last executing test programs: 4.188155135s ago: executing program 4 (id=2588): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fsopen(&(0x7f0000000000)='jfs\x00', 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x9) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.030088012s ago: executing program 4 (id=2590): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r0, &(0x7f0000000040), 0x0}, 0x20) 3.922106729s ago: executing program 4 (id=2592): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x27, 0xf9eb, 0x14a4014, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) read$FUSE(r0, &(0x7f0000008c40)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) open_by_handle_at(r1, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c000000810000000000000001"], 0xfeffffff) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000005f0001"], 0x18}], 0x1}, 0x40010) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000002200)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0xe4, 0x5, 0x0, 0xb9, 0x56, 0xda, 0x2}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) (async) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) (async) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x27, 0xf9eb, 0x14a4014, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) (async) read$FUSE(r0, &(0x7f0000008c40)={0x2020}, 0x2020) (async) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) (async) open_by_handle_at(r1, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c000000810000000000000001"], 0xfeffffff) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000005f0001"], 0x18}], 0x1}, 0x40010) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000002200)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) (async) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0xe4, 0x5, 0x0, 0xb9, 0x56, 0xda, 0x2}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) (async) 3.732908937s ago: executing program 4 (id=2595): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000140)="08cb", 0x2}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000480)={0x0, 0x0, 0x59ee}, 0x8) 3.025895155s ago: executing program 2 (id=2600): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101242, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101242, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) (async) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) syz_open_dev$dri(&(0x7f0000000000), 0xabd7, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0xabd7, 0x0) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000040)={0x1}) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) (async) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) r4 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x1, 0x40000032, r5, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r7, 0x5420, &(0x7f00000000c0)=0x1) (async) ioctl$TIOCPKT(r7, 0x5420, &(0x7f00000000c0)=0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) ioctl$TCSETS(r7, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r7, 0x0, r5, 0x0, 0x7ffff000, 0x1) (async) splice(r7, 0x0, r5, 0x0, 0x7ffff000, 0x1) readv(r6, &(0x7f00000001c0)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0xa750, &(0x7f0000000b40)) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0xa750, &(0x7f0000000b40)) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0x0) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) 2.749969568s ago: executing program 4 (id=2604): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x4dc0, 0x9c080, 0xa, 0x1b1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.749679922s ago: executing program 4 (id=2605): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) file_getattr(r3, 0x0, &(0x7f0000000040), 0x18, 0x1000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x355737d6d65d287a, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000400)=@security={'security\x00', 0xe, 0x4, 0x3e8, 0xffffffff, 0x208, 0xf8, 0x0, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, &(0x7f00000003c0), {[{{@ipv6={@local, @empty, [0xff000000, 0xff, 0xffffffff, 0xff000000], [0x0, 0xff], 'veth0_to_bond\x00', 'veth0\x00', {}, {}, 0x87, 0x3, 0x6, 0x9}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0x3, "07a3", 0x1}}]}, @common=@unspec=@AUDIT={0x28}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private2, [0xffffff00, 0x0, 0x0, 0xff], [0xffffffff, 0xffffff00, 0xffffff00, 0xffffffff], 'wg2\x00', 'team0\x00', {}, {}, 0x0, 0x6, 0xd, 0x14}, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@hl={{0x28}, {0x2, 0x7}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x3ff, 0x4, 0x9, 0x227, 0x5, 0x3, 0xf, 0x2]}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, [0xff, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xff, 0xffffffff], 'pim6reg0\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x2c, 0x8, 0x3, 0x8}, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@ipv6header={{0x28}, {0x6, 0xb}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3192098ccabae5db678bc540cd86da96728e50a47d72527377cc680fa1d4"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f0000000180)={0x30}) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$uac2(r5, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="12150001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$lan78xx(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.59344424s ago: executing program 2 (id=2607): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000080)={0x4, 0x8, 0xfa00, {r0, 0xa}}, 0x10) mq_timedsend(0xffffffffffffffff, &(0x7f00000000c0)="af33fd75df7a32a90669a2bd01906a784350afef2ce6ed693509bb430884f725947c3e4a3f65f4c490a264fe4141fe224f1dcae7b5a005799df7ba59c532350e53c049ee8a2827b037434bab258c0ec2f13764cffc7ee16ae6dca212abc8037f8cb052bf393b812cbaac2eff51fcc042a83e2bc8d92d16d9388bce0415b7e38a54b084176979ef092fb0f6f050cde02786c560fb06dcc3030d6b1b5dd8d2419ada43419360d8f4e592bf3387904fc71a63b5a887e803a0ea9dbc9d0f0adbe823e4d6f1fe034c9fa5b2f12b097574b721e9c8ddf1930156f2cb", 0xd9, 0xfff, &(0x7f00000001c0)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000300)={0xb, 0x10, 0xfa00, {&(0x7f0000000240), r0, 0x10000}}, 0x18) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x103042, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000400)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], 0x6, 0x0, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000004c0)={&(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x0, 0x63636363}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000500)={0x5, r3, r4, 0xc0c0c0c0}) unshare(0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) ioctl$DVB_DVR_DMX_REQBUFS(r5, 0xc0086f3c, &(0x7f0000000580)={0x2, 0xc13}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000640)=@multiplanar_overlay={0x2, 0xd, 0x4, 0x80, 0x7, {0x77359400}, {0x2, 0x2, 0x44, 0xe, 0x7, 0x8, "426571c5"}, 0x3, 0x3, {&(0x7f00000005c0)=[{0x8, 0x5, {}, 0x1}, {0x8, 0x1, {0x8}, 0x8}]}, 0xfffffeff, 0x0, r1}) ioctl$KVM_SET_DEBUGREGS(r5, 0x4080aea2, &(0x7f00000006c0)={[0x1000, 0xeee88008, 0x25000, 0x3b4e5b2cdace30c4], 0x3, 0x80, 0x4}) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r5, 0x4068aea3, &(0x7f0000000740)) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r1, 0x4018aee1, &(0x7f0000000800)=@attr_set_pmu={0x0, 0x1, 0x1, &(0x7f00000007c0)=0x1}) socket$nl_sock_diag(0x10, 0x3, 0x4) r7 = syz_open_dev$dri(&(0x7f0000000840), 0x9, 0x121400) ioctl$DRM_IOCTL_RES_CTX(r7, 0xc0106426, &(0x7f00000008c0)={0x7, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}, {}]}) socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000900)={0x14, 0x88, 0xfa00, {r0, 0x30, 0x0, @in6={0xa, 0x4e23, 0xb22, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}}, 0x90) clock_gettime(0x0, &(0x7f00000009c0)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r6, 0xc0585611, &(0x7f0000000a80)=@multiplanar_overlay={0x2, 0x9, 0x4, 0x0, 0x6, {r8, r9/1000+60000}, {0x5, 0x8, 0x7, 0xf9, 0x80, 0x7, "bf98107c"}, 0x80000000, 0x3, {&(0x7f0000000a00)=[{0x4, 0x3ff, {0x1713fa61}, 0x3}, {0x800, 0x0, {0x5}, 0x3}]}, 0x1, 0x0, r5}) syz_io_uring_setup(0x7898, &(0x7f0000000b00)={0x0, 0x3b53, 0x40000, 0x1, 0x51, 0x0, r5}, &(0x7f0000000b80)=0x0, &(0x7f0000000bc0), &(0x7f0000000c00)) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r12 = getpgrp(0xffffffffffffffff) syz_ublk_add_dev(r1, r10, 0x0, 0x0, &(0x7f0000000c80)={0x2e, 0x10, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xe880, 0x0, r11, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000c40)=@any_dev={0x4, 0xa19, 0x0, 0x0, 0x1000, 0xb3, r12, 0x0, 0x14}}}, &(0x7f0000000d00)) accept$packet(r5, &(0x7f0000000d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000d80)=0x14) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) accept$inet6(r1, &(0x7f0000000dc0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000e00)=0x1c) 2.514304929s ago: executing program 2 (id=2608): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000340), 0x4) sendto(r0, &(0x7f0000000000)='%', 0x1, 0x8840, 0x0, 0x0) 2.494188043s ago: executing program 2 (id=2609): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100026bd7000efdbdf256900000008000300c46c45e76c11070400000044fe89c429c1a500062b9aef9bef8452607e7f8d72cef9546dcee0416a9627ad6f3bf825d0adaaa7eb2a35e916b428d560c2fe148e8bedf8e1192fcdb4c710f3cb6bdf9db275d4af543e1bc872", @ANYRES32=r5, @ANYBLOB="0500d300020000000a00060008021100000100000a00060008021100000100000500d2000d0000000600d400250c00000a00060008021100000000000500d30006000000"], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000000)=@ethtool_cmd={0x1f, 0x8, 0x6, 0x6, 0x27, 0x80, 0xf, 0x5b, 0x2, 0x2, 0x3ff, 0x1, 0xd8, 0x4f, 0x5, 0xadf0, [0x22, 0x200]}}) close(0x3) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83", 0x9e}, {0x0}, {&(0x7f00000005c0)="f2b314c96d50", 0x6}], 0x3}}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x400, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000540)="a22caaffe37d4620d1a9427c00787b63b26c5b83ef8ce8f8fe823d77c642dd73361c1f115fdce55de92bede6e812191b9780a257fa4fb3", 0x37}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be3176d26e449b7ad2d1c9471c13851aba1592ac", 0x9e}, {&(0x7f00000006c0)="138b9f129daf1d79da8ee1c8c74f2040f7892fe9", 0x14}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5ede789aa995461e91d2", 0x24}, {&(0x7f0000000e80)="0e9129a2bae0d093a9c5091f0926391174e5aff7420b47b0cf1a8bbd7bb239460a6b26eb4f86fa48acdf54294bee3567a8ff0ed4f912a1aa059d62286db3e045dc31db292f5ab26a8f1466d90f0f98ff1a0e2b1018604ef19bc70ab992", 0x5d}], 0x5}}], 0x2, 0x810) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"373ab6e870bf64ef25ad87deef94c3b7350df627ea76a6efbd6c33a19e5dde0b3718dac0c2b8e833beb9e0347000fc7332c43a3128856f23df4628fb1e54b1745094c19bc88c190192f58dda884b3296f7cd6373842bff61047e0697c9af6e9f62b88fd21621b527902efdae6efd3516c7e5a36f4aaa12cd1b3ac0686db46783f45fe6aa2515ab6996b4807b0d9575a9061a775ef515a40b97c34035e8e412b9200000001000000062a07ab97f50ff5deb8a5978611317016887694245b363252230bbe17ed0f591f935d8e4ae7563eeff2fdfad8a775f0a4b15f63f5c4851df9aef747ace240cec55ce1659c08d38714245835e15291c4973ade3b2006d8870a1d739eb8e7a284e23f660b2061e31a70627be4acb16ecbe8a4edde1c5397c761a2fe0690f5d580ebf35b8640441ddf47d1f67a5e2d892f14a4f88412ce3cc8ec4d0580729c8638502410837253d6ac316ee9c6a24eb5d83463ff9bdf81f31c12b04adec97fe1377d2f29067e5f6f48cc123f2c4c02afe60d224c7d974a63c1aa9b110d2187f18de3753b57c630eab26238e8201501a007da99f1d07f76c4da113859ab55792049a15c5d83051f41ae951912eb81154f2398a729b6d6c51d6850bddcd4b35b24996e4ec707d1a744dff58ea5030fcd6b46a468ac029f86be30c7c3d5708e3871fed2e63b9c3ad265350e87e9fc44696eadeecc1ff67e30b64be27f480180d26218d031380149bcc31bd712063e9c09ed5329a530800000025d79eb9d4491d82d2b7a3d7d0cf9286396fcb8c2ccf1655b3ba420c36c3fb88d788308e947cc15e0957a98a843911c954c2a2feccd60d0000da8330cd1de951bcd767cf211a241c882b8d5e608fc0e796afead2a7b05018b4ae6c034c4c4997868343a5d064838dd0aca0d21b429665a0a1b4fd17cd34e711cee01d2348dc5871cca7ab4e4924f6f4bc29e7dbfae6788549e600000000271cd7ddfabd45803a6d1145734a82b2b9a6a87c8e118629840a027fd3f8e5a6a5dccee1a480d6cd0402a64db2263b1a9de61848b1eb31b51189f4caa2fdf0c3a38275386522137fe573ec27693a337c324952480c9ae476a694010aa22095c6d8bfceb5e024cbc21d6c1d1b17fae63dc627a948c4eca7dfa3f8a5e628531472e00ed28f2d2b7fcf03b5ba1975fcc010482a08c7800b3c87587a9fea37402ffafcc9cabc16a123164765d10dafe323ce33f197af8a3cf57332dbbee3f263a16cb565b61690b5804341630437ad2277be4ff82d1aa32c15b0cf99c88c7bca0ecf47a3be490bf6079f19acdf9a71f636fff612167c849b5c149cb32d8dd98d2aa8bb0606a1214fc1f0da04476cd8c3c056ec88eefca4d331ecbd5416c356466202cb97ddfc320b7594d5ab2e9102d549ffa72300"}) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) 2.349674463s ago: executing program 0 (id=2610): r0 = socket(0x2b, 0x1, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e3f, 0x2, @empty, 0x8001}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2e, &(0x7f0000000040)=0x2000006, 0x4) 2.258211614s ago: executing program 0 (id=2611): r0 = syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0x1, 0xfffffffc, 0x400}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newlink={0x64, 0x10, 0x19, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40d87, 0x79269}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x5}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}]}}}, @IFLA_IFNAME={0x14, 0x3, 'ip6gretap0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x40880}, 0x8040) 2.258059468s ago: executing program 0 (id=2612): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0xb, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) listen(r1, 0x80000003) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) 2.209811614s ago: executing program 0 (id=2613): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r0, &(0x7f0000000040), 0x0}, 0x20) 2.102084073s ago: executing program 0 (id=2614): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000140)="08cb", 0x2}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000480)={0x0, 0x0, 0x59ee}, 0x8) 1.894028079s ago: executing program 3 (id=2615): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x4dc0, 0x9c080, 0xa, 0x1b1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.822189014s ago: executing program 3 (id=2617): socket$inet6(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x7}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x200000000000011, 0x2, 0xd) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x6) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x4, r5}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="3647c71e74c7", @void, {@llc={0x4, {@llc={0x0, 0x8e, '\f'}}}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3500000028776e9abbdff5983db7207edc0f905ff87bb89a416fc8eb1af82c920c7ff05e884134fb9ab3aab5576c879439238492841ff7748dde707307e8a808a44269df5c5e79646be5af5e005d07cf0498aee2df3b6a341b0c218e262242daa58bda5e46002039efe5460306831e2869c618e20b1a325bdc7a4ee2c074dbc837445801f786b1db9866c02838fa86d7bfb91e47e1406fcb54", @ANYRES16=r7, @ANYBLOB="01072cbd700000000000450000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x20000021}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 1.172616758s ago: executing program 0 (id=2618): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f00000002c0)={0x401, 0x8}) r4 = socket(0x400000000010, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time\x00') r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x42042, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x4000009b, 0x0, 0xffffffffffffffff}]}) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r4, 0x84, 0x3, &(0x7f0000001300)=""/4122, &(0x7f0000000140)=0xfffffffffffffd2c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_DYNSET_SREG_KEY={0x8}, @NFTA_DYNSET_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000f00)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce0102030109022400010000000009040000020de67a0009050402000200000009058102ff"], 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xb, 0xa}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x810}, 0x0) 1.118199779s ago: executing program 3 (id=2619): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000340), 0x4) sendto(r0, &(0x7f0000000000)='%', 0x1, 0x8840, 0x0, 0x0) 1.033005996s ago: executing program 3 (id=2620): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x548, 0x300, 0x3d0, 0x3d0, 0x230, 0x160, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hbh={{0x48}, {0x8, 0x3, 0x0, [0x40, 0x8, 0x1, 0x5, 0xfff7, 0x3, 0x8000, 0x2, 0x5, 0x1, 0x4d, 0x5, 0x5, 0x7, 0x8, 0x30b0], 0xa}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@local, 0xb, 0x20, 0x1d}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x2}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x14}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xffffff00, 0xff], [0xffffff00, 0xff000000, 0xffffff00, 0xffffff00], 'geneve0\x00', 'macvtap0\x00', {}, {}, 0x3c, 0x3, 0x1, 0x26}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4, 0xe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = io_uring_setup(0x780, &(0x7f0000000040)={0x0, 0xa0c89f, 0x1c881, 0x1, 0xd1}) syz_io_uring_setup(0x4ce4, &(0x7f00000000c0)={0x0, 0x7c98, 0x40, 0x2, 0x243}, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x14}}, 0x40044) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 865.646966ms ago: executing program 3 (id=2621): r0 = socket(0x2b, 0x1, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e3f, 0x2, @empty, 0x8001}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2e, &(0x7f0000000040)=0x2000006, 0x4) 665.759935ms ago: executing program 3 (id=2622): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b02", @ANYRES8], 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x89b0, &(0x7f0000000340)={'macvtap0\x00', &(0x7f0000000400)=@ethtool_regs={0x4, 0x6, 0x3e, "d179de0577c62fa6b610329902d8db4077636db4c0a79f0e20ad72da4ea9f4ad63a6e086e84bbd3091620a4fc7582b2b28f13ebe81eff0db00edfb69386c"}}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x3, 0x8, 0x8, 0xb, 0x9, 0x0, 0xfffffe0000000001, 0xfa1c, 0xffff}, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) close(r4) r5 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x68241) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffffffffffb, 0x0, 0x3, @buffer={0x0, 0xfffffffffffffeeb, &(0x7f00000001c0)=""/17}, 0x0, 0x0, 0x80000001, 0x1, 0xfffbffff, 0x0}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x0, 0x10000000, 0x8001, 0x299c0, 0x6, 0x800, 0xfc5, 0x8000, 0x5}, 0x0) syz_80211_join_ibss(0x0, &(0x7f0000000200)=@random="870f02a9c3", 0x5, 0x1) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xaa000, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000080)={'pim6reg1\x00', {0x2, 0x4e20, @broadcast}}) r7 = socket(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r8 = syz_open_dev$vim2m(0x0, 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x4}) getsockopt(r7, 0x200000000114, 0x271c, 0x0, &(0x7f0000000000)) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="070000d3f9c7390004000000000100000400000008000000", @ANYRES32, @ANYRESHEX=r3, @ANYRES32=r6, @ANYRES32, @ANYRES16=0x0], 0x50) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="401707"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 592.532543ms ago: executing program 2 (id=2623): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0xb, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) listen(r1, 0x80000003) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) 552.311411ms ago: executing program 1 (id=2624): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r0, &(0x7f0000000040), 0x0}, 0x20) 437.836295ms ago: executing program 1 (id=2625): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x4100, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f0000000040)={{0x5, 0x5}, {0x6, 0x9}, 0xc0, 0x1}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x800, 0x8b90174713e82843, 0x3, 0x0, 0x5}) r1 = syz_open_dev$radio(&(0x7f0000000100), 0x0, 0x2) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000200)={0x9a0000, 0x0, 0x5, r2, 0x0, &(0x7f00000001c0)={0x990afe, 0x1, '\x00', @p_u16=&(0x7f0000000180)=0x1}}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0x1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0x1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000007c0)={'tunl0\x00', &(0x7f0000000740)={'tunl0\x00', 0x0, 0x1, 0x8708, 0x1, 0xa3, {{0xa, 0x4, 0x3, 0x7, 0x28, 0x66, 0x0, 0x80, 0x29, 0x0, @multicast1, @local, {[@timestamp={0x44, 0x14, 0xda, 0x0, 0x9, [0x30, 0x8, 0x3, 0xfffff0e8]}]}}}}}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0x7, [@decl_tag={0x3, 0x0, 0x0, 0x11, 0x4, 0x9}, @type_tag={0xc, 0x0, 0x0, 0x12, 0x1}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x2f, 0x0, 0x23, 0x5}, @enum64={0xd, 0x3, 0x0, 0x13, 0x1, 0x1, [{0xc, 0xb, 0x7fffffff}, {0xe, 0x760, 0x8}, {0xb, 0x9, 0x1}]}]}, {0x0, [0x41, 0x30, 0x61, 0x5f, 0x30]}}, &(0x7f0000000880)=""/61, 0x7b, 0x3d, 0x1, 0x34}, 0x28) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0x17, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x7}, [@btf_id={0x18, 0x5f0085f68fbb15e3, 0x3, 0x0, 0x3}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @map_fd={0x18, 0x6}, @jmp={0x5, 0x0, 0x7, 0x3, 0xb, 0xfffffffffffffff0, 0xfffffffffffffff0}, @map_val={0x18, 0xb, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}, @func, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000a40)='GPL\x00', 0x9, 0xd3, &(0x7f0000000a80)=""/211, 0x41100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000bc0)={0x3, 0xd, 0x7, 0xffff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000c00)=[{0x5, 0x3}, {0x1, 0x4, 0xc, 0x2}], 0x10, 0x8}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d80)={{0x1, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)}, 0x20) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000dc0)={0x1b, 0x0, 0x0, 0xf, 0x0, 0x1, 0x700, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f00)=@bpf_ext={0x1c, 0x2e, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0xe4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x3}, @generic={0x0, 0x8, 0x4, 0x4, 0x6}, @alu={0x7, 0x1, 0x8, 0x8, 0x1, 0x4, 0xfffffffffffffff3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x1, 0x6, 0x2, 0x8, 0x40, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0x90, &(0x7f0000000680)=""/144, 0x40f00, 0xe, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000900)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000940)={0x0, 0x2, 0x6, 0x8}, 0x10, 0x1369f, r9, 0x8, &(0x7f0000000e40)=[r10, r11], &(0x7f0000000e80)=[{0x3, 0x4, 0x5, 0x8}, {0x4, 0x1, 0x5, 0x4}, {0x3, 0x1, 0x7, 0xa}, {0x1, 0x4, 0x9, 0x115b7475a3b97545}, {0x0, 0x4, 0xc, 0x8}, {0x5, 0x5, 0x6, 0x7}, {0x2, 0x4, 0x2, 0x5}, {0x1, 0x4, 0x9, 0xa}], 0x10, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001040)={{r4, 0xffffffffffffffff}, &(0x7f0000000fc0), &(0x7f0000001000)=r9}, 0x20) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000013c0)={0x6, 0x2f, &(0x7f0000001080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@ldst={0x1, 0x1, 0x3, 0x9, 0x5, 0x18, 0x1}, @map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x3ff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @map_fd={0x18, 0x8, 0x1, 0x0, r6}, @generic={0x0, 0x9, 0x8, 0x2, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001200)='GPL\x00', 0x7fffffff, 0x43, &(0x7f0000001240)=""/67, 0x40f00, 0x4, '\x00', r7, 0x25, r8, 0x8, &(0x7f00000012c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001300)={0x0, 0x5, 0xfffffffe, 0x20000}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000001340)=[r10], &(0x7f0000001380)=[{0x3, 0x1, 0xa, 0x7}, {0x1, 0x5, 0x5, 0xc}, {0x1, 0x3, 0x10, 0x6}, {0x2, 0x2}], 0x10, 0x8001}, 0x94) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r5, 0x8008f511, &(0x7f0000001480)) cachestat(r12, &(0x7f00000014c0)={0x3, 0xffffffff}, &(0x7f0000001500), 0x0) fcntl$addseals(r13, 0x409, 0x2) r14 = socket$igmp(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000001540)=r9, 0x4) syz_open_dev$video(&(0x7f0000001580), 0x2, 0x40000) r15 = syz_open_dev$vim2m(&(0x7f00000015c0), 0xfffffffffffeffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r15, 0xc0145608, &(0x7f0000001600)={0x2, 0x0, 0x4, 0x0, 0x2}) r16 = pidfd_getfd(r8, r2, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r16, 0x13, &(0x7f0000001640)=[0xc, 0xd71], 0x2) 404.196787ms ago: executing program 1 (id=2626): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000d98000/0x1000)=nil, 0x1000, 0x2, 0x31, r0, 0x0) syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) select(0x74da010bc28934e, &(0x7f0000000580)={0xf, 0x6, 0x6, 0x8, 0x2000003ff, 0x1, 0xfff, 0xac}, 0x0, 0x0, 0x0) (async) select(0x74da010bc28934e, &(0x7f0000000580)={0xf, 0x6, 0x6, 0x8, 0x2000003ff, 0x1, 0xfff, 0xac}, 0x0, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCFLSH(r1, 0x5608, 0x0) lsetxattr$system_posix_acl(&(0x7f00000001c0)='.\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="02000000010000faffffff0002000200000000000200001f0000000002"], 0x24, 0x3) (async) lsetxattr$system_posix_acl(&(0x7f00000001c0)='.\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="02000000010000faffffff0002000200000000000200001f0000000002"], 0x24, 0x3) 237.32106ms ago: executing program 1 (id=2627): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x4dc0, 0x9c080, 0xa, 0x1b1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 106.106504ms ago: executing program 1 (id=2628): r0 = syz_open_dev$loop(&(0x7f0000000200), 0x5, 0x86100) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) 72.651457ms ago: executing program 1 (id=2629): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x40010) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x15, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x2000005}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 0s ago: executing program 2 (id=2630): bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="2100000000000000000000000001"], 0x48) r0 = syz_io_uring_setup(0x6c8b, &(0x7f00000011c0)={0x0, 0xac0c, 0x800, 0x400000, 0x3c1}, &(0x7f0000001340), &(0x7f0000001380), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100) kernel console output (not intermixed with test programs): t kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 414.682954][ T7789] garmin_gps 1-1:8.206: Garmin GPS usb/tty converter detected [ 414.706861][T12478] input: syz1 as /devices/virtual/input/input40 [ 414.736852][ T7789] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 414.768973][ T7789] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 414.856459][T12484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1873'. [ 414.869714][T12484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.880892][T12484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.902025][T12485] syzkaller0: entered promiscuous mode [ 414.908071][ T7789] usb 1-1: USB disconnect, device number 126 [ 414.929783][ T7789] garmin_gps 1-1:8.206: device disconnected [ 415.153606][T12485] syzkaller0: entered allmulticast mode [ 415.205135][T12492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.214899][T12492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.470531][T12494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1875'. [ 415.527263][T12499] syzkaller0: entered promiscuous mode [ 415.533302][T12499] syzkaller0: entered allmulticast mode [ 415.588747][T12503] binfmt_misc: register: failed to install interpreter file ./cgroup [ 415.823669][T12514] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 415.844384][ T8829] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 416.004396][ T8829] usb 1-1: Using ep0 maxpacket: 16 [ 416.010878][ T8829] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 416.023565][ T8829] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 416.033330][ T8829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.041869][ T8829] usb 1-1: Product: syz [ 416.046312][ T8829] usb 1-1: Manufacturer: syz [ 416.050966][ T8829] usb 1-1: SerialNumber: syz [ 416.059332][ T8829] usb 1-1: config 0 descriptor?? [ 416.083518][ T8829] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 416.092880][ T8829] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 416.216106][T12530] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1885'. [ 416.429631][T12543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.452498][T12543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.464010][ T30] kauditd_printk_skb: 73 callbacks suppressed [ 416.464026][ T30] audit: type=1326 audit(1782123106.467:2687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12542 comm="syz.4.1889" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fddb419ce59 code=0x0 [ 416.634423][ T7784] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 416.703889][ T8829] em28xx 1-1:0.0: chip ID is em2750 [ 416.734405][ T5685] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 416.794308][ T7784] usb 4-1: Using ep0 maxpacket: 16 [ 416.800879][ T7784] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.811952][ T7784] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.821902][ T7784] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 416.831232][ T7784] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.840716][ T7784] usb 4-1: config 0 descriptor?? [ 416.884423][ T5685] usb 3-1: Using ep0 maxpacket: 16 [ 416.891235][ T5685] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.902661][ T5685] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.912836][ T5685] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 416.913233][T12505] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1878'. [ 416.926248][ T5685] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 416.948427][ T5685] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.958069][ T5685] usb 3-1: config 0 descriptor?? [ 417.006779][ T8829] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 417.015441][ T8829] em28xx 1-1:0.0: board has no eeprom [ 417.074376][ T8829] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 417.082403][ T8829] em28xx 1-1:0.0: dvb set to bulk mode. [ 417.089424][ T9] em28xx 1-1:0.0: Binding DVB extension [ 417.102425][ T8829] usb 1-1: USB disconnect, device number 127 [ 417.121214][ T8829] em28xx 1-1:0.0: Disconnecting em28xx [ 417.129469][ T9] em28xx 1-1:0.0: Registering input extension [ 417.137413][ T8829] em28xx 1-1:0.0: Closing input extension [ 417.159767][ T8829] em28xx 1-1:0.0: Freeing device [ 417.252800][ T7784] apple 0003:05AC:024B.0026: fixing up MacBook JIS keyboard report descriptor [ 417.262226][ T7784] apple 0003:05AC:024B.0026: unknown global tag 0xe [ 417.269147][ T7784] apple 0003:05AC:024B.0026: item 0 1 1 14 parsing failed [ 417.277397][ T7784] apple 0003:05AC:024B.0026: parse failed [ 417.283235][ T7784] apple 0003:05AC:024B.0026: probe with driver apple failed with error -22 [ 417.374560][ T5685] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 417.388272][ T5685] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 417.395706][ T5685] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 417.403155][ T5685] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 417.412810][ T5685] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 417.420317][ T5685] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 417.427896][ T5685] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 417.435491][ T5685] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 417.443283][ T5685] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 417.450917][ T5685] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 417.462968][ T7784] usb 4-1: USB disconnect, device number 101 [ 417.502996][ T5685] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0027/input/input42 [ 417.522174][ T5685] microsoft 0003:045E:07DA.0027: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 417.597288][T12545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1890'. [ 417.661099][T12566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.674180][ T7784] usb 3-1: USB disconnect, device number 107 [ 417.675662][T12566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.708882][T12566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.721630][T12566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.017106][T12572] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1898'. [ 418.026408][T12572] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1898'. [ 418.038344][T12572] No such timeout policy "syz1" [ 418.047457][T12572] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1898'. [ 418.059221][T12572] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1898'. [ 418.385307][T12582] bond3 (unregistering): Released all slaves [ 418.582673][ T30] audit: type=1326 audit(1782123108.577:2688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12581 comm="syz.2.1901" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c8679ce59 code=0x7ffc0000 [ 418.683103][T12579] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 418.686853][ T30] audit: type=1326 audit(1782123108.577:2689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12581 comm="syz.2.1901" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c8679ce59 code=0x7ffc0000 [ 418.716441][ T30] audit: type=1326 audit(1782123108.577:2690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12581 comm="syz.2.1901" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0c8679ce59 code=0x7ffc0000 [ 418.749520][ T30] audit: type=1326 audit(1782123108.607:2691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12581 comm="syz.2.1901" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c8679ce59 code=0x7ffc0000 [ 418.786435][ T30] audit: type=1326 audit(1782123108.617:2693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12581 comm="syz.2.1901" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c8679ce59 code=0x7ffc0000 [ 418.844454][ T30] audit: type=1326 audit(1782123108.617:2694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12581 comm="syz.2.1901" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c8679ce59 code=0x7ffc0000 [ 418.952439][ T30] audit: type=1326 audit(1782123108.607:2692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12581 comm="syz.2.1901" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c8679ce59 code=0x7ffc0000 [ 419.131784][ T30] audit: type=1326 audit(1782123108.617:2695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12581 comm="syz.2.1901" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f0c8679ce59 code=0x7ffc0000 [ 419.253188][ T30] audit: type=1326 audit(1782123108.617:2696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12581 comm="syz.2.1901" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c8679ce59 code=0x7ffc0000 [ 419.363090][T12599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.398435][T12599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.532540][T12605] team0: Refused to change device type [ 419.590982][T12601] tipc: Enabling of bearer rejected, already enabled [ 419.882384][T12603] netlink: 'syz.3.1905': attribute type 12 has an invalid length. [ 420.134361][ T5685] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 420.208124][T12626] input: syz0 as /devices/virtual/input/input43 [ 420.284361][ T5685] usb 3-1: device descriptor read/64, error -71 [ 420.536397][ T5685] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 420.694617][ T5685] usb 3-1: device descriptor read/64, error -71 [ 420.772097][T12642] team0: Refused to change device type [ 420.802648][T12642] tipc: Enabling of bearer rejected, already enabled [ 420.836219][ T5685] usb usb3-port1: attempt power cycle [ 421.160528][ T5620] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 421.204439][ T5685] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 421.318782][ T5685] usb 3-1: device descriptor read/8, error -71 [ 421.365816][T12671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.383602][T12669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.397309][T12671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.422971][T12669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.491138][T12676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.551316][T12676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.624375][ T5685] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 421.655213][ T5685] usb 3-1: device descriptor read/8, error -71 [ 421.774622][ T5685] usb usb3-port1: unable to enumerate USB device [ 422.068425][T12678] netlink: 'syz.4.1927': attribute type 5 has an invalid length. [ 422.227584][T12682] team0: Refused to change device type [ 422.248119][T12682] tipc: Enabling of bearer rejected, already enabled [ 422.467965][T12692] netlink: 'syz.3.1930': attribute type 1 has an invalid length. [ 422.613525][T12698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.626629][T12698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.824921][T12709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1938'. [ 422.843170][T12698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.857156][T12698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.874432][ T7789] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 422.976778][T12718] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1941'. [ 423.033106][T12722] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1942'. [ 423.055951][ T7789] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 423.074493][ T7789] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 423.077414][T12722] 8021q: adding VLAN 0 to HW filter on device bond2 [ 423.094716][ T7789] usb 4-1: config 0 interface 0 has no altsetting 0 [ 423.104535][ T7789] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 423.116269][T12722] netlink: 212892 bytes leftover after parsing attributes in process `syz.2.1942'. [ 423.124667][ T7789] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 423.144338][ T7789] usb 4-1: Product: syz [ 423.148596][ T7789] usb 4-1: Manufacturer: syz [ 423.153212][ T7789] usb 4-1: SerialNumber: syz [ 423.161462][ T7789] usb 4-1: config 0 descriptor?? [ 423.170776][ T7789] hub 4-1:0.0: bad descriptor, ignoring hub [ 423.176977][ T7785] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 423.185752][ T7789] hub 4-1:0.0: probe with driver hub failed with error -5 [ 423.195767][ T7789] usb 4-1: selecting invalid altsetting 0 [ 423.334378][ T7785] usb 1-1: Using ep0 maxpacket: 8 [ 423.340733][ T7785] usb 1-1: too many configurations: 254, using maximum allowed: 8 [ 423.352998][T12731] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1944'. [ 423.353798][ T7785] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 423.380477][ T7785] usb 1-1: can't read configurations, error -61 [ 423.469040][T12738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.482071][T12738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.514694][ T7785] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 423.674326][ T7785] usb 1-1: Using ep0 maxpacket: 8 [ 423.681127][ T7785] usb 1-1: too many configurations: 254, using maximum allowed: 8 [ 423.691399][ T7785] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 423.708805][ T7785] usb 1-1: can't read configurations, error -61 [ 423.718193][ T7785] usb usb1-port1: attempt power cycle [ 423.896611][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 423.896629][ T30] audit: type=1326 audit(1782123113.897:2735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12752 comm="syz.4.1950" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb419ce59 code=0x7ffc0000 [ 423.930819][ T30] audit: type=1326 audit(1782123113.937:2736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12752 comm="syz.4.1950" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb419ce59 code=0x7ffc0000 [ 423.959078][ T30] audit: type=1326 audit(1782123113.937:2737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12752 comm="syz.4.1950" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fddb419ce59 code=0x7ffc0000 [ 423.984551][ T9] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 423.994561][ T30] audit: type=1326 audit(1782123113.937:2738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12752 comm="syz.4.1950" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb419ce59 code=0x7ffc0000 [ 424.042168][ T30] audit: type=1326 audit(1782123113.937:2739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12752 comm="syz.4.1950" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb419ce59 code=0x7ffc0000 [ 424.074516][ T7785] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 424.095777][ T7785] usb 1-1: Using ep0 maxpacket: 8 [ 424.106794][T12757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.116897][ T7785] usb 1-1: too many configurations: 254, using maximum allowed: 8 [ 424.125931][T12757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.129675][ T30] audit: type=1326 audit(1782123113.937:2740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12752 comm="syz.4.1950" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fddb419ce59 code=0x7ffc0000 [ 424.158534][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 424.173882][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 424.183619][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 424.194643][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 424.204098][ T30] audit: type=1326 audit(1782123113.937:2741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12752 comm="syz.4.1950" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb419ce59 code=0x7ffc0000 [ 424.230949][ T7785] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 424.231150][ T30] audit: type=1326 audit(1782123113.937:2742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12752 comm="syz.4.1950" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb419ce59 code=0x7ffc0000 [ 424.265402][ T9] usb 3-1: New USB device found, idVendor=1235, idProduct=8217, bcdDevice= 0.40 [ 424.276116][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.285295][ T9] usb 3-1: Product: syz [ 424.290286][ T7785] usb 1-1: can't read configurations, error -61 [ 424.306704][ T9] usb 3-1: Manufacturer: syz [ 424.312823][ T30] audit: type=1326 audit(1782123113.937:2743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12752 comm="syz.4.1950" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fddb419ce59 code=0x7ffc0000 [ 424.340386][ T9] usb 3-1: SerialNumber: syz [ 424.372394][ T30] audit: type=1326 audit(1782123113.937:2744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12752 comm="syz.4.1950" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb419ce59 code=0x7ffc0000 [ 424.474399][ T7785] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 424.504806][ T7785] usb 1-1: Using ep0 maxpacket: 8 [ 424.510647][ T7785] usb 1-1: too many configurations: 254, using maximum allowed: 8 [ 424.520023][ T7785] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 424.528050][ T7785] usb 1-1: can't read configurations, error -61 [ 424.534787][ T7785] usb usb1-port1: unable to enumerate USB device [ 424.568659][ T9] usb 3-1: 0:1 : does not exist [ 424.574024][ T9] usb 3-1: Focusrite Vocaster Mixer Driver enabled (pid=0x8217); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 424.589126][ T9] usb 3-1: Error initialising Vocaster Mixer Driver: -22 [ 424.609015][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 424.628995][ T9] usb 3-1: USB disconnect, device number 112 [ 424.638339][T10076] udevd[10076]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 424.705218][T12759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.713951][T12759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.035026][T12761] loop5: detected capacity change from 0 to 7 [ 425.042289][T12761] Dev loop5: unable to read RDB block 7 [ 425.048109][T12761] loop5: AHDI p2 p4 [ 425.052092][T12761] loop5: partition table partially beyond EOD, truncated [ 425.061704][T12761] loop5: p4 start 254 is beyond EOD, truncated [ 425.257331][T12772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.266914][T12772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.354453][ T7785] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 425.524475][ T7785] usb 3-1: Using ep0 maxpacket: 16 [ 425.537083][ T7785] usb 3-1: unable to get BOS descriptor or descriptor too short [ 425.546340][ T7785] usb 3-1: config 13 has an invalid interface number: 50 but max is 0 [ 425.554788][ T7785] usb 3-1: config 13 has no interface number 0 [ 425.561395][ T7785] usb 3-1: config 13 interface 50 altsetting 158 bulk endpoint 0x8 has invalid maxpacket 16 [ 425.572235][ T7785] usb 3-1: config 13 interface 50 has no altsetting 0 [ 425.581818][ T7785] usb 3-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 425.591176][ T7785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.602125][ T7785] usb 3-1: Product: syz [ 425.607140][ T7785] usb 3-1: Manufacturer: syz [ 425.611835][ T7785] usb 3-1: SerialNumber: syz [ 425.619140][T12767] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 425.798000][T12791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.808588][T12791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.829218][T12767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.839689][T12767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.850845][T12767] ip6tnl2: entered allmulticast mode [ 425.858040][T12767] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1954'. [ 425.873079][ T7785] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 425.881366][ T7785] usb 3-1: MIDIStreaming interface descriptor not found [ 425.893223][T12794] fuse: Bad value for 'fd' [ 425.898733][T12794] pimreg0: tun_chr_ioctl cmd 35111 [ 425.912022][ T7785] usb 3-1: USB disconnect, device number 113 [ 426.707360][ T7784] usb 4-1: USB disconnect, device number 102 [ 427.109475][T12818] netlink: 'syz.4.1966': attribute type 27 has an invalid length. [ 427.118153][T12818] netlink: 'syz.4.1966': attribute type 3 has an invalid length. [ 427.126068][T12818] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1966'. [ 427.175084][T12822] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1967'. [ 427.176067][T12823] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1967'. [ 427.597367][T12807] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 428.044392][ T7784] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 428.204363][ T7785] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 428.211903][ T7784] usb 4-1: Using ep0 maxpacket: 32 [ 428.226033][ T7784] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 428.244315][ T7784] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 428.258074][ T7784] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 428.269483][ T7784] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 428.284618][ T7784] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 428.314295][ T7784] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.324369][ T7784] usb 4-1: Product: syz [ 428.335328][ T7784] usb 4-1: Manufacturer: syz [ 428.344299][ T7784] usb 4-1: SerialNumber: syz [ 428.359484][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 428.369306][ T7784] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input44 [ 428.371247][T12847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.393010][T12847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.397699][ T7785] usb 1-1: Using ep0 maxpacket: 16 [ 428.408257][ T7785] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 428.417028][ T7785] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 428.425797][ T7785] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 428.439742][ T7785] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 428.443907][T12852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.449835][ T7785] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 428.460874][T12852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.466744][ T7785] usb 1-1: config 0 has no interface number 0 [ 428.480391][ T7785] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 428.492014][ T7785] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 428.502023][ T7785] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 428.512136][ T7785] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 428.525426][ T7785] usb 1-1: config 0 interface 125 has no altsetting 2 [ 428.533941][ T7785] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 428.543807][ T7789] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 428.551854][ T7789] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 428.560037][ T7789] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 428.567973][ T7785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.576569][ T7789] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 428.584384][ T7785] usb 1-1: Product: syz [ 428.588671][ T7785] usb 1-1: Manufacturer: syz [ 428.593378][ T7789] rtc rtc0: __rtc_set_alarm: err=-22 [ 428.598777][ T7784] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 428.607297][ T7785] usb 1-1: SerialNumber: syz [ 428.617364][ T7784] (id 0x00) [ 428.623320][ T7785] usb 1-1: config 0 descriptor?? [ 428.634776][ T7785] usb 1-1: selecting invalid altsetting 2 [ 428.651876][ T7785] uss720 1-1:0.125: probe with driver uss720 failed with error -22 [ 428.704605][ T7784] rc_core: IR keymap rc-imon-pad not found [ 428.710504][ T7784] Registered IR keymap rc-empty [ 428.716011][ T7784] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 428.726386][ T7784] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 428.804952][ T7784] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 428.817615][ T7784] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input45 [ 428.831947][ T7784] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:103> initialized [ 428.842198][T12839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.864852][T12839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.873871][T12839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.884851][T12839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.929764][T12839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.949342][T12839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.958231][T12839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.967043][T12839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.976330][T12839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.993427][T12839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.011793][ T7784] usb 1-1: USB disconnect, device number 6 [ 429.095480][T12867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1982'. [ 429.355413][ T5685] usb 4-1: USB disconnect, device number 103 [ 429.507658][T12886] netlink: 'syz.3.1988': attribute type 46 has an invalid length. [ 429.538104][T12886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1988'. [ 429.639580][T12890] netlink: 'syz.3.1988': attribute type 1 has an invalid length. [ 429.661788][T12889] netlink: 'syz.3.1988': attribute type 1 has an invalid length. [ 429.764332][ T7784] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 429.995960][ T7784] usb 3-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=35.fb [ 430.038758][ T7784] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.093109][ T7784] usb 3-1: config 0 descriptor?? [ 430.118557][T12908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1992'. [ 430.134946][ T7784] gspca_main: spca505-2.14.0 probing 0733:0430 [ 430.564466][T12888] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1989'. [ 430.664462][ T7789] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 430.844328][ T7789] usb 4-1: Using ep0 maxpacket: 8 [ 430.854769][ T7784] gspca_spca505: reg write: error -110 [ 430.871321][ T7789] usb 4-1: config 1 interface 0 altsetting 9 bulk endpoint 0x82 has invalid maxpacket 1023 [ 430.886919][ T7784] spca505 3-1:0.0: probe with driver spca505 failed with error -5 [ 430.920317][ T7789] usb 4-1: config 1 interface 0 altsetting 9 bulk endpoint 0x3 has invalid maxpacket 64 [ 430.963677][ T7789] usb 4-1: config 1 interface 0 has no altsetting 0 [ 430.991901][ T7789] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 431.008046][ T7789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.026317][ T7789] usb 4-1: Product: 괂㣣薂虱膊郷傕㛚 [ 431.038977][ T7789] usb 4-1: Manufacturer: ᇠ[ 431.042565][T12917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.056283][ T7789] usb 4-1: SerialNumber: 宴ಥ㇡î´ãº±å¤¢æ€æ—¬é‡²ï‹¶å½´å—´á›é½ºà·Ð¡ì¼‡á®°ì—¿à®¾ê¨‰å‹ é›¶ëž›æ³’嘉윓剬晈㺠䉅䰃⠶â¦Ä°èºä§Žã³€ìŽ‚왎ì†æž¦î¦¹é¢ì±ã¯­á»Œí™·åƒ‹â´‹ê–‰ëƒ£à¢£âµ²ã–„ä纴ã‰é“²ïœ½ë©ë‰¹ã¼–픎衜㧆抂糾왹퓆竩鰣雥᱇ë—屉Ρ䦹ర⾤舟Í悦 [ 431.057696][T12917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.118755][T12912] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 431.131182][T12912] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 431.297307][T12927] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 431.494476][ T7784] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 431.559961][ T7789] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 431.573166][ T7789] usb 4-1: USB disconnect, device number 104 [ 431.646082][ T7784] usb 1-1: config 0 has no interfaces? [ 431.652025][ T7784] usb 1-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 431.669602][ T7784] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.674463][T12932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.679680][ T7784] usb 1-1: config 0 descriptor?? [ 431.691445][T12932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.759395][T12938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.776691][T12938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.787280][T12938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.797531][T12938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.902566][T12926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.912332][T12926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.921295][ T7789] usb 1-1: USB disconnect, device number 7 [ 432.364464][ T7789] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 432.511383][ T7784] usb 3-1: USB disconnect, device number 114 [ 432.518142][ T7789] usb 1-1: Using ep0 maxpacket: 8 [ 432.528239][ T7789] usb 1-1: config index 0 descriptor too short (expected 153, got 36) [ 432.538829][ T7789] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 432.557186][ T7789] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice= 1.08 [ 432.566745][ T7789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.575882][ T7789] usb 1-1: Product: syz [ 432.580862][ T7789] usb 1-1: Manufacturer: syz [ 432.586464][ T7789] usb 1-1: SerialNumber: syz [ 432.789698][T12959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.803326][T12958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.804165][T12959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.824805][T12958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.849430][T12926] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1997'. [ 432.860919][T12926] bridge_slave_0: left allmulticast mode [ 432.878245][T12926] bridge_slave_0: left promiscuous mode [ 432.884676][T12926] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.962595][ T7789] usb 1-1: USB disconnect, device number 8 [ 433.027457][T12958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.047205][T12959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.056771][T12958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.075658][T12959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.090705][T12958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.102988][T12959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.104635][T12958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.112968][T12959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.134683][ T9] usb 3-1: new full-speed USB device number 115 using dummy_hcd [ 433.159299][T12969] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2007'. [ 433.238071][T12970] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2007'. [ 433.261645][T12970] fuse: Bad value for 'fd' [ 433.295821][ T9] usb 3-1: config 246 has an invalid interface number: 166 but max is 0 [ 433.318447][ T9] usb 3-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 433.349465][ T9] usb 3-1: config 246 has no interface number 0 [ 433.371971][ T9] usb 3-1: config 246 interface 166 altsetting 118 endpoint 0xB has invalid wMaxPacketSize 0 [ 433.398796][ T9] usb 3-1: config 246 interface 166 altsetting 118 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 433.434771][ T9] usb 3-1: config 246 interface 166 has no altsetting 0 [ 433.458913][ T9] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 433.475338][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.484230][ T9] usb 3-1: Product: syz [ 433.488965][ T9] usb 3-1: Manufacturer: syz [ 433.493945][ T9] usb 3-1: SerialNumber: syz [ 433.754313][ T7789] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 433.904412][ T7789] usb 1-1: Using ep0 maxpacket: 16 [ 433.911016][ T7789] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 433.924299][ T7789] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 433.935032][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 433.935068][ T30] audit: type=1326 audit(1782123123.937:2770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12963 comm="syz.2.2006" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c8679ce59 code=0x7ffc0000 [ 433.965963][ T7789] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.968651][ T30] audit: type=1326 audit(1782123123.937:2771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12963 comm="syz.2.2006" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c8679ce59 code=0x7ffc0000 [ 434.000897][ T30] audit: type=1326 audit(1782123123.937:2772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12963 comm="syz.2.2006" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c8679ce59 code=0x7ffc0000 [ 434.027046][ T30] audit: type=1326 audit(1782123123.937:2773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12963 comm="syz.2.2006" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c8679ce59 code=0x7ffc0000 [ 434.055103][ T30] audit: type=1326 audit(1782123123.937:2774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12963 comm="syz.2.2006" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0x7f0c8679ce59 code=0x7ffc0000 [ 434.080022][ T30] audit: type=1326 audit(1782123123.937:2775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12963 comm="syz.2.2006" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c8679ce59 code=0x7ffc0000 [ 434.085969][ T7789] usb 1-1: config 0 descriptor?? [ 434.115661][ T30] audit: type=1326 audit(1782123123.937:2776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12963 comm="syz.2.2006" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c8679ce59 code=0x7ffc0000 [ 434.141411][ T30] audit: type=1326 audit(1782123123.937:2777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12963 comm="syz.2.2006" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c8679ce59 code=0x7ffc0000 [ 434.166164][ T9] usb 3-1: Limiting number of CPorts to U8_MAX [ 434.175927][ T9] usb 3-1: Not enough endpoints found in device, aborting! [ 434.188082][ T30] audit: type=1326 audit(1782123123.937:2778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12963 comm="syz.2.2006" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c8679ce59 code=0x7ffc0000 [ 434.212896][ T30] audit: type=1326 audit(1782123123.937:2779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12963 comm="syz.2.2006" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0c8679caeb code=0x7ffc0000 [ 434.299760][T12974] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2009'. [ 434.308860][T12974] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2009'. [ 434.358668][T12976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.380935][T12976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.607399][ T7789] hid-led 0003:0FC5:B080.0028: reserved main item tag 0xd [ 434.615073][ T7789] hid_parser_main: 5 callbacks suppressed [ 434.615095][ T7789] hid-led 0003:0FC5:B080.0028: unknown main item tag 0x0 [ 434.629368][ T7789] hid-led 0003:0FC5:B080.0028: unknown main item tag 0x0 [ 434.636638][ T7789] hid-led 0003:0FC5:B080.0028: unknown main item tag 0x0 [ 434.644072][ T7789] hid-led 0003:0FC5:B080.0028: unknown main item tag 0x0 [ 434.651553][ T7789] hid-led 0003:0FC5:B080.0028: unknown main item tag 0x0 [ 434.659041][ T7789] hid-led 0003:0FC5:B080.0028: unknown main item tag 0x0 [ 434.839293][ T7785] usb 3-1: USB disconnect, device number 115 [ 435.039697][ T7789] hid-led 0003:0FC5:B080.0028: probe with driver hid-led failed with error -71 [ 435.043083][T12986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.059165][T12986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.071759][ T7789] usb 1-1: USB disconnect, device number 9 [ 435.162526][T12991] team0: Device xfrm0 is of different type [ 435.174473][T12991] tipc: Enabling of bearer rejected, already enabled [ 435.243078][T12993] netlink: 'syz.4.2015': attribute type 1 has an invalid length. [ 435.363476][T12996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.373855][T12996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.543570][T13004] netlink: 'syz.2.2017': attribute type 10 has an invalid length. [ 435.633008][T13006] netlink: 'syz.0.2018': attribute type 64 has an invalid length. [ 435.642483][T13006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2018'. [ 435.653865][T13006] A link change request failed with some changes committed already. Interface ªªªªªª may have been left with an inconsistent configuration, please check. [ 435.752748][T13010] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2020'. [ 435.912499][T13019] fuse: Unknown parameter 'fd}?äÓ÷6ôÔ¶õ†E±ÕqÊw[º|Ü|>*±jènÇcñÒú~ÉR^' [ 435.985946][T13021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.020522][T13021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.177376][T13026] fuse: Bad value for 'fd' [ 436.226928][T13026] netlink: 'syz.3.2024': attribute type 1 has an invalid length. [ 436.340904][T13029] fuse: Bad value for 'group_id' [ 436.347735][T13029] fuse: Bad value for 'group_id' [ 436.724820][ T9] usb 3-1: new full-speed USB device number 116 using dummy_hcd [ 436.759522][T13036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.768422][T13036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.875709][ T9] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 436.887476][ T9] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.897645][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 436.904483][ T5685] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 436.912137][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=0320, bcdDevice= 0.00 [ 436.922123][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.934749][ T9] usb 3-1: config 0 descriptor?? [ 437.074415][ T5685] usb 1-1: Using ep0 maxpacket: 16 [ 437.081269][ T5685] usb 1-1: unable to get BOS descriptor or descriptor too short [ 437.090996][ T5685] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 437.101598][ T5685] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 437.112240][ T5685] usb 1-1: New USB device found, idVendor=1235, idProduct=9012, bcdDevice= 0.40 [ 437.121487][ T5685] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.129804][ T5685] usb 1-1: Product: syz [ 437.133995][ T5685] usb 1-1: Manufacturer: syz [ 437.139031][ T5685] usb 1-1: SerialNumber: syz [ 437.234444][ T7789] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 437.308253][T13042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.317140][T13042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.347319][T13034] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2027'. [ 437.386468][T13043] dvmrp0: entered allmulticast mode [ 437.392930][ T7789] usb 4-1: config 246 has an invalid interface number: 166 but max is 0 [ 437.398467][ T5685] usb 1-1: USB disconnect, device number 10 [ 437.409561][ T7789] usb 4-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 437.425751][ T7789] usb 4-1: config 246 has no interface number 0 [ 437.432774][ T7789] usb 4-1: config 246 interface 166 altsetting 118 endpoint 0xB has invalid wMaxPacketSize 0 [ 437.444044][ T7789] usb 4-1: config 246 interface 166 altsetting 118 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 437.458253][ T7789] usb 4-1: config 246 interface 166 has no altsetting 0 [ 437.468231][ T7789] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 437.479810][ T7789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.488126][ T7789] usb 4-1: Product: syz [ 437.492580][ T7789] usb 4-1: Manufacturer: syz [ 437.497960][ T7789] usb 4-1: SerialNumber: syz [ 437.558503][T13032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.567345][T13032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.578811][T13032] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 438.063162][T13050] "syz.0.2034" (13050) uses obsolete ecb(arc4) skcipher [ 438.111596][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 438.128828][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 438.129123][ T7789] usb 4-1: Limiting number of CPorts to U8_MAX [ 438.142069][ T9] usb 3-1: USB disconnect, device number 116 [ 438.164969][ T7789] usb 4-1: Not enough endpoints found in device, aborting! [ 438.277533][T13057] team0: Device xfrm0 is of different type [ 438.286623][T13057] tipc: Enabling of bearer rejected, already enabled [ 438.434501][T13062] team0: Device xfrm0 is of different type [ 438.450712][T13062] tipc: Enabling of bearer rejected, already enabled [ 438.532398][T13067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.547238][T13067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.806870][ T9] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 438.826244][ T7789] usb 4-1: USB disconnect, device number 105 [ 438.964340][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 438.970895][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 438.983081][ T9] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 438.992242][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.000543][ T9] usb 3-1: Product: syz [ 439.004773][ T9] usb 3-1: Manufacturer: syz [ 439.009503][ T9] usb 3-1: SerialNumber: syz [ 439.015838][ T9] usb 3-1: config 0 descriptor?? [ 439.025821][ T9] cdc_ether 3-1:0.0: missing cdc header descriptor [ 439.032827][ T9] usb 3-1: unsupported MDLM descriptors [ 439.038780][ T30] kauditd_printk_skb: 279 callbacks suppressed [ 439.038798][ T30] audit: type=1326 audit(1782123129.027:3059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13039 comm="syz.3.2030" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f65a795d68e code=0x7ffc0000 [ 439.137321][ T30] audit: type=1326 audit(1782123129.137:3060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13039 comm="syz.3.2030" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f65a795d68e code=0x7ffc0000 [ 439.188994][T13083] IPv6: NLM_F_CREATE should be specified when creating new route [ 439.220823][T13083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.236049][ T9] usb 3-1: USB disconnect, device number 117 [ 439.242606][ T30] audit: type=1326 audit(1782123129.237:3061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13039 comm="syz.3.2030" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f65a795d68e code=0x7ffc0000 [ 439.268355][T13083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.340016][ T30] audit: type=1326 audit(1782123129.337:3062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13039 comm="syz.3.2030" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f65a799ce59 code=0x7ffc0000 [ 439.665064][ T7789] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 439.825781][ T7789] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 439.836695][ T7789] usb 1-1: config 0 has no interface number 0 [ 439.842966][ T7789] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 439.857219][ T7789] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 439.883405][ T7789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.891775][ T7789] usb 1-1: Product: syz [ 439.909312][ T7789] usb 1-1: Manufacturer: syz [ 439.921519][ T7789] usb 1-1: SerialNumber: syz [ 439.929957][ T7789] usb 1-1: config 0 descriptor?? [ 439.938415][ T7789] yurex 1-1:0.50: USB YUREX device now attached to Yurex #1 [ 440.011876][T13114] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2054'. [ 440.035029][T13114] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2054'. [ 440.094353][ T9] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 440.140779][T13088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.153408][T13088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.254750][ T5685] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 440.265233][ T7789] usb 1-1: USB disconnect, device number 11 [ 440.270965][ T9] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 440.283736][ T7789] yurex 1-1:0.50: USB YUREX #1 now disconnected [ 440.293544][ T9] usb 3-1: New USB device found, idVendor=0e41, idProduct=4156, bcdDevice= 0.40 [ 440.298034][T13122] fuse: blksize only supported for fuseblk [ 440.303648][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.317425][ T9] usb 3-1: Product: syz [ 440.321929][ T9] usb 3-1: Manufacturer: syz [ 440.327419][ T9] usb 3-1: SerialNumber: syz [ 440.375377][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.384097][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.406337][T13129] syz_tun: entered promiscuous mode [ 440.436103][ T5685] usb 4-1: unable to get BOS descriptor or descriptor too short [ 440.446965][ T5685] usb 4-1: config 1 has an invalid descriptor of length 155, skipping remainder of the config [ 440.471347][ T4991] Dev loop5: unable to read RDB block 7 [ 440.480105][ T5685] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 440.501421][ T4991] loop5: AHDI p2 p4 [ 440.507512][ T4991] loop5: partition table partially beyond EOD, truncated [ 440.515909][ T5685] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 247, changing to 7 [ 440.528546][ T4991] loop5: p4 start 254 is beyond EOD, truncated [ 440.535002][ T5685] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 9065, setting to 1024 [ 440.564224][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 440.583666][ T5685] usb 4-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 440.606561][ T5685] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.639585][ T5685] usb 4-1: Manufacturer: á°Œ [ 440.655989][ T5685] usb 4-1: SerialNumber: syz [ 440.672560][T13152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.688452][ T9] usb 3-1: USB disconnect, device number 118 [ 440.690759][T13152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.782919][T10396] udevd[10396]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 440.813186][T13155] netlink: 'syz.1.2065': attribute type 1 has an invalid length. [ 440.854941][T13155] 8021q: adding VLAN 0 to HW filter on device bond4 [ 440.918482][T13155] bond5 (unregistering): Released all slaves [ 440.947644][ T5685] usb 4-1: USB disconnect, device number 106 [ 441.003501][T10397] udevd[10397]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 441.184482][ T7789] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 441.250015][T13188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.250089][T13186] input: syz1 as /devices/virtual/input/input46 [ 441.270390][T13188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.277983][T13186] warning: `syz.3.2073' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 441.304962][T13188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.317020][T13188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.337626][T13188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.351862][T13190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.355210][T13188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.365241][T13190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.377868][ T7789] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.389008][ T7789] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 441.399355][ T7789] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 441.409134][ T7789] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 441.417316][ T7789] usb 1-1: Manufacturer: syz [ 441.434560][ T7789] usb 1-1: config 0 descriptor?? [ 441.524516][ T5685] usb 3-1: new full-speed USB device number 119 using dummy_hcd [ 441.675725][ T5685] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 441.683889][ T5685] usb 3-1: config 0 has no interface number 0 [ 441.690231][ T5685] usb 3-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 441.701813][ T5685] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 441.713266][ T5685] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 441.724784][ T5685] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 441.733845][ T5685] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 441.742039][ T8829] usb 4-1: new full-speed USB device number 107 using dummy_hcd [ 441.749803][ T5685] usb 3-1: Product: syz [ 441.753996][ T5685] usb 3-1: SerialNumber: syz [ 441.760549][ T5685] usb 3-1: config 0 descriptor?? [ 441.767891][ T5685] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 441.775277][ T5685] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input47 [ 441.916558][ T8829] usb 4-1: unable to get BOS descriptor or descriptor too short [ 441.933153][ T8829] usb 4-1: not running at top speed; connect to a high speed hub [ 441.942389][ T8829] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 441.952936][ T8829] usb 4-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 441.965534][ T8829] usb 4-1: string descriptor 0 read error: -22 [ 441.983529][ T8829] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=b2.86 [ 441.994982][ T8829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.186839][T13205] trusted_key: encrypted_key: master key parameter '' is invalid [ 442.187352][T13204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.195676][T13205] trusted_key: encrypted_key: master key parameter '' is invalid [ 442.205336][T13204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.213871][T13205] trusted_key: encrypted_key: master key parameter '' is invalid [ 442.230322][T13205] trusted_key: encrypted_key: master key parameter '' is invalid [ 442.230376][ T8829] snd-usb-6fire 4-1:2.0: unknown device firmware state received from device: [ 442.247726][T13204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.257154][T13204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.265788][ T8829] eb 2e 87 4b 9a 05 e6 5e [ 442.276020][ T8829] snd-usb-6fire 4-1:2.0: probe with driver snd-usb-6fire failed with error -5 [ 442.331162][T13210] syzkaller1: entered promiscuous mode [ 442.337153][T13210] syzkaller1: entered allmulticast mode [ 442.346324][T13210] netlink: 'syz.1.2079': attribute type 6 has an invalid length. [ 442.364158][T13210] bond5: entered promiscuous mode [ 442.369679][T13210] 8021q: adding VLAN 0 to HW filter on device bond5 [ 442.581446][T13195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.590757][T13195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.469468][T13225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.488860][T13225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.500456][T13225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.509309][T13225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.683031][T13227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.692477][T13227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.921520][ T8829] usb 1-1: USB disconnect, device number 12 [ 443.986496][ C0] cm109_urb_ctl_callback: 8 callbacks suppressed [ 443.986522][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 443.986743][ T7789] usb 3-1: USB disconnect, device number 119 [ 443.992895][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 444.016797][ T7789] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 444.290941][T13238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.303101][T13238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.384521][ T8829] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 444.461261][ T5685] usb 4-1: USB disconnect, device number 107 [ 444.514417][ T8829] usb 1-1: device descriptor read/64, error -71 [ 444.549071][T13243] vlan0: entered allmulticast mode [ 444.554738][T13243] team0: entered allmulticast mode [ 444.559898][T13243] team_slave_0: entered allmulticast mode [ 444.565892][T13243] team_slave_1: entered allmulticast mode [ 444.591576][T13246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2089'. [ 444.754648][ T8829] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 444.884467][ T8829] usb 1-1: device descriptor read/64, error -71 [ 444.954510][ T9] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 445.008973][ T8829] usb usb1-port1: attempt power cycle [ 445.144337][ T9] usb 4-1: device descriptor read/64, error -71 [ 445.354399][ T8829] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 445.384669][ T9] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 445.393734][ T8829] usb 1-1: device descriptor read/8, error -71 [ 445.524779][ T9] usb 4-1: device descriptor read/64, error -71 [ 445.635236][ T8829] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 445.644898][ T9] usb usb4-port1: attempt power cycle [ 445.657163][ T8829] usb 1-1: device descriptor read/8, error -71 [ 445.672064][T13278] netlink: 'syz.2.2097': attribute type 12 has an invalid length. [ 445.774550][ T8829] usb usb1-port1: unable to enumerate USB device [ 445.839733][T13281] syzkaller0: entered promiscuous mode [ 445.865723][T13281] syzkaller0: entered allmulticast mode [ 445.884101][T13281] tipc: Enabled bearer , priority 0 [ 445.893483][T13281] tipc: Resetting bearer [ 445.901000][T13280] tipc: Resetting bearer [ 445.910280][T13280] tipc: Disabling bearer [ 446.004347][ T9] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 446.045307][ T9] usb 4-1: device descriptor read/8, error -71 [ 446.099459][T13291] netlink: 'syz.4.2102': attribute type 1 has an invalid length. [ 446.120348][T13291] 8021q: adding VLAN 0 to HW filter on device bond3 [ 446.213406][T13291] bond3: (slave veth0_to_bond): making interface the new active one [ 446.238385][T13291] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 446.273373][T13296] bond3: entered promiscuous mode [ 446.283488][T13296] veth0_to_bond: entered promiscuous mode [ 446.294443][ T9] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 446.295893][T13296] bond3: entered allmulticast mode [ 446.328345][ T9] usb 4-1: device descriptor read/8, error -71 [ 446.333788][T13296] veth0_to_bond: entered allmulticast mode [ 446.370797][T13287] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2099'. [ 446.380362][T13299] macvlan3: entered promiscuous mode [ 446.403428][T13299] macvlan3: entered allmulticast mode [ 446.429454][T13299] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 446.445211][ T9] usb usb4-port1: unable to enumerate USB device [ 446.463398][T13299] bond3: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 446.653296][T13293] nvme_fabrics: missing parameter 'transport=%s' [ 446.664445][T13306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.681999][T13293] nvme_fabrics: missing parameter 'nqn=%s' [ 446.690123][T13306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.724058][T13307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.734954][T13308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.743529][T13307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.754017][T13308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.763626][T13306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2103'. [ 446.848554][T13310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.869519][T13310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.893832][T13310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.905168][T13310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.916980][T13310] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2104'. [ 446.948720][ T9] hid-generic 00A0:0006:0003.0029: unknown main item tag 0x0 [ 446.958678][ T9] hid-generic 00A0:0006:0003.0029: unknown main item tag 0x4 [ 446.967196][ T9] hid-generic 00A0:0006:0003.0029: unknown main item tag 0x0 [ 446.975350][T13310] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 446.984046][T13310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.998075][T13310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.007585][ T9] hid-generic 00A0:0006:0003.0029: unknown main item tag 0x0 [ 447.016047][ T9] hid-generic 00A0:0006:0003.0029: unknown main item tag 0x0 [ 447.024649][ T9] hid-generic 00A0:0006:0003.0029: unknown main item tag 0x0 [ 447.034490][ T9] hid-generic 00A0:0006:0003.0029: unknown main item tag 0x0 [ 447.044626][ T9] hid-generic 00A0:0006:0003.0029: unknown main item tag 0x0 [ 447.054542][ T9] hid-generic 00A0:0006:0003.0029: unknown main item tag 0x0 [ 447.064208][ T9] hid-generic 00A0:0006:0003.0029: unknown main item tag 0x0 [ 447.078799][ T9] hid-generic 00A0:0006:0003.0029: hidraw0: HID v0.05 Device [syz0] on syz0 [ 447.163076][T13311] fido_id[13311]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 447.374999][T13321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.384051][T13321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.391823][T13323] fuse: Bad value for 'user_id' [ 447.399300][T13323] fuse: Bad value for 'user_id' [ 447.525155][ T9] usb 3-1: new full-speed USB device number 120 using dummy_hcd [ 447.677395][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 447.695988][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 447.711203][ T9] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 447.724017][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.752144][ T9] usb 3-1: config 0 descriptor?? [ 447.772430][T13334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.783861][T13334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.009565][T13316] syzkaller0: entered promiscuous mode [ 448.037929][T13316] syzkaller0: entered allmulticast mode [ 448.267045][ T9] acrux 0003:1A34:0802.002A: unexpected long global item [ 448.294099][ T9] acrux 0003:1A34:0802.002A: parse failed [ 448.313272][ T9] acrux 0003:1A34:0802.002A: probe with driver acrux failed with error -22 [ 448.515727][ T5685] usb 3-1: USB disconnect, device number 120 [ 448.979521][T13342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.988641][T13342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.134513][ T9] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 449.294359][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 449.307064][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 449.327013][ T9] usb 4-1: config 4 interface 0 has no altsetting 0 [ 449.342518][ T9] usb 4-1: string descriptor 0 read error: -22 [ 449.348990][ T9] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 449.358602][ T9] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 449.381023][ T9] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 449.408758][ T9] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 449.439298][ T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 449.455073][ T9] usb 4-1: media controller created [ 449.481735][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 450.450217][T13374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.460799][T13374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.538033][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 450.546474][T13340] usb 4-1: dvb_usb_au6610: wlen=0, aborting [ 450.566868][T13390] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2122'. [ 450.579535][T13340] usb 4-1: dvb_usb_au6610: wlen=4100, aborting [ 450.865654][ T7793] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 450.982737][T13408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.993796][T13408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.014609][ T7793] usb 3-1: device descriptor read/64, error -71 [ 451.120352][ T9] usb 4-1: USB disconnect, device number 112 [ 451.194364][ T7785] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 451.274613][ T7793] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 451.356068][ T7785] usb 1-1: unable to get BOS descriptor or descriptor too short [ 451.364733][ T7785] usb 1-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 451.376419][ T7785] usb 1-1: config 66 has 1 interface, different from the descriptor's value: 2 [ 451.390802][ T7785] usb 1-1: config 66 interface 0 altsetting 16 endpoint 0x7 has invalid wMaxPacketSize 0 [ 451.406118][ T7793] usb 3-1: device descriptor read/64, error -71 [ 451.420634][ T7785] usb 1-1: config 66 interface 0 has no altsetting 0 [ 451.460454][ T7785] usb 1-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 451.489888][ T7785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.501522][T13421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.515257][T13421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.516015][ T7785] usb 1-1: Product: syz [ 451.546531][ T7785] usb 1-1: Manufacturer: syz [ 451.551381][ T7793] usb usb3-port1: attempt power cycle [ 451.559823][ T7785] usb 1-1: SerialNumber: syz [ 451.796064][ T7785] ati_remote2 1-1:66.0: ati_remote2_probe(): need 2 interfaces, found 1 [ 451.807291][ T7785] usb 1-1: USB disconnect, device number 17 [ 451.934441][ T7793] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 451.954776][ T7793] usb 3-1: device descriptor read/8, error -71 [ 452.088978][T13424] input: syz1 as /devices/virtual/input/input48 [ 452.195484][ T7793] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 452.219634][T13427] fuse: Bad value for 'fd' [ 452.238084][ T7793] usb 3-1: device descriptor read/8, error -71 [ 452.365333][ T7793] usb usb3-port1: unable to enumerate USB device [ 452.564388][ T5685] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 452.724303][ T5685] usb 1-1: Using ep0 maxpacket: 32 [ 452.737389][ T5685] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 452.756219][ T5685] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.773735][ T5685] usb 1-1: Product: syz [ 452.782823][ T5685] usb 1-1: Manufacturer: syz [ 452.792683][ T5685] usb 1-1: SerialNumber: syz [ 452.805485][ T5685] usb 1-1: config 0 descriptor?? [ 452.820499][ T5685] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 453.454597][ T7793] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 453.606055][ T7793] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 453.620994][ T7793] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 453.631757][ T7793] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 453.644346][ T7793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.659001][T13453] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 453.669834][ T7793] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 453.830922][T13465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2143'. [ 453.924470][ T7785] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 454.090671][ T7785] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 454.126295][ T7785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.152221][T13473] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2145'. [ 454.168484][ T7785] usb 3-1: Product: syz [ 454.180875][ T7785] usb 3-1: Manufacturer: syz [ 454.201560][ T7785] usb 3-1: SerialNumber: syz [ 454.238064][ T7785] usb 3-1: config 0 descriptor?? [ 454.274399][ T7785] ch341 3-1:0.0: ch341-uart converter detected [ 454.314302][T13477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.326236][T13477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.663980][T13483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.673816][T13483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.688078][ T30] audit: type=1326 audit(1782123144.687:3063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13482 comm="syz.1.2150" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc341d9ce59 code=0x7ffc0000 [ 454.715277][ T30] audit: type=1326 audit(1782123144.687:3064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13482 comm="syz.1.2150" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc341d9ce59 code=0x7ffc0000 [ 454.741227][ T30] audit: type=1326 audit(1782123144.717:3065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13482 comm="syz.1.2150" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc341d9ce59 code=0x7ffc0000 [ 454.766904][ T30] audit: type=1326 audit(1782123144.717:3066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13482 comm="syz.1.2150" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc341d9ce59 code=0x7ffc0000 [ 454.792678][ T30] audit: type=1326 audit(1782123144.717:3067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13482 comm="syz.1.2150" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0x7fc341d9ce59 code=0x7ffc0000 [ 454.817901][ T30] audit: type=1326 audit(1782123144.717:3068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13482 comm="syz.1.2150" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc341d9ce59 code=0x7ffc0000 [ 454.843522][ T30] audit: type=1326 audit(1782123144.717:3069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13482 comm="syz.1.2150" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc341d9ce59 code=0x7ffc0000 [ 454.911519][ T30] audit: type=1326 audit(1782123144.747:3070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13482 comm="syz.1.2150" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc341d9ce59 code=0x7ffc0000 [ 454.943681][ T5685] gspca_ov534_9: reg_r err -71 [ 454.953152][ T30] audit: type=1326 audit(1782123144.747:3071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13482 comm="syz.1.2150" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc341d9ce59 code=0x7ffc0000 [ 454.977971][ T30] audit: type=1326 audit(1782123144.747:3072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13482 comm="syz.1.2150" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc341d9caeb code=0x7ffc0000 [ 455.060410][T13488] CUSE: DEVNAME unspecified [ 455.070688][T13485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.080655][T13485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.214381][ T5685] gspca_ov534_9: Unknown sensor 0000 [ 455.214469][ T5685] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 455.229445][ T5685] usb 1-1: USB disconnect, device number 18 [ 455.341539][ T7785] ch341-uart ttyUSB0: break control not supported, using simulated break [ 455.359116][ T7785] usb 3-1: ch341-uart converter now attached to ttyUSB0 [ 455.408525][ T5685] usb 3-1: USB disconnect, device number 125 [ 455.424790][ T5685] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 455.444782][ T5685] ch341 3-1:0.0: device disconnected [ 455.503026][T13494] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 455.711956][T13502] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 455.742303][T13502] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2154'. [ 455.959955][T13504] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 456.047017][ T7785] usb 4-1: USB disconnect, device number 113 [ 456.229262][T13508] netlink: 'syz.1.2159': attribute type 1 has an invalid length. [ 456.260639][T13508] 8021q: adding VLAN 0 to HW filter on device bond6 [ 456.288713][T13508] bond6: (slave veth3): Enslaving as a backup interface with a down link [ 456.394446][ T9] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 456.430175][T13518] bond6: (slave dummy0): Enslaving as a backup interface with an up link [ 456.463695][T13518] netlink: 'syz.1.2159': attribute type 10 has an invalid length. [ 456.484156][ T47] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 456.487802][T13518] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2159'. [ 456.548972][T13518] dummy0: entered promiscuous mode [ 456.568428][T13518] bond6: (slave dummy0): Removing an active aggregator [ 456.584464][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.584509][ T9653] bond6: (slave dummy0): link status up again after 0 ms [ 456.610705][T13518] bond6: (slave dummy0): Releasing backup interface [ 456.634647][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.657740][T13522] team0: Device xfrm0 is of different type [ 456.662942][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 456.691347][T13522] tipc: Enabling of bearer rejected, already enabled [ 456.704423][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 456.723771][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.750036][ T9] usb 3-1: config 0 descriptor?? [ 457.172576][ T9] plantronics 0003:047F:FFFF.002B: report_id 1212306696 is invalid [ 457.204518][ T9] plantronics 0003:047F:FFFF.002B: item 0 4 1 8 parsing failed [ 457.224668][ T9] plantronics 0003:047F:FFFF.002B: parse failed [ 457.243054][ T9] plantronics 0003:047F:FFFF.002B: probe with driver plantronics failed with error -22 [ 457.384899][T13506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.415236][T13506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.440534][ T7793] usb 3-1: USB disconnect, device number 126 [ 457.445045][T13538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.467571][T13538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.122159][T13547] netlink: 'syz.4.2169': attribute type 1 has an invalid length. [ 458.146840][T13547] 8021q: adding VLAN 0 to HW filter on device bond4 [ 458.167226][T13547] bond3: (slave veth0_to_bond): Releasing active interface [ 458.175905][T13547] veth0_to_bond: left promiscuous mode [ 458.181698][T13547] veth0_to_bond: left allmulticast mode [ 458.197630][T13547] bond4: (slave veth0_to_bond): making interface the new active one [ 458.207087][T13547] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 458.221070][T13549] bond4: entered promiscuous mode [ 458.235839][T13549] veth0_to_bond: entered promiscuous mode [ 458.254549][T13549] bond4: entered allmulticast mode [ 458.259695][T13549] veth0_to_bond: entered allmulticast mode [ 458.274466][T13547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.284832][T13547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.856912][T13559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2173'. [ 458.867419][T13559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.878858][T13559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.974406][ T9] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 459.127094][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 459.138961][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 459.152267][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 459.173705][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 459.196267][ T9] usb 1-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 459.209450][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.219233][ T9] usb 1-1: Product: syz [ 459.219751][T13566] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 459.223479][ T9] usb 1-1: Manufacturer: syz [ 459.238615][ T9] usb 1-1: SerialNumber: syz [ 459.415393][T13573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.424148][T13573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.475328][T13557] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 459.483024][T13557] syzkaller0: linktype set to 825 [ 459.554365][ T7793] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 459.579644][ T9] usb 1-1: unit 3 not found! [ 459.605014][ T9] usb 1-1: USB disconnect, device number 19 [ 459.705727][ T7793] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 459.714116][ T7793] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 459.723091][ T7793] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 459.733546][ T7793] usb 3-1: config 220 has no interface number 2 [ 459.740090][ T7793] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 459.753801][ T7793] usb 3-1: config 220 interface 0 has no altsetting 0 [ 459.761014][ T7793] usb 3-1: config 220 interface 76 has no altsetting 0 [ 459.768254][ T7793] usb 3-1: config 220 interface 1 has no altsetting 0 [ 459.777045][ T7793] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 459.786315][ T7793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.794850][ T7793] usb 3-1: Product: syz [ 459.799050][ T7793] usb 3-1: Manufacturer: syz [ 459.803828][ T7793] usb 3-1: SerialNumber: syz [ 459.887569][ T30] kauditd_printk_skb: 18312 callbacks suppressed [ 459.887585][ T30] audit: type=1326 audit(1782123149.887:21385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13574 comm="syz.3.2178" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a799ce59 code=0x7ffc0000 [ 459.920552][ T30] audit: type=1326 audit(1782123149.887:21386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13574 comm="syz.3.2178" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a799ce59 code=0x7ffc0000 [ 459.947226][ T30] audit: type=1326 audit(1782123149.887:21387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13574 comm="syz.3.2178" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a799ce59 code=0x7ffc0000 [ 459.974469][ T30] audit: type=1326 audit(1782123149.887:21388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13574 comm="syz.3.2178" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f65a799ce59 code=0x7ffc0000 [ 460.000702][ T30] audit: type=1326 audit(1782123149.887:21389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13574 comm="syz.3.2178" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a799ce59 code=0x7ffc0000 [ 460.026149][ T30] audit: type=1326 audit(1782123149.887:21390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13574 comm="syz.3.2178" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a799ce59 code=0x7ffc0000 [ 460.081495][ T30] audit: type=1326 audit(1782123149.917:21391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13574 comm="syz.3.2178" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a799ce59 code=0x7ffc0000 [ 460.114782][T13571] binder: 13570:13571 ioctl 1276 0 returned -22 [ 460.160105][T13583] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 460.160827][ T30] audit: type=1326 audit(1782123149.917:21392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13574 comm="syz.3.2178" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f65a799ce59 code=0x7ffc0000 [ 460.224478][ T30] audit: type=1326 audit(1782123149.917:21393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13574 comm="syz.3.2178" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a799ce59 code=0x7ffc0000 [ 460.255145][T13586] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2182'. [ 460.256279][ T30] audit: type=1326 audit(1782123149.917:21394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13574 comm="syz.3.2178" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f65a799ce59 code=0x7ffc0000 [ 460.300826][T13585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2182'. [ 460.310379][T13586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2182'. [ 460.395887][ T7785] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 460.434360][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 460.554357][ T7785] usb 4-1: Using ep0 maxpacket: 8 [ 460.561333][ T7785] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 460.576174][T13599] syzkaller0: entered promiscuous mode [ 460.576917][ T7785] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 460.581796][T13599] syzkaller0: entered allmulticast mode [ 460.599454][ T7785] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 460.600198][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 460.610406][ T7785] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 460.634719][ T7785] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 460.644876][ T7785] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.654695][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 460.669469][T13599] binder: BINDER_SET_CONTEXT_MGR already set [ 460.676044][T13599] binder: 13598:13599 ioctl 4018620d 200000000240 returned -16 [ 460.684687][ T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 460.700600][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 460.705276][ T7793] usb 3-1: selecting invalid altsetting 0 [ 460.714215][ T9] usb 1-1: SerialNumber: syz [ 460.725261][ T7793] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 460.733354][ T7793] uvcvideo 3-1:220.0: No valid video chain found. [ 460.758203][ T7793] usb 3-1: selecting invalid altsetting 0 [ 460.765120][ T7793] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 460.783600][ T7793] usb 3-1: USB disconnect, device number 127 [ 460.887942][T13581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.902987][T13581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.921970][ T7785] usb 4-1: GET_CAPABILITIES returned 0 [ 460.941169][ T7785] usbtmc 4-1:16.0: can't read capabilities [ 460.990778][ T9] usb 1-1: 0:2 : does not exist [ 461.050175][T13621] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2192'. [ 461.050196][T13621] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2192'. [ 461.050212][T13621] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2192'. [ 461.067849][ T9] usb 1-1: USB disconnect, device number 20 [ 461.100172][T13622] netlink: 'syz.2.2193': attribute type 1 has an invalid length. [ 461.133654][T13625] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2194'. [ 461.149571][T10076] udevd[10076]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 461.200293][T13622] 8021q: adding VLAN 0 to HW filter on device bond3 [ 461.224037][T13625] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 461.245191][T13625] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 461.257272][T13625] bond0 (unregistering): Released all slaves [ 461.323508][T13622] bond3: (slave geneve2): making interface the new active one [ 461.340466][ C1] operation not supported error, dev loop7, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10000800 phys_seg 0 prio class 2 [ 461.367465][T13622] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 461.396861][ T9653] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.411855][ T9653] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.412175][T13634] fuse: fd is not a fuse device [ 461.421499][ T9653] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.453520][ T7789] usb 4-1: USB disconnect, device number 114 [ 461.474435][ T47] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.514401][ T9] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 461.568751][T13634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.592555][T13634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.676113][ T9] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 461.691832][ T9] usb 1-1: config 0 has no interface number 0 [ 461.715092][ T9] usb 1-1: config 0 interface 41 has no altsetting 0 [ 461.746915][ T9] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 461.770266][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.798560][ T9] usb 1-1: Product: syz [ 461.813430][ T9] usb 1-1: Manufacturer: syz [ 461.824722][ T9] usb 1-1: SerialNumber: syz [ 461.831189][ T9] usb 1-1: config 0 descriptor?? [ 462.260173][T13625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.296624][T13625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.339143][ T9] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 462.376464][ T9] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 462.399682][T13659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.418326][ T9] usb 1-1: USB disconnect, device number 21 [ 462.436756][T13659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.459853][T13659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.478295][T13659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.739621][T13670] tipc: Enabled bearer , priority 0 [ 462.747024][T13670] syzkaller0: entered promiscuous mode [ 462.752511][T13670] syzkaller0: entered allmulticast mode [ 462.767925][T13670] tipc: Resetting bearer [ 462.775496][T13669] tipc: Resetting bearer [ 462.782275][T13669] tipc: Disabling bearer [ 462.865858][T13672] netlink: 'syz.3.2205': attribute type 1 has an invalid length. [ 462.890559][T13672] syzkaller0: entered promiscuous mode [ 462.898425][T13672] syzkaller0: entered allmulticast mode [ 463.057266][T13699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.074602][T13699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.173477][T13706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.188524][T13706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.276466][ T7789] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 463.344892][ T7785] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 463.435902][ T7789] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 463.445125][ T7789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.454357][ T7789] usb 4-1: config 0 descriptor?? [ 463.462222][ T7789] cp210x 4-1:0.0: cp210x converter detected [ 463.504589][ T7785] usb 3-1: Using ep0 maxpacket: 16 [ 463.511109][ T7785] usb 3-1: config index 0 descriptor too short (expected 62994, got 18) [ 463.519507][ T7785] usb 3-1: config 0 has too many interfaces: 61, using maximum allowed: 32 [ 463.528147][ T7785] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 61 [ 463.538873][ T7785] usb 3-1: New USB device found, idVendor=13d8, idProduct=0022, bcdDevice=eb.aa [ 463.548506][ T7785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.556546][ T7785] usb 3-1: Product: syz [ 463.560726][ T7785] usb 3-1: Manufacturer: syz [ 463.565380][ T7785] usb 3-1: SerialNumber: syz [ 463.571300][ T7785] usb 3-1: config 0 descriptor?? [ 463.630766][T13713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.639986][T13713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.727265][T13713] vim2m vim2m.0: vidioc_s_fmt queue busy [ 463.846865][T13719] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2218'. [ 463.869184][ T7789] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 463.944312][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 464.061984][ T7785] usb 3-1: selecting invalid altsetting 3 [ 464.067907][ T7785] comedi comedi5: could not set alternate setting 3 in high speed [ 464.078066][ T7785] usbduxsigma 3-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 464.088687][ T7789] usb 4-1: cp210x converter now attached to ttyUSB0 [ 464.101221][ T7785] usbduxsigma 3-1:0.0: probe with driver usbduxsigma failed with error -22 [ 464.105853][ T9] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 464.112051][ T7785] usb 3-1: USB disconnect, device number 2 [ 464.146775][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 464.160326][ T9] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 464.170720][ T9] usb 1-1: config 1 has no interface number 1 [ 464.177513][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 464.190944][ T9] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 464.209092][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 464.220009][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.228393][ T9] usb 1-1: Product: syz [ 464.232604][ T9] usb 1-1: Manufacturer: syz [ 464.237615][ T9] usb 1-1: SerialNumber: syz [ 464.305926][T13728] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 464.321361][ T7785] usb 4-1: USB disconnect, device number 115 [ 464.332516][T13730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.344665][ T7785] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 464.364602][T13730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.376408][ T7785] cp210x 4-1:0.0: device disconnected [ 464.467283][ T9] usb 1-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 464.477460][ T9] usb 1-1: MIDIStreaming interface descriptor not found [ 464.532164][ T9] usb 1-1: USB disconnect, device number 22 [ 464.854352][ T7785] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 465.012235][T13758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.022032][T13758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.040596][ T7785] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.063629][T13758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.077071][ T7785] usb 3-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 465.086714][T13758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.096009][ T7785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.104742][ T7785] usb 3-1: Product: syz [ 465.114575][ T7785] usb 3-1: Manufacturer: syz [ 465.124306][ T7785] usb 3-1: SerialNumber: syz [ 465.133862][ T7785] usb 3-1: config 0 descriptor?? [ 465.154413][ T7785] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 465.204455][ T9] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 465.304486][ T8829] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 465.353006][T13770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.374453][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 465.379813][T13770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.393401][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 465.410664][ T9] usb 4-1: config 12 interface 0 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 465.430310][ T7785] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 465.437836][ T7785] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 465.445342][ T9] usb 4-1: config 12 interface 0 has no altsetting 0 [ 465.465799][ T8829] usb 1-1: Using ep0 maxpacket: 8 [ 465.469009][ T7785] usb 3-1: USB disconnect, device number 3 [ 465.475918][ T9] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 465.497826][ T8829] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 465.509399][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.531468][ T9] usb 4-1: Product: syz [ 465.536474][ T9] usb 4-1: Manufacturer: syz [ 465.541768][ T9] usb 4-1: SerialNumber: syz [ 465.547485][ T8829] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 465.567910][ T8829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.584307][ T8829] usb 1-1: Product: syz [ 465.609141][ T8829] usb 1-1: Manufacturer: syz [ 465.613785][ T8829] usb 1-1: SerialNumber: syz [ 465.619972][ T8829] usb 1-1: config 0 descriptor?? [ 465.652438][ T8829] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 465.798282][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 465.798300][ T30] audit: type=1326 audit(1782123155.797:21397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13752 comm="syz.3.2225" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a799ce59 code=0x7ffc0000 [ 465.863157][ T30] audit: type=1326 audit(1782123155.797:21398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13752 comm="syz.3.2225" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f65a799ce59 code=0x7ffc0000 [ 465.905765][ T30] audit: type=1326 audit(1782123155.907:21399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13752 comm="syz.3.2225" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a799ce59 code=0x7ffc0000 [ 465.932270][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 465.936449][ T30] audit: type=1326 audit(1782123155.907:21400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13752 comm="syz.3.2225" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a799ce59 code=0x7ffc0000 [ 465.950401][ T9] usb 4-1: selecting invalid altsetting 0 [ 466.102064][ T9] usb 4-1: USB disconnect, device number 116 [ 466.140538][T10077] udevd[10077]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 466.400489][T13793] netlink: 'syz.2.2241': attribute type 1 has an invalid length. [ 466.477209][T13797] syzkaller1: entered promiscuous mode [ 466.482937][T13797] syzkaller1: entered allmulticast mode [ 466.674207][ T8829] gspca_zc3xx: reg_w_i err -71 [ 466.844328][ T5685] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 466.932340][T13813] random: crng reseeded on system resumption [ 466.965666][T13220] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.974471][ T5685] usb 4-1: device descriptor read/64, error -71 [ 466.974778][T13220] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.990249][T13220] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.999951][T13220] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.214419][ T5685] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 467.264538][ T8829] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 467.271014][ T8829] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 467.284947][ T8829] usb 1-1: USB disconnect, device number 23 [ 467.345367][ T5685] usb 4-1: device descriptor read/64, error -71 [ 467.376459][T13821] sg_write: data in/out 1935898123/74 bytes for SCSI command 0x0-- guessing data in; [ 467.376459][T13821] program syz.4.2252 not setting count and/or reply_len properly [ 467.464543][ T5685] usb usb4-port1: attempt power cycle [ 467.687182][T13847] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2264'. [ 467.804952][ T5685] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 467.856263][ T5685] usb 4-1: device descriptor read/8, error -71 [ 468.038139][T13870] syzkaller0: entered promiscuous mode [ 468.047116][T13870] syzkaller0: entered allmulticast mode [ 468.114370][ T5685] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 468.135115][ T5685] usb 4-1: device descriptor read/8, error -71 [ 468.190978][T13878] xt_hashlimit: size too large, truncated to 1048576 [ 468.245021][ T5685] usb usb4-port1: unable to enumerate USB device [ 468.537944][T13894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2286'. [ 469.700674][T13947] netlink: 'syz.3.2310': attribute type 3 has an invalid length. [ 471.393962][T14038] syzkaller0: entered promiscuous mode [ 471.401245][T14038] syzkaller0: entered allmulticast mode [ 471.661301][T14052] tipc: Enabled bearer , priority 0 [ 471.682991][T14052] syzkaller0: entered promiscuous mode [ 471.695979][T14052] syzkaller0: entered allmulticast mode [ 471.720136][T14052] tipc: Resetting bearer [ 471.736342][T14051] tipc: Resetting bearer [ 471.757742][T14051] tipc: Disabling bearer [ 471.870651][T14062] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 471.883335][T14062] bond0 (unregistering): Released all slaves [ 472.024514][T14073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2367'. [ 472.046184][T14073] openvswitch: netlink: Flow key attr not present in new flow. [ 472.150226][T14086] syzkaller1: entered promiscuous mode [ 472.156541][T14086] syzkaller1: entered allmulticast mode [ 472.407071][T14101] syzkaller0: entered promiscuous mode [ 472.412693][T14101] syzkaller0: entered allmulticast mode [ 472.615942][T14111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.629138][T14111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.641782][T14111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.658329][T14111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.004738][T14132] tipc: Enabling of bearer rejected, failed to enable media [ 473.054024][ T30] audit: type=1326 audit(1782123163.047:21401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14135 comm="syz.3.2395" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a799ce59 code=0x7ffc0000 [ 473.088056][ T30] audit: type=1326 audit(1782123163.047:21402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14135 comm="syz.3.2395" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a799ce59 code=0x7ffc0000 [ 473.113521][ T30] audit: type=1326 audit(1782123163.077:21403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14135 comm="syz.3.2395" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f65a799ce59 code=0x7ffc0000 [ 473.138742][ T30] audit: type=1326 audit(1782123163.077:21404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14135 comm="syz.3.2395" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a799ce59 code=0x7ffc0000 [ 473.164435][ T30] audit: type=1326 audit(1782123163.077:21405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14135 comm="syz.3.2395" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a799ce59 code=0x7ffc0000 [ 473.842947][T14181] sch_tbf: burst 14 is lower than device syzkaller0 mtu (1500) ! [ 473.855065][T14181] syzkaller0: entered promiscuous mode [ 473.860824][T14181] syzkaller0: entered allmulticast mode [ 473.908666][T14186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.926295][T14186] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.938498][T14186] tipc: Resetting bearer [ 473.945116][T14186] batman_adv: batadv0: Interface activated: dummy0 [ 473.951793][T14186] batadv0: mtu less than device minimum [ 473.958389][T14186] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 473.969477][T14186] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 473.980426][T14186] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 473.991399][T14186] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 474.002081][T14186] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 474.012737][T14186] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 474.023420][T14186] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 474.034148][T14186] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 474.109603][T14186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.162085][ T30] audit: type=1326 audit(1782123164.157:21406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14199 comm="syz.1.2424" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc341d9ce59 code=0x7ffc0000 [ 474.186657][T14186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.201310][ T30] audit: type=1326 audit(1782123164.157:21407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14199 comm="syz.1.2424" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc341d9ce59 code=0x7ffc0000 [ 474.232031][T14186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.241106][ T30] audit: type=1326 audit(1782123164.157:21408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14199 comm="syz.1.2424" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc341d9ce59 code=0x7ffc0000 [ 474.257819][T14186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 474.265929][ T30] audit: type=1326 audit(1782123164.157:21409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14199 comm="syz.1.2424" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc341d9ce59 code=0x7ffc0000 [ 474.276548][T14186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 474.303334][ T30] audit: type=1326 audit(1782123164.157:21410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14199 comm="syz.1.2424" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc341d9ce59 code=0x7ffc0000 [ 474.433168][T13739] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.440344][T13739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.459695][T13739] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.466842][T13739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.531209][T13739] bridge0: port 3(team0) entered blocking state [ 474.537584][T13739] bridge0: port 3(team0) entered forwarding state [ 474.580487][T14208] syzkaller0: entered promiscuous mode [ 474.588375][T14208] syzkaller0: entered allmulticast mode [ 474.606839][ T6359] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 474.626692][ T7785] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 474.944458][ T7789] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 475.278567][T14280] syzkaller0: entered promiscuous mode [ 475.285260][T14280] syzkaller0: entered allmulticast mode [ 475.655314][T13739] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 475.671250][T13739] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 476.104634][ T7789] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 476.741770][T14368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2498'. [ 476.942084][T14384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.964740][T14384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.009050][T14390] support for the xor transformation has been removed. [ 477.124429][T13220] net_ratelimit: 61 callbacks suppressed [ 477.124448][T13220] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 477.144810][T13220] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 477.198189][T14403] syzkaller0: entered promiscuous mode [ 477.225131][T14403] syzkaller0: entered allmulticast mode [ 477.242878][T14403] tc action pedit 'at' offset -999504316 out of bounds [ 477.249837][T14403] tc action pedit 'at' offset -999504316 out of bounds [ 477.256784][T14403] tc action pedit 'at' offset -999504316 out of bounds [ 477.263648][T14403] tc action pedit 'at' offset -999504316 out of bounds [ 477.270565][T14403] tc action pedit 'at' offset -999504316 out of bounds [ 477.277466][T14403] tc action pedit 'at' offset -999504316 out of bounds [ 477.284349][T14403] tc action pedit 'at' offset -999504316 out of bounds [ 477.291215][T14403] tc action pedit 'at' offset -999504316 out of bounds [ 477.298134][T14403] tc action pedit 'at' offset -999504316 out of bounds [ 477.305027][T14403] tc action pedit 'at' offset -999504316 out of bounds [ 477.311936][T14403] 0: reclassify loop, rule prio 0, protocol 800 [ 477.484017][T14414] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2520'. [ 477.685506][T13739] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 477.699993][T13739] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 477.799727][T14423] syzkaller0: entered promiscuous mode [ 477.817267][T14423] syzkaller0: entered allmulticast mode [ 478.033378][T14457] syzkaller0: entered promiscuous mode [ 478.039186][T14457] syzkaller0: entered allmulticast mode [ 478.093579][T14463] tipc: Enabling of bearer rejected, already enabled [ 478.244516][T13220] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 478.258921][T13220] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 478.444393][ T8832] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 478.454472][ T7789] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 478.536306][T14481] team0: Device xfrm0 is of different type [ 478.549125][T14481] tipc: Enabling of bearer rejected, already enabled [ 478.595933][ T8832] usb 3-1: Using ep0 maxpacket: 32 [ 478.604977][ T8832] usb 3-1: unable to get BOS descriptor set [ 478.612046][ T8832] usb 3-1: config 1 has an invalid descriptor of length 176, skipping remainder of the config [ 478.626885][ T7789] usb 4-1: Using ep0 maxpacket: 32 [ 478.628830][ T8832] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 478.644642][ T7789] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.658767][ T8832] usb 3-1: New USB device found, idVendor=15ca, idProduct=1806, bcdDevice= 0.40 [ 478.666158][ T7789] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.668678][ T8832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.680010][ T7789] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 478.696467][ T7789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.699541][ T8832] usb 3-1: Product: syz [ 478.710212][ T8832] usb 3-1: Manufacturer: syz [ 478.711904][ T7789] usb 4-1: config 0 descriptor?? [ 478.715045][ T8832] usb 3-1: SerialNumber: syz [ 478.727852][ T7789] hub 4-1:0.0: USB hub found [ 478.775364][ T6353] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 478.789861][ T6353] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 478.829516][T14487] syz.1.2549 (14487): drop_caches: 2 [ 478.843738][T14489] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2548'. [ 478.992456][ T8832] usb 3-1: USB disconnect, device number 4 [ 479.002897][T14472] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3979591798 (509387750144 ns) > initial count (364801339648 ns). Using initial count to start timer. [ 479.141648][T14503] team0: Device xfrm0 is of different type [ 479.158577][T14503] tipc: Enabling of bearer rejected, already enabled [ 479.190301][T14500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.202864][ T7789] hub 4-1:0.0: 1 port detected [ 479.208521][T14500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.270440][T14509] bond6: option updelay: invalid value (18446744073709551615) [ 479.278381][T14509] bond6: option updelay: allowed values 0 - 2147483647 [ 479.287257][T14509] bond6 (unregistering): Released all slaves [ 479.345769][T13220] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 479.414416][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 479.653062][T14539] netlink: 'syz.2.2565': attribute type 1 has an invalid length. [ 479.661167][ T8832] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 479.818884][ T8832] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 479.828374][ T8832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.836871][ T7789] hub 4-1:0.0: hub_ext_port_status failed (err = 0) [ 479.836927][ T8832] usb 1-1: Product: syz [ 479.848441][ T8832] usb 1-1: Manufacturer: syz [ 479.853088][ T8832] usb 1-1: SerialNumber: syz [ 479.859326][ T8832] usb 1-1: config 0 descriptor?? [ 479.866688][ T8832] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 479.924405][ T5685] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 480.076859][ T5685] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 480.087740][ T5685] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 480.101105][ T5685] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 480.112283][ T5685] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 480.122343][ T5685] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 480.137666][ T5685] usb 3-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 480.146981][ T5685] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.155226][ T5685] usb 3-1: Product: syz [ 480.159591][ T5685] usb 3-1: Manufacturer: syz [ 480.164209][ T5685] usb 3-1: SerialNumber: syz [ 480.171696][ T5685] usb 3-1: config 0 descriptor?? [ 480.179856][ T5685] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 480.187635][ T5685] imon 3-1:0.0: unable to initialize intf0, err -90 [ 480.194230][ T5685] imon:imon_probe: failed to initialize context! [ 480.200874][ T5685] imon 3-1:0.0: unable to register, err -19 [ 480.405365][T14542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.414723][ T7789] usb 3-1: USB disconnect, device number 5 [ 480.417375][T14542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.670688][ T8832] gspca_stk1135: reg_w 0x5 err -71 [ 480.679288][ T8832] gspca_stk1135: serial bus timeout: status=0x00 [ 480.686025][ T8832] gspca_stk1135: Sensor write failed [ 480.691369][ T8832] gspca_stk1135: serial bus timeout: status=0x00 [ 480.698045][ T8832] gspca_stk1135: Sensor write failed [ 480.703561][ T8832] gspca_stk1135: serial bus timeout: status=0x00 [ 480.709982][ T8832] gspca_stk1135: Sensor read failed [ 480.715595][ T8832] gspca_stk1135: serial bus timeout: status=0x00 [ 480.721931][ T8832] gspca_stk1135: Sensor read failed [ 480.727278][ T8832] gspca_stk1135: Detected sensor type unknown (0x0) [ 480.733890][ T8832] gspca_stk1135: serial bus timeout: status=0x00 [ 480.740502][ T8832] gspca_stk1135: Sensor read failed [ 480.745863][ T8832] gspca_stk1135: serial bus timeout: status=0x00 [ 480.752219][ T8832] gspca_stk1135: Sensor read failed [ 480.757649][ T8832] gspca_stk1135: serial bus timeout: status=0x00 [ 480.764004][ T8832] gspca_stk1135: Sensor write failed [ 480.769379][ T8832] gspca_stk1135: serial bus timeout: status=0x00 [ 480.776178][ T8832] gspca_stk1135: Sensor write failed [ 480.781506][ T8832] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 480.792293][ T8832] usb 1-1: USB disconnect, device number 24 [ 480.954927][T14544] sch_tbf: burst 14 is lower than device syzkaller0 mtu (1500) ! [ 480.966046][T14544] syzkaller0: entered promiscuous mode [ 480.971627][T14544] syzkaller0: entered allmulticast mode [ 481.230703][T14552] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2569'. [ 481.246540][T14552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2569'. [ 481.272908][T14552] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2569'. [ 481.304527][ T7789] usb 4-1: USB disconnect, device number 121 [ 481.576831][T14567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.590083][T14567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.642242][T14573] sch_tbf: burst 14 is lower than device syzkaller0 mtu (1500) ! [ 481.651788][T14573] syzkaller0: entered promiscuous mode [ 481.657486][T14573] syzkaller0: entered allmulticast mode [ 481.694501][ T5685] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 481.847534][ T5685] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.858454][ T5685] usb 4-1: config 0 interface 0 has no altsetting 0 [ 481.868743][ T5685] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 481.883778][ T5685] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.891895][ T5685] usb 4-1: Product: syz [ 481.896436][ T5685] usb 4-1: Manufacturer: syz [ 481.901099][ T5685] usb 4-1: SerialNumber: syz [ 481.908182][ T5685] usb 4-1: config 0 descriptor?? [ 481.917626][ T5685] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 481.927869][ T5685] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 481.939637][ T5685] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 481.958050][ T5685] usb 4-1: media controller created [ 481.971093][ T5685] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 482.009805][T14586] xt_hashlimit: size too large, truncated to 1048576 [ 482.026812][ T5685] DVB: Unable to find symbol tda10046_attach() [ 482.033122][ T5685] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 482.042586][ T5685] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 482.061882][T14590] input: syz1 as /devices/virtual/input/input50 [ 482.061889][T14592] syzkaller0: entered promiscuous mode [ 482.261330][T14599] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2586'. [ 482.315307][T14607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.334637][T14607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.454747][T13739] net_ratelimit: 11 callbacks suppressed [ 482.454764][T13739] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 482.475194][T13739] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 482.554519][T14616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.583728][T14616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.899226][ T8832] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 483.054614][ T6359] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 483.069415][ T6359] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 483.106192][ T8832] usb 1-1: config index 0 descriptor too short (expected 1572, got 36) [ 483.120939][ T8832] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 483.143192][ T8832] usb 1-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 483.159870][ T8832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.172662][ T8832] usb 1-1: Product: syz [ 483.178102][ T8832] usb 1-1: Manufacturer: syz [ 483.182871][ T8832] usb 1-1: SerialNumber: syz [ 483.202354][ T8832] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input51 [ 483.397549][ T4976] bcm5974 1-1:1.0: could not read from device [ 483.418940][ T4976] bcm5974 1-1:1.0: could not read from device [ 483.442117][ T8832] bcm5974 1-1:1.0: could not read from device [ 483.453647][ T8832] input: failed to attach handler mousedev to device input51, error: -5 [ 483.465950][ T4976] bcm5974 1-1:1.0: could not read from device [ 483.476109][ T8832] usb 1-1: USB disconnect, device number 25 [ 483.489962][ T4976] bcm5974 1-1:1.0: could not read from device [ 483.587206][T14667] syzkaller0: entered promiscuous mode [ 483.604958][T14667] syzkaller0: entered allmulticast mode [ 483.634381][ T6353] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 483.648780][ T6353] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 483.819504][T14677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.838738][T14677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.874187][T14681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.889171][T14681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.020048][T14688] kAFS: unable to lookup cell 'ÿ' [ 484.053024][T14688] kAFS: unable to lookup cell '(,c¾Ì' [ 484.184407][T13220] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 484.198757][T13220] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 484.311115][ T5685] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 484.341819][ T5685] usb 4-1: USB disconnect, device number 122 [ 484.774408][ T6359] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 484.788756][ T6359] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 485.624314][ T5685] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 485.815698][ T5685] usb 1-1: Using ep0 maxpacket: 16 [ 485.836387][ T5685] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255 [ 485.876275][ T5685] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 485.917400][ T5685] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.960503][ T5685] usb 1-1: Product: syz [ 485.966498][ T7793] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 485.977956][ T5685] usb 1-1: Manufacturer: syz [ 486.000310][ T5685] usb 1-1: SerialNumber: syz [ 486.005641][ T5685] usb 1-1: config 0 descriptor?? [ 486.007448][T14711] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 486.038678][ T5685] mcba_usb 1-1:0.0: Microchip CAN BUS Analyzer connected [ 486.147994][ T7793] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 486.162755][ T7793] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 486.184652][ T7793] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 486.206058][ T7793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.219349][ C0] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71) [ 486.225542][ C0] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71) [ 486.233356][ T7793] usb 4-1: Product: syz [ 486.243099][ T7793] usb 4-1: Manufacturer: syz [ 486.261498][ T7793] usb 4-1: SerialNumber: syz [ 486.274681][ T5685] usb 1-1: USB disconnect, device number 26 [ 486.282861][ T7793] usb 4-1: config 0 descriptor?? [ 486.295704][ T5685] mcba_usb 1-1:0.0 can0: device disconnected [ 486.307676][T14717] raw-gadget.6 gadget.3: fail, usb_ep_enable returned -22 [ 486.321994][T14717] raw-gadget.6 gadget.3: fail, usb_ep_enable returned -22 [ 486.385831][T14740] ------------[ cut here ]------------ [ 486.391335][T14740] !(flags & __GFP_NOWARN) [ 486.391363][T14740] WARNING: mm/slub.c:6841 at __kvmalloc_node_noprof+0x7a6/0x890, CPU#0: syz.2.2630/14740 [ 486.405799][T14740] Modules linked in: [ 486.406541][T14743] netlink: 'syz.1.2629': attribute type 4 has an invalid length. [ 486.409733][T14740] CPU: 0 UID: 0 PID: 14740 Comm: syz.2.2630 Tainted: G L syzkaller #0 PREEMPT(full) [ 486.428499][T14740] Tainted: [L]=SOFTLOCKUP [ 486.432836][T14740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 486.442960][T14740] RIP: 0010:__kvmalloc_node_noprof+0x7a6/0x890 [ 486.449171][T14740] Code: ff 48 c7 c7 d0 b0 a8 8e 48 89 de e8 54 08 cc 02 e9 59 fc ff ff 48 c7 c7 10 b1 a8 8e 48 89 de e8 40 08 cc 02 e9 8e fc ff ff 90 <0f> 0b 90 45 31 e4 e9 08 fe ff ff 90 0f 0b 90 e9 55 ff ff ff 49 83 [ 486.469572][T14740] RSP: 0018:ffffc900058f7a48 EFLAGS: 00010246 [ 486.475907][T14740] RAX: 0000000000000001 RBX: ffffc900058f7be0 RCX: 0000000080000001 [ 486.483893][T14740] RDX: 0000000080000008 RSI: ffffffff8c295480 RDI: ffffffff8c295440 [ 486.492073][T14740] RBP: 0000000080000008 R08: 00000000004028c0 R09: 00000000ffffffff [ 486.500172][T14740] R10: 0000000000000006 R11: 0000000000000002 R12: 0000000000000000 [ 486.508215][T14740] R13: 00000000004028c0 R14: 0000000010000001 R15: 00000000ffffffff [ 486.516249][T14740] FS: 00007f0c875826c0(0000) GS:ffff888125253000(0000) knlGS:0000000000000000 [ 486.525244][T14740] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 486.531842][T14740] CR2: 0000200000002300 CR3: 000000002c42e000 CR4: 00000000003526f0 [ 486.539917][T14740] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000009951 [ 486.546221][T14745] netlink: 'syz.1.2629': attribute type 4 has an invalid length. [ 486.547999][T14740] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 486.563685][T14740] Call Trace: [ 486.567007][T14740] [ 486.569950][T14740] ? io_pin_pages+0x9f/0x1b0 [ 486.574585][T14740] io_pin_pages+0x9f/0x1b0 [ 486.579017][T14740] io_sqe_buffer_register+0x21f/0x1360 [ 486.584533][T14740] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 486.590423][T14740] ? iovec_from_user+0x1ba/0x250 [ 486.595432][T14740] io_sqe_buffers_register+0x2eb/0x7e0 [ 486.600910][T14740] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 486.606993][T14740] ? __fget_files+0x3a2/0x420 [ 486.611695][T14740] ? __fget_files+0x2a/0x420 [ 486.616340][T14740] __se_sys_io_uring_register+0x121b/0x1ab0 [ 486.622344][T14740] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 486.628655][T14740] ? rcu_is_watching+0x15/0xb0 [ 486.633442][T14740] ? rcu_is_watching+0x15/0xb0 [ 486.638272][T14740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.644376][T14740] do_syscall_64+0x174/0x580 [ 486.648976][T14740] ? trace_irq_disable+0x3b/0x140 [ 486.654018][T14740] ? clear_bhb_loop+0x40/0x90 [ 486.658749][T14740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.664749][T14740] RIP: 0033:0x7f0c8679ce59 [ 486.669195][T14740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.688871][T14740] RSP: 002b:00007f0c87582028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 486.697372][T14740] RAX: ffffffffffffffda RBX: 00007f0c86a15fa0 RCX: 00007f0c8679ce59 [ 486.705411][T14740] RDX: 0000200000002300 RSI: 0000000000000000 RDI: 0000000000000003 [ 486.713396][T14740] RBP: 00007f0c86832e6f R08: 0000000000000000 R09: 0000000000000000 [ 486.721457][T14740] R10: 0000000000003100 R11: 0000000000000246 R12: 0000000000000000 [ 486.729485][T14740] R13: 00007f0c86a16038 R14: 00007f0c86a15fa0 R15: 00007f0c86b3fa48 [ 486.737548][T14740] [ 486.740601][T14740] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 486.747895][T14740] CPU: 0 UID: 0 PID: 14740 Comm: syz.2.2630 Tainted: G L syzkaller #0 PREEMPT(full) [ 486.758848][T14740] Tainted: [L]=SOFTLOCKUP [ 486.763177][T14740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 486.773245][T14740] Call Trace: [ 486.776534][T14740] [ 486.779472][T14740] vpanic+0x56c/0xa60 [ 486.783470][T14740] ? __pfx__printk+0x10/0x10 [ 486.788114][T14740] ? __pfx_vpanic+0x10/0x10 [ 486.792629][T14740] ? is_bpf_text_address+0x292/0x2b0 [ 486.797926][T14740] ? is_bpf_text_address+0x26/0x2b0 [ 486.803134][T14740] panic+0xc5/0xd0 [ 486.806849][T14740] ? __pfx_panic+0x10/0x10 [ 486.811276][T14740] __warn+0x315/0x4c0 [ 486.815249][T14740] ? __kvmalloc_node_noprof+0x7a6/0x890 [ 486.820785][T14740] ? __kvmalloc_node_noprof+0x7a6/0x890 [ 486.826340][T14740] __report_bug+0x331/0x530 [ 486.830936][T14740] ? kasan_save_track+0x3e/0x80 [ 486.835789][T14740] ? __kasan_kmalloc+0x93/0xb0 [ 486.840538][T14740] ? __kmalloc_noprof+0x358/0x750 [ 486.845650][T14740] ? __kvmalloc_node_noprof+0x7a6/0x890 [ 486.851193][T14740] ? __pfx___report_bug+0x10/0x10 [ 486.856209][T14740] ? __asan_memset+0x22/0x50 [ 486.860811][T14740] ? __alloc_frozen_pages_noprof+0xac/0x380 [ 486.866689][T14740] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 486.872998][T14740] ? __kvmalloc_node_noprof+0x7a6/0x890 [ 486.878532][T14740] report_bug+0x16a/0x220 [ 486.882852][T14740] ? __kvmalloc_node_noprof+0x7a6/0x890 [ 486.888398][T14740] ? __kvmalloc_node_noprof+0x7a8/0x890 [ 486.893941][T14740] handle_bug+0x9c/0x200 [ 486.898180][T14740] exc_invalid_op+0x1a/0x50 [ 486.902683][T14740] asm_exc_invalid_op+0x1a/0x20 [ 486.907533][T14740] RIP: 0010:__kvmalloc_node_noprof+0x7a6/0x890 [ 486.913689][T14740] Code: ff 48 c7 c7 d0 b0 a8 8e 48 89 de e8 54 08 cc 02 e9 59 fc ff ff 48 c7 c7 10 b1 a8 8e 48 89 de e8 40 08 cc 02 e9 8e fc ff ff 90 <0f> 0b 90 45 31 e4 e9 08 fe ff ff 90 0f 0b 90 e9 55 ff ff ff 49 83 [ 486.933298][T14740] RSP: 0018:ffffc900058f7a48 EFLAGS: 00010246 [ 486.939350][T14740] RAX: 0000000000000001 RBX: ffffc900058f7be0 RCX: 0000000080000001 [ 486.947323][T14740] RDX: 0000000080000008 RSI: ffffffff8c295480 RDI: ffffffff8c295440 [ 486.955282][T14740] RBP: 0000000080000008 R08: 00000000004028c0 R09: 00000000ffffffff [ 486.963254][T14740] R10: 0000000000000006 R11: 0000000000000002 R12: 0000000000000000 [ 486.971236][T14740] R13: 00000000004028c0 R14: 0000000010000001 R15: 00000000ffffffff [ 486.979220][T14740] ? __kvmalloc_node_noprof+0x53d/0x890 [ 486.984757][T14740] ? io_pin_pages+0x9f/0x1b0 [ 486.989336][T14740] io_pin_pages+0x9f/0x1b0 [ 486.993737][T14740] io_sqe_buffer_register+0x21f/0x1360 [ 486.999196][T14740] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 487.005071][T14740] ? iovec_from_user+0x1ba/0x250 [ 487.010001][T14740] io_sqe_buffers_register+0x2eb/0x7e0 [ 487.015458][T14740] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 487.021423][T14740] ? __fget_files+0x3a2/0x420 [ 487.026088][T14740] ? __fget_files+0x2a/0x420 [ 487.030662][T14740] __se_sys_io_uring_register+0x121b/0x1ab0 [ 487.036557][T14740] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 487.042803][T14740] ? rcu_is_watching+0x15/0xb0 [ 487.047569][T14740] ? rcu_is_watching+0x15/0xb0 [ 487.052333][T14740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.058391][T14740] do_syscall_64+0x174/0x580 [ 487.062979][T14740] ? trace_irq_disable+0x3b/0x140 [ 487.067985][T14740] ? clear_bhb_loop+0x40/0x90 [ 487.072653][T14740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.078529][T14740] RIP: 0033:0x7f0c8679ce59 [ 487.082948][T14740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.102556][T14740] RSP: 002b:00007f0c87582028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 487.110985][T14740] RAX: ffffffffffffffda RBX: 00007f0c86a15fa0 RCX: 00007f0c8679ce59 [ 487.118955][T14740] RDX: 0000200000002300 RSI: 0000000000000000 RDI: 0000000000000003 [ 487.126914][T14740] RBP: 00007f0c86832e6f R08: 0000000000000000 R09: 0000000000000000 [ 487.134868][T14740] R10: 0000000000003100 R11: 0000000000000246 R12: 0000000000000000 [ 487.142842][T14740] R13: 00007f0c86a16038 R14: 00007f0c86a15fa0 R15: 00007f0c86b3fa48 [ 487.150816][T14740] [ 487.154136][T14740] Kernel Offset: disabled [ 487.158447][T14740] Rebooting in 86400 seconds..