483.551197][ T968] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 483.591858][ T968] usb 1-1: device descriptor read/8, error -71 [ 483.740730][ T968] usb usb1-port1: unable to enumerate USB device [ 487.017959][ T28] audit: type=1326 audit(1767166617.937:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9217 comm="syz.4.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab198f749 code=0x7ffc0000 [ 487.120944][ T28] audit: type=1326 audit(1767166617.937:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9217 comm="syz.4.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab198f749 code=0x7ffc0000 [ 487.223317][ T28] audit: type=1326 audit(1767166617.977:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9217 comm="syz.4.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7faab198f749 code=0x7ffc0000 [ 487.403681][ T28] audit: type=1326 audit(1767166617.977:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9217 comm="syz.4.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab198f749 code=0x7ffc0000 [ 487.478556][ T28] audit: type=1326 audit(1767166617.977:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9217 comm="syz.4.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab198f749 code=0x7ffc0000 [ 490.106006][ T9251] hub 6-0:1.0: USB hub found [ 490.112059][ T9251] hub 6-0:1.0: 1 port detected [ 497.193275][ T9344] netlink: 'syz.0.783': attribute type 1 has an invalid length. [ 497.201048][ T9344] netlink: 'syz.0.783': attribute type 2 has an invalid length. [ 498.509918][ T9353] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 499.704843][ T9365] syzkaller0: entered promiscuous mode [ 499.718439][ T9365] syzkaller0: entered allmulticast mode [ 500.586512][ T9375] comedi comedi2: s526: I/O port conflict (0x7f,64) [ 501.755949][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.762409][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.788493][ T9382] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 501.964365][ T9382] overlayfs: failed to resolve './file1/file0': -2 [ 504.299017][ T9401] tipc: Enabled bearer , priority 0 [ 504.338150][ T9401] syzkaller0: entered promiscuous mode [ 504.368807][ T9401] syzkaller0: entered allmulticast mode [ 504.494830][ T9401] tipc: Resetting bearer [ 506.225375][ T9400] tipc: Resetting bearer [ 506.388086][ T9400] tipc: Disabling bearer [ 506.538464][ T9418] input: syz0 as /devices/virtual/input/input16 [ 508.327908][ T9440] syzkaller0: entered promiscuous mode [ 508.335789][ T9440] syzkaller0: entered allmulticast mode [ 508.366177][ T9445] bridge0: entered promiscuous mode [ 515.983952][ T9462] tipc: Enabling of bearer rejected, failed to enable media [ 518.478354][ T9537] hub 5-0:1.0: USB hub found [ 518.483439][ T9537] hub 5-0:1.0: 1 port detected [ 518.915427][ T9543] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.830'. [ 520.027064][ T9562] syzkaller0: entered promiscuous mode [ 520.037031][ T9562] syzkaller0: entered allmulticast mode [ 521.160890][ T5845] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 521.365185][ T5845] usb 6-1: Using ep0 maxpacket: 16 [ 521.415203][ T5845] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 521.424332][ T5845] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 521.435279][ T5845] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 521.447921][ T5845] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 521.448649][ C1] vkms_vblank_simulate: vblank timer overrun [ 521.458887][ T5845] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.488118][ T5845] usb 6-1: Product: syz [ 521.495830][ T5845] usb 6-1: Manufacturer: syz [ 521.502004][ T5845] usb 6-1: SerialNumber: syz [ 521.958914][ T5845] usb 6-1: 0:2 : does not exist [ 522.673572][ T5845] usb 6-1: USB disconnect, device number 2 [ 522.738301][ T8950] udevd[8950]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 523.602965][ T9569] tipc: Enabling of bearer rejected, failed to enable media [ 527.357805][ T9606] netlink: 4 bytes leftover after parsing attributes in process `syz.5.839'. [ 529.195243][ T9636] syzkaller0: entered promiscuous mode [ 529.222736][ T9636] syzkaller0: entered allmulticast mode [ 530.671003][ T9645] netlink: 'syz.3.847': attribute type 27 has an invalid length. [ 530.902716][ T9655] block device autoloading is deprecated and will be removed. [ 533.996088][ T9654] tipc: Enabled bearer , priority 0 [ 534.018716][ T9656] syzkaller0: entered promiscuous mode [ 534.035176][ T9656] syzkaller0: entered allmulticast mode [ 534.080214][ T9675] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.850'. [ 534.277538][ T9656] tipc: Resetting bearer [ 534.576228][ T9656] tipc: Disabling bearer [ 539.255665][ T9743] syzkaller0: entered promiscuous mode [ 539.269089][ T9743] syzkaller0: entered allmulticast mode [ 539.298238][ T9749] tipc: Enabled bearer , priority 0 [ 544.053792][ T9745] syzkaller0: entered promiscuous mode [ 544.059362][ T9745] syzkaller0: entered allmulticast mode [ 544.099282][ T9755] tipc: Resetting bearer [ 544.133387][ T9744] tipc: Resetting bearer [ 544.254429][ T9744] tipc: Disabling bearer [ 546.759293][ T9776] Bluetooth: hci4: command tx timeout [ 547.021688][ T5783] Bluetooth: hci1: unexpected event for opcode 0x2012 [ 548.896417][ T9814] tipc: Enabled bearer , priority 0 [ 548.924437][ T9814] syzkaller0: entered promiscuous mode [ 548.944703][ T9814] syzkaller0: entered allmulticast mode [ 548.979476][ T9817] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 549.901270][ T9814] tipc: Resetting bearer [ 549.945928][ T9813] tipc: Resetting bearer [ 550.162430][ T9813] tipc: Disabling bearer [ 550.801613][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 550.888765][ T9841] pimreg: entered allmulticast mode [ 551.063779][ T28] audit: type=1326 audit(1767166681.987:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9830 comm="syz.0.878" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f840318f749 code=0x0 [ 552.421104][ T968] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 552.680135][ T968] usb 6-1: Using ep0 maxpacket: 8 [ 552.717488][ T968] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 552.730106][ T968] usb 6-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 552.790818][ T968] usb 6-1: config 179 has no interface number 0 [ 552.823833][ T968] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 552.847180][ T968] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 552.901902][ T968] usb 6-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 552.973933][ T968] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 553.020434][ T968] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.063906][ T9860] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 553.160645][ T23] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 553.279329][ T968] usb 6-1: USB disconnect, device number 3 [ 553.373274][ T23] usb 5-1: unable to get BOS descriptor or descriptor too short [ 553.386943][ T23] usb 5-1: not running at top speed; connect to a high speed hub [ 553.406399][ T23] usb 5-1: config 1 has an invalid interface number: 138 but max is 0 [ 553.435038][ T23] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 553.469564][ T23] usb 5-1: config 1 has no interface number 0 [ 553.490165][ T23] usb 5-1: config 1 interface 138 altsetting 252 endpoint 0xC has invalid wMaxPacketSize 0 [ 553.513275][ T23] usb 5-1: config 1 interface 138 has no altsetting 0 [ 553.526050][ T23] usb 5-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 553.535807][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.583711][ T23] usb 5-1: Product: syz [ 553.601030][ T23] usb 5-1: Manufacturer: syz [ 553.611252][ T23] usb 5-1: SerialNumber: syz [ 553.838334][ T23] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 553.980865][ T23] usb 5-1: USB disconnect, device number 14 [ 555.301450][ T9884] udevd[9884]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.138/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 556.692466][ T9901] tipc: Enabled bearer , priority 0 [ 556.700604][ T9901] syzkaller0: entered promiscuous mode [ 556.706149][ T9901] syzkaller0: entered allmulticast mode [ 556.764498][ T9901] netlink: 12 bytes leftover after parsing attributes in process `syz.3.889'. [ 556.795548][ T9908] netlink: 28 bytes leftover after parsing attributes in process `syz.5.890'. [ 556.833867][ T9900] tipc: Resetting bearer [ 556.888753][ T9900] tipc: Disabling bearer [ 556.930730][ T5962] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 557.244449][ T9916] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 557.290168][ T968] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 557.470492][ T9776] Bluetooth: hci1: command 0x0406 tx timeout [ 557.535537][ T968] usb 1-1: Using ep0 maxpacket: 16 [ 557.560294][ T968] usb 1-1: config index 0 descriptor too short (expected 65532, got 18) [ 557.569520][ T968] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 557.580300][ T968] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 557.645842][ T968] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 557.679938][ T968] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.691173][ T968] usb 1-1: Product: syz [ 557.695722][ T968] usb 1-1: Manufacturer: syz [ 557.705465][ T968] usb 1-1: SerialNumber: syz [ 557.814134][ T968] r8152-cfgselector 1-1: config 0 descriptor?? [ 558.086245][ T5962] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 558.104327][ T5962] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.113076][ T5962] usb 5-1: Product: syz [ 558.117298][ T5962] usb 5-1: Manufacturer: syz [ 558.127140][ T5962] usb 5-1: SerialNumber: syz [ 558.145109][ T5962] hub 5-1:24.0: bad descriptor, ignoring hub [ 558.154308][ T5962] hub: probe of 5-1:24.0 failed with error -5 [ 558.230932][ T5895] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 558.278028][ T968] r8152-cfgselector 1-1: Unknown version 0x0000 [ 558.298222][ T968] r8152-cfgselector 1-1: USB disconnect, device number 21 [ 558.524750][ T5962] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 558.563126][ T5962] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 558.571952][ T5962] dib0700: firmware download failed at 7 with -22 [ 559.320611][ T5895] usb 4-1: Using ep0 maxpacket: 8 [ 559.344648][ T5962] usb 5-1: USB disconnect, device number 15 [ 559.351433][ T5895] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 559.359747][ T5895] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 559.388498][ T5895] usb 4-1: config 179 has no interface number 0 [ 559.395649][ T5895] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 559.410071][ T5895] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 559.438084][ T5895] usb 4-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 559.471633][ T5895] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 559.489469][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.512574][ T9915] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 559.609878][ T9933] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 559.714016][ T9935] tipc: Enabled bearer , priority 0 [ 559.725318][ T9935] syzkaller0: entered promiscuous mode [ 559.731529][ T9935] syzkaller0: entered allmulticast mode [ 559.773744][ T9935] netlink: 12 bytes leftover after parsing attributes in process `syz.0.901'. [ 559.791496][ T5895] usb 4-1: USB disconnect, device number 24 [ 559.820670][ T9934] tipc: Resetting bearer [ 559.901742][ T9934] tipc: Disabling bearer [ 563.221671][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.230774][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.093732][ T9980] syz.3.912: attempt to access beyond end of device [ 564.093732][ T9980] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 564.148350][ T9980] syz.3.912: attempt to access beyond end of device [ 564.148350][ T9980] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 564.185425][ T9980] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 564.224330][ T9980] syz.3.912: attempt to access beyond end of device [ 564.224330][ T9980] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 564.381044][ T9980] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 564.407895][ T9980] syz.3.912: attempt to access beyond end of device [ 564.407895][ T9980] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 564.460711][ T9980] syz.3.912: attempt to access beyond end of device [ 564.460711][ T9980] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 564.480786][ T9980] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 564.491237][ T9980] syz.3.912: attempt to access beyond end of device [ 564.491237][ T9980] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 564.550783][ T9980] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 564.608813][ T9980] syz.3.912: attempt to access beyond end of device [ 564.608813][ T9980] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 564.654707][ T9980] syz.3.912: attempt to access beyond end of device [ 564.654707][ T9980] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 564.670679][ T9980] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 564.687050][ T9980] syz.3.912: attempt to access beyond end of device [ 564.687050][ T9980] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 564.704410][ T9980] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 564.714836][ T9980] syz.3.912: attempt to access beyond end of device [ 564.714836][ T9980] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 564.740343][ T9980] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 564.762588][ T9980] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 564.785122][ T9980] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 564.831313][ T9993] syzkaller0: entered promiscuous mode [ 564.837074][ T9993] syzkaller0: entered allmulticast mode [ 564.900418][ T9995] syzkaller0: entered promiscuous mode [ 564.907148][ T9995] syzkaller0: entered allmulticast mode [ 571.557702][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 571.926470][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 571.954987][ T9] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 571.963555][ T9] usb 6-1: config 179 has no interface number 0 [ 571.970888][ T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 572.693180][ T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 572.704663][ T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 572.714828][ T9] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 572.740832][ T9] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 572.749951][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.783984][T10020] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 572.877844][ T5783] Bluetooth: hci1: unexpected event for opcode 0x2024 [ 573.022892][ T5830] usb 6-1: USB disconnect, device number 4 [ 574.716274][T10018] tipc: Enabled bearer , priority 0 [ 574.742391][T10021] syzkaller0: entered promiscuous mode [ 574.748060][T10021] syzkaller0: entered allmulticast mode [ 574.761088][T10032] netlink: 12 bytes leftover after parsing attributes in process `syz.4.922'. [ 574.929420][T10032] tipc: Resetting bearer [ 575.427816][T10032] tipc: Disabling bearer [ 575.480892][T10067] warning: `syz.3.930' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 577.657419][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 577.737221][ T5962] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 577.749270][ T5962] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 577.840658][ T23] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 577.850884][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 577.864368][ T9] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 577.874008][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.882923][ T9] usb 5-1: Product: syz [ 577.887708][ T9] usb 5-1: Manufacturer: syz [ 577.893084][ T9] usb 5-1: SerialNumber: syz [ 577.901283][ T9] usb 5-1: config 0 descriptor?? [ 577.917063][ T9] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 577.931994][ T9] usb 5-1: Detected FT232H [ 578.040659][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 578.047833][ T23] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 578.070785][ T23] usb 4-1: config 179 has no interface number 0 [ 578.077150][ T23] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 578.100610][ T23] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 578.123628][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 578.130935][ T23] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 578.154920][ T23] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 578.182140][ T23] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 578.214018][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.246158][T10087] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 579.383836][ T9] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 579.416545][ T5830] usb 4-1: USB disconnect, device number 25 [ 579.502286][ T9] usb 5-1: USB disconnect, device number 16 [ 579.591033][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 579.611310][ T9] ftdi_sio 5-1:0.0: device disconnected [ 580.089912][T10104] syzkaller0: entered promiscuous mode [ 580.096014][T10104] syzkaller0: entered allmulticast mode [ 580.380385][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 580.600137][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 580.845576][ T9] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 580.980060][ T9] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 581.021464][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 581.030800][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 581.042072][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 581.061317][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 581.074566][ T9] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 581.085138][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.120626][ T9] usb 4-1: config 0 descriptor?? [ 581.586161][ T9] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 26 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 582.894529][ T5962] usb 4-1: USB disconnect, device number 26 [ 583.055350][ T5962] usblp0: removed [ 583.565542][ T23] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 583.808210][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 583.843686][ T23] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 583.855289][ T23] usb 1-1: config 179 has no interface number 0 [ 583.893140][ T23] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 583.909416][ T23] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 583.946369][ T23] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 583.987500][ T28] audit: type=1326 audit(1767166714.867:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10146 comm="syz.4.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab198f749 code=0x7ffc0000 [ 584.010979][ T23] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 584.067280][ T23] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 584.078504][ T28] audit: type=1326 audit(1767166714.897:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10146 comm="syz.4.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab198f749 code=0x7ffc0000 [ 584.120620][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.161139][T10137] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 584.181063][ T28] audit: type=1326 audit(1767166714.967:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10146 comm="syz.4.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faab198f749 code=0x7ffc0000 [ 584.234429][ T28] audit: type=1326 audit(1767166714.967:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10146 comm="syz.4.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab198f749 code=0x7ffc0000 [ 584.265438][ T28] audit: type=1326 audit(1767166714.967:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10146 comm="syz.4.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab198f749 code=0x7ffc0000 [ 584.301346][ T28] audit: type=1326 audit(1767166714.967:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10146 comm="syz.4.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7faab198f749 code=0x7ffc0000 [ 584.324723][ T28] audit: type=1326 audit(1767166714.967:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10146 comm="syz.4.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab198f749 code=0x7ffc0000 [ 584.424953][ T2177] usb 1-1: USB disconnect, device number 22 [ 587.707648][T10172] comedi comedi2: 8255: I/O port conflict (0x5,4) [ 587.714399][T10172] comedi comedi2: 8255: I/O port conflict (0x2,4) [ 587.726133][T10172] comedi comedi2: 8255: I/O port conflict (0x1,4) [ 587.734945][T10172] comedi comedi2: 8255: I/O port conflict (0xffffffffffffffff,4) [ 587.744609][T10172] comedi comedi2: 8255: I/O port conflict (0x5,4) [ 587.762787][T10172] comedi comedi2: 8255: I/O port conflict (0x3ff,4) [ 587.789455][T10172] comedi comedi2: 8255: I/O port conflict (0x7,4) [ 587.820634][T10172] comedi comedi2: 8255: I/O port conflict (0x1,4) [ 587.840293][T10172] comedi comedi2: 8255: I/O port conflict (0x9,4) [ 587.861102][T10172] comedi comedi2: 8255: I/O port conflict (0x8,4) [ 587.869058][T10172] comedi comedi2: 8255: I/O port conflict (0xd4,4) [ 587.900295][T10172] comedi comedi2: 8255: I/O port conflict (0x3,4) [ 587.906849][T10172] comedi comedi2: 8255: I/O port conflict (0xffffffff80000000,4) [ 590.439066][ T5830] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 590.910215][ T5830] usb 1-1: Using ep0 maxpacket: 8 [ 590.943028][ T5830] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 590.951638][ T5830] usb 1-1: config 179 has no interface number 0 [ 590.958207][ T5830] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 590.969650][ T5830] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 591.000060][ T5830] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 591.033210][ T5830] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 591.070540][ T5830] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 591.088486][ T5830] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 591.098589][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.119458][T10192] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 591.137898][ T5830] xpad: probe of 1-1:179.65 failed with error -5 [ 591.373652][ T5830] usb 1-1: USB disconnect, device number 23 [ 596.727021][T10240] syzkaller0: entered promiscuous mode [ 596.743264][T10240] syzkaller0: entered allmulticast mode [ 598.379709][ T23] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 599.141401][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 599.316776][ T23] usb 1-1: device descriptor read/all, error -71 [ 600.462409][ T5783] Bluetooth: hci1: command 0x0406 tx timeout [ 601.448751][ T28] audit: type=1326 audit(1767166732.347:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10268 comm="syz.5.987" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f426fb8f749 code=0x0 [ 605.200347][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 605.426530][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 605.444536][ T9] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 605.456210][ T9] usb 1-1: config 179 has no interface number 0 [ 605.474274][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 605.496618][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 605.509083][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 605.533225][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 605.553260][ T9] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 605.610960][ T9] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 605.624892][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.665771][T10299] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 605.684103][ T9] xpad: probe of 1-1:179.65 failed with error -5 [ 605.916312][ T9] usb 1-1: USB disconnect, device number 26 [ 613.364144][ T145] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.478059][ T9776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 613.600152][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 613.619500][ T9776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 613.636930][ T9776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 613.718303][ T9776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 613.726265][ T9776] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 613.734094][ T9776] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 613.757579][ T145] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.800065][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 613.807584][ T9] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 613.816173][ T9] usb 6-1: config 179 has no interface number 0 [ 613.830606][ T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 613.853697][ T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 613.895790][ T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 613.914706][ T145] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.927809][ T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 613.946793][ T9] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 613.985550][ T9] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 614.012323][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.049390][T10341] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 614.094372][ T145] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.621011][ T968] usb 6-1: USB disconnect, device number 5 [ 614.621069][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 614.621106][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 615.050818][T10353] Invalid ELF header type: 3 != 1 [ 615.194482][T10344] chnl_net:caif_netlink_parms(): no params data found [ 615.361913][ T145] tipc: Left network mode [ 615.820349][ T9776] Bluetooth: hci0: command tx timeout [ 616.339713][T10344] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.354287][T10344] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.361893][T10344] bridge_slave_0: entered allmulticast mode [ 616.369480][T10344] bridge_slave_0: entered promiscuous mode [ 617.443129][T10380] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 617.548314][T10380] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 618.025802][ T9776] Bluetooth: hci0: command tx timeout [ 618.060274][T10344] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.075191][T10344] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.086726][T10344] bridge_slave_1: entered allmulticast mode [ 618.101844][T10344] bridge_slave_1: entered promiscuous mode [ 618.352340][T10344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 618.401208][T10344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 619.468781][T10344] team0: Port device team_slave_0 added [ 619.701368][T10344] team0: Port device team_slave_1 added [ 620.060407][ T9776] Bluetooth: hci0: command tx timeout [ 620.220435][ T27] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 620.377654][T10344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 620.397456][T10344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 620.440269][ T27] usb 6-1: Using ep0 maxpacket: 8 [ 620.456380][T10344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 620.467495][ T27] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 620.475978][ T27] usb 6-1: config 179 has no interface number 0 [ 620.485050][ T27] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 620.506425][ T27] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 620.530094][ T27] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 620.560529][ T27] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 620.590251][ T27] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 620.635661][ T27] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 620.655894][ T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.665629][T10344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 620.674376][T10344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 620.700309][ C1] vkms_vblank_simulate: vblank timer overrun [ 620.950563][T10400] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 620.967336][T10344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 621.740780][ T5845] usb 6-1: USB disconnect, device number 6 [ 621.740825][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 621.757992][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 621.847430][T10344] hsr_slave_0: entered promiscuous mode [ 621.873008][T10344] hsr_slave_1: entered promiscuous mode [ 621.897267][T10344] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 621.906976][T10344] Cannot create hsr debugfs directory [ 621.955955][T10419] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1018'. [ 621.986622][ T145] hsr_slave_0: left promiscuous mode [ 621.999898][ T145] hsr_slave_1: left promiscuous mode [ 622.009671][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 622.033513][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 622.049378][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 622.066992][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 622.084689][ T145] bridge_slave_1: left allmulticast mode [ 622.096954][ T145] bridge_slave_1: left promiscuous mode [ 622.108837][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.119650][ T145] bridge_slave_0: left allmulticast mode [ 622.127911][ T145] bridge_slave_0: left promiscuous mode [ 622.134437][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.145057][ T9776] Bluetooth: hci0: command tx timeout [ 622.747316][ T145] veth1_macvtap: left promiscuous mode [ 622.754429][ T145] veth0_macvtap: left promiscuous mode [ 622.765090][ T145] veth1_vlan: left promiscuous mode [ 622.773225][ T145] veth0_vlan: left promiscuous mode [ 624.464548][ T145] team0 (unregistering): Port device team_slave_1 removed [ 624.558896][ T145] team0 (unregistering): Port device team_slave_0 removed [ 624.619858][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 624.636130][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.650886][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.198828][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 626.155605][ T145] bond0 (unregistering): Released all slaves [ 626.930332][ T27] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 627.911105][T10344] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 627.939625][T10344] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 627.956073][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 627.970247][ T27] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 627.992999][ T27] usb 4-1: config 179 has no interface number 0 [ 628.006512][T10344] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 628.009810][ T27] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 628.034771][ T27] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 628.067817][ T27] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 628.125739][T10344] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 628.130142][ T27] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 628.150108][ T27] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 628.163837][ T27] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 628.176816][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.238735][T10463] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 629.338193][T10344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 629.349386][ T968] usb 4-1: USB disconnect, device number 27 [ 629.349411][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 629.364817][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 629.489073][T10344] 8021q: adding VLAN 0 to HW filter on device team0 [ 629.571197][ T6421] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.578494][ T6421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 629.647715][ T6421] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.654976][ T6421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 631.097962][T10344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 632.021380][T10344] veth0_vlan: entered promiscuous mode [ 632.045957][T10344] veth1_vlan: entered promiscuous mode [ 632.171343][T10344] veth0_macvtap: entered promiscuous mode [ 632.205067][T10344] veth1_macvtap: entered promiscuous mode [ 632.233558][T10344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 632.245110][T10344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.260012][T10344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 632.280417][T10344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.303642][T10344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.084039][T10344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.187408][T10344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 633.595418][T10344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 633.650583][T10344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.685294][T10344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 633.726505][T10344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.760199][T10344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 633.790596][T10344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.827715][T10344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 633.955369][T10344] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.992955][T10344] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.030101][T10344] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.070113][T10344] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.495042][ T1321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 634.559364][ T1321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 634.726789][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 634.765921][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.010697][ T23] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 636.330275][ T23] usb 6-1: Using ep0 maxpacket: 8 [ 636.351513][ T23] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 636.362278][ T23] usb 6-1: config 179 has no interface number 0 [ 636.381142][ T23] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 636.406261][ T23] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 636.421383][ T23] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 636.435637][ T23] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 636.448361][ T23] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 636.470780][ T23] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 636.484262][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.552981][T10558] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 636.956016][ T5783] Bluetooth: hci4: command 0x0406 tx timeout [ 637.360373][ T5845] usb 6-1: USB disconnect, device number 7 [ 637.360373][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 637.360468][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 637.680370][ T27] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 637.740381][ T23] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 638.640546][ T27] usb 7-1: Using ep0 maxpacket: 32 [ 638.652646][ T27] usb 7-1: config 0 interface 0 has no altsetting 0 [ 638.662726][ T27] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 638.678845][ T27] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.688262][ T27] usb 7-1: Product: syz [ 638.697826][ T27] usb 7-1: Manufacturer: syz [ 638.702824][ T27] usb 7-1: SerialNumber: syz [ 638.716908][ T27] usb 7-1: config 0 descriptor?? [ 638.730196][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 638.758234][ T23] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 638.787909][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.802477][ T23] usb 4-1: config 0 descriptor?? [ 638.844558][ T23] gspca_main: sq930x-2.14.0 probing 041e:403c [ 639.069461][ T23] gspca_sq930x: reg_r 001f failed -71 [ 639.080113][ T23] sq930x: probe of 4-1:0.0 failed with error -71 [ 639.106048][ T23] usb 4-1: USB disconnect, device number 28 [ 639.149659][ T27] gs_usb 7-1:0.0: Configuring for 1 interfaces [ 639.171957][ T5830] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 639.357701][ T27] gs_usb 7-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 639.604811][ T27] gs_usb: probe of 7-1:0.0 failed with error -22 [ 639.616943][ T27] usb 7-1: USB disconnect, device number 2 [ 639.746460][T10622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.755674][T10622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 642.101941][ T5830] usb 6-1: unable to get BOS descriptor or descriptor too short [ 642.823822][ T5830] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 642.850179][ T5830] usb 6-1: can't read configurations, error -71 [ 643.345317][ T968] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 643.730198][ T968] usb 1-1: Using ep0 maxpacket: 8 [ 643.837994][ T968] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 643.861526][ T968] usb 1-1: config 179 has no interface number 0 [ 643.867916][ T968] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 643.929902][ T968] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 643.961712][ T968] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 644.015391][ T5825] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 644.048261][ T5825] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 644.076487][ T968] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 644.120168][ T968] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 644.170940][ T968] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 644.192334][ T968] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.223982][T10651] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 644.592750][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 644.601255][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 644.609732][ T5825] usb 1-1: USB disconnect, device number 27 [ 645.560558][T10578] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 646.420113][T10578] usb 6-1: Using ep0 maxpacket: 8 [ 646.427560][T10578] usb 6-1: config 0 has an invalid interface number: 153 but max is 0 [ 646.450403][T10578] usb 6-1: config 0 has no interface number 0 [ 646.458238][T10578] usb 6-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=28.3e [ 646.491760][T10578] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.523681][T10578] usb 6-1: config 0 descriptor?? [ 646.781051][T10578] usb 6-1: USB disconnect, device number 10 [ 649.905302][T10578] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 650.110417][T10578] usb 4-1: Using ep0 maxpacket: 8 [ 650.138170][T10578] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 650.157886][T10578] usb 4-1: config 179 has no interface number 0 [ 650.192243][T10578] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 650.234913][T10578] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 650.267353][T10578] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 650.304655][T10578] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 650.348592][T10578] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 650.386427][T10578] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 650.428650][T10578] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.534510][T10742] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 651.031406][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 651.039801][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 651.048397][T10578] usb 4-1: USB disconnect, device number 29 [ 651.468335][T10772] binder: 10769:10772 ioctl c0306201 200000000600 returned -14 [ 654.024427][T10799] Bluetooth: MGMT ver 1.22 [ 656.580415][ T968] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 656.812000][ T968] usb 1-1: Using ep0 maxpacket: 8 [ 656.992569][ T968] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 657.034277][ T968] usb 1-1: config 179 has no interface number 0 [ 657.057240][ T968] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 657.151263][ T968] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 657.370688][ T968] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 657.479892][ T968] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 657.703232][ T968] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 657.991360][ T968] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 658.020240][ T968] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.087028][T10820] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 658.353266][ T968] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input17 [ 659.041749][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 659.050167][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 659.058719][ T968] usb 1-1: USB disconnect, device number 28 [ 659.083211][ T968] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 659.308360][T10849] serio: Serial port ptm0 [ 660.830846][T10877] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 661.590297][T10877] cramfs: wrong magic [ 663.210114][ T5845] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 663.410155][ T5845] usb 4-1: Using ep0 maxpacket: 8 [ 663.609772][ T5845] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 663.707716][ T5845] usb 4-1: config 179 has no interface number 0 [ 663.907734][ T5845] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 664.077575][ T5845] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 664.218527][ T5845] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 664.278516][ T5845] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 664.336851][ T5845] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 664.390122][ T5845] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 664.439289][ T5845] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.476649][T10908] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 664.764744][ T5845] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input18 [ 664.790550][T10931] syzkaller0: entered promiscuous mode [ 664.825444][T10931] syzkaller0: entered allmulticast mode [ 665.008339][ T5815] usb 4-1: USB disconnect, device number 30 [ 665.008377][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 665.023248][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 665.037987][ T5815] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 669.950193][T10578] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 670.150140][T10578] usb 6-1: Using ep0 maxpacket: 8 [ 670.177749][T10578] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 670.210574][T10578] usb 6-1: config 179 has no interface number 0 [ 670.230039][T10578] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 670.289225][T10578] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 670.329979][T10578] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 670.360023][T10578] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 670.392108][T10578] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 670.439876][T10578] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 670.469527][T10578] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.516694][T10987] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 671.321378][T10578] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input19 [ 671.670753][ T5845] usb 6-1: USB disconnect, device number 11 [ 671.671268][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 671.685308][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 671.693631][ C1] vkms_vblank_simulate: vblank timer overrun [ 671.711532][ T5845] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 676.774169][T11062] binfmt_misc: register: failed to install interpreter file ./file0 [ 678.410296][ T5825] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 678.620374][ T5825] usb 6-1: Using ep0 maxpacket: 8 [ 678.980813][ T5825] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 679.282322][ T5825] usb 6-1: config 179 has no interface number 0 [ 679.347811][ T5825] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 679.403066][ T5825] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 679.441601][ T5825] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 679.514621][ T5825] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 679.580298][ T5825] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 679.645482][ T5825] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 679.696190][ T5825] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.731470][T11065] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 680.884088][ T23] usb 6-1: USB disconnect, device number 12 [ 680.884112][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 680.900063][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 681.096228][ T5825] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 681.109288][ T5825] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input20 [ 681.122521][ T23] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 682.704580][T11102] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1138'. [ 686.160615][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.170197][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.730381][ T5815] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 687.954594][ T5815] usb 6-1: Using ep0 maxpacket: 8 [ 687.965145][ T5815] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 688.000055][ T5815] usb 6-1: config 179 has no interface number 0 [ 688.006475][ T5815] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 688.080096][ T5815] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 688.105248][ T5815] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 688.150060][ T5815] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 688.210542][ T5815] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 688.250286][ T5815] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 688.280068][ T5815] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.316075][T11135] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 688.354600][T11147] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1149'. [ 688.896238][ T5815] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input21 [ 690.001168][ T5815] usb 6-1: USB disconnect, device number 13 [ 690.007294][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 690.007359][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 690.137335][ T5815] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 690.755213][T11173] netlink: set zone limit has 8 unknown bytes [ 690.876609][T11176] fuse: Bad value for 'fd' [ 694.711030][ T968] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 696.002000][T11218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.069614][T11218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.248306][T11232] fuse: Bad value for 'fd' [ 697.110494][ T9776] Bluetooth: hci0: command 0x0401 tx timeout [ 697.420298][ T5825] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 697.640235][ T5825] usb 4-1: Using ep0 maxpacket: 8 [ 697.740773][ T5825] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 697.793009][ T5825] usb 4-1: config 179 has no interface number 0 [ 697.855621][ T5825] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 697.968747][ T5825] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 698.070138][ T5825] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 698.212593][ T5825] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 698.330127][ T5825] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 698.391353][ T5825] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 698.431103][ T5825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.467908][T11234] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 699.248878][ T5845] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input22 [ 699.282380][ T5825] usb 4-1: USB disconnect, device number 31 [ 699.288386][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 699.288437][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 699.348189][ T5825] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 700.449317][ T968] usb 1-1: unable to get BOS descriptor or descriptor too short [ 700.458973][ T968] usb 1-1: too many configurations: 238, using maximum allowed: 8 [ 700.478448][ T968] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 700.510293][ T968] usb 1-1: can't read configurations, error -71 [ 700.847624][T11318] fuse: Bad value for 'fd' [ 702.760434][ T968] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 703.000056][ T968] usb 1-1: Using ep0 maxpacket: 8 [ 703.026425][ T968] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 703.086119][ T968] usb 1-1: config 179 has no interface number 0 [ 703.105568][ T968] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 703.170228][ T968] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 703.212999][ T968] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 703.285620][ T968] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 703.365906][ T968] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 703.478126][ T968] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 703.499634][ T968] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.550279][T11325] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 703.874281][ T968] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input23 [ 704.093244][ T5825] usb 1-1: USB disconnect, device number 30 [ 704.099242][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 704.099290][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 704.163319][ T5825] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 705.280210][ T5815] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 705.550034][ T5815] usb 1-1: Using ep0 maxpacket: 8 [ 705.572863][ T5815] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 705.601119][ T5815] usb 1-1: config 179 has no interface number 0 [ 705.608470][ T5815] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 705.636140][ T5815] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 705.647919][ T5815] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 705.659503][ T5815] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 705.684038][ T5815] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 705.708240][ T5815] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 705.723277][ T5815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.740270][T11341] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 706.666567][ T27] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input24 [ 707.979455][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 707.979468][ T5825] usb 1-1: USB disconnect, device number 31 [ 707.994366][ C1] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 707.995638][ T5825] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 711.625518][ T28] audit: type=1326 audit(711.576:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11393 comm="syz.0.1194" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f840318f749 code=0x0 [ 713.982366][T11391] tipc: Started in network mode [ 713.990180][T11391] tipc: Node identity ac1414aa, cluster identity 4711 [ 713.999742][T11391] tipc: Enabled bearer , priority 10 [ 715.389759][ T5830] tipc: Node number set to 2886997162 [ 715.440116][ T5825] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 715.640218][ T5825] usb 6-1: Using ep0 maxpacket: 8 [ 715.658193][ T5825] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 715.677908][ T5825] usb 6-1: config 179 has no interface number 0 [ 715.703699][ T5825] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 717.534752][ T5825] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 717.568532][ T5825] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 717.639193][ T5825] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 717.687537][ T5825] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 717.710787][T11429] Bluetooth: MGMT ver 1.22 [ 717.748194][ T5825] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 717.780182][ T5825] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.824644][ T5825] usb 6-1: can't set config #179, error -71 [ 717.850486][ T5825] usb 6-1: USB disconnect, device number 14 [ 717.859031][T11430] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 718.754482][T11440] nfs: Unknown parameter '&[#' [ 718.870422][T11440] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 718.942697][T11433] IPVS: persistence engine module ip_vs_pe_ not found [ 719.480020][ T5815] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 720.407029][ T5815] usb 6-1: Using ep0 maxpacket: 16 [ 721.862002][ T5815] usb 6-1: unable to get BOS descriptor or descriptor too short [ 721.900714][ T5815] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 721.929768][ T5815] usb 6-1: can't read configurations, error -71 [ 722.560263][ T5845] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 722.890552][ T5845] usb 7-1: Using ep0 maxpacket: 8 [ 723.153467][ T5845] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 723.161916][ T5845] usb 7-1: config 179 has no interface number 0 [ 723.168248][ T5845] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 723.190688][ T5845] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 723.211518][ T5845] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 723.223680][ T5845] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 723.236326][ T5845] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 723.273023][ T5845] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 723.291702][ T5845] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.324612][T11462] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 723.613395][T11473] netlink: 'syz.0.1216': attribute type 12 has an invalid length. [ 723.647610][ T5845] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input25 [ 723.662450][T11473] netlink: 'syz.0.1216': attribute type 29 has an invalid length. [ 723.694596][T11473] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1216'. [ 723.738234][T11473] netlink: 'syz.0.1216': attribute type 1 has an invalid length. [ 723.792707][T11473] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1216'. [ 723.886985][ T5815] usb 7-1: USB disconnect, device number 3 [ 723.887018][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 723.901626][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 723.924558][ T5815] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 724.829604][T11489] nfs: Unknown parameter '&[#' [ 725.298239][T11490] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1220'. [ 726.979337][T11489] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 727.031174][T11483] IPVS: persistence engine module ip_vs_pe_ not found [ 727.600265][ T27] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 728.000521][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 729.610227][ T968] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 729.937022][ T968] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 729.950103][ T968] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 730.018942][ T968] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 730.061820][ T968] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 730.093840][ T968] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 63, changing to 4 [ 730.123543][ T968] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 43530, setting to 0 [ 730.144559][ T968] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 730.202426][ T968] usb 6-1: string descriptor 0 read error: -22 [ 730.220031][ T968] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 730.249665][ T968] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.323526][ T968] usb 6-1: config 0 descriptor?? [ 730.361034][ T968] hub 6-1:0.0: bad descriptor, ignoring hub [ 730.367024][ T968] hub: probe of 6-1:0.0 failed with error -5 [ 730.730337][ T5815] usb 6-1: USB disconnect, device number 17 [ 730.770265][T10578] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 730.831097][ T27] usb 4-1: device descriptor read/all, error -71 [ 730.991175][T10578] usb 1-1: Using ep0 maxpacket: 8 [ 731.011110][T10578] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 731.057819][T10578] usb 1-1: config 179 has no interface number 0 [ 731.064807][T10578] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 731.078467][T10578] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 731.092911][T10578] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 731.106335][T10578] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 731.118359][T10578] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 731.132203][T10578] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 731.142342][T10578] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.181032][T11521] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 732.025962][ T5815] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input26 [ 732.261755][ T5830] usb 1-1: USB disconnect, device number 32 [ 732.261777][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 732.276123][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 732.284684][ T5830] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 732.284705][ C1] vkms_vblank_simulate: vblank timer overrun [ 732.422350][T11530] netlink: 'syz.5.1232': attribute type 10 has an invalid length. [ 732.460113][ T27] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 732.542913][T11530] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 732.672275][ T27] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 732.691187][ T27] usb 4-1: config 0 has no interface number 0 [ 732.697816][ T27] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 732.730088][ T27] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 732.740765][ T27] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 732.754839][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.785251][ T27] usb 4-1: config 0 descriptor?? [ 732.813491][ T27] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 734.591451][T11533] iowarrior 4-1:0.1: Error -90 while submitting URB [ 734.962289][ T27] usb 4-1: USB disconnect, device number 34 [ 736.155293][T11567] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1242'. [ 737.479994][ T27] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 737.840374][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 737.853263][ T27] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 738.004769][ T5815] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 738.055305][ T27] usb 4-1: config 179 has no interface number 0 [ 738.064404][ T27] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 738.127960][ T27] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 738.587023][ T27] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 738.598699][ T27] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 738.610587][ T5815] usb 7-1: Using ep0 maxpacket: 32 [ 738.615946][ T27] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 738.637494][ T5815] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 738.678015][ T5815] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 738.770449][ T27] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 738.810096][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.818684][ T5815] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 738.846490][ T5815] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.858179][T11574] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 738.950214][ T5815] usb 7-1: config 0 descriptor?? [ 739.174295][ T27] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input27 [ 739.434266][ T5815] ft260 0003:0403:6030.0008: unknown main item tag 0x7 [ 739.602377][ T5815] ft260 0003:0403:6030.0008: chip code: 6424 8183 [ 739.628309][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 739.636750][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 739.645525][ T5895] usb 4-1: USB disconnect, device number 35 [ 740.461263][ T5815] ft260 0003:0403:6030.0008: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.6-1/input0 [ 740.479116][ T5895] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 740.578037][ T5815] ft260 0003:0403:6030.0008: failed to retrieve status: -32, no wakeup [ 740.920668][T10578] usb 7-1: reset high-speed USB device number 4 using dummy_hcd [ 741.795410][ T5815] usb 7-1: USB disconnect, device number 4 [ 742.702209][T11609] ref_ctr_offset mismatch. inode: 0x643 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x18 [ 742.757297][T11617] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.765322][T11617] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.840115][T10578] libceph: connect (1)[c::]:6789 error -101 [ 742.847378][T10578] libceph: mon0 (1)[c::]:6789 connect error [ 742.940740][T10578] libceph: connect (1)[c::]:6789 error -101 [ 742.946912][T10578] libceph: mon0 (1)[c::]:6789 connect error [ 743.262238][T10578] libceph: connect (1)[c::]:6789 error -101 [ 743.285524][T10578] libceph: mon0 (1)[c::]:6789 connect error [ 743.354887][T11607] ceph: No mds server is up or the cluster is laggy [ 743.803661][T10578] libceph: connect (1)[c::]:6789 error -101 [ 743.809791][T10578] libceph: mon0 (1)[c::]:6789 connect error [ 744.084375][T11627] tipc: Enabled bearer , priority 0 [ 744.114664][T11627] tipc: Disabling bearer [ 744.960177][T10578] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 745.270347][T10578] usb 1-1: Using ep0 maxpacket: 8 [ 745.342140][T10578] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 745.352177][T10578] usb 1-1: config 179 has no interface number 0 [ 745.358918][T10578] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 745.375667][T10578] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 745.390380][T10578] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 745.460056][T10578] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 745.474710][T10578] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 745.499511][T10578] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 745.540453][T10578] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.613254][T11639] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 745.938890][T10578] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input28 [ 746.256734][ T968] usb 1-1: USB disconnect, device number 33 [ 746.256940][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 746.271164][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 746.373614][ T968] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 747.360079][ T5815] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 748.481132][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.487859][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.860091][ T5815] usb 6-1: device descriptor read/64, error -71 [ 749.072120][ T5830] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 749.981696][T11671] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1271'. [ 750.012540][ T5815] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 750.269043][ T5830] usb 1-1: device descriptor read/all, error -71 [ 751.710356][ T5895] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 751.829437][T11694] use of bytesused == 0 is deprecated and will be removed in the future, [ 751.845038][T11694] use the actual size instead. [ 752.041430][ T5895] usb 1-1: Using ep0 maxpacket: 8 [ 752.071003][ T5895] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 752.093420][ T5895] usb 1-1: config 179 has no interface number 0 [ 752.114765][ T5895] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 752.149544][ T5895] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 752.183143][ T5895] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 752.211941][ T5895] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 752.242333][ T5895] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 752.264198][ T5895] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 752.274172][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.288326][T11688] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 752.549040][ T27] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input29 [ 752.943790][ T27] usb 1-1: USB disconnect, device number 36 [ 752.943855][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 752.943907][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 753.021154][ T27] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 753.396634][ T5825] IPVS: starting estimator thread 0... [ 753.700091][T11706] IPVS: using max 18 ests per chain, 43200 per kthread [ 753.735752][T11708] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.743237][T11708] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.520202][ T5825] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 756.572860][ T5815] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 756.660043][ T5830] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 756.712644][ T5825] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 756.733363][ T5825] usb 6-1: config 0 has no interface number 0 [ 756.739803][ T5825] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 756.752845][ T5825] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.778783][ T5825] usb 6-1: config 0 descriptor?? [ 756.790836][ T5825] usb 6-1: selecting invalid altsetting 1 [ 756.801198][ T5825] dvb_ttusb_budget: ttusb_init_controller: error [ 756.808405][ T5825] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 756.817120][ T5815] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 756.838407][ T5815] usb 4-1: config 0 has no interface number 0 [ 756.850382][ T5830] usb 1-1: Using ep0 maxpacket: 8 [ 756.860047][ T5830] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 756.872923][ T5830] usb 1-1: config 179 has no interface number 0 [ 756.879721][ T5830] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 756.894816][ T5815] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 756.908860][ T5830] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 756.932449][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.943350][ T5830] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 756.960057][ T5815] usb 4-1: Product: syz [ 756.969730][ T5830] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 756.971985][ T5815] usb 4-1: Manufacturer: syz [ 757.009045][ T5830] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 757.021272][ T5815] usb 4-1: SerialNumber: syz [ 757.040363][ T5830] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 757.060175][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.064703][ T5815] usb 4-1: config 0 descriptor?? [ 757.090544][T11732] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 757.158863][ T5825] DVB: Unable to find symbol cx22700_attach() [ 757.267635][ T5825] DVB: Unable to find symbol tda10046_attach() [ 757.276376][ T5825] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 757.298959][ T5825] usb 6-1: USB disconnect, device number 20 [ 757.423951][ T5830] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input30 [ 757.443099][ T5815] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 757.496025][ T5815] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 757.534611][ T5815] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 757.564649][ T5815] usb 4-1: media controller created [ 757.656444][T10578] usb 1-1: USB disconnect, device number 37 [ 757.656659][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 757.670906][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 757.691983][T10578] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 757.737199][ T5815] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 757.954103][T11729] fuse: Bad value for 'fd' [ 757.966929][ T5815] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 758.047923][ T5815] usb 4-1: USB disconnect, device number 36 [ 758.161077][T11747] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.170351][T11747] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.150286][ T5845] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 762.340283][ T5845] usb 6-1: Using ep0 maxpacket: 8 [ 762.354830][ T5845] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 762.368155][ T5845] usb 6-1: config 179 has no interface number 0 [ 762.379181][ T5845] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 762.398782][ T5845] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 762.416995][ T5845] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 762.428988][ T5845] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 762.447377][ T5845] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 762.471870][ T5845] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 762.486620][ T5845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.509738][T11782] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 763.476979][ T5830] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input31 [ 763.580461][T10578] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 763.762636][ T5830] usb 6-1: USB disconnect, device number 21 [ 763.762700][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 763.777112][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 763.788502][ T5830] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 763.804155][T10578] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 763.813713][T10578] usb 1-1: config 0 has no interface number 0 [ 763.833795][T10578] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 763.848027][T10578] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.874640][T10578] usb 1-1: Product: syz [ 763.878868][T10578] usb 1-1: Manufacturer: syz [ 763.892785][T10578] usb 1-1: SerialNumber: syz [ 763.906448][T10578] usb 1-1: config 0 descriptor?? [ 764.188223][T10578] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 764.212492][T10578] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 764.240292][T10578] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 764.248412][T10578] usb 1-1: media controller created [ 764.278539][T10578] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 764.409011][T11801] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.416552][T11801] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.463738][T10578] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 764.702422][ T27] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 764.931025][ T27] usb 7-1: Using ep0 maxpacket: 8 [ 764.965356][T11797] fuse: Bad value for 'fd' [ 764.978747][ T27] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 764.987671][ T27] usb 7-1: config 179 has no interface number 0 [ 765.002118][ T27] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 765.028211][ T27] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 765.042689][ T27] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 765.057407][ T27] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 765.070224][ T27] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 765.087703][ T27] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 765.102267][ T27] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.219168][T11803] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 765.486308][ T27] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input32 [ 765.611535][T10578] usb 1-1: USB disconnect, device number 38 [ 765.694307][ T5830] usb 7-1: USB disconnect, device number 5 [ 765.694332][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 765.718621][ T5830] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 766.740260][T10578] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 767.079593][T10578] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 767.088097][T10578] usb 7-1: config 0 has no interface number 0 [ 767.097936][T10578] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 767.107442][T10578] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.115566][T10578] usb 7-1: Product: syz [ 767.155485][T10578] usb 7-1: Manufacturer: syz [ 767.180376][T10578] usb 7-1: SerialNumber: syz [ 767.224531][T10578] usb 7-1: config 0 descriptor?? [ 767.330282][T11825] input: syz1 as /devices/virtual/input/input33 [ 767.453173][T11827] random: crng reseeded on system resumption [ 768.266875][T10578] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 768.326225][T10578] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 768.370222][T10578] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 768.406662][T10578] usb 7-1: media controller created [ 768.613878][T10578] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 769.380332][T11819] fuse: Bad value for 'fd' [ 769.408753][T10578] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 769.552919][T10578] usb 7-1: USB disconnect, device number 6 [ 770.620359][ T5815] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 771.694191][ T5815] usb 6-1: Using ep0 maxpacket: 8 [ 771.741388][ T5815] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 771.781306][ T5815] usb 6-1: config 179 has no interface number 0 [ 771.790400][ T5815] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 771.825991][ T5815] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 771.870193][ T5815] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 771.898728][ T5815] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 771.939769][ T5815] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 771.985690][ T5815] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 772.018405][ T5815] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.055318][T11849] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 772.430518][ T5815] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input34 [ 772.883802][ T5825] usb 6-1: USB disconnect, device number 22 [ 772.883874][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 772.899982][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 772.944778][ T5825] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 776.787201][T11893] xt_connbytes: Forcing CT accounting to be enabled [ 779.567150][T11921] netlink: 'syz.5.1337': attribute type 21 has an invalid length. [ 779.575199][T11921] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1337'. [ 779.584834][T11921] netlink: 'syz.5.1337': attribute type 4 has an invalid length. [ 779.592749][T11921] netlink: 'syz.5.1337': attribute type 5 has an invalid length. [ 779.600642][T11921] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1337'. [ 780.164729][T10578] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 780.390072][T10578] usb 1-1: Using ep0 maxpacket: 8 [ 780.397911][T10578] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 780.430005][T10578] usb 1-1: config 179 has no interface number 0 [ 780.446665][T10578] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 780.488209][T10578] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 780.545864][T10578] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 780.582453][T10578] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 780.609301][T10578] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 780.645621][T10578] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 780.690199][T10578] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.764681][T11920] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 781.097904][T10578] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input35 [ 781.448106][ T5830] usb 1-1: USB disconnect, device number 39 [ 781.448104][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 781.448233][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 781.730972][ T5830] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 782.274450][T11938] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1343'. [ 782.369213][T11942] syz.6.1345: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz6,mems_allowed=0-1 [ 782.689622][T11942] CPU: 0 PID: 11942 Comm: syz.6.1345 Not tainted syzkaller #0 [ 782.697218][T11942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 782.707393][T11942] Call Trace: [ 782.710777][T11942] [ 782.713743][T11942] dump_stack_lvl+0x16c/0x230 [ 782.718477][T11942] ? show_regs_print_info+0x20/0x20 [ 782.723732][T11942] ? load_image+0x3b0/0x3b0 [ 782.728261][T11942] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 782.734693][T11942] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 782.741214][T11942] warn_alloc+0x210/0x300 [ 782.745562][T11942] ? stack_trace_save+0x9c/0xe0 [ 782.750428][T11942] ? zone_watermark_ok_safe+0x230/0x230 [ 782.756000][T11942] ? kasan_set_track+0x5f/0x70 [ 782.760771][T11942] ? kasan_set_track+0x4e/0x70 [ 782.765541][T11942] ? __kasan_kmalloc+0x8f/0xa0 [ 782.770317][T11942] ? xsk_init_queue+0xb0/0x110 [ 782.775196][T11942] ? xsk_setsockopt+0x43c/0x6f0 [ 782.780061][T11942] ? do_sock_setsockopt+0x175/0x1a0 [ 782.785293][T11942] ? __x64_sys_setsockopt+0x184/0x200 [ 782.790705][T11942] __vmalloc_node_range+0x126/0x1320 [ 782.796079][T11942] ? free_vm_area+0x50/0x50 [ 782.800645][T11942] vmalloc_user+0x74/0x80 [ 782.805010][T11942] ? xskq_create+0xbf/0x170 [ 782.809546][T11942] xskq_create+0xbf/0x170 [ 782.813934][T11942] xsk_init_queue+0xb0/0x110 [ 782.818569][T11942] xsk_setsockopt+0x43c/0x6f0 [ 782.823284][T11942] ? xsk_poll+0x670/0x670 [ 782.827650][T11942] ? __fget_files+0x28/0x4d0 [ 782.832278][T11942] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 782.837854][T11942] ? security_socket_setsockopt+0x7e/0xa0 [ 782.843600][T11942] ? xsk_poll+0x670/0x670 [ 782.847971][T11942] do_sock_setsockopt+0x175/0x1a0 [ 782.853026][T11942] ? __fdget+0x180/0x210 [ 782.857305][T11942] __x64_sys_setsockopt+0x184/0x200 [ 782.862625][T11942] do_syscall_64+0x55/0xb0 [ 782.867071][T11942] ? clear_bhb_loop+0x40/0x90 [ 782.871788][T11942] ? clear_bhb_loop+0x40/0x90 [ 782.876502][T11942] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 782.882427][T11942] RIP: 0033:0x7f61d098f749 [ 782.886881][T11942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 782.906538][T11942] RSP: 002b:00007f61d182e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 782.915030][T11942] RAX: ffffffffffffffda RBX: 00007f61d0be5fa0 RCX: 00007f61d098f749 [ 782.923149][T11942] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 782.931154][T11942] RBP: 00007f61d0a13f91 R08: 0000000000000004 R09: 0000000000000000 [ 782.939155][T11942] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 782.947154][T11942] R13: 00007f61d0be6038 R14: 00007f61d0be5fa0 R15: 00007ffdeb9d3598 [ 782.955171][T11942] [ 783.115734][T11942] Mem-Info: [ 783.119529][T11942] active_anon:40823 inactive_anon:0 isolated_anon:0 [ 783.119529][T11942] active_file:20969 inactive_file:40192 isolated_file:0 [ 783.119529][T11942] unevictable:768 dirty:1564 writeback:0 [ 783.119529][T11942] slab_reclaimable:10833 slab_unreclaimable:99610 [ 783.119529][T11942] mapped:33558 shmem:35194 pagetables:906 [ 783.119529][T11942] sec_pagetables:0 bounce:0 [ 783.119529][T11942] kernel_misc_reclaimable:0 [ 783.119529][T11942] free:1295885 free_pcp:10275 free_cma:0 [ 783.165387][ C1] vkms_vblank_simulate: vblank timer overrun [ 783.182053][T11942] Node 0 active_anon:162744kB inactive_anon:0kB active_file:83876kB inactive_file:160564kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:134232kB dirty:6252kB writeback:0kB shmem:138800kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12696kB pagetables:3608kB sec_pagetables:0kB all_unreclaimable? no [ 783.259974][T11942] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 783.290377][ C1] vkms_vblank_simulate: vblank timer overrun [ 783.400257][T11942] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 783.556095][T11942] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 783.592464][T11947] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 783.677815][T11947] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 783.687119][T11942] Node 0 DMA32 free:1271428kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:156096kB inactive_anon:0kB active_file:83876kB inactive_file:159248kB unevictable:1536kB writepending:6252kB present:3129332kB managed:2589640kB mlocked:0kB bounce:0kB free_pcp:34584kB local_pcp:14784kB free_cma:0kB [ 783.718031][ C1] vkms_vblank_simulate: vblank timer overrun [ 783.782177][T11942] lowmem_reserve[]: 0 0 1 1 1 [ 783.787007][T11942] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 783.984572][T11942] lowmem_reserve[]: 0 0 0 0 0 [ 783.989403][T11942] Node 1 Normal free:3893220kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:17232kB local_pcp:5040kB free_cma:0kB [ 784.018872][ C1] vkms_vblank_simulate: vblank timer overrun [ 784.508971][T11942] lowmem_reserve[]: 0 0 0 0 0 [ 784.537366][T11951] macvlan2: entered promiscuous mode [ 784.543079][T11951] macvlan2: entered allmulticast mode [ 784.662407][T11942] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 784.710039][T11942] Node 0 DMA32: 1*4kB (E) 463*8kB (UME) 270*16kB (UE) 1*32kB (M) 2*64kB (ME) 61*128kB (UM) 37*256kB (UME) 16*512kB (UE) 15*1024kB (UM) 7*2048kB (U) 294*4096kB (UM) = 1267580kB [ 784.775244][T11942] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 784.842202][T11942] Node 1 Normal: 240*4kB (UME) 42*8kB (UME) 43*16kB (UME) 231*32kB (UME) 73*64kB (UME) 14*128kB (UE) 3*256kB (UE) 2*512kB (ME) 1*1024kB (U) 2*2048kB (UE) 945*4096kB (M) = 3893472kB [ 784.920686][T11942] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 784.999316][T11942] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 785.020220][T11942] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 785.066898][T11942] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 785.099094][T11942] 95279 total pagecache pages [ 785.117421][T11942] 0 pages in swap cache [ 785.151830][T11942] Free swap = 124720kB [ 785.263952][T11942] Total swap = 124996kB [ 785.268339][T11942] 2097051 pages RAM [ 785.306055][T11942] 0 pages HighMem/MovableOnly [ 785.340603][T11942] 416127 pages reserved [ 785.344850][T11942] 0 pages cma reserved [ 786.793701][ T23] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 787.000479][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 787.012276][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 787.027989][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 787.040682][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 787.064907][ T23] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 787.076600][ T23] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 787.088321][ T23] usb 1-1: Manufacturer: syz [ 787.225544][ T23] usb 1-1: config 0 descriptor?? [ 788.448904][ T23] rc_core: IR keymap rc-hauppauge not found [ 788.465716][ T23] Registered IR keymap rc-empty [ 788.478911][ T23] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 788.520556][ T23] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 788.625831][ T23] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 788.706310][ T23] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input36 [ 788.721240][ T27] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 788.908738][ T23] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 788.950899][ T23] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 788.960727][ T27] usb 6-1: Using ep0 maxpacket: 8 [ 789.044169][ T23] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 789.081448][ T23] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 789.105937][ T27] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 789.114581][ T27] usb 6-1: config 179 has no interface number 0 [ 789.122667][ T27] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 789.134340][ T23] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 789.149143][ T27] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 789.162651][ T27] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 789.177667][ T23] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 789.192809][ T27] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 789.206724][ T27] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 789.222435][ T23] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 789.235672][ T27] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 789.251318][ T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.261758][ T23] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 789.301203][ T23] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 789.327344][T11984] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 789.347739][ T23] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 789.434049][ T23] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 789.480089][ T23] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 789.537274][ T23] usb 1-1: USB disconnect, device number 40 [ 789.665539][ T27] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input37 [ 789.985597][ T23] usb 6-1: USB disconnect, device number 23 [ 789.991697][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 789.991740][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 790.051839][ T23] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 793.410128][ T27] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 793.750144][ T27] usb 7-1: Using ep0 maxpacket: 8 [ 793.781819][ T27] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 793.824424][ T27] usb 7-1: config 179 has no interface number 0 [ 793.840543][ T27] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 793.881710][ T27] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 793.899954][ T27] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 793.939941][ T27] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 793.997363][ T27] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 794.031118][ T27] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 794.045786][ T27] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.071907][T12038] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 795.200426][T12046] bio_check_eod: 2 callbacks suppressed [ 795.200443][T12046] syz.0.1377: attempt to access beyond end of device [ 795.200443][T12046] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 795.220075][T12046] FAT-fs (loop1): unable to read boot sector [ 795.466149][ T23] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input38 [ 795.542290][ T5845] usb 7-1: USB disconnect, device number 7 [ 795.542302][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 795.542439][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 795.564954][ C1] vkms_vblank_simulate: vblank timer overrun [ 795.591498][ T5845] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 796.980251][ T23] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 797.210236][ T27] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 797.267422][ T23] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 797.281419][ T23] usb 7-1: config 0 has no interface number 0 [ 797.288079][ T23] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 797.304260][ T23] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 64 [ 797.321262][ T23] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 797.333950][ T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.375574][ T23] usb 7-1: config 0 descriptor?? [ 797.381667][T12061] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 797.429810][ T23] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 797.475142][ T27] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 797.494442][T12065] fuse: Bad value for 'fd' [ 797.510645][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.531837][ T27] usb 1-1: Product: syz [ 797.536165][ T27] usb 1-1: Manufacturer: syz [ 797.543964][ T27] usb 1-1: SerialNumber: syz [ 797.559269][ T27] usb 1-1: config 0 descriptor?? [ 797.595740][ T23] usb 7-1: USB disconnect, device number 8 [ 797.601871][ C1] iowarrior 7-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 797.974009][T12058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 798.400499][T12061] 9pnet_virtio: no channels available for device 127.0.0.1 [ 798.415106][T12058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 798.428580][ T9776] Bluetooth: hci3: unknown advertising packet type: 0x17 [ 798.430979][ T9776] Bluetooth: hci3: Malformed LE Event: 0x02 [ 799.594863][ T27] usb-storage 1-1:0.0: USB Mass Storage device detected [ 799.678588][ T27] usb 1-1: USB disconnect, device number 41 [ 799.915259][ T23] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 800.140612][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 800.193278][ T23] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 800.303215][ T23] usb 4-1: config 179 has no interface number 0 [ 800.404939][ T23] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 800.505255][ T23] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 800.620903][ T23] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 800.634941][ T23] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 800.660034][ T23] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 800.689403][ T23] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 800.713408][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.727047][T12098] fuse: Bad value for 'fd' [ 800.735610][T12083] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 801.087024][ T27] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input39 [ 802.519646][ T5845] usb 4-1: USB disconnect, device number 37 [ 802.519653][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 802.519885][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 802.561309][ T5845] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 802.962332][T12123] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 802.993118][T12124] fuse: Bad value for 'fd' [ 807.081601][T10578] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 808.790231][T10578] usb 4-1: Using ep0 maxpacket: 8 [ 808.835407][T10578] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 808.878851][T10578] usb 4-1: config 179 has no interface number 0 [ 808.945709][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.956175][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.977263][T10578] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 809.028235][T10578] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 809.109296][T10578] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 809.147508][T12184] geneve2: entered allmulticast mode [ 809.158843][T10578] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 809.184488][T10578] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 809.200257][ T5830] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 809.203407][T10578] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 809.218082][T10578] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.280213][T12162] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 809.400165][ T5830] usb 1-1: Using ep0 maxpacket: 32 [ 809.419277][ T5830] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 809.433893][ T5830] usb 1-1: config 0 has no interface number 0 [ 809.454774][ T5830] usb 1-1: config 0 interface 184 has no altsetting 0 [ 809.483900][ T5830] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 809.502301][ T5830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.516784][ T5830] usb 1-1: Product: syz [ 809.531906][ T5830] usb 1-1: Manufacturer: syz [ 809.563139][ T5830] usb 1-1: SerialNumber: syz [ 809.608977][T10578] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input40 [ 809.625908][ T5830] usb 1-1: config 0 descriptor?? [ 809.660639][ T5830] smsc75xx v1.0.0 [ 809.876858][ T5845] usb 4-1: USB disconnect, device number 38 [ 809.876895][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 809.891245][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 809.899616][ C1] vkms_vblank_simulate: vblank timer overrun [ 809.967413][ T5845] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 810.075660][ T5830] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 810.105395][ T5830] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 810.126240][ T5830] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 810.137769][ T5830] smsc75xx: probe of 1-1:0.184 failed with error -32 [ 810.171012][ T5830] usb 1-1: USB disconnect, device number 42 [ 810.538858][T12186] lo: entered allmulticast mode [ 810.552077][T12185] lo: left allmulticast mode [ 812.790605][T10578] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 813.721530][T10578] usb 1-1: config 6 has an invalid interface number: 2 but max is 0 [ 813.738099][T10578] usb 1-1: config 6 has no interface number 0 [ 813.760942][T10578] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 813.785617][T10578] usb 1-1: config 6 interface 2 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 814.030521][T10578] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 814.040130][T10578] usb 1-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 814.049817][T10578] usb 1-1: Product: syz [ 814.054399][T10578] usb 1-1: Manufacturer: syz [ 814.059052][T10578] usb 1-1: SerialNumber: syz [ 814.079139][T10578] hso 1-1:6.2: Failed to find INT IN ep [ 814.646031][ T968] usb 1-1: USB disconnect, device number 43 [ 815.130447][T12240] [ 815.132847][T12240] ====================================================== [ 815.139895][T12240] WARNING: possible circular locking dependency detected [ 815.146954][T12240] syzkaller #0 Not tainted [ 815.151400][T12240] ------------------------------------------------------ [ 815.158598][T12240] syz.3.1433/12240 is trying to acquire lock: [ 815.164804][T12240] ffffffff8ca648e8 (bdev_lock){+.+.}-{3:3}, at: bd_prepare_to_claim+0x1ba/0x480 [ 815.173915][T12240] [ 815.173915][T12240] but task is already holding lock: [ 815.181311][T12240] ffff88801fcb2040 (mapping.invalidate_lock){++++}-{3:3}, at: blkdev_fallocate+0x22b/0x6a0 [ 815.191383][T12240] [ 815.191383][T12240] which lock already depends on the new lock. [ 815.191383][T12240] [ 815.202022][T12240] [ 815.202022][T12240] the existing dependency chain (in reverse order) is: [ 815.211083][T12240] [ 815.211083][T12240] -> #4 (mapping.invalidate_lock){++++}-{3:3}: [ 815.219483][T12240] down_write+0x97/0x1f0 [ 815.224303][T12240] set_blocksize+0x249/0x4b0 [ 815.229494][T12240] sb_min_blocksize+0xbe/0x190 [ 815.234832][T12240] ext4_fill_super+0x6df/0x66c0 [ 815.240263][T12240] get_tree_bdev+0x3e4/0x510 [ 815.245433][T12240] vfs_get_tree+0x8c/0x280 [ 815.250444][T12240] do_new_mount+0x24b/0xa40 [ 815.255531][T12240] init_mount+0xd2/0x120 [ 815.260416][T12240] do_mount_root+0x97/0x230 [ 815.265501][T12240] mount_root_generic+0x195/0x3c0 [ 815.271108][T12240] prepare_namespace+0xc2/0x100 [ 815.276637][T12240] kernel_init_freeable+0x413/0x570 [ 815.282414][T12240] kernel_init+0x1d/0x1c0 [ 815.287321][T12240] ret_from_fork+0x48/0x80 [ 815.292345][T12240] ret_from_fork_asm+0x11/0x20 [ 815.297705][T12240] [ 815.297705][T12240] -> #3 (&sb->s_type->i_mutex_key#8){++++}-{3:3}: [ 815.306377][T12240] down_write+0x97/0x1f0 [ 815.311193][T12240] set_blocksize+0x201/0x4b0 [ 815.316365][T12240] sb_set_blocksize+0x4a/0x100 [ 815.321699][T12240] udf_load_vrs+0xe3/0xf00 [ 815.326693][T12240] udf_fill_super+0x67d/0x1720 [ 815.332119][T12240] mount_bdev+0x22b/0x2d0 [ 815.337014][T12240] legacy_get_tree+0xea/0x180 [ 815.342269][T12240] vfs_get_tree+0x8c/0x280 [ 815.347252][T12240] do_new_mount+0x24b/0xa40 [ 815.352327][T12240] __se_sys_mount+0x2da/0x3c0 [ 815.357577][T12240] do_syscall_64+0x55/0xb0 [ 815.362555][T12240] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 815.369026][T12240] [ 815.369026][T12240] -> #2 (&type->s_umount_key#75){++++}-{3:3}: [ 815.377463][T12240] down_read+0x46/0x2e0 [ 815.382184][T12240] super_lock+0x167/0x360 [ 815.387069][T12240] fs_bdev_mark_dead+0xad/0x1f0 [ 815.392644][T12240] bdev_mark_dead+0x83/0x1a0 [ 815.397867][T12240] disk_force_media_change+0x132/0x1b0 [ 815.403880][T12240] nbd_ioctl+0x431/0xed0 [ 815.408775][T12240] blkdev_ioctl+0x58b/0x6f0 [ 815.413817][T12240] __se_sys_ioctl+0xfd/0x170 [ 815.418944][T12240] do_syscall_64+0x55/0xb0 [ 815.423973][T12240] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 815.430434][T12240] [ 815.430434][T12240] -> #1 (&bdev->bd_holder_lock){+.+.}-{3:3}: [ 815.438645][T12240] __mutex_lock+0x129/0xcc0 [ 815.443683][T12240] bd_finish_claiming+0x22f/0x3f0 [ 815.449284][T12240] blkdev_get_by_dev+0x45c/0x600 [ 815.454764][T12240] bdev_open_by_dev+0x77/0x100 [ 815.460077][T12240] setup_bdev_super+0x59/0x660 [ 815.465381][T12240] mount_bdev+0x1dd/0x2d0 [ 815.470333][T12240] legacy_get_tree+0xea/0x180 [ 815.475547][T12240] vfs_get_tree+0x8c/0x280 [ 815.480490][T12240] do_new_mount+0x24b/0xa40 [ 815.485523][T12240] init_mount+0xd2/0x120 [ 815.490304][T12240] do_mount_root+0x97/0x230 [ 815.495343][T12240] mount_root_generic+0x195/0x3c0 [ 815.500898][T12240] prepare_namespace+0xc2/0x100 [ 815.506280][T12240] kernel_init_freeable+0x413/0x570 [ 815.512005][T12240] kernel_init+0x1d/0x1c0 [ 815.516867][T12240] ret_from_fork+0x48/0x80 [ 815.521810][T12240] ret_from_fork_asm+0x11/0x20 [ 815.527111][T12240] [ 815.527111][T12240] -> #0 (bdev_lock){+.+.}-{3:3}: [ 815.534245][T12240] __lock_acquire+0x2ddb/0x7c80 [ 815.539621][T12240] lock_acquire+0x197/0x410 [ 815.544652][T12240] __mutex_lock+0x129/0xcc0 [ 815.549678][T12240] bd_prepare_to_claim+0x1ba/0x480 [ 815.555315][T12240] truncate_bdev_range+0x4e/0x260 [ 815.560916][T12240] blkdev_fallocate+0x428/0x6a0 [ 815.566351][T12240] vfs_fallocate+0x58e/0x700 [ 815.571475][T12240] do_madvise+0x15fe/0x3710 [ 815.576510][T12240] __x64_sys_madvise+0xa6/0xc0 [ 815.581807][T12240] do_syscall_64+0x55/0xb0 [ 815.586748][T12240] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 815.593184][T12240] [ 815.593184][T12240] other info that might help us debug this: [ 815.593184][T12240] [ 815.603420][T12240] Chain exists of: [ 815.603420][T12240] bdev_lock --> &sb->s_type->i_mutex_key#8 --> mapping.invalidate_lock [ 815.603420][T12240] [ 815.617745][T12240] Possible unsafe locking scenario: [ 815.617745][T12240] [ 815.625207][T12240] CPU0 CPU1 [ 815.630582][T12240] ---- ---- [ 815.635950][T12240] lock(mapping.invalidate_lock); [ 815.641103][T12240] lock(&sb->s_type->i_mutex_key#8); [ 815.649006][T12240] lock(mapping.invalidate_lock); [ 815.656650][T12240] lock(bdev_lock); [ 815.660560][T12240] [ 815.660560][T12240] *** DEADLOCK *** [ 815.660560][T12240] [ 815.668707][T12240] 2 locks held by syz.3.1433/12240: [ 815.673906][T12240] #0: ffff88801fcb1eb0 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: blkdev_fallocate+0x205/0x6a0 [ 815.684632][T12240] #1: ffff88801fcb2040 (mapping.invalidate_lock){++++}-{3:3}, at: blkdev_fallocate+0x22b/0x6a0 [ 815.695087][T12240] [ 815.695087][T12240] stack backtrace: [ 815.700976][T12240] CPU: 1 PID: 12240 Comm: syz.3.1433 Not tainted syzkaller #0 [ 815.708455][T12240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 815.718568][T12240] Call Trace: [ 815.721942][T12240] [ 815.724893][T12240] dump_stack_lvl+0x16c/0x230 [ 815.729589][T12240] ? load_image+0x3b0/0x3b0 [ 815.734206][T12240] ? show_regs_print_info+0x20/0x20 [ 815.739441][T12240] ? print_circular_bug+0x12b/0x1a0 [ 815.744663][T12240] check_noncircular+0x2bd/0x3c0 [ 815.749617][T12240] ? print_deadlock_bug+0x5d0/0x5d0 [ 815.755117][T12240] ? lockdep_lock+0xe0/0x220 [ 815.759735][T12240] ? _find_first_zero_bit+0xd3/0x100 [ 815.765156][T12240] __lock_acquire+0x2ddb/0x7c80 [ 815.770060][T12240] ? verify_lock_unused+0x140/0x140 [ 815.775293][T12240] ? mark_lock+0x94/0x320 [ 815.779634][T12240] ? verify_lock_unused+0x140/0x140 [ 815.784854][T12240] ? __lock_acquire+0x1260/0x7c80 [ 815.789934][T12240] lock_acquire+0x197/0x410 [ 815.794574][T12240] ? bd_prepare_to_claim+0x1ba/0x480 [ 815.799928][T12240] ? __might_sleep+0xe0/0xe0 [ 815.804577][T12240] ? read_lock_is_recursive+0x20/0x20 [ 815.809977][T12240] ? mark_lock+0x94/0x320 [ 815.814349][T12240] __mutex_lock+0x129/0xcc0 [ 815.818860][T12240] ? bd_prepare_to_claim+0x1ba/0x480 [ 815.824163][T12240] ? bd_prepare_to_claim+0x1ba/0x480 [ 815.829561][T12240] ? mutex_lock_nested+0x20/0x20 [ 815.834613][T12240] ? __lock_acquire+0x7c80/0x7c80 [ 815.839659][T12240] ? invalidate_bdev+0xc0/0xc0 [ 815.844528][T12240] bd_prepare_to_claim+0x1ba/0x480 [ 815.849676][T12240] ? invalidate_bdev+0xc0/0xc0 [ 815.854470][T12240] ? truncate_bdev_range+0x260/0x260 [ 815.859778][T12240] ? mas_prev_slot+0x840/0x8b0 [ 815.864573][T12240] ? down_write+0x162/0x1f0 [ 815.869085][T12240] ? down_read_killable+0x340/0x340 [ 815.874305][T12240] truncate_bdev_range+0x4e/0x260 [ 815.879345][T12240] blkdev_fallocate+0x428/0x6a0 [ 815.884320][T12240] vfs_fallocate+0x58e/0x700 [ 815.888978][T12240] do_madvise+0x15fe/0x3710 [ 815.893551][T12240] ? madvise_set_anon_name+0x440/0x440 [ 815.899043][T12240] ? __lock_acquire+0x7c80/0x7c80 [ 815.904130][T12240] ? count_memcg_event_mm+0x93/0x3b0 [ 815.909489][T12240] ? count_memcg_event_mm+0x35c/0x3b0 [ 815.914994][T12240] ? vma_end_read+0x18/0x170 [ 815.919928][T12240] ? reacquire_held_locks+0x2ff/0x5a0 [ 815.925459][T12240] ? vma_end_read+0x18/0x170 [ 815.930081][T12240] ? print_unlock_imbalance_bug+0x160/0x160 [ 815.936124][T12240] ? vma_end_read+0x18/0x170 [ 815.940744][T12240] ? __lock_acquire+0x7c80/0x7c80 [ 815.945823][T12240] ? _raw_spin_unlock+0x40/0x40 [ 815.950697][T12240] ? lock_chain_count+0x20/0x20 [ 815.955561][T12240] ? lock_chain_count+0x20/0x20 [ 815.960422][T12240] __x64_sys_madvise+0xa6/0xc0 [ 815.965202][T12240] do_syscall_64+0x55/0xb0 [ 815.970072][T12240] ? clear_bhb_loop+0x40/0x90 [ 815.974775][T12240] ? clear_bhb_loop+0x40/0x90 [ 815.979499][T12240] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 815.985414][T12240] RIP: 0033:0x7f8cdaf8f749 [ 815.989840][T12240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 816.009497][T12240] RSP: 002b:00007f8cdbe98038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 816.017933][T12240] RAX: ffffffffffffffda RBX: 00007f8cdb1e6180 RCX: 00007f8cdaf8f749 [ 816.025916][T12240] RDX: 0000000000000009 RSI: 0000000000600000 RDI: 0000200000000000 [ 816.033905][T12240] RBP: 00007f8cdb013f91 R08: 0000000000000000 R09: 0000000000000000 [ 816.041886][T12240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 816.049981][T12240] R13: 00007f8cdb1e6218 R14: 00007f8cdb1e6180 R15: 00007ffd99861e18 [ 816.058008][T12240] [ 816.061103][ C1] vkms_vblank_simulate: vblank timer overrun