last executing test programs: 39m48.502940543s ago: executing program 1 (id=49): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) 39m29.013150462s ago: executing program 1 (id=51): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=r0, 0x5, 0x0, 0x7, 0x0, 0xffffffe8, 0x0, 0x0, 0x0, 0x0}, 0x40) 39m10.846980075s ago: executing program 1 (id=53): pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000740)={0x1, 0x0, [{0xaea6, 0x5, 0xa22, [0x0, 0x80000001, 0x6, 0x4, 0x80000001, 0x2, 0x7ff, 0x3]}]}) 39m2.038327124s ago: executing program 1 (id=55): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000003c0)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 38m55.002933948s ago: executing program 1 (id=57): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x0, 0x300, 0x0, 0x28}}}}}, 0x36) 38m41.366247378s ago: executing program 1 (id=59): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0xfdff) 37m53.989943848s ago: executing program 32 (id=59): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0xfdff) 26m52.288100495s ago: executing program 0 (id=143): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) setuid(0xee01) 26m42.877724251s ago: executing program 0 (id=145): r0 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x60040) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x13, r0, 0x0) syz_clone3(&(0x7f0000001e80)={0x166002400, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) 26m32.058527827s ago: executing program 0 (id=147): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000640)=@framed={{}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffd}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 26m19.726928739s ago: executing program 0 (id=150): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000020000000000000a78000000060a0b040000000000000000020000054c00048018000180080001006f7366000c000280080001400000000430000180080001006e6174002400028008000140000000010800034000000014080002400000000208000500000000150900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) 26m9.90751066s ago: executing program 0 (id=152): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000780)=ANY=[], 0x4) 26m1.368999499s ago: executing program 0 (id=154): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x1, 0x1cb8c0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x1800, 0x0) preadv(r0, 0x0, 0x0, 0x7, 0x9) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) r4 = gettid() migrate_pages(r4, 0x568, &(0x7f0000000000), &(0x7f0000000340)=0x9) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000)=0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) 25m10.361335459s ago: executing program 33 (id=154): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x1, 0x1cb8c0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x1800, 0x0) preadv(r0, 0x0, 0x0, 0x7, 0x9) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) r4 = gettid() migrate_pages(r4, 0x568, &(0x7f0000000000), &(0x7f0000000340)=0x9) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000)=0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) 1m21.170583416s ago: executing program 2 (id=339): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000002090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 1m17.469478781s ago: executing program 3 (id=340): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="1800000043000103f9e675e93a8100b740bdd3df"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) 1m14.262038794s ago: executing program 2 (id=341): futex(&(0x7f000000cffc)=0xfffffffc, 0x5, 0x1, 0x0, 0x0, 0x1000000) 1m9.770209939s ago: executing program 3 (id=342): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r0, 0xe503, 0x0) 1m7.486164043s ago: executing program 2 (id=343): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000'], 0x86) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 1m2.994658858s ago: executing program 3 (id=344): unshare(0x2c020400) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fsync(r0) 1m0.714639303s ago: executing program 2 (id=345): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000002090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 49.138527397s ago: executing program 3 (id=346): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) dup3(r0, r0, 0x80000) 38.388364927s ago: executing program 2 (id=347): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/7, 0x7}], 0x1}, 0x100) 23.711246957s ago: executing program 3 (id=348): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r0, 0xe503, 0x0) 14.83755733s ago: executing program 2 (id=349): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'comedi_parport\x00', [0x4f27, 0x5, 0x3, 0x4, 0x1, 0x1000c, 0x12, 0x4, 0xd, 0xfffffffc, 0x2, 0x1, 0xfffffffe, 0x1, 0x2, 0x101, 0x4, 0x9, 0x3, 0x352f, 0x99, 0xcaa7, 0xffffffff, 0x20001f58, 0x7, 0x2000e67, 0x3c, 0x8, 0xfffffffe, 0x0, 0xfffffff8]}) 0s ago: executing program 3 (id=350): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000e00)={0x1c, &(0x7f0000000740)={0x20, 0x1}, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:5655' (ED25519) to the list of known hosts. syzkaller login: [ 700.613466][ T3227] cgroup: Unknown subsys name 'net' [ 701.796759][ T3227] cgroup: Unknown subsys name 'cpuset' [ 702.038428][ T3227] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 807.980844][ T3227] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 1072.822061][ T3241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1074.592249][ T3241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1074.895916][ T3240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1076.052523][ T3240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1101.267208][ T3241] hsr_slave_0: entered promiscuous mode [ 1101.450936][ T3241] hsr_slave_1: entered promiscuous mode [ 1108.283990][ T3240] hsr_slave_0: entered promiscuous mode [ 1108.389594][ T3240] hsr_slave_1: entered promiscuous mode [ 1108.500289][ T3240] debugfs: 'hsr0' already exists in 'hsr' [ 1108.503191][ T3240] Cannot create hsr debugfs directory [ 1130.462083][ T3241] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1130.993659][ T3241] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1131.400293][ T3241] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1132.156933][ T3241] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1138.523457][ T3240] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1139.010898][ T3240] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1140.015700][ T3240] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1140.321286][ T3240] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1174.999974][ T3241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1186.265471][ T3240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1310.046470][ T3241] veth0_vlan: entered promiscuous mode [ 1311.657128][ T3241] veth1_vlan: entered promiscuous mode [ 1318.485370][ T3240] veth0_vlan: entered promiscuous mode [ 1318.725230][ T3241] veth0_macvtap: entered promiscuous mode [ 1319.678804][ T3241] veth1_macvtap: entered promiscuous mode [ 1320.953270][ T3240] veth1_vlan: entered promiscuous mode [ 1325.726978][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1326.022161][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1326.120461][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1326.125073][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1327.904669][ T3240] veth0_macvtap: entered promiscuous mode [ 1329.151962][ T3240] veth1_macvtap: entered promiscuous mode [ 1335.472750][ T3540] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1335.476796][ T3540] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1335.586042][ T3540] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1335.651872][ T3540] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.581232][ T3241] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 1400.652333][ T3853] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1401.014210][ T3853] usb 2-1: Using ep0 maxpacket: 16 [ 1402.282308][ T3853] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1402.825130][ T3853] usb 2-1: config 1 has an invalid interface number: 206 but max is 0 [ 1402.833042][ T3853] usb 2-1: config 1 has no interface number 0 [ 1403.830912][ T3853] usb 2-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a [ 1403.833595][ T3853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.835704][ T3853] usb 2-1: Product: syz [ 1403.837420][ T3853] usb 2-1: Manufacturer: syz [ 1403.905047][ T3853] usb 2-1: SerialNumber: syz [ 1413.226577][ T3853] usb 2-1: USB disconnect, device number 2 [ 1472.443792][ T3760] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1472.467763][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 1473.163944][ T3760] usb 2-1: device descriptor read/64, error -32 [ 1473.661830][ T3760] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1473.962920][ T3760] usb 2-1: Using ep0 maxpacket: 32 [ 1474.944931][ T3760] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1474.950089][ T3760] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1474.993226][ T3760] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 119, changing to 7 [ 1475.010686][ T3760] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1475.016171][ T3760] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1475.045920][ T3760] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1475.070410][ T3760] usb 2-1: config 1 interface 1 has no altsetting 0 [ 1476.265727][ T3760] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1476.291268][ T3760] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.293846][ T3760] usb 2-1: Product: syz [ 1476.295558][ T3760] usb 2-1: Manufacturer: syz [ 1476.297319][ T3760] usb 2-1: SerialNumber: syz [ 1483.427008][ T3760] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 1483.433626][ T3760] usb 2-1: 2:1 : format type 255 is not supported yet [ 1486.452136][ T3760] usb 2-1: USB disconnect, device number 4 [ 1506.672822][ T836] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 1507.483642][ T836] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1507.573794][ T836] usb 1-1: not running at top speed; connect to a high speed hub [ 1508.541260][ T836] usb 1-1: config 16 has an invalid interface number: 103 but max is 0 [ 1508.546125][ T836] usb 1-1: config 16 has no interface number 0 [ 1508.553450][ T836] usb 1-1: config 16 interface 103 has no altsetting 0 [ 1509.127448][ T836] usb 1-1: New USB device found, idVendor=27c6, idProduct=5395, bcdDevice=e3.b9 [ 1509.149767][ T836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1509.157223][ T836] usb 1-1: Product: syz [ 1509.162087][ T836] usb 1-1: Manufacturer: syz [ 1509.163994][ T836] usb 1-1: SerialNumber: syz [ 1511.789861][ T836] usb 1-1: USB disconnect, device number 2 [ 1588.027264][ T3989] netlink: 12 bytes leftover after parsing attributes in process `syz.1.31'. [ 1596.550368][ T3852] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1598.285029][ T3852] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1598.304601][ T3852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1598.333621][ T3852] usb 1-1: Product: syz [ 1598.335631][ T3852] usb 1-1: Manufacturer: syz [ 1598.337278][ T3852] usb 1-1: SerialNumber: syz [ 1600.610837][ T836] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1601.086094][ T836] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1601.116811][ T836] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1601.142622][ T836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1606.452076][ T3230] usb 1-1: USB disconnect, device number 3 [ 1617.215118][ T3852] usb 2-1: USB disconnect, device number 5 [ 1626.223019][ T836] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1626.823036][ T836] usb 1-1: Using ep0 maxpacket: 16 [ 1627.270164][ T836] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1627.273631][ T836] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1627.276210][ T836] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1627.281262][ T836] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1628.001173][ T836] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1628.004976][ T836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1628.015736][ T836] usb 1-1: Product: syz [ 1628.021853][ T836] usb 1-1: Manufacturer: syz [ 1628.023877][ T836] usb 1-1: SerialNumber: syz [ 1632.595229][ T836] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 1643.835379][ T3852] usb 1-1: USB disconnect, device number 4 [ 1644.905217][ T3852] usblp0: removed [ 1753.543599][ T4091] nbd0: detected capacity change from 0 to 63 [ 1753.640675][ T866] block nbd0: Receive control failed (result -32) [ 1769.774390][ T4099] netlink: 16 bytes leftover after parsing attributes in process `syz.0.52'. [ 1851.252016][ T3852] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1851.842860][ T3852] usb 1-1: config index 0 descriptor too short (expected 63780, got 36) [ 1851.845391][ T3852] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 1851.870062][ T3852] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1851.874125][ T3852] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1851.876716][ T3852] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1851.896462][ T3852] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1851.925149][ T3852] usb 1-1: New USB device found, idVendor=05ac, idProduct=0323, bcdDevice= 0.00 [ 1851.935561][ T3852] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1852.339320][ T3852] usb 1-1: config 0 descriptor?? [ 1856.793966][ T3852] magicmouse 0003:05AC:0323.0001: unknown main item tag 0x0 [ 1856.840062][ T3852] magicmouse 0003:05AC:0323.0001: unknown main item tag 0x0 [ 1856.845052][ T3852] magicmouse 0003:05AC:0323.0001: unknown main item tag 0x0 [ 1856.880769][ T3852] magicmouse 0003:05AC:0323.0001: unknown main item tag 0x0 [ 1856.884239][ T3852] magicmouse 0003:05AC:0323.0001: unknown main item tag 0x0 [ 1857.402566][ T3852] magicmouse 0003:05AC:0323.0001: hidraw0: USB HID v0.00 Device [HID 05ac:0323] on usb-dummy_hcd.0-1/input0 [ 1858.323676][ T3852] usb 1-1: USB disconnect, device number 5 [ 1887.446590][ T3230] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1887.820017][ T3230] usb 1-1: Using ep0 maxpacket: 32 [ 1888.187530][ T3230] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1888.214383][ T3230] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1888.252488][ T3230] usb 1-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 1888.255096][ T3230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1888.905892][ T3230] usb 1-1: config 0 descriptor?? [ 1892.512724][ T3230] zydacron 0003:13EC:0006.0002: item fetching failed at offset 0/2 [ 1892.681950][ T3230] zydacron 0003:13EC:0006.0002: parse failed [ 1892.686836][ T3230] zydacron 0003:13EC:0006.0002: probe with driver zydacron failed with error -22 [ 1893.183447][ T3230] usb 1-1: USB disconnect, device number 6 [ 1961.526914][ T3219] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1962.605711][ T3219] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1964.865085][ T3219] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1966.144625][ T3219] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1979.787251][ T3219] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1979.976047][ T3219] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1980.083861][ T3219] bond0 (unregistering): Released all slaves [ 1981.672656][ T3219] hsr_slave_0: left promiscuous mode [ 1981.844737][ T3219] hsr_slave_1: left promiscuous mode [ 1982.746762][ T3219] veth1_macvtap: left promiscuous mode [ 1982.757311][ T3219] veth0_macvtap: left promiscuous mode [ 1982.782148][ T3219] veth1_vlan: left promiscuous mode [ 1982.811052][ T3219] veth0_vlan: left promiscuous mode [ 1986.833195][ T4170] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1987.230288][ T4170] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1987.235442][ T4170] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1987.240315][ T4170] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1987.242638][ T4170] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1987.244042][ T4170] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1987.485028][ T4170] usb 1-1: config 0 descriptor?? [ 1989.197250][ T4170] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1989.221236][ T4170] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1989.222611][ T4170] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1989.224805][ T4170] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1989.226398][ T4170] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1989.229152][ T4170] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1989.230577][ T4170] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1989.231745][ T4170] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1989.233387][ T4170] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1989.234635][ T4170] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1989.563658][ T4170] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1991.494945][ T4170] usb 1-1: USB disconnect, device number 7 [ 2015.901391][ T4372] ip6tnl1: entered allmulticast mode [ 2016.135637][ T4153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2016.324332][ T4153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2021.824125][ T4127] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 2022.131998][ T4127] usb 1-1: Using ep0 maxpacket: 32 [ 2022.365114][ T4127] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 2022.370022][ T4127] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 2022.372708][ T4127] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2022.412039][ T4127] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 2022.595702][ T4127] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 2022.609519][ T4127] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2022.611941][ T4127] usb 1-1: Product: syz [ 2022.636136][ T4127] usb 1-1: Manufacturer: syz [ 2022.644765][ T4127] usb 1-1: SerialNumber: syz [ 2023.848006][ C1] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 2024.167154][ T4127] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input0 [ 2025.145287][ T4127] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 2025.182839][ T4127] (id 0x00) [ 2027.236615][ T4127] rc_core: IR keymap rc-imon-pad not found [ 2027.264452][ T4127] Registered IR keymap rc-empty [ 2027.291626][ T4127] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 2027.294147][ T4127] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 2027.870687][ T4127] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 2028.194917][ T4127] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input1 [ 2028.404418][ T4127] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:8> initialized [ 2031.339309][ T4170] usb 1-1: USB disconnect, device number 8 [ 2045.572766][ T4153] hsr_slave_0: entered promiscuous mode [ 2045.643466][ T4153] hsr_slave_1: entered promiscuous mode [ 2061.463888][ T4153] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2061.699846][ T4153] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2061.939508][ T4153] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2062.127354][ T4153] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2073.786397][ T10] hid_parser_main: 5 callbacks suppressed [ 2073.786862][ T10] hid-generic 0003:0004:FFFFFFFE.0004: unknown main item tag 0x0 [ 2073.819859][ T10] hid-generic 0003:0004:FFFFFFFE.0004: unknown main item tag 0x0 [ 2073.821294][ T10] hid-generic 0003:0004:FFFFFFFE.0004: unknown main item tag 0x0 [ 2074.103315][ T10] hid-generic 0003:0004:FFFFFFFE.0004: hidraw0: USB HID v4.00 Device [syz0] on syz1 [ 2079.826604][ T4153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2100.454629][ T4127] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 2100.955977][ T4127] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2101.021870][ T4127] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2101.024210][ T4127] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2101.027164][ T4127] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2101.035647][ T4127] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2101.466895][ T4127] usb 1-1: config 0 descriptor?? [ 2106.282317][ T4127] plantronics 0003:047F:FFFF.0005: reserved main item tag 0xd [ 2106.681362][ T4127] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 2106.981063][ T4127] usb 1-1: USB disconnect, device number 9 [ 2137.163183][ T9] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 2137.803748][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 2137.805055][ T9] usb 1-1: config 0 has no interface number 0 [ 2137.806317][ T9] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2137.819777][ T9] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 2137.821732][ T9] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2137.831183][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2138.011402][ T9] usb 1-1: config 0 descriptor?? [ 2138.061453][ T4675] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2138.223422][ T9] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 2142.420890][ T3760] usb 1-1: USB disconnect, device number 10 [ 2159.886517][ T4711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.85'. [ 2173.672765][ T4153] veth0_vlan: entered promiscuous mode [ 2174.394198][ T4153] veth1_vlan: entered promiscuous mode [ 2176.559780][ T4153] veth0_macvtap: entered promiscuous mode [ 2177.102408][ T4153] veth1_macvtap: entered promiscuous mode [ 2180.398731][ T3219] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2180.500945][ T3219] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2180.503006][ T3219] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2180.507046][ T3219] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2184.860373][ T4170] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 2185.120833][ T4170] usb 1-1: Using ep0 maxpacket: 32 [ 2185.202696][ T4170] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2185.204234][ T4170] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2185.357086][ T4170] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 2185.369875][ T4170] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 2185.371131][ T4170] usb 1-1: Product: syz [ 2185.372135][ T4170] usb 1-1: Manufacturer: syz [ 2185.373187][ T4170] usb 1-1: SerialNumber: syz [ 2186.273096][ T4170] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input3 [ 2187.412486][ T4170] usb 1-1: USB disconnect, device number 11 [ 2189.395645][ T4170] appletouch 1-1:1.0: input: appletouch disconnected [ 2233.344470][ T4773] Process accounting resumed [ 2245.602802][ T4127] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 2246.325191][ T4127] usb 1-1: Using ep0 maxpacket: 8 [ 2246.551327][ T4127] usb 1-1: config 33 has an invalid interface number: 214 but max is 1 [ 2246.552702][ T4127] usb 1-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 2246.553880][ T4127] usb 1-1: config 33 has 1 interface, different from the descriptor's value: 2 [ 2246.554978][ T4127] usb 1-1: config 33 has no interface number 0 [ 2247.572195][ T4127] usb 1-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=76.71 [ 2247.573636][ T4127] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2247.574883][ T4127] usb 1-1: Product: syz [ 2247.575756][ T4127] usb 1-1: Manufacturer: syz [ 2247.576641][ T4127] usb 1-1: SerialNumber: syz [ 2248.390701][ T4127] cypress_m8 1-1:33.214: HID->COM RS232 Adapter converter detected [ 2248.542366][ T4127] cyphidcom ttyUSB0: required endpoint is missing [ 2253.810371][ T4170] usb 1-1: USB disconnect, device number 12 [ 2254.310532][ T4170] cypress_m8 1-1:33.214: device disconnected [ 2256.885583][ T4800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2257.002482][ T4800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2278.802137][ T4820] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 2294.625652][ T4833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2294.651799][ T4833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2295.111170][ T4830] kvm [4830]: VCPU exit error -95 [ 2295.113041][ T4830] kvm [4830]: SEPC=0x0 SSTATUS=0x200004120 HSTATUS=0x2002001c0 [ 2295.114499][ T4830] kvm [4830]: SCAUSE=0x14 STVAL=0x0 HTVAL=0x0 HTINST=0x0 [ 2312.114515][ T4846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.108'. [ 2313.494472][ T4846] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2313.885959][ T4846] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2314.487202][ T4846] bond0 (unregistering): Released all slaves [ 2333.675789][ T4857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2333.705761][ T4857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2376.620165][ T805] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 2376.999319][ T805] usb 1-1: Using ep0 maxpacket: 32 [ 2377.076576][ T805] usb 1-1: config 0 has an invalid interface number: 81 but max is 0 [ 2377.092387][ T805] usb 1-1: config 0 has no interface number 0 [ 2377.093796][ T805] usb 1-1: config 0 interface 81 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 16 [ 2377.095119][ T805] usb 1-1: config 0 interface 81 has no altsetting 0 [ 2377.232478][ T805] usb 1-1: New USB device found, idVendor=03f0, idProduct=026b, bcdDevice=f4.71 [ 2377.234101][ T805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2377.235241][ T805] usb 1-1: Product: syz [ 2377.236114][ T805] usb 1-1: Manufacturer: syz [ 2377.237080][ T805] usb 1-1: SerialNumber: syz [ 2377.243724][ T4877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2377.351804][ T4877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2377.482160][ T805] usb 1-1: config 0 descriptor?? [ 2377.536849][ T4872] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2378.607246][ T805] pl2303 1-1:0.81: required interrupt-in endpoint missing [ 2378.934018][ T805] usb 1-1: USB disconnect, device number 13 [ 2399.771457][ T4899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2399.795919][ T4899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2412.200319][ T4126] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 2412.690776][ T4126] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 2412.692237][ T4126] usb 1-1: config 0 has no interface number 0 [ 2412.693810][ T4126] usb 1-1: config 0 interface 41 has no altsetting 0 [ 2413.017266][ T4126] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2413.021457][ T4126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2413.022733][ T4126] usb 1-1: Product: syz [ 2413.023654][ T4126] usb 1-1: Manufacturer: syz [ 2413.024538][ T4126] usb 1-1: SerialNumber: syz [ 2413.333091][ T4126] usb 1-1: config 0 descriptor?? [ 2416.021982][ T4126] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 2418.566242][ T4126] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 2418.642864][ T4126] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 2419.426009][ T4126] usb 1-1: USB disconnect, device number 14 [ 2425.287156][ T4924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2425.315295][ T4924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2431.606401][ T4928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.128'. [ 2442.867519][ T4934] xt_hashlimit: size too large, truncated to 1048576 [ 2442.891788][ T4934] xt_hashlimit: max too large, truncated to 1048576 [ 2447.411777][ T4938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2447.461205][ T4938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2462.380483][ T4947] fuse: Bad value for 'fd' [ 2476.853008][ T4920] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 2478.311590][ T4920] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2479.063948][ T4920] usb 1-1: string descriptor 0 read error: -22 [ 2479.290557][ T4920] usb 1-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=f2.d0 [ 2479.293919][ T4920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2479.704197][ T4920] usb 1-1: config 0 descriptor?? [ 2480.286326][ T4920] empeg 1-1:0.0: empeg converter detected [ 2480.323961][ T4920] usb 1-1: active config #0 != 1 ?? [ 2487.344489][ T10] usb 1-1: USB disconnect, device number 15 [ 2494.215044][ T3852] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 2495.242514][ T3852] usb 1-1: device descriptor read/64, error -71 [ 2495.631378][ T3852] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 2496.283353][ T3852] usb 1-1: device descriptor read/64, error -71 [ 2496.431337][ T3852] usb usb1-port1: attempt power cycle [ 2497.182329][ T3852] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 2497.401129][ T3852] usb 1-1: device descriptor read/8, error -71 [ 2497.784675][ T3852] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 2498.022450][ T3852] usb 1-1: device descriptor read/8, error -71 [ 2498.172346][ T3852] usb usb1-port1: unable to enumerate USB device [ 2681.975599][ T5045] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 2770.226352][ T5037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2770.501937][ T5037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2787.099548][ T5228] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2810.304924][ T5037] hsr_slave_0: entered promiscuous mode [ 2810.387960][ T5037] hsr_slave_1: entered promiscuous mode [ 2810.454186][ T5037] debugfs: 'hsr0' already exists in 'hsr' [ 2810.455735][ T5037] Cannot create hsr debugfs directory [ 2835.474440][ T5037] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2835.752484][ T5037] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2835.926502][ T5037] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2836.275164][ T5037] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2887.166287][ T5037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3032.034836][ T5037] veth0_vlan: entered promiscuous mode [ 3033.104997][ T5037] veth1_vlan: entered promiscuous mode [ 3036.734511][ T5037] veth0_macvtap: entered promiscuous mode [ 3038.201634][ T5037] veth1_macvtap: entered promiscuous mode [ 3045.149757][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3045.154066][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3045.157249][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3045.473303][ T4268] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3184.051588][ T5491] netlink: 116 bytes leftover after parsing attributes in process `syz.2.203'. [ 3243.793772][ T5516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3244.167058][ T5516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3247.130352][ T5520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3247.271056][ T5520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3281.761661][ T5533] syz.2.217 uses obsolete (PF_INET,SOCK_PACKET) [ 3306.491602][ T5543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3306.570473][ T5543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3326.623412][ T5552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3326.653280][ T5552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3337.646165][ T5559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3337.772426][ T5559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3354.106425][ T5566] input: syz0 as /devices/virtual/input/input5 [ 3377.512511][ T5582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3377.707246][ T5582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3398.892039][ T5602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3398.957045][ T5602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3436.352477][ T5625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3436.493699][ T5625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3473.535325][ T5646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3473.646363][ T5646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3512.157025][ T5667] netlink: 'syz.2.259': attribute type 7 has an invalid length. [ 3512.187429][ T5667] netlink: 'syz.2.259': attribute type 8 has an invalid length. [ 3512.205888][ T5667] netlink: 'syz.2.259': attribute type 13 has an invalid length. [ 3512.423894][ T5667] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.259'. [ 3711.485504][ T5763] comedi comedi0: Minor 3 could not be opened [ 3737.130009][ T5774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3737.202177][ T5774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3752.446207][ T5784] netlink: 48 bytes leftover after parsing attributes in process `syz.2.297'. [ 3760.265476][ T5786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3760.335453][ T5786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3776.977178][ T5794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3777.153798][ T5794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3797.725999][ T5802] netlink: 48 bytes leftover after parsing attributes in process `syz.2.303'. [ 3801.832055][ T5804] comedi: valid board names for 8255 driver are: [ 3801.834001][ T5804] 8255 [ 3801.835263][ T5804] comedi: valid board names for vmk80xx driver are: [ 3801.836390][ T5804] vmk80xx [ 3801.837281][ T5804] comedi: valid board names for usbduxsigma driver are: [ 3801.874404][ T5804] usbduxsigma [ 3801.876192][ T5804] comedi: valid board names for usbduxfast driver are: [ 3801.904938][ T5804] usbduxfast [ 3801.906780][ T5804] comedi: valid board names for usbdux driver are: [ 3801.950702][ T5804] usbdux [ 3801.952473][ T5804] comedi: valid board names for ni6501 driver are: [ 3801.953876][ T5804] ni6501 [ 3801.954597][ T5804] comedi: valid board names for dt9812 driver are: [ 3801.955461][ T5804] dt9812 [ 3801.956173][ T5804] comedi: valid board names for ni_labpc_cs driver are: [ 3801.957034][ T5804] ni_labpc_cs [ 3802.002061][ T5804] comedi: valid board names for ni_daq_700 driver are: [ 3802.003239][ T5804] ni_daq_700 [ 3802.003989][ T5804] comedi: valid board names for labpc_pci driver are: [ 3802.005018][ T5804] labpc_pci [ 3802.005823][ T5804] comedi: valid board names for adl_pci9118 driver are: [ 3802.006823][ T5804] pci9118dg [ 3802.018842][ T5804] pci9118hg [ 3802.019845][ T5804] pci9118hr [ 3802.020598][ T5804] comedi: valid board names for 8255_pci driver are: [ 3802.021623][ T5804] 8255_pci [ 3802.022379][ T5804] comedi: valid board names for comedi_parport driver are: [ 3802.023255][ T5804] comedi_parport [ 3802.023993][ T5804] comedi: valid board names for comedi_test driver are: [ 3802.024858][ T5804] comedi_test [ 3802.025648][ T5804] comedi: valid board names for comedi_bond driver are: [ 3802.026517][ T5804] comedi_bond [ 3802.212994][ T31] audit: type=1326 audit(3800.450:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5805 comm="syz.2.305" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff9a93280a code=0x7ffc0000 [ 3802.284804][ T31] audit: type=1326 audit(3800.540:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5805 comm="syz.2.305" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff9a93280a code=0x7ffc0000 [ 3802.837321][ T31] audit: type=1326 audit(3801.090:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5805 comm="syz.2.305" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff9a93280a code=0x7ffc0000 [ 3802.891739][ T31] audit: type=1326 audit(3801.120:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5805 comm="syz.2.305" exe="/syz-executor" sig=0 arch=c00000f3 syscall=26 compat=0 ip=0x7fff9a93280a code=0x7ffc0000 [ 3802.938613][ T31] audit: type=1326 audit(3801.170:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5805 comm="syz.2.305" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff9a93280a code=0x7ffc0000 [ 3803.272116][ T31] audit: type=1326 audit(3801.470:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5805 comm="syz.2.305" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff9a93280a code=0x7ffc0000 [ 3803.319577][ T31] audit: type=1326 audit(3801.570:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5805 comm="syz.2.305" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff9a93280a code=0x7ffc0000 [ 3803.773927][ T31] audit: type=1326 audit(3802.020:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5805 comm="syz.2.305" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff9a93280a code=0x7ffc0000 [ 3803.803921][ T31] audit: type=1326 audit(3802.040:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5805 comm="syz.2.305" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff9a93280a code=0x7ffc0000 [ 3803.869119][ T31] audit: type=1326 audit(3802.050:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5805 comm="syz.2.305" exe="/syz-executor" sig=0 arch=c00000f3 syscall=27 compat=0 ip=0x7fff9a93280a code=0x7ffc0000 [ 3818.030221][ T5813] netlink: 48 bytes leftover after parsing attributes in process `syz.2.309'. [ 3850.565494][ T5823] netlink: 48 bytes leftover after parsing attributes in process `syz.2.314'. [ 3910.775511][ T5848] netlink: 48 bytes leftover after parsing attributes in process `syz.3.320'. [ 3963.632489][ T5863] netlink: 32 bytes leftover after parsing attributes in process `syz.2.326'. [ 4004.106341][ T5875] netlink: 32 bytes leftover after parsing attributes in process `syz.2.332'. [ 4027.385683][ T5886] fuse: Bad value for 'fd' [ 4038.752025][ T5888] netlink: 32 bytes leftover after parsing attributes in process `syz.3.338'. [ 4082.681648][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 4082.682321][ T31] audit: type=1326 audit(4080.910:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5906 comm="syz.3.346" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff9a93280a code=0x7ffc0000 [ 4083.089866][ T31] audit: type=1326 audit(4081.180:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5906 comm="syz.3.346" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff9a93280a code=0x7ffc0000 [ 4083.713012][ T31] audit: type=1326 audit(4081.820:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5906 comm="syz.3.346" exe="/syz-executor" sig=0 arch=c00000f3 syscall=135 compat=0 ip=0x7fff9a919c96 code=0x7ffc0000 [ 4083.796522][ T31] audit: type=1326 audit(4081.960:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5906 comm="syz.3.346" exe="/syz-executor" sig=0 arch=c00000f3 syscall=99 compat=0 ip=0x7fff9a919582 code=0x7ffc0000 [ 4083.884588][ T31] audit: type=1326 audit(4081.980:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5906 comm="syz.3.346" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff9a93280a code=0x7ffc0000 [ 4083.965735][ T31] audit: type=1326 audit(4082.050:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5906 comm="syz.3.346" exe="/syz-executor" sig=0 arch=c00000f3 syscall=135 compat=0 ip=0x7fff9a9195cc code=0x7ffc0000 [ 4084.120845][ T31] audit: type=1326 audit(4082.170:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5906 comm="syz.3.346" exe="/syz-executor" sig=0 arch=c00000f3 syscall=29 compat=0 ip=0x7fff9a9325f4 code=0x7ffc0000 [ 4084.306306][ T31] audit: type=1326 audit(4082.510:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5906 comm="syz.3.346" exe="/syz-executor" sig=0 arch=c00000f3 syscall=24 compat=0 ip=0x7fff9a93280a code=0x7ffc0000 [ 4084.801319][ T31] audit: type=1326 audit(4083.000:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5906 comm="syz.3.346" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff9a93280a code=0x7ffc0000 [ 4085.050133][ T31] audit: type=1326 audit(4083.220:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5906 comm="syz.3.346" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff9a93280a code=0x7ffc0000 [ 4118.776590][ C0] ------------[ cut here ]------------ [ 4118.777291][ C0] WARNING: [irq_settings_is_per_cpu_devid(desc)] kernel/irq/manage.c:2125 at request_threaded_irq+0x320/0x38c, CPU#0: syz.2.349/5922 [ 4118.780431][ C0] Modules linked in: [ 4118.782269][ C0] CPU: 0 UID: 0 PID: 5922 Comm: syz.2.349 Not tainted syzkaller #0 PREEMPT [ 4118.783727][ C0] Hardware name: riscv-virtio,qemu (DT) [ 4118.784505][ C0] epc : request_threaded_irq+0x320/0x38c [ 4118.785136][ C0] ra : request_threaded_irq+0x320/0x38c [ 4118.785814][ C0] epc : ffffffff8032d750 ra : ffffffff8032d750 sp : ffff8f8002b37810 [ 4118.786384][ C0] gp : ffffffff89f9df20 tp : ffffaf801d114f80 t0 : ffffffff86391c0a [ 4118.786937][ C0] t1 : ffffffff9136c6e0 t2 : ffffffff8016a132 s0 : ffff8f8002b37870 [ 4118.787493][ C0] s1 : 0000000000000000 a0 : 0000000000000005 a1 : 0000000000000000 [ 4118.788028][ C0] a2 : 0000000000080000 a3 : ffffffff8032d750 a4 : ffff8f800c087260 [ 4118.788516][ C0] a5 : 000000000018e260 a6 : 0000000000000003 a7 : ffffffff86660460 [ 4118.789053][ C0] s2 : 0000000000200000 s3 : ffffaf8011e8d000 s4 : 0000000000000005 [ 4118.789571][ C0] s5 : ffffffff84b56ef4 s6 : ffffaf80166c7000 s7 : 0000000000000000 [ 4118.790016][ C0] s8 : ffffffff87597e60 s9 : 0000000000020000 s10: ffffaf80166c7000 [ 4118.790531][ C0] s11: 0000000000000001 t3 : 0000000000000001 t4 : 0000000000001fff [ 4118.791005][ C0] t5 : 00000000000000c8 t6 : 0000000000000002 ssp : 0000000000000000 [ 4118.791558][ C0] status: 0000000200000120 badaddr: ffffffff8032d750 cause: 0000000000000003 [ 4118.792191][ C0] [] request_threaded_irq+0x320/0x38c [ 4118.793127][ C0] [] parport_attach+0x780/0xb14 [ 4118.793987][ C0] [] comedi_device_attach+0x350/0x7ec [ 4118.794688][ C0] [] do_devconfig_ioctl+0x1a2/0x654 [ 4118.795352][ C0] [] comedi_unlocked_ioctl+0x338/0x2c10 [ 4118.796034][ C0] [] __riscv_sys_ioctl+0x17c/0x1e4 [ 4118.796789][ C0] [] syscall_handler+0x92/0x114 [ 4118.797696][ C0] [] do_trap_ecall_u+0x3d2/0x58c [ 4118.798658][ C0] [] handle_exception+0x15e/0x16a [ 4118.801141][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 4118.802207][ C0] CPU: 0 UID: 0 PID: 5922 Comm: syz.2.349 Not tainted syzkaller #0 PREEMPT [ 4118.802893][ C0] Hardware name: riscv-virtio,qemu (DT) [ 4118.803220][ C0] Call Trace: [ 4118.803472][ C0] [] dump_backtrace+0x2e/0x3c [ 4118.804304][ C0] [] show_stack+0x30/0x3c [ 4118.805071][ C0] [] dump_stack_lvl+0x114/0x1ac [ 4118.805988][ C0] [] dump_stack+0x1c/0x28 [ 4118.806871][ C0] [] vpanic+0x274/0x684 [ 4118.807625][ C0] [] panic+0xa0/0xa4 [ 4118.808207][ C0] [] check_panic_on_warn+0xc0/0xe4 [ 4118.808918][ C0] [] __warn+0x284/0x498 [ 4118.809558][ C0] [] __report_bug+0x1d4/0x2ac [ 4118.810418][ C0] [] report_bug+0xd8/0x28c [ 4118.811177][ C0] [] handle_break+0x13a/0x30c [ 4118.811977][ C0] [] do_trap_break+0x188/0x358 [ 4118.812832][ C0] [] handle_exception+0x15e/0x16a [ 4118.813760][ C0] [] request_threaded_irq+0x320/0x38c [ 4118.814404][ C0] [] parport_attach+0x780/0xb14 [ 4118.815238][ C0] [] comedi_device_attach+0x350/0x7ec [ 4118.815989][ C0] [] do_devconfig_ioctl+0x1a2/0x654 [ 4118.816625][ C0] [] comedi_unlocked_ioctl+0x338/0x2c10 [ 4118.817346][ C0] [] __riscv_sys_ioctl+0x17c/0x1e4 [ 4118.818124][ C0] [] syscall_handler+0x92/0x114 [ 4118.818894][ C0] [] do_trap_ecall_u+0x3d2/0x58c [ 4118.819860][ C0] [] handle_exception+0x15e/0x16a [ 4118.821385][ C0] SMP: stopping secondary CPUs