last executing test programs: 6.906781018s ago: executing program 3 (id=8436): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002400128009000100626f6e64000000001400028005000100060000000800", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 6.655458526s ago: executing program 3 (id=8438): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f0000000640)=ANY=[], 0x1, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x200) 5.77102646s ago: executing program 3 (id=8454): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20000c40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xc, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x202, 0x5, 0x1000, 0x8}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r3, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)='\'', 0x14}], 0x1}, 0x4011) 5.548988892s ago: executing program 3 (id=8456): r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000280)={0x0, [[0x7ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2], [0x0, 0x40000000, 0xfffffffd], [0x0, 0x20000232, 0x200006, 0x0, 0x0, 0x0, 0x1]], '\x00', [{0x4000000, 0xfffffffe, 0x1}, {0x7, 0x4}, {}, {0x0, 0x1}, {0x400000}, {}, {0x0, 0x400}, {}, {0x0, 0x9}, {0x7ff}, {0x8, 0xfffffffc}]}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r3 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), r6) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002bbd70f6000000", @ANYRES32=r7, @ANYBLOB="48005a8040000180140003000400ff0100040008396a08000d000300140003000200080007000180"], 0x64}}, 0x2000c000) close(r5) close(r3) r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_STAB={0x4}]}, 0x3c}}, 0x4000080) write$cgroup_int(r9, &(0x7f0000001480)=0x2, 0x12) open_tree(0xffffffffffffff9c, 0x0, 0x89901) splice(r1, 0x0, r3, 0x0, 0x1100000000f336, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix={0x0, 0x0, 0x42474752, 0x0, 0x0, 0x0, 0x6, 0xfeedcafe, 0x3, 0x0, 0x1, 0x5}}) r12 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r12, &(0x7f0000000240)=[{&(0x7f0000000000)=""/209, 0xd1}], 0x1, 0x65e, 0x2) 5.045957984s ago: executing program 2 (id=8462): r0 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000880)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b02000105200809c04e143900000000092401fdff0811004708240a0000097f000904010000010220000904010101010220000905010940"], 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x500a}}}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, 0x0, 0x0) 4.593578404s ago: executing program 3 (id=8466): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0x2b}, {0x3, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x9, 0x8, 'W`=', 0x3, 0x8}, {@none, 0x6, 0x8, "6aca8c", 0x7f, 0x3}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4, 0x77, "47b405", 0x2, 0x6}]}}}, 0x2e) getdents(0xffffffffffffffff, 0x0, 0x0) 4.469723384s ago: executing program 3 (id=8468): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='veno', 0x4) sendto$inet(r2, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) r3 = userfaultfd(0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000200)=0x7) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x28, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x4}]}, 0x28}}, 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) 2.866859942s ago: executing program 2 (id=8479): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x44}], 0x1, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="04110504"], 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000bbc0)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x20000041}}], 0x1, 0xc004) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x4, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.541277959s ago: executing program 0 (id=8480): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) 2.408562942s ago: executing program 2 (id=8481): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, 0x0, 0x40004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x8070bd28, 0xfffffffd, {0x2, 0x18, 0x0, 0x0, r2}, [@IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010101}, @IFA_TARGET_NETNSID={0x8}, @IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x871ac4b30833d133}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x20008084) 2.361819219s ago: executing program 0 (id=8482): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0xee, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000100000008864470b00e000680057fb08"], 0x0) 2.358059665s ago: executing program 1 (id=8483): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b5001c008200000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa20000000000000702000000feffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.299722978s ago: executing program 0 (id=8485): syz_emit_ethernet(0x36, &(0x7f0000000680)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @timestamp}}}}, 0x0) 2.214522916s ago: executing program 2 (id=8486): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000057c00000c", @ANYBLOB="2d0529800c00f800030000000000000004006080fa003b800400df00c1becb03dbe55b6c782cebd6a7bc78a21d1bc9f3c1bd441ada5266780599eaf18965bbfcc07c2037129672275c399e1e03f8a0664d807385cc4d566f230400db800400498096d9641e8b1887b25501b11ecd71313a47df368b078d7b825bff33b9eab3964d7b2394b1950c7aeaba6014fe2cd33c89fd070ce0f1f306494a44adf6609d8ad55a5080b36b05cb0b9a57833b14fcd62c0aba0ac67f03b20e87ba6f3610a5bd1d3369ae014c8036c1e596b800991698810ff706e98871c17ad581b0695476273ac6c33a7a51d4a44a5b95684befe95ef49b03458bce89d87355f35b766b242b9f98b661269bb9255d836fb4e30d0000c72ec5561adf6112ca278273b4af42597e7bfa1f5c228f13161b34517c92bc352c017afac22d14047e6fbdc61536f9e51738ea935cb2a577ec2b788433bc13a9e976cfee267f36d988b766a29632c84c94d4cf31d780ef683293d7eacfc93f248d137affcae7cffa699237ea9c74919850dc164f1483f3f352bf7dd787191705b26936e1d090526b6ac5765df318f160cc84b15b94c662cf9261", @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.213654207s ago: executing program 1 (id=8487): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x2e8}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x14, 0x810, r0, 0xe4776000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.173860981s ago: executing program 0 (id=8488): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fc00002}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0) 2.077667299s ago: executing program 2 (id=8489): r0 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000880)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b02000105200809c04e143900000000092401fdff0811004708240a0000097f000904010000010220000904010101010220000905010940"], 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x500a}}}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, 0x0, 0x0) 2.021340527s ago: executing program 4 (id=8490): prlimit64(0x0, 0xe, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x1b, 0xa, 0x4}) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x1698, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0x8}, {0x0, 0xfff3}, {0x2, 0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1668, 0x2, [@TCA_CGROUP_EMATCHES={0x208, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x97f}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_LIST={0x178, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0x6, 0x9, 0x56a7}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x5, 0x5, "d0"}]}}, @TCF_EM_CONTAINER={0xa0, 0x2, 0x0, 0x0, {{0xb341, 0x0, 0xfffc}, "448d6215ea1223f0d220d0b322d011a42b271644124d2b9bb1b7bb61beaac40060462c6183aaabdefe156818465dff2707a52bd2ac9025798bd8b1d35296d8bb47afbe84175cb99b7f195a0d6d01557fe8af9cda2539eaa455de17264460d0035a97608cb3e807cd1ee9777160861f51b8656466442001a58a31e2528d0f10d2f3a228a1beccd1a2d72669e6582159e98ac2"}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x5, 0x7, 0x9}, {{0x0, 0x1, 0x0, 0x1}, {0x4, 0x1, 0x1}}}}, @TCF_EM_IPT={0x58, 0x3, 0x0, 0x0, {{0xf9c9, 0x9, 0x8}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x1}, {0x80, 0x4, 0x6, 0xac7e9bb0}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x8000, 0x2, 0x4}, {0x1, 0x5, 0x1, "410eb8556c"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x6c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x68, 0x1, 0x0, 0x0, {{0x5, 0x0, 0x6}, "2b94489651ed803d5420c0810ab982d2a230607f3286f351b4475ef010fa37dfe822e31bb5fa05a8e655549c8bf06024f5648be14c7515286d591584271622ffd504ae43dd5d4e538616079886e703cc6bf9ca98022f96ded854"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}, @TCA_CGROUP_ACT={0x318, 0x1, [@m_police={0x94, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x66, 0x6, "f08a36aa62cd9f51118f3ccced07b079d22469a3a9b94c5a6df0cbebcab1a91c715ada02ea54d0a8d426c145828710d0f37de8cbd762829108a3fd0ba9ee7982d3465bbd257033a4ea60455d41439b6ea041e23f349c2ac103de434abe246d3e5296"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_ctinfo={0x114, 0x7, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xc}, @TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0x401, 0x20000000, 0x0, 0xfffffffd}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x9}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x6}, @TCA_CTINFO_ACT={0x18, 0x3, {0x81, 0x51, 0x8, 0x80}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8a}]}, {0x8d, 0x6, "a7922dd83dcd0e9e38f171a263bd15d6a810da12d1ff1dec9cb4858fd4c9ab6cf80526cd018d61fa0b6738b1e9276284b5cf6b025b69b4819504e220742f2c7909e0e69981c41480ae6744403899bd6db6c37f2686ef7efb0bdc7a063f7f584e8a1201c3b2c92358459625710d0239566e6b1f0fd8f68de468cca3129942dc5fefb756c08bb199d32e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mirred={0x16c, 0x1f, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x2115, 0x8000, 0x20000000, 0x6, 0xcb4}, 0x1, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2d41, 0x6, 0xffffffffffffffff, 0x32, 0x2}, 0x3, r4}}]}, {0x100, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x6, 0x1}}}}]}, @TCA_CGROUP_EMATCHES={0x1144, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x150, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x2, 0x3, 0x9}, {0xffffffff, 0x6, 0x47, 0x6}}}, @TCF_EM_CONTAINER={0xc, 0x3, 0x0, 0x0, {{0x216, 0x0, 0x40}}}, @TCF_EM_IPT={0xc4, 0x2, 0x0, 0x0, {{0x5}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xf}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_DATA={0x8f, 0x5, "218e2a441d3f1c9d49d440bb43852631f840e001c0691f82a850dd348c3e357283d1d5a80f847d43a214d0e0f93ece4f5ef455bb0525e58442101cd5f12226e43be59eff3f3f3d91648834fa5b90cee2472eba5f662542bf40e953440c824ab0a13bd56e13570b9867967fcf65af0c41a2a6d4601a86da95fb2dcd7560cb3d7e4344e8e08da302f544b51c"}]}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x2358, 0x1, 0xc7ce}, {0x1, 0x1, 0x1, 0x4, 0x4, 0x2, 0x2}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xf, 0x7, 0x7fff}, {{0x1, 0x0, 0x1, 0x1}, {0x4, 0x1}}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0x8}, {0x80000000, 0x5, 0x1, 0x9}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x9, 0x1, 0x2}, {0x9, 0x800, 0x4c9d, 0x1, 0x1, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9fa}}, @TCA_EMATCH_TREE_LIST={0xfe8, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xc, 0x1, 0x397}, {0x61, 0x2, 0x9, 0x0, 0x1, 0x1, 0x1}}}, @TCF_EM_CONTAINER={0xfcc, 0x2, 0x0, 0x0, {{0x1000}, "7927ea877a5009002eb9b6e2e26c448a57fc925d5aae9d0a6da3e2386cb0da234ba7c0a27f0d9373ed24237cbaabd98856b00cae192cc1c4b33d12a2857708c5929881204724f42f901aa2c6787379843ecb1f5b73218a16cc902346a539bf7b4e3eb5586c95b5a51f127a245892f4fbba8622cd5a8437b38cf9b63fda5f3bde0fbf74fac8aa17532dc3766c49a2dee0d90395d3c06f5efc3b947238d30740a283e707459d2173449850be54da8b333240929c67255d79d0f0b32433d6caa8e8258d7d8fd1c7ce32362031437804f8925df387e3d300ebd7bb3b8729892a029e3e3c78cf79ca312d1117d358967e4ef8befee2513745ad26604117ae74adc5ffc516f39b90c6f4ee8829d9b69952d622d018f07715533012a7da69daae37c1f8c9da0a80365c003db45dac0efed19b4967a86e21ff8874f1cc2891689ef476a3a4c6d5009f08172d88603ddc5d0789bbefb6e1324c243a2aafb6486e7e9c8fe5a6f6f0e37ab99d0c1977362b14a95a6a7c1f6109e8c1e11c879355f69151b187355d5ed205edac8748baec25c83d0835fa517c8da09389c58395abe75aa1294dba7f7766c5510fd20115feed80c636be9087e73ac216ec275269921766cc8a8c332a62a869b083de83aa8a0a933b186040ecadffa84d10016de95d040af84f66d232bf2fd20f70c3845c94ef5950bafad179a8a51ca60e4d47758d8b76e4142d266e6e59209601b0962cf372a0c676527de3bc4e6b15880dbe87f368e9fb5f7c4566c3526c39abe180fe9159a0216076c88e37ad693b2cc73d298a347c091f67454f082bc712aed38fcf79310085c129fcb0ba2d1fca13c128acd2577b709802e2d93e5b83552469e465982bdac227e6e239534b9218c40baffcafa3dcefcda6113cc1e0167b35ce40aa0f0fa16bd90738420c77fec6b15fc55b5c729cd0039ace7b71c4b194c219e0255b235bd3256718d9dbea884f67dc63245ca3263f4285fc46df54cf78bc0c39cd8eeba95bc7441356f8bc2da06410d73aea6569cf192820b5e675a9c0a03ec5e355a6a6e9d828696805809f310cac57f79567f69af23ee2d8bf45c68feaa69d05c96816a91754bfc2d693b79966f263ba5fca3c48af9cdffb728d163a48be2eefcb6c6ce28ebd6fcc4996525711671c07271b84a3bf9eb3405db1779a693dde118120b2ca02dd6527a03f7175390f14a77deedfc684863ff04b4bf314b99ceb02626caa5293681bd35153aeb467cc434d3f47629bbbf0c0edb98aa8925678685c0aae757738344e805dc0698b6d01f6d212ad04180f7ece0d42ac8016f339bf0237ba7a268bf250afaebee8ecbe72cf2893dac0eab9cc5e09bd55a4255b80539a50714d81a9bea45e50c815b094439f8ec31f3c5be2fca27128fdaada28accbc45fb2a27205137a9d428609338623d470caaf47d03693a8e0cecad1ae030dc156e4162e2d5883c5c913815cb3b73d10301d2f34a1364b7f216b3f443b78ea9dedc4f30555a9ef888dfa1bdb273bb5a78bf4d564bb4861ef2ffb1ca5c31b95c4b1f7806b3e9e91185be5795786e8b1b26c9df705c6f7284cd381c1d67325cf3b081a1eb55619026afb3eb7607b217824df6a4b670acfd8cede25be8c5a95e8cad4a6e068c312837ef89a23c5d45994a2f39086b894de7e8357ac25d3185efdd170041333c5410b2f893b627694d81ce6925ab32b12296ecc8e0a32130d55a3d868536d9de8d09b06b2554f6e68300b7c033d2d601a27bbfa663f66444b7ed4edaf9e658b16631b3faee927c45b39ed072737fc83a60cd38fec61f41acc4c6649309426836d384f6d83cb5719388a66321efa0b5570b355caa51ee2fa19c0f00a9e1cc78bfbe549a178de99e0a84b4f2487522ec31f7ec9a46f02a4db7c650198fc319bbe3de4b2c9f4af9b4db16f728c5919ed1b5e7d8069d7a1ac09422d86b77cd4b3a11c1bb6ea2267385b3d65898a9ad3576664f3f8fedc8955f1a8394f67ef4bd72ef6c73ea5187478159ec2b2f0f1ef2b832862c5c4dca912bd2f1238a523144250ba7144a524961d9a0c2773a44f5fe3dab74c80fb7ad42e763030c31f48fe0406be7a44411ee2b9e67ad998f017afb60859d89189bf3cfde1c4e1996786b1b2a4994f763b5827a8f2b14d75a7005da37d9a953129815a693eb895f9f03ee2b1220e985d823eaa4ae1d93e1c8fdd0a54103c3a96592ad86f7c75b8dd01828f488cff2f58b41a6d34938e5c5f7fcdbe59226ef887baca758873085517148439f5a1c832f866e7f50bd762a03a7163ac786bf5d18c9398bf804951be31c9716f471b74e2434a7c59fd5fc07f3db7d4ac0855d7679bd75662ab73d32802764f8dd8ad10537c85f8f8647c2d5de1da5cc5b0927657b76ea134193b31338663e7725b6a21b97a20aa550199a5e1c5a4421b190948e3bd1726e66d90bfdc627bbf6d143af3bab67c3a3134aa98a854a28994660ed596482267dc6f147b63a36d97f8177a1add578923e202d23b58838cf80d6a468317d3cde87dfac050af1ee6ab149069bea6c4ba64e4d1fd16d47b8c4bf20dc34b7d65ec8d70bd57367d1685e34aa83ce1d84048ae7a47d8ad8135e13eaff063b4bb2abff381b27f12634a0e1e32497085893736a3f13ae4adf65d3e4b80bc9cae9bc2e4c8db10d724c8e96a068930e6a3443e0f5eefd9b9d3b8f050c37cc5b8cfcaade8685f53161fb189dbd39b37043a210913b6ef4254bf234d89c97e50f82bd9f8eb889dd4e0e12ef5de0cf784ee772821ac1e3c82cbaba4c0e07cd58db9e7a22251c2565f44c62c984179f6bd3524fecee07e5f41aaf64966fd4f16d4782decb893058f23dde4e71044ee61c25cd6143c6096dff20dd62d53955dc37c3fdce0a1343336a032e474fea7a03a5e25b8c7bcf764051706e8c3546e458eef48b53fa13f8f935a012ed9f3c48b4ff8cb3d8fbf83ce47563831cf6d2e35995301157361ff84ab5c0cb946e9bc92f05489b22af782e69b7364cc880a4b6bc1b0e405b6b3b9900d2ff279a6e69c21fca2cb340b1e008e12bde9164057c6755a9a6c203a9d69e8ce6c4f72b1b973e00b09c5e8287ec8569cf3e1737f3157992cbda5fdc2dcd3883e624ba9d637d1c3bf1f192a2340dfe0947436801ba0588b856379bf04bbb96b9f85d38adc6d3250c4f1029c2aec9faac0b620c403e36dee824b959dbfd624422ad214d2f8c0b68b27c3e4cca972b18b690b513bc6c26c099ef439b48d82dd95b01a23405d913a07b92d9df857014c8a35cf4613aa1840c3b943a60875dfe3ded196d7e24a3f13db5ac9e2026cbcdc71c43ef2aa827c7d58f15ecd6286b2265f3d5bd29bd53d05264c146edf6dfd85e2877d97643dd3e1cafd37d8a085f8df00e05cc413eb6fb560fc2a6f8aca71179d620a46c7f533318e2ec0ee489af8ac714c6af3662cc63b111d977b4560824ce430a619d0a792f823d06ebe8112e77249081c0644be8e4f8ae39c432f34f880c4c3220f4106158351805bceb4ec0809bbf06b98fe6a86a6e2bb6b07befe141aa84558598c7b2c30ae167dc0cc491255fffed7d6d14edeb608258686b6a6d28d13857e913820828935dc1fefbdc495fa4e5f4aed8031a4ce648e8d6b62d539a119177cc5c7013d0e10957314401ba8c3a2e97a9572acec923780ef68a5d6555e421f7c8c2049488e2aafd2f6cebb00c16c94a122dabac76adf1b4e34e19ee74905514a3200ef6a9bc8a28cf04f80a131bc82b9620c63e4731c2822efa05c7d5ce518e744876759b5444f44e0ae2c0901abf863391fbbbabe8186f9fe7e081dc7f3c7849bc3d45afbd4651fadeea76007f7403c6060ba6425e9785921e87894ce0dbd6ce88e4f09f9113ac7a2fae2ee898df4b59cb628a23680f44b90d9d2ed961b78da81d95631fb017c288c415c68fde81494ca0a45ef0c3cb8dc65e94b1169f1f3df4a5502a578e3c6cb834892795bcb76d128686ff1464954f54a12fea4758ec395cb0920892f54c7084d701d8ea4409feb07a234338ed301970f3f2cbb538459093e995519da1483168d277cfb988815344f84e000d3b6ed939fa0406c8c2b78e5dde89d27d109d35403c2647c7dfa20748b8f91297154f640854750cc2b668cc8cc0c24a4a82d5fcf2a6580405b2d7befca8fc67a340f0d32474d6a097ac5e9ea0ebb9b3912afe0545c85312e7d044f9a1f7100da8148e8d4fe1bec2d428f75d8a19d339b2e222050f9a6e15895ae6a8180d3fd0469f63ba9526c6cfa8ceb983a7d92e95a306440e3942ad27e5ee2866c41aea091431899f76eedc4a84c2d8f2e65729d3e12ddaa765d77d1bd5b710ef92408e3522f5b800afab841133e1eee86122e7df243c6a523aa371a075f66fa5c94368fc76cebbfcfc64c843837ea98f87782cf65e2a450c264595281bb525b2fdb8c770c22009b09cc33fa090e1e07a76c6f076a35afd6dc5163353bbaec7665660e8d6b8b5f963eb6d8fb05959476e53c8ccca03a07c70a80a1f0146f15e1213b78f8b6db291dc87401bbde827baa071013d755a4e4e20401024d2c750f670bc5c98306182dfe1435fb6d7a33ce4f819a0edb9ca324d5d9237fbd1de9c548d8e40482a7b7574410f156243d3dad96ae09e72db349b93a1c587f766da5844fd15a384ca7dbb75e3e629c4899722667222f16099b66a93847e6154dcca08c69ef8e1fd7c2278b36cb5fd60c9fcb18def6877312dd636a232304dda7caa033d48b3c3ad1b473381136fc7c25b123d8417b36eb678ac9e8134c1123b581204c7e6303bd71dca19a81b6abaf6abb73ae32a585de32f0efe9cb1f515fad56d485ef2f0fdc604db48aa520ef5007abc97e81416f8698bcc05367e4afd467a045357f7e8870c05a733b9fd64aad5d4498c81f20ba9092d3cb5e3faaf0f0fc536697b0f98cf113ab0b927881a4426ed958edf544f462f0540feb8201d69a77ea745343db102c384df099645b21744be984758d15e409a82bd517266f757196806bb89c603ecf6262c257eb8169c388f0328f6f5d8df6715f57bb0bbbc493cac59dc1c0869330f08ae44f7d3663d342905c16650b8dc2bb06e447dc2f72402ea14e359a5eca85787bd39f13758f70d733b5386e511d26940219b31ba661cffb8394a944822ad67daba363e08139d6cb01afaf7ae4d5a0fb84b94c10de2d7c6dc62c81a756ae6930624b70f3c6d89272eb75c30b025d8dcfa41359ad4f580a576712c3da1677fe4e04a87f222d30330c9f8ade2df60057d5a2ffc4fd03309c2e1896f3f8faad329db4d366680bdeeafa0b726d3e1c68935b485be16fc9e5d97d29c5ce535b5281ce7cb3a62a38dad29f0d7eeb397f68dccc7254b7a4e5fc1288bbfe6597c88eddbf8454f3df9b70304f19fc16bfad7315240746a55bec84b6effdff999b342610fc898c56d041b6310dfe94ed425a956ecc94aeb929a0b520f02b55a4ee4910106a735d2958cd86977e6b4ee4e4a346f839c1340ebb6bf406dd7db80409c88a6ace70b977f27d43a9686eaafbcb74993372e354dbaac79787a26c8e199f0904ad63220fef1770b43a1c38df0b782fcac04693cc6e93f7a37f5d131f4a4e483c2f4142dc258faacc7dbb7b3f533f1001df8918ecbbcb3450e5b42deb094131b47233763d807aa9b39b57a2c6c8997dd8df228d9d9e85b96b8b41cf"}}]}]}]}}]}, 0x1698}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r5 = fanotify_init(0x4, 0x40000) writev(r5, &(0x7f00000004c0)=[{&(0x7f0000000000)="2e68ea6c2f7cb2e0", 0x8}], 0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @loopback, 0x13}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r1, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x7) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1.839191772s ago: executing program 4 (id=8491): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x44}], 0x1, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="04110504"], 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000bbc0)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x20000041}}], 0x1, 0xc004) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x4, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.714411444s ago: executing program 1 (id=8492): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB], 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x2c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x2c}}, 0x0) 1.673115797s ago: executing program 1 (id=8493): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=r0, @ANYRES32], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000000000/0x4000)=nil) 1.497152812s ago: executing program 4 (id=8494): writev(0xffffffffffffffff, 0x0, 0x0) msgget(0x2, 0x624) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) sync() socket(0x400000000010, 0x3, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) r0 = msgget(0x1, 0x240) syz_open_dev$video(0x0, 0x485, 0x400) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$LINK_DETACH(0x22, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) msgctl$IPC_RMID(0x0, 0x0) msgget(0x3, 0x693) msgctl$IPC_RMID(r0, 0x0) 1.149654506s ago: executing program 0 (id=8495): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0xee, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000100000008864470b00e000680057fb08"], 0x0) 1.092068376s ago: executing program 0 (id=8496): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) write$P9_RREADLINK(r2, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, &(0x7f0000000240)}) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad7, 0x10000, 0x3}, &(0x7f0000000040), 0x0, &(0x7f0000000000)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)={0xfffffeff}) close(r5) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r8, @ANYBLOB="dc196c174c0f622e019df2d7fcc0c6e67e55dd353e5b54dbb5c89c1e1f4a22120475c8cdd9a545554eab5c90c9583f399da9afac43bb3186c0baf3fa64ff2c4c70f0c0ea424307be53"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg$unix(r3, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/156, 0x9c}], 0x1}}], 0x1, 0x40000000, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 530.87964ms ago: executing program 4 (id=8497): r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8) r2 = openat$cgroup(r1, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000240)='cpu.stat\x00', 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) 233.278916ms ago: executing program 4 (id=8498): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000002540)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000140)="cca9efaa32a4009ea301f8c4cd3e8a2800daf9f7fcadfe677fe774109efbab5e9a00a08f6145640ff49d2c711fdf719ea8daa38a5306ddbf11a6ed1b53f931d8853c57a829aababd627e4f252059df3a"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f0000000340)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000280)=[@dead_binder_done], 0x0, 0x0, 0x0}) 228.059467ms ago: executing program 2 (id=8499): ftruncate(0xffffffffffffffff, 0xc17a) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x641c2, 0x4) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r2, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) fsmount(r2, 0x1, 0xf0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x8840, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SET_MM_MAP(0x49, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x3ba}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) capset(0x0, 0x0) 184.157956ms ago: executing program 1 (id=8500): write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) close(r0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x4d, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x3}]}}}}}}}}, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) r2 = syz_clone(0x0, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0) kcmp(r2, r2, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) tkill(r2, 0x3e) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) listen(r1, 0xa) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000700)=@nat={'nat\x00', 0x1b, 0x5, 0x540, 0xd0, 0x0, 0xffffffff, 0x380, 0xd0, 0x470, 0x470, 0xffffffff, 0x470, 0x470, 0x5, &(0x7f0000000040), {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x18, 0x0, 0x5}}}, {{@ipv6={@mcast2, @private2, [0xff, 0xff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0xff], 'bond_slave_0\x00', 'nicvf0\x00', {0xff}, {0xff}, 0x3c, 0x7, 0x6, 0x8}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@srh={{0x30}, {0x3a, 0x3, 0x4, 0x3, 0xff, 0x4, 0x800}}, @common=@eui64={{0x28}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv6=@loopback, @ipv4=@broadcast, @icmp_id=0x64, @gre_key=0x9}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xa}, @private2, [0x0, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff000000, 0xffffff00], 'veth1\x00', 'vcan0\x00', {0xff}, {0xff}, 0x2f, 0xf, 0x1, 0x4}, 0x0, 0x140, 0x168, 0x0, {}, [@common=@hbh={{0x48}, {0x60f9, 0x3, 0x1, [0x7, 0xee8c, 0x8, 0x6, 0x7, 0x6, 0xb7c9, 0x79da, 0x6, 0xdb, 0x474e, 0x100, 0x8, 0x81, 0x100, 0x5], 0x2}}, @common=@inet=@set4={{0x50}, {{0x2, 0x0, 0x2}, {{0x1000}, 0x6}, {{0x101000000}, 0x8}, 0xd96}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x5, 0xd5, 0x182d}}}, {{@ipv6={@remote, @mcast2, [0xff000000, 0xff000000, 0xffffffff, 0xff000000], [0xfaf63bdc3630596a, 0x0, 0xff000000, 0xff000000], 'dummy0\x00', 'syzkaller0\x00', {}, {}, 0x73, 0x9, 0x6, 0x26}, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x1, @ipv4=@private=0xa010100, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, @icmp_id=0x65, @icmp_id=0x67}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10089}, [@IFLA_ADDRESS={0xa, 0x1, @random="4af29c3ff049"}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x20008800) 134.005728ms ago: executing program 4 (id=8501): prlimit64(0x0, 0xe, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x1b, 0xa, 0x4}) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x1698, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0x8}, {0x0, 0xfff3}, {0x2, 0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1668, 0x2, [@TCA_CGROUP_EMATCHES={0x208, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x97f}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_LIST={0x178, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0x6, 0x9, 0x56a7}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x5, 0x5, "d0"}]}}, @TCF_EM_CONTAINER={0xa0, 0x2, 0x0, 0x0, {{0xb341, 0x0, 0xfffc}, "448d6215ea1223f0d220d0b322d011a42b271644124d2b9bb1b7bb61beaac40060462c6183aaabdefe156818465dff2707a52bd2ac9025798bd8b1d35296d8bb47afbe84175cb99b7f195a0d6d01557fe8af9cda2539eaa455de17264460d0035a97608cb3e807cd1ee9777160861f51b8656466442001a58a31e2528d0f10d2f3a228a1beccd1a2d72669e6582159e98ac2"}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x5, 0x7, 0x9}, {{0x0, 0x1, 0x0, 0x1}, {0x4, 0x1, 0x1}}}}, @TCF_EM_IPT={0x58, 0x3, 0x0, 0x0, {{0xf9c9, 0x9, 0x8}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x1}, {0x80, 0x4, 0x6, 0xac7e9bb0}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x8000, 0x2, 0x4}, {0x1, 0x5, 0x1, "410eb8556c"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x6c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x68, 0x1, 0x0, 0x0, {{0x5, 0x0, 0x6}, "2b94489651ed803d5420c0810ab982d2a230607f3286f351b4475ef010fa37dfe822e31bb5fa05a8e655549c8bf06024f5648be14c7515286d591584271622ffd504ae43dd5d4e538616079886e703cc6bf9ca98022f96ded854"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}, @TCA_CGROUP_ACT={0x318, 0x1, [@m_police={0x94, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x66, 0x6, "f08a36aa62cd9f51118f3ccced07b079d22469a3a9b94c5a6df0cbebcab1a91c715ada02ea54d0a8d426c145828710d0f37de8cbd762829108a3fd0ba9ee7982d3465bbd257033a4ea60455d41439b6ea041e23f349c2ac103de434abe246d3e5296"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_ctinfo={0x114, 0x7, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xc}, @TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0x401, 0x20000000, 0x0, 0xfffffffd}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x9}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x6}, @TCA_CTINFO_ACT={0x18, 0x3, {0x81, 0x51, 0x8, 0x80}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8a}]}, {0x8d, 0x6, "a7922dd83dcd0e9e38f171a263bd15d6a810da12d1ff1dec9cb4858fd4c9ab6cf80526cd018d61fa0b6738b1e9276284b5cf6b025b69b4819504e220742f2c7909e0e69981c41480ae6744403899bd6db6c37f2686ef7efb0bdc7a063f7f584e8a1201c3b2c92358459625710d0239566e6b1f0fd8f68de468cca3129942dc5fefb756c08bb199d32e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mirred={0x16c, 0x1f, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x2115, 0x8000, 0x20000000, 0x6, 0xcb4}, 0x1, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2d41, 0x6, 0xffffffffffffffff, 0x32, 0x2}, 0x3, r4}}]}, {0x100, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x6, 0x1}}}}]}, @TCA_CGROUP_EMATCHES={0x1144, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x150, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x2, 0x3, 0x9}, {0xffffffff, 0x6, 0x47, 0x6}}}, @TCF_EM_CONTAINER={0xc, 0x3, 0x0, 0x0, {{0x216, 0x0, 0x40}}}, @TCF_EM_IPT={0xc4, 0x2, 0x0, 0x0, {{0x5}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xf}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_DATA={0x8f, 0x5, "218e2a441d3f1c9d49d440bb43852631f840e001c0691f82a850dd348c3e357283d1d5a80f847d43a214d0e0f93ece4f5ef455bb0525e58442101cd5f12226e43be59eff3f3f3d91648834fa5b90cee2472eba5f662542bf40e953440c824ab0a13bd56e13570b9867967fcf65af0c41a2a6d4601a86da95fb2dcd7560cb3d7e4344e8e08da302f544b51c"}]}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x2358, 0x1, 0xc7ce}, {0x1, 0x1, 0x1, 0x4, 0x4, 0x2, 0x2}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xf, 0x7, 0x7fff}, {{0x1, 0x0, 0x1, 0x1}, {0x4, 0x1}}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0x8}, {0x80000000, 0x5, 0x1, 0x9}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x9, 0x1, 0x2}, {0x9, 0x800, 0x4c9d, 0x1, 0x1, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9fa}}, @TCA_EMATCH_TREE_LIST={0xfe8, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xc, 0x1, 0x397}, {0x61, 0x2, 0x9, 0x0, 0x1, 0x1, 0x1}}}, @TCF_EM_CONTAINER={0xfcc, 0x2, 0x0, 0x0, {{0x1000}, "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"}}]}]}]}}]}, 0x1698}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r5 = fanotify_init(0x4, 0x40000) writev(r5, &(0x7f00000004c0)=[{&(0x7f0000000000)="2e68ea6c2f7cb2e0", 0x8}], 0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x176, 0x0, 0x7}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @loopback, 0x13}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r1, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x7) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 0s ago: executing program 1 (id=8502): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x74) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) kernel console output (not intermixed with test programs): ew high-speed USB device number 38 using dummy_hcd [ 1937.634722][T31851] usb 2-1: device descriptor read/64, error -71 [ 1937.747214][T31851] usb usb2-port1: attempt power cycle [ 1937.972477][T32585] syzkaller0: entered promiscuous mode [ 1937.983818][T32585] syzkaller0: entered allmulticast mode [ 1938.094675][T31851] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1938.125032][T31851] usb 2-1: device descriptor read/8, error -71 [ 1938.364345][T31851] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1938.384766][T31851] usb 2-1: device descriptor read/8, error -71 [ 1938.494903][T31851] usb usb2-port1: unable to enumerate USB device [ 1938.547573][T32597] netlink: 'syz.4.7509': attribute type 1 has an invalid length. [ 1938.570458][T32597] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1938.583791][T32597] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1939.786225][T32619] syzkaller0: entered promiscuous mode [ 1939.791786][T32619] syzkaller0: entered allmulticast mode [ 1939.816089][T30678] Bluetooth: hci0: command 0x2016 tx timeout [ 1940.294277][T31851] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1940.444255][T31851] usb 2-1: Using ep0 maxpacket: 8 [ 1940.450990][T31851] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 74, changing to 7 [ 1940.464786][T31851] usb 2-1: New USB device found, idVendor=0e41, idProduct=4246, bcdDevice= 0.40 [ 1940.473859][T31851] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1940.481933][T31851] usb 2-1: Product: syz [ 1940.486197][T31851] usb 2-1: Manufacturer: syz [ 1940.490800][T31851] usb 2-1: SerialNumber: syz [ 1940.581925][T32631] netlink: 'syz.4.7522': attribute type 1 has an invalid length. [ 1940.610843][T32631] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1940.629076][T32631] bond1: (slave veth0_to_bond): Releasing backup interface [ 1940.641499][T32631] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1940.713164][T31851] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1940.721429][T31851] usb 2-1: unit 2 not found! [ 1940.754937][T31851] usb 2-1: USB disconnect, device number 41 [ 1940.816344][T29443] udevd[29443]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1941.090389][T32648] syzkaller0: entered promiscuous mode [ 1941.098417][T32648] syzkaller0: entered allmulticast mode [ 1941.369783][T32661] netlink: 'syz.3.7534': attribute type 1 has an invalid length. [ 1941.384421][ T5721] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1941.408248][T32661] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1941.429575][T32661] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1941.544365][ T5721] usb 3-1: device descriptor read/64, error -71 [ 1941.768039][T32672] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 1941.774592][T32672] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1941.783492][T32672] vhci_hcd vhci_hcd.0: Device attached [ 1941.804369][ T5721] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1941.822806][T32672] bridge0: port 1(bridge_slave_0) entered disabled state [ 1941.838758][T32672] bridge0: port 2(bridge_slave_1) entered disabled state [ 1941.894818][T30678] Bluetooth: hci0: command 0x2016 tx timeout [ 1941.942987][T19362] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1941.956965][T19362] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1941.966263][T31501] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1941.985321][ T5721] usb 3-1: device descriptor read/64, error -71 [ 1941.993893][T19362] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1942.017252][T19362] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1942.054451][ T5685] usb 36-1: SetAddress Request (30) to port 0 [ 1942.061686][ T5685] usb 36-1: new SuperSpeed USB device number 30 using vhci_hcd [ 1942.115060][ T5721] usb usb3-port1: attempt power cycle [ 1942.134534][T31501] usb 5-1: Using ep0 maxpacket: 8 [ 1942.144344][T31501] usb 5-1: config 0 has no interfaces? [ 1942.165781][T31501] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 1942.197141][T31501] usb 5-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 1942.236899][T31501] usb 5-1: Product: syz [ 1942.258390][T31501] usb 5-1: SerialNumber: syz [ 1942.263205][T32673] vhci_hcd: connection reset by peer [ 1942.278940][T11646] vhci_hcd vhci_hcd.1: stop threads [ 1942.290267][T11646] vhci_hcd vhci_hcd.1: release socket [ 1942.292263][T31501] usb 5-1: config 0 descriptor?? [ 1942.312752][T11646] vhci_hcd vhci_hcd.1: disconnect device [ 1942.352303][T30678] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1942.379558][T30678] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1942.393885][T30678] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1942.403349][T30678] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1942.418502][T30678] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1942.490498][ T5721] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1942.548474][ T5721] usb 3-1: device descriptor read/8, error -71 [ 1942.734286][T31501] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1942.794425][ T5721] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1942.845077][ T5721] usb 3-1: device descriptor read/8, error -71 [ 1942.915139][T31501] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 1942.929114][T31501] usb 4-1: config 1 has no interface number 0 [ 1942.955153][T31501] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1942.987209][T31501] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1943.001127][ T5721] usb usb3-port1: unable to enumerate USB device [ 1943.020615][T31501] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1943.046880][T31501] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1943.064251][T31501] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1943.073578][T32679] bridge0: port 1(bridge_slave_0) entered blocking state [ 1943.078801][T31501] usb 4-1: Product: syz [ 1943.080930][T32679] bridge0: port 1(bridge_slave_0) entered disabled state [ 1943.089063][T31501] usb 4-1: Manufacturer: syz [ 1943.092423][T32679] bridge_slave_0: entered allmulticast mode [ 1943.104547][T32679] bridge_slave_0: entered promiscuous mode [ 1943.110442][T31501] usb 4-1: SerialNumber: syz [ 1943.113228][T32679] bridge0: port 2(bridge_slave_1) entered blocking state [ 1943.122542][T32679] bridge0: port 2(bridge_slave_1) entered disabled state [ 1943.130041][T32679] bridge_slave_1: entered allmulticast mode [ 1943.131003][T32680] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1943.137701][T32679] bridge_slave_1: entered promiscuous mode [ 1943.206935][T32690] syzkaller0: entered promiscuous mode [ 1943.212431][T32690] syzkaller0: entered allmulticast mode [ 1943.222426][T32679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1944.536454][T30678] Bluetooth: hci5: command tx timeout [ 1944.859700][T22284] usb 5-1: USB disconnect, device number 50 [ 1945.544393][T31501] usb 4-1: Error in usbnet_get_endpoints (-71) [ 1945.575986][T31501] usb 4-1: USB disconnect, device number 30 [ 1946.615668][T30678] Bluetooth: hci5: command tx timeout [ 1947.104498][ T5685] usb 36-1: device descriptor read/8, error -110 [ 1947.255705][T32679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1947.279872][T32724] bond2: (slave veth0_to_bond): Releasing backup interface [ 1947.450401][T32679] team0: Port device team_slave_0 added [ 1947.473745][T32679] team0: Port device team_slave_1 added [ 1947.487883][ T5685] usb usb36-port1: attempt power cycle [ 1947.540522][T32679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1947.544501][T32734] netlink: 'syz.2.7548': attribute type 1 has an invalid length. [ 1947.548834][T32679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1947.583641][T32679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1947.624215][T32734] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1947.632248][T32679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1947.640651][T32679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1947.667367][T32679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1947.692650][T32736] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1947.767875][T32743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7550'. [ 1947.786441][T32679] hsr_slave_0: entered promiscuous mode [ 1947.792672][T32679] hsr_slave_1: entered promiscuous mode [ 1947.800080][T32679] debugfs: 'hsr0' already exists in 'hsr' [ 1947.806540][T32743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7550'. [ 1947.833099][T32679] Cannot create hsr debugfs directory [ 1948.030643][T32747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7551'. [ 1948.081684][ T5685] usb usb36-port1: unable to enumerate USB device [ 1948.664350][T23487] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1948.704845][T30678] Bluetooth: hci5: command tx timeout [ 1948.874334][T23487] usb 5-1: device descriptor read/64, error -71 [ 1949.141080][T32759] syzkaller0: entered promiscuous mode [ 1949.144403][T23487] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1949.164663][T32759] syzkaller0: entered allmulticast mode [ 1949.294360][T23487] usb 5-1: device descriptor read/64, error -71 [ 1949.405095][T23487] usb usb5-port1: attempt power cycle [ 1949.445001][T32679] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1949.468590][T32679] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1949.482933][T32679] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1949.499038][T32679] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1949.509043][T32679] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1949.522194][T32679] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1949.544478][T32679] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1949.567631][T32679] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1949.592236][T32765] netlink: 'syz.1.7559': attribute type 1 has an invalid length. [ 1949.628538][T32765] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1949.658699][T32765] bond1: (slave veth0_to_bond): Releasing backup interface [ 1949.683874][T32765] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1949.754978][T23487] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1949.786276][T23487] usb 5-1: device descriptor read/8, error -71 [ 1949.853460][T32679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1949.886322][T32679] 8021q: adding VLAN 0 to HW filter on device team0 [ 1949.909561][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1949.916671][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1949.953325][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1949.960454][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1950.054413][T23487] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1950.086813][T23487] usb 5-1: device descriptor read/8, error -71 [ 1950.225117][T23487] usb usb5-port1: unable to enumerate USB device [ 1950.237679][T32679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1950.379231][T32679] veth0_vlan: entered promiscuous mode [ 1950.453944][ T315] block device autoloading is deprecated and will be removed. [ 1950.471200][T32679] veth1_vlan: entered promiscuous mode [ 1950.494282][ T5693] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 1950.542983][T32679] veth0_macvtap: entered promiscuous mode [ 1950.566246][T32679] veth1_macvtap: entered promiscuous mode [ 1950.618620][T32679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1950.656014][T32679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1950.672660][ T5693] usb 4-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1950.702259][T11646] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1950.712761][T11646] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1950.713061][ T5693] usb 4-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1950.723879][T11646] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1950.747696][T11646] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1950.774611][ T5637] Bluetooth: hci5: command tx timeout [ 1950.785379][ T5693] usb 4-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1950.818636][ T5693] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1950.833484][ T5693] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 1950.871839][ T5693] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1950.904851][ T5693] usb 4-1: config 0 descriptor?? [ 1951.068443][T11646] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1951.090350][T11646] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1951.119705][T24039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1951.136022][T24039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1951.363258][ T327] syzkaller0: entered promiscuous mode [ 1951.368955][ T327] syzkaller0: entered allmulticast mode [ 1951.726556][ T337] netlink: 'syz.2.7569': attribute type 1 has an invalid length. [ 1951.738060][ T337] bond1: (slave veth0_to_bond): Releasing backup interface [ 1951.795304][ T339] netlink: 'syz.2.7570': attribute type 1 has an invalid length. [ 1951.824138][ T339] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1951.845768][ T339] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1952.374263][ T5637] Bluetooth: hci3: command 0x0406 tx timeout [ 1952.712990][ T5693] usbhid 4-1:0.0: can't add hid device: -71 [ 1952.725665][ T5693] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1952.751426][ T5693] usb 4-1: USB disconnect, device number 31 [ 1952.800515][ T9] IPVS: starting estimator thread 0... [ 1952.904327][ T356] IPVS: using max 33 ests per chain, 79200 per kthread [ 1953.101788][ T366] netlink: 'syz.1.7582': attribute type 1 has an invalid length. [ 1953.123098][ T366] bond3: (slave veth0_to_bond): Releasing backup interface [ 1953.274320][T31501] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1953.415452][T31501] usb 4-1: device descriptor read/64, error -71 [ 1953.654691][T31501] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1953.794334][T31501] usb 4-1: device descriptor read/64, error -71 [ 1953.904504][T31501] usb usb4-port1: attempt power cycle [ 1953.966527][ T377] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7586'. [ 1953.976897][ T377] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7586'. [ 1953.987684][ T377] unsupported nlmsg_type 40 [ 1954.206279][ T385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1954.254543][T31501] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1954.284933][T31501] usb 4-1: device descriptor read/8, error -71 [ 1954.472302][ T390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1954.525092][T31501] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1954.549170][T31501] usb 4-1: device descriptor read/8, error -71 [ 1954.675349][T31501] usb usb4-port1: unable to enumerate USB device [ 1955.054984][T31501] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 1955.247361][T31501] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1955.281644][T31501] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1955.304350][T31501] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1955.315492][T31501] usb 2-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 1955.333291][T31501] usb 2-1: Product: syz [ 1955.349306][ T394] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1955.361699][ T394] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1955.398894][T31501] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1955.630432][T31851] usb 2-1: USB disconnect, device number 42 [ 1956.117936][ T407] netlink: 'syz.3.7597': attribute type 1 has an invalid length. [ 1956.156578][ T407] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1956.195181][ T409] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1956.734387][T31851] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1956.894356][T31851] usb 4-1: Using ep0 maxpacket: 8 [ 1956.902498][T31851] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1956.922119][T31851] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1956.942935][T31851] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1956.955092][T31851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1956.971551][T31851] usb 4-1: Product: syz [ 1956.980300][T31851] usb 4-1: Manufacturer: syz [ 1956.990573][T31851] usb 4-1: SerialNumber: syz [ 1957.343953][ T425] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7603'. [ 1957.363437][ T425] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7603'. [ 1957.486418][ T425] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7603'. [ 1957.498550][ T425] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7603'. [ 1957.653675][ T425] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7603'. [ 1957.666948][ T425] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7603'. [ 1958.334084][ T436] syzkaller0: entered promiscuous mode [ 1958.346420][ T436] syzkaller0: entered allmulticast mode [ 1958.548439][ T441] netlink: 'syz.0.7609': attribute type 1 has an invalid length. [ 1958.565088][T31501] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1958.647783][ T447] tc_dump_action: action bad kind [ 1958.714302][T31501] usb 5-1: device descriptor read/64, error -71 [ 1958.974452][T31501] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1959.104281][T31501] usb 5-1: device descriptor read/64, error -71 [ 1959.217925][T31501] usb usb5-port1: attempt power cycle [ 1959.488831][ T5693] usb 4-1: USB disconnect, device number 36 [ 1959.537099][ T468] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7619'. [ 1959.574307][T31501] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1959.621257][T31501] usb 5-1: device descriptor read/8, error -71 [ 1959.675607][ T473] syzkaller0: entered promiscuous mode [ 1959.688861][ T473] syzkaller0: entered allmulticast mode [ 1959.735038][ T475] netlink: 'syz.0.7622': attribute type 1 has an invalid length. [ 1959.753788][ T475] macvlan2: entered promiscuous mode [ 1959.759417][ T475] macvlan2: entered allmulticast mode [ 1959.874715][T31501] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1959.905887][T31501] usb 5-1: device descriptor read/8, error -71 [ 1960.015940][T31501] usb usb5-port1: unable to enumerate USB device [ 1960.034991][ T5721] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1960.074305][ T9] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1960.101737][ T483] Scaler: ================= START STATUS ================= [ 1960.109316][ T483] Scaler: ================== END STATUS ================== [ 1960.194406][ T5721] usb 3-1: Using ep0 maxpacket: 16 [ 1960.203075][ T5721] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 1960.224868][ T5721] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1960.244441][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1960.252577][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1960.255017][ T5721] usb 3-1: config 0 has no interface number 0 [ 1960.265784][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1960.285529][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1960.296908][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1960.297382][ T5721] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1960.306713][ T9] usb 2-1: Product: syz [ 1960.319026][ T9] usb 2-1: Manufacturer: syz [ 1960.323920][ T9] usb 2-1: SerialNumber: syz [ 1960.332882][ T5721] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1960.342248][ T9] usb 2-1: config 0 descriptor?? [ 1960.349442][ T5721] usb 3-1: Product: syz [ 1960.363998][ T9] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1960.364260][ T5721] usb 3-1: Manufacturer: syz [ 1960.374267][ T9] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1960.401165][ T5721] usb 3-1: SerialNumber: syz [ 1960.409541][ T5721] usb 3-1: config 0 descriptor?? [ 1960.647751][T31851] usb 3-1: USB disconnect, device number 32 [ 1960.971638][ T9] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1960.979921][ T9] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1961.440387][ T483] syz.0.7625 (483): drop_caches: 2 [ 1961.595558][ T9] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 1961.759122][ T508] syzkaller0: entered promiscuous mode [ 1961.765176][ T508] syzkaller0: entered allmulticast mode [ 1961.820527][ T9] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 1961.829265][ T9] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 1961.837757][ T9] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 1961.847384][ T9] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 1961.854522][ T9] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 1961.854926][ T5721] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1961.868974][ T9] usb 2-1: USB disconnect, device number 43 [ 1962.056796][ T5721] usb 3-1: Using ep0 maxpacket: 8 [ 1962.070525][ T5721] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1962.090397][ T5721] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1962.115364][ T5721] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1962.134127][ T5721] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1962.155570][ T5721] usb 3-1: Product: syz [ 1962.156482][ T516] bridge0: port 2(bridge_slave_1) entered disabled state [ 1962.167473][ T516] bridge0: port 1(bridge_slave_0) entered disabled state [ 1962.175575][ T5721] usb 3-1: Manufacturer: syz [ 1962.186800][ T5721] usb 3-1: SerialNumber: syz [ 1962.299994][ T516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1962.314109][ T516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1962.461290][ T519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7637'. [ 1962.642216][ T35] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1962.668185][ T35] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1962.695781][ T35] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1962.698161][ T527] netlink: 'syz.1.7641': attribute type 1 has an invalid length. [ 1962.717882][ T35] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1962.750679][ T527] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1962.766960][ T529] macvlan2: entered promiscuous mode [ 1962.772375][ T529] macvlan2: entered allmulticast mode [ 1962.789279][ T529] bond4: entered promiscuous mode [ 1962.805768][ T529] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1962.834466][ T529] bond4: left promiscuous mode [ 1962.864281][ T5721] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1963.014414][ T5721] usb 5-1: device descriptor read/64, error -71 [ 1963.023800][ T537] syzkaller0: entered promiscuous mode [ 1963.029576][ T537] syzkaller0: entered allmulticast mode [ 1963.148231][ T539] netlink: 'syz.1.7645': attribute type 12 has an invalid length. [ 1963.254281][ T5721] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1963.415540][ T5721] usb 5-1: device descriptor read/64, error -71 [ 1963.544673][ T5721] usb usb5-port1: attempt power cycle [ 1963.750371][ T554] syzkaller0: entered promiscuous mode [ 1963.756694][ T554] syzkaller0: entered allmulticast mode [ 1963.884301][ T5721] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1963.905122][ T5721] usb 5-1: device descriptor read/8, error -71 [ 1964.144267][ T5721] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1964.164890][ T5721] usb 5-1: device descriptor read/8, error -71 [ 1964.274513][ T5721] usb usb5-port1: unable to enumerate USB device [ 1964.629825][ T5721] usb 3-1: USB disconnect, device number 33 [ 1964.781783][ T572] netlink: 'syz.2.7660': attribute type 1 has an invalid length. [ 1964.794295][ T9] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1964.810519][ T572] input: syz1 as /devices/virtual/input/input69 [ 1964.954303][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1964.969038][ T9] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1964.980056][ T9] usb 2-1: config 0 has no interface number 0 [ 1964.989696][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1964.996304][ T581] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7664'. [ 1964.999001][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1965.019578][ T9] usb 2-1: Product: syz [ 1965.023819][ T9] usb 2-1: Manufacturer: syz [ 1965.028573][ T9] usb 2-1: SerialNumber: syz [ 1965.052339][ T9] usb 2-1: config 0 descriptor?? [ 1965.094295][ T5721] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1965.244251][ T5721] usb 3-1: Using ep0 maxpacket: 16 [ 1965.251606][ T5721] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1965.268967][ T5721] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1965.278350][ T5721] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1965.286755][ T5721] usb 3-1: Product: syz [ 1965.291006][ T5721] usb 3-1: Manufacturer: syz [ 1965.295897][ T5721] usb 3-1: SerialNumber: syz [ 1965.514371][ T5721] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1965.579565][ T5721] usb 3-1: USB disconnect, device number 34 [ 1965.872623][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 1965.889901][ T590] netlink: 'syz.4.7668': attribute type 1 has an invalid length. [ 1965.931382][ T590] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1965.950890][ T590] bond2: (slave veth0_to_bond): Releasing backup interface [ 1966.083608][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1966.104821][ T9] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 1966.127275][ T9] usb 2-1: USB disconnect, device number 44 [ 1966.314392][ T5721] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1966.462606][ T610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7676'. [ 1966.474372][ T5721] usb 4-1: Using ep0 maxpacket: 8 [ 1966.488077][ T5721] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1966.512768][ T5721] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1966.535813][ T5721] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1966.546010][ T5721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1966.560578][ T5721] usb 4-1: Product: syz [ 1966.566127][ T5721] usb 4-1: Manufacturer: syz [ 1966.570841][ T5721] usb 4-1: SerialNumber: syz [ 1967.233185][ T617] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 1967.239734][ T617] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1967.322285][ T617] vhci_hcd vhci_hcd.0: Device attached [ 1967.638736][ T618] vhci_hcd: connection closed [ 1967.639849][ T35] vhci_hcd vhci_hcd.1: stop threads [ 1967.684295][ T5721] usb 36-1: SetAddress Request (34) to port 0 [ 1967.690493][ T5721] usb 36-1: new SuperSpeed USB device number 34 using vhci_hcd [ 1967.705956][ T35] vhci_hcd vhci_hcd.1: release socket [ 1967.725673][ T35] vhci_hcd vhci_hcd.1: disconnect device [ 1968.479873][ T637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7683'. [ 1968.781902][ T644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7686'. [ 1968.981957][ T655] netlink: 'syz.0.7691': attribute type 1 has an invalid length. [ 1969.000718][ T655] macvlan2: entered promiscuous mode [ 1969.007060][ T655] macvlan2: entered allmulticast mode [ 1969.089406][ T9] usb 4-1: USB disconnect, device number 37 [ 1969.212112][ T663] netlink: 'syz.3.7694': attribute type 1 has an invalid length. [ 1969.255579][ T663] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1969.264995][T31501] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1969.284998][ T663] bond3: (slave veth0_to_bond): Releasing backup interface [ 1969.439817][T31501] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1969.461716][ T670] netlink: 5 bytes leftover after parsing attributes in process `syz.3.7696'. [ 1969.472161][T31501] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1969.494317][T31501] usb 2-1: Product: syz [ 1969.501467][ T670] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1969.517019][T31501] usb 2-1: Manufacturer: syz [ 1969.523283][T31501] usb 2-1: SerialNumber: syz [ 1969.542171][T31501] usb 2-1: config 0 descriptor?? [ 1969.558973][T31501] hub 2-1:0.0: bad descriptor, ignoring hub [ 1969.569845][T31501] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1969.787711][T31501] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1969.831911][T31501] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1969.858648][T31501] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1969.881854][T31501] usb 2-1: media controller created [ 1969.948048][T31501] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1970.189386][T31501] DVB: Unable to find symbol dib7000p_attach() [ 1970.202738][T31501] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1970.346733][T31501] rc_core: IR keymap rc-dib0700-rc5 not found [ 1970.368128][T31501] Registered IR keymap rc-empty [ 1970.378857][T31501] dvb-usb: could not initialize remote control. [ 1970.393228][T31501] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1970.678721][ T5685] usb 2-1: USB disconnect, device number 45 [ 1970.728353][ T5685] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1970.938880][ T697] netlink: 'syz.2.7704': attribute type 1 has an invalid length. [ 1971.003973][ T697] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1971.018425][ T703] bond2: (slave veth0_to_bond): Releasing backup interface [ 1971.034634][ T703] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1971.077483][ T697] macvlan2: entered promiscuous mode [ 1971.082790][ T697] macvlan2: entered allmulticast mode [ 1971.093691][ T697] bond3: entered promiscuous mode [ 1971.099038][ T697] veth0_to_bond: entered promiscuous mode [ 1971.106770][ T697] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1971.114678][ T697] bond3: left promiscuous mode [ 1971.119562][ T697] veth0_to_bond: left promiscuous mode [ 1971.184282][T23487] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1971.232711][ T709] syzkaller0: entered promiscuous mode [ 1971.239534][ T709] syzkaller0: entered allmulticast mode [ 1971.344286][T23487] usb 4-1: Using ep0 maxpacket: 8 [ 1971.352570][T23487] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1971.363779][T23487] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1971.379087][T23487] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1971.408056][T23487] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1971.433659][T23487] usb 4-1: Product: syz [ 1971.445864][T23487] usb 4-1: Manufacturer: syz [ 1971.464325][T23487] usb 4-1: SerialNumber: syz [ 1972.703573][ T739] netlink: 'syz.0.7720': attribute type 1 has an invalid length. [ 1972.772227][ T739] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1972.779027][ T5721] usb 36-1: device descriptor read/8, error -110 [ 1972.792082][ T741] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1972.859621][ T739] macvlan2: entered promiscuous mode [ 1972.880881][ T739] macvlan2: entered allmulticast mode [ 1972.889932][ T739] bond1: entered promiscuous mode [ 1972.895284][ T739] veth0_to_bond: entered promiscuous mode [ 1972.902357][ T739] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1972.920998][ T739] bond1: left promiscuous mode [ 1972.929219][ T739] veth0_to_bond: left promiscuous mode [ 1973.149816][ T762] syzkaller0: entered promiscuous mode [ 1973.156277][ T762] syzkaller0: entered allmulticast mode [ 1973.182975][ T5721] usb usb36-port1: attempt power cycle [ 1973.190639][ T5693] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1973.344232][ T5693] usb 2-1: Using ep0 maxpacket: 8 [ 1973.351164][ T5693] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1973.360107][ T5693] usb 2-1: config 3 has an invalid interface number: 93 but max is 1 [ 1973.368340][ T5693] usb 2-1: config 3 has an invalid interface number: 171 but max is 1 [ 1973.376854][ T5693] usb 2-1: config 3 has no interface number 0 [ 1973.382930][ T5693] usb 2-1: config 3 has no interface number 1 [ 1973.389522][ T5693] usb 2-1: config 3 interface 93 has no altsetting 0 [ 1973.396254][ T5693] usb 2-1: config 3 interface 171 has no altsetting 0 [ 1973.405264][ T5693] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00ac, bcdDevice=2f.60 [ 1973.414427][ T5693] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1973.422466][ T5693] usb 2-1: Product: syz [ 1973.427279][ T5693] usb 2-1: Manufacturer: syz [ 1973.431886][ T5693] usb 2-1: SerialNumber: syz [ 1973.656383][ T5693] usb 2-1: USB disconnect, device number 46 [ 1973.754951][ T5721] usb usb36-port1: unable to enumerate USB device [ 1973.980310][ T9] usb 4-1: USB disconnect, device number 38 [ 1974.326358][ T773] PID 773 killed due to inadequate hugepage pool [ 1974.411214][ T782] netlink: 'syz.1.7738': attribute type 1 has an invalid length. [ 1974.472323][ T785] bond3: (slave veth0_to_bond): Releasing backup interface [ 1974.674349][ T9] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1974.836114][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1974.847856][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1974.858265][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1974.871561][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1974.881603][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1974.895005][ T9] usb 5-1: config 0 descriptor?? [ 1975.330390][ T9] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1975.524634][ T9] usb 5-1: USB disconnect, device number 63 [ 1975.895871][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.902285][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.432788][ T827] netlink: 'syz.2.7753': attribute type 1 has an invalid length. [ 1977.006124][ T849] syzkaller0: entered promiscuous mode [ 1977.012289][ T849] syzkaller0: entered allmulticast mode [ 1977.733996][ T857] netlink: 'syz.2.7765': attribute type 1 has an invalid length. [ 1978.384432][ T9] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1978.554303][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1978.568138][ T9] usb 5-1: config 0 has an invalid interface number: 61 but max is 1 [ 1978.584321][ T9] usb 5-1: config 0 has an invalid interface number: 98 but max is 1 [ 1978.606625][ T9] usb 5-1: config 0 has no interface number 0 [ 1978.622903][ T9] usb 5-1: config 0 has no interface number 1 [ 1978.635301][ T9] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 1978.654258][T22284] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1978.662057][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1978.682388][ T9] usb 5-1: Product: syz [ 1978.688608][ T9] usb 5-1: Manufacturer: syz [ 1978.703605][ T9] usb 5-1: SerialNumber: syz [ 1978.712801][ T9] usb 5-1: config 0 descriptor?? [ 1978.824293][T22284] usb 2-1: Using ep0 maxpacket: 8 [ 1978.834886][ T9] viperboard 5-1:0.61: version 0.00 found at bus 005 address 064 [ 1978.849156][T22284] usb 2-1: config 0 has no interfaces? [ 1978.876901][T22284] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1978.902752][T22284] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1978.931792][T22284] usb 2-1: Product: syz [ 1978.944489][T22284] usb 2-1: Manufacturer: syz [ 1978.959964][T22284] usb 2-1: SerialNumber: syz [ 1978.983112][T22284] usb 2-1: config 0 descriptor?? [ 1979.000325][ T9] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1979.021562][ T9] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 1979.072537][ T9] viperboard 5-1:0.98: version 0.00 found at bus 005 address 064 [ 1979.135784][ T9] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1979.156063][ T9] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 1979.213846][ T9] usb 5-1: USB disconnect, device number 64 [ 1979.311482][T22284] usb 2-1: USB disconnect, device number 47 [ 1979.364074][ T878] syzkaller0: entered promiscuous mode [ 1979.391071][ T878] syzkaller0: entered allmulticast mode [ 1979.662136][ T887] netlink: 'syz.0.7776': attribute type 1 has an invalid length. [ 1979.673997][ T887] bond1: (slave veth0_to_bond): Releasing backup interface [ 1980.095975][ T891] blktrace: Concurrent blktraces are not allowed on sg0 [ 1981.054424][ T9] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1981.219211][ T9] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1981.239907][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1981.254560][ T9] usb 2-1: Product: syz [ 1981.264404][ T9] usb 2-1: Manufacturer: syz [ 1981.274891][ T9] usb 2-1: SerialNumber: syz [ 1981.298217][ T9] usb 2-1: config 0 descriptor?? [ 1981.316665][ T9] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 048 [ 1981.613629][ T915] netlink: 'syz.3.7784': attribute type 2 has an invalid length. [ 1981.727847][ T917] syzkaller0: entered promiscuous mode [ 1981.738014][ T917] syzkaller0: entered allmulticast mode [ 1981.753847][ T9] (null): failure reading functionality [ 1981.767619][ T9] i2c i2c-1: failure reading functionality [ 1981.798289][ T9] i2c i2c-1: connected i2c-tiny-usb device [ 1981.810707][ T9] usb 2-1: USB disconnect, device number 48 [ 1982.378049][ T928] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1983.195921][ T955] binder: 953:955 ioctl 4018620d 0 returned -22 [ 1984.013810][ T961] syzkaller0: entered promiscuous mode [ 1984.029935][ T961] syzkaller0: entered allmulticast mode [ 1984.776663][ T9] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1984.945937][ T9] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1984.956950][ T9] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1984.966763][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1984.973467][ T9] usb 3-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 1984.982539][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1984.993239][ T9] usb 3-1: config 0 descriptor?? [ 1985.054331][ T5685] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1985.074255][ T5693] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1985.204235][ T5685] usb 4-1: Using ep0 maxpacket: 8 [ 1985.211273][ T5685] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1985.221497][ T5685] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1985.230423][ T5685] usb 4-1: config 1 has no interface number 0 [ 1985.238709][ T5685] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1985.244349][ T5693] usb 2-1: Using ep0 maxpacket: 32 [ 1985.247796][ T5685] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1985.247818][ T5685] usb 4-1: Product: syz [ 1985.247833][ T5685] usb 4-1: Manufacturer: syz [ 1985.247848][ T5685] usb 4-1: SerialNumber: syz [ 1985.277178][ T5693] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1985.285744][ T5693] usb 2-1: config 0 has no interface number 0 [ 1985.291881][ T5693] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1985.302817][ T5693] usb 2-1: config 0 interface 1 has no altsetting 0 [ 1985.311642][ T5693] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1985.320844][ T5693] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1985.328938][ T5693] usb 2-1: Product: syz [ 1985.333128][ T5693] usb 2-1: Manufacturer: syz [ 1985.342035][ T5693] usb 2-1: SerialNumber: syz [ 1985.350676][ T5693] usb 2-1: config 0 descriptor?? [ 1985.411048][ T9] aureal 0003:0755:2626.0014: unknown main item tag 0x0 [ 1985.418701][ T9] aureal 0003:0755:2626.0014: unknown main item tag 0x0 [ 1985.425861][ T9] aureal 0003:0755:2626.0014: unknown main item tag 0x0 [ 1985.434617][ T9] aureal 0003:0755:2626.0014: unknown main item tag 0x0 [ 1985.441655][ T9] aureal 0003:0755:2626.0014: unknown main item tag 0x0 [ 1985.448733][ T9] aureal 0003:0755:2626.0014: unknown main item tag 0x0 [ 1985.455792][ T9] aureal 0003:0755:2626.0014: unknown main item tag 0x0 [ 1985.462786][ T9] aureal 0003:0755:2626.0014: unknown main item tag 0x0 [ 1985.470222][ T9] aureal 0003:0755:2626.0014: unknown main item tag 0x0 [ 1985.477324][ T9] aureal 0003:0755:2626.0014: unknown main item tag 0x0 [ 1985.495379][ T9] aureal 0003:0755:2626.0014: hidraw0: USB HID v0.0c Device [HID 0755:2626] on usb-dummy_hcd.2-1/input0 [ 1985.597692][ T5693] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1985.616667][ T5693] cx231xx 2-1:0.1: Failed to read PCB config [ 1985.622731][ T5693] cx231xx 2-1:0.1: probe with driver cx231xx failed with error -71 [ 1985.640882][ T5693] usb 2-1: USB disconnect, device number 49 [ 1985.646753][ T9] usb 3-1: USB disconnect, device number 35 [ 1985.686374][ T5685] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1985.745532][T29443] udevd[29443]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1986.114260][ T5693] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1986.294319][ T5693] usb 2-1: Using ep0 maxpacket: 32 [ 1986.302444][ T5693] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1986.329145][ T5693] usb 2-1: config 0 has no interface number 0 [ 1986.352866][ T5693] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1986.368557][ T5693] usb 2-1: config 0 interface 1 has no altsetting 0 [ 1986.389055][ T5693] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1986.399253][ T5693] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1986.407983][ T5693] usb 2-1: Product: syz [ 1986.412548][ T5693] usb 2-1: Manufacturer: syz [ 1986.417584][ T5693] usb 2-1: SerialNumber: syz [ 1986.426565][ T5693] usb 2-1: config 0 descriptor?? [ 1986.652857][ T5693] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1986.700912][ T5693] cx231xx 2-1:0.1: bad scenario!!!!! [ 1986.700912][ T5693] config_info=0 [ 1986.718076][ T5693] cx231xx 2-1:0.1: Failed to read PCB config [ 1986.823076][ T993] syzkaller0: entered promiscuous mode [ 1986.828717][ T993] syzkaller0: entered allmulticast mode [ 1986.908009][ T5693] usb 2-1: USB disconnect, device number 50 [ 1987.840181][ T1015] netlink: 'syz.1.7818': attribute type 1 has an invalid length. [ 1987.867073][ T5721] usb 4-1: USB disconnect, device number 39 [ 1987.906052][ T1015] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1988.109471][ T1023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7817'. [ 1988.323963][ T1028] syzkaller0: entered promiscuous mode [ 1988.338565][ T1028] syzkaller0: entered allmulticast mode [ 1990.154248][ T9] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1990.168629][ T1061] syzkaller0: entered promiscuous mode [ 1990.184673][ T1061] syzkaller0: entered allmulticast mode [ 1990.334406][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1990.354456][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1990.393571][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1990.440171][ T9] usb 2-1: config 1 has no interface number 0 [ 1990.463113][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1990.531405][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1990.608371][ T9] usb 2-1: Product: syz [ 1990.646912][ T9] usb 2-1: Manufacturer: syz [ 1990.658587][ T9] usb 2-1: SerialNumber: syz [ 1990.766441][ T1086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7838'. [ 1991.073407][ T9] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1991.173469][T29443] udevd[29443]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1991.682157][ T1096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7853'. [ 1991.902782][ T1106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7853'. [ 1991.950651][ T1106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7853'. [ 1991.991370][ T1106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7853'. [ 1992.254441][ T1112] syzkaller0: entered promiscuous mode [ 1992.275158][ T1112] syzkaller0: entered allmulticast mode [ 1992.959258][ T5685] usb 2-1: USB disconnect, device number 51 [ 1993.337646][T30678] Bluetooth: hci2: command 0x0406 tx timeout [ 1993.386556][ T1136] syzkaller0: entered promiscuous mode [ 1993.403940][ T1136] syzkaller0: entered allmulticast mode [ 1993.690387][ T1144] syzkaller0: entered promiscuous mode [ 1993.714599][ T1144] syzkaller0: entered allmulticast mode [ 1994.883580][ T1152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7862'. [ 1994.937800][ T1152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7862'. [ 1994.953066][ T1152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7862'. [ 1994.993734][ T1152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7862'. [ 1995.007290][ T1152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7862'. [ 1996.174037][ T1181] syzkaller0: entered promiscuous mode [ 1996.185223][ T1181] syzkaller0: entered allmulticast mode [ 1996.243888][ T1184] IPVS: Error connecting to the multicast addr [ 1996.785945][ T1195] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1996.792505][ T1195] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1996.840952][ T1195] vhci_hcd vhci_hcd.0: Device attached [ 1997.034871][ T1195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1997.075849][ T1195] 8021q: adding VLAN 0 to HW filter on device team0 [ 1997.124393][T16898] usb 40-1: SetAddress Request (18) to port 0 [ 1997.142494][ T1195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1997.153361][T16898] usb 40-1: new SuperSpeed USB device number 18 using vhci_hcd [ 1997.465328][ T1195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1997.563789][ T1195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1997.671848][ T1195] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1997.687310][ T1195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1997.742937][ T1195] veth1_vlan: left promiscuous mode [ 1997.761183][ T1195] veth0_vlan: left promiscuous mode [ 1997.780611][ T1195] veth0_vlan: entered promiscuous mode [ 1997.808627][ T1195] veth1_vlan: entered promiscuous mode [ 1997.839709][ T1195] veth1_macvtap: left promiscuous mode [ 1997.862798][ T1195] veth0_macvtap: left promiscuous mode [ 1997.878001][ T1195] veth0_macvtap: entered promiscuous mode [ 1997.903327][ T1195] veth1_macvtap: entered promiscuous mode [ 1997.925790][ T1195] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1997.954992][ T1195] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1997.976818][ T1195] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1997.999147][ T1195] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1998.028048][ T1195] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1998.036861][ T1195] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1998.054995][ T1195] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1998.069868][T23482] bridge0: port 1(bridge_slave_0) entered blocking state [ 1998.077044][T23482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1998.104760][T23482] bridge0: port 2(bridge_slave_1) entered blocking state [ 1998.111908][T23482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1998.200226][ T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1998.211185][ T1196] vhci_hcd: connection reset by peer [ 1998.224040][T23482] vhci_hcd vhci_hcd.3: stop threads [ 1998.231519][ T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1998.243671][T23482] vhci_hcd vhci_hcd.3: release socket [ 1998.260867][T23482] vhci_hcd vhci_hcd.3: disconnect device [ 1998.276399][ T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1998.297752][T23482] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1998.896721][ T1209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7883'. [ 1998.931276][ T1209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7883'. [ 1998.954453][ T1209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7883'. [ 1998.975370][ T1209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7883'. [ 1998.991556][ T1209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7883'. [ 1999.424479][ T5693] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1999.604282][ T5693] usb 4-1: Using ep0 maxpacket: 32 [ 1999.616845][ T5693] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1999.638772][ T5693] usb 4-1: New USB device found, idVendor=0e41, idProduct=414d, bcdDevice= 0.40 [ 1999.658254][ T5693] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1999.675519][ T5693] usb 4-1: Product: syz [ 1999.684264][ T5693] usb 4-1: Manufacturer: syz [ 1999.693247][ T5693] usb 4-1: SerialNumber: syz [ 1999.716434][ T5693] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 1999.788493][ T5693] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1999.808335][ T5693] snd_usb_podhd 4-1:1.0: Line 6 POD HD500 found [ 1999.824213][ T5693] usb 4-1: selecting invalid altsetting 1 [ 1999.836082][ T5693] snd_usb_podhd 4-1:1.0: set_interface failed [ 1999.849191][ T5693] snd_usb_podhd 4-1:1.0: Line 6 POD HD500 now disconnected [ 1999.865154][ T5693] snd_usb_podhd 4-1:1.0: probe with driver snd_usb_podhd failed with error -22 [ 1999.927476][T29443] udevd[29443]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1999.951984][ T9] usb 4-1: USB disconnect, device number 40 [ 2000.025666][ T1229] syzkaller0: entered promiscuous mode [ 2000.031232][ T1229] syzkaller0: entered allmulticast mode [ 2000.158317][ T1233] binder: 1232:1233 ioctl c0306201 800003c0 returned -22 [ 2000.844320][ T5685] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 2001.014825][ T5685] usb 3-1: Using ep0 maxpacket: 8 [ 2001.030543][ T1261] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 2001.037081][ T1261] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2001.060167][ T1261] vhci_hcd vhci_hcd.0: Device attached [ 2001.082524][ T5685] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2001.113206][ T5685] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2001.165176][ T5685] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2001.202187][ T5685] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2001.245774][ T5685] usb 3-1: config 0 descriptor?? [ 2001.279154][ T5685] iowarrior 3-1:0.0: no interrupt-in endpoint found [ 2001.355930][ T5693] usb 34-1: SetAddress Request (10) to port 0 [ 2001.412569][ T5693] usb 34-1: new SuperSpeed USB device number 10 using vhci_hcd [ 2001.594010][ T1261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2001.626402][ T1261] 8021q: adding VLAN 0 to HW filter on device team0 [ 2001.694527][ T1261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2001.898932][ T1261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2001.938989][ T1261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2002.007973][ T1261] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2002.032785][ T1261] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2002.102276][ T1279] netlink: 'syz.3.7905': attribute type 1 has an invalid length. [ 2002.151987][ T1261] veth1_vlan: left promiscuous mode [ 2002.183420][ T1261] veth0_vlan: left promiscuous mode [ 2002.205737][ T1261] veth0_vlan: entered promiscuous mode [ 2002.258467][ T1261] veth1_vlan: entered promiscuous mode [ 2002.278747][ T1261] veth1_macvtap: left promiscuous mode [ 2002.294723][T16898] usb 40-1: device descriptor read/8, error -110 [ 2002.301435][ T1261] veth0_macvtap: left promiscuous mode [ 2002.320387][ T1261] veth0_macvtap: entered promiscuous mode [ 2002.328407][ T1261] veth1_macvtap: entered promiscuous mode [ 2002.375741][ T1261] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2002.396953][ T1261] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2002.407438][ T1261] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2002.421635][ T1261] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2002.458241][ T1262] vhci_hcd: connection reset by peer [ 2002.465668][T11646] vhci_hcd vhci_hcd.0: stop threads [ 2002.475163][T23482] bridge0: port 1(bridge_slave_0) entered blocking state [ 2002.476362][T11646] vhci_hcd vhci_hcd.0: release socket [ 2002.482354][T23482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2002.499777][T23482] bridge0: port 2(bridge_slave_1) entered blocking state [ 2002.507070][T23482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2002.514679][T11646] vhci_hcd vhci_hcd.0: disconnect device [ 2002.574062][T32422] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2002.615906][T32422] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2002.655163][T32422] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2002.680062][T32422] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2002.705516][T16898] usb usb40-port1: attempt power cycle [ 2003.194683][T31501] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 2003.267444][T16898] usb usb40-port1: unable to enumerate USB device [ 2003.301968][ T1304] __nla_validate_parse: 1 callbacks suppressed [ 2003.301986][ T1304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7915'. [ 2003.354259][T31501] usb 4-1: Using ep0 maxpacket: 8 [ 2003.396622][T31501] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2003.412698][T31501] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 2003.435196][T31501] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2003.447211][T31501] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2003.461896][ T1307] syzkaller0: entered promiscuous mode [ 2003.468037][T31501] usb 4-1: Product: syz [ 2003.472532][ T1307] syzkaller0: entered allmulticast mode [ 2003.478438][T31501] usb 4-1: Manufacturer: syz [ 2003.483062][T31501] usb 4-1: SerialNumber: syz [ 2003.497166][T31501] usb 4-1: config 0 descriptor?? [ 2003.502737][ T1309] netlink: 'syz.0.7917': attribute type 1 has an invalid length. [ 2003.591839][ T5685] usb 3-1: USB disconnect, device number 36 [ 2003.733099][ T29] audit: type=1326 audit(1780113215.737:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1291 comm="syz.3.7910" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702f01c code=0x0 [ 2003.812265][T23487] usb 4-1: USB disconnect, device number 41 [ 2003.853133][ T1321] syzkaller0: create flow: hash 2515524708 index 2 [ 2003.992248][T23482] syzkaller0: tun_net_xmit 76 [ 2003.997419][T23482] syzkaller0: tun_net_xmit 48 [ 2004.003419][ T1319] syzkaller0: delete flow: hash 2515524708 index 2 [ 2004.024383][ T5685] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 2004.197136][ T5685] usb 3-1: Using ep0 maxpacket: 8 [ 2004.222979][ T5685] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 2004.254863][ T5685] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2004.299007][ T5685] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2004.334312][ T5685] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2004.369311][ T5685] usb 3-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 2004.394238][ T5685] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2004.414965][ T5685] usb 3-1: Product: syz [ 2004.428233][ T5685] usb 3-1: Manufacturer: syz [ 2004.443226][ T5685] usb 3-1: SerialNumber: syz [ 2004.477438][ T5685] usb 3-1: config 0 descriptor?? [ 2004.498376][ T1313] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2004.733800][ T5685] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 2004.762699][ T5685] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input74 [ 2004.987417][ C0] powermate: config urb returned -71 [ 2004.988401][T23487] usb 3-1: USB disconnect, device number 37 [ 2004.992768][ C0] powermate: usb_submit_urb(config) failed [ 2004.998950][ C0] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 2006.095468][T23487] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 2006.115593][ T1340] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 2006.122152][ T1340] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2006.182239][ T1340] vhci_hcd vhci_hcd.0: Device attached [ 2006.315422][T23487] usb 3-1: Using ep0 maxpacket: 32 [ 2006.335977][T23487] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2006.412916][T23487] usb 3-1: string descriptor 0 read error: -22 [ 2006.422963][T23487] usb 3-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 2006.435913][T23487] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2006.465345][T23487] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 2006.544954][ T5721] usb 36-1: SetAddress Request (38) to port 0 [ 2006.568585][ T5721] usb 36-1: new SuperSpeed USB device number 38 using vhci_hcd [ 2006.623856][ T5693] usb 34-1: device descriptor read/8, error -110 [ 2006.661120][T23487] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2006.722286][T23487] usb 3-1: USB disconnect, device number 38 [ 2007.061170][ T5693] usb usb34-port1: attempt power cycle [ 2007.705916][ T5693] usb usb34-port1: unable to enumerate USB device [ 2008.428361][ T1360] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7933'. [ 2009.135043][ T1341] vhci_hcd: connection reset by peer [ 2009.141315][ T1167] vhci_hcd vhci_hcd.1: stop threads [ 2009.163058][ T1167] vhci_hcd vhci_hcd.1: release socket [ 2009.190187][ T1167] vhci_hcd vhci_hcd.1: disconnect device [ 2009.376126][ T29] audit: type=1326 audit(1780113221.387:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1367 comm="syz.3.7936" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f01c code=0x7ffc0000 [ 2009.454981][ T29] audit: type=1326 audit(1780113221.387:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1367 comm="syz.3.7936" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f01c code=0x7ffc0000 [ 2009.526668][ T29] audit: type=1326 audit(1780113221.387:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1367 comm="syz.3.7936" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=103 compat=1 ip=0xf702f01c code=0x7ffc0000 [ 2009.593130][ T29] audit: type=1326 audit(1780113221.387:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1367 comm="syz.3.7936" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f01c code=0x7ffc0000 [ 2009.649071][ T29] audit: type=1326 audit(1780113221.387:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1367 comm="syz.3.7936" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f01c code=0x7ffc0000 [ 2009.727698][ T29] audit: type=1326 audit(1780113221.387:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1367 comm="syz.3.7936" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf702f01c code=0x7ffc0000 [ 2009.783609][ T29] audit: type=1326 audit(1780113221.387:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1367 comm="syz.3.7936" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f01c code=0x7ffc0000 [ 2009.839612][ T1388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7940'. [ 2009.848813][ T29] audit: type=1326 audit(1780113221.387:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1367 comm="syz.3.7936" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f01c code=0x7ffc0000 [ 2009.874232][ T29] audit: type=1326 audit(1780113221.427:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1367 comm="syz.3.7936" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702f01c code=0x7ffc0000 [ 2009.911297][ T29] audit: type=1326 audit(1780113221.427:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1367 comm="syz.3.7936" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f01c code=0x7ffc0000 [ 2010.084041][ T1394] syzkaller0: entered promiscuous mode [ 2010.090865][ T1394] syzkaller0: entered allmulticast mode [ 2010.344375][ T1396] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7947'. [ 2011.257615][ T1418] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 2011.264161][ T1418] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2011.341575][ T1418] vhci_hcd vhci_hcd.0: Device attached [ 2011.472933][ T1421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2011.484753][ T5683] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 2011.522737][ T1421] 8021q: adding VLAN 0 to HW filter on device team0 [ 2011.615509][T23487] usb 38-1: SetAddress Request (14) to port 0 [ 2011.627905][ T1421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2011.641723][T23487] usb 38-1: new SuperSpeed USB device number 14 using vhci_hcd [ 2011.677908][ T5721] usb 36-1: device descriptor read/8, error -110 [ 2011.714427][ T5683] usb 2-1: Using ep0 maxpacket: 32 [ 2011.761999][ T5683] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2011.813354][ T5683] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2011.856732][ T5683] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2011.870278][ T1421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2011.877759][ T5683] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2011.901075][ T1421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2011.913469][ T5683] usb 2-1: config 0 descriptor?? [ 2011.937205][ T5683] hub 2-1:0.0: USB hub found [ 2011.946886][ T1421] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2011.962690][ T1421] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2011.978639][ T1421] veth1_vlan: left promiscuous mode [ 2011.985120][ T1421] veth0_vlan: left promiscuous mode [ 2011.991167][ T1421] veth0_vlan: entered promiscuous mode [ 2011.999288][ T1421] veth1_vlan: entered promiscuous mode [ 2012.009364][ T1421] veth1_macvtap: left promiscuous mode [ 2012.016174][ T1421] veth0_macvtap: left promiscuous mode [ 2012.022587][ T1421] veth0_macvtap: entered promiscuous mode [ 2012.029703][ T1421] veth1_macvtap: entered promiscuous mode [ 2012.042007][ T1421] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2012.050813][ T1421] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2012.058950][ T1421] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2012.067364][ T1421] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2012.076809][ T1421] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2012.084026][ T1421] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2012.092027][ T1421] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2012.105535][ T1425] syzkaller0: entered promiscuous mode [ 2012.111059][ T1425] syzkaller0: entered allmulticast mode [ 2012.117447][ T5721] usb usb36-port1: attempt power cycle [ 2012.127127][ T6551] bridge0: port 1(bridge_slave_0) entered blocking state [ 2012.134391][ T6551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2012.152705][ T1419] vhci_hcd: connection reset by peer [ 2012.159012][ T5683] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 2012.167620][T11646] vhci_hcd vhci_hcd.2: stop threads [ 2012.172874][T11646] vhci_hcd vhci_hcd.2: release socket [ 2012.180037][ T6551] bridge0: port 2(bridge_slave_1) entered blocking state [ 2012.187177][ T6551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2012.195026][T11646] vhci_hcd vhci_hcd.2: disconnect device [ 2012.237295][T23482] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2012.246442][T23482] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2012.257709][T23482] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2012.266836][T23482] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2012.395816][ T1429] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7958'. [ 2012.577726][ T5683] hid_parser_main: 64 callbacks suppressed [ 2012.577749][ T5683] hid-generic 0003:046D:C31C.0015: unknown main item tag 0x0 [ 2012.621083][ T5683] hid-generic 0003:046D:C31C.0015: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 2012.726486][ T5721] usb usb36-port1: unable to enumerate USB device [ 2013.217460][ T1450] PID 1450 killed due to inadequate hugepage pool [ 2013.241923][ T1417] usb 2-1: reset high-speed USB device number 52 using dummy_hcd [ 2013.431317][ T1459] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7971'. [ 2013.552907][ T1464] syzkaller0: entered promiscuous mode [ 2013.570194][ T1464] syzkaller0: entered allmulticast mode [ 2013.814781][T30678] Bluetooth: hci4: command 0x0406 tx timeout [ 2013.941794][T22284] usb 2-1: USB disconnect, device number 52 [ 2014.297695][ T5685] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 2014.522234][ T5685] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2014.591072][ T5685] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2014.630872][ T5685] usb 3-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2014.668270][ T5685] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2014.684337][ T5685] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 2014.715004][ T5685] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2014.749236][ T5685] usb 3-1: config 0 descriptor?? [ 2015.478765][ T1502] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 2015.485320][ T1502] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2015.548616][ T1502] vhci_hcd vhci_hcd.0: Device attached [ 2015.772608][ T1505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2015.814502][T16898] usb 42-1: SetAddress Request (6) to port 0 [ 2015.823906][ T1505] 8021q: adding VLAN 0 to HW filter on device team0 [ 2015.843383][T16898] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 2015.906425][ T1505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2016.119628][ T1505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2016.152998][ T1505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2016.205072][ T1505] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2016.222083][ T1505] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2016.307862][ T1505] veth1_vlan: left promiscuous mode [ 2016.350686][ T1505] veth0_vlan: left promiscuous mode [ 2016.373432][ T1505] veth0_vlan: entered promiscuous mode [ 2016.415129][ T1505] veth1_vlan: entered promiscuous mode [ 2016.431292][ T5685] usbhid 3-1:0.0: can't add hid device: -71 [ 2016.444032][ T5685] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2016.450960][ T1505] veth1_macvtap: left promiscuous mode [ 2016.476792][ T1505] veth0_macvtap: left promiscuous mode [ 2016.491169][ T5685] usb 3-1: USB disconnect, device number 39 [ 2016.517130][ T1505] veth0_macvtap: entered promiscuous mode [ 2016.546528][ T1505] veth1_macvtap: entered promiscuous mode [ 2016.617941][ T1505] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2016.656910][ T1505] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2016.718817][ T1505] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2016.752340][ T1505] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2016.774666][T23487] usb 38-1: device descriptor read/8, error -110 [ 2016.784451][ T1505] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2016.801353][ T1505] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2016.819231][ T1505] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2016.842904][T11646] bridge0: port 1(bridge_slave_0) entered blocking state [ 2016.850039][T11646] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2016.865180][ T1503] vhci_hcd: connection reset by peer [ 2016.872588][ T137] vhci_hcd vhci_hcd.4: stop threads [ 2016.878428][ T137] vhci_hcd vhci_hcd.4: release socket [ 2016.885520][ T1519] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7982'. [ 2016.906152][T11646] bridge0: port 2(bridge_slave_1) entered blocking state [ 2016.913260][T11646] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2016.921143][ T137] vhci_hcd vhci_hcd.4: disconnect device [ 2016.948334][ T1524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7984'. [ 2016.969116][ T1167] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2016.978279][ T1167] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2016.998052][ T1167] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2017.009767][ T1167] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2017.062000][ T1520] syzkaller0: entered promiscuous mode [ 2017.067643][ T1520] syzkaller0: entered allmulticast mode [ 2017.192575][T23487] usb usb38-port1: attempt power cycle [ 2017.608373][ T1529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7985'. [ 2017.651317][ T1529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7985'. [ 2017.776739][T23487] usb usb38-port1: unable to enumerate USB device [ 2018.799734][ T1563] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 2018.806280][ T1563] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2018.816307][ T1563] vhci_hcd vhci_hcd.0: Device attached [ 2021.577141][ T1571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8000'. [ 2021.804174][ T1527] bridge0: port 2(bridge_slave_1) entered disabled state [ 2021.811738][ T1527] bridge0: port 1(bridge_slave_0) entered disabled state [ 2022.026399][ T1527] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2022.058139][ T1527] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2022.087327][ T1578] netlink: 336 bytes leftover after parsing attributes in process `syz.3.8004'. [ 2022.099638][ T1578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8004'. [ 2022.308290][ T1563] bridge0: port 1(bridge_slave_0) entered disabled state [ 2022.329455][ T1563] bridge0: port 2(bridge_slave_1) entered disabled state [ 2022.412492][ T1564] vhci_hcd: connection reset by peer [ 2022.418649][ T137] vhci_hcd vhci_hcd.4: stop threads [ 2022.438890][ T137] vhci_hcd vhci_hcd.4: release socket [ 2022.461784][ T35] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2022.477151][ T137] vhci_hcd vhci_hcd.4: disconnect device [ 2022.486558][T16898] usb 42-1: device descriptor read/8, error -110 [ 2022.504568][T11646] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2022.523338][T11646] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2022.554845][T11646] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2022.599484][ T1594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8012'. [ 2022.672839][ T1597] syzkaller0: entered promiscuous mode [ 2022.680582][ T1597] syzkaller0: entered allmulticast mode [ 2022.697029][ T5693] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 2022.847334][ T1602] PID 1602 killed due to inadequate hugepage pool [ 2022.876882][ T5693] usb 4-1: config 0 has no interfaces? [ 2022.893056][ T5693] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2022.915562][T16898] usb usb42-port1: attempt power cycle [ 2022.921252][ T5693] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2022.942109][ T5693] usb 4-1: config 0 descriptor?? [ 2023.171778][ T1611] bridge0: port 2(bridge_slave_1) entered disabled state [ 2023.179367][ T1611] bridge0: port 1(bridge_slave_0) entered disabled state [ 2023.263308][ T1620] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8022'. [ 2023.289670][ T1611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2023.300373][ T1611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2023.361882][T11646] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2023.382011][T11646] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2023.391411][T11646] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2023.401948][T11646] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2023.446931][ T1622] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8034'. [ 2023.485776][T16898] usb usb42-port1: unable to enumerate USB device [ 2023.623312][ T1629] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2023.641105][ T1629] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 2023.788220][ T1642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8031'. [ 2024.902047][ T1663] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8041'. [ 2024.925004][ T1663] bond6: (slave veth0_to_bond): Releasing backup interface [ 2025.403523][ T1653] syz.4.8037 (1653): drop_caches: 2 [ 2025.451401][T23487] usb 4-1: USB disconnect, device number 42 [ 2025.794234][T23487] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 2025.954268][T23487] usb 4-1: Using ep0 maxpacket: 8 [ 2025.961524][T23487] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2025.983680][T23487] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2026.001275][T23487] usb 4-1: config 1 has no interface number 0 [ 2026.013178][T23487] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2026.039991][T23487] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 2026.048277][ T1689] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8053'. [ 2026.060275][T23487] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2026.084028][T23487] usb 4-1: Product: syz [ 2026.093478][T23487] usb 4-1: Manufacturer: syz [ 2026.109365][T23487] usb 4-1: SerialNumber: syz [ 2026.190030][ T1693] syzkaller0: entered promiscuous mode [ 2026.202867][ T1693] syzkaller0: entered allmulticast mode [ 2026.526586][T23487] usb 4-1: USB disconnect, device number 43 [ 2026.597599][ T1708] PID 1708 killed due to inadequate hugepage pool [ 2026.599093][T29222] udevd[29222]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2027.081712][ T1731] syzkaller0: entered promiscuous mode [ 2027.099861][ T1731] syzkaller0: entered allmulticast mode [ 2027.418057][T23487] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 2027.604249][T23487] usb 2-1: Using ep0 maxpacket: 8 [ 2027.624977][T23487] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 2027.647483][T23487] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2027.660829][T23487] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2027.672137][T23487] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2027.686630][T23487] usb 2-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 2027.696194][T23487] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2027.704398][T23487] usb 2-1: Product: syz [ 2027.711078][T23487] usb 2-1: Manufacturer: syz [ 2027.728506][T23487] usb 2-1: SerialNumber: syz [ 2027.758866][T23487] usb 2-1: config 0 descriptor?? [ 2027.776895][ T1734] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2028.011569][ T1756] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8083'. [ 2028.033008][T23487] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 2028.076195][T23487] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input79 [ 2028.135473][T31851] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 2028.260573][ C1] powermate: config urb returned -71 [ 2028.269473][ C1] powermate: config urb returned -71 [ 2028.275027][ C1] powermate: config urb returned -71 [ 2028.280512][ C1] powermate: config urb returned -71 [ 2028.298403][ C1] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 2028.307195][T23487] usb 2-1: USB disconnect, device number 53 [ 2028.307687][T31851] usb 5-1: Using ep0 maxpacket: 8 [ 2028.328863][T31851] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2028.370203][T31851] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2028.413087][T31851] usb 5-1: config 1 has no interface number 0 [ 2028.430581][T31851] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2028.486422][T31851] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 2028.497204][T31851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2028.514208][T31851] usb 5-1: Product: syz [ 2028.524223][T31851] usb 5-1: Manufacturer: syz [ 2028.534570][T31851] usb 5-1: SerialNumber: syz [ 2028.844408][T31851] usb 5-1: USB disconnect, device number 65 [ 2029.174967][T30678] Bluetooth: hci0: command 0x2016 tx timeout [ 2029.551813][ T1782] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2029.566860][ T1782] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2029.803495][T23482] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2029.820597][ T1786] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8095'. [ 2029.826088][T23482] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2029.840138][T23482] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2029.851642][T23482] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2030.011273][ T1794] dvmrp0: entered allmulticast mode [ 2030.353984][ T1811] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2030.414920][ T1816] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 2030.731917][ T1825] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8110'. [ 2030.750381][ T1825] bond4: (slave veth0_to_bond): Releasing backup interface [ 2031.430744][ T1841] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2031.447977][ T1846] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 2031.547364][ T1850] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 2031.553915][ T1850] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2031.603738][ T1850] vhci_hcd vhci_hcd.0: Device attached [ 2031.660254][ T1854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2031.687399][ T1854] 8021q: adding VLAN 0 to HW filter on device team0 [ 2031.700432][ T1854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2031.807734][ T1860] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8123'. [ 2031.811435][ T1854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2031.832594][ T1854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2031.854086][ T1854] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2031.884527][ T5721] usb 42-1: SetAddress Request (10) to port 0 [ 2031.893929][ T1854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2031.908363][ T5721] usb 42-1: new SuperSpeed USB device number 10 using vhci_hcd [ 2031.960097][ T1854] veth1_vlan: left promiscuous mode [ 2031.966778][ T1854] veth0_vlan: left promiscuous mode [ 2031.972730][ T1854] veth0_vlan: entered promiscuous mode [ 2031.981527][ T1854] veth1_vlan: entered promiscuous mode [ 2031.990845][ T1854] veth1_macvtap: left promiscuous mode [ 2031.997524][ T1854] veth0_macvtap: left promiscuous mode [ 2032.003791][ T1854] veth0_macvtap: entered promiscuous mode [ 2032.010646][ T1854] veth1_macvtap: entered promiscuous mode [ 2032.020492][ T1854] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2032.028747][ T1854] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2032.036918][ T1854] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2032.044963][ T1854] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2032.055475][ T1854] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2032.062870][ T1854] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2032.070545][ T1854] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2032.082445][T23482] bridge0: port 1(bridge_slave_0) entered blocking state [ 2032.089614][T23482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2032.099771][T23482] bridge0: port 2(bridge_slave_1) entered blocking state [ 2032.106965][T23482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2032.207388][ T1851] vhci_hcd: connection reset by peer [ 2032.212953][T24792] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2032.236256][ T1167] vhci_hcd vhci_hcd.4: stop threads [ 2032.241701][ T1167] vhci_hcd vhci_hcd.4: release socket [ 2032.245982][T24792] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2032.254882][ T1167] vhci_hcd vhci_hcd.4: disconnect device [ 2032.276447][T24792] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2032.300499][T24792] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2032.335587][ T1872] Set syz1 is full, maxelem 2 reached [ 2033.594257][T31851] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 2033.709086][ T1914] bridge0: port 3(syz_tun) entered blocking state [ 2033.716039][ T1914] bridge0: port 3(syz_tun) entered disabled state [ 2033.722871][ T1914] syz_tun: entered allmulticast mode [ 2033.730544][ T1914] syz_tun: entered promiscuous mode [ 2033.795798][T31851] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2033.803971][T31851] usb 4-1: config 0 has no interface number 0 [ 2033.824256][T31851] usb 4-1: too many endpoints for config 0 interface 1 altsetting 255: 255, using maximum allowed: 30 [ 2033.838573][T31851] usb 4-1: config 0 interface 1 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 2033.843904][ T1916] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8146'. [ 2033.865884][T31851] usb 4-1: config 0 interface 1 has no altsetting 0 [ 2033.884370][T31851] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 2033.906585][T31851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2033.927331][T31851] usb 4-1: config 0 descriptor?? [ 2034.075115][ T1920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8148'. [ 2034.139579][T31851] usb 4-1: string descriptor 0 read error: -71 [ 2034.171124][T31851] usb 4-1: selecting invalid altsetting 1 [ 2034.187573][T31851] dvb_ttusb_budget: ttusb_init_controller: error [ 2034.208173][T31851] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 2034.334783][T31851] DVB: Unable to find symbol cx22700_attach() [ 2034.452810][T31851] DVB: Unable to find symbol tda10046_attach() [ 2034.463734][T31851] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 2034.488108][T31851] usb 4-1: USB disconnect, device number 44 [ 2035.154380][T23487] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 2035.336004][T23487] usb 4-1: Using ep0 maxpacket: 8 [ 2035.345908][T23487] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 2035.364283][T23487] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2035.389776][T23487] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2035.410721][T23487] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2035.431928][T23487] usb 4-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 2035.451410][T23487] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2035.474841][T23487] usb 4-1: Product: syz [ 2035.488565][T23487] usb 4-1: Manufacturer: syz [ 2035.518444][T23487] usb 4-1: SerialNumber: syz [ 2035.531214][T23487] usb 4-1: config 0 descriptor?? [ 2035.540267][ T1961] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2035.767016][T23487] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 2035.814068][T23487] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input81 [ 2036.052293][ C1] powermate: config urb returned -71 [ 2036.053593][T17524] usb 4-1: USB disconnect, device number 45 [ 2036.057619][ C1] powermate: usb_submit_urb(config) failed [ 2036.057666][ C1] powermate 4-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 2036.084297][T16898] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 2036.267017][T16898] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2036.288284][T16898] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2036.316782][T16898] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2036.343150][T16898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2036.366226][ T2008] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 2036.372765][ T2008] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2036.392624][ T1996] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2036.405084][ T2008] vhci_hcd vhci_hcd.0: Device attached [ 2036.419788][T16898] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2036.534483][T31851] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 2036.543319][ T2011] bridge0: port 1(bridge_slave_0) entered disabled state [ 2036.590842][ T2011] bridge0: port 2(bridge_slave_1) entered disabled state [ 2036.699047][T31851] usb 3-1: config 0 has no interfaces? [ 2036.708276][T31851] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2036.721732][T31851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2036.811875][T31851] usb 3-1: config 0 descriptor?? [ 2036.970151][ T2009] vhci_hcd: connection closed [ 2036.972838][T23482] vhci_hcd vhci_hcd.4: stop threads [ 2036.989403][T16898] usb 2-1: USB disconnect, device number 54 [ 2036.995855][T23482] vhci_hcd vhci_hcd.4: release socket [ 2037.006034][T23482] vhci_hcd vhci_hcd.4: disconnect device [ 2037.018825][ T5721] usb 42-1: device descriptor read/8, error -110 [ 2037.347008][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.355348][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.438354][ T5721] usb usb42-port1: attempt power cycle [ 2038.015581][ T5721] usb usb42-port1: unable to enumerate USB device [ 2038.114228][ T9] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 2038.284946][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 2038.302632][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 2038.319500][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2038.345285][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2038.366071][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2038.380982][ T9] usb 2-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 2038.392649][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2038.403193][ T9] usb 2-1: Product: syz [ 2038.407823][ T9] usb 2-1: Manufacturer: syz [ 2038.412842][ T9] usb 2-1: SerialNumber: syz [ 2038.421551][ T9] usb 2-1: config 0 descriptor?? [ 2038.436478][ T2040] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2038.666314][ T9] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 2038.688983][ T9] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input83 [ 2038.907379][ T2066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2038.921409][ C0] powermate: config urb returned -71 [ 2038.922800][T16898] usb 2-1: USB disconnect, device number 55 [ 2038.926725][ C0] powermate: usb_submit_urb(config) failed [ 2038.926781][ C0] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 2038.962683][ T2066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2039.207038][ T35] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2039.219463][ T35] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2039.248271][ T35] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2039.270041][ T35] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2039.357468][ T9] usb 3-1: USB disconnect, device number 40 [ 2039.445912][ T5721] IPVS: starting estimator thread 0... [ 2039.554259][ T2075] IPVS: using max 34 ests per chain, 81600 per kthread [ 2039.608562][ T2079] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8214'. [ 2039.850425][ T2091] PID 2091 killed due to inadequate hugepage pool [ 2040.033061][ T2103] netlink: 'syz.4.8226': attribute type 1 has an invalid length. [ 2040.087387][ T2103] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2040.103497][ T2110] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 2040.171711][ T2112] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8228'. [ 2040.351285][ T2123] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8233'. [ 2040.381700][ T2123] ipvlan2: entered allmulticast mode [ 2040.391704][ T2123] syz_tun: entered allmulticast mode [ 2040.729937][ T2141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8240'. [ 2041.298062][ T2169] snd_dummy snd_dummy.0: control 4:5:128:syz1:2097152 is already present [ 2041.433803][ T2174] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2041.475627][ T2174] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 2041.517014][ T2174] macvlan2: entered promiscuous mode [ 2041.522589][ T2174] macvlan2: entered allmulticast mode [ 2041.529801][ T2174] bond4: entered promiscuous mode [ 2041.535498][ T2174] veth0_to_bond: entered promiscuous mode [ 2041.542447][ T2174] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2041.551028][ T2174] bond4: left promiscuous mode [ 2041.556352][ T2174] veth0_to_bond: left promiscuous mode [ 2041.981886][ T2199] snd_dummy snd_dummy.0: control 4:5:128:syz1:2097152 is already present [ 2042.221575][ T1167] bond0: (slave bond_slave_0): interface is now down [ 2042.231890][ T2209] netlink: 'syz.1.8266': attribute type 10 has an invalid length. [ 2042.260763][ T1167] bond0: (slave bond_slave_1): interface is now down [ 2042.299975][ T2209] syz_tun: entered promiscuous mode [ 2042.320014][ T2209] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 2042.321114][ T2214] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8267'. [ 2042.337515][ T1167] bond0: (slave bond_slave_0): interface is now down [ 2042.348861][ T1167] bond0: (slave bond_slave_1): interface is now down [ 2042.356486][ T1167] bond0: (slave syz_tun): interface is now down [ 2042.400132][ T1167] bond0: now running without any active interface! [ 2042.605132][ T2226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8272'. [ 2042.727596][ T2230] snd_dummy snd_dummy.0: control 4:5:128:syz1:2097152 is already present [ 2042.954232][ T5693] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 2043.137126][ T5693] usb 2-1: config 0 has no interfaces? [ 2043.158368][ T5693] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2043.169247][ T2251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8283'. [ 2043.174726][ T5693] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2043.216537][ T5693] usb 2-1: config 0 descriptor?? [ 2043.228181][ T2255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8282'. [ 2043.256537][ T2249] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2043.279447][ T2255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8282'. [ 2043.306786][ T2255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2043.317064][ T2255] bond5: (slave bond0): making interface the new active one [ 2043.326588][ T2255] bond5: (slave bond0): Enslaving as an active interface with an up link [ 2043.451496][ T5693] usb 2-1: USB disconnect, device number 56 [ 2043.744968][ T2270] snd_dummy snd_dummy.0: control 4:5:128:syz1:2097152 is already present [ 2044.298879][ T2285] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2044.331897][ T2285] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2044.629498][T23482] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2044.654210][T23482] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 2044.686894][T23482] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2044.705855][T23482] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 2044.727492][T23482] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2044.747629][T23482] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 2044.779793][T23482] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2044.817257][T23482] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 2045.321428][ T2309] snd_dummy snd_dummy.0: control 4:5:128:syz1:2097152 is already present [ 2046.078285][ T2353] snd_dummy snd_dummy.0: control 4:5:128:syz1:2097152 is already present [ 2046.179068][ T2363] bond5: (slave veth0_to_bond): Releasing backup interface [ 2046.945967][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 2046.945984][ T29] audit: type=1326 audit(1780113258.957:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2394 comm="syz.2.8338" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6fcf01c code=0x0 [ 2047.048920][ T2397] bond5: (slave veth0_to_bond): Releasing backup interface [ 2047.260798][ T2404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8341'. [ 2047.280932][ T2402] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2047.310340][ T2404] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8341'. [ 2047.724943][T31851] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 2047.907712][T31851] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2047.947555][T31851] usb 2-1: config 0 has no interface number 0 [ 2047.964896][ T2426] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 2047.971448][ T2426] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2047.975862][T31851] usb 2-1: too many endpoints for config 0 interface 1 altsetting 255: 255, using maximum allowed: 30 [ 2048.003637][ T2426] vhci_hcd vhci_hcd.0: Device attached [ 2048.035989][T31851] usb 2-1: config 0 interface 1 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 2048.099239][T31851] usb 2-1: config 0 interface 1 has no altsetting 0 [ 2048.124257][T31851] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 2048.159736][T31851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2048.192892][T31851] usb 2-1: config 0 descriptor?? [ 2048.231452][ T2432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2048.265811][ T2432] 8021q: adding VLAN 0 to HW filter on device team0 [ 2048.304331][T23487] usb 42-1: SetAddress Request (14) to port 0 [ 2048.336971][T23487] usb 42-1: new SuperSpeed USB device number 14 using vhci_hcd [ 2048.345989][ T2432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2048.423418][T31851] usb 2-1: string descriptor 0 read error: -71 [ 2048.448584][T31851] usb 2-1: selecting invalid altsetting 1 [ 2048.466674][T31851] dvb_ttusb_budget: ttusb_init_controller: error [ 2048.483242][T31851] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 2048.511043][ T2432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2048.566995][ T2432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2048.620817][ T2432] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2048.641407][ T2432] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2048.653061][T31851] DVB: Unable to find symbol cx22700_attach() [ 2048.711312][T31851] DVB: Unable to find symbol tda10046_attach() [ 2048.715830][ T2432] veth1_vlan: left promiscuous mode [ 2048.735086][ T2432] veth0_vlan: left promiscuous mode [ 2048.749441][T31851] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 2048.750434][ T2432] veth0_vlan: entered promiscuous mode [ 2048.790144][T31851] usb 2-1: USB disconnect, device number 57 [ 2048.815681][ T2432] veth1_vlan: entered promiscuous mode [ 2048.885076][ T2432] veth1_macvtap: left promiscuous mode [ 2048.918016][ T2432] veth0_macvtap: left promiscuous mode [ 2048.944609][ T2432] veth0_macvtap: entered promiscuous mode [ 2048.978987][ T2432] veth1_macvtap: entered promiscuous mode [ 2049.055116][ T2432] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2049.115957][ T2432] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2049.153683][ T2432] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2049.175757][ T2432] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2049.197487][ T2432] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2049.207171][ T2453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8355'. [ 2049.224956][ T2432] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2049.231598][ T2453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8355'. [ 2049.244994][ T2432] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2049.265047][ T2432] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2049.281277][ T2432] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2049.301981][T11646] bridge0: port 1(bridge_slave_0) entered blocking state [ 2049.309087][T11646] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2049.358312][T11646] bridge0: port 2(bridge_slave_1) entered blocking state [ 2049.365509][T11646] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2049.465195][ T1167] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2049.479794][ T1167] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2049.481024][ T2427] vhci_hcd: connection reset by peer [ 2049.505167][ T1167] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2049.514818][T11646] vhci_hcd vhci_hcd.4: stop threads [ 2049.524646][T11646] vhci_hcd vhci_hcd.4: release socket [ 2049.536381][T11646] vhci_hcd vhci_hcd.4: disconnect device [ 2049.603853][ T2448] 8021q: adding VLAN 0 to HW filter on device bond7 [ 2049.648039][ T1167] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2049.926077][ T2463] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8359'. [ 2050.593337][ T2491] netlink: 'syz.4.8368': attribute type 1 has an invalid length. [ 2050.642104][ T2491] 8021q: adding VLAN 0 to HW filter on device bond7 [ 2050.670342][ T2491] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 2050.691068][ T2491] macvlan2: entered promiscuous mode [ 2050.701185][ T2491] macvlan2: entered allmulticast mode [ 2050.709924][ T2491] bond7: entered promiscuous mode [ 2050.716362][ T2491] veth0_to_bond: entered promiscuous mode [ 2050.723748][ T2491] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2050.732409][ T2491] bond7: left promiscuous mode [ 2050.737867][ T2491] veth0_to_bond: left promiscuous mode [ 2050.987165][ T2505] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8371'. [ 2051.024725][ T2505] bond4: (slave veth0_to_bond): Releasing backup interface [ 2051.989895][ T2545] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8377'. [ 2052.068878][ T2550] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 2052.075434][ T2550] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2052.098549][ T2550] vhci_hcd vhci_hcd.0: Device attached [ 2052.289492][ T2550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2052.341056][ T2550] 8021q: adding VLAN 0 to HW filter on device team0 [ 2052.364279][T16898] usb 36-1: SetAddress Request (42) to port 0 [ 2052.390504][T16898] usb 36-1: new SuperSpeed USB device number 42 using vhci_hcd [ 2052.400520][ T2550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2052.567260][ T2550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2052.608658][ T2550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2052.649732][ T2550] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2052.677197][ T2550] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2052.731697][ T2550] veth1_vlan: left promiscuous mode [ 2052.742953][ T2550] veth0_vlan: left promiscuous mode [ 2052.755213][ T2550] veth0_vlan: entered promiscuous mode [ 2052.771972][ T2550] veth1_vlan: entered promiscuous mode [ 2052.794849][ T2550] veth1_macvtap: left promiscuous mode [ 2052.801042][ T2550] veth0_macvtap: left promiscuous mode [ 2052.808189][ T2550] veth0_macvtap: entered promiscuous mode [ 2052.823915][ T2550] veth1_macvtap: entered promiscuous mode [ 2052.841807][ T2550] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2052.861949][ T2550] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2052.886142][ T2550] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2052.901998][ T2550] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2052.952921][ T2550] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2052.966201][ T2550] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2052.992589][ T2550] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2053.011334][ T2550] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2053.025111][ T2550] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2053.032784][ T2550] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2053.049157][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 2053.056294][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2053.086084][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 2053.093268][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2053.140636][ T35] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2053.157350][ T2551] vhci_hcd: connection reset by peer [ 2053.164330][ T35] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 2053.185833][T24039] vhci_hcd vhci_hcd.1: stop threads [ 2053.192916][ T35] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2053.193010][T24039] vhci_hcd vhci_hcd.1: release socket [ 2053.210163][T24039] vhci_hcd vhci_hcd.1: disconnect device [ 2053.222743][ T35] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 2053.250962][ T35] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2053.266538][ T35] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 2053.280063][ T35] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2053.289478][ T35] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 2053.369069][ T2576] fuse: root generation should be zero [ 2053.417125][T23487] usb 42-1: device descriptor read/8, error -110 [ 2053.661115][ T5637] Bluetooth: hci5: ISO packet for unknown connection handle 0 [ 2053.825644][T23487] usb usb42-port1: attempt power cycle [ 2053.970551][ T2603] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8394'. [ 2054.446882][T23487] usb usb42-port1: unable to enumerate USB device [ 2054.766866][ T2633] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8405'. [ 2055.004377][ T9] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 2055.179841][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2055.201430][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 2055.220076][ T9] usb 5-1: config 3 has an invalid interface number: 166 but max is 0 [ 2055.235744][ T9] usb 5-1: config 3 has no interface number 0 [ 2055.250614][ T9] usb 5-1: config 3 interface 166 has no altsetting 0 [ 2055.273844][ T9] usb 5-1: New USB device found, idVendor=0c45, idProduct=624f, bcdDevice=e8.db [ 2055.290511][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2055.309187][ T9] usb 5-1: Product: syz [ 2055.320582][ T9] usb 5-1: Manufacturer: syz [ 2055.330372][ T9] usb 5-1: SerialNumber: syz [ 2055.416079][T31851] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 2055.566522][ T9] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:624f [ 2055.587110][T31851] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 2055.600541][ T9] gspca_sn9c20x: Write register 1000 failed -71 [ 2055.614415][T31851] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 2055.626156][ T9] gspca_sn9c20x: Device initialization failed [ 2055.636368][ T9] gspca_sn9c20x 5-1:3.166: probe with driver gspca_sn9c20x failed with error -71 [ 2055.654941][T31851] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 2055.670487][ T9] usb 5-1: USB disconnect, device number 66 [ 2055.688554][T31851] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 2055.710420][T31851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2055.731885][T31851] usb 4-1: Product: syz [ 2055.741685][T31851] usb 4-1: Manufacturer: syz [ 2055.754242][T31851] usb 4-1: SerialNumber: syz [ 2055.770476][T31851] usb 4-1: config 0 descriptor?? [ 2055.784975][ T2638] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 2055.795200][ T2638] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 2055.819132][T31851] usb 4-1: ucan: probing device on interface #0 [ 2056.078865][ T2638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2056.107139][ T2638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2056.149986][ T2638] bridge0: port 3(netdevsim0) entered blocking state [ 2056.164697][ T2638] bridge0: port 3(netdevsim0) entered disabled state [ 2056.199330][ T2638] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 2056.257463][ T2638] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 2056.368600][T31851] usb 4-1: ucan: could not read protocol version, ret=-71 [ 2056.387999][T31851] usb 4-1: ucan: probe failed; try to update the device firmware [ 2056.416721][T31851] usb 4-1: USB disconnect, device number 46 [ 2056.912787][ T29] audit: type=1326 audit(1780113268.917:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2657 comm="syz.4.8415" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f1501c code=0x7ffc0000 [ 2056.986869][ T29] audit: type=1326 audit(1780113268.947:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2657 comm="syz.4.8415" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f1501c code=0x7ffc0000 [ 2057.062145][ T29] audit: type=1326 audit(1780113269.027:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2657 comm="syz.4.8415" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=396 compat=1 ip=0xf7f1501c code=0x7ffc0000 [ 2057.099869][ T2665] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8416'. [ 2057.140211][ T29] audit: type=1326 audit(1780113269.027:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2657 comm="syz.4.8415" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f1501c code=0x7ffc0000 [ 2057.223579][ T29] audit: type=1326 audit(1780113269.027:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2657 comm="syz.4.8415" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f1501c code=0x7ffc0000 [ 2057.293997][ T29] audit: type=1326 audit(1780113269.107:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2657 comm="syz.4.8415" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7f1501c code=0x7ffc0000 [ 2057.372457][ T29] audit: type=1326 audit(1780113269.147:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2657 comm="syz.4.8415" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f1501c code=0x7ffc0000 [ 2057.447768][ T29] audit: type=1326 audit(1780113269.217:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2657 comm="syz.4.8415" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f1501c code=0x7ffc0000 [ 2057.504407][T16898] usb 36-1: device descriptor read/8, error -110 [ 2057.604599][T31501] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 2057.766777][T31501] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2057.784656][T31501] usb 4-1: config 0 has no interface number 0 [ 2057.801242][T31501] usb 4-1: too many endpoints for config 0 interface 1 altsetting 255: 255, using maximum allowed: 30 [ 2057.828206][T31501] usb 4-1: config 0 interface 1 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 2057.857394][T31501] usb 4-1: config 0 interface 1 has no altsetting 0 [ 2057.870051][T31501] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 2057.890126][T31501] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2057.915583][T16898] usb usb36-port1: attempt power cycle [ 2057.922223][T31501] usb 4-1: config 0 descriptor?? [ 2058.086060][T17524] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 2058.135059][T31501] usb 4-1: string descriptor 0 read error: -71 [ 2058.148612][T31501] usb 4-1: selecting invalid altsetting 1 [ 2058.156190][T31501] dvb_ttusb_budget: ttusb_init_controller: error [ 2058.162564][T31501] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 2058.249473][T17524] usb 2-1: config 0 has no interfaces? [ 2058.277607][T17524] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2058.311412][T31501] DVB: Unable to find symbol cx22700_attach() [ 2058.321701][T17524] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2058.355010][T17524] usb 2-1: config 0 descriptor?? [ 2058.431074][T31501] DVB: Unable to find symbol tda10046_attach() [ 2058.446985][T31501] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 2058.486802][T31501] usb 4-1: USB disconnect, device number 47 [ 2058.505064][T16898] usb usb36-port1: unable to enumerate USB device [ 2058.811463][ T29] audit: type=1326 audit(1780113270.817:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2697 comm="syz.2.8428" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcf01c code=0x7fc00000 [ 2058.938803][ T2727] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2059.471711][ T2749] bond7: (slave veth0_to_bond): Releasing backup interface [ 2059.552785][ T2757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8445'. [ 2059.927726][ T2778] batman_adv: batadv0: Adding interface: gretap1 [ 2059.934161][ T2778] batman_adv: batadv0: The MTU of interface gretap1 is too small (1382) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2059.967542][ T2778] batman_adv: batadv0: Interface activated: gretap1 [ 2060.002440][ T2781] syzkaller0: entered promiscuous mode [ 2060.008155][ T2781] syzkaller0: entered allmulticast mode [ 2060.572596][ T2806] IPv6: NLM_F_CREATE should be specified when creating new route [ 2060.583419][ T2806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8460'. [ 2060.599773][ T2806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8460'. [ 2060.608981][ T2806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8460'. [ 2060.854440][T23487] usb 2-1: USB disconnect, device number 58 [ 2060.864686][T16898] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 2060.888290][T31501] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 2060.920389][ T2816] netlink: 87 bytes leftover after parsing attributes in process `syz.0.8464'. [ 2061.056120][T16898] usb 5-1: Using ep0 maxpacket: 16 [ 2061.067943][T31501] usb 3-1: Using ep0 maxpacket: 8 [ 2061.101588][T16898] usb 5-1: config 0 has an invalid interface number: 107 but max is 0 [ 2061.110609][T31501] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2061.125550][T16898] usb 5-1: config 0 has no interface number 0 [ 2061.131725][T31501] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2061.140857][T16898] usb 5-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 55, changing to 9 [ 2061.152253][T31501] usb 3-1: config 1 has no interface number 0 [ 2061.158439][T16898] usb 5-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 8496, setting to 1024 [ 2061.184255][T31501] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2061.200787][T16898] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 2061.213307][T16898] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 2061.224040][T31501] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 2061.233492][T16898] usb 5-1: Product: syz [ 2061.237792][T31501] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2061.246792][T16898] usb 5-1: Manufacturer: syz [ 2061.251540][T16898] usb 5-1: SerialNumber: syz [ 2061.257093][T31501] usb 3-1: Product: syz [ 2061.261290][T31501] usb 3-1: Manufacturer: syz [ 2061.267652][T31501] usb 3-1: SerialNumber: syz [ 2061.273279][T16898] usb 5-1: config 0 descriptor?? [ 2061.282551][T16898] keyspan 5-1:0.107: Keyspan 4 port adapter converter detected [ 2061.291184][T16898] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 81 [ 2061.304234][T23487] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 2061.313686][T16898] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 1 [ 2061.328000][T16898] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 2061.338244][T16898] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 2 [ 2061.360006][T16898] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 2061.386677][T16898] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 4 [ 2061.411105][T16898] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 2061.456182][T23487] usb 2-1: config 150 has an invalid interface number: 204 but max is 2 [ 2061.520543][T23487] usb 2-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 2061.555484][T16898] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 6 [ 2061.595118][T23487] usb 2-1: config 150 has no interface number 0 [ 2061.625751][T23487] usb 2-1: config 150 interface 204 has no altsetting 0 [ 2061.635498][T16898] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 2061.666455][T23487] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 2061.738418][T23487] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2061.748722][T16898] usb 5-1: USB disconnect, device number 67 [ 2061.929026][T23487] usb 2-1: Product: syz [ 2062.006495][T23487] usb 2-1: Manufacturer: syz [ 2062.131068][T23487] usb 2-1: SerialNumber: syz [ 2062.449460][T16898] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 2062.524241][T16898] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 2062.608913][T16898] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 2062.622946][T31501] usb 3-1: USB disconnect, device number 41 [ 2062.684077][T16898] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 2062.742572][T16898] keyspan 5-1:0.107: device disconnected [ 2062.764745][T23487] xr_serial 2-1:150.204: skipping garbage [ 2062.816124][T23487] xr_serial 2-1:150.204: xr_serial converter detected [ 2062.845203][T29170] udevd[29170]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2062.870889][T23487] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 2062.897061][T23487] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 2063.023755][T23487] usb 2-1: USB disconnect, device number 59 [ 2063.104765][T23487] xr_serial 2-1:150.204: device disconnected [ 2063.361451][ T2883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8481'. [ 2063.438126][ T2891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8484'. [ 2063.456802][ T2891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8484'. [ 2063.527878][ T2891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2063.550888][ T2891] bond6: (slave bond0): making interface the new active one [ 2063.565475][ T2891] bond6: (slave bond0): Enslaving as an active interface with an up link [ 2063.854665][T23487] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 2063.985788][ T2910] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8492'. [ 2064.046595][T23487] usb 3-1: Using ep0 maxpacket: 8 [ 2064.053691][T23487] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2064.067890][T23487] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2064.077058][T23487] usb 3-1: config 1 has no interface number 0 [ 2064.083279][T23487] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2064.098117][T23487] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 2064.107469][T23487] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2064.115651][T23487] usb 3-1: Product: syz [ 2064.120117][T23487] usb 3-1: Manufacturer: syz [ 2064.124863][T23487] usb 3-1: SerialNumber: syz [ 2064.428025][ T29] audit: type=1326 audit(1780113276.437:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2899 comm="syz.0.8488" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f01c code=0x7fc00000 [ 2064.788093][ T29] audit: type=1326 audit(1780113276.797:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2922 comm="syz.0.8496" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 2064.826631][T31851] usb 3-1: USB disconnect, device number 42 [ 2064.888685][ T29] audit: type=1326 audit(1780113276.797:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2922 comm="syz.0.8496" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 2064.973907][ T29] audit: type=1326 audit(1780113276.827:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2922 comm="syz.0.8496" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 2065.029181][ T5637] Bluetooth: hci5: command 0x0406 tx timeout [ 2065.061377][ T29] audit: type=1326 audit(1780113276.897:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2922 comm="syz.0.8496" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 2065.160649][ T29] audit: type=1326 audit(1780113276.937:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2922 comm="syz.0.8496" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 2065.238747][ T29] audit: type=1326 audit(1780113276.977:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2922 comm="syz.0.8496" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 2065.293534][ T29] audit: type=1326 audit(1780113276.977:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2922 comm="syz.0.8496" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 2065.346472][ T29] audit: type=1326 audit(1780113276.977:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2922 comm="syz.0.8496" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 2065.436414][ T29] audit: type=1326 audit(1780113277.007:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2922 comm="syz.0.8496" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 2065.990176][T23487] ------------[ cut here ]------------ [ 2065.996861][T23487] mptcp_pm_is_kernel(msk) [ 2065.996885][T23487] WARNING: net/mptcp/pm.c:446 at mptcp_pm_alloc_anno_list+0x8bc/0x980, CPU#1: kworker/1:0/23487 [ 2066.011794][T23487] Modules linked in: [ 2066.017022][T23487] CPU: 1 UID: 0 PID: 23487 Comm: kworker/1:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 2066.028166][T23487] Tainted: [L]=SOFTLOCKUP [ 2066.032522][T23487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2066.042627][T23487] Workqueue: events mptcp_worker [ 2066.047741][T23487] RIP: 0010:mptcp_pm_alloc_anno_list+0x8bc/0x980 [ 2066.054166][T23487] Code: 40 31 f6 e9 bf fd ff ff e8 e1 40 31 f6 90 0f 0b 90 e9 de f7 ff ff e8 d3 40 31 f6 90 0f 0b 90 e9 34 f8 ff ff e8 c5 40 31 f6 90 <0f> 0b 90 31 c0 e9 76 ff ff ff 48 c7 c1 e0 54 30 90 80 e1 07 80 c1 [ 2066.073834][T23487] RSP: 0018:ffffc9000367f360 EFLAGS: 00010293 [ 2066.079986][T23487] RAX: ffffffff8b94770b RBX: 0000000000000000 RCX: ffff8880276c8000 [ 2066.088008][T23487] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2066.096029][T23487] RBP: ffff88802b3eec50 R08: 0000000000020003 R09: 00000000aa1414ac [ 2066.104030][T23487] R10: 00000000aa1414ac R11: 0000000000000000 R12: ffff88802b3ee200 [ 2066.112048][T23487] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88807319da00 [ 2066.120072][T23487] FS: 0000000000000000(0000) GS:ffff88812539e000(0000) knlGS:0000000000000000 [ 2066.129056][T23487] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2066.135696][T23487] CR2: 0000000030505ff8 CR3: 0000000052fb6000 CR4: 00000000003526f0 [ 2066.143682][T23487] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 2066.151726][T23487] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2066.159743][T23487] Call Trace: [ 2066.163030][T23487] [ 2066.166144][T23487] mptcp_pm_create_subflow_or_signal_addr+0x1363/0x1860 [ 2066.173143][T23487] ? mptcp_pm_create_subflow_or_signal_addr+0x313/0x1860 [ 2066.180247][T23487] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2066.186180][T23487] ? lockdep_hardirqs_on+0x7a/0x110 [ 2066.191448][T23487] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2066.197342][T23487] ? debug_object_assert_init+0x1dc/0x3b0 [ 2066.203203][T23487] ? __pfx_mptcp_pm_create_subflow_or_signal_addr+0x10/0x10 [ 2066.210558][T23487] ? __mod_timer+0xd0/0xf30 [ 2066.215138][T23487] ? sk_reset_timer+0x37/0xc0 [ 2066.219928][T23487] ? tcp_schedule_loss_probe+0x5e1/0x830 [ 2066.225671][T23487] ? __lock_acquire+0x6b5/0x2cf0 [ 2066.230630][T23487] ? __lock_acquire+0x6b5/0x2cf0 [ 2066.235649][T23487] __mptcp_pm_kernel_worker+0x19ee/0x2100 [ 2066.241384][T23487] ? __lock_acquire+0x6b5/0x2cf0 [ 2066.246382][T23487] ? __pfx___mptcp_pm_kernel_worker+0x10/0x10 [ 2066.252469][T23487] ? do_raw_spin_lock+0x12b/0x2f0 [ 2066.257502][T23487] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2066.262859][T23487] ? __mptcp_close_ssk+0xbc6/0x1180 [ 2066.268064][T23487] ? mptcp_pm_nl_rm_addr+0xfe/0x190 [ 2066.273248][T23487] ? mptcp_pm_rm_addr_or_subflow+0x870/0x9d0 [ 2066.279234][T23487] mptcp_pm_worker+0x1bb/0x300 [ 2066.283995][T23487] mptcp_worker+0xd3/0x1420 [ 2066.288499][T23487] ? process_scheduled_works+0xa70/0x1860 [ 2066.294248][T23487] ? process_scheduled_works+0xa70/0x1860 [ 2066.299962][T23487] process_scheduled_works+0xb5d/0x1860 [ 2066.305530][T23487] ? __pfx_process_scheduled_works+0x10/0x10 [ 2066.311504][T23487] ? assign_work+0x3d5/0x5e0 [ 2066.316111][T23487] worker_thread+0xa53/0xfc0 [ 2066.320716][T23487] kthread+0x389/0x470 [ 2066.324805][T23487] ? __pfx_worker_thread+0x10/0x10 [ 2066.329897][T23487] ? __pfx_kthread+0x10/0x10 [ 2066.334532][T23487] ret_from_fork+0x514/0xb70 [ 2066.339138][T23487] ? __pfx_ret_from_fork+0x10/0x10 [ 2066.344240][T23487] ? load_gs_index+0x97/0xc0 [ 2066.348827][T23487] ? __switch_to+0xc79/0x1410 [ 2066.353486][T23487] ? __pfx_kthread+0x10/0x10 [ 2066.358078][T23487] ret_from_fork_asm+0x1a/0x30 [ 2066.362852][T23487] [ 2066.365910][T23487] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2066.373169][T23487] CPU: 1 UID: 0 PID: 23487 Comm: kworker/1:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 2066.384170][T23487] Tainted: [L]=SOFTLOCKUP [ 2066.388472][T23487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2066.398505][T23487] Workqueue: events mptcp_worker [ 2066.403429][T23487] Call Trace: [ 2066.406688][T23487] [ 2066.409602][T23487] vpanic+0x56c/0xa60 [ 2066.413584][T23487] ? __pfx__printk+0x10/0x10 [ 2066.418152][T23487] ? __pfx_vpanic+0x10/0x10 [ 2066.422635][T23487] ? is_bpf_text_address+0x292/0x2b0 [ 2066.427908][T23487] ? is_bpf_text_address+0x26/0x2b0 [ 2066.433086][T23487] panic+0xc5/0xd0 [ 2066.436785][T23487] ? __pfx_panic+0x10/0x10 [ 2066.441182][T23487] ? ret_from_fork_asm+0x1a/0x30 [ 2066.446102][T23487] __warn+0x315/0x4c0 [ 2066.450062][T23487] ? mptcp_pm_alloc_anno_list+0x8bc/0x980 [ 2066.455759][T23487] ? mptcp_pm_alloc_anno_list+0x8bc/0x980 [ 2066.461461][T23487] __report_bug+0x29a/0x540 [ 2066.465999][T23487] ? nf_hook+0xa1/0x3a0 [ 2066.470134][T23487] ? iptable_mangle_hook+0x189/0x4c0 [ 2066.475437][T23487] ? mptcp_pm_alloc_anno_list+0x8bc/0x980 [ 2066.481133][T23487] ? __pfx___report_bug+0x10/0x10 [ 2066.486137][T23487] ? ip_output+0x29f/0x450 [ 2066.490576][T23487] ? mptcp_pm_alloc_anno_list+0x8bc/0x980 [ 2066.496270][T23487] report_bug+0x16a/0x220 [ 2066.500575][T23487] ? mptcp_pm_alloc_anno_list+0x8bc/0x980 [ 2066.506292][T23487] ? mptcp_pm_alloc_anno_list+0x8be/0x980 [ 2066.511988][T23487] handle_bug+0x9c/0x200 [ 2066.516257][T23487] exc_invalid_op+0x1a/0x50 [ 2066.520740][T23487] asm_exc_invalid_op+0x1a/0x20 [ 2066.525583][T23487] RIP: 0010:mptcp_pm_alloc_anno_list+0x8bc/0x980 [ 2066.531889][T23487] Code: 40 31 f6 e9 bf fd ff ff e8 e1 40 31 f6 90 0f 0b 90 e9 de f7 ff ff e8 d3 40 31 f6 90 0f 0b 90 e9 34 f8 ff ff e8 c5 40 31 f6 90 <0f> 0b 90 31 c0 e9 76 ff ff ff 48 c7 c1 e0 54 30 90 80 e1 07 80 c1 [ 2066.551477][T23487] RSP: 0018:ffffc9000367f360 EFLAGS: 00010293 [ 2066.557532][T23487] RAX: ffffffff8b94770b RBX: 0000000000000000 RCX: ffff8880276c8000 [ 2066.565483][T23487] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2066.573434][T23487] RBP: ffff88802b3eec50 R08: 0000000000020003 R09: 00000000aa1414ac [ 2066.581387][T23487] R10: 00000000aa1414ac R11: 0000000000000000 R12: ffff88802b3ee200 [ 2066.589358][T23487] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88807319da00 [ 2066.597319][T23487] ? mptcp_pm_alloc_anno_list+0x8bb/0x980 [ 2066.603040][T23487] mptcp_pm_create_subflow_or_signal_addr+0x1363/0x1860 [ 2066.609958][T23487] ? mptcp_pm_create_subflow_or_signal_addr+0x313/0x1860 [ 2066.616964][T23487] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2066.622752][T23487] ? lockdep_hardirqs_on+0x7a/0x110 [ 2066.627925][T23487] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2066.633711][T23487] ? debug_object_assert_init+0x1dc/0x3b0 [ 2066.639412][T23487] ? __pfx_mptcp_pm_create_subflow_or_signal_addr+0x10/0x10 [ 2066.646677][T23487] ? __mod_timer+0xd0/0xf30 [ 2066.651170][T23487] ? sk_reset_timer+0x37/0xc0 [ 2066.655827][T23487] ? tcp_schedule_loss_probe+0x5e1/0x830 [ 2066.661440][T23487] ? __lock_acquire+0x6b5/0x2cf0 [ 2066.666359][T23487] ? __lock_acquire+0x6b5/0x2cf0 [ 2066.671276][T23487] __mptcp_pm_kernel_worker+0x19ee/0x2100 [ 2066.676978][T23487] ? __lock_acquire+0x6b5/0x2cf0 [ 2066.681895][T23487] ? __pfx___mptcp_pm_kernel_worker+0x10/0x10 [ 2066.687942][T23487] ? do_raw_spin_lock+0x12b/0x2f0 [ 2066.692950][T23487] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2066.698301][T23487] ? __mptcp_close_ssk+0xbc6/0x1180 [ 2066.703483][T23487] ? mptcp_pm_nl_rm_addr+0xfe/0x190 [ 2066.708664][T23487] ? mptcp_pm_rm_addr_or_subflow+0x870/0x9d0 [ 2066.714632][T23487] mptcp_pm_worker+0x1bb/0x300 [ 2066.719379][T23487] mptcp_worker+0xd3/0x1420 [ 2066.723862][T23487] ? process_scheduled_works+0xa70/0x1860 [ 2066.729557][T23487] ? process_scheduled_works+0xa70/0x1860 [ 2066.735256][T23487] process_scheduled_works+0xb5d/0x1860 [ 2066.740799][T23487] ? __pfx_process_scheduled_works+0x10/0x10 [ 2066.746760][T23487] ? assign_work+0x3d5/0x5e0 [ 2066.751340][T23487] worker_thread+0xa53/0xfc0 [ 2066.755945][T23487] kthread+0x389/0x470 [ 2066.759994][T23487] ? __pfx_worker_thread+0x10/0x10 [ 2066.765088][T23487] ? __pfx_kthread+0x10/0x10 [ 2066.769676][T23487] ret_from_fork+0x514/0xb70 [ 2066.774263][T23487] ? __pfx_ret_from_fork+0x10/0x10 [ 2066.779401][T23487] ? load_gs_index+0x97/0xc0 [ 2066.783980][T23487] ? __switch_to+0xc79/0x1410 [ 2066.788642][T23487] ? __pfx_kthread+0x10/0x10 [ 2066.793215][T23487] ret_from_fork_asm+0x1a/0x30 [ 2066.797969][T23487] [ 2066.801412][T23487] Kernel Offset: disabled [ 2066.805724][T23487] Rebooting in 86400 seconds..