last executing test programs: 15.011389161s ago: executing program 4 (id=1055): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0900000005000000080000d2693f72c400ffffffff420000", @ANYRES32=0x1, @ANYBLOB='\x00'/15, @ANYRES32], 0x50) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = io_uring_setup(0x3450, &(0x7f00000005c0)={0x0, 0x4, 0x80}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r6 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x10c) getdents64(r8, &(0x7f00000000c0)=""/55, 0x37) syz_usb_control_io$uac1(r4, 0x0, 0x0) 12.363645872s ago: executing program 4 (id=1067): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x2a, &(0x7f0000000240)=""/145, &(0x7f00000000c0)=0x91) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x0, 0x1ce) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x33}}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getregset(0x4204, r6, 0x200, &(0x7f0000000480)={&(0x7f0000001240)=""/4096, 0x1000}) io_uring_setup(0x597f, &(0x7f0000000180)={0x0, 0xd492, 0x1, 0x0, 0x2f}) syz_mount_image$fuse(0x0, &(0x7f0000002d40)='./file0\x00', 0x1080000, 0x0, 0x0, 0x0, 0x0) r7 = open$dir(&(0x7f0000000140)='./file0\x00', 0x20800, 0x0) utimensat(r7, 0x0, &(0x7f0000000040)={{0x0, 0x3ffffffe}, {0x77359400}}, 0x0) 11.244528973s ago: executing program 3 (id=1072): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e20, @remote}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r2, r4, 0x16, 0x0, @void}, 0x10) sendmsg$nl_route(r4, 0x0, 0x48800) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x6c304000) setsockopt$sock_int(r1, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) 10.584346735s ago: executing program 2 (id=1075): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000580)={0x1, @vbi={0x4, 0x80000000, 0x4, 0x34325258, [0x88000], [0xaf09, 0x7], 0x1}}) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000480)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lsetxattr(0x0, &(0x7f0000000200)=@known='user.incfs.id\x00', 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) listxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x30, r5, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0x9, 0x0, 0x1, "100056f200"}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffff9c, 0x0, 0x20040, 0x0) openat$sequencer2(0xffffff9c, 0x0, 0x30b001, 0x0) socket$kcm(0xa, 0x3, 0x87) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_emit_ethernet(0x1de, &(0x7f0000001180)=ANY=[@ANYBLOB="aaaaaaaaaaaae130aeaaba3086dd606410a601a8000000000000000000000000ffffffffffffff020000000000000000000000000001223431d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb53104c7919b7cf28fa555fc9460df11e72eddebb2fc4eb6f83b16e0d65307e4210dfc209f0c68df65b57f414dc215546b798af6b6ab7bfb2fe6bd6142f877852717370b1ca39d199c149c3ead97c4e16229ce4c08a111a0fc64651c21e9174dd72442a9ae2a42d9433c7b54c8dd4b59203f9a2e227e9b043eb430e606cf98f3428ac8511948dd553bc07"], 0x0) 10.543715745s ago: executing program 4 (id=1076): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="91100400000000009500000000000000ab89becd60798ba0c7b340b02956c1c3822c3f572da76a3b992d243e0b89f6b734d5fdf6cb7955ac9702e4a18821040f9856a1bf21bf5e9b77a91e739c3ee223bb727fb18bc991da02854893b585f4465da763f2ac1d5e22ab728ef23681fe8fdf16f570082bdfadcd7f48aa86c2c12a78db90a7781fa547451f272ad46f8e5733fb606f040417634328cbf1b47957851ce3cbc4eb683cc45e48df30ead552a32564e7d1ab13b4aa22e4dd4970134ec08873d32468bed08369a2ec7cef09ea5af2dfc3dbf2f13954a41a3e02b5e2fd65c37b0f22ce8f18ef"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) pipe2$watch_queue(0x0, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000100)={0x54, 0x0, 0x0, {0xffff, 0x1}, {0x50, 0x2}, @cond=[{0x8, 0x5388, 0x8, 0x800, 0xc9, 0x7}, {0x0, 0x5, 0x1, 0x3, 0x8000, 0x9}]}) setrlimit(0x8, &(0x7f0000000300)={0x4, 0x7}) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r2, 0x0, 0x2c, 0x24044000, &(0x7f0000000380)={0x2, 0x4e22, @remote}, 0x10) r3 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) r4 = socket(0x2d, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@empty, 0x57}) shmctl$IPC_RMID(r3, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/fib_triestat\x00') preadv(r5, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r5, 0xc0105303, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28182, 0x0) ioctl$AUTOFS_IOC_FAIL(r6, 0x4c80, 0xffffffffffffffb6) 10.375094149s ago: executing program 3 (id=1077): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x24000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = syz_io_uring_setup(0x47c5, 0x0, 0x0, 0x0, 0x0) readv(r2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)={0x38, 0x2, 0x6, 0xa00, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x38}}, 0x850) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000440)={"db4c1421593cb4d3f8fe6094dc821bbbe06520701fc6de7b0349f34b0f8c556a9e9aff1355aab8d6da26d74608530f150f127f9e3f0a2f1fff0be9774c95d6c007c91903f78616596487bf50017c56b15385ab264cba5b168c62d971e67e6f3e73d60b5a8adbaaf2af8610c6a91c0a116f619adce4aa91d5a68faf8ee98693d32d8d8244381b5720ef596600e39491d216c22d0725904bab7d90fa8afb8fa04b707410aa300ef098609b4fa6dd77b1b7c321b1fc6356564ce3f90826be3a9a5be186ffc48eb13824e9dae77ed212a0f802074ff4f1725c4ad88cf5bbd36e3406bc59d96e82047631d8be9462ee7e54e5b2897c3fff38eabf67e1e160c2b5e18be06457844d89c9a606b7d25fbde713f4759da0bee1fabe3f71dcca63540f113a2b5edc4b327d1f9610377b97265d4aa875b4bc3c44bf8110d5df1beb1fe54794a0aa52dfc80df1caf7d812b4f1cdba1a6836b45ea2180d08439d411ce8e0755868cc839eaeac73e5d28f9f1990584038cf5fa6bee0c4095a27cc8c7b59519bf2a9bf1fedf54cc2dc6aea6c42c32de40c291e5f422f5c7792a08926af160fb379576dd81bac746232fb246817fc3248097914b75e83cc5eb518ce8fb643b34ca69c3b61f0d94e7db62dd480198d41e0862f1ec4429ab637569884a5ba446a0b09edfd986a2b3e15ee35bbd18610dad6271681ed240b0ffab9199b541013c0aadc36484da57511896c14776a41602aa1426edfbb828897d9c218b7936a0572840ebbc796e888a439b24e640324b511deb6ed0b2ce2f7567447826944b4f34101e492e8d20a2deda950e96e78f86d6d4c976f0c99041c94944309e6ce08d84a7c96677d570d9a57ec0506a4321d9e049b55be883ca3648c27772fc5dbaea5e6c2ded2ce72fb68989ae381fe1394cf6966ab04285d5ff8256bc2e85462b8d89aeeebd5432157c945b5dc1960d9282c6cc007fe029325d6078aef94d4954f956c71bcdf846f41392ebe0d3b289438d24ec4bc073617459a6b232445dd636a9f21140e14b162fd5ef1d626b0ff84884fd63d22cc1b05befb77ea937f3045cc15b125479b262c1e32fca75a5468423288c5776efee744b1fccb5e6d661d9d287cfa8582c96ea34a33c1bbc29c0035657da66a87150bbb885be5ee123e431fd793ea179a0fc77aaee66d874c0616cb32324826b36d0e27d14217ad1131cace3bae4ef82dfbc790e78de53a9bfbdb468bf0eb3ff134073b380858965de2d108862daf3fc6b49ad46f20832238aeaa5d010cf08e37938f0bb7bbeaa970c39ce9327a16fe07565708266ce9ef639bfa08538693b456228aa1c370d64ef9795b7cc208a2c528d381a042d149ed5c7f34ed26a7d5a4401b86434f054389e5dac7a4ee896e406d7b27240d925d478e0eb2202797832d3e2c74f4925ad58377b0d6ae9b97034f94"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r5, 0x5, &(0x7f0000000040)=0x5, &(0x7f00000009c0)=0x272) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 9.635951978s ago: executing program 3 (id=1079): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) preadv2(r0, &(0x7f0000000500)=[{&(0x7f0000000340)=""/105, 0x69}, {&(0x7f00000003c0)=""/66, 0x42}, {&(0x7f0000000440)=""/186, 0xba}], 0x3, 0x1, 0x1000000, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000180)) fanotify_init(0xa00, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r2, 0x6, 0x22, 0xffffffffffffffff, &(0x7f00000002c0)=0x49) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x38, 0x24, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xfff2, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xfbffffff}]}}]}, 0x38}}, 0x4048000) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0xa3}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x42241, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r5, 0x800c5012, &(0x7f0000000040)) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000080), 0x0, 0x8, 0x5) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) 8.740334731s ago: executing program 2 (id=1081): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket(0x15, 0x80005, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) syz_open_dev$video(0x0, 0x8, 0x101840) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6(0xa, 0x400000000001, 0x100) close(0x3) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086"], 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x16, 0xa01, 0x70bd28, 0x1, {0x6}, [@nested={0x8, 0xca, 0x0, 0x1, [@nested={0x4, 0xb}]}]}, 0x1c}}, 0x0) 8.5321133s ago: executing program 4 (id=1082): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000000140)={0x7, 0x10001, 0x7, 0x8001}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0xa, 0x0, 0x0, 0x7ffc1002}]}) pipe2$watch_queue(0x0, 0x80) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) shmctl$IPC_RMID(r3, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x20, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) syz_usb_connect(0x0, 0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e25f01403767010066de0102030109026800020002000009044a00037d998b07052406000005240000000d240f0100000000000000000009050e03"], 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) syz_open_dev$loop(&(0x7f0000002280), 0xffff, 0x121ac3) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000002240)=ANY=[@ANYRES16=r4], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000180)={0x2020}, 0x2024) 8.117718585s ago: executing program 1 (id=1083): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) sendmsg$nl_route(r2, 0x0, 0x48800) 7.752242399s ago: executing program 1 (id=1084): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0x7, 0x6, @random="98c8ca7122df"}, 0x14) sendto$packet(r7, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0xf8, r6, 0x1, 0x5, 0x6, @random="24f51e8e0a5a"}, 0x14) 7.355395092s ago: executing program 3 (id=1085): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011003faff82083910012181250102030109021b00028c4400600904b60800581e62090904"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {0x0, 0x4102}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004080}, 0x812) syz_usb_disconnect(r1) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce822010009"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000004c0)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00100c"], 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=ANY=[@ANYBLOB="74020000100002000000000000000000ac1e0101000000000000000000000000fe8000000000000000000000000000aa0000000020000000000000002e000000", @ANYRES32=0x0, @ANYRES32], 0x274}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[], 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) sendto$packet(0xffffffffffffffff, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r7, 0x1, 0xd8, 0x6, @broadcast}, 0x14) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff000000000000000000000000ac1414bb0000000000000000000000004e21", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001040000000000000600000000000000090000000000000008000000000000000000000000000000000000000000000000000000000020008100000000000000090000000000000083000000000000000000000000000000ff03000000000000010100038401050064010102000000000000000000000000000004d432000000000000002001000000000000000000000000000006350000000002000000000000000000000000007f000001000000000000000000000000000000042b"], 0x23c}}, 0x4080) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 7.341524456s ago: executing program 1 (id=1086): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x4}, 0x18, 0x3) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x2, 0x80805, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x5000, 0x1, @remote, 0x5}, 0x1c) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet6(r4, &(0x7f0000003cc0), 0x0, 0x4000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, 0x0) pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) r6 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003ac9bcc20d118af1ebb5a0102030109022400010700800b"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, &(0x7f0000000e80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.255861583s ago: executing program 0 (id=1087): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e20, @remote}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r2, r4, 0x16, 0x0, @void}, 0x10) sendmsg$nl_route(r4, 0x0, 0x48800) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x6c304000) setsockopt$sock_int(r1, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) 6.693648707s ago: executing program 2 (id=1088): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) pipe2$watch_queue(0x0, 0x80) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) r3 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) shmctl$IPC_RMID(r3, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x20, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) flock(r0, 0x2) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f0000002280), 0xffff, 0x121ac3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000002240)=ANY=[@ANYRES16=r4], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001800dd8d000000000000000002000000000000050400000006001500050000002800168024000100010000dd"], 0x4c}}, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) 5.887968308s ago: executing program 0 (id=1089): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2020}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0xa4}}}, &(0x7f0000000140)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x29, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000600)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x8000, 0x80000000, 0x3, 0x1, 0x5f62, 0x32}, {0x30000000, 0x401, 0xf, 0x7fff, 0x8000000000000000, 0x4}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vm(r5, 0x4018aee3, &(0x7f00000002c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x3}}) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000095, 0x0, 0xfffffffffffffffd}]}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0xc8, 0x3}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x6, 0xf3b8, 0x0, 0x1000, 0x3, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x400000, 0x3, 0x4, 0x4], 0xeeee8000, 0x400}) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000085804184000000000000109022400010000402009040000020300010009210700000122050009058103"], 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io$hid(r10, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="030300400000fedbdf250c00000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x8050}, 0x4000) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) r12 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r12, 0x4c0a, &(0x7f00000002c0)={r13, 0x0, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001ca0f4bd0000000300000000000900"}}) close(r12) sendmsg$nl_xfrm(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x6, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, [@tmpl={0x184, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x4d3, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x1, 0x3, 0x0, 0x0, 0x6}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in6=@local, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x278b6a28}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in=@empty, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2b}, 0x2, @in=@broadcast, 0x0, 0x1}]}]}, 0x23c}}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180), r0) 4.624706368s ago: executing program 4 (id=1090): bpf$BPF_PROG_ATTACH(0x9, 0x0, 0x11) r0 = syz_open_dev$media(0x0, 0x200, 0x2) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0x7c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x237, &(0x7f0000000280)={0x0, 0x275, 0x8, 0x0, 0x2d2}, &(0x7f0000000040), &(0x7f0000000600), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2020) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="5d5b0000000000ad04000000000014000300766c616e300010000000000000000000363ee3000000"], 0x3c}}, 0x20000004) r6 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r6, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000800)=[{0x0}, {&(0x7f0000000080)=""/122, 0x7a}, {&(0x7f0000001cc0)=""/243, 0xf3}], 0x3}, 0x1081}], 0x1, 0x40000040, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x0, 0x0, 0x2, 0x3}, 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r8 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r8, 0x114, 0x3, &(0x7f0000000040)={{}, 0x6e}, 0x10) 4.425934771s ago: executing program 3 (id=1091): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) writev(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}, {0x0}], 0x2) syz_open_dev$sndpcmc(0x0, 0x0, 0x42c001) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x0, 0x34}}, 0x10, 0x0, 0x38}, 0x20000080) read$FUSE(0xffffffffffffffff, &(0x7f00000051c0)={0x2020}, 0x2020) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0xb, 0x0, 0x40000}, 0x20) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40098}, 0x0) connect$can_bcm(r2, &(0x7f00000002c0)={0x1d, r5}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f0000000000)=0x1) pipe2$watch_queue(&(0x7f0000002240), 0x80) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x8880) 4.127907253s ago: executing program 2 (id=1092): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x3, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfa, {0x0, 0x0, 0x0, r4, {0xfff2, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_matchall={{0xd}, {0x8, 0x2, [@TCA_MATCHALL_ACT={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004890}, 0x20084084) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r8, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='./file0\x00') r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r9, 0xffffffffffffffff, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000}, 0x4041080) 3.557647892s ago: executing program 1 (id=1093): vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}], 0x1, 0x0) ioctl$SG_BLKSECTGET(0xffffffffffffffff, 0x1267, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000180)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/file0\x00', 0x250501, 0x1) syz_usb_connect(0x0, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0xa, 0xf6, 0xb1, 0x20, 0x499, 0x1507, 0x15f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x1, 0x30, 0x0, "", [{{0x9, 0x4, 0x2b, 0x3, 0x1, 0x58, 0xbd, 0x76, 0xe8, [], [{{0x9, 0x5, 0x0, 0x4, 0x200, 0xf0, 0x7f, 0x7, [@generic={0x2, 0x24}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x7}]}}]}}]}}]}}, 0x0) getdents(r2, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000084) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) unshare(0x22020400) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000002c0)=@file={0xbf3bb0b17d06914, './file1\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, 0x0, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) 3.50465729s ago: executing program 0 (id=1094): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) sendmsg$nl_route(r2, 0x0, 0x48800) 3.227952977s ago: executing program 0 (id=1095): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2, 0x3}, 0x18, 0x0) r3 = landlock_create_ruleset(0x0, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000010c0)=@newqdisc={0x144, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x118, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x7, 0x5, 0x6}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x6}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x144}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000b07000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4048aecb, &(0x7f00000002c0)) syz_clone(0xaa00080, 0x0, 0xfdb2, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, 0x0) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)={0xa0003009}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r9 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) 2.570543366s ago: executing program 0 (id=1096): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0x7, 0x6, @random="98c8ca7122df"}, 0x14) sendto$packet(r7, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0xf8, r6, 0x1, 0x5, 0x6, @random="24f51e8e0a5a"}, 0x14) 2.556142281s ago: executing program 2 (id=1097): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0xe4, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_VF_PORTS={0xc4, 0x18, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x2}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "d0af553ecbd322f04419479904549a62"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "6f46a8742d263eb95652b3bd22d1996c"}, @IFLA_PORT_VF={0x8, 0x1, 0x7ff}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "f34494a566aa061f50299c591335fb9a"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "6b308c3745eb533322faf5259667bd38"}]}, {0x58, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x2}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "d424a17aa4e49149439979f9a4d7b387"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "fc31dc9e1fce68b698b795964d46fa16"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xa}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x1}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "d7a98b0c1ed8f39d34132ae20b9eaf1b"}]}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040}, 0x8044) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) connect$inet6(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x200000000003, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x9}}, 0x4c) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb}, r4}}, 0x30) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x4, r4, 0x10, 0x0, @in={0x2, 0x4e23, @private=0xa010100}}}, 0xa0) 2.235709428s ago: executing program 3 (id=1098): openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500200000010ac0542024000010203010902240001010008050904007f020301020909250f008101227205090581030006270707"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000000)=0x8) read$FUSE(r1, &(0x7f00000000c0)={0x2020}, 0x2020) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/icmp\x00') pread64(r6, &(0x7f0000000400)=""/255, 0xff, 0x8) ioctl$SG_IO(r5, 0x2285, &(0x7f00000005c0)={0x53, 0xffffffffffffffff, 0x5, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f00000000c0)="930b7633ec", 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000001200)=@broute={'broute\x00', 0x5e04, 0x0, 0x90, [0x0, 0x0, 0x80000000], 0x2, 0x0, &(0x7f0000000000)=[{}, {}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0xe0) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r3) keyctl$clear(0x7, r3) r7 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r7, 0x0) read$FUSE(r1, &(0x7f0000004440)={0x2020}, 0x2020) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x20, 0x1, 0x8, "387e93966e2f9271"}, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1.125050836s ago: executing program 1 (id=1099): r0 = io_uring_setup(0x4066, &(0x7f00000005c0)={0x0, 0xc4d9, 0x80, 0x1, 0x19f}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) close_range(r0, 0xffffffffffffffff, 0x0) 1.124861427s ago: executing program 4 (id=1100): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r3, 0x707, &(0x7f00000000c0)={&(0x7f00000004c0)=[{0x6, 0x0, 0x1, &(0x7f00000002c0)='\v'}], 0x1}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) sync_file_range(r4, 0x7, 0x8, 0x1) sendmsg$SOCK_DESTROY(r4, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x15, 0x1, 0x70bd28, 0x25dfdbfb, {0x23}}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 1.118762825s ago: executing program 0 (id=1109): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f00000020c0)=""/4082, 0xff2}], 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) close_range(r3, 0xffffffffffffffff, 0x0) 53.335355ms ago: executing program 1 (id=1101): syz_usb_connect$uac2(0x2, 0x9a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102000000200c201810400001020301090288000301018008080b0001010c200609040000000101200009240103000428000408240a05004000020c24030207030503050303000b24060305", @ANYRES16], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) r1 = open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0) fcntl$addseals(r1, 0x409, 0x8e3652a1e0b94d91) socket$qrtr(0x2a, 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a3a440000102030109023b000101000000090400000302060000052406000005240000000d240f0100000000000000000009058202400000000009050302"], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020031880000200012800b0001006d61639365630000100002800c000400010000010002800008000500", @ANYRES32=r6, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) sync() 0s ago: executing program 2 (id=1102): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011003faff82083910012181250102030109021b00028c4400600904b60800581e62090904"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {0x0, 0x4102}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004080}, 0x812) syz_usb_disconnect(r1) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce822010009"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000004c0)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00100c"], 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=ANY=[@ANYBLOB="74020000100002000000000000000000ac1e0101000000000000000000000000fe8000000000000000000000000000aa0000000020000000000000002e000000", @ANYRES32=0x0, @ANYRES32], 0x274}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[], 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) sendto$packet(0xffffffffffffffff, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r7, 0x1, 0xd8, 0x6, @broadcast}, 0x14) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff000000000000000000000000ac1414bb0000000000000000000000004e21", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001040000000000000600000000000000090000000000000008000000000000000000000000000000000000000000000000000000000020008100000000000000090000000000000083000000000000000000000000000000ff03000000000000010100038401050064010102000000000000000000000000000004d432000000000000002001000000000000000000000000000006350000000002000000000000000000000000007f000001000000000000000000000000000000042b"], 0x23c}}, 0x4080) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): [ 295.987264][ T5632] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.995762][ T5632] usb 2-1: Product: syz [ 296.000272][ T5632] usb 2-1: Manufacturer: syz [ 296.004969][ T5632] usb 2-1: SerialNumber: syz [ 296.012680][ T5632] usb 2-1: config 0 descriptor?? [ 296.024849][ T5632] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 296.058998][ T8303] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 296.079186][ T5706] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 296.229057][ T8303] usb 1-1: Using ep0 maxpacket: 8 [ 296.240383][ T5706] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 296.246713][ T8303] usb 1-1: unable to get BOS descriptor or descriptor too short [ 296.264796][ T5706] usb 3-1: config 0 has no interface number 0 [ 296.271358][ T8303] usb 1-1: config 140 has an invalid interface number: 182 but max is 1 [ 296.283298][ T5706] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 296.292395][ T8303] usb 1-1: config 140 has no interface number 1 [ 296.292472][ T8303] usb 1-1: config 140 interface 182 has no altsetting 0 [ 296.297908][ T8303] usb 1-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 296.305887][ T5706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.305912][ T5706] usb 3-1: Product: syz [ 296.330218][ T5706] usb 3-1: Manufacturer: syz [ 296.334960][ T5706] usb 3-1: SerialNumber: syz [ 296.348348][ T8303] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.356547][ T5706] usb 3-1: config 0 descriptor?? [ 296.364595][ T8303] usb 1-1: Product: syz [ 296.370709][ T8525] netlink: 'syz.3.792': attribute type 11 has an invalid length. [ 296.378512][ T8303] usb 1-1: Manufacturer: syz [ 296.384696][ T8303] usb 1-1: SerialNumber: syz [ 296.389430][ T8525] netlink: 36 bytes leftover after parsing attributes in process `syz.3.792'. [ 296.564405][ T5760] usb 4-1: [UEAGLE-ATM] firmware is not available [ 296.571021][ T5743] usb 3-1: [UEAGLE-ATM] firmware is not available [ 296.577523][ T9] usb 5-1: [UEAGLE-ATM] firmware is not available [ 296.584060][ T8173] usb 3-1: [UEAGLE-ATM] firmware is not available [ 296.590584][ T8042] usb 3-1: [UEAGLE-ATM] firmware is not available [ 296.597810][ T5730] usb 1-1: [UEAGLE-ATM] firmware is not available [ 296.600088][ T29] usb 5-1: [UEAGLE-ATM] firmware is not available [ 296.604654][ T8246] usb 4-1: [UEAGLE-ATM] firmware is not available [ 296.611010][ T24] usb 5-1: [UEAGLE-ATM] firmware is not available [ 296.621208][ T5729] usb 5-1: [UEAGLE-ATM] firmware is not available [ 296.625262][ T809] usb 5-1: [UEAGLE-ATM] firmware is not available [ 296.630241][ T8244] usb 3-1: [UEAGLE-ATM] firmware is not available [ 296.630392][ T1562] usb 1-1: [UEAGLE-ATM] firmware is not available [ 296.642191][ T5698] usb 1-1: [UEAGLE-ATM] firmware is not available [ 296.648523][ T10] usb 4-1: [UEAGLE-ATM] firmware is not available [ 296.662778][ T5719] usb 4-1: [UEAGLE-ATM] firmware is not available [ 296.669303][ T5759] usb 3-1: [UEAGLE-ATM] firmware is not available [ 296.673650][ T5705] usb 5-1: [UEAGLE-ATM] firmware is not available [ 296.676375][ T5629] usb 3-1: [UEAGLE-ATM] firmware is not available [ 296.688974][ T5721] usb 1-1: [UEAGLE-ATM] firmware is not available [ 296.712408][ T8303] usb 1-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 296.729117][ T5706] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 296.744688][ T5706] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 296.755535][ T5706] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 296.764367][ T5706] usb 3-1: media controller created [ 296.841954][ T5706] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 296.927430][ T8530] tap0: tun_chr_ioctl cmd 1074025677 [ 296.935614][ T8530] tap0: linktype set to 825 [ 297.139029][ T5629] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 297.193191][ T10] usb 3-1: USB disconnect, device number 43 [ 297.318957][ T5629] usb 5-1: Using ep0 maxpacket: 8 [ 297.331388][ T5629] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.336328][ T5632] gspca_topro: reg_w err -71 [ 297.348999][ T5629] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.372396][ T8303] usb 1-1: reset high-speed USB device number 30 using dummy_hcd [ 297.383402][ T5629] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 297.389695][ T5632] gspca_topro: Sensor soi763a [ 297.410340][ T5629] usb 5-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 297.420788][ T5629] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.432949][ T5629] usb 5-1: config 0 descriptor?? [ 297.444740][ T5632] usb 2-1: USB disconnect, device number 39 [ 297.566411][ T8514] syzkaller0: entered promiscuous mode [ 297.582606][ T8514] syzkaller0: entered allmulticast mode [ 297.644111][ T8514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.665917][ T8514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.688049][ T8514] netlink: 392 bytes leftover after parsing attributes in process `syz.0.787'. [ 297.784472][ T8303] usb 1-1: unable to get BOS descriptor or descriptor too short [ 297.795572][ T8303] usb 1-1: device firmware changed [ 297.831425][ T8303] usb 1-1: [ueagle-atm] pre-firmware device, uploading firmware [ 297.849021][ T8303] usb 1-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 297.857312][ T10] usb 1-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 297.879096][ T10] usb 1-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 297.893547][ T5629] kye 0003:0458:4018.0018: unknown main item tag 0x0 [ 297.905175][ T8303] usb 1-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 297.917196][ T5629] kye 0003:0458:4018.0018: unknown main item tag 0x0 [ 297.938748][ T5629] kye 0003:0458:4018.0018: unknown main item tag 0x0 [ 297.947605][ T8303] usb 1-1: [ueagle-atm] pre-firmware device, uploading firmware [ 297.963151][ T5629] kye 0003:0458:4018.0018: unknown main item tag 0x0 [ 297.971720][ T8303] usb 1-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 297.987704][ T5629] kye 0003:0458:4018.0018: unknown main item tag 0x0 [ 298.007682][ T8303] usb 1-1: USB disconnect, device number 30 [ 298.037754][ T5629] kye 0003:0458:4018.0018: hidraw0: USB HID v0.07 Device [HID 0458:4018] on usb-dummy_hcd.4-1/input0 [ 298.058731][ T8303] usb 1-1: [ueagle-atm] ADSL device removed [ 298.090720][ T8533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.794'. [ 298.132881][ T5629] usb 5-1: USB disconnect, device number 36 [ 298.248810][ T8538] fido_id[8538]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 298.359052][ T8246] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 298.484723][ T8547] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 298.522943][ T8246] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 298.535495][ T8246] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 298.547888][ T8246] usb 3-1: Product: syz [ 298.558956][ T8246] usb 3-1: SerialNumber: syz [ 298.571165][ T8246] usb 3-1: config 0 descriptor?? [ 298.806944][ T8246] hso 3-1:0.0: Failed to find BULK eps [ 299.016983][ T8246] usb 3-1: USB disconnect, device number 44 [ 300.179092][ T8246] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 300.291173][ T8586] tap0: tun_chr_ioctl cmd 1074025677 [ 300.317261][ T8586] tap0: linktype set to 825 [ 300.329155][ T5632] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 300.362963][ T8246] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 300.386252][ T8246] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.440228][ T8246] usb 2-1: Product: syz [ 300.495431][ T8246] usb 2-1: Manufacturer: syz [ 300.509244][ T5632] usb 3-1: Using ep0 maxpacket: 8 [ 300.515593][ T8246] usb 2-1: SerialNumber: syz [ 300.567552][ T5632] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 300.610803][ T5632] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 300.697359][ T5632] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 300.754015][ T5632] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 300.824540][ T5632] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 300.852900][ T5632] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 300.886107][ T5632] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 300.911996][ T5632] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.969034][ T5706] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 301.002871][ T8246] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 301.029921][ T8246] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 301.130794][ T5706] usb 5-1: Using ep0 maxpacket: 8 [ 301.147029][ T5706] usb 5-1: unable to get BOS descriptor or descriptor too short [ 301.166015][ T5632] usb 3-1: usb_control_msg returned -32 [ 301.176213][ T5706] usb 5-1: config 140 has an invalid interface number: 182 but max is 1 [ 301.187537][ T5632] usbtmc 3-1:16.0: can't read capabilities [ 301.196111][ T5706] usb 5-1: config 140 has no interface number 1 [ 301.218121][ T5706] usb 5-1: config 140 interface 182 has no altsetting 0 [ 301.234698][ T5706] usb 5-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 301.249094][ T5706] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.260855][ T5706] usb 5-1: Product: syz [ 301.266699][ T5706] usb 5-1: Manufacturer: syz [ 301.275290][ T5706] usb 5-1: SerialNumber: syz [ 301.510099][ T5706] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 302.163803][ T5706] usb 5-1: reset high-speed USB device number 37 using dummy_hcd [ 302.210376][ T5629] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 302.267546][ T8246] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 302.335063][ T8604] syzkaller0: entered promiscuous mode [ 302.341030][ T8604] syzkaller0: entered allmulticast mode [ 302.364798][ T8604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.374030][ T8604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.385066][ T8604] netlink: 392 bytes leftover after parsing attributes in process `syz.4.811'. [ 302.395137][ T5629] usb 1-1: unable to get BOS descriptor or descriptor too short [ 302.411070][ T5629] usb 1-1: not running at top speed; connect to a high speed hub [ 302.420787][ T5629] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 302.431289][ T5629] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 302.442753][ T5629] usb 1-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 302.452082][ T5629] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.460162][ T5629] usb 1-1: Product: syz [ 302.464426][ T5629] usb 1-1: Manufacturer: syz [ 302.469205][ T5629] usb 1-1: SerialNumber: syz [ 302.541444][ T5706] usb 5-1: unable to get BOS descriptor or descriptor too short [ 302.550017][ T5632] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 302.560873][ T5706] usb 5-1: device firmware changed [ 302.568065][ T5706] usb 5-1: [ueagle-atm] pre-firmware device, uploading firmware [ 302.576362][ T5706] usb 5-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 302.587620][ T5706] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 302.598432][ T5706] usb 5-1: [ueagle-atm] pre-firmware device, uploading firmware [ 302.606701][ T5706] usb 5-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 302.626083][ T5706] usb 5-1: USB disconnect, device number 37 [ 302.644910][ T5706] usb 5-1: [ueagle-atm] ADSL device removed [ 302.701143][ T8610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.709751][ T5632] usb 4-1: Using ep0 maxpacket: 8 [ 302.711873][ T8610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.724821][ T5632] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.736227][ T5632] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.747078][ T5632] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 302.760396][ T5632] usb 4-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 302.770102][ T5632] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.782578][ T5632] usb 4-1: config 0 descriptor?? [ 303.049784][ T5629] usb 1-1: 3:0: failed to get current value for ch 0 (-71) [ 303.065667][ T5629] usb 1-1: 3:0: cannot get min/max values for control 2 (id 3) [ 303.075447][ T5629] usb 1-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 303.089329][ T8303] usb 3-1: USB disconnect, device number 45 [ 303.097160][ T5629] usb 1-1: [3] FU [LFE Playback Volume] ch = 1, val = 0/1/1 [ 303.113344][ T5629] usb 1-1: 3:0: cannot get min/max values for control 3 (id 3) [ 303.129720][ T5629] usb 1-1: 3:0: cannot get min/max values for control 4 (id 3) [ 303.138396][ T5629] usb 1-1: 3:0: cannot get min/max values for control 5 (id 3) [ 303.150999][ T5629] usb 1-1: 3:0: failed to get current value for ch 0 (-71) [ 303.166589][ T5629] usb 1-1: 3:0: cannot get min/max values for control 8 (id 3) [ 303.228637][ T5632] kye 0003:0458:4018.0019: unknown main item tag 0x0 [ 303.231393][ T5629] usb 1-1: 3:0: cannot get min/max values for control 3 (id 3) [ 303.251185][ T5632] kye 0003:0458:4018.0019: unknown main item tag 0x0 [ 303.264129][ T5632] kye 0003:0458:4018.0019: unknown main item tag 0x0 [ 303.275875][ T5629] usb 1-1: 3:0: cannot get min/max values for control 5 (id 3) [ 303.285509][ T5632] kye 0003:0458:4018.0019: unknown main item tag 0x0 [ 303.302216][ T5632] kye 0003:0458:4018.0019: unknown main item tag 0x0 [ 303.314070][ T5632] kye 0003:0458:4018.0019: hidraw0: USB HID v0.07 Device [HID 0458:4018] on usb-dummy_hcd.3-1/input0 [ 303.368933][ T5629] usb 1-1: USB disconnect, device number 31 [ 303.492533][ T8615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.816'. [ 303.532017][ T8303] usb 4-1: USB disconnect, device number 40 [ 303.711509][ T8246] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 303.730995][ T8246] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 303.745112][ T8246] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 303.770248][ T8246] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 303.808574][ T8246] usb 2-1: USB disconnect, device number 40 [ 304.199775][ T8303] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 304.372294][ T8303] usb 3-1: Using ep0 maxpacket: 16 [ 304.392328][ T8303] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 304.418949][ T8303] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.440881][ T8303] usb 3-1: Product: syz [ 304.453992][ T8303] usb 3-1: Manufacturer: syz [ 304.469783][ T8303] usb 3-1: SerialNumber: syz [ 304.495092][ T8303] usb 3-1: config 0 descriptor?? [ 304.853260][ T8648] tap0: tun_chr_ioctl cmd 1074025677 [ 304.880974][ T8648] tap0: linktype set to 825 [ 304.944637][ T8303] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 304.991955][ T8303] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 305.029346][ T8656] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 305.047343][ T8303] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 305.082346][ T8303] usb 3-1: media controller created [ 305.148165][ T8303] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 305.755882][ T8246] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 305.783047][ T8303] zl10353_read_register: readreg error (reg=127, ret==0) [ 305.824073][ T8303] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 305.857645][ T8303] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 305.995290][ T8246] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 306.026176][ T8246] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 306.049137][ T8246] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.070576][ T8246] usb 5-1: Product: syz [ 306.082265][ T8246] usb 5-1: Manufacturer: syz [ 306.093397][ T8246] usb 5-1: SerialNumber: syz [ 306.122362][ T8246] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 306.536982][ T8246] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 306.587257][ T8246] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 306.620833][ T8246] usb 5-1: media controller created [ 306.691239][ T8683] dtv5100: wlen = 3, aborting. [ 306.729270][ T8246] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 306.913211][ T8690] netlink: 'syz.2.829': attribute type 4 has an invalid length. [ 306.946289][ T8690] netlink: 'syz.2.829': attribute type 4 has an invalid length. [ 307.656815][ T5632] usb 5-1: USB disconnect, device number 38 [ 307.705895][ T8722] lo: Caught tx_queue_len zero misconfig [ 308.149076][ T5632] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 308.255010][ T8732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.286214][ T8732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.309322][ T5632] usb 4-1: Using ep0 maxpacket: 8 [ 308.318798][ T8732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.836'. [ 308.323373][ T5632] usb 4-1: unable to get BOS descriptor or descriptor too short [ 308.344397][ T5632] usb 4-1: config 140 has an invalid interface number: 182 but max is 1 [ 308.353136][ T5632] usb 4-1: config 140 has no interface number 1 [ 308.359794][ T5632] usb 4-1: config 140 interface 182 has no altsetting 0 [ 308.369908][ T5632] usb 4-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 308.379338][ T5632] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.387383][ T5632] usb 4-1: Product: syz [ 308.392560][ T5632] usb 4-1: Manufacturer: syz [ 308.397222][ T5632] usb 4-1: SerialNumber: syz [ 308.578981][ T5706] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 308.624715][ T5632] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 308.729001][ T5706] usb 2-1: Using ep0 maxpacket: 8 [ 308.735909][ T5706] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 308.744121][ T5706] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 308.755270][ T5706] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 308.765538][ T5706] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 308.777185][ T5706] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 308.787365][ T5706] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 308.800470][ T5706] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 308.809578][ T5706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.030725][ T5706] usb 2-1: usb_control_msg returned -32 [ 309.038982][ T8738] netlink: 132 bytes leftover after parsing attributes in process `syz.0.850'. [ 309.048138][ T5706] usbtmc 2-1:16.0: can't read capabilities [ 309.249712][ T5632] usb 4-1: reset high-speed USB device number 41 using dummy_hcd [ 309.322747][ T8750] netlink: 76 bytes leftover after parsing attributes in process `syz.2.844'. [ 309.408966][ T8246] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 309.437727][ T8727] syzkaller0: entered promiscuous mode [ 309.455404][ T8727] syzkaller0: entered allmulticast mode [ 309.561249][ T8757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.578959][ T8246] usb 1-1: Using ep0 maxpacket: 16 [ 309.580204][ T8757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.584946][ T8759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.612646][ T8246] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 309.632173][ T8759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.641735][ T8246] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.660440][ T8246] usb 1-1: Product: syz [ 309.665811][ T8727] netlink: 392 bytes leftover after parsing attributes in process `syz.3.835'. [ 309.675970][ T8754] tap0: tun_chr_ioctl cmd 1074025677 [ 309.681346][ T8246] usb 1-1: Manufacturer: syz [ 309.681367][ T8246] usb 1-1: SerialNumber: syz [ 309.696899][ T8754] tap0: linktype set to 825 [ 309.703039][ T8246] usb 1-1: config 0 descriptor?? [ 309.822951][ T5632] usb 4-1: unable to get BOS descriptor or descriptor too short [ 309.834705][ T5632] usb 4-1: device firmware changed [ 309.843499][ T5632] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware [ 309.851876][ T5632] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 309.869931][ T5632] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 309.885086][ T5632] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware [ 309.896228][ T5632] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 309.918665][ T5632] usb 4-1: USB disconnect, device number 41 [ 309.958221][ T5632] usb 4-1: [ueagle-atm] ADSL device removed [ 310.157040][ T8246] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 310.174002][ T8246] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 310.187285][ T8246] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 310.195552][ T8246] usb 1-1: media controller created [ 310.220802][ T8246] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 310.353101][ T8762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.376418][ T8762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.515093][ T8766] netlink: 56 bytes leftover after parsing attributes in process `syz.3.847'. [ 310.524300][ T8766] netlink: 56 bytes leftover after parsing attributes in process `syz.3.847'. [ 310.695799][ T8246] zl10353_read_register: readreg error (reg=127, ret==0) [ 310.728620][ T8246] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 310.749133][ T8246] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 310.775641][ T8246] usb 1-1: USB disconnect, device number 32 [ 310.846123][ T8246] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 311.025282][ T8775] netlink: 'syz.2.852': attribute type 1 has an invalid length. [ 311.075006][ T8775] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 311.083873][ T82] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 311.097118][ T82] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 311.120966][ T82] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 311.153073][ T82] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 311.190534][ T8778] netlink: 12 bytes leftover after parsing attributes in process `syz.2.853'. [ 311.229120][ T8303] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 311.293725][ T8782] vlan3: entered allmulticast mode [ 311.299509][ T8782] bond2: entered allmulticast mode [ 311.400140][ T8303] usb 5-1: Using ep0 maxpacket: 8 [ 311.407592][ T8303] usb 5-1: unable to get BOS descriptor or descriptor too short [ 311.426939][ T8303] usb 5-1: config 140 has an invalid interface number: 182 but max is 1 [ 311.438906][ T8303] usb 5-1: config 140 has no interface number 1 [ 311.455857][ T8303] usb 5-1: config 140 interface 182 has no altsetting 0 [ 311.470624][ T8246] usb 2-1: USB disconnect, device number 41 [ 311.486115][ T8303] usb 5-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 311.506624][ T8303] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.529013][ T8303] usb 5-1: Product: syz [ 311.542242][ T8303] usb 5-1: Manufacturer: syz [ 311.552190][ T8303] usb 5-1: SerialNumber: syz [ 311.567173][ T8788] netlink: 'syz.3.858': attribute type 12 has an invalid length. [ 311.599600][ T5632] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 311.749071][ T5632] usb 1-1: Using ep0 maxpacket: 8 [ 311.762604][ T5632] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.784021][ T5632] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.795946][ T8303] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 311.809211][ T5632] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 311.829211][ T5632] usb 1-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 311.838351][ T5632] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.851121][ T5632] usb 1-1: config 0 descriptor?? [ 312.269083][ T5632] kye 0003:0458:4018.001A: unknown main item tag 0x0 [ 312.277039][ T5632] kye 0003:0458:4018.001A: unknown main item tag 0x0 [ 312.283972][ T5632] kye 0003:0458:4018.001A: unknown main item tag 0x0 [ 312.291146][ T5632] kye 0003:0458:4018.001A: unknown main item tag 0x0 [ 312.298152][ T5632] kye 0003:0458:4018.001A: unknown main item tag 0x0 [ 312.321289][ T5632] kye 0003:0458:4018.001A: hidraw0: USB HID v0.07 Device [HID 0458:4018] on usb-dummy_hcd.0-1/input0 [ 312.418950][ T8303] usb 5-1: reset high-speed USB device number 39 using dummy_hcd [ 312.455181][ T8246] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 312.505286][ T8786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.856'. [ 312.532420][ T5629] usb 1-1: USB disconnect, device number 33 [ 312.567806][ T8804] tap0: tun_chr_ioctl cmd 1074025677 [ 312.578791][ T8804] tap0: linktype set to 825 [ 312.629770][ T8246] usb 2-1: Using ep0 maxpacket: 32 [ 312.648487][ T8246] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 312.658647][ T8771] syzkaller0: entered promiscuous mode [ 312.669178][ T8771] syzkaller0: entered allmulticast mode [ 312.675926][ T8246] usb 2-1: config 0 has no interface number 0 [ 312.685382][ T8246] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 312.706318][ T8246] usb 2-1: config 0 interface 1 has no altsetting 0 [ 312.718614][ T8246] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 312.721862][ T8771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.743368][ T8246] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.751903][ T8771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.761430][ T8246] usb 2-1: Product: syz [ 312.765200][ T8771] netlink: 392 bytes leftover after parsing attributes in process `syz.4.861'. [ 312.766020][ T8246] usb 2-1: Manufacturer: syz [ 312.789548][ T8246] usb 2-1: SerialNumber: syz [ 312.816960][ T8246] usb 2-1: config 0 descriptor?? [ 312.883484][ T8303] usb 5-1: unable to get BOS descriptor or descriptor too short [ 312.893123][ T8303] usb 5-1: device firmware changed [ 312.902137][ T8303] usb 5-1: [ueagle-atm] pre-firmware device, uploading firmware [ 312.914928][ T8303] usb 5-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 312.931802][ T8303] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 312.948469][ T8303] usb 5-1: [ueagle-atm] pre-firmware device, uploading firmware [ 312.961218][ T8303] usb 5-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 312.981186][ T8303] usb 5-1: USB disconnect, device number 39 [ 313.010271][ T8303] usb 5-1: [ueagle-atm] ADSL device removed [ 313.050358][ T8246] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 313.066354][ T8246] cx231xx 2-1:0.1: Failed to read PCB config [ 313.074988][ T8246] cx231xx 2-1:0.1: probe with driver cx231xx failed with error -71 [ 313.092460][ T8246] usb 2-1: USB disconnect, device number 42 [ 313.588952][ T8246] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 313.759243][ T8303] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 313.768377][ T8246] usb 2-1: Using ep0 maxpacket: 32 [ 313.780206][ T8246] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 313.789489][ T8246] usb 2-1: config 0 has no interface number 0 [ 313.795914][ T8246] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 313.814495][ T8820] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 313.823219][ T8246] usb 2-1: config 0 interface 1 has no altsetting 0 [ 313.830661][ T8822] syzkaller0: entered promiscuous mode [ 313.837137][ T8246] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 313.843231][ T8822] syzkaller0: entered allmulticast mode [ 313.862112][ T8246] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.880410][ T8246] usb 2-1: Product: syz [ 313.889882][ T8246] usb 2-1: Manufacturer: syz [ 313.894571][ T8246] usb 2-1: SerialNumber: syz [ 313.903698][ T8246] usb 2-1: config 0 descriptor?? [ 313.971345][ T8303] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 313.983490][ T8303] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 314.006836][ T8303] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 314.017854][ T8303] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.031642][ T8303] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 314.050182][ T8303] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 314.061661][ T8303] usb 1-1: Product: syz [ 314.088761][ T8303] usb 1-1: Manufacturer: syz [ 314.112545][ T8303] cdc_wdm 1-1:1.0: skipping garbage [ 314.124490][ T8303] cdc_wdm 1-1:1.0: skipping garbage [ 314.137922][ T8246] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 314.152215][ T8303] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 314.165606][ T8246] cx231xx 2-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 314.175387][ T8303] cdc_wdm 1-1:1.0: Unknown control protocol [ 314.309384][ T8246] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 314.321189][ T8246] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 314.337973][ T8246] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 314.363882][ T8246] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 314.388545][ T8246] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 314.406784][ T8246] cx231xx 2-1:0.1: Failed to set devmode to analog: error: -71 [ 314.447475][ T5632] usb 1-1: USB disconnect, device number 34 [ 314.463518][ T8246] i2c i2c-3: Added multiplexed i2c bus 5 [ 314.488843][ T8246] i2c i2c-3: Added multiplexed i2c bus 6 [ 314.506695][ T8246] cx231xx 2-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 314.532753][ T8246] cx231xx 2-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 314.607072][ T8246] cx231xx 2-1:0.1: probe with driver cx231xx failed with error -71 [ 314.649129][ T8246] usb 2-1: USB disconnect, device number 43 [ 314.716023][ T8838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.751410][ T8838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.039970][ T8303] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 315.211171][ T8303] usb 5-1: Using ep0 maxpacket: 8 [ 315.222479][ T8303] usb 5-1: unable to get BOS descriptor or descriptor too short [ 315.236892][ T8303] usb 5-1: config 140 has an invalid interface number: 182 but max is 1 [ 315.247780][ T8303] usb 5-1: config 140 has no interface number 1 [ 315.261984][ T8303] usb 5-1: config 140 interface 182 has no altsetting 0 [ 315.279173][ T8303] usb 5-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 315.290927][ T8303] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.306130][ T8303] usb 5-1: Product: syz [ 315.314948][ T8303] usb 5-1: Manufacturer: syz [ 315.323506][ T8303] usb 5-1: SerialNumber: syz [ 315.338234][ T8850] tap0: tun_chr_ioctl cmd 1074025677 [ 315.364582][ T8850] tap0: linktype set to 825 [ 315.462841][ T8854] syzkaller0: entered promiscuous mode [ 315.476983][ T8854] syzkaller0: entered allmulticast mode [ 315.529023][ T8246] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 315.625140][ T8303] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 315.710580][ T8246] usb 2-1: Using ep0 maxpacket: 8 [ 315.724748][ T8246] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.745902][ T8246] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.766078][ T8246] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 315.809914][ T8246] usb 2-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 315.822327][ T8859] netlink: 20 bytes leftover after parsing attributes in process `syz.0.881'. [ 315.853068][ T8246] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.874024][ T8859] ip6gre1: entered promiscuous mode [ 315.881393][ T8859] ip6gre1: entered allmulticast mode [ 315.896300][ T8246] usb 2-1: config 0 descriptor?? [ 315.930559][ T8859] netlink: 'syz.0.881': attribute type 6 has an invalid length. [ 315.946044][ T8859] netlink: 72 bytes leftover after parsing attributes in process `syz.0.881'. [ 316.065249][ T8861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.096133][ T8861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.117771][ T8863] binder: 8862:8863 ioctl c0306201 80000180 returned -14 [ 316.269215][ T8303] usb 5-1: reset high-speed USB device number 40 using dummy_hcd [ 316.318349][ T8246] kye 0003:0458:4018.001B: unknown main item tag 0x0 [ 316.342309][ T8246] kye 0003:0458:4018.001B: unknown main item tag 0x0 [ 316.356576][ T8246] kye 0003:0458:4018.001B: unknown main item tag 0x0 [ 316.364916][ T8246] kye 0003:0458:4018.001B: unknown main item tag 0x0 [ 316.378992][ T8246] kye 0003:0458:4018.001B: unknown main item tag 0x0 [ 316.406441][ T8246] kye 0003:0458:4018.001B: hidraw0: USB HID v0.07 Device [HID 0458:4018] on usb-dummy_hcd.1-1/input0 [ 316.458379][ T8840] syzkaller0: entered promiscuous mode [ 316.468974][ T8840] syzkaller0: entered allmulticast mode [ 316.507922][ T8840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.541078][ T8840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.578019][ T8840] netlink: 392 bytes leftover after parsing attributes in process `syz.4.874'. [ 316.591683][ T8851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.879'. [ 316.637555][ T24] usb 2-1: USB disconnect, device number 44 [ 316.797405][ T8303] usb 5-1: unable to get BOS descriptor or descriptor too short [ 316.814134][ T8303] usb 5-1: device firmware changed [ 316.826256][ T8303] usb 5-1: [ueagle-atm] pre-firmware device, uploading firmware [ 316.843342][ T8303] usb 5-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 316.874823][ T8303] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 316.895753][ T8303] usb 5-1: [ueagle-atm] pre-firmware device, uploading firmware [ 316.919061][ T8303] usb 5-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 316.936913][ T8303] usb 5-1: USB disconnect, device number 40 [ 316.963256][ T8303] usb 5-1: [ueagle-atm] ADSL device removed [ 317.041542][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.049208][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.599560][ T8885] syzkaller0: entered promiscuous mode [ 317.613884][ T8885] syzkaller0: entered allmulticast mode [ 317.675973][ T8881] tap0: tun_chr_ioctl cmd 1074025677 [ 317.682781][ T8881] tap0: linktype set to 825 [ 317.957134][ T8892] netlink: 24 bytes leftover after parsing attributes in process `syz.4.891'. [ 318.065375][ T8894] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 318.472682][ T8898] syzkaller0: entered promiscuous mode [ 318.490580][ T8898] syzkaller0: entered allmulticast mode [ 318.719373][ T24] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 318.878959][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 318.896963][ T24] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 318.919460][ T24] usb 1-1: config 0 has no interface number 0 [ 318.952107][ T24] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 318.983435][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.013477][ T24] usb 1-1: Product: syz [ 319.027976][ T24] usb 1-1: Manufacturer: syz [ 319.047749][ T24] usb 1-1: SerialNumber: syz [ 319.076728][ T24] usb 1-1: config 0 descriptor?? [ 319.099107][ T24] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 319.315274][ T24] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 319.375902][ T24] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 319.447732][ T8913] fuse: Bad value for 'fd' [ 320.374486][ T8904] input: syz0 as /devices/virtual/input/input44 [ 320.936540][ T8926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.955452][ T8926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.455105][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 321.458450][ T5729] usb 1-1: USB disconnect, device number 35 [ 321.511970][ T5729] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 321.556412][ T5729] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 321.587584][ T5729] quatech2 1-1:0.51: device disconnected [ 321.863282][ T8951] syzkaller0: entered promiscuous mode [ 321.871996][ T8951] syzkaller0: entered allmulticast mode [ 321.887717][ T8955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.900297][ T8955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.000576][ T24] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 322.162317][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 322.176271][ T24] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 322.189267][ T5729] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 322.197056][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 322.210488][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 322.221362][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 322.232000][ T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 322.246171][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 322.255881][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.350306][ T5729] usb 2-1: Using ep0 maxpacket: 32 [ 322.365109][ T5729] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 322.374086][ T5729] usb 2-1: config 0 has no interface number 0 [ 322.380735][ T5729] usb 2-1: config 0 interface 184 has no altsetting 0 [ 322.390587][ T5729] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 322.401124][ T5729] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.411196][ T5729] usb 2-1: Product: syz [ 322.415391][ T5729] usb 2-1: Manufacturer: syz [ 322.429185][ T5729] usb 2-1: SerialNumber: syz [ 322.436595][ T5729] usb 2-1: config 0 descriptor?? [ 322.482587][ T24] usb 4-1: usb_control_msg returned -32 [ 322.492150][ T24] usbtmc 4-1:16.0: can't read capabilities [ 322.530789][ T8967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.541046][ T8967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.618996][ T5632] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 322.739032][ T29] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 322.768952][ T5632] usb 1-1: Using ep0 maxpacket: 8 [ 322.776133][ T5632] usb 1-1: unable to get BOS descriptor or descriptor too short [ 322.785967][ T5632] usb 1-1: config 140 has an invalid interface number: 182 but max is 1 [ 322.794422][ T5632] usb 1-1: config 140 has no interface number 1 [ 322.800861][ T5632] usb 1-1: config 140 interface 182 has no altsetting 0 [ 322.810770][ T5632] usb 1-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 322.819987][ T5632] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.828023][ T5632] usb 1-1: Product: syz [ 322.832261][ T5632] usb 1-1: Manufacturer: syz [ 322.836880][ T5632] usb 1-1: SerialNumber: syz [ 322.890904][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.901315][ T29] usb 5-1: config 0 has no interfaces? [ 322.906866][ T29] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 322.916009][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.928152][ T29] usb 5-1: config 0 descriptor?? [ 323.056926][ T5632] usb 1-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 323.064420][ T5729] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 323.078040][ T5729] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 323.212653][ T8971] usbtmc 4-1:16.0: INITIATE_CLEAR returned 0 [ 323.226114][ T8971] netlink: 44 bytes leftover after parsing attributes in process `syz.3.910'. [ 323.271505][ T8303] usb 5-1: USB disconnect, device number 41 [ 323.362913][ T8974] tap0: tun_chr_ioctl cmd 1074025677 [ 323.368730][ T8974] tap0: linktype set to 825 [ 323.689016][ T5632] usb 1-1: reset high-speed USB device number 36 using dummy_hcd [ 323.877107][ T8963] syzkaller0: entered promiscuous mode [ 323.883365][ T8963] syzkaller0: entered allmulticast mode [ 323.915342][ T8963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.933745][ T8963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.943688][ T8963] netlink: 392 bytes leftover after parsing attributes in process `syz.0.917'. [ 323.989102][ T8976] syz_tun: entered allmulticast mode [ 324.000355][ T8975] syz_tun: left allmulticast mode [ 324.037621][ T5632] usb 1-1: unable to get BOS descriptor or descriptor too short [ 324.055614][ T5632] usb 1-1: device firmware changed [ 324.067147][ T5632] usb 1-1: [ueagle-atm] pre-firmware device, uploading firmware [ 324.087388][ T5632] usb 1-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 324.116536][ T5632] usb 1-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 324.143029][ T5632] usb 1-1: [ueagle-atm] pre-firmware device, uploading firmware [ 324.165930][ T5632] usb 1-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 324.197665][ T5632] usb 1-1: USB disconnect, device number 36 [ 324.250090][ T5632] usb 1-1: [ueagle-atm] ADSL device removed [ 324.503757][ T5729] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 324.516006][ T5729] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 324.527966][ T5729] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 324.541228][ T5729] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 324.555876][ T5729] usb 2-1: USB disconnect, device number 45 [ 324.687345][ T8980] syzkaller0: entered promiscuous mode [ 324.693027][ T8980] syzkaller0: entered allmulticast mode [ 324.736852][ T8982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.746942][ T8982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.785162][ T8982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.923'. [ 324.803292][ T5729] usb 4-1: USB disconnect, device number 42 [ 325.164928][ T8992] netlink: 'syz.1.929': attribute type 1 has an invalid length. [ 325.358988][ T5729] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 325.489993][ T9001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.932'. [ 325.514565][ T9001] bond0: option arp_all_targets: invalid value (53) [ 325.541278][ T5729] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 325.569706][ T5729] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 325.581838][ T9003] syzkaller0: entered promiscuous mode [ 325.588290][ T9003] syzkaller0: entered allmulticast mode [ 325.595157][ T5729] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 325.618913][ T5729] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 325.640037][ T5729] usb 1-1: SerialNumber: syz [ 325.931953][ T8987] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 326.013822][ T5729] usb 1-1: USB disconnect, device number 37 [ 326.352138][ T9012] tap0: tun_chr_ioctl cmd 1074025677 [ 326.386581][ T9012] tap0: linktype set to 825 [ 326.708944][ T5632] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 326.912385][ T5632] usb 4-1: Using ep0 maxpacket: 8 [ 326.932319][ T5632] usb 4-1: unable to get BOS descriptor or descriptor too short [ 326.959388][ T5632] usb 4-1: config 140 has an invalid interface number: 182 but max is 1 [ 326.978321][ T5632] usb 4-1: config 140 has no interface number 1 [ 326.995036][ T5632] usb 4-1: config 140 interface 182 has no altsetting 0 [ 327.022447][ T5632] usb 4-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 327.036681][ T5632] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.052526][ T5632] usb 4-1: Product: syz [ 327.071565][ T5632] usb 4-1: Manufacturer: syz [ 327.079088][ T5698] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 327.092981][ T5632] usb 4-1: SerialNumber: syz [ 327.255681][ T5698] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 327.277353][ T5698] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.298835][ T5698] usb 1-1: Product: syz [ 327.309332][ T5698] usb 1-1: Manufacturer: syz [ 327.318608][ T5698] usb 1-1: SerialNumber: syz [ 327.335805][ T5632] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 327.768643][ T5698] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 327.794570][ T5698] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 327.958956][ T5729] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 327.999118][ T5632] usb 4-1: reset high-speed USB device number 43 using dummy_hcd [ 328.123290][ T5729] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.143219][ T5729] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.167397][ T5729] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 328.196418][ T9020] syzkaller0: entered promiscuous mode [ 328.202446][ T9020] syzkaller0: entered allmulticast mode [ 328.217710][ T5729] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 328.247461][ T5729] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.275390][ T5729] usb 2-1: config 0 descriptor?? [ 328.289174][ T9020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.319934][ T9020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.339198][ T9020] netlink: 392 bytes leftover after parsing attributes in process `syz.3.938'. [ 328.474075][ T5632] usb 4-1: unable to get BOS descriptor or descriptor too short [ 328.497075][ T5632] usb 4-1: device firmware changed [ 328.519992][ T5632] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware [ 328.541297][ T5632] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 328.574324][ T5632] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 328.605280][ T5632] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware [ 328.627168][ T5632] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 328.653680][ T5632] usb 4-1: USB disconnect, device number 43 [ 328.682973][ T5632] usb 4-1: [ueagle-atm] ADSL device removed [ 328.778485][ T5729] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 329.440403][ T5698] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 329.454033][ T5698] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 329.468120][ T5698] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 329.491410][ T5729] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 329.494902][ T5698] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 329.530926][ T5698] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 329.554383][ T5698] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 329.584797][ T5632] usb 2-1: USB disconnect, device number 46 [ 329.596745][ T5698] usb 1-1: USB disconnect, device number 38 [ 329.699552][ T5729] usb 4-1: Using ep0 maxpacket: 8 [ 329.718454][ T5729] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.760122][ T5729] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.779218][ T5729] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 329.802055][ T9046] syzkaller0: entered promiscuous mode [ 329.807811][ T9046] syzkaller0: entered allmulticast mode [ 329.809535][ T5729] usb 4-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 329.828914][ T5729] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.843742][ T5729] usb 4-1: config 0 descriptor?? [ 330.279716][ T8303] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 330.290297][ T5729] kye 0003:0458:4018.001D: unknown main item tag 0x0 [ 330.297209][ T5729] kye 0003:0458:4018.001D: unknown main item tag 0x0 [ 330.305610][ T5729] kye 0003:0458:4018.001D: unknown main item tag 0x0 [ 330.312803][ T5729] kye 0003:0458:4018.001D: unknown main item tag 0x0 [ 330.364537][ T5729] kye 0003:0458:4018.001D: unknown main item tag 0x0 [ 330.376765][ T5729] kye 0003:0458:4018.001D: hidraw0: USB HID v0.07 Device [HID 0458:4018] on usb-dummy_hcd.3-1/input0 [ 330.429012][ T5698] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 330.449251][ T8303] usb 5-1: Using ep0 maxpacket: 16 [ 330.457277][ T8303] usb 5-1: config 166 has an invalid interface number: 177 but max is 1 [ 330.466535][ T8303] usb 5-1: config 166 has an invalid interface number: 34 but max is 1 [ 330.475318][ T8303] usb 5-1: config 166 has no interface number 0 [ 330.489115][ T8303] usb 5-1: config 166 has no interface number 1 [ 330.502961][ T8303] usb 5-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 330.517830][ T9041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.945'. [ 330.542890][ T8303] usb 5-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 330.559667][ T9044] usb 4-1: USB disconnect, device number 44 [ 330.584872][ T8303] usb 5-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 330.599670][ T8303] usb 5-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 330.611234][ T5698] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.614975][ T8303] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 330.634151][ T8303] usb 5-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 330.635192][ T5698] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 330.652052][ T8303] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 330.654878][ T5698] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.675458][ T8303] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 330.698301][ T5698] usb 2-1: config 0 descriptor?? [ 330.708266][ T8303] usb 5-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 330.722397][ T8303] usb 5-1: config 166 interface 177 has no altsetting 0 [ 330.730066][ T8303] usb 5-1: config 166 interface 34 has no altsetting 0 [ 330.742651][ T5698] pwc: Askey VC010 type 2 USB webcam detected. [ 330.752697][ T8303] usb 5-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 330.764593][ T8303] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.774184][ T8303] usb 5-1: Product: syz [ 330.778491][ T8303] usb 5-1: Manufacturer: syz [ 330.784281][ T8303] usb 5-1: SerialNumber: syz [ 331.011269][ T8303] ums-realtek 5-1:166.177: USB Mass Storage device detected [ 331.121174][ T5698] pwc: recv_control_msg error -32 req 02 val 2b00 [ 331.129045][ T5698] pwc: recv_control_msg error -32 req 02 val 2700 [ 331.212827][ T8303] ums-realtek 5-1:166.34: USB Mass Storage device detected [ 331.289130][ T5360] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 331.338688][ T5698] pwc: recv_control_msg error -32 req 04 val 1000 [ 331.360388][ T5698] pwc: recv_control_msg error -32 req 04 val 1300 [ 331.367985][ T5698] pwc: recv_control_msg error -32 req 04 val 1400 [ 331.375882][ T5698] pwc: recv_control_msg error -32 req 02 val 2000 [ 331.383741][ T5698] pwc: recv_control_msg error -32 req 02 val 2100 [ 331.392452][ T5698] pwc: recv_control_msg error -32 req 04 val 1500 [ 331.399885][ T5698] pwc: recv_control_msg error -32 req 02 val 2500 [ 331.407233][ T5698] pwc: recv_control_msg error -32 req 02 val 2400 [ 331.414931][ T5698] pwc: recv_control_msg error -32 req 02 val 2600 [ 331.422891][ T5698] pwc: recv_control_msg error -32 req 02 val 2900 [ 331.430366][ T5698] pwc: recv_control_msg error -32 req 02 val 2800 [ 331.437706][ T5698] pwc: recv_control_msg error -32 req 04 val 1100 [ 331.446973][ T5360] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.457906][ T9071] syzkaller0: entered promiscuous mode [ 331.458084][ T5360] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 331.472680][ T9071] syzkaller0: entered allmulticast mode [ 331.483454][ T8303] ums-realtek 5-1:166.34: probe with driver ums-realtek failed with error -5 [ 331.501926][ T5698] pwc: Registered as video103. [ 331.512320][ T5698] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input46 [ 331.525100][ T5360] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.556292][ T5360] usb 1-1: config 0 descriptor?? [ 331.572973][ T5360] pwc: Askey VC010 type 2 USB webcam detected. [ 331.619963][ T8303] uvcvideo 5-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 331.639309][ T8303] uvcvideo 5-1:166.34: No valid video chain found. [ 331.666176][ T8303] usb 5-1: USB disconnect, device number 42 [ 331.773347][ T5698] usb 2-1: USB disconnect, device number 47 [ 331.895213][ T9076] netlink: 'syz.3.956': attribute type 12 has an invalid length. [ 331.993466][ T5360] pwc: recv_control_msg error -32 req 02 val 2b00 [ 332.005278][ T5360] pwc: recv_control_msg error -32 req 02 val 2700 [ 332.018586][ T5360] pwc: recv_control_msg error -32 req 02 val 2c00 [ 332.028616][ T5360] pwc: recv_control_msg error -32 req 04 val 1000 [ 332.043418][ T5360] pwc: recv_control_msg error -32 req 04 val 1300 [ 332.056349][ T5360] pwc: recv_control_msg error -32 req 04 val 1400 [ 332.070823][ T5360] pwc: recv_control_msg error -32 req 02 val 2000 [ 332.082371][ T5360] pwc: recv_control_msg error -32 req 02 val 2100 [ 332.096697][ T5360] pwc: recv_control_msg error -32 req 04 val 1500 [ 332.312834][ T5360] pwc: recv_control_msg error -71 req 02 val 2400 [ 332.330494][ T5360] pwc: recv_control_msg error -71 req 02 val 2600 [ 332.337716][ T5360] pwc: recv_control_msg error -71 req 02 val 2900 [ 332.348746][ T9081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.957'. [ 332.358562][ T5360] pwc: recv_control_msg error -71 req 02 val 2800 [ 332.367846][ T5360] pwc: recv_control_msg error -71 req 04 val 1100 [ 332.383518][ T5360] pwc: recv_control_msg error -71 req 04 val 1200 [ 332.392876][ T9081] macvtap2: entered promiscuous mode [ 332.403864][ T5360] pwc: Registered as video103. [ 332.411941][ T9081] syz_tun: entered promiscuous mode [ 332.425568][ T5360] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input47 [ 332.440213][ T9081] macvtap2: entered allmulticast mode [ 332.462370][ T9081] syz_tun: entered allmulticast mode [ 332.472939][ T5360] usb 1-1: USB disconnect, device number 39 [ 332.572011][ T9082] syz_tun: left allmulticast mode [ 332.601539][ T9082] syz_tun: left promiscuous mode [ 332.620619][ T9082] macvtap2: left promiscuous mode [ 332.633119][ T9082] macvtap2: left allmulticast mode [ 332.677624][ T9088] syzkaller0: entered promiscuous mode [ 332.688935][ T9088] syzkaller0: entered allmulticast mode [ 332.825196][ T9091] syzkaller0: entered promiscuous mode [ 332.838189][ T9091] syzkaller0: entered allmulticast mode [ 333.036647][ T9100] syzkaller0: entered promiscuous mode [ 333.042882][ T9100] syzkaller0: entered allmulticast mode [ 333.186623][ T9103] tap0: tun_chr_ioctl cmd 1074025677 [ 333.192998][ T9103] tap0: linktype set to 825 [ 333.209292][ T9044] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 333.379291][ T9044] usb 2-1: Using ep0 maxpacket: 8 [ 333.394549][ T9044] usb 2-1: unable to get BOS descriptor or descriptor too short [ 333.411641][ T9044] usb 2-1: config 140 has an invalid interface number: 182 but max is 1 [ 333.422598][ T9044] usb 2-1: config 140 has no interface number 1 [ 333.433615][ T9044] usb 2-1: config 140 interface 182 has no altsetting 0 [ 333.453419][ T9044] usb 2-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 333.467110][ T9044] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.476823][ T9044] usb 2-1: Product: syz [ 333.487010][ T9044] usb 2-1: Manufacturer: syz [ 333.493227][ T9044] usb 2-1: SerialNumber: syz [ 333.499248][ T5730] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 333.659720][ T5730] usb 5-1: Using ep0 maxpacket: 8 [ 333.674709][ T5730] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.699454][ T5730] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.714709][ T5730] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 333.744619][ T5730] usb 5-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 333.753951][ T9044] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 333.811862][ T5730] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.858012][ T5730] usb 5-1: config 0 descriptor?? [ 334.218327][ T9120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.970'. [ 334.301786][ T5730] kye 0003:0458:4018.001E: unknown main item tag 0x0 [ 334.333006][ T5730] kye 0003:0458:4018.001E: unknown main item tag 0x0 [ 334.365993][ T5730] kye 0003:0458:4018.001E: unknown main item tag 0x0 [ 334.387072][ T5730] kye 0003:0458:4018.001E: unknown main item tag 0x0 [ 334.399051][ T9044] usb 2-1: reset high-speed USB device number 48 using dummy_hcd [ 334.417235][ T5730] kye 0003:0458:4018.001E: unknown main item tag 0x0 [ 334.482289][ T5730] kye 0003:0458:4018.001E: hidraw0: USB HID v0.07 Device [HID 0458:4018] on usb-dummy_hcd.4-1/input0 [ 334.542731][ T9104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.965'. [ 334.616251][ T9095] syzkaller0: entered promiscuous mode [ 334.650846][ T5730] usb 5-1: USB disconnect, device number 43 [ 334.678309][ T9095] syzkaller0: entered allmulticast mode [ 334.840229][ T9125] fido_id[9125]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 334.870107][ T9095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.939928][ T9095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.964984][ T9095] netlink: 392 bytes leftover after parsing attributes in process `syz.1.962'. [ 335.121920][ T9044] usb 2-1: unable to get BOS descriptor or descriptor too short [ 335.155514][ T9044] usb 2-1: device firmware changed [ 335.171275][ T9044] usb 2-1: [ueagle-atm] pre-firmware device, uploading firmware [ 335.191587][ T9044] usb 2-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 335.217814][ T9044] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 335.242526][ T9044] usb 2-1: [ueagle-atm] pre-firmware device, uploading firmware [ 335.262105][ T9044] usb 2-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 335.285826][ T9044] usb 2-1: USB disconnect, device number 48 [ 335.308581][ T9044] usb 2-1: [ueagle-atm] ADSL device removed [ 336.135021][ T9149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.976'. [ 336.459015][ T5730] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 336.659573][ T5730] usb 4-1: Using ep0 maxpacket: 8 [ 336.676704][ T5730] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 336.717355][ T5730] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x47, changing to 0x7 [ 336.763760][ T5730] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 64256, setting to 64 [ 336.804418][ T5730] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 336.856609][ T5730] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 336.886385][ T5730] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.925812][ T5730] usb 4-1: Product: syz [ 336.935948][ T5730] usb 4-1: Manufacturer: syz [ 336.959599][ T5730] usb 4-1: SerialNumber: syz [ 336.987464][ T5730] usb 4-1: config 0 descriptor?? [ 337.201969][ T9154] syzkaller0: entered promiscuous mode [ 337.224827][ T9154] syzkaller0: entered allmulticast mode [ 337.250072][ T5730] usb 4-1: USB disconnect, device number 45 [ 337.545310][ T9159] netlink: 4 bytes leftover after parsing attributes in process `syz.4.978'. [ 337.677454][ T9161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.979'. [ 337.691280][ T9162] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 337.739718][ T9161] bond0: option arp_all_targets: invalid value (53) [ 338.285164][ T9176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.330779][ T9176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.624365][ T9178] tap0: tun_chr_ioctl cmd 1074025677 [ 338.649459][ T9178] tap0: linktype set to 825 [ 339.392497][ T5730] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 339.488152][ T9183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.522426][ T9183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.578946][ T5730] usb 4-1: Using ep0 maxpacket: 8 [ 339.601305][ T5730] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.614555][ T5730] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.626710][ T5730] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 339.641664][ T5730] usb 4-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 339.659004][ T5730] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.715459][ T5730] usb 4-1: config 0 descriptor?? [ 339.768593][ T9183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.801081][ T9183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.872095][ T9183] syzkaller0: entered promiscuous mode [ 339.890772][ T9183] syzkaller0: entered allmulticast mode [ 340.008459][ T9183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.040718][ T9183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.064568][ T9183] netlink: 392 bytes leftover after parsing attributes in process `syz.2.985'. [ 340.158686][ T5730] kye 0003:0458:4018.001F: unknown main item tag 0x0 [ 340.206348][ T5730] kye 0003:0458:4018.001F: unknown main item tag 0x0 [ 340.232196][ T5730] kye 0003:0458:4018.001F: unknown main item tag 0x0 [ 340.256482][ T5730] kye 0003:0458:4018.001F: unknown main item tag 0x0 [ 340.280637][ T5730] kye 0003:0458:4018.001F: unknown main item tag 0x0 [ 340.319241][ T5730] kye 0003:0458:4018.001F: hidraw0: USB HID v0.07 Device [HID 0458:4018] on usb-dummy_hcd.3-1/input0 [ 340.420742][ T9181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.984'. [ 340.499580][ T5632] usb 4-1: USB disconnect, device number 46 [ 340.546961][ T9193] fido_id[9193]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 340.819031][ T9036] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 340.898687][ T9201] syzkaller0: entered promiscuous mode [ 340.904685][ T9201] syzkaller0: entered allmulticast mode [ 340.992264][ T9036] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 341.038962][ T9036] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.084131][ T9036] usb 1-1: Product: syz [ 341.102635][ T9036] usb 1-1: Manufacturer: syz [ 341.141684][ T9036] usb 1-1: SerialNumber: syz [ 341.498499][ T9202] block device autoloading is deprecated and will be removed. [ 341.536037][ T9216] kAFS: unable to lookup cell '(,c¾Ì' [ 341.658932][ T5730] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 341.673334][ T9036] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 341.700490][ T9036] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 341.723228][ T9036] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 341.735544][ T9036] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 341.745331][ T9036] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 341.757964][ T9036] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 341.777207][ T9036] usb 1-1: USB disconnect, device number 40 [ 341.852084][ T5730] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.874030][ T5730] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 341.892196][ T5730] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 341.910189][ T5730] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.931673][ T5730] usb 4-1: config 0 descriptor?? [ 341.954941][ T5730] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 341.968965][ T5730] dvb-usb: bulk message failed: -22 (3/0) [ 341.988469][ T5730] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 342.014767][ T5730] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 342.034569][ T5730] usb 4-1: media controller created [ 342.051822][ T5730] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 342.096224][ T5730] dvb-usb: bulk message failed: -22 (6/0) [ 342.122412][ T5730] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 342.155275][ T5730] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input48 [ 342.198312][ T5730] dvb-usb: schedule remote query interval to 150 msecs. [ 342.216376][ T5730] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 342.234840][ T9209] dtv5100: wlen = 3d, aborting. [ 342.371438][ T5730] dvb-usb: bulk message failed: -22 (1/0) [ 342.400583][ T5730] dvb-usb: error while querying for an remote control event. [ 342.545620][ T9225] warning: `syz.0.995' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 342.620268][ T8303] dvb-usb: bulk message failed: -22 (1/0) [ 342.626665][ T8303] dvb-usb: error while querying for an remote control event. [ 342.768990][ T5730] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 342.800692][ T8303] dvb-usb: bulk message failed: -22 (1/0) [ 342.816081][ T8303] dvb-usb: error while querying for an remote control event. [ 342.854786][ T8303] usb 4-1: USB disconnect, device number 47 [ 342.940309][ T5730] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 342.981040][ T5730] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.022694][ T8303] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 343.038526][ T5730] usb 1-1: config 0 descriptor?? [ 343.064399][ T5730] pegasus 1-1:0.0: Missing or invalid endpoints [ 343.512794][ T9241] tap0: tun_chr_ioctl cmd 1074025677 [ 343.522866][ T9241] tap0: linktype set to 825 [ 343.668945][ T8303] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 343.803605][ T9246] syzkaller0: entered promiscuous mode [ 343.816134][ T9246] syzkaller0: entered allmulticast mode [ 343.828995][ T8303] usb 5-1: Using ep0 maxpacket: 8 [ 343.854527][ T8303] usb 5-1: unable to get BOS descriptor or descriptor too short [ 343.869361][ T8303] usb 5-1: config 140 has an invalid interface number: 182 but max is 1 [ 343.880826][ T8303] usb 5-1: config 140 has no interface number 1 [ 343.900824][ T8303] usb 5-1: config 140 interface 182 has no altsetting 0 [ 343.921326][ T8303] usb 5-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 343.938147][ T8303] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.955315][ T8303] usb 5-1: Product: syz [ 343.961396][ T8303] usb 5-1: Manufacturer: syz [ 343.969695][ T8303] usb 5-1: SerialNumber: syz [ 344.147794][ T9248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.197286][ T8303] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 344.199753][ T9248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.264877][ T9248] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 344.299882][ T9248] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1001'. [ 344.778989][ T5730] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 344.871578][ T8303] usb 5-1: reset high-speed USB device number 44 using dummy_hcd [ 344.928959][ T5730] usb 2-1: Using ep0 maxpacket: 8 [ 344.946210][ T5730] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.959064][ T5730] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.969239][ T5730] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 344.984362][ T5730] usb 2-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 344.994700][ T9255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.995652][ T9255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.004541][ T5730] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.030795][ T5730] usb 2-1: config 0 descriptor?? [ 345.065318][ T9243] syzkaller0: entered promiscuous mode [ 345.073279][ T9243] syzkaller0: entered allmulticast mode [ 345.101619][ T9243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.116641][ T9243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.128720][ T9243] netlink: 392 bytes leftover after parsing attributes in process `syz.4.999'. [ 345.183302][ T8303] usb 5-1: unable to get BOS descriptor or descriptor too short [ 345.204157][ T8303] usb 5-1: device firmware changed [ 345.211523][ T8303] usb 5-1: [ueagle-atm] pre-firmware device, uploading firmware [ 345.223131][ T8303] usb 5-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 345.236468][ T8303] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 345.247113][ T8303] usb 5-1: [ueagle-atm] pre-firmware device, uploading firmware [ 345.255462][ T8303] usb 5-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 345.271507][ T8303] usb 5-1: USB disconnect, device number 44 [ 345.286408][ T8303] usb 5-1: [ueagle-atm] ADSL device removed [ 345.373813][ T9257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.385007][ T9257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.412473][ T30] audit: type=1326 audit(1778588068.139:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9256 comm="syz.2.1005" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f01c code=0x7ffc0000 [ 345.437673][ T30] audit: type=1326 audit(1778588068.139:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9256 comm="syz.2.1005" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf706f01c code=0x7ffc0000 [ 345.440435][ T9257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.473188][ T9257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.490379][ T5730] kye 0003:0458:4018.0020: unknown main item tag 0x0 [ 345.507807][ T5730] kye 0003:0458:4018.0020: unknown main item tag 0x0 [ 345.516666][ T30] audit: type=1326 audit(1778588068.139:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9256 comm="syz.2.1005" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f01c code=0x7ffc0000 [ 345.550014][ T5730] kye 0003:0458:4018.0020: unknown main item tag 0x0 [ 345.561226][ T5730] kye 0003:0458:4018.0020: unknown main item tag 0x0 [ 345.568058][ T5730] kye 0003:0458:4018.0020: unknown main item tag 0x0 [ 345.575238][ T30] audit: type=1326 audit(1778588068.139:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9256 comm="syz.2.1005" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf706f01c code=0x7ffc0000 [ 345.590773][ T9036] usb 1-1: USB disconnect, device number 41 [ 345.623689][ T5730] kye 0003:0458:4018.0020: hidraw0: USB HID v0.07 Device [HID 0458:4018] on usb-dummy_hcd.1-1/input0 [ 345.648321][ T30] audit: type=1326 audit(1778588068.149:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9256 comm="syz.2.1005" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f01c code=0x7ffc0000 [ 345.688697][ T9250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1002'. [ 345.725331][ T5632] usb 2-1: USB disconnect, device number 49 [ 345.748575][ T30] audit: type=1326 audit(1778588068.149:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9256 comm="syz.2.1005" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf706f01c code=0x7ffc0000 [ 345.854814][ T30] audit: type=1326 audit(1778588068.149:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9256 comm="syz.2.1005" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f01c code=0x7ffc0000 [ 345.915055][ T9260] fido_id[9260]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 345.940103][ T30] audit: type=1326 audit(1778588068.149:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9256 comm="syz.2.1005" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf706f01c code=0x7ffc0000 [ 345.966784][ T30] audit: type=1326 audit(1778588068.149:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9256 comm="syz.2.1005" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f01c code=0x7ffc0000 [ 346.019063][ T30] audit: type=1326 audit(1778588068.159:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9256 comm="syz.2.1005" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f01c code=0x7ffc0000 [ 346.049797][ T9198] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 346.198932][ T5632] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 346.219079][ T9198] usb 4-1: Using ep0 maxpacket: 16 [ 346.227393][ T9198] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.239018][ T9198] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 346.256661][ T9198] usb 4-1: config 0 interface 0 has no altsetting 0 [ 346.286850][ T9198] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 346.324189][ T9198] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.351965][ T5632] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 346.371494][ T9198] usb 4-1: config 0 descriptor?? [ 346.376974][ T5632] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 346.390171][ T5632] usb 1-1: config 0 interface 0 has no altsetting 0 [ 346.519566][ T5632] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 346.545034][ T5632] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 346.589264][ T5632] usb 1-1: Product: syz [ 346.594992][ T5632] usb 1-1: Manufacturer: syz [ 346.666622][ T5632] usb 1-1: SerialNumber: syz [ 346.706146][ T5632] usb 1-1: config 0 descriptor?? [ 346.749839][ T5632] usb 1-1: selecting invalid altsetting 0 [ 346.809197][ T9036] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 347.002073][ T9036] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 347.010606][ T9036] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 347.019511][ T9036] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 347.028582][ T9036] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 347.042681][ T9269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.060729][ T9036] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 347.087194][ T9269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.116299][ T9036] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 347.162173][ T9036] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 347.179867][ T9036] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.198724][ T5730] usb 1-1: USB disconnect, device number 42 [ 347.225261][ T9036] usb 2-1: config 0 descriptor?? [ 347.271718][ T9278] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 347.508601][ T9036] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 50 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 347.715093][ C1] usblp0: nonzero read bulk status received: -71 [ 347.726627][ T9278] usblp0: error -71 reading from printer [ 347.747766][ C1] usblp0: nonzero read bulk status received: -71 [ 347.758578][ T9036] usb 2-1: USB disconnect, device number 50 [ 347.810012][ T9036] usblp0: removed [ 348.108113][ T9281] syzkaller0: entered promiscuous mode [ 348.118618][ T9281] syzkaller0: entered allmulticast mode [ 348.489275][ T9036] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 348.522688][ T9265] IPVS: starting estimator thread 0... [ 348.551603][ T9295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1015'. [ 348.571177][ T9295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1015'. [ 348.639341][ T9297] IPVS: using max 29 ests per chain, 69600 per kthread [ 348.650597][ T9292] tap0: tun_chr_ioctl cmd 1074025677 [ 348.660056][ T9292] tap0: linktype set to 825 [ 348.673349][ T9036] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 348.701352][ T9036] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 348.737135][ T9036] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 348.776618][ T9198] usbhid 4-1:0.0: can't add hid device: -71 [ 348.789414][ T9198] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 348.820935][ T9036] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 348.837416][ T9036] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 348.851708][ T9198] usb 4-1: USB disconnect, device number 48 [ 348.889839][ T9036] usb 1-1: Product: syz [ 348.914448][ T9036] usb 1-1: Manufacturer: syz [ 348.947028][ T9036] usb 1-1: SerialNumber: syz [ 349.295549][ T9036] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 43 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 349.459118][ T5730] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 349.530829][ T8303] usb 1-1: USB disconnect, device number 43 [ 349.556983][ T8303] usblp0: removed [ 349.678656][ T5730] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 349.689403][ T8173] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 349.707707][ T5730] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 349.729045][ T9036] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 349.810707][ T5730] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 349.846747][ T5730] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 349.883676][ T5730] usb 2-1: SerialNumber: syz [ 349.906114][ T8173] usb 4-1: Using ep0 maxpacket: 8 [ 349.939003][ T8173] usb 4-1: unable to get BOS descriptor or descriptor too short [ 349.962611][ T8173] usb 4-1: config 140 has an invalid interface number: 182 but max is 1 [ 349.993506][ T8173] usb 4-1: config 140 has no interface number 1 [ 350.004550][ T9036] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 350.026555][ T9036] usb 5-1: config 0 has no interface number 0 [ 350.039133][ T8173] usb 4-1: config 140 interface 182 has no altsetting 0 [ 350.064925][ T8173] usb 4-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 350.092902][ T8173] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.123805][ T8173] usb 4-1: Product: syz [ 350.135815][ T9036] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 350.149641][ T8173] usb 4-1: Manufacturer: syz [ 350.158708][ T9036] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.176852][ T8173] usb 4-1: SerialNumber: syz [ 350.198825][ T9036] usb 5-1: Product: syz [ 350.229239][ T9036] usb 5-1: Manufacturer: syz [ 350.262678][ T9036] usb 5-1: SerialNumber: syz [ 350.318600][ T9036] usb 5-1: config 0 descriptor?? [ 350.445666][ T8173] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 350.666498][ T9309] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1018'. [ 350.908936][ T8173] usb 4-1: reset high-speed USB device number 49 using dummy_hcd [ 351.126985][ T9311] syzkaller0: entered promiscuous mode [ 351.148589][ T9311] syzkaller0: entered allmulticast mode [ 351.242595][ T9311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.280404][ T9311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.313063][ T9311] netlink: 392 bytes leftover after parsing attributes in process `syz.3.1019'. [ 351.439405][ T9036] dvb_usb_ec168 5-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 351.497225][ T8173] usb 4-1: unable to get BOS descriptor or descriptor too short [ 351.538393][ T8173] usb 4-1: device firmware changed [ 351.562158][ T8173] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware [ 351.583632][ T8173] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 351.622222][ T8173] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 351.646290][ T8173] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware [ 351.677554][ T8173] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 351.745143][ T8173] usb 4-1: USB disconnect, device number 49 [ 351.817072][ T8173] usb 4-1: [ueagle-atm] ADSL device removed [ 352.179610][ T9317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.201447][ T9322] binder: 9319:9322 ioctl 4018620d 0 returned -22 [ 352.259580][ T9317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.349602][ T9317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1021'. [ 352.549033][ T9036] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 352.649476][ T9265] usb 5-1: USB disconnect, device number 45 [ 352.696466][ T5730] usb 2-1: invalid UAC_HEADER (v1) [ 352.726449][ T9036] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 352.750251][ T9036] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 352.793979][ T9036] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 352.820581][ T9036] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 352.831072][ T9036] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.846118][ T9327] syzkaller0: entered promiscuous mode [ 352.852016][ T9036] usb 4-1: Product: syz [ 352.864050][ T9036] usb 4-1: Manufacturer: syz [ 352.868789][ T9327] syzkaller0: entered allmulticast mode [ 352.876142][ T9036] usb 4-1: SerialNumber: syz [ 352.915121][ T9036] cdc_ncm 4-1:1.0: skipping garbage [ 352.924546][ T9036] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 352.949012][ T9036] cdc_ncm 4-1:1.0: bind() failure [ 353.000937][ T5730] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 353.055377][ T5730] usb 2-1: USB disconnect, device number 51 [ 353.130597][ T5788] udevd[5788]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 353.215694][ T9332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.253610][ T9332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.477106][ T9332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.510187][ T9332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.545145][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 353.545159][ T30] audit: type=1326 audit(1778588076.269:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9331 comm="syz.2.1026" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f01c code=0x7ffc0000 [ 353.603074][ T30] audit: type=1326 audit(1778588076.309:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9331 comm="syz.2.1026" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f01c code=0x7ffc0000 [ 353.696417][ T30] audit: type=1326 audit(1778588076.309:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9331 comm="syz.2.1026" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=27 compat=1 ip=0xf706f01c code=0x7ffc0000 [ 353.774025][ T30] audit: type=1326 audit(1778588076.309:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9331 comm="syz.2.1026" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f01c code=0x7ffc0000 [ 353.818991][ T9036] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 353.857146][ T30] audit: type=1326 audit(1778588076.309:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9331 comm="syz.2.1026" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f01c code=0x7ffc0000 [ 353.919029][ T30] audit: type=1326 audit(1778588076.309:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9331 comm="syz.2.1026" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf706f01c code=0x7ffc0000 [ 353.983554][ T9036] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.002644][ T30] audit: type=1326 audit(1778588076.309:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9331 comm="syz.2.1026" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f01c code=0x7ffc0000 [ 354.029438][ T9036] usb 2-1: config 0 has no interfaces? [ 354.043610][ T9036] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 354.081910][ T30] audit: type=1326 audit(1778588076.309:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9331 comm="syz.2.1026" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f01c code=0x7ffc0000 [ 354.106444][ T9036] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.151350][ T9036] usb 2-1: config 0 descriptor?? [ 354.207907][ T30] audit: type=1326 audit(1778588076.309:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9331 comm="syz.2.1026" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf706f01c code=0x7ffc0000 [ 354.293009][ T30] audit: type=1326 audit(1778588076.309:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9331 comm="syz.2.1026" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f01c code=0x7ffc0000 [ 354.398610][ T5730] usb 2-1: USB disconnect, device number 52 [ 354.528591][ T9350] syzkaller0: entered promiscuous mode [ 354.538701][ T9350] syzkaller0: entered allmulticast mode [ 354.703888][ T9354] tap0: tun_chr_ioctl cmd 1074025677 [ 354.713532][ T9354] tap0: linktype set to 825 [ 355.283020][ T9036] usb 4-1: USB disconnect, device number 50 [ 355.682452][ T9365] tipc: Enabling of bearer rejected, failed to enable media [ 355.739690][ T9265] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 355.930730][ T9265] usb 4-1: Using ep0 maxpacket: 8 [ 355.971299][ T9265] usb 4-1: unable to get BOS descriptor or descriptor too short [ 356.063738][ T9265] usb 4-1: config 140 has an invalid interface number: 182 but max is 1 [ 356.117214][ T9265] usb 4-1: config 140 has no interface number 1 [ 356.144223][ T9265] usb 4-1: config 140 interface 182 has no altsetting 0 [ 356.175879][ T9265] usb 4-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 356.205176][ T9265] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.229836][ T9265] usb 4-1: Product: syz [ 356.247180][ T9265] usb 4-1: Manufacturer: syz [ 356.264173][ T9265] usb 4-1: SerialNumber: syz [ 356.518278][ T9265] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 357.009889][ T9377] syzkaller0: entered promiscuous mode [ 357.026535][ T9377] syzkaller0: entered allmulticast mode [ 357.188958][ T9265] usb 4-1: reset high-speed USB device number 51 using dummy_hcd [ 357.188987][ T5730] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 357.301267][ T9384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1038'. [ 357.392988][ T9364] syzkaller0: entered promiscuous mode [ 357.400321][ T9384] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 357.412609][ T5730] usb 2-1: Using ep0 maxpacket: 8 [ 357.419353][ T9364] syzkaller0: entered allmulticast mode [ 357.435752][ T5730] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.469811][ T5730] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.493321][ T5730] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 357.540295][ T5730] usb 2-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 357.568607][ T5730] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.582042][ T9388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.612899][ T9388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.637631][ T5730] usb 2-1: config 0 descriptor?? [ 357.693452][ T9364] netlink: 392 bytes leftover after parsing attributes in process `syz.3.1034'. [ 357.816139][ T9265] usb 4-1: unable to get BOS descriptor or descriptor too short [ 357.827981][ T9265] usb 4-1: device firmware changed [ 357.834286][ T9265] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware [ 357.857813][ T9265] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 357.895486][ T9265] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 357.935912][ T9265] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware [ 357.976901][ T9265] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 358.001646][ T5705] usb 5-1: [UEAGLE-ATM] firmware is not available [ 358.009319][ T809] usb 5-1: [UEAGLE-ATM] firmware is not available [ 358.009403][ T5719] usb 5-1: [UEAGLE-ATM] firmware is not available [ 358.016020][ T5632] usb 4-1: [UEAGLE-ATM] firmware is not available [ 358.022908][ T9] usb 4-1: [UEAGLE-ATM] firmware is not available [ 358.029073][ T9036] usb 4-1: [UEAGLE-ATM] firmware is not available [ 358.035965][ T5759] usb 5-1: [UEAGLE-ATM] firmware is not available [ 358.041942][ T5360] usb 2-1: [UEAGLE-ATM] firmware is not available [ 358.048758][ T1562] usb 1-1: [UEAGLE-ATM] firmware is not available [ 358.055451][ T5721] usb 4-1: [UEAGLE-ATM] firmware is not available [ 358.061991][ T8042] usb 5-1: [UEAGLE-ATM] firmware is not available [ 358.068139][ T5698] usb 2-1: [UEAGLE-ATM] firmware is not available [ 358.074613][ T8246] usb 5-1: [UEAGLE-ATM] firmware is not available [ 358.083172][ T5720] usb 4-1: [UEAGLE-ATM] firmware is not available [ 358.093892][ T24] usb 1-1: [UEAGLE-ATM] firmware is not available [ 358.096410][ T8303] usb 4-1: [UEAGLE-ATM] firmware is not available [ 358.100438][ T29] usb 1-1: [UEAGLE-ATM] firmware is not available [ 358.114071][ T5729] usb 5-1: [UEAGLE-ATM] firmware is not available [ 358.115335][ T8526] usb 4-1: [UEAGLE-ATM] firmware is not available [ 358.121175][ T5629] usb 5-1: [UEAGLE-ATM] firmware is not available [ 358.128341][ T5706] usb 4-1: [UEAGLE-ATM] firmware is not available [ 358.154969][ T10] usb 1-1: [UEAGLE-ATM] firmware is not available [ 358.160086][ T9265] usb 4-1: USB disconnect, device number 51 [ 358.170239][ T5730] kye 0003:0458:4018.0021: unknown main item tag 0x0 [ 358.185032][ T5730] kye 0003:0458:4018.0021: unknown main item tag 0x0 [ 358.210114][ T9265] usb 4-1: [ueagle-atm] ADSL device removed [ 358.231240][ T5730] kye 0003:0458:4018.0021: unknown main item tag 0x0 [ 358.264965][ T5730] kye 0003:0458:4018.0021: unknown main item tag 0x0 [ 358.298615][ T5730] kye 0003:0458:4018.0021: unknown main item tag 0x0 [ 358.328981][ T5730] kye 0003:0458:4018.0021: hidraw0: USB HID v0.07 Device [HID 0458:4018] on usb-dummy_hcd.1-1/input0 [ 358.361558][ T9374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1036'. [ 358.475246][ T5730] usb 2-1: USB disconnect, device number 53 [ 358.714856][ T9390] fido_id[9390]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 359.289092][ T9401] syzkaller0: entered promiscuous mode [ 359.307094][ T9401] syzkaller0: entered allmulticast mode [ 359.409619][ T5730] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 359.548961][ T8303] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 359.579239][ T5730] usb 4-1: Using ep0 maxpacket: 16 [ 359.601664][ T5730] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.636222][ T5730] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.672391][ T5730] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.690235][ T5730] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 359.721851][ T5730] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.753643][ T5730] usb 4-1: config 0 descriptor?? [ 359.760717][ T8303] usb 1-1: Using ep0 maxpacket: 32 [ 359.776071][ T8303] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.806521][ T8303] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 359.825353][ T8303] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 359.839998][ T8303] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.866680][ T8303] usb 1-1: config 0 descriptor?? [ 359.981082][ T9413] tap0: tun_chr_ioctl cmd 1074025677 [ 360.001822][ T9397] netlink: 'syz.3.1041': attribute type 11 has an invalid length. [ 360.009976][ T9413] tap0: linktype set to 825 [ 360.038500][ T9397] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1041'. [ 360.412306][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 360.412319][ T30] audit: type=1326 audit(1778588083.139:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.0.1044" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f2501c code=0x0 [ 360.989478][ T9420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.019178][ T9420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.067879][ T9420] dtv5100: wlen = 0, aborting. [ 361.747578][ T9429] syzkaller0: entered promiscuous mode [ 361.753313][ T9429] syzkaller0: entered allmulticast mode [ 361.829203][ T8526] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 361.999124][ T8526] usb 2-1: Using ep0 maxpacket: 16 [ 362.016228][ T8526] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 362.040349][ T8526] usb 2-1: config 0 has no interface number 0 [ 362.052091][ T8526] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.073122][ T9431] lo: Caught tx_queue_len zero misconfig [ 362.082567][ T8526] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 362.109059][ T8526] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.133298][ T8526] usb 2-1: config 0 descriptor?? [ 362.255459][ T5730] usbhid 4-1:0.0: can't add hid device: -71 [ 362.266012][ T5730] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 362.315449][ T5730] usb 4-1: USB disconnect, device number 52 [ 362.504348][ T8303] usb 1-1: string descriptor 0 read error: -71 [ 362.539220][ T8303] usb 1-1: USB disconnect, device number 44 [ 362.849252][ T5730] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 362.911412][ T9372] syz.4.1035 (9372): drop_caches: 3 [ 363.030913][ T5730] usb 4-1: Using ep0 maxpacket: 8 [ 363.060204][ T5730] usb 4-1: unable to get BOS descriptor or descriptor too short [ 363.105574][ T5730] usb 4-1: config 140 has an invalid interface number: 182 but max is 1 [ 363.135262][ T5730] usb 4-1: config 140 has no interface number 1 [ 363.149695][ T5730] usb 4-1: config 140 interface 182 has no altsetting 0 [ 363.171672][ T5730] usb 4-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 363.192791][ T5730] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.216079][ T5730] usb 4-1: Product: syz [ 363.226371][ T5730] usb 4-1: Manufacturer: syz [ 363.236169][ T5730] usb 4-1: SerialNumber: syz [ 363.317573][ T9443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.330790][ T9443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.348993][ T9265] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 363.371052][ T9443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1054'. [ 363.399904][ T9444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1053'. [ 363.490335][ T5730] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 363.530443][ T9265] usb 1-1: config 0 has no interfaces? [ 363.540464][ T9265] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 363.561657][ T9265] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.585120][ T9265] usb 1-1: config 0 descriptor?? [ 364.053118][ T9448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.063019][ T9448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.158951][ T5730] usb 4-1: reset high-speed USB device number 53 using dummy_hcd [ 364.362702][ T9435] syzkaller0: entered promiscuous mode [ 364.373341][ T9435] syzkaller0: entered allmulticast mode [ 364.389096][ T9265] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 364.433238][ T9435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.450276][ T9435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.461811][ T9435] netlink: 392 bytes leftover after parsing attributes in process `syz.3.1051'. [ 364.539140][ T9265] usb 5-1: Using ep0 maxpacket: 16 [ 364.551039][ T9265] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 364.574941][ T9265] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 364.585210][ T9265] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.593637][ T9265] usb 5-1: Product: syz [ 364.598517][ T9265] usb 5-1: Manufacturer: syz [ 364.604008][ T9265] usb 5-1: SerialNumber: syz [ 364.622399][ T9265] usb 5-1: config 0 descriptor?? [ 364.638043][ T5730] usb 4-1: unable to get BOS descriptor or descriptor too short [ 364.652348][ T5730] usb 4-1: device firmware changed [ 364.658641][ T5730] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware [ 364.667499][ T5730] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 364.677325][ T8303] usb 4-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 364.693145][ T9265] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 364.698649][ T8303] usb 4-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 364.722899][ T5730] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 364.752846][ T8526] usbhid 2-1:0.4: can't add hid device: -71 [ 364.759264][ T5730] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware [ 364.759439][ T5730] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 364.782556][ T9265] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 364.801807][ T5730] usb 4-1: USB disconnect, device number 53 [ 364.820594][ T8526] usbhid 2-1:0.4: probe with driver usbhid failed with error -71 [ 364.851115][ T8526] usb 2-1: USB disconnect, device number 54 [ 364.891399][ T9452] netlink: 'syz.2.1058': attribute type 4 has an invalid length. [ 364.904551][ T5730] usb 4-1: [ueagle-atm] ADSL device removed [ 365.390571][ T9461] syzkaller0: entered promiscuous mode [ 365.404338][ T9461] syzkaller0: entered allmulticast mode [ 365.454251][ T9265] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 365.519043][ T8526] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 365.536406][ T9265] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 365.545421][ T9265] em28xx 5-1:0.0: board has no eeprom [ 365.608965][ T9265] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 365.617084][ T9265] em28xx 5-1:0.0: dvb set to bulk mode. [ 365.623429][ T5706] em28xx 5-1:0.0: Binding DVB extension [ 365.655970][ T9265] usb 5-1: USB disconnect, device number 46 [ 365.672216][ T8526] usb 4-1: Using ep0 maxpacket: 32 [ 365.691549][ T8526] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 365.702031][ T9265] em28xx 5-1:0.0: Disconnecting em28xx [ 365.724134][ T8526] usb 4-1: config 0 has no interface number 0 [ 365.736386][ T8526] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 365.746890][ T8526] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.763101][ T9472] xt_bpf: check failed: parse error [ 365.772478][ T8526] usb 4-1: Product: syz [ 365.781246][ T8526] usb 4-1: Manufacturer: syz [ 365.790518][ T8526] usb 4-1: SerialNumber: syz [ 365.808034][ T8526] usb 4-1: config 0 descriptor?? [ 365.819109][ T8526] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 365.828979][ T8526] usb 4-1: selecting invalid altsetting 1 [ 365.834829][ T8526] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 365.853719][ T8526] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 365.873035][ T8526] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 365.888770][ T8526] usb 4-1: media controller created [ 365.924121][ T8526] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 365.963068][ T5706] em28xx 5-1:0.0: Registering input extension [ 365.969979][ T9265] em28xx 5-1:0.0: Closing input extension [ 366.012495][ T9265] em28xx 5-1:0.0: Freeing device [ 366.033508][ T9459] dtv5100: wlen = 0, aborting. [ 366.055346][ T8526] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 366.104010][ T8526] zl10353_read_register: readreg error (reg=127, ret==-71) [ 366.126489][ T8526] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 366.162456][ T5706] usb 1-1: USB disconnect, device number 45 [ 366.306090][ T8526] usb 4-1: USB disconnect, device number 54 [ 367.039007][ T5706] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 367.208955][ T5706] usb 2-1: Using ep0 maxpacket: 8 [ 367.220951][ T5706] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.244397][ T5706] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.246043][ T9498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.273140][ T5706] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 367.287974][ T9498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.311267][ T5706] usb 2-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 367.327301][ T5706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.346598][ T5706] usb 2-1: config 0 descriptor?? [ 367.400914][ T9499] netdevsim netdevsim4: Direct firmware load for nel/address_bits failed with error -2 [ 367.429295][ T9499] netdevsim netdevsim4: Falling back to sysfs fallback for: nel/address_bits [ 367.527896][ T9498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.547873][ T9498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.585938][ T9498] syzkaller0: entered promiscuous mode [ 367.597355][ T9498] syzkaller0: entered allmulticast mode [ 367.643107][ T9498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.663610][ T9498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.684439][ T9498] netlink: 392 bytes leftover after parsing attributes in process `syz.2.1070'. [ 367.773054][ T5706] kye 0003:0458:4018.0022: unknown main item tag 0x0 [ 367.805364][ T5706] kye 0003:0458:4018.0022: unknown main item tag 0x0 [ 367.836062][ T5706] kye 0003:0458:4018.0022: unknown main item tag 0x0 [ 367.849435][ T5706] kye 0003:0458:4018.0022: unknown main item tag 0x0 [ 367.861107][ T5706] kye 0003:0458:4018.0022: unknown main item tag 0x0 [ 367.897648][ T5706] kye 0003:0458:4018.0022: hidraw0: USB HID v0.07 Device [HID 0458:4018] on usb-dummy_hcd.1-1/input0 [ 367.913986][ T9505] netlink: 'syz.3.1072': attribute type 4 has an invalid length. [ 368.002324][ T9486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1066'. [ 368.031386][ T5706] usb 2-1: USB disconnect, device number 55 [ 368.057624][ T9509] syzkaller0: entered promiscuous mode [ 368.075581][ T9509] syzkaller0: entered allmulticast mode [ 368.193114][ T9506] fido_id[9506]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 368.571636][ T9519] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1074'. [ 370.348934][ T5706] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 370.518972][ T5706] usb 1-1: Using ep0 maxpacket: 32 [ 370.540770][ T5706] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 370.571712][ T5706] usb 1-1: config 0 has no interface number 0 [ 370.596813][ T5706] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 370.633836][ T5706] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.656004][ T5706] usb 1-1: Product: syz [ 370.660695][ T5706] usb 1-1: Manufacturer: syz [ 370.689223][ T5706] usb 1-1: SerialNumber: syz [ 370.756312][ T5706] usb 1-1: config 0 descriptor?? [ 370.799261][ T5706] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 370.838788][ T5706] usb 1-1: selecting invalid altsetting 1 [ 370.858469][ T5706] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 370.889079][ T8526] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 370.913609][ T5706] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 370.952353][ T5706] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 370.978506][ T5706] usb 1-1: media controller created [ 370.998467][ T9540] dtv5100: wlen = 0, aborting. [ 371.035785][ T5706] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 371.103982][ T8526] usb 5-1: config 0 has an invalid interface number: 74 but max is 1 [ 371.116836][ T5706] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 371.126091][ T8526] usb 5-1: config 0 has an invalid descriptor of length 252, skipping remainder of the config [ 371.138224][ T5706] zl10353_read_register: readreg error (reg=127, ret==-71) [ 371.158228][ T5706] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 371.166277][ T8526] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 371.191180][ T8526] usb 5-1: config 0 has no interface number 0 [ 371.214633][ T8526] usb 5-1: config 0 interface 74 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 371.258587][ T8526] usb 5-1: config 0 interface 74 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 371.350346][ T9553] syzkaller0: entered promiscuous mode [ 371.365488][ T9553] syzkaller0: entered allmulticast mode [ 371.388365][ T5706] usb 1-1: USB disconnect, device number 46 [ 371.494363][ T8526] usb 5-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=de.66 [ 371.532168][ T8526] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.554339][ T8526] usb 5-1: Product: syz [ 371.572169][ T8526] usb 5-1: Manufacturer: syz [ 371.587931][ T8526] usb 5-1: SerialNumber: syz [ 371.610523][ T8526] usb 5-1: config 0 descriptor?? [ 371.861152][ T9560] netlink: 'syz.0.1087': attribute type 4 has an invalid length. [ 372.028783][ T9562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1086'. [ 372.060629][ T5706] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 372.239021][ T5706] usb 4-1: Using ep0 maxpacket: 8 [ 372.255404][ T9562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1086'. [ 372.274832][ T5706] usb 4-1: unable to get BOS descriptor or descriptor too short [ 372.289772][ T5706] usb 4-1: config 140 has an invalid interface number: 182 but max is 1 [ 372.339411][ T5706] usb 4-1: config 140 has no interface number 1 [ 372.366311][ T5706] usb 4-1: config 140 interface 182 has no altsetting 0 [ 372.419316][ T5706] usb 4-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 372.435846][ T5706] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.449768][ T5706] usb 4-1: Product: syz [ 372.454536][ T5706] usb 4-1: Manufacturer: syz [ 372.476001][ T5706] usb 4-1: SerialNumber: syz [ 372.599928][ T30] audit: type=1326 audit(1778588095.309:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9567 comm="syz.2.1088" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f01c code=0x7ffc0000 [ 372.677809][ T30] audit: type=1326 audit(1778588095.359:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9567 comm="syz.2.1088" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf706f01c code=0x7ffc0000 [ 372.764677][ T5706] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 372.810129][ T30] audit: type=1326 audit(1778588095.439:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9567 comm="syz.2.1088" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f01c code=0x7ffc0000 [ 372.868863][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 372.872278][ T9562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1086'. [ 372.888456][ T5629] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 372.904193][ T30] audit: type=1326 audit(1778588095.439:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9567 comm="syz.2.1088" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f01c code=0x7ffc0000 [ 372.988988][ T30] audit: type=1326 audit(1778588095.479:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9567 comm="syz.2.1088" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf706f01c code=0x7ffc0000 [ 373.053878][ T30] audit: type=1326 audit(1778588095.479:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9567 comm="syz.2.1088" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f01c code=0x7ffc0000 [ 373.129196][ T5629] usb 2-1: Using ep0 maxpacket: 32 [ 373.146697][ T5629] usb 2-1: unable to get BOS descriptor or descriptor too short [ 373.170524][ T30] audit: type=1326 audit(1778588095.489:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9567 comm="syz.2.1088" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f01c code=0x7ffc0000 [ 373.216932][ T5629] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 373.234483][ T5629] usb 2-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 373.253512][ T30] audit: type=1326 audit(1778588095.509:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9567 comm="syz.2.1088" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf706f01c code=0x7ffc0000 [ 373.291359][ T5629] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 373.308958][ T5706] usb 4-1: reset high-speed USB device number 55 using dummy_hcd [ 373.318409][ T5629] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.342930][ T5629] usb 2-1: Product: syz [ 373.347672][ T30] audit: type=1326 audit(1778588095.529:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9567 comm="syz.2.1088" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f01c code=0x7ffc0000 [ 373.374190][ T5629] usb 2-1: Manufacturer: syz [ 373.379001][ T5629] usb 2-1: SerialNumber: syz [ 373.419809][ T30] audit: type=1326 audit(1778588095.529:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9567 comm="syz.2.1088" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf706f01c code=0x7ffc0000 [ 373.484755][ T9558] syzkaller0: entered promiscuous mode [ 373.500730][ T9558] syzkaller0: entered allmulticast mode [ 373.589171][ T5730] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 373.609556][ T9558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.663469][ T9558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.703957][ T9558] netlink: 392 bytes leftover after parsing attributes in process `syz.3.1085'. [ 373.749234][ T5730] usb 1-1: Using ep0 maxpacket: 8 [ 373.761328][ T5730] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.789086][ T5730] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.817114][ T5730] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 373.858945][ T5730] usb 1-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 373.878799][ T5730] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.894817][ T5706] usb 4-1: unable to get BOS descriptor or descriptor too short [ 373.917089][ T5706] usb 4-1: device firmware changed [ 373.932676][ T5706] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware [ 373.962386][ T5706] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 373.974333][ T5730] usb 1-1: config 0 descriptor?? [ 373.997296][ T5706] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 374.032569][ T5706] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware [ 374.079556][ T5706] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 374.137086][ T5706] usb 4-1: USB disconnect, device number 55 [ 374.188696][ T5706] usb 4-1: [ueagle-atm] ADSL device removed [ 374.351853][ T8526] cypress_m8 5-1:0.74: HID->COM RS232 Adapter converter detected [ 374.370330][ T8526] cyphidcom ttyUSB0: required endpoint is missing [ 374.402118][ T8526] usb 5-1: USB disconnect, device number 47 [ 374.434553][ T5730] kye 0003:0458:4018.0023: unknown main item tag 0x0 [ 374.465461][ T8526] cypress_m8 5-1:0.74: device disconnected [ 374.484469][ T5730] kye 0003:0458:4018.0023: unknown main item tag 0x0 [ 374.517544][ T5730] kye 0003:0458:4018.0023: unknown main item tag 0x0 [ 374.548087][ T5730] kye 0003:0458:4018.0023: unknown main item tag 0x0 [ 374.580958][ T5730] kye 0003:0458:4018.0023: unknown main item tag 0x0 [ 374.624885][ T5730] kye 0003:0458:4018.0023: hidraw0: USB HID v0.07 Device [HID 0458:4018] on usb-dummy_hcd.0-1/input0 [ 374.681852][ T9577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1089'. [ 374.762886][ T5730] usb 1-1: USB disconnect, device number 47 [ 374.920174][ T9586] fido_id[9586]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 375.408453][ T5730] usb 2-1: USB disconnect, device number 56 [ 376.019851][ T5730] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 376.189776][ T5730] usb 2-1: Using ep0 maxpacket: 32 [ 376.229411][ T5730] usb 2-1: config 0 has an invalid interface number: 43 but max is 0 [ 376.254971][ T5730] usb 2-1: config 0 has no interface number 0 [ 376.281978][ T5730] usb 2-1: config 0 interface 43 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 376.315219][ T5730] usb 2-1: config 0 interface 43 has no altsetting 0 [ 376.354864][ T5730] usb 2-1: New USB device found, idVendor=0499, idProduct=1507, bcdDevice=15.f4 [ 376.380016][ T5730] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.408412][ T5730] usb 2-1: Product: syz [ 376.426402][ T5730] usb 2-1: Manufacturer: syz [ 376.444931][ T5730] usb 2-1: SerialNumber: syz [ 376.464303][ T5730] usb 2-1: config 0 descriptor?? [ 376.770830][ T9612] syzkaller0: entered promiscuous mode [ 376.793661][ T9612] syzkaller0: entered allmulticast mode [ 377.200477][ T5629] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 377.401094][ T5629] usb 4-1: Using ep0 maxpacket: 16 [ 377.428089][ T5629] usb 4-1: unable to get BOS descriptor or descriptor too short [ 377.450272][ T5629] usb 4-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 39, changing to 9 [ 377.482321][ T5629] usb 4-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024 [ 377.513160][ T5629] usb 4-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 377.553112][ T5629] usb 4-1: config 1 interface 0 has no altsetting 0 [ 377.567640][ T5629] usb 4-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 377.577459][ T5629] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.595746][ T5629] usb 4-1: Product: syz [ 377.602954][ T5629] usb 4-1: Manufacturer: syz [ 377.619253][ T5629] usb 4-1: SerialNumber: syz [ 377.632918][ T9614] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 377.894375][ T5629] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input50 [ 377.934384][ T5730] usb 2-1: USB disconnect, device number 57 [ 378.053253][ T5788] udevd[5788]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.43/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 378.248981][ T5706] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 378.299020][ T8246] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 378.408972][ T5706] usb 1-1: Using ep0 maxpacket: 32 [ 378.445107][ T5706] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 378.462925][ T5706] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 378.486162][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.492733][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.508301][ T5706] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 378.508556][ T8246] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 378.577848][ T5706] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 378.589757][ T8246] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.629073][ T5706] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 378.642331][ T8246] usb 5-1: Product: syz [ 378.669051][ T8246] usb 5-1: Manufacturer: syz [ 378.680943][ T5706] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 378.697971][ T8246] usb 5-1: SerialNumber: syz [ 378.736100][ T8526] usb 4-1: USB disconnect, device number 56 [ 378.736351][ C0] bcm5974 4-1:1.0: trackpad urb failed: -19 [ 378.777922][ T5706] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 378.797676][ T9613] bcm5974 4-1:1.0: could not read from device [ 378.814755][ T5706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.823037][ T8246] usb 5-1: config 0 descriptor?? [ 378.882613][ T5706] usb 1-1: config 0 descriptor?? [ 378.887954][ T8246] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 378.956829][ T8246] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 378.992392][ T8246] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 379.028016][ T8246] usb 5-1: media controller created [ 379.062443][ T9626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.073651][ T9626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.077105][ T8246] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 379.090176][ T9619] ------------[ cut here ]------------ [ 379.090190][ T9619] usb 3-1: BOGUS control dir, pipe 80002e80 doesn't match bRequestType c0 [ 379.090218][ T9619] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1053/0x18b0, CPU#1: syz.4.1100/9619 [ 379.114854][ T9619] Modules linked in: [ 379.119113][ T9619] CPU: 1 UID: 0 PID: 9619 Comm: syz.4.1100 Not tainted syzkaller #0 PREEMPT(full) [ 379.128815][ T9619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 379.139225][ T9619] RIP: 0010:usb_submit_urb+0x1115/0x18b0 [ 379.144979][ T9619] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c1 f2 ff ff 89 e9 [ 379.165290][ T9619] RSP: 0018:ffffc90005017748 EFLAGS: 00010246 [ 379.172519][ T9619] RAX: 0000000000000000 RBX: ffff88801f7fa300 RCX: 0000000080002e80 [ 379.180967][ T9619] RDX: ffff8880536cde00 RSI: ffffffff8c808de0 RDI: ffffffff903e1e60 [ 379.189448][ T9619] RBP: 1ffff110042d1e60 R08: 00000000000000c0 R09: 0000000000000000 [ 379.197919][ T9619] R10: ffffc90005017840 R11: fffff52000a02f14 R12: ffff8880780f4100 [ 379.206079][ T9619] R13: ffff88802168f300 R14: 0000000080002e80 R15: ffff8880536cde00 [ 379.214394][ T9619] FS: 0000000000000000(0000) GS:ffff88812538d000(0063) knlGS:00000000f53cdb40 [ 379.223500][ T9619] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 379.230312][ T9619] CR2: 00000000f545aedc CR3: 000000002a572000 CR4: 00000000003526f0 [ 379.238361][ T9619] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 379.246435][ T9619] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 379.254555][ T9619] Call Trace: [ 379.257915][ T9619] [ 379.260991][ T9619] ? __init_swait_queue_head+0xa9/0x150 [ 379.266806][ T9619] usb_start_wait_urb+0x13f/0x5b0 [ 379.272861][ T9619] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 379.278502][ T9619] usb_control_msg+0x234/0x3e0 [ 379.283442][ T9619] dtv5100_i2c_msg+0x231/0x2f0 [ 379.288303][ T9619] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 379.293307][ T9619] __i2c_transfer+0x79a/0x1f70 [ 379.298143][ T9619] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 379.304076][ T9619] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 379.310022][ T9619] ? i2c_transfer+0xc8/0x2d0 [ 379.314684][ T9619] i2c_transfer+0x1cc/0x2d0 [ 379.319314][ T9619] i2cdev_ioctl_rdwr+0x460/0x740 [ 379.324336][ T9619] compat_i2cdev_ioctl+0x59f/0x5c0 [ 379.329561][ T9619] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 379.335261][ T9619] ? __fget_files+0x3a0/0x420 [ 379.340044][ T9619] ? __fget_files+0x2a/0x420 [ 379.344718][ T9619] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 379.350468][ T9619] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 379.356032][ T9619] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 379.362231][ T9619] ? clockevents_program_event+0x491/0x630 [ 379.368119][ T9619] ? __se_sys_futex_time32+0x3ab/0x440 [ 379.373703][ T9619] ? rcu_is_watching+0x15/0xb0 [ 379.378562][ T9619] __do_fast_syscall_32+0x229/0x6e0 [ 379.384263][ T9619] ? do_fast_syscall_32+0x33/0x70 [ 379.389401][ T9619] ? irqentry_exit+0x10f/0x760 [ 379.394248][ T9619] do_fast_syscall_32+0x33/0x70 [ 379.399251][ T9619] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 379.405724][ T9619] RIP: 0023:0xf6fdf01c [ 379.409923][ T9619] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 379.429645][ T9619] RSP: 002b:00000000f53cd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 379.438153][ T9619] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000707 [ 379.446255][ T9619] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 379.454342][ T9619] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 379.462418][ T9619] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 379.470499][ T9619] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 379.478538][ T9619] [ 379.481661][ T9619] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 379.488984][ T9619] CPU: 1 UID: 0 PID: 9619 Comm: syz.4.1100 Not tainted syzkaller #0 PREEMPT(full) [ 379.498303][ T9619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 379.508409][ T9619] Call Trace: [ 379.511732][ T9619] [ 379.514712][ T9619] vpanic+0x56c/0xa60 [ 379.518742][ T9619] ? __pfx__printk+0x10/0x10 [ 379.523650][ T9619] ? __pfx_vpanic+0x10/0x10 [ 379.528204][ T9619] ? is_bpf_text_address+0x292/0x2b0 [ 379.533531][ T9619] ? is_bpf_text_address+0x26/0x2b0 [ 379.538781][ T9619] panic+0xc5/0xd0 [ 379.542553][ T9619] ? __pfx_panic+0x10/0x10 [ 379.547040][ T9619] __warn+0x315/0x4c0 [ 379.551066][ T9619] ? usb_submit_urb+0x1053/0x18b0 [ 379.556138][ T9619] ? usb_submit_urb+0x1053/0x18b0 [ 379.561205][ T9619] __report_bug+0x29a/0x540 [ 379.565766][ T9619] ? usb_submit_urb+0x1053/0x18b0 [ 379.570838][ T9619] ? __pfx___report_bug+0x10/0x10 [ 379.575920][ T9619] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 379.581776][ T9619] ? lockdep_hardirqs_on+0x7a/0x110 [ 379.587026][ T9619] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 379.592968][ T9619] ? stack_depot_save_flags+0x3f3/0x810 [ 379.598552][ T9619] report_bug_entry+0x19a/0x290 [ 379.603473][ T9619] ? usb_submit_urb+0x1115/0x18b0 [ 379.608525][ T9619] ? usb_submit_urb+0x111a/0x18b0 [ 379.613576][ T9619] handle_bug+0xce/0x200 [ 379.617856][ T9619] exc_invalid_op+0x1a/0x50 [ 379.622393][ T9619] asm_exc_invalid_op+0x1a/0x20 [ 379.627284][ T9619] RIP: 0010:usb_submit_urb+0x1115/0x18b0 [ 379.632940][ T9619] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c1 f2 ff ff 89 e9 [ 379.652577][ T9619] RSP: 0018:ffffc90005017748 EFLAGS: 00010246 [ 379.658683][ T9619] RAX: 0000000000000000 RBX: ffff88801f7fa300 RCX: 0000000080002e80 [ 379.666686][ T9619] RDX: ffff8880536cde00 RSI: ffffffff8c808de0 RDI: ffffffff903e1e60 [ 379.674681][ T9619] RBP: 1ffff110042d1e60 R08: 00000000000000c0 R09: 0000000000000000 [ 379.682681][ T9619] R10: ffffc90005017840 R11: fffff52000a02f14 R12: ffff8880780f4100 [ 379.690673][ T9619] R13: ffff88802168f300 R14: 0000000080002e80 R15: ffff8880536cde00 [ 379.698682][ T9619] ? usb_submit_urb+0x10a4/0x18b0 [ 379.703736][ T9619] ? __init_swait_queue_head+0xa9/0x150 [ 379.709316][ T9619] usb_start_wait_urb+0x13f/0x5b0 [ 379.714364][ T9619] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 379.719947][ T9619] usb_control_msg+0x234/0x3e0 [ 379.724734][ T9619] dtv5100_i2c_msg+0x231/0x2f0 [ 379.729537][ T9619] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 379.734422][ T9619] __i2c_transfer+0x79a/0x1f70 [ 379.739209][ T9619] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 379.745054][ T9619] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 379.750897][ T9619] ? i2c_transfer+0xc8/0x2d0 [ 379.755510][ T9619] i2c_transfer+0x1cc/0x2d0 [ 379.760033][ T9619] i2cdev_ioctl_rdwr+0x460/0x740 [ 379.764997][ T9619] compat_i2cdev_ioctl+0x59f/0x5c0 [ 379.770134][ T9619] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 379.775790][ T9619] ? __fget_files+0x3a0/0x420 [ 379.780485][ T9619] ? __fget_files+0x2a/0x420 [ 379.785097][ T9619] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 379.790675][ T9619] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 379.796164][ T9619] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 379.802171][ T9619] ? clockevents_program_event+0x491/0x630 [ 379.808006][ T9619] ? __se_sys_futex_time32+0x3ab/0x440 [ 379.813500][ T9619] ? rcu_is_watching+0x15/0xb0 [ 379.818558][ T9619] __do_fast_syscall_32+0x229/0x6e0 [ 379.823781][ T9619] ? do_fast_syscall_32+0x33/0x70 [ 379.828838][ T9619] ? irqentry_exit+0x10f/0x760 [ 379.833635][ T9619] do_fast_syscall_32+0x33/0x70 [ 379.838520][ T9619] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 379.844869][ T9619] RIP: 0023:0xf6fdf01c [ 379.848965][ T9619] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 379.868599][ T9619] RSP: 002b:00000000f53cd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 379.877036][ T9619] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000707 [ 379.885027][ T9619] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 379.893017][ T9619] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 379.901010][ T9619] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 379.909003][ T9619] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 379.917005][ T9619] [ 379.920868][ T9619] Kernel Offset: disabled [ 379.925198][ T9619] Rebooting in 86400 seconds..