last executing test programs: 4.346191365s ago: executing program 0 (id=2067): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) setxattr$incfs_metadata(0x0, &(0x7f00000000c0), &(0x7f0000000d00)="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", 0x2fe, 0x0) 4.284163212s ago: executing program 0 (id=2068): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) 3.535000068s ago: executing program 0 (id=2069): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x27, 0x301, 0x270bda7, 0x25dfdbfa, {0x13}}, 0x14}}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') getrusage(0xfffffffffffffffe, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) sendmsg$nl_route_sched(r2, 0x0, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r6, 0x2000) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) 3.004880512s ago: executing program 0 (id=2071): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000500)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f00000005c0)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000640)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000680)}, {&(0x7f0000000740)="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", 0xcb3}], 0x5, &(0x7f0000001400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) recvmsg$unix(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f00000014c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) shutdown(r1, 0x0) 2.865477397s ago: executing program 0 (id=2072): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000380)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x1, 0x19e, &(0x7f0000000200)={0x2000000000002001, 0x0, 0x78e3dc72}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x4, 0x2000007, 0x1010, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r1, &(0x7f0000000440)="a7", &(0x7f0000000840)=""/4096}, 0x20) 2.7327738s ago: executing program 0 (id=2073): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5b30a40450c056055b50102030109021200010000000009"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="00000003000010"], 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) 2.073894947s ago: executing program 2 (id=2074): socket$netlink(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = socket$l2tp(0x2, 0x2, 0x73) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000540)=""/248, 0xf8}], 0x1) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 1.973248298s ago: executing program 3 (id=2075): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x80a00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) r2 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x802154}, 0x0, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) io_uring_setup(0x1b7b, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000700)=@assoc_value, &(0x7f0000000740)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000007c0)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_ublk_add_dev(r2, 0x0, r3, r4, &(0x7f0000000a80)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000b00)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f00)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) r6 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000400)={0x0, 0x30b5, 0x0, 0xffffffff, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x7, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r10, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) dup3(r1, r0, 0x0) 1.946915991s ago: executing program 2 (id=2076): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000200)={[{0x5, 0x2000, 0x0, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0xfd, 0x4}, {0x0, 0x0, 0x4, 0x2, 0x0, 0xff, 0x0, 0xfe, 0x0, 0x9, 0x1, 0x0, 0x2}, {0xd6a, 0x4, 0x1, 0x0, 0x0, 0x3, 0x8, 0x0, 0x9, 0x20}]}) sigaltstack(&(0x7f0000000600)={0x0, 0x80000001}, 0x0) sigaltstack(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x90031, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="06000000040000000b00000005"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000740), 0xe1ce, r5, 0x0, 0xa0028000}, 0x38) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000380)={'syzkaller0\x00', @multicast}) r7 = socket$unix(0x1, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) sendmsg$nl_route_sched(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70ad2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {0x3, 0xb}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x54814}, 0x0) 1.881368877s ago: executing program 3 (id=2077): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x140, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1a1080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000240)={[0x7, 0x5, 0xa, 0x800009, 0x9, 0x3, 0x1041, 0x4000000000000004, 0x0, 0x200000, 0x10, 0x2001040100000002, 0x0, 0x8, 0x800005, 0x6b], 0xd000, 0x101052}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.621255994s ago: executing program 3 (id=2079): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x27, 0x301, 0x270bda7, 0x25dfdbfa, {0x13}}, 0x14}}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') getrusage(0xfffffffffffffffe, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) sendmsg$nl_route_sched(r2, 0x0, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r6, 0x2000) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) 1.295788297s ago: executing program 3 (id=2082): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000003c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000440)={0x1, &(0x7f0000000480)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000004c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000500)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000003a80)=[{{&(0x7f00000002c0)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000300)="bf312bd2920d7051419570cf95fb842cb8d70d625047f615d404e0b61e28", 0x1e}], 0x1}}, {{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000dc0)="c4da02d837cab71d3fb6ae9bb123ff4c9ad4f3c2fbc0bb706000359d4c61a9c94d609255c120edac134c1dd8f877ad15acae9bdae899aa449ea97d2ab61b034b4e28eed94dd94d84daf824dc552dfd6d797e4ac5c326e56c8d92d12b10ae4645925f3ec974d314c7869c2bfa1c94053eaaaf730065e2ecf344cbb4244517e41c95407865006498e698805ae803b7d666b73abd22e144e3fa3dbca890f70b7f1af132848d00a53889476af0ce74921cc649cd3efe6f9ff942719031f949bcf6c1aa92410822bf00c43e57f04eac50250fede895389c627377e73a2e2baf7b40ca2596a881ea89695877dd65c183121160a6f9c1c57cdbc90c7f66f6ed86f53d33087b9914107f5428ed3aba62e7407c2a339b36bf60145840ef94fab7e17725c32841338dd1e9c585236a6c5e1b6f7018761d9be0268c8ce64390e2159b8d5e07c700c38795013fadefc0be63dea9637c2b70a0da42bfb870bfc2a380b2a671eefdd78836bdcbcb4c452b361954a90d97ed5b1a3792490cb87be8dda280d5accfa2ec2d5c73f2296962609343702832981373253ea208cd1ff0e0fb7658bdb56cc94d60a63868b5e508aa7988f879c5e2e8da05d7f26ac746db836b69ac2a62309da8f1d59d639eff538f333821ae5b3a1eb8435e93c8ae1a9bae577564aba0c81c1f1b70cb1340a5a16ddf18bdbbcea15c7c09a7cff3e4e02872dc8eb5e584d3aa652aed970fe8395ec1fb67bc1bf0c260c153a67661c74b3dc23f9b18056891bf60e831f600747d674518fc63a1ecaac9e13ad485fcf1852b8090813ee9d0d62605a29f5218c13c59017361b200d8e2cbfea51f83c6fbefc1eb49a2eecd6928572e48d8a5faddf8266e5d54a3b2f30cc3f09a84f6783c2b4c7bc9827bfd725bf880b1db5880f6200499c1d5192eea587e3dc616f61d37c812e08a495f747480c1014d7218f08ca71715bd50a3562b2eea141223cc1dd44277dad689363ebf574126a37aab06324de3067e87feb2680ddf11a857b88957e2ca07b4784f06cbf07b971d43c32cae479bf6965b2c3a125803da41fcb5af0d7d6149fed6243dd5c0d4e1090a4d087c2b4b18405121d2accea1e8639a8d90525ac98fbb4423b2dd9b54a1ca7566762606a22e10eceb3e1456795598859469785cb89570c877a36b11407163255eee546963904114934f4a76cfe7ca1f7a1c2540a24feff956f034e15e6413b59ed8efe82a7c4e31e26af89cc38deda9ecfd3bcc8c20253fccc9761b4df77e6c6ebcfe6095b9d9e4f1eb15e9789460d768e5673ab0e7af5c637836b25941c55c1736cb2789d14368f2c2f19ff062db8f31d0604c69bb9670f714442806734bcfef98691a6dadf32a3244d5acb35b5d36c4b7beae36c0a9ff5daa810bfa0d6e1b49e2f2ba435d4b25a1819ede63a0d6c04c904c9f27966cef19e2a7dba563807a656a941628dbd2f64fea1fbd9adab9fc74154e57afb782ec7b83024a7792be01fd2b90a6eafdc8dcf37eedfc5398005e3e1491c2b5faa475988c07317594c66499d40f1ac998ae2e834645c88e4a19321843cf7ddb401ff7fa1823f5dcf9d4622f635583029eb6ab1547b294a3b10a8a1766232cab6a1767364afbb7fcacbfe3aa617ba211a51d89e0b8733ffc88cc036860422ae0263a17cec1c13bee1b33b3f02921c03c2348615d3b5b01b1fe60492212268c12d27331365beb48ce393a818a0ec987bac70f3922ea200819a0f742482bc3b69537306f27a49fce2d6537b5b7bad8c247f796c22d4802ff49c024653981aa059acda7aa99150260e0b112eeb0d83763b5e5e61046441191efb7874d973aac0cf0fe6409340e4161e33e546402a763325e2e3f809ee491e25b1fea778a550e5bae9e7517e3be6e689370dcc38bec5c2cb84b55d1b0aae50a0bb7917b13a7517064c86ed26c59061aa99754673a956e1b951b9140caa7e7c4de409462f382be1f13bde2da5ef2e207366e2771003d6dc55bbc5603a54ba1750d9532534d23be3438826d952d4cc9b4b15fad2af2bdc9a5bb223bce6719379123b93badcf156ac4102b1c9f51911db965c4b3ff2111fb51096003569c2ef8afd5bbe2277fc5da56a7e006dc0299056eff970c66fe468c596f6e1c225b3d8d18628d3ca09a1ef488a9f654f93a64fa5b410e1d3b9b04a833d6dd36996d8ab5f2c2bb4044bf1125a11e4b55dd248a6c17043a8777e501541abae428964e0abbf5bd4174191cc15599f2082d9c2a20ef8befc93b33597c0f51b9fac31699829dd20969302853d78c84c2253b6eb357868a6e8b31f6e6a8bd794b36bebebc8c16a1f46294c97c89ed1ed318080dc4ccf15e579c41928d8328a81cdb99d6584bee35a036cd658691ff22c00032ef90ac7c160ad4f9cb285c3d88cce6b1f1dc721557fecb92c56dc23aa5e5da1a35e68a0e138bf81b6b1125986c63c7d631e70426c06b704ecb66443ea7bb20c73aa198e6f45c949f8c89fa67ecfbc56ae79476d802f6cb9a75c641716c7faa86eae31c797c3495412dc9bcdf30abf257b2359665ab5aa2583f4ec291ba064a0f6df459d2832bfd3cca538898e0682e8578c7459385b8fc7ccfa3a9b7e952ea54503bedd8e85af4f72bd3f4849c9189ca5ae42d20384c142e75b50382a91f60a45d2c9ce27d831c58e1018b3b4169a83581b2c4e97542f5d9c83092b4ae78b040f3cdfeedfadf49c79770dfbb4b4c1298a7f156ae4c7e4113cbe79bded74792f37d95c6b482a67cf95852e2beb86d16d1e29975b787cd9b500c7279cda1503bb91e4ae38cbfef5332cd5adcddd0c1771be4dccd4fec531f5a0eedcf45ac2946a13524ca0c5c2e92e14f09d30a9a6312246d86420df48a8ee8ecb0472f9f6f695a97345e2a8a61a3f58d328fe62c8fba78ed031bad9d35704311433481ef5cc892a844524fcb700ea279514a139a1b0aa1ab9bec08a73e0e24bc8f2ede40c16f0b8811cdb3921dc4627b152f0227586e0caf8ec9063b769795914ac87c2e92e68205bfdf8961476950ca7a5d37588656f912e7e18ea439c46017f3262c5a8cbf865a0c1fdceeb0c96cbeca85ad6f93a1478efd89f4aa3c5462e458c678ae5379afc3c7e0e29e16ba756d47f6ec98d10ba98dff3299bdecd7a44d30de6680dea884853a1f002513ff9236b530f319d80efa76aa61848122841dae5647fab0e8c984e0b0cd2ca78995b1e89216776187c31cf98013ffac93fcf868e109f6cb9a9601b41a025817c883591049edd0fc86215b360a4ab62955f469634f6d34cc07a9f05f78112f389551db5437dca0e4b632fa79ad6a13bb3cbed909be90f1cfbbe344424481e1643cdd9baeb6f71bda052b56a0feeacfaa5db73928bc879b82d1de58f0cc07453bd1b8c45e4e29f92820ea98b79b248ae3049fa99e", 0x974}], 0x1}}], 0x2, 0x2090) 1.256614831s ago: executing program 2 (id=2083): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000840)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0x6}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x3, 0x1, {0x5, 0x10000, 0x5}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x85c}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x8}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x2, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000a40)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newqdisc={0x88, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0x6, 0x0, 0x7, 0x9, 0x0, 0x5, 0x6, 0x1, 0x7, 0xb, 0x6, 0x5, 0x6, 0xa, 0x2, 0xd], 0x0, [0xd, 0x7, 0x4, 0x9, 0x31f5, 0x155, 0x1, 0x0, 0x4, 0x4, 0x1, 0x400, 0xfff, 0xe403, 0x5e4b, 0xfff], [0x7, 0x2, 0x5, 0x2, 0xd, 0x5, 0x0, 0xff48, 0x6, 0x2, 0x401, 0x400, 0x4, 0x6, 0x2, 0x1]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x85c}, 0x0) 1.17028713s ago: executing program 3 (id=2084): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = socket$l2tp(0x2, 0x2, 0x73) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000540)=""/248, 0xf8}], 0x1) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 996.974728ms ago: executing program 3 (id=2086): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="002290"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x8000) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[], 0x0) syz_usb_control_io(r1, &(0x7f0000000280)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="00dc6b"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 846.669013ms ago: executing program 1 (id=2087): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x140, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1a1080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000240)={[0x7, 0x5, 0xa, 0x800009, 0x9, 0x3, 0x1041, 0x4000000000000004, 0x0, 0x200000, 0x10, 0x2001040100000002, 0x0, 0x8, 0x800005, 0x6b], 0xd000, 0x101052}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 845.248173ms ago: executing program 2 (id=2088): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = eventfd2(0x0, 0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000140)={0x0, r1}) ppoll(&(0x7f0000000180)=[{r1, 0x1}], 0x1, 0x0, 0x0, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)="569534ab1bbe0e03", 0x8}], 0x1) 689.292469ms ago: executing program 2 (id=2089): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000500)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f00000005c0)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000640)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000680)}, {&(0x7f0000000740)="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", 0xcb3}], 0x5, &(0x7f0000001400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) recvmsg$unix(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f00000014c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) shutdown(r1, 0x0) 634.188065ms ago: executing program 1 (id=2090): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x27, 0x301, 0x270bda7, 0x25dfdbfa, {0x13}}, 0x14}}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') getrusage(0xfffffffffffffffe, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) sendmsg$nl_route_sched(r2, 0x0, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r6, 0x2000) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) 615.454857ms ago: executing program 2 (id=2091): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000140)) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000200)={[{0x5, 0x2000, 0x0, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0xfd, 0x4}, {0x0, 0x0, 0x4, 0x2, 0x0, 0xff, 0x0, 0xfe, 0x0, 0x9, 0x1, 0x0, 0x2}, {0xd6a, 0x4, 0x1, 0x0, 0x0, 0x3, 0x8, 0x0, 0x9, 0x20}]}) openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x32) sigaltstack(&(0x7f0000000600)={0x0, 0x80000001}, 0x0) sigaltstack(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000005) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x90031, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="06000000040000000b00000005"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000740), 0xe1ce, r4, 0x0, 0xa0028000}, 0x38) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000380)={'syzkaller0\x00', @multicast}) socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f00000005c0)={'bridge_slave_1\x00', @random="2b0100004ec6"}) 332.355506ms ago: executing program 1 (id=2092): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001480)='ns/cgroup\x00') open_by_handle_at(r0, &(0x7f00000014c0)=@FILEID_NILFS_WITHOUT_PARENT={0x11, 0xf1, {0xd, 0x20, 0x105, 0xfffffff8, 0x3d}}, 0x0) 210.619718ms ago: executing program 1 (id=2093): r0 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCSABS3F(r0, 0x401845ff, 0x0) 53.273774ms ago: executing program 1 (id=2094): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) setxattr$incfs_metadata(0x0, &(0x7f00000000c0), &(0x7f0000000d00)="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", 0x300, 0x0) 0s ago: executing program 1 (id=2095): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fsync(r0) kernel console output (not intermixed with test programs): n invalid length. [ 385.860523][ T8800] 8021q: adding VLAN 0 to HW filter on device bond2 [ 385.922310][ T8820] bond2: (slave veth5): Enslaving as an active interface with a down link [ 386.060663][ T8800] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 386.094985][ T8800] bond2: (slave batadv2): making interface the new active one [ 386.130431][ T8800] batadv2: entered promiscuous mode [ 386.147936][ T8800] bond2: (slave batadv2): Enslaving as an active interface with an up link [ 386.171254][ T8822] rxe_eth0 speed is unknown, defaulting to 1000 [ 386.303607][ T5886] usb 2-1: USB disconnect, device number 7 [ 386.989106][ T8830] netlink: 64 bytes leftover after parsing attributes in process `syz.1.975'. [ 387.091787][ T8834] loop3: detected capacity change from 0 to 256 [ 387.105638][ T8834] FAT-fs (loop3): Unrecognized mount option "shortnamxed" or missing value [ 387.706925][ T8833] netlink: 16 bytes leftover after parsing attributes in process `syz.3.976'. [ 387.719452][ T7291] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 389.938210][ T8852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.983'. [ 389.983796][ T8855] process 'syz.0.982' launched '/dev/fd/4' with NULL argv: empty string added [ 390.299450][ T8858] netlink: 64 bytes leftover after parsing attributes in process `syz.2.985'. [ 390.777216][ T8862] loop2: detected capacity change from 0 to 256 [ 390.790196][ T8862] FAT-fs (loop2): Unrecognized mount option "shortnamxed" or missing value [ 391.413396][ T7291] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 391.424744][ T8861] netlink: 16 bytes leftover after parsing attributes in process `syz.2.987'. [ 391.713310][ T3393] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 391.896908][ T8870] rxe_eth0 speed is unknown, defaulting to 1000 [ 391.924407][ T3393] usb 2-1: Using ep0 maxpacket: 32 [ 391.951117][ T3393] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 391.972029][ T3393] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.035864][ T3393] usb 2-1: config 0 descriptor?? [ 393.773591][ T3393] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 393.800706][ T3393] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 393.820953][ T3393] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 393.833297][ T3393] usb 2-1: media controller created [ 393.901347][ T3393] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 393.987593][ T8866] tipc: Enabled bearer , priority 10 [ 394.047357][ T8866] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 394.390910][ T3393] az6027: usb out operation failed. (-71) [ 394.411086][ T3393] stb0899_attach: Driver disabled by Kconfig [ 394.422515][ T3393] az6027: no front-end attached [ 394.422515][ T3393] [ 394.453792][ T3393] az6027: usb out operation failed. (-71) [ 394.459572][ T3393] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 394.497666][ T3393] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11 [ 394.545790][ T3393] dvb-usb: schedule remote query interval to 400 msecs. [ 394.552789][ T3393] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 394.614191][ T3393] usb 2-1: USB disconnect, device number 8 [ 394.711993][ T3393] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 395.608148][ T8888] netlink: 64 bytes leftover after parsing attributes in process `syz.0.995'. [ 397.421177][ T8909] random: crng reseeded on system resumption [ 397.522828][ T8912] loop1: detected capacity change from 0 to 256 [ 397.536526][ T8912] FAT-fs (loop1): Unrecognized mount option "shortnamxed" or missing value [ 398.103887][ T7291] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 398.115210][ T8907] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1002'. [ 398.875307][ T8930] fuse: Unknown parameter 'use00000000000000000000' [ 399.042650][ T8936] md: md0 stopped. [ 400.759377][ T8953] rxe_eth0 speed is unknown, defaulting to 1000 [ 400.883472][ T8956] PID 8956 killed due to inadequate hugepage pool [ 400.951275][ T8961] md: md2 stopped. [ 401.096474][ T8963] fuse: Unknown parameter 'use00000000000000000000' [ 401.480993][ T8970] tipc: Enabled bearer , priority 0 [ 401.616375][ T8974] loop2: detected capacity change from 0 to 33280 [ 401.653149][ T8974] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 401.663519][ T8974] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 402.226425][ T8981] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1033'. [ 402.300930][ T8967] tipc: Disabling bearer [ 402.672209][ T8987] md: md2 stopped. [ 404.190457][ T8990] rxe_eth0 speed is unknown, defaulting to 1000 [ 404.291438][ T5905] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 404.308737][ T5774] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 404.334114][ T5774] dvb_usb_az6027: probe of 4-1:0.0 failed with error -110 [ 404.341365][ T5905] dvb_usb_az6027: probe of 3-1:0.0 failed with error -2 [ 404.355192][ T5905] usb 3-1: USB disconnect, device number 8 [ 404.362098][ T5774] usb 4-1: USB disconnect, device number 10 [ 404.532186][ T9003] fuse: Unknown parameter 'use00000000000000000000' [ 405.625052][ T9021] loop3: detected capacity change from 0 to 256 [ 405.637732][ T9021] FAT-fs (loop3): Unrecognized mount option "shortnamxed" or missing value [ 406.074911][ T9019] md: md2 stopped. [ 406.223549][ T8300] batadv2: left promiscuous mode [ 406.297857][ T9026] loop3: detected capacity change from 0 to 33280 [ 407.677999][ T5798] Bluetooth: hci3: command 0x0406 tx timeout [ 407.706153][ T9026] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 407.725139][ T9026] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 407.796998][ T7291] I/O error, dev loop3, sector 33152 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 408.104777][ T9035] fuse: Unknown parameter 'user_i00000000000000000000' [ 408.163325][ T5866] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 408.390056][ T5866] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 408.411566][ T5866] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.426522][ T5866] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 408.443522][ T5866] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 408.469279][ T5866] usb 2-1: Product: syz [ 408.483519][ T5866] usb 2-1: Manufacturer: syz [ 408.517232][ T5866] hub 2-1:4.0: USB hub found [ 408.922439][ T5866] hub 2-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 411.372553][ T9055] loop3: detected capacity change from 0 to 256 [ 411.386799][ T9055] FAT-fs (loop3): Unrecognized mount option "shortnamxed" or missing value [ 411.416613][ T9060] loop0: detected capacity change from 0 to 256 [ 411.424101][ T9060] FAT-fs (loop0): Unrecognized mount option "shortnamxed" or missing value [ 411.483494][ T7552] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 411.485128][ T7291] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 411.504240][ T9059] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1055'. [ 411.577490][ T5774] usb 2-1: USB disconnect, device number 9 [ 411.838614][ T9067] fuse: Unknown parameter 'user_i00000000000000000000' [ 411.933095][ T9064] rxe_eth0 speed is unknown, defaulting to 1000 [ 412.046373][ T9068] PID 9068 killed due to inadequate hugepage pool [ 414.219777][ T9098] loop2: detected capacity change from 0 to 256 [ 414.227311][ T9098] FAT-fs (loop2): Unrecognized mount option "shortnamxed" or missing value [ 414.269167][ T8] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 414.504438][ T8] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 414.775642][ T8] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.981521][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 414.992826][ T8] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 415.001522][ T8] usb 1-1: Product: syz [ 415.007966][ T8] usb 1-1: Manufacturer: syz [ 415.019617][ T8] hub 1-1:4.0: USB hub found [ 415.094544][ T9101] netlink: 'syz.2.1067': attribute type 1 has an invalid length. [ 415.131338][ T9101] 8021q: adding VLAN 0 to HW filter on device bond1 [ 415.167911][ T9101] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 415.177744][ T9101] bond1: (slave batadv1): making interface the new active one [ 415.187602][ T9101] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 415.237813][ T8] hub 1-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 415.399600][ T9104] loop2: detected capacity change from 0 to 33280 [ 415.423049][ T9104] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 415.456457][ T9104] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 415.467272][ T9090] netlink: 'syz.0.1064': attribute type 1 has an invalid length. [ 415.655053][ T9090] 8021q: adding VLAN 0 to HW filter on device bond2 [ 415.799044][ T9106] bond2: (slave veth5): Enslaving as an active interface with a down link [ 416.329267][ T9112] ip_tables: iptables: counters copy to user failed while replacing table [ 417.150903][ T8] usb 1-1: USB disconnect, device number 4 [ 418.752092][ T9129] loop3: detected capacity change from 0 to 256 [ 418.759183][ T9129] FAT-fs (loop3): Unrecognized mount option "shortnamxed" or missing value [ 420.117861][ T7291] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 420.131150][ T9126] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1072'. [ 420.517805][ T9138] loop0: detected capacity change from 0 to 256 [ 420.525399][ T9138] FAT-fs (loop0): Unrecognized mount option "shortnamxed" or missing value [ 421.259065][ T7291] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 422.241282][ T9146] ip_tables: iptables: counters copy to user failed while replacing table [ 423.420711][ T9157] ip_tables: iptables: counters copy to user failed while replacing table [ 423.533481][ T5774] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 425.065961][ T5774] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 425.078524][ T5774] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.096062][ T5774] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 425.107895][ T5774] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 425.117630][ T5774] usb 2-1: Product: syz [ 425.121819][ T5774] usb 2-1: Manufacturer: syz [ 425.134290][ T5774] hub 2-1:4.0: USB hub found [ 425.278202][ T9167] loop0: detected capacity change from 0 to 33280 [ 425.302700][ T9167] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 425.341411][ T5774] hub 2-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 425.381243][ T9167] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 426.198483][ T9170] loop3: detected capacity change from 0 to 256 [ 426.206024][ T9170] FAT-fs (loop3): Unrecognized mount option "shortnamxed" or missing value [ 426.328077][ T9150] netlink: 'syz.1.1081': attribute type 1 has an invalid length. [ 426.494236][ T9150] 8021q: adding VLAN 0 to HW filter on device bond3 [ 426.624086][ T9173] bond3: (slave veth7): Enslaving as an active interface with a down link [ 426.803512][ T5774] usb 2-1: USB disconnect, device number 10 [ 427.116162][ T9189] ip_tables: iptables: counters copy to user failed while replacing table [ 428.675074][ T5867] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 428.686200][ T9199] block device autoloading is deprecated and will be removed. [ 428.721599][ T9199] syz.1.1097: attempt to access beyond end of device [ 428.721599][ T9199] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 428.909260][ T9204] loop3: detected capacity change from 0 to 256 [ 428.920983][ T9204] FAT-fs (loop3): Unrecognized mount option "shortnamxed" or missing value [ 429.079171][ T9204] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1096'. [ 429.629776][ T5867] usb 3-1: Using ep0 maxpacket: 32 [ 429.638328][ T5867] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 429.649368][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.661153][ T5867] usb 3-1: config 0 descriptor?? [ 429.892579][ T5867] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 429.905165][ T5867] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 429.924831][ T5867] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 429.936663][ T5867] usb 3-1: media controller created [ 429.938195][ T9215] ip_tables: iptables: counters copy to user failed while replacing table [ 429.960100][ T5867] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 430.113123][ T5867] az6027: usb out operation failed. (-71) [ 430.134707][ T5867] az6027: usb out operation failed. (-71) [ 430.140481][ T5867] stb0899_attach: Driver disabled by Kconfig [ 430.166499][ T5867] az6027: no front-end attached [ 430.166499][ T5867] [ 430.203446][ T5867] az6027: usb out operation failed. (-71) [ 430.209375][ T5867] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 430.241245][ T5867] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input12 [ 430.275697][ T5867] dvb-usb: schedule remote query interval to 400 msecs. [ 430.282694][ T5867] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 430.333942][ T5867] usb 3-1: USB disconnect, device number 9 [ 430.424637][ T5867] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 430.463815][ T5774] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 430.678430][ T5774] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 430.704656][ T5774] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.734760][ T5774] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 430.753331][ T5774] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 430.765520][ T5774] usb 2-1: Product: syz [ 430.771979][ T5774] usb 2-1: Manufacturer: syz [ 430.801312][ T5774] hub 2-1:4.0: USB hub found [ 431.008874][ T5774] hub 2-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 432.514982][ T9219] netlink: 'syz.1.1105': attribute type 1 has an invalid length. [ 432.607195][ T9247] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 432.633938][ T9219] 8021q: adding VLAN 0 to HW filter on device bond4 [ 432.773521][ T5905] usb 2-1: USB disconnect, device number 11 [ 432.973542][ T8] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 433.233343][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 433.247443][ T8] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 433.268967][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.281301][ T8] usb 3-1: Product: syz [ 433.294392][ T8] usb 3-1: Manufacturer: syz [ 433.299089][ T8] usb 3-1: SerialNumber: syz [ 433.576129][ T8] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 433.594441][ T8] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 433.613760][ T8] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 433.622454][ T8] usb 3-1: media controller created [ 433.705605][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 433.789895][ T9281] rxe_eth0 speed is unknown, defaulting to 1000 [ 433.864792][ T8] zl10353_read_register: readreg error (reg=127, ret==-32) [ 434.091181][ T8] dvb_usb_gl861: probe of 3-1:157.0 failed with error -5 [ 434.122552][ T8] usb 3-1: USB disconnect, device number 10 [ 435.776443][ T9300] fuse: Bad value for 'fd' [ 435.810216][ T9302] tipc: Enabled bearer , priority 0 [ 436.652222][ T9297] tipc: Disabling bearer [ 437.467078][ T9333] rxe_eth0 speed is unknown, defaulting to 1000 [ 437.503466][ T5886] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 437.541223][ T9336] fuse: Bad value for 'fd' [ 437.711920][ T5886] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 437.733296][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.741345][ T5886] usb 2-1: Product: syz [ 437.763227][ T5886] usb 2-1: Manufacturer: syz [ 437.767954][ T5886] usb 2-1: SerialNumber: syz [ 437.781807][ T5886] usb 2-1: config 0 descriptor?? [ 437.804951][ T5886] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 439.330872][ T5886] sonixb 2-1:0.0: Error reading register 00: -110 [ 439.692565][ T9351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.701488][ T9351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.106783][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.113210][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.174319][ T9359] ip_tables: iptables: counters copy to user failed while replacing table [ 442.155502][ T9365] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1145'. [ 442.180941][ T5788] usb 2-1: USB disconnect, device number 12 [ 444.456352][ T9384] rxe_eth0 speed is unknown, defaulting to 1000 [ 444.964521][ T9391] loop1: detected capacity change from 0 to 256 [ 444.976101][ T9391] FAT-fs (loop1): Unrecognized mount option "shortnamxed" or missing value [ 445.117383][ T9391] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1153'. [ 445.981652][ T9397] ip_tables: iptables: counters copy to user failed while replacing table [ 447.913313][ T5788] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 449.449621][ T5788] usb 3-1: Using ep0 maxpacket: 32 [ 449.504390][ T5788] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 449.548668][ T5788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.572007][ T9416] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1156'. [ 449.622847][ T5788] usb 3-1: config 0 descriptor?? [ 449.933336][ T5788] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 449.944694][ T5788] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 449.959765][ T5788] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 449.977409][ T5788] usb 3-1: media controller created [ 450.098269][ T5788] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 450.173298][ T5788] az6027: usb out operation failed. (-71) [ 450.206304][ T5788] az6027: usb out operation failed. (-71) [ 450.212167][ T5788] stb0899_attach: Driver disabled by Kconfig [ 450.243454][ T5788] az6027: no front-end attached [ 450.243454][ T5788] [ 450.264597][ T5788] az6027: usb out operation failed. (-71) [ 450.277527][ T5788] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 450.300648][ T5788] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input13 [ 450.350832][ T5788] dvb-usb: schedule remote query interval to 400 msecs. [ 450.363899][ T9425] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1164'. [ 450.384119][ T5788] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 450.558128][ T5788] usb 3-1: USB disconnect, device number 11 [ 450.607856][ T9427] loop3: detected capacity change from 0 to 256 [ 450.619644][ T9427] FAT-fs (loop3): Unrecognized mount option "shortnamxed" or missing value [ 451.293335][ T7552] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 451.304203][ T9426] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1163'. [ 451.616081][ T5788] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 451.736162][ T9436] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1168'. [ 453.205077][ T9442] rxe_eth0 speed is unknown, defaulting to 1000 [ 453.640169][ T28] audit: type=1326 audit(1794598372.317:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9447 comm="syz.0.1172" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b6ba94d9 code=0x7ffc0000 [ 453.793144][ T28] audit: type=1326 audit(1794598372.347:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9447 comm="syz.0.1172" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc2b6ba94d9 code=0x7ffc0000 [ 453.869276][ T28] audit: type=1326 audit(1794598372.347:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9447 comm="syz.0.1172" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b6ba94d9 code=0x7ffc0000 [ 453.947809][ T28] audit: type=1326 audit(1794598372.347:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9447 comm="syz.0.1172" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b6ba94d9 code=0x7ffc0000 [ 454.053292][ T28] audit: type=1326 audit(1794598372.347:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9447 comm="syz.0.1172" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fc2b6ba94d9 code=0x7ffc0000 [ 454.133682][ T28] audit: type=1326 audit(1794598372.347:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9447 comm="syz.0.1172" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b6ba94d9 code=0x7ffc0000 [ 454.159904][ T28] audit: type=1326 audit(1794598372.347:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9447 comm="syz.0.1172" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b6ba94d9 code=0x7ffc0000 [ 454.194167][ T28] audit: type=1326 audit(1794598372.357:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9447 comm="syz.0.1172" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc2b6ba94d9 code=0x7ffc0000 [ 454.233783][ T28] audit: type=1326 audit(1794598372.357:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9447 comm="syz.0.1172" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b6ba94d9 code=0x7ffc0000 [ 454.303272][ T28] audit: type=1326 audit(1794598372.357:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9447 comm="syz.0.1172" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2b6ba94d9 code=0x7ffc0000 [ 454.327483][ T5867] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 454.474303][ T9455] IPv6: Can't replace route, no match found [ 454.553413][ T5867] usb 1-1: Using ep0 maxpacket: 32 [ 454.560658][ T5867] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 454.563443][ T23] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 454.585216][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.623776][ T5867] usb 1-1: config 0 descriptor?? [ 454.663105][ T9457] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1176'. [ 454.678390][ T9457] ip_tables: iptables: counters copy to user failed while replacing table [ 454.785347][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.817494][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.837828][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 454.841261][ T5867] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 454.863534][ T23] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 454.890293][ T5867] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 454.897409][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.924357][ T5867] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 454.925018][ T23] usb 3-1: config 0 descriptor?? [ 454.931617][ T5867] usb 1-1: media controller created [ 454.953333][ T9462] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1173'. [ 454.973125][ T5867] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 455.051484][ T5867] az6027: usb out operation failed. (-71) [ 455.077382][ T5867] az6027: usb out operation failed. (-71) [ 455.104259][ T5867] stb0899_attach: Driver disabled by Kconfig [ 455.110304][ T5867] az6027: no front-end attached [ 455.110304][ T5867] [ 455.133806][ T5867] az6027: usb out operation failed. (-71) [ 455.153374][ T5867] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 455.205835][ T5867] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input14 [ 455.213940][ T9469] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1178'. [ 455.257743][ T5867] dvb-usb: schedule remote query interval to 400 msecs. [ 455.266362][ T5867] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 455.361945][ T5867] usb 1-1: USB disconnect, device number 5 [ 455.396472][ T23] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd [ 455.417540][ T23] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 455.486042][ T23] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 455.502740][ T5867] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 457.115595][ T9480] rxe_eth0 speed is unknown, defaulting to 1000 [ 457.140931][ T5867] usb 3-1: USB disconnect, device number 12 [ 457.306003][ T9488] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1185'. [ 457.323845][ T9488] ip_tables: iptables: counters copy to user failed while replacing table [ 457.667834][ T5788] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 457.684243][ T5788] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 457.688640][ T9498] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1189'. [ 457.696246][ T5788] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 457.901187][ T9502] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1190'. [ 457.914111][ T9499] fido_id[9499]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 458.510284][ T9516] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1194'. [ 458.534971][ T9516] ip_tables: iptables: counters copy to user failed while replacing table [ 458.739880][ T9520] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1188'. [ 460.292637][ T9518] rxe_eth0 speed is unknown, defaulting to 1000 [ 460.625044][ T9531] ip_tables: iptables: counters copy to user failed while replacing table [ 462.865773][ T9548] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1205'. [ 462.894733][ T9548] ip_tables: iptables: counters copy to user failed while replacing table [ 462.933801][ T9552] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1204'. [ 463.173409][ T9558] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1209'. [ 463.218534][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 463.218547][ T28] audit: type=1326 audit(1794598381.897:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9561 comm="syz.1.1210" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ad5a94d9 code=0x7ffc0000 [ 464.596997][ T28] audit: type=1326 audit(1794598381.927:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9561 comm="syz.1.1210" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb1ad5a94d9 code=0x7ffc0000 [ 464.622053][ T28] audit: type=1326 audit(1794598381.927:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9561 comm="syz.1.1210" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ad5a94d9 code=0x7ffc0000 [ 464.646696][ T28] audit: type=1326 audit(1794598381.927:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9561 comm="syz.1.1210" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ad5a94d9 code=0x7ffc0000 [ 464.685257][ T28] audit: type=1326 audit(1794598381.927:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9561 comm="syz.1.1210" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb1ad5a94d9 code=0x7ffc0000 [ 464.733426][ T28] audit: type=1326 audit(1794598381.937:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9561 comm="syz.1.1210" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ad5a94d9 code=0x7ffc0000 [ 464.745538][ T9562] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1210'. [ 464.801566][ T28] audit: type=1326 audit(1794598381.937:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9561 comm="syz.1.1210" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb1ad5a94d9 code=0x7ffc0000 [ 464.883459][ T28] audit: type=1326 audit(1794598381.937:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9561 comm="syz.1.1210" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ad5a94d9 code=0x7ffc0000 [ 464.944675][ T28] audit: type=1326 audit(1794598381.937:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9561 comm="syz.1.1210" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ad5a94d9 code=0x7ffc0000 [ 464.986359][ T28] audit: type=1326 audit(1794598381.937:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9561 comm="syz.1.1210" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb1ad5a94d9 code=0x7ffc0000 [ 465.290336][ T9575] rxe_eth0 speed is unknown, defaulting to 1000 [ 465.495832][ T9582] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1216'. [ 466.002565][ T9589] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1219'. [ 466.053904][ T9589] ip_tables: iptables: counters copy to user failed while replacing table [ 467.329917][ T9607] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1225'. [ 467.635669][ T9614] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1228'. [ 467.691291][ T9614] ip_tables: iptables: counters copy to user failed while replacing table [ 468.268455][ T9633] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1236'. [ 468.296889][ T9636] tipc: Enabled bearer , priority 0 [ 469.098248][ T9629] tipc: Disabling bearer [ 469.391494][ T9653] netlink: 'syz.0.1241': attribute type 4 has an invalid length. [ 469.403037][ T9655] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1242'. [ 469.464154][ T9655] ip_tables: iptables: counters copy to user failed while replacing table [ 469.890718][ T9667] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1246'. [ 470.217991][ T9670] Set syz1 is full, maxelem 6117 reached [ 470.514432][ T9684] tipc: Enabled bearer , priority 0 [ 471.123198][ T9696] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1255'. [ 471.213284][ T9699] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1257'. [ 471.439615][ T9680] tipc: Disabling bearer [ 471.729179][ T9707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1260'. [ 471.788912][ T9707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1260'. [ 471.826051][ T9707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1260'. [ 471.853085][ T9707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1260'. [ 471.880386][ T9707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1260'. [ 472.614646][ T9720] tipc: Enabling of bearer rejected, failed to enable media [ 473.423902][ T5867] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 473.664372][ T5867] usb 1-1: Using ep0 maxpacket: 32 [ 473.672502][ T5867] usb 1-1: too many configurations: 17, using maximum allowed: 8 [ 473.692354][ T5867] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 473.714424][ T5867] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 473.745154][ T5867] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 473.753366][ T5774] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 473.774740][ T5867] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 473.804331][ T5867] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 473.825160][ T5867] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 473.862988][ T5867] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 473.889118][ T5867] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 473.916368][ T5867] usb 1-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 473.938720][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.943779][ T5774] usb 2-1: Using ep0 maxpacket: 32 [ 473.963459][ T5867] usb 1-1: Product: syz [ 473.973458][ T5867] usb 1-1: Manufacturer: syz [ 473.982987][ T5867] usb 1-1: SerialNumber: syz [ 474.015009][ T5867] usb 1-1: config 0 descriptor?? [ 474.033310][ T5774] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.039492][ T5867] etas_es58x 1-1:0.0: Starting syz syz (Serial Number syz) [ 474.083497][ T5774] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.121905][ T5774] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 474.143227][ T5774] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.184804][ T5774] usb 2-1: config 0 descriptor?? [ 474.279227][ T5867] usb 1-1: USB disconnect, device number 6 [ 474.639620][ T5774] usbhid 2-1:0.0: can't add hid device: -32 [ 474.645735][ T5774] usbhid: probe of 2-1:0.0 failed with error -32 [ 474.713505][ T9748] tipc: Enabling of bearer rejected, failed to enable media [ 474.988511][ T9755] __nla_validate_parse: 1 callbacks suppressed [ 474.988550][ T9755] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1277'. [ 475.513268][ T5774] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 475.739413][ T5774] usb 4-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 475.773260][ T5774] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.802411][ T5774] usb 4-1: Product: syz [ 475.806741][ T5774] usb 4-1: Manufacturer: syz [ 475.811363][ T5774] usb 4-1: SerialNumber: syz [ 475.835776][ T5774] usb 4-1: config 0 descriptor?? [ 475.865934][ T5774] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 476.220032][ T9767] ip_tables: iptables: counters copy to user failed while replacing table [ 477.545858][ T5774] sonixb 4-1:0.0: Error reading register 00: -110 [ 477.587359][ T8] usb 2-1: USB disconnect, device number 13 [ 477.726448][ T9772] tipc: Enabling of bearer rejected, already enabled [ 478.016102][ T9779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.058199][ T9779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.263689][ T8] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 478.433449][ T8] usb 3-1: device descriptor read/64, error -71 [ 478.723274][ T8] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 478.813304][ T5774] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 478.835926][ T9783] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1288'. [ 478.913320][ T8] usb 3-1: device descriptor read/64, error -71 [ 479.015422][ T5774] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.038022][ T5774] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.059099][ T5774] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 479.059161][ T8] usb usb3-port1: attempt power cycle [ 479.090805][ T5774] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 479.115598][ T9099] usb 4-1: USB disconnect, device number 11 [ 479.121747][ T5774] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.170436][ T5774] usb 1-1: config 0 descriptor?? [ 479.503302][ T8] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 479.731160][ T5774] plantronics 0003:047F:FFFF.0006: reserved main item tag 0xd [ 479.826269][ T5774] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 480.018730][ T5774] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 480.163706][ T5774] usb 1-1: USB disconnect, device number 7 [ 480.172690][ T8] usb 3-1: device descriptor read/8, error -71 [ 480.249187][ T9794] fido_id[9794]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 480.402689][ T9798] tipc: Enabled bearer , priority 0 [ 480.446024][ T9800] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1294'. [ 480.457414][ T8] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 480.504037][ T8] usb 3-1: device descriptor read/8, error -71 [ 480.550791][ T9800] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1294'. [ 480.645030][ T8] usb usb3-port1: unable to enumerate USB device [ 480.688731][ T9806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1296'. [ 480.762027][ T9800] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1294'. [ 480.872839][ T9809] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1297'. [ 480.905552][ T9796] tipc: Disabling bearer [ 481.423516][ T8] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 481.445049][ T9828] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1305'. [ 481.480839][ T9830] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1306'. [ 481.566279][ T9828] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1305'. [ 481.629184][ T8] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 482.789814][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.863865][ T8] usb 3-1: Product: syz [ 482.868623][ T8] usb 3-1: Manufacturer: syz [ 482.873330][ T8] usb 3-1: SerialNumber: syz [ 482.880925][ T8] usb 3-1: config 0 descriptor?? [ 482.893626][ T8] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 483.309163][ T9813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.336209][ T9813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.373865][ T8] sonixb 3-1:0.0: Error writing register 01: -71 [ 483.384009][ T8] sonixb: probe of 3-1:0.0 failed with error -71 [ 483.410857][ T8] usb 3-1: USB disconnect, device number 17 [ 483.423424][ T9099] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 483.597700][ T9853] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1315'. [ 483.643556][ T9099] usb 1-1: Using ep0 maxpacket: 32 [ 483.652921][ T9099] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.673416][ T9099] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.700276][ T9099] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 483.719734][ T9099] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.739029][ T9099] usb 1-1: config 0 descriptor?? [ 484.043779][ T9864] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1319'. [ 484.073578][ T5774] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 484.166171][ T9099] usbhid 1-1:0.0: can't add hid device: -32 [ 484.178024][ T9099] usbhid: probe of 1-1:0.0 failed with error -32 [ 484.261844][ T9873] ip_tables: iptables: counters copy to user failed while replacing table [ 484.272537][ T5774] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.301292][ T5774] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.323691][ T5774] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 484.353346][ T5774] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 484.363063][ T5774] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 484.390525][ T5774] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.417487][ T5774] usb 4-1: config 0 descriptor?? [ 484.666318][ T23] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 484.845928][ T5774] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 484.854740][ T5774] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 484.862864][ T5774] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 484.870738][ T5774] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 484.878487][ T5774] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 484.887099][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.898866][ T5774] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 484.907284][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.917808][ T5774] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 484.925318][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 484.938549][ T5774] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 484.946014][ T5774] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 484.953822][ T23] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 484.962861][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.970908][ T5774] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 484.978868][ T5774] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 484.989206][ T23] usb 2-1: config 0 descriptor?? [ 485.007764][ T5774] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 485.124428][ T9861] plantronics 0003:047F:FFFF.0007: usb_submit_urb(out) failed: -90 [ 485.138561][ T5774] usb 4-1: USB disconnect, device number 12 [ 485.411225][ T23] usbhid 2-1:0.0: can't add hid device: -71 [ 485.419789][ T23] usbhid: probe of 2-1:0.0 failed with error -71 [ 485.430491][ T23] usb 2-1: USB disconnect, device number 14 [ 485.793754][ T9895] __nla_validate_parse: 3 callbacks suppressed [ 485.793777][ T9895] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1330'. [ 485.879831][ T9897] ip_tables: iptables: counters copy to user failed while replacing table [ 486.170030][ T23] usb 1-1: USB disconnect, device number 8 [ 486.404891][ T9912] loop3: detected capacity change from 0 to 256 [ 486.416502][ T9912] FAT-fs (loop3): Unrecognized mount option "shortnamxed" or missing value [ 487.030178][ T7291] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 487.359645][ T9922] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1341'. [ 487.370310][ T9923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1340'. [ 487.480335][ T9927] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1343'. [ 487.723351][ T5886] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 487.742491][ T9936] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 487.767281][ T9936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1346'. [ 487.785148][ T9936] x_tables: ip6_tables: cgroup.2 match: invalid size 528 (kernel) != (user) 608 [ 487.936021][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.968799][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.001857][ T5886] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 488.020811][ T5886] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 488.038279][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.049350][ T5886] usb 1-1: config 0 descriptor?? [ 488.492196][ T5886] usbhid 1-1:0.0: can't add hid device: -71 [ 488.579926][ T5886] usbhid: probe of 1-1:0.0 failed with error -71 [ 488.606790][ T5886] usb 1-1: USB disconnect, device number 9 [ 488.684816][ T9945] loop1: detected capacity change from 0 to 256 [ 488.696132][ T9945] FAT-fs (loop1): Unrecognized mount option "shortnamxed" or missing value [ 489.364030][ T7291] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 490.149121][ T9968] input: syz0 as /devices/virtual/input/input17 [ 490.449045][ T9973] rxe_eth0 speed is unknown, defaulting to 1000 [ 491.983093][ T9983] loop2: detected capacity change from 0 to 256 [ 491.996332][ T9983] FAT-fs (loop2): Unrecognized mount option "shortnamxed" or missing value [ 492.059445][ T7291] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 492.284436][ T23] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 492.484977][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.496275][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.508723][ T23] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 492.536075][ T23] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 492.545386][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.564013][ T23] usb 4-1: config 0 descriptor?? [ 492.863274][ T9099] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 492.992118][ T23] usbhid 4-1:0.0: can't add hid device: -71 [ 493.039424][ T23] usbhid: probe of 4-1:0.0 failed with error -71 [ 493.049117][ T23] usb 4-1: USB disconnect, device number 13 [ 493.073900][ T9099] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 493.100937][ T9099] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 493.123539][ T9099] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 493.145280][ T9099] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 493.163466][ T9099] usb 3-1: Product: syz [ 493.173444][ T9099] usb 3-1: Manufacturer: syz [ 493.197363][ T9099] hub 3-1:4.0: USB hub found [ 493.426978][ T9099] hub 3-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 493.551657][ T9099] IPVS: starting estimator thread 0... [ 493.663284][T10014] IPVS: using max 22 ests per chain, 52800 per kthread [ 493.853779][T10022] loop3: detected capacity change from 0 to 256 [ 493.865267][T10022] FAT-fs (loop3): Unrecognized mount option "shortnamxed" or missing value [ 493.944600][ T23] usb 3-1: USB disconnect, device number 18 [ 494.542838][ T7291] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 494.787928][T10032] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1380'. [ 495.273617][ T23] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 495.456876][ T23] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 495.480970][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.513396][ T23] usb 3-1: Product: syz [ 495.521499][ T23] usb 3-1: Manufacturer: syz [ 495.538707][ T23] usb 3-1: SerialNumber: syz [ 495.573712][ T23] usb 3-1: config 0 descriptor?? [ 495.589735][ T23] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 495.996305][ T23] sonixb 3-1:0.0: Error writing register 01: -71 [ 496.016660][ T23] sonixb: probe of 3-1:0.0 failed with error -71 [ 496.076105][ T23] usb 3-1: USB disconnect, device number 19 [ 496.144459][ T5774] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 496.178441][T10060] loop1: detected capacity change from 0 to 33280 [ 496.192987][T10060] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 496.260847][T10060] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 496.431324][ T5774] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 496.464492][ T5774] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.094484][ T5774] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 497.118393][ T5774] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 497.133275][ T5774] usb 4-1: Product: syz [ 497.141772][ T5774] usb 4-1: Manufacturer: syz [ 497.193718][ T5774] hub 4-1:4.0: USB hub found [ 497.394419][ T5774] hub 4-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 497.601250][T10075] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 497.608136][T10075] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 497.630474][T10075] vhci_hcd vhci_hcd.0: Device attached [ 497.702431][T10078] vhci_hcd: connection closed [ 497.706220][ T747] vhci_hcd: stop threads [ 497.723485][ T5774] usb 4-1: USB disconnect, device number 14 [ 497.734444][ T747] vhci_hcd: release socket [ 497.750483][ T747] vhci_hcd: disconnect device [ 498.428668][T10091] input: syz0 as /devices/virtual/input/input18 [ 499.437265][T10116] loop2: detected capacity change from 0 to 256 [ 499.449634][T10116] FAT-fs (loop2): Unrecognized mount option "shortnamxed" or missing value [ 500.021128][T10119] input: syz0 as /devices/virtual/input/input19 [ 500.035808][T10120] fuse: Bad value for 'fd' [ 500.174236][T10125] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1411'. [ 500.374381][T10134] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1415'. [ 500.759807][T10146] ip_tables: iptables: counters copy to user failed while replacing table [ 501.131583][T10158] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1424'. [ 501.513428][ T5886] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 501.547663][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.554376][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.665208][T10171] ip_tables: iptables: counters copy to user failed while replacing table [ 501.729835][ T5886] usb 1-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 501.745686][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.768807][ T5886] usb 1-1: Product: syz [ 501.773019][ T5886] usb 1-1: Manufacturer: syz [ 501.778225][ T5886] usb 1-1: SerialNumber: syz [ 501.785881][ T5886] usb 1-1: config 0 descriptor?? [ 501.795578][ T5886] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 501.897546][T10177] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1433'. [ 501.968761][T10179] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1434'. [ 502.091653][T10185] tipc: Enabled bearer , priority 0 [ 502.206753][ T5886] sonixb 1-1:0.0: Error writing register 01: -71 [ 502.213798][ T5886] sonixb: probe of 1-1:0.0 failed with error -71 [ 502.230424][ T5886] usb 1-1: USB disconnect, device number 10 [ 502.678868][T10193] ip_tables: iptables: counters copy to user failed while replacing table [ 502.700136][T10180] tipc: Disabling bearer [ 502.883268][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 502.883285][ T28] audit: type=1326 audit(1794598421.557:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10199 comm="syz.3.1442" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f128b9a94d9 code=0x7ffc0000 [ 502.976207][ T28] audit: type=1326 audit(1794598421.557:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10199 comm="syz.3.1442" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f128b9a94d9 code=0x7ffc0000 [ 503.004392][ T28] audit: type=1326 audit(1794598421.557:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10199 comm="syz.3.1442" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f128b9a94d9 code=0x7ffc0000 [ 503.050559][ T28] audit: type=1326 audit(1794598421.557:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10199 comm="syz.3.1442" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f128b9a94d9 code=0x7ffc0000 [ 503.089563][ T28] audit: type=1326 audit(1794598421.557:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10199 comm="syz.3.1442" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f128b9a94d9 code=0x7ffc0000 [ 503.125806][ T28] audit: type=1326 audit(1794598421.557:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10199 comm="syz.3.1442" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f128b9a94d9 code=0x7ffc0000 [ 503.154051][ T28] audit: type=1326 audit(1794598421.557:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10199 comm="syz.3.1442" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f128b9a94d9 code=0x7ffc0000 [ 503.178871][ T28] audit: type=1326 audit(1794598421.557:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10199 comm="syz.3.1442" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f128b9a94d9 code=0x7ffc0000 [ 503.433288][T10218] ip_tables: iptables: counters copy to user failed while replacing table [ 503.664748][T10230] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1454'. [ 503.673259][ T5774] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 503.896245][ T5774] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 503.913771][ T5774] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.921834][ T5774] usb 3-1: Product: syz [ 503.934542][ T5774] usb 3-1: Manufacturer: syz [ 503.940587][ T5774] usb 3-1: SerialNumber: syz [ 503.964160][ T5774] usb 3-1: config 0 descriptor?? [ 503.987518][ T5774] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 504.080825][T10239] ip_tables: iptables: counters copy to user failed while replacing table [ 504.208889][ T5774] sonixb 3-1:0.0: Error reading register 00: -71 [ 504.227603][ T5774] usb 3-1: USB disconnect, device number 20 [ 504.241133][T10246] netlink: zone id is out of range [ 505.179350][T10270] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1472'. [ 505.187057][T10271] loop0: detected capacity change from 0 to 33280 [ 505.206859][T10271] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 505.255158][T10272] loop2: detected capacity change from 0 to 256 [ 505.268249][T10272] FAT-fs (loop2): Unrecognized mount option "shortnamxed" or missing value [ 505.350451][T10271] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 507.012129][ T5886] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 507.240773][ T5886] usb 1-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 507.260470][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.271197][ T5886] usb 1-1: Product: syz [ 507.276388][ T5886] usb 1-1: Manufacturer: syz [ 507.281138][ T5886] usb 1-1: SerialNumber: syz [ 507.302509][ T5886] usb 1-1: config 0 descriptor?? [ 507.314453][ T5886] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 507.523831][ T5886] sonixb 1-1:0.0: Error reading register 00: -71 [ 507.539010][T10311] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1484'. [ 507.552534][ T5886] usb 1-1: USB disconnect, device number 11 [ 508.114323][T10315] netlink: 'syz.0.1485': attribute type 25 has an invalid length. [ 508.873320][ T5774] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 509.069156][ T5774] usb 1-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 509.083254][ T5774] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.105763][ T5774] usb 1-1: Product: syz [ 509.113429][ T5774] usb 1-1: Manufacturer: syz [ 509.125832][ T5774] usb 1-1: SerialNumber: syz [ 509.147101][ T5774] usb 1-1: config 0 descriptor?? [ 509.159950][ T5774] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 509.369147][ T5774] sonixb 1-1:0.0: Error reading register 00: -71 [ 509.386865][ T5774] usb 1-1: USB disconnect, device number 12 [ 509.953883][T10355] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1501'. [ 510.151208][ T5774] IPVS: starting estimator thread 0... [ 510.243567][T10366] IPVS: using max 18 ests per chain, 43200 per kthread [ 511.255182][T10390] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1515'. [ 512.577530][T10411] vivid-000: ================= START STATUS ================= [ 512.592793][T10411] vivid-000: Radio HW Seek Mode: Bounded [ 512.623716][T10411] vivid-000: Radio Programmable HW Seek: false [ 512.633612][T10411] vivid-000: RDS Rx I/O Mode: Block I/O [ 512.663410][T10411] vivid-000: Generate RBDS Instead of RDS: false [ 512.669812][T10411] vivid-000: RDS Reception: true [ 512.697065][T10411] vivid-000: RDS Program Type: 0 inactive [ 512.716157][T10411] vivid-000: RDS PS Name: inactive [ 512.736490][T10411] vivid-000: RDS Radio Text: inactive [ 512.750307][T10411] vivid-000: RDS Traffic Announcement: false inactive [ 512.762333][T10411] vivid-000: RDS Traffic Program: false inactive [ 512.777190][T10411] vivid-000: RDS Music: false inactive [ 512.787366][T10411] vivid-000: ================== END STATUS ================== [ 513.513598][ T9099] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 513.713879][ T9099] usb 1-1: Using ep0 maxpacket: 32 [ 513.751875][ T9099] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.790729][ T9099] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.815468][T10453] fuse: Bad value for 'fd' [ 513.822343][ T9099] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 513.852699][ T9099] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.884857][ T9099] usb 1-1: config 0 descriptor?? [ 514.223620][T10457] loop1: detected capacity change from 0 to 33280 [ 514.259858][T10457] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 514.278211][T10457] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 514.458197][ T9099] hid_parser_main: 1 callbacks suppressed [ 514.458294][ T9099] ft260 0003:0403:6030.0008: unknown main item tag 0x0 [ 515.129631][ T9099] ft260 0003:0403:6030.0008: unknown main item tag 0x0 [ 515.205901][ T9099] ft260 0003:0403:6030.0008: failed to retrieve chip version [ 515.241694][ T9099] ft260: probe of 0003:0403:6030.0008 failed with error -32 [ 516.576236][T10489] tipc: Enabled bearer , priority 0 [ 516.720087][T10493] loop2: detected capacity change from 0 to 33280 [ 516.745349][T10493] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 516.781832][T10493] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 517.699736][T10487] tipc: Disabling bearer [ 517.720299][ T9099] usb 1-1: USB disconnect, device number 13 [ 517.970351][T10501] warning: `syz.0.1556' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 518.292533][T10518] ip_tables: iptables: counters copy to user failed while replacing table [ 518.373849][T10520] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1562'. [ 518.787319][T10532] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1566'. [ 518.802684][T10532] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1566'. [ 518.883469][ T5774] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 519.073273][ T5774] usb 2-1: Using ep0 maxpacket: 32 [ 519.083592][ T5774] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 519.104495][ T5774] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.130470][ T5774] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 519.141577][ T5774] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.158170][ T5774] usb 2-1: config 0 descriptor?? [ 519.564391][T10547] loop2: detected capacity change from 0 to 256 [ 519.573883][T10547] FAT-fs (loop2): Unrecognized mount option "shortnamxed" or missing value [ 520.195041][ T5774] ft260 0003:0403:6030.0009: unknown main item tag 0x0 [ 520.201938][ T5774] ft260 0003:0403:6030.0009: unknown main item tag 0x0 [ 520.224066][T10545] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1571'. [ 520.233094][T10545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1571'. [ 520.233386][ T7291] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 520.268560][T10544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.317080][ T5774] ft260 0003:0403:6030.0009: failed to retrieve chip version [ 520.356879][ T5774] ft260: probe of 0003:0403:6030.0009 failed with error -32 [ 520.833445][ T9099] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 521.035029][ T9099] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 20480, setting to 64 [ 521.047663][ T9099] usb 1-1: config 0 interface 0 has no altsetting 0 [ 521.057567][ T9099] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 521.066958][ T9099] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 521.075371][ T9099] usb 1-1: Product: syz [ 521.079660][ T9099] usb 1-1: Manufacturer: syz [ 521.084331][ T9099] usb 1-1: SerialNumber: syz [ 521.091106][ T9099] usb 1-1: config 0 descriptor?? [ 521.102750][ T9099] usb 1-1: selecting invalid altsetting 0 [ 521.303319][ T5774] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 521.324095][T10561] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 521.333069][ T23] usb 1-1: USB disconnect, device number 14 [ 521.495210][ T5774] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 521.504066][ T5774] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 521.514435][ T5774] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 521.523546][ T5774] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.536576][ T5774] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 521.545821][ T5774] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 521.558685][ T5774] usb 4-1: Product: syz [ 521.562857][ T5774] usb 4-1: Manufacturer: syz [ 521.572817][ T5774] cdc_wdm 4-1:1.0: skipping garbage [ 521.578502][ T5774] cdc_wdm 4-1:1.0: skipping garbage [ 521.585812][ T5774] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 521.591849][ T5774] cdc_wdm 4-1:1.0: Unknown control protocol [ 521.781567][ T9099] usb 4-1: USB disconnect, device number 15 [ 521.906128][T10582] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 522.450265][ T9099] usb 2-1: USB disconnect, device number 15 [ 523.453483][ T5774] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 523.643321][ T5774] usb 1-1: Using ep0 maxpacket: 32 [ 523.677964][ T5774] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 523.705474][ T5774] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 523.726411][ T5774] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 523.745070][ T5774] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.758098][ T5774] usb 1-1: config 0 descriptor?? [ 524.117203][T10625] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1597'. [ 524.188384][ T5774] ft260 0003:0403:6030.000A: unknown main item tag 0x0 [ 524.220794][ T5774] ft260 0003:0403:6030.000A: unknown main item tag 0x0 [ 524.383855][ T5774] ft260 0003:0403:6030.000A: failed to retrieve chip version [ 524.391485][ T5774] ft260: probe of 0003:0403:6030.000A failed with error -32 [ 524.579903][T10644] mmap: syz.3.1601 (10644) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 524.715721][T10644] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 525.603392][ T5886] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 525.794942][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 525.884233][ T5886] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 525.899967][ T5886] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 525.909330][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.919894][ T5886] usb 2-1: config 0 descriptor?? [ 525.936059][ T5886] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 526.294736][T10670] loop2: detected capacity change from 0 to 256 [ 526.306453][T10670] FAT-fs (loop2): Unrecognized mount option "shortnamxed" or missing value [ 526.949290][T10673] input: syz0 as /devices/virtual/input/input21 [ 526.958578][T10669] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1610'. [ 526.959637][ T7291] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 526.967752][T10669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1610'. [ 526.986988][T10669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1610'. [ 527.013215][ T5774] usb 1-1: USB disconnect, device number 15 [ 528.043284][ T23] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 528.117264][T10707] input: syz0 as /devices/virtual/input/input22 [ 528.227944][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 528.246154][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.257677][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.267881][ T23] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 528.293407][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.305395][ T23] usb 3-1: config 0 descriptor?? [ 528.358035][ T5905] usb 2-1: USB disconnect, device number 16 [ 528.393673][T10715] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1626'. [ 528.747706][ T23] ft260 0003:0403:6030.000B: unknown main item tag 0x0 [ 528.782580][ T23] ft260 0003:0403:6030.000B: unknown main item tag 0x0 [ 528.949411][ T23] ft260 0003:0403:6030.000B: failed to retrieve chip version [ 528.986062][ T23] ft260: probe of 0003:0403:6030.000B failed with error -32 [ 529.147171][T10739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1633'. [ 529.663309][ T23] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 529.915134][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.933305][ T23] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 529.956124][ T23] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 529.973307][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.045861][ T23] usb 4-1: config 0 descriptor?? [ 530.064513][T10751] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1637'. [ 530.079686][ T23] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 531.150288][ T5905] usb 3-1: USB disconnect, device number 21 [ 531.997804][T10781] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1647'. [ 532.467072][ T9099] usb 4-1: USB disconnect, device number 16 [ 532.693424][ T5886] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 532.923491][ T5886] usb 2-1: Using ep0 maxpacket: 32 [ 532.984734][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.015114][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 533.047530][ T5886] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 533.077298][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.114304][ T5886] usb 2-1: config 0 descriptor?? [ 533.153296][ T8] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 533.334100][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 533.349865][ T8] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 533.400159][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.431567][ T8] usb 3-1: Product: syz [ 533.460622][ T8] usb 3-1: Manufacturer: syz [ 533.475520][ T8] usb 3-1: SerialNumber: syz [ 533.577960][ T5886] ft260 0003:0403:6030.000C: unknown main item tag 0x0 [ 533.606417][ T5886] ft260 0003:0403:6030.000C: unknown main item tag 0x0 [ 533.746498][ T8] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 533.787896][ T5886] ft260 0003:0403:6030.000C: failed to retrieve chip version [ 533.819454][ T5886] ft260: probe of 0003:0403:6030.000C failed with error -32 [ 533.828306][ T8] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 533.877659][ T8] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 533.914012][ T8] usb 3-1: media controller created [ 534.008499][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 534.132742][T10807] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1656'. [ 534.232559][ T8] zl10353_read_register: readreg error (reg=127, ret==-71) [ 534.429285][ T8] dvb_usb_gl861: probe of 3-1:157.0 failed with error -5 [ 534.471592][ T8] usb 3-1: USB disconnect, device number 22 [ 535.263368][ T5886] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 535.424689][ T5886] usb 4-1: device descriptor read/64, error -71 [ 535.714010][ T5886] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 535.933619][ T5886] usb 4-1: device descriptor read/64, error -71 [ 535.997400][T10830] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1665'. [ 536.029488][ T23] usb 2-1: USB disconnect, device number 17 [ 536.053877][ T5886] usb usb4-port1: attempt power cycle [ 536.153766][ T8] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 536.345809][ T8] usb 1-1: not running at top speed; connect to a high speed hub [ 536.366379][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 536.387053][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 536.407599][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.429260][ T8] usb 1-1: Found UVC 1.00 device (046d:0825) [ 536.483935][ T5886] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 536.523903][ T5886] usb 4-1: device descriptor read/8, error -71 [ 536.543491][ T9099] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 536.548168][T10842] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1671'. [ 536.733274][ T9099] usb 3-1: Using ep0 maxpacket: 16 [ 536.744647][ T9099] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 536.753884][ T9099] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.761932][ T9099] usb 3-1: Product: syz [ 536.766811][ T9099] usb 3-1: Manufacturer: syz [ 536.771458][ T9099] usb 3-1: SerialNumber: syz [ 536.793365][ T5886] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 536.824587][ T5886] usb 4-1: device descriptor read/8, error -71 [ 536.950325][ T5886] usb usb4-port1: unable to enumerate USB device [ 536.992960][ T9099] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 537.021666][ T9099] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 537.034488][ T9099] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 537.043046][ T9099] usb 3-1: media controller created [ 537.049686][ T8] uvcvideo 1-1:1.1: Failed to set UVC probe control : -71 (exp. 26). [ 537.063299][ T8] uvcvideo 1-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 537.072364][ T8] uvcvideo 1-1:1.1: Failed to initialize the device (-71). [ 537.100438][ T8] usb 1-1: USB disconnect, device number 16 [ 537.110359][ T9099] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 537.256342][ T9099] zl10353_read_register: readreg error (reg=127, ret==-32) [ 537.462075][T10849] tipc: Enabling of bearer rejected, failed to enable media [ 537.478456][ T9099] dvb_usb_gl861: probe of 3-1:157.0 failed with error -5 [ 537.502291][ T9099] usb 3-1: USB disconnect, device number 23 [ 537.923391][ T23] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 537.948903][T10857] loop1: detected capacity change from 0 to 33280 [ 537.960990][T10857] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 537.971003][T10857] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 538.926051][T10867] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1681'. [ 538.948166][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 538.965107][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.986863][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 538.997086][ T23] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 539.012297][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.032484][ T23] usb 1-1: config 0 descriptor?? [ 539.276383][ T5774] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 539.478525][ T23] ft260 0003:0403:6030.000D: unknown main item tag 0x0 [ 539.494665][ T23] ft260 0003:0403:6030.000D: unknown main item tag 0x0 [ 539.505611][ T5774] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 539.521802][ T5774] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 539.533010][ T5774] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 539.551640][ T5774] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.571521][ T5774] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 539.590109][ T5774] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 539.598983][ T5774] usb 2-1: Product: syz [ 539.613593][ T5774] usb 2-1: Manufacturer: syz [ 539.639568][ T5774] cdc_wdm 2-1:1.0: skipping garbage [ 539.645358][ T5774] cdc_wdm 2-1:1.0: skipping garbage [ 539.652968][ T5774] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 539.662684][ T5774] cdc_wdm 2-1:1.0: Unknown control protocol [ 539.668883][ T23] ft260 0003:0403:6030.000D: failed to retrieve chip version [ 539.685646][ T23] ft260: probe of 0003:0403:6030.000D failed with error -32 [ 539.866024][ T23] usb 2-1: USB disconnect, device number 18 [ 540.083060][T10880] loop2: detected capacity change from 0 to 256 [ 540.095518][T10880] FAT-fs (loop2): Unrecognized mount option "shortnamxed" or missing value [ 540.167008][T10880] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1685'. [ 540.176139][T10880] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1685'. [ 540.185181][T10880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1685'. [ 540.785889][ T5886] usb 1-1: USB disconnect, device number 17 [ 540.957985][T10891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1690'. [ 541.004267][T10891] 8021q: adding VLAN 0 to HW filter on device bond1 [ 541.034075][T10893] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1691'. [ 541.046782][T10893] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1691'. [ 541.173600][ T9099] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 541.364343][ T9099] usb 3-1: Using ep0 maxpacket: 16 [ 541.395488][ T9099] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 541.413351][ T9099] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.425537][T10911] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1699'. [ 541.432309][ T9099] usb 3-1: Product: syz [ 541.439205][ T9099] usb 3-1: Manufacturer: syz [ 541.444655][ T9099] usb 3-1: SerialNumber: syz [ 541.543504][ T5886] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 541.666073][ T9099] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 541.702672][ T9099] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 541.723210][ T5886] usb 1-1: Using ep0 maxpacket: 32 [ 541.742607][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.755437][T10922] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1704'. [ 541.758966][ T9099] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 541.774024][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.782475][T10922] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1704'. [ 541.784006][ T9099] usb 3-1: media controller created [ 541.793589][ T5886] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 541.815033][ T9099] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 541.823687][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.837041][ T5886] usb 1-1: config 0 descriptor?? [ 541.923366][ T9099] zl10353_read_register: readreg error (reg=127, ret==-32) [ 542.148284][ T9099] dvb_usb_gl861: probe of 3-1:157.0 failed with error -5 [ 542.175122][ T9099] usb 3-1: USB disconnect, device number 24 [ 542.254969][ T5886] ft260 0003:0403:6030.000E: unknown main item tag 0x0 [ 542.277247][ T5886] ft260 0003:0403:6030.000E: unknown main item tag 0x0 [ 542.288010][T10929] loop1: detected capacity change from 0 to 33280 [ 542.313012][T10929] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 542.333456][T10929] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 542.643052][ T5886] ft260 0003:0403:6030.000E: failed to retrieve chip version [ 542.653057][ T5886] ft260: probe of 0003:0403:6030.000E failed with error -5 [ 543.488702][T10947] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1713'. [ 543.538949][T10946] kvm: kvm [10944]: vcpu0, guest rIP: 0x79 Unhandled WRMSR(0xc1) = 0x60000000800 [ 543.549973][T10946] kvm: kvm [10944]: vcpu0, guest rIP: 0x79 Unhandled WRMSR(0xc2) = 0x60000000800 [ 543.572748][T10946] kvm: kvm [10944]: vcpu0, guest rIP: 0x79 Unhandled WRMSR(0x11e) = 0x60000000800 [ 543.601796][T10946] kvm: kvm [10944]: vcpu0, guest rIP: 0x79 Unhandled WRMSR(0x186) = 0x60000000800 [ 543.620281][T10946] kvm: kvm [10944]: vcpu0, guest rIP: 0x79 Unhandled WRMSR(0x187) = 0x60000000800 [ 543.903268][ T5886] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 544.063259][ T8] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 544.077795][ T5886] usb 2-1: device descriptor read/64, error -71 [ 544.163939][T10961] loop2: detected capacity change from 0 to 33280 [ 544.180748][T10961] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 544.192170][T10961] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 544.267291][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 544.317437][ T8] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 544.345047][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.353893][ T5886] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 544.385873][ T8] usb 4-1: Product: syz [ 544.403930][ T8] usb 4-1: Manufacturer: syz [ 544.408726][ T8] usb 4-1: SerialNumber: syz [ 544.600289][ T5886] usb 2-1: device descriptor read/64, error -71 [ 544.727190][ T5886] usb usb2-port1: attempt power cycle [ 544.752165][ T8] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 544.881800][ T8] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 544.967947][ T8] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 545.007803][ T8] usb 4-1: media controller created [ 545.038427][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 545.106303][ T5905] usb 1-1: USB disconnect, device number 18 [ 545.162410][T10966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1720'. [ 545.193586][ T5886] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 545.209319][ T8] zl10353_read_register: readreg error (reg=127, ret==-71) [ 545.228052][ T5886] usb 2-1: device descriptor read/8, error -71 [ 545.288857][ T8] dvb_usb_gl861: probe of 4-1:157.0 failed with error -5 [ 545.311762][ T8] usb 4-1: USB disconnect, device number 21 [ 545.513351][ T5886] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 545.552030][T10978] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1724'. [ 545.561819][ T5886] usb 2-1: device descriptor read/8, error -71 [ 545.683610][ T5886] usb usb2-port1: unable to enumerate USB device [ 545.960201][T10992] rxe_eth0 speed is unknown, defaulting to 1000 [ 546.253267][ T23] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 546.440027][ T23] usb 3-1: config 0 has no interfaces? [ 546.452485][ T23] usb 3-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 546.465789][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.485221][ T23] usb 3-1: config 0 descriptor?? [ 546.851220][T10992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.866139][T10992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.016995][ T789] usb 3-1: USB disconnect, device number 25 [ 547.173506][ T8] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 547.362070][T11023] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1742'. [ 547.372033][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 547.382075][ T8] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 547.401769][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.422015][ T8] usb 2-1: Product: syz [ 547.431249][ T8] usb 2-1: Manufacturer: syz [ 547.439497][ T8] usb 2-1: SerialNumber: syz [ 547.608034][ T789] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 547.666428][ T8] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 547.688555][ T8] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 547.729914][ T8] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 547.739776][ T8] usb 2-1: media controller created [ 547.770718][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 547.784247][ T789] usb 1-1: device descriptor read/64, error -71 [ 547.929590][ T8] zl10353_read_register: readreg error (reg=127, ret==-32) [ 548.073707][ T789] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 548.146691][ T8] dvb_usb_gl861: probe of 2-1:157.0 failed with error -5 [ 548.168160][ T8] usb 2-1: USB disconnect, device number 23 [ 548.257849][ T789] usb 1-1: device descriptor read/64, error -71 [ 548.402398][ T789] usb usb1-port1: attempt power cycle [ 548.837187][ T8] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 548.873435][ T789] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 548.926660][ T789] usb 1-1: device descriptor read/8, error -71 [ 549.033275][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 549.040651][ T8] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 549.050257][ T8] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 549.070529][ T8] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 549.092147][ T8] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 549.106517][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 549.132200][ T8] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 549.151385][ T8] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 549.160398][ T8] usb 4-1: Product: syz [ 549.165162][ T8] usb 4-1: Manufacturer: syz [ 549.169816][ T8] usb 4-1: SerialNumber: syz [ 549.182499][ T8] usb 4-1: config 0 descriptor?? [ 549.205028][ T8] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 549.216342][ T8] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 549.223300][ T789] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 549.289855][ T789] usb 1-1: device descriptor read/8, error -71 [ 549.423526][ T789] usb usb1-port1: unable to enumerate USB device [ 550.313418][ T789] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 550.534368][ T789] usb 2-1: Using ep0 maxpacket: 16 [ 550.547465][ T789] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 550.567023][ T789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.575217][ T789] usb 2-1: Product: syz [ 550.579442][ T789] usb 2-1: Manufacturer: syz [ 550.584786][ T789] usb 2-1: SerialNumber: syz [ 550.683258][ T23] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 550.810853][ T789] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 550.856988][ T789] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 550.873663][ T789] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 550.882229][ T789] usb 2-1: media controller created [ 550.889925][ T23] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 550.910236][ T23] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.935189][ T23] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 550.948212][ T789] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 550.957030][ T23] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 550.966360][ T23] usb 3-1: Product: syz [ 550.971446][ T23] usb 3-1: Manufacturer: syz [ 551.014541][ T23] hub 3-1:4.0: USB hub found [ 551.066341][ T789] zl10353_read_register: readreg error (reg=127, ret==-32) [ 551.220007][ T23] hub 3-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 551.280398][ T789] dvb_usb_gl861: probe of 2-1:157.0 failed with error -5 [ 551.330866][ T789] usb 2-1: USB disconnect, device number 24 [ 551.553803][ T23] usb 3-1: USB disconnect, device number 26 [ 553.783257][ T9099] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 553.823271][ T23] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 553.969216][ T9099] usb 2-1: Using ep0 maxpacket: 32 [ 553.976615][ T9099] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.011409][ T9099] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.035595][ T9099] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 554.043313][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 554.063520][ T9099] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.076307][ T23] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 554.082479][ T9099] usb 2-1: config 0 descriptor?? [ 554.093975][ T9099] hub 2-1:0.0: USB hub found [ 554.104096][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.126469][ T23] usb 1-1: config 0 descriptor?? [ 554.314246][ T9099] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 554.350756][ T23] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 554.372044][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 554.398129][ T23] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 554.411995][ T23] usb 1-1: media controller created [ 554.423926][T11051] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 554.465757][ T8] usb 4-1: USB disconnect, device number 22 [ 554.477505][ T8] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 554.500207][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 554.567988][T11137] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 554.598778][ T23] az6027: usb out operation failed. (-71) [ 554.627403][ T23] az6027: usb out operation failed. (-71) [ 554.637586][ T23] stb0899_attach: Driver disabled by Kconfig [ 554.663260][ T23] az6027: no front-end attached [ 554.663260][ T23] [ 554.670795][ T23] az6027: usb out operation failed. (-71) [ 554.710034][ T23] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 554.736498][ T9099] hid-generic 0003:046D:C31C.000F: unknown main item tag 0x0 [ 554.742253][ T23] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input25 [ 554.808294][ T9099] hid-generic 0003:046D:C31C.000F: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 554.820693][ T23] dvb-usb: schedule remote query interval to 400 msecs. [ 554.873280][ T23] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 554.905952][ T23] usb 1-1: USB disconnect, device number 23 [ 555.028404][ T23] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 555.233916][T11156] netlink: 'syz.3.1785': attribute type 15 has an invalid length. [ 555.403963][T11135] usb 2-1: reset high-speed USB device number 25 using dummy_hcd [ 556.383396][ T5886] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 556.505047][ T789] usb 2-1: USB disconnect, device number 25 [ 556.553414][ T5886] usb 4-1: device descriptor read/64, error -71 [ 556.833291][ T5886] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 557.003583][ T5886] usb 4-1: device descriptor read/64, error -71 [ 557.123412][ T5886] usb usb4-port1: attempt power cycle [ 557.360692][T11213] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1803'. [ 557.543919][ T5886] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 557.584026][ T5886] usb 4-1: device descriptor read/8, error -71 [ 557.853428][ T5886] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 557.906422][ T5886] usb 4-1: device descriptor read/8, error -71 [ 558.033604][ T5886] usb usb4-port1: unable to enumerate USB device [ 558.144377][ T8] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 558.327134][ T8] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 20480, setting to 64 [ 558.348782][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 558.364022][ T8] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 558.375056][ T8] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 558.383889][ T8] usb 1-1: Product: syz [ 558.388165][ T8] usb 1-1: Manufacturer: syz [ 558.392771][ T8] usb 1-1: SerialNumber: syz [ 558.400456][ T8] usb 1-1: config 0 descriptor?? [ 558.413588][ T789] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 558.417231][ T8] usb 1-1: selecting invalid altsetting 0 [ 558.614008][ T789] usb 3-1: no configurations [ 558.618689][ T789] usb 3-1: can't read configurations, error -22 [ 558.803338][ T789] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 559.004639][ T789] usb 3-1: no configurations [ 559.009328][ T789] usb 3-1: can't read configurations, error -22 [ 559.015861][ T789] usb usb3-port1: attempt power cycle [ 559.443599][ T789] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 559.452616][T11236] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1811'. [ 559.475587][ T789] usb 3-1: no configurations [ 559.484624][ T789] usb 3-1: can't read configurations, error -22 [ 559.653432][ T789] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 559.686228][ T789] usb 3-1: no configurations [ 559.699735][ T789] usb 3-1: can't read configurations, error -22 [ 559.721873][ T789] usb usb3-port1: unable to enumerate USB device [ 560.503356][ T5774] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 560.708677][ T5774] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 560.723828][ T5774] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 560.732945][ T5774] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 560.748091][ T5774] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.774487][ T5774] usb 2-1: config 0 descriptor?? [ 560.871622][T11226] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 560.885782][T11254] tipc: Enabled bearer , priority 0 [ 560.925832][ T8] usb 1-1: USB disconnect, device number 24 [ 561.231095][ T5774] usb 2-1: string descriptor 0 read error: -71 [ 561.259224][ T5774] usb 2-1: USB disconnect, device number 26 [ 561.636387][T11267] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1822'. [ 561.704537][T11252] tipc: Disabling bearer [ 562.057706][T11281] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1826'. [ 562.706552][ T8] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 562.738813][ T8] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 562.812775][T11300] tipc: Started in network mode [ 562.833763][ T9099] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 562.873101][T11300] tipc: Node identity c2dff01680e8, cluster identity 4711 [ 562.883059][T11300] tipc: Enabled bearer , priority 0 [ 562.997422][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.004662][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.037398][ T9099] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 563.053703][ T9099] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 563.083630][ T9099] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 563.104282][ T9099] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.128745][ T9099] usb 4-1: config 0 descriptor?? [ 563.522160][T11294] tipc: Disabling bearer [ 563.582130][ T9099] usb 4-1: string descriptor 0 read error: -71 [ 563.605076][ T9099] usb 4-1: USB disconnect, device number 27 [ 564.558145][ T23] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 564.569321][ T23] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 564.881953][T11344] ip_tables: iptables: counters copy to user failed while replacing table [ 565.423292][ T8] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 565.626898][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 565.637477][ T8] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 565.657240][ T8] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 565.683580][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.707478][ T8] usb 4-1: config 0 descriptor?? [ 566.090478][T11371] netlink: 'syz.1.1861': attribute type 1 has an invalid length. [ 566.122837][T11371] 8021q: adding VLAN 0 to HW filter on device bond5 [ 566.147007][ T8] usb 4-1: string descriptor 0 read error: -71 [ 566.170976][ T8] usb 4-1: USB disconnect, device number 28 [ 566.230756][T11371] bond5: (slave dummy0): making interface the new active one [ 566.241562][T11371] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 566.247985][ T23] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 566.267897][ T23] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 566.605519][T11374] bond5 (unregistering): (slave dummy0): Releasing active interface [ 566.630638][T11374] bond5 (unregistering): Released all slaves [ 567.282938][T11395] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1868'. [ 567.848886][T11412] loop0: detected capacity change from 0 to 33280 [ 567.873369][ T5774] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 567.893798][ T8] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 567.932100][T11412] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 567.965240][T11412] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 568.088004][ T5774] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 568.122143][ T5774] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 568.183938][ T5774] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 568.216895][ T5774] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.236534][ T8] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 568.247460][ T5774] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 568.868000][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 568.881188][ T8] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 568.890872][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.912201][ T8] usb 4-1: config 0 descriptor?? [ 568.936680][ T8] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 568.998132][ T8] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 569.032462][ T8] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 569.125307][T11423] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5787] was attempted by "\x0aÀÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ   ú ÿÿÿÿ ©ýÿÿ    @ ( ( \x0c    \x07 \x09  syz1   @m\x22 \x09-  €2\x09  \x09! \x22# $  \x22#  ÿ\x09 ¡…\x09 & [ 569.728743][T11432] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1880'. [ 570.587470][ T8] usb 3-1: USB disconnect, device number 31 [ 570.909768][ T5886] usb 4-1: USB disconnect, device number 29 [ 571.073417][ T8] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 571.116071][ T9099] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 571.144990][ T9099] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 571.263302][ T8] usb 1-1: device descriptor read/64, error -71 [ 571.553328][ T8] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 571.723528][ T8] usb 1-1: device descriptor read/64, error -71 [ 571.853600][ T8] usb usb1-port1: attempt power cycle [ 572.280252][ T8] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 572.331705][T11476] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1894'. [ 572.351652][ T8] usb 1-1: device descriptor read/8, error -71 [ 572.634468][ T8] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 572.703566][ T8] usb 1-1: device descriptor read/8, error -71 [ 572.823663][ T8] usb usb1-port1: unable to enumerate USB device [ 572.875763][ T5886] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 573.218368][T11489] loop3: detected capacity change from 0 to 256 [ 573.235421][T11489] FAT-fs (loop3): Unrecognized mount option "shortnamxed" or missing value [ 573.323433][T11489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1898'. [ 573.332443][T11489] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1898'. [ 573.835265][ T5886] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 573.863388][ T5886] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 573.913466][ T5886] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 573.922578][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.983321][ T5886] usb 3-1: config 0 descriptor?? [ 574.015820][ T5886] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 574.604363][T11507] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1904'. [ 575.153676][T11490] Bluetooth: hci3: command 0x0406 tx timeout [ 575.995895][ T5788] usb 3-1: USB disconnect, device number 32 [ 576.059101][T11528] loop3: detected capacity change from 0 to 256 [ 576.066328][T11528] FAT-fs (loop3): Unrecognized mount option "shortnamxed" or missing value [ 576.214443][ T7291] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 576.226751][T11528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1908'. [ 576.236717][T11528] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1908'. [ 577.133349][ T5788] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 577.183380][ T789] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 577.303285][ T5788] usb 3-1: device descriptor read/64, error -71 [ 577.403388][ T789] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 577.433317][ T789] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 577.478414][ T789] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 577.492608][ T789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.523216][ T789] usb 2-1: Product: syz [ 577.527426][ T789] usb 2-1: Manufacturer: syz [ 577.532041][ T789] usb 2-1: SerialNumber: syz [ 577.557376][ T789] usb 2-1: config 0 descriptor?? [ 577.581345][ T5788] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 577.753498][ T5788] usb 3-1: device descriptor read/64, error -71 [ 577.889744][ T5788] usb usb3-port1: attempt power cycle [ 578.313908][ T5788] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 578.363946][ T5788] usb 3-1: device descriptor read/8, error -71 [ 578.401041][T11553] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1916'. [ 578.643323][ T5788] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 578.679343][ T5788] usb 3-1: device descriptor read/8, error -71 [ 578.813721][ T5788] usb usb3-port1: unable to enumerate USB device [ 578.904178][ T5886] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 579.108677][ T5886] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 579.126353][ T5886] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 579.163571][ T5886] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 579.193490][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.223872][ T5886] usb 1-1: config 0 descriptor?? [ 579.243764][ T5886] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 579.851819][ T23] usb 2-1: USB disconnect, device number 27 [ 580.329920][T11581] loop2: detected capacity change from 0 to 256 [ 580.342653][T11581] FAT-fs (loop2): Unrecognized mount option "shortnamxed" or missing value [ 580.486963][T11581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1924'. [ 580.496091][T11581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1924'. [ 581.133292][ T5788] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 581.303435][ T5788] usb 2-1: device descriptor read/64, error -71 [ 581.594264][ T5788] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 581.636579][ T5886] usb 1-1: USB disconnect, device number 29 [ 581.744106][ T8] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 581.763585][ T5788] usb 2-1: device descriptor read/64, error -71 [ 581.858870][T11601] netlink: 'syz.0.1934': attribute type 1 has an invalid length. [ 581.884738][T11601] 8021q: adding VLAN 0 to HW filter on device bond3 [ 581.901012][ T5788] usb usb2-port1: attempt power cycle [ 581.925811][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 581.942033][ T8] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 581.954780][ T8] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 581.973776][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.981832][ T8] usb 3-1: Product: syz [ 581.986520][ T8] usb 3-1: Manufacturer: syz [ 581.991160][ T8] usb 3-1: SerialNumber: syz [ 582.000521][ T8] usb 3-1: config 0 descriptor?? [ 582.096102][T11601] bond3 (unregistering): Released all slaves [ 582.313264][ T5788] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 582.371802][ T5788] usb 2-1: device descriptor read/8, error -71 [ 582.653262][ T5788] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 582.663780][ T5774] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 582.679677][T11628] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1943'. [ 582.690034][ T5788] usb 2-1: device descriptor read/8, error -71 [ 582.816228][ T5788] usb usb2-port1: unable to enumerate USB device [ 582.872094][ T5774] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 64 [ 582.882009][ T5774] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 64 [ 582.894431][ T5774] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 582.910764][ T5774] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 582.918014][T11631] netlink: 'syz.3.1944': attribute type 24 has an invalid length. [ 582.927469][ T5774] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 582.928298][T11631] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1944'. [ 582.946965][ T5774] usb 1-1: Product: syz [ 582.951162][ T5774] usb 1-1: Manufacturer: syz [ 583.011133][T11633] netlink: 'syz.3.1945': attribute type 1 has an invalid length. [ 583.038981][T11633] 8021q: adding VLAN 0 to HW filter on device bond2 [ 583.182744][T11614] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 583.191221][T11614] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 583.207986][ T5774] dvb_ttusb_budget: ttusb_init_controller: error [ 583.215254][ T5774] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 583.240849][T11633] bond2 (unregistering): Released all slaves [ 583.288683][ T5774] DVB: Unable to find symbol cx22700_attach() [ 583.350541][ T5774] DVB: Unable to find symbol tda10046_attach() [ 583.360232][ T5774] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 583.450626][ T5774] usb 1-1: USB disconnect, device number 30 [ 584.032394][T11659] netlink: 'syz.1.1953': attribute type 24 has an invalid length. [ 584.050773][T11659] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1953'. [ 584.077298][T11661] netlink: 'syz.3.1954': attribute type 1 has an invalid length. [ 584.115417][T11661] 8021q: adding VLAN 0 to HW filter on device bond2 [ 584.415763][T11661] bond2 (unregistering): Released all slaves [ 584.506402][ T5788] usb 3-1: USB disconnect, device number 37 [ 584.780815][T11692] netlink: 'syz.1.1964': attribute type 24 has an invalid length. [ 584.814521][T11692] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1964'. [ 584.908105][T11697] random: crng reseeded on system resumption [ 585.903920][T11719] netlink: 'syz.3.1971': attribute type 1 has an invalid length. [ 585.981276][T11719] 8021q: adding VLAN 0 to HW filter on device bond2 [ 586.113345][ T23] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 586.155465][T11734] netlink: 'syz.0.1974': attribute type 24 has an invalid length. [ 586.166001][T11734] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1974'. [ 586.322730][T11719] bond2 (unregistering): Released all slaves [ 586.334823][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 586.353773][ T23] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 586.365447][ T23] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 586.383212][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.391245][ T23] usb 3-1: Product: syz [ 586.403314][ T23] usb 3-1: Manufacturer: syz [ 586.407963][ T23] usb 3-1: SerialNumber: syz [ 586.430585][ T23] usb 3-1: config 0 descriptor?? [ 586.684096][T11757] netlink: 'syz.3.1983': attribute type 24 has an invalid length. [ 586.691965][T11757] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1983'. [ 587.534393][ T5774] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 587.713658][ T5774] usb 4-1: device descriptor read/64, error -71 [ 587.720996][T11789] netlink: 'syz.0.1992': attribute type 24 has an invalid length. [ 587.729405][T11789] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1992'. [ 587.863241][ T23] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 587.994438][ T5774] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 588.043374][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 588.051797][ T23] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 588.060127][ T23] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 588.070516][ T23] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 588.080626][ T23] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 588.090856][ T23] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 588.106210][ T23] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 588.115959][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.183285][ T5774] usb 4-1: device descriptor read/64, error -71 [ 588.317788][ T5774] usb usb4-port1: attempt power cycle [ 588.646955][T11814] netlink: 'syz.0.2000': attribute type 1 has an invalid length. [ 588.678788][T11814] 8021q: adding VLAN 0 to HW filter on device bond3 [ 588.733942][T11814] bond3: (slave dummy0): making interface the new active one [ 588.736812][ T5774] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 588.742425][T11814] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 588.785539][ T5774] usb 4-1: device descriptor read/8, error -71 [ 588.792049][T11814] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2000'. [ 588.801497][T11814] bond3: entered promiscuous mode [ 588.806918][T11814] dummy0: entered promiscuous mode [ 588.812304][T11814] bond3: entered allmulticast mode [ 588.817662][T11814] dummy0: entered allmulticast mode [ 588.827542][ T789] usb 3-1: USB disconnect, device number 38 [ 588.881099][T11817] netlink: 'syz.2.2001': attribute type 24 has an invalid length. [ 588.889199][T11817] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2001'. [ 588.910613][T11818] usbtmc 2-1:16.0: simple usb_control_msg failed -32 [ 588.972135][T11787] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 589.008505][ T5886] usb 2-1: USB disconnect, device number 32 [ 589.073487][ T5774] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 589.130514][ T5774] usb 4-1: device descriptor read/8, error -71 [ 589.253593][ T5774] usb usb4-port1: unable to enumerate USB device [ 589.627119][T11847] netlink: 'syz.1.2011': attribute type 24 has an invalid length. [ 589.635375][T11847] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2011'. [ 589.713374][ T5886] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 589.843298][ T23] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 589.905510][ T5886] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 20480, setting to 64 [ 589.920957][ T5886] usb 1-1: config 0 interface 0 has no altsetting 0 [ 589.931931][ T5886] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 589.953260][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 589.961954][ T5886] usb 1-1: Product: syz [ 589.980340][ T5886] usb 1-1: Manufacturer: syz [ 589.993209][ T5886] usb 1-1: SerialNumber: syz [ 590.001066][ T5886] usb 1-1: config 0 descriptor?? [ 590.025793][ T5886] usb 1-1: selecting invalid altsetting 0 [ 590.039487][ T23] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 590.064927][ T23] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 590.090219][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.108693][ T23] usb 3-1: Product: syz [ 590.122465][ T23] usb 3-1: Manufacturer: syz [ 590.136702][ T23] usb 3-1: SerialNumber: syz [ 590.143869][ T23] usb 3-1: config 0 descriptor?? [ 590.386438][T11872] netlink: 'syz.1.2020': attribute type 24 has an invalid length. [ 590.401508][T11872] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2020'. [ 590.846678][T11894] ip_tables: iptables: counters copy to user failed while replacing table [ 591.558922][T11906] netlink: 'syz.1.2032': attribute type 24 has an invalid length. [ 591.568913][T11906] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2032'. [ 591.933460][ T789] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 591.987415][T11918] ip_tables: iptables: counters copy to user failed while replacing table [ 592.123717][ T789] usb 2-1: Using ep0 maxpacket: 32 [ 592.136552][ T789] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 592.153062][ T789] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 592.163367][ T789] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 592.172431][ T789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.209954][ T789] usb 2-1: config 0 descriptor?? [ 592.234842][ T789] hub 2-1:0.0: USB hub found [ 592.437041][ T789] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 592.462529][ T5886] usb 1-1: USB disconnect, device number 31 [ 592.601002][T11932] netlink: 'syz.0.2041': attribute type 24 has an invalid length. [ 592.610452][T11932] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2041'. [ 592.673422][ T5788] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 592.750451][ T5774] usb 3-1: USB disconnect, device number 39 [ 592.848592][ T789] hid-generic 0003:046D:C31C.0015: unknown main item tag 0x0 [ 592.872649][ T5788] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 20480, setting to 64 [ 592.873824][ T789] hid-generic 0003:046D:C31C.0015: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 592.903714][ T5788] usb 4-1: config 0 interface 0 has no altsetting 0 [ 592.934913][ T5788] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 592.964378][ T5788] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 592.989095][ T5788] usb 4-1: Product: syz [ 592.998344][ T5788] usb 4-1: Manufacturer: syz [ 593.002986][ T5788] usb 4-1: SerialNumber: syz [ 593.018493][T11944] fuse: Unknown parameter 'use00000000000000000000' [ 593.031961][ T5788] usb 4-1: config 0 descriptor?? [ 593.053879][ T5788] usb 4-1: selecting invalid altsetting 0 [ 593.506964][T11908] usb 2-1: reset high-speed USB device number 33 using dummy_hcd [ 593.822702][T11955] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5787] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[11955] [ 593.836216][ T5886] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 594.040416][ T5886] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 20480, setting to 64 [ 594.059231][ T5886] usb 1-1: config 0 interface 0 has no altsetting 0 [ 594.068699][ T5886] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 594.078118][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 594.087293][ T5886] usb 1-1: Product: syz [ 594.091483][ T5886] usb 1-1: Manufacturer: syz [ 594.096264][ T5886] usb 1-1: SerialNumber: syz [ 594.103468][ T5886] usb 1-1: config 0 descriptor?? [ 594.115174][ T5886] usb 1-1: selecting invalid altsetting 0 [ 594.153320][ T5867] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 594.354710][ T5867] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 594.369006][ T5867] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 594.378268][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.386627][ T5867] usb 3-1: Product: syz [ 594.390798][ T5867] usb 3-1: Manufacturer: syz [ 594.400205][ T5867] usb 3-1: SerialNumber: syz [ 594.406951][ T5867] usb 3-1: config 0 descriptor?? [ 594.553650][ T5774] usb 2-1: USB disconnect, device number 33 [ 595.111210][T11962] netlink: 'syz.1.2052': attribute type 24 has an invalid length. [ 595.260888][T11967] fuse: Unknown parameter 'use00000000000000000000' [ 595.427504][ T789] usb 4-1: USB disconnect, device number 34 [ 595.490345][ T28] audit: type=1400 audit(1794598514.167:93): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A2B25253A13 pid=11979 comm="syz.3.2056" [ 596.562702][ T5867] usb 1-1: USB disconnect, device number 32 [ 596.703267][ T5886] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 596.780977][T11999] fuse: Unknown parameter 'user_i00000000000000000000' [ 596.883346][ T5886] usb 2-1: Using ep0 maxpacket: 32 [ 596.890587][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 596.913591][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 596.924578][ T5886] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 596.931343][ T5774] usb 3-1: USB disconnect, device number 40 [ 596.933784][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.936040][ T5886] usb 2-1: config 0 descriptor?? [ 596.971688][ T5886] hub 2-1:0.0: USB hub found [ 597.113445][ T5867] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 597.169058][ T5886] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 597.300130][ T5867] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 20480, setting to 64 [ 597.311422][ T5867] usb 4-1: config 0 interface 0 has no altsetting 0 [ 597.321287][ T5867] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 597.331348][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 597.340543][ T5867] usb 4-1: Product: syz [ 597.345665][ T5867] usb 4-1: Manufacturer: syz [ 597.350343][ T5867] usb 4-1: SerialNumber: syz [ 597.357904][ T5867] usb 4-1: config 0 descriptor?? [ 597.366723][ T5867] usb 4-1: selecting invalid altsetting 0 [ 597.493492][ T5788] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 597.595293][ T5886] hid-generic 0003:046D:C31C.0016: unknown main item tag 0x0 [ 597.619349][ T5886] hid-generic 0003:046D:C31C.0016: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 597.705922][ T5788] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 597.717940][ T5788] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 597.739490][ T5788] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 597.748733][ T5788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.763341][ T5788] usb 3-1: Product: syz [ 597.767548][ T5788] usb 3-1: Manufacturer: syz [ 597.772278][ T5788] usb 3-1: SerialNumber: syz [ 597.789048][ T5788] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 597.811885][ T5788] ums-sddr09 3-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 597.811885][ T5788] Please send a copy of this message to and [ 598.585864][T11991] usb 2-1: reset high-speed USB device number 34 using dummy_hcd [ 598.758665][ T5788] ums-sddr09: probe of 3-1:1.0 failed with error -5 [ 598.792341][ T5788] usb 3-1: USB disconnect, device number 41 [ 599.473250][ T5886] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 599.635311][ T5867] usb 2-1: USB disconnect, device number 34 [ 599.675771][ T5886] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 599.695704][ T5886] usb 1-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 599.705404][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.713767][ T5886] usb 1-1: Product: syz [ 599.727783][ T5886] usb 1-1: Manufacturer: syz [ 599.732408][ T5886] usb 1-1: SerialNumber: syz [ 599.739006][ T5886] usb 1-1: config 0 descriptor?? [ 599.859751][ T5774] usb 4-1: USB disconnect, device number 35 [ 600.077852][T12040] tipc: Enabled bearer , priority 0 [ 600.529205][T12036] tipc: Disabling bearer [ 600.555367][T12052] netlink: 'syz.1.2081': attribute type 1 has an invalid length. [ 600.589895][T12052] 8021q: adding VLAN 0 to HW filter on device bond5 [ 600.666601][T12052] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 600.714887][T12052] bond5: (slave batadv3): making interface the new active one [ 600.734707][T12052] bond5: (slave batadv3): Enslaving as an active interface with an up link [ 601.263547][ T5774] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 601.398907][T12088] tipc: Enabling of bearer rejected, failed to enable media [ 601.473575][ T5774] usb 4-1: Using ep0 maxpacket: 32 [ 601.495136][ T5774] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.510133][ T5774] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.521627][ T5774] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 601.551370][ T5774] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.571832][ T5774] usb 4-1: config 0 descriptor?? [ 601.581315][ T5774] hub 4-1:0.0: USB hub found [ 601.782604][ T5774] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 601.936703][ T4547] ------------[ cut here ]------------ [ 601.942747][ T4547] WARNING: CPU: 0 PID: 4547 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x1131/0x2950 [ 601.954191][ T4547] Modules linked in: [ 601.958140][ T4547] CPU: 0 PID: 4547 Comm: kworker/u4:14 Not tainted syzkaller #0 [ 601.965995][ T4547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 601.976409][ T4547] Workqueue: phy6 ieee80211_csa_finalize_work [ 601.982599][ T4547] RIP: 0010:ieee80211_vif_use_reserved_switch+0x1131/0x2950 [ 601.990234][ T4547] Code: 48 89 df e8 61 02 c7 f7 e9 e7 fc ff ff e8 c7 f9 6d f7 eb 24 e8 c0 f9 6d f7 c7 04 24 f4 ff ff ff e9 d9 f5 ff ff e8 af f9 6d f7 <0f> 0b 0f 0b e9 c4 f5 ff ff e8 a1 f9 6d f7 48 8b 7c 24 08 4c 8b 74 [ 602.010351][ T4547] RSP: 0018:ffffc9000f2ff9b8 EFLAGS: 00010293 [ 602.016519][ T4547] RAX: ffffffff8a19e0f5 RBX: 0000000000000001 RCX: ffff888031df8000 [ 602.025048][ T4547] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 602.033046][ T4547] RBP: dffffc0000000000 R08: ffff88805c95560f R09: 1ffff1100b92aac1 [ 602.042178][ C0] ------------[ cut here ]------------ [ 602.042269][ C0] WARNING: CPU: 0 PID: 4547 at net/mac80211/tx.c:5135 __ieee80211_beacon_get+0x1141/0x1520 [ 602.042306][ C0] Modules linked in: [ 602.042321][ C0] CPU: 0 PID: 4547 Comm: kworker/u4:14 Not tainted syzkaller #0 [ 602.042343][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 602.042358][ C0] Workqueue: phy6 ieee80211_csa_finalize_work [ 602.042391][ C0] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 602.042415][ C0] Code: f7 4c 89 ef e8 90 08 b1 f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 5b aa 72 f7 0f 0b e9 61 f8 ff ff e8 4f aa 72 f7 <0f> 0b e9 85 fb ff ff e8 43 aa 72 f7 48 c7 c7 a0 f3 66 8f 4c 89 e6 [ 602.042433][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 602.042454][ C0] RAX: ffffffff8a153451 RBX: dffffc0000000000 RCX: ffff888031df8000 [ 602.042471][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 602.042485][ C0] RBP: 0000000000000000 R08: ffff888031df8000 R09: 0000000000000003 [ 602.042501][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805c956420 [ 602.042516][ C0] R13: ffff88801cfdf424 R14: ffff88805c956910 R15: ffff88801cfdf400 [ 602.042533][ C0] FS: 0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 602.042552][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 602.042568][ C0] CR2: 0000200000192000 CR3: 00000000584f8000 CR4: 00000000003506f0 [ 602.042597][ T50] ------------[ cut here ]------------ [ 602.042587][ C0] Call Trace: [ 602.042662][ C0] [ 602.042676][ T50] WARNING: CPU: 1 PID: 50 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x1131/0x2950 [ 602.042744][ T50] Modules linked in: [ 602.042679][ C0] ? __ieee80211_beacon_get+0x36/0x1520 [ 602.042751][ T50] [ 602.042759][ T50] CPU: 1 PID: 50 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 602.042779][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 602.042775][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 602.042793][ T50] Workqueue: phy8 ieee80211_csa_finalize_work [ 602.042804][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 602.042816][ T50] RIP: 0010:ieee80211_vif_use_reserved_switch+0x1131/0x2950 [ 602.042844][ T50] Code: 48 89 df e8 61 02 c7 f7 e9 e7 fc ff ff e8 c7 f9 6d f7 eb 24 e8 c0 f9 6d f7 c7 04 24 f4 ff ff ff e9 d9 f5 ff ff e8 af f9 6d f7 <0f> 0b 0f 0b e9 c4 f5 ff ff e8 a1 f9 6d f7 48 8b 7c 24 08 4c 8b 74 [ 602.042839][ C0] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 602.042900][ T50] RSP: 0018:ffffc90000baf9b8 EFLAGS: 00010293 [ 602.042910][ C0] __iterate_interfaces+0x225/0x4c0 [ 602.042916][ T50] [ 602.042927][ T50] RAX: ffffffff8a19e0f5 RBX: 0000000000000001 RCX: ffff88801ea5bc00 [ 602.042937][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 602.042947][ T50] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 602.042961][ T50] RBP: dffffc0000000000 R08: ffff88805caed60f R09: 1ffff1100b95dac1 [ 602.042963][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 602.042980][ T50] R10: dffffc0000000000 R11: ffffed100b95dac2 R12: 0000000000000001 [ 602.042991][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 602.042999][ T50] R13: ffff8880772f2cd0 R14: ffff8880772f2d48 R15: ffff88807ab30630 [ 602.043017][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 602.043046][ T50] FS: 0000000000000000(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 602.043047][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 602.043065][ T50] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 602.043070][ C0] ? hw_scan_work+0xf10/0xf10 [ 602.043085][ T50] CR2: 00007fb1ad592640 CR3: 000000000df32000 CR4: 00000000003506e0 [ 602.043092][ C0] __hrtimer_run_queues+0x525/0xc10 [ 602.043199][ C0] ? hrtimer_interrupt+0x980/0x980 [ 602.043219][ C0] ? read_tsc+0x9/0x20 [ 602.043297][ C0] hrtimer_run_softirq+0x177/0x290 [ 602.043326][ C0] handle_softirqs+0x27d/0x820 [ 602.043354][ C0] ? read_tsc+0x9/0x20 [ 602.043383][ C0] ? ktime_get+0x24b/0x280 [ 602.043409][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 602.043434][ C0] ? do_softirq+0x1a0/0x1a0 [ 602.043458][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 602.043488][ C0] __irq_exit_rcu+0xd3/0x190 [ 602.043507][ C0] ? irq_exit_rcu+0x20/0x20 [ 602.043532][ C0] irq_exit_rcu+0x9/0x20 [ 602.043564][ T50] Call Trace: [ 602.043550][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 602.043574][ T50] [ 602.043634][ C0] [ 602.043642][ C0] [ 602.043644][ T50] ieee80211_link_use_reserved_context+0x37b/0x5c0 [ 602.043679][ T50] ieee80211_csa_finalize+0x571/0xeb0 [ 602.043652][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 602.043724][ C0] RIP: 0010:console_flush_all+0x883/0xcf0 [ 602.043700][ T50] ? mutex_lock_nested+0x20/0x20 [ 602.043754][ C0] Code: ed 01 00 00 e8 be 90 1b 00 4d 85 ff 48 8b 5c 24 38 75 07 e8 af 90 1b 00 eb 06 e8 a8 90 1b 00 fb 49 bf 00 00 00 00 00 fc ff df <48> 8b 44 24 58 42 0f b6 04 38 84 c0 0f 85 2f 02 00 00 80 3b 01 0f [ 602.043759][ T50] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 602.043773][ C0] RSP: 0018:ffffc9000f2ff360 EFLAGS: 00000293 [ 602.043784][ T50] ? ieee80211_csa_finalize_work+0x140/0x140 [ 602.043796][ C0] RAX: ffffffff816c4df8 RBX: ffffc9000f2ff4df RCX: ffff888031df8000 [ 602.043806][ T50] ? read_lock_is_recursive+0x20/0x20 [ 602.043814][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 602.043828][ C0] RBP: ffffc9000f2ff4b0 R08: ffffffff92223507 R09: 1ffffffff24446a0 [ 602.043839][ T50] ieee80211_csa_finalize_work+0xf6/0x140 [ 602.043845][ C0] R10: dffffc0000000000 R11: fffffbfff24446a1 R12: ffffffff8e8c2440 [ 602.043862][ C0] R13: 1ffffffff1bf975c R14: ffffffff8e8c2498 R15: dffffc0000000000 [ 602.043859][ T50] ? process_scheduled_works+0x975/0x1600 [ 602.043886][ C0] ? console_flush_all+0x878/0xcf0 [ 602.043895][ T50] process_scheduled_works+0xa60/0x1600 [ 602.043926][ C0] ? console_flush_all+0x10b/0xcf0 [ 602.043951][ T50] ? worker_attach_to_pool+0x370/0x370 [ 602.043963][ C0] ? is_console_locked+0x20/0x20 [ 602.043984][ T50] ? assign_work+0x3cc/0x5d0 [ 602.043991][ C0] ? lock_chain_count+0x20/0x20 [ 602.044015][ T50] worker_thread+0xa5e/0xfe0 [ 602.044020][ C0] ? __down_trylock_console_sem+0xf6/0x1f0 [ 602.044053][ C0] console_unlock+0xad/0x350 [ 602.044070][ T50] kthread+0x2fa/0x390 [ 602.044082][ C0] ? other_cpu_in_panic+0xf0/0xf0 [ 602.044090][ T50] ? pr_cont_work+0x550/0x550 [ 602.044107][ C0] ? vprintk_emit+0x53d/0x610 [ 602.044116][ T50] ? kthread_blkcg+0xd0/0xd0 [ 602.044135][ C0] ? printk_sprint+0x460/0x460 [ 602.044137][ T50] ret_from_fork+0x48/0x80 [ 602.044160][ T50] ? kthread_blkcg+0xd0/0xd0 [ 602.044163][ C0] ? vprintk_emit+0x53d/0x610 [ 602.044192][ C0] vprintk_emit+0x497/0x610 [ 602.044182][ T50] ret_from_fork_asm+0x11/0x20 [ 602.044221][ C0] ? printk_sprint+0x460/0x460 [ 602.044236][ T50] [ 602.044247][ T50] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 602.044256][ T50] CPU: 1 PID: 50 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 602.044247][ C0] ? _printk+0xde/0x130 [ 602.044274][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 602.044285][ T50] Workqueue: phy8 ieee80211_csa_finalize_work [ 602.044291][ C0] _printk+0xde/0x130 [ 602.044303][ T50] Call Trace: [ 602.044310][ T50] [ 602.044316][ T50] dump_stack_lvl+0x18c/0x250 [ 602.044312][ C0] ? copy_from_kernel_nofault+0x194/0x2f0 [ 602.044343][ T50] ? show_regs_print_info+0x20/0x20 [ 602.044356][ C0] ? load_image+0x420/0x420 [ 602.044365][ T50] ? load_image+0x420/0x420 [ 602.044381][ C0] ? show_opcodes+0x146/0x170 [ 602.044397][ T50] panic+0x2ca/0x720 [ 602.044421][ T50] ? bpf_jit_dump+0xd0/0xd0 [ 602.044424][ C0] __show_regs+0x1bf/0x600 [ 602.044445][ C0] ? dump_stack_print_info+0xf5/0x150 [ 602.044448][ T50] ? ret_from_fork_asm+0x11/0x20 [ 602.044476][ T50] __warn+0x2e0/0x470 [ 602.044474][ C0] show_regs+0x44/0x90 [ 602.044492][ T50] ? ieee80211_vif_use_reserved_switch+0x1131/0x2950 [ 602.044499][ C0] __warn+0x160/0x470 [ 602.044516][ C0] ? ieee80211_vif_use_reserved_switch+0x1131/0x2950 [ 602.044520][ T50] ? ieee80211_vif_use_reserved_switch+0x1131/0x2950 [ 602.044548][ C0] ? ieee80211_vif_use_reserved_switch+0x1131/0x2950 [ 602.044545][ T50] report_bug+0x2be/0x4f0 [ 602.044579][ C0] report_bug+0x2be/0x4f0 [ 602.044603][ T50] ? ieee80211_vif_use_reserved_switch+0x1131/0x2950 [ 602.044603][ C0] ? ieee80211_vif_use_reserved_switch+0x1131/0x2950 [ 602.044629][ T50] ? ieee80211_vif_use_reserved_switch+0x1131/0x2950 [ 602.044633][ C0] ? ieee80211_vif_use_reserved_switch+0x1131/0x2950 [ 602.044654][ T50] ? ieee80211_vif_use_reserved_switch+0x1133/0x2950 [ 602.044662][ C0] ? ieee80211_vif_use_reserved_switch+0x1133/0x2950 [ 602.044679][ T50] handle_bug+0xcf/0x120 [ 602.044692][ C0] handle_bug+0xcf/0x120 [ 602.044702][ T50] exc_invalid_op+0x1a/0x50 [ 602.044718][ C0] exc_invalid_op+0x1a/0x50 [ 602.044725][ T50] asm_exc_invalid_op+0x1a/0x20 [ 602.044744][ C0] asm_exc_invalid_op+0x1a/0x20 [ 602.044746][ T50] RIP: 0010:ieee80211_vif_use_reserved_switch+0x1131/0x2950 [ 602.044771][ T50] Code: 48 89 df e8 61 02 c7 f7 e9 e7 fc ff ff e8 c7 f9 6d f7 eb 24 e8 c0 f9 6d f7 c7 04 24 f4 ff ff ff e9 d9 f5 ff ff e8 af f9 6d f7 <0f> 0b 0f 0b e9 c4 f5 ff ff e8 a1 f9 6d f7 48 8b 7c 24 08 4c 8b 74 [ 602.044768][ C0] RIP: 0010:ieee80211_vif_use_reserved_switch+0x1131/0x2950 [ 602.044785][ T50] RSP: 0018:ffffc90000baf9b8 EFLAGS: 00010293 [ 602.044799][ C0] Code: 48 89 df e8 61 02 c7 f7 e9 e7 fc ff ff e8 c7 f9 6d f7 eb 24 e8 c0 f9 6d f7 c7 04 24 f4 ff ff ff e9 d9 f5 ff ff e8 af f9 6d f7 <0f> 0b 0f 0b e9 c4 f5 ff ff e8 a1 f9 6d f7 48 8b 7c 24 08 4c 8b 74 [ 602.044801][ T50] RAX: ffffffff8a19e0f5 RBX: 0000000000000001 RCX: ffff88801ea5bc00 [ 602.044814][ T50] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 602.044814][ C0] RSP: 0018:ffffc9000f2ff9b8 EFLAGS: 00010293 [ 602.044825][ T50] RBP: dffffc0000000000 R08: ffff88805caed60f R09: 1ffff1100b95dac1 [ 602.044832][ C0] RAX: ffffffff8a19e0f5 RBX: 0000000000000001 RCX: ffff888031df8000 [ 602.044838][ T50] R10: dffffc0000000000 R11: ffffed100b95dac2 R12: 0000000000000001 [ 602.044846][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 602.044851][ T50] R13: ffff8880772f2cd0 R14: ffff8880772f2d48 R15: ffff88807ab30630 [ 602.044857][ C0] RBP: dffffc0000000000 R08: ffff88805c95560f R09: 1ffff1100b92aac1 [ 602.044871][ C0] R10: dffffc0000000000 R11: ffffed100b92aac2 R12: 0000000000000001 [ 602.044878][ T50] ? ieee80211_vif_use_reserved_switch+0xd35/0x2950 [ 602.044883][ C0] R13: ffff88807f4d2cd0 R14: ffff88807f4d2d48 R15: ffff88802b3b9e30 [ 602.044907][ C0] ? ieee80211_vif_use_reserved_switch+0xd35/0x2950 [ 602.044910][ T50] ? ieee80211_vif_use_reserved_switch+0xd35/0x2950 [ 602.044943][ C0] ? ieee80211_vif_use_reserved_switch+0xd35/0x2950 [ 602.044949][ T50] ieee80211_link_use_reserved_context+0x37b/0x5c0 [ 602.044980][ T50] ieee80211_csa_finalize+0x571/0xeb0 [ 602.044985][ C0] ieee80211_link_use_reserved_context+0x37b/0x5c0 [ 602.044998][ T50] ? mutex_lock_nested+0x20/0x20 [ 602.045016][ T50] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 602.045021][ C0] ieee80211_csa_finalize+0x571/0xeb0 [ 602.045038][ T50] ? ieee80211_csa_finalize_work+0x140/0x140 [ 602.045041][ C0] ? mutex_lock_nested+0x20/0x20 [ 602.045057][ T50] ? read_lock_is_recursive+0x20/0x20 [ 602.045061][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 602.045085][ C0] ? ieee80211_csa_finalize_work+0x140/0x140 [ 602.045087][ T50] ieee80211_csa_finalize_work+0xf6/0x140 [ 602.045103][ T50] ? process_scheduled_works+0x975/0x1600 [ 602.045106][ C0] ? read_lock_is_recursive+0x20/0x20 [ 602.045129][ T50] process_scheduled_works+0xa60/0x1600 [ 602.045138][ C0] ieee80211_csa_finalize_work+0xf6/0x140 [ 602.045156][ C0] ? process_scheduled_works+0x975/0x1600 [ 602.045181][ T50] ? worker_attach_to_pool+0x370/0x370 [ 602.045184][ C0] process_scheduled_works+0xa60/0x1600 [ 602.045210][ T50] ? assign_work+0x3cc/0x5d0 [ 602.045239][ T50] worker_thread+0xa5e/0xfe0 [ 602.045238][ C0] ? worker_attach_to_pool+0x370/0x370 [ 602.045270][ C0] ? assign_work+0x3cc/0x5d0 [ 602.045290][ T50] kthread+0x2fa/0x390 [ 602.045301][ C0] worker_thread+0xa5e/0xfe0 [ 602.045306][ T50] ? pr_cont_work+0x550/0x550 [ 602.045329][ T50] ? kthread_blkcg+0xd0/0xd0 [ 602.045339][ C0] ? _raw_spin_unlock+0x40/0x40 [ 602.045347][ T50] ret_from_fork+0x48/0x80 [ 602.045359][ C0] ? __kthread_parkme+0x71/0x1c0 [ 602.045367][ T50] ? kthread_blkcg+0xd0/0xd0 [ 602.045385][ T50] ret_from_fork_asm+0x11/0x20 [ 602.045395][ C0] kthread+0x2fa/0x390 [ 602.045413][ C0] ? pr_cont_work+0x550/0x550 [ 602.045423][ T50] [ 602.045437][ C0] ? kthread_blkcg+0xd0/0xd0 [ 602.045695][ T50] Kernel Offset: disabled