last executing test programs: 52m41.538227938s ago: executing program 0 (id=960): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r1, @ANYBLOB="010600000000000000ee080000002c0004801300010062726f6164636173742d6c696e6b"], 0xac}}, 0x0) 52m38.365060725s ago: executing program 0 (id=961): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa4}}, 0x0) 52m34.904964017s ago: executing program 0 (id=962): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(r0, 0x1, &(0x7f0000000280)={{0x77359400}}, &(0x7f00000002c0)) 52m30.918979029s ago: executing program 0 (id=963): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x338, 0xffffffff, 0x1a8, 0xb0, 0x1a8, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010102, @broadcast, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x74, 0x70, 0xb0, 0x1ba, {0x46010000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6bc128419cfb67daad5b4809088400ed0000000000000000000100040500"}}}, {{@uncond, 0x287, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x0, 0xfffffffe}}, @common=@unspec=@statistic={{0x38}, {0x7400}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) 52m18.052537586s ago: executing program 0 (id=965): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2e, 0x100008, 0x0, 0x8, 0xf, 0x3, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x4000000, 0x0, 0xff, 0x0, 0xfffffeff}}) mmap$xdp(&(0x7f0000016000/0x4000)=nil, 0x4000, 0x700000d, 0x811, r0, 0x180000000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfff7fdfc, {0x0, 0x0, 0x0, r7, {0xb}, {0xffff}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 52m4.956362435s ago: executing program 0 (id=968): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r4}, 0x10) timer_create(0x2, 0x0, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r5 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ce9", 0x55}], 0x1}, 0x4000000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r6, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 51m15.242833303s ago: executing program 32 (id=968): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r4}, 0x10) timer_create(0x2, 0x0, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r5 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ce9", 0x55}], 0x1}, 0x4000000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r6, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 35m18.001789456s ago: executing program 1 (id=1178): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000640)={0x20, 0x3, 0x5, "5905d90000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x0, 0xf, 0x4, "c7a13997"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000340)={0x20, 0x3, 0x4, "a13b1f21"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b40)={0x44, &(0x7f0000000840)={0x0, 0x30, 0x4, "ad972f8f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000280)={0x40, 0x0, 0x4, "71615214"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 35m1.362367271s ago: executing program 1 (id=1181): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x101f}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x200000000000000, &(0x7f0000000280)='\nd'}) 34m57.069923461s ago: executing program 1 (id=1183): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x4040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket$packet(0x11, 0xa, 0x300) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) syz_emit_ethernet(0x33, &(0x7f0000000140)=ANY=[], 0x0) 34m33.407453022s ago: executing program 1 (id=1185): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000640)={0x20, 0x3, 0x5, "5905d90000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x0, 0xf, 0x4, "c7a13997"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000340)={0x20, 0x3, 0x4, "a13b1f21"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b40)={0x44, &(0x7f0000000840)={0x0, 0x30, 0x4, "ad972f8f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000280)={0x40, 0x0, 0x4, "71615214"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 34m23.96043428s ago: executing program 2 (id=1187): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000009e01000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0500000000bbd10d0bc11fc00000000040000000aef028c89c34dcb05408427474e1cb5e689c593e7a16dd0af4f5be2f038bc9faf7"], 0x80}}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) 34m21.36875609s ago: executing program 2 (id=1188): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x3, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r2 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r2, 0x0, 0x400000000000000, 0x2) 34m18.827130946s ago: executing program 2 (id=1189): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000240)={0x20, 0x11, 0x1, "fb"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, 0x0, 0x4000) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 34m15.276587457s ago: executing program 1 (id=1190): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000400000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) move_mount(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1) 34m12.510445865s ago: executing program 1 (id=1191): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) capget(&(0x7f0000000040)={0x20080522, r0}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, 0x0, 0x0) socket(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4", 0x2a}], 0x1) socket$unix(0x1, 0x2, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) 34m4.368700253s ago: executing program 2 (id=1192): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 33m51.134041404s ago: executing program 2 (id=1193): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x7) setreuid(0xee01, 0xee01) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001540)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "bdc6f5", 0x0, 0x6c, 0xff, @private1, @mcast2}}}}, 0x0) 33m47.810938522s ago: executing program 2 (id=1194): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(r5, 0xa) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) close_range(0xffffffffffffffff, r6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES32=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getrlimit(0x8, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, 0x0, 0x0) 33m0.2074962s ago: executing program 33 (id=1191): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) capget(&(0x7f0000000040)={0x20080522, r0}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, 0x0, 0x0) socket(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4", 0x2a}], 0x1) socket$unix(0x1, 0x2, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) 32m55.830249055s ago: executing program 34 (id=1194): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(r5, 0xa) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) close_range(0xffffffffffffffff, r6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES32=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getrlimit(0x8, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, 0x0, 0x0) 20m15.80452192s ago: executing program 4 (id=1294): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2e, 0x100008, 0x0, 0x8, 0xf, 0x3, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x4000000, 0x0, 0xff, 0x0, 0xfffffeff}}) mmap$xdp(&(0x7f0000016000/0x4000)=nil, 0x4000, 0x700000d, 0x811, r0, 0x180000000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfff7fdfc, {0x0, 0x0, 0x0, r6, {0xb}, {0xffff}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 19m51.368993153s ago: executing program 4 (id=1299): r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000005480)=[{0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000000000)="aaa0f0", 0x3}], 0x1, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000003b80), 0x0, 0x40800}], 0x2, 0x400d0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000001300)={0x134, 0x1, 0xa, 0x700, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x3a, 0x6, "44f3dbdeb8380b5a1f755f7101d6094c814d153ff74f75db171fcad56bf30d98416ef091fd69d812d5137ddec9cd340f4426aefff857"}, @NFTA_TABLE_USERDATA={0x42, 0x6, "83250739d14c722cb4fea94848ab055b29e3951ca50366c2546f93034862ed3ad4a2c0a0524a73c85100bd6ed0bc68d6f2937d565780bdefca01307121fa"}, @NFTA_TABLE_USERDATA={0x88, 0x6, "8a8db7e581021a6a5b2d594158670c13699cd31f50a222c2850af75e2ab4bf88b2bb31969937c20a80b5bd62bb6094c5463ff0e03324b5d7af85afe4bb6e1fc7e8e2f72fe3e6349ad8682bd7ae896c4f126b92a0f71dc18e1d68fd702816ea6e1a94fec9e110ceca8c257a4b231c917712bd2fba0a0e603dcd417ccb2d4ff62d85ab2729"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, 0x134}, 0x1, 0x0, 0x0, 0x4001}, 0x44000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0x4a932a9659d613d6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x8100, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x31) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f00000001c0)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 19m47.088705402s ago: executing program 4 (id=1301): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e0b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x60) 19m44.313589222s ago: executing program 4 (id=1302): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x560b, 0x0) 19m40.484909058s ago: executing program 4 (id=1304): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18dfff0000002577c60020000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r3}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 19m35.905378384s ago: executing program 4 (id=1305): syz_emit_ethernet(0x3e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 18m47.077546337s ago: executing program 35 (id=1305): syz_emit_ethernet(0x3e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 43.604282537s ago: executing program 5 (id=1530): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x5a, 0xe4, 0xc4, 0x10, 0x596, 0x1, 0x5f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd6, 0x0, 0x1, 0xb5, 0xe1, 0x45, 0x0, [], [{{0x9, 0x5, 0x83, 0x0, 0x3ff, 0x3, 0x7, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000740)={0x1c, &(0x7f0000000600)={0x0, 0x15, 0x10, "4e476e4d40b24c1b9ffbfb148cca07d5"}, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 31.048885754s ago: executing program 5 (id=1532): timer_create(0x2, 0x0, &(0x7f0000bbdffc)) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000040)=[{}], 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x2}) 31.048455814s ago: executing program 3 (id=1533): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000780)={@local, @random="0000101d00", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x3c, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x10, 0x7, 0x0, 0xe7, {[@md5sig={0x13, 0x12, "b3f90c02588981ba432f60a2a1698d6d"}]}}}}}}}, 0x0) 26.346863384s ago: executing program 3 (id=1534): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000340)={0x28, 0x2, r1, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x10}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r1, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="1800007f00000000002000000000000000010021"]) 25.758116099s ago: executing program 5 (id=1535): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f3c7c820da059a009562010203010902340001000000000904"], 0x0) 23.319129744s ago: executing program 3 (id=1536): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000640)={0x20, 0x3, 0x5, "5905d90000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x0, 0xf, 0x4, "c7a13997"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b40)={0x44, &(0x7f0000000840)={0x0, 0x30, 0x4, "ad972f8f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000280)={0x40, 0x0, 0x4, "71615214"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 15.768174013s ago: executing program 5 (id=1537): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x2, 0x300) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8, @ANYRES64=r0], 0x0) 14.362212747s ago: executing program 3 (id=1538): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.830820904s ago: executing program 5 (id=1539): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x48014}, 0x20004000) listen(r1, 0x9) close_range(r0, 0xffffffffffffffff, 0x0) 3.826470033s ago: executing program 3 (id=1540): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x6, r1, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x2, r1, r1, 0x3, 0x9, 0x3fff}) 132.285593ms ago: executing program 5 (id=1541): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getpid() ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=1542): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000002540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): cd [ 3310.279174][ T7758] usb 1-1: device descriptor read/64, error -71 [ 3310.621381][ T7758] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 3310.818275][ T7758] usb 1-1: device descriptor read/64, error -71 [ 3310.959549][ T7758] usb usb1-port1: attempt power cycle [ 3311.412530][ T7758] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 3311.478837][ T7758] usb 1-1: device descriptor read/8, error -71 [ 3311.639826][ T6481] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 3311.788688][ T7758] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 3311.817467][ T6481] usb 2-1: Using ep0 maxpacket: 8 [ 3311.832776][ T7758] usb 1-1: device descriptor read/8, error -71 [ 3311.887480][ T6481] usb 2-1: config 127 has an invalid interface number: 171 but max is 1 [ 3311.889546][ T6481] usb 2-1: config 127 has no interface number 1 [ 3311.892860][ T6481] usb 2-1: config 127 interface 0 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3311.895049][ T6481] usb 2-1: config 127 interface 171 has no altsetting 0 [ 3311.903601][ T6481] usb 2-1: config 127 interface 0 has no altsetting 0 [ 3311.969484][ T7758] usb usb1-port1: unable to enumerate USB device [ 3311.983248][ T6481] usb 2-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 3311.985301][ T6481] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3311.987059][ T6481] usb 2-1: Product: syz [ 3311.988011][ T6481] usb 2-1: Manufacturer: syz [ 3311.989030][ T6481] usb 2-1: SerialNumber: syz [ 3313.284155][ T6481] xr_serial 2-1:127.171: xr_serial converter detected [ 3313.348582][ T6481] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 3313.350884][ T6481] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 3313.513167][ T6481] usb 2-1: USB disconnect, device number 73 [ 3313.603669][ T6481] xr_serial 2-1:127.171: device disconnected [ 3322.280564][ T7758] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 3322.488242][ T7758] usb 2-1: device descriptor read/64, error -71 [ 3322.818907][ T7758] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 3323.048341][ T7758] usb 2-1: device descriptor read/64, error -71 [ 3323.168039][ T7758] usb usb2-port1: attempt power cycle [ 3323.638738][ T7758] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 3323.803647][ T7758] usb 2-1: device descriptor read/8, error -71 [ 3324.101503][ T7758] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 3324.144239][ T7758] usb 2-1: device descriptor read/8, error -71 [ 3324.267683][ T7758] usb usb2-port1: unable to enumerate USB device [ 3334.009031][ T6481] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 3334.188550][ T6481] usb 2-1: Using ep0 maxpacket: 8 [ 3334.316303][ T6481] usb 2-1: config 127 has an invalid interface number: 171 but max is 1 [ 3334.319180][ T6481] usb 2-1: config 127 has no interface number 1 [ 3334.321136][ T6481] usb 2-1: config 127 interface 0 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3334.325576][ T6481] usb 2-1: config 127 interface 171 has no altsetting 0 [ 3334.328718][ T6481] usb 2-1: config 127 interface 0 has no altsetting 0 [ 3334.400625][ T6481] usb 2-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 3334.402861][ T6481] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3334.404585][ T6481] usb 2-1: Product: syz [ 3334.412943][ T6481] usb 2-1: Manufacturer: syz [ 3334.414755][ T6481] usb 2-1: SerialNumber: syz [ 3335.992511][ T6481] xr_serial 2-1:127.171: xr_serial converter detected [ 3336.110366][ T6481] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 3336.112817][ T6481] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 3336.341387][ T6481] usb 2-1: USB disconnect, device number 78 [ 3336.435403][ T6481] xr_serial 2-1:127.171: device disconnected [ 3346.145013][ T8447] netlink: 'syz.1.869': attribute type 10 has an invalid length. [ 3356.729104][ T8317] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 3357.092230][ T8317] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 3357.094575][ T8317] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3357.130236][ T8317] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3357.135654][ T8317] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3357.152447][ T8317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3357.743342][ T8317] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 3357.765493][ T8317] usb 1-1: invalid MIDI out EP 0 [ 3359.609467][ T8317] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 3381.419887][ T3848] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 3381.667697][ T3848] usb 2-1: device descriptor read/64, error -71 [ 3382.087977][ T3848] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 3382.287830][ T3848] usb 2-1: device descriptor read/64, error -71 [ 3382.403177][ T3848] usb usb2-port1: attempt power cycle [ 3382.829081][ T3848] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 3382.874898][ T3848] usb 2-1: device descriptor read/8, error -71 [ 3383.161198][ T3848] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 3383.209138][ T3848] usb 2-1: device descriptor read/8, error -71 [ 3383.451526][ T3848] usb usb2-port1: unable to enumerate USB device [ 3386.967673][ T3848] usb 1-1: USB disconnect, device number 67 [ 3392.958846][ T7659] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 3393.178830][ T7659] usb 2-1: Using ep0 maxpacket: 16 [ 3393.277554][ T7659] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3393.280079][ T7659] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3393.282136][ T7659] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 3393.340301][ T7659] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3393.344833][ T7659] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3393.348099][ T7659] usb 2-1: Manufacturer: syz [ 3393.494829][ T7659] usb 2-1: config 0 descriptor?? [ 3405.708154][ T8536] netlink: 48 bytes leftover after parsing attributes in process `syz.0.885'. [ 3405.713801][ T8536] netlink: 48 bytes leftover after parsing attributes in process `syz.0.885'. [ 3405.978094][ T7758] usb 2-1: USB disconnect, device number 83 [ 3408.080399][ T8317] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 3408.408180][ T8317] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3408.410596][ T8317] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3408.412873][ T8317] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3408.414765][ T8317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3408.583948][ T8317] usb 2-1: config 0 descriptor?? [ 3409.741431][ T8317] usbhid 2-1:0.0: can't add hid device: -71 [ 3409.760080][ T8317] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 3409.913999][ T8317] usb 2-1: USB disconnect, device number 84 [ 3420.818855][ T8317] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 3421.037850][ T8317] usb 2-1: Using ep0 maxpacket: 16 [ 3421.106435][ T8317] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3421.109142][ T8317] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3421.110737][ T8317] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 3421.184475][ T8317] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3421.188619][ T8317] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3421.190410][ T8317] usb 2-1: Manufacturer: syz [ 3421.404963][ T8317] usb 2-1: config 0 descriptor?? [ 3421.731296][ T8575] syzkaller1: entered promiscuous mode [ 3421.733278][ T8575] syzkaller1: entered allmulticast mode [ 3424.845499][ T8580] netlink: 48 bytes leftover after parsing attributes in process `syz.0.891'. [ 3424.854318][ T8580] netlink: 48 bytes leftover after parsing attributes in process `syz.0.891'. [ 3426.607851][ T8317] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 3426.854362][ T8317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3426.860753][ T8317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3426.867309][ T8317] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3426.869447][ T8317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3427.101330][ T8317] usb 1-1: config 0 descriptor?? [ 3428.170232][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 3428.175111][ T8317] usbhid 1-1:0.0: can't add hid device: -32 [ 3428.189104][ T8317] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 3428.403038][ T8317] usb 1-1: USB disconnect, device number 68 [ 3433.023825][ T8317] usb 2-1: USB disconnect, device number 85 [ 3444.991486][ T3848] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 3445.508840][ T3848] usb 1-1: Using ep0 maxpacket: 16 [ 3445.608553][ T3848] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3445.611222][ T3848] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3445.613285][ T3848] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 3445.692655][ T3848] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3445.706910][ T3848] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3445.710710][ T3848] usb 1-1: Manufacturer: syz [ 3445.949983][ T3848] usb 1-1: config 0 descriptor?? [ 3458.368103][ T6481] usb 1-1: USB disconnect, device number 69 [ 3460.470341][ T6481] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 3460.777246][ T6481] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3460.779670][ T6481] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3460.781890][ T6481] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3460.783714][ T6481] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3461.002386][ T6481] usb 1-1: config 0 descriptor?? [ 3462.281620][ T6481] usbhid 1-1:0.0: can't add hid device: -71 [ 3462.294010][ T6481] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 3462.504262][ T6481] usb 1-1: USB disconnect, device number 70 [ 3473.783181][ T7659] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 3474.079531][ T7659] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3474.083880][ T7659] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 3474.200240][ T7659] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3474.208303][ T7659] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3474.210434][ T7659] usb 2-1: Product: syz [ 3474.212288][ T7659] usb 2-1: Manufacturer: syz [ 3474.213735][ T7659] usb 2-1: SerialNumber: syz [ 3474.491514][ T7659] cdc_mbim 2-1:1.0: skipping garbage [ 3475.043625][ T8646] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3475.598974][ T4861] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 3475.719896][ T7659] cdc_mbim 2-1:1.0: failed GET_NTB_PARAMETERS [ 3475.724273][ T7659] cdc_mbim 2-1:1.0: bind() failure [ 3475.868345][ T4861] usb 1-1: Using ep0 maxpacket: 16 [ 3475.957463][ T4861] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3475.959935][ T4861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3475.961968][ T4861] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 3476.058534][ T7659] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 3476.060978][ T7659] cdc_ncm 2-1:1.1: bind() failure [ 3476.087927][ T4861] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3476.090133][ T4861] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3476.091989][ T4861] usb 1-1: Manufacturer: syz [ 3476.241250][ T4861] usb 1-1: config 0 descriptor?? [ 3486.680680][ T7659] usb 2-1: USB disconnect, device number 86 [ 3488.292520][ T7659] usb 1-1: USB disconnect, device number 71 [ 3490.978477][ T3848] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 3491.159386][ T3848] usb 1-1: device descriptor read/64, error -71 [ 3491.549801][ T3848] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 3491.751346][ T3848] usb 1-1: device descriptor read/64, error -71 [ 3491.868712][ T3848] usb usb1-port1: attempt power cycle [ 3492.319601][ T3848] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 3492.359491][ T3848] usb 1-1: device descriptor read/8, error -71 [ 3492.688676][ T3848] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 3492.735409][ T3848] usb 1-1: device descriptor read/8, error -71 [ 3492.857403][ T3848] usb usb1-port1: unable to enumerate USB device [ 3504.479506][ T8658] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 3504.895288][ T8658] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3504.912187][ T8658] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 3505.093115][ T8658] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3505.095440][ T8658] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3505.099805][ T8658] usb 1-1: Product: syz [ 3505.101498][ T8658] usb 1-1: Manufacturer: syz [ 3505.103002][ T8658] usb 1-1: SerialNumber: syz [ 3505.713714][ T8658] cdc_mbim 1-1:1.0: skipping garbage [ 3506.413129][ T8699] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3507.060459][ T8658] cdc_mbim 1-1:1.0: failed GET_NTB_PARAMETERS [ 3507.063828][ T8658] cdc_mbim 1-1:1.0: bind() failure [ 3507.233142][ T8658] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 3507.243942][ T8658] cdc_ncm 1-1:1.1: bind() failure [ 3518.169038][ T6481] usb 1-1: USB disconnect, device number 76 [ 3519.976741][ T6481] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 3520.199477][ T6481] usb 1-1: Using ep0 maxpacket: 16 [ 3520.288911][ T6481] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3520.291310][ T6481] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3520.293593][ T6481] usb 1-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 3520.307252][ T6481] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3520.358485][ T6481] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3520.360184][ T6481] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3520.361386][ T6481] usb 1-1: Manufacturer: syz [ 3520.464245][ T6481] usb 1-1: config 0 descriptor?? [ 3532.139716][ T8317] usb 1-1: USB disconnect, device number 77 [ 3537.607564][ T8658] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 3537.968840][ T8658] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3537.971822][ T8658] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 3538.090223][ T8658] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3538.092324][ T8658] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3538.093938][ T8658] usb 1-1: Product: syz [ 3538.111564][ T8658] usb 1-1: Manufacturer: syz [ 3538.113403][ T8658] usb 1-1: SerialNumber: syz [ 3538.435395][ T8658] cdc_mbim 1-1:1.0: skipping garbage [ 3539.069712][ T8741] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3539.694731][ T8658] cdc_mbim 1-1:1.0: failed GET_NTB_PARAMETERS [ 3539.707825][ T8658] cdc_mbim 1-1:1.0: bind() failure [ 3539.992250][ T8658] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 3539.994729][ T8658] cdc_ncm 1-1:1.1: bind() failure [ 3550.788879][ T8658] usb 1-1: USB disconnect, device number 78 [ 3553.579343][ T8317] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 3553.886350][ T8317] usb 1-1: Using ep0 maxpacket: 32 [ 3554.203151][ T8317] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 3554.205471][ T8317] usb 1-1: config 0 has no interface number 0 [ 3554.217710][ T8317] usb 1-1: config 0 interface 12 has no altsetting 0 [ 3554.314110][ T8317] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 3554.316867][ T8317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3554.317908][ T8317] usb 1-1: Product: syz [ 3554.318787][ T8317] usb 1-1: Manufacturer: syz [ 3554.319633][ T8317] usb 1-1: SerialNumber: syz [ 3554.413468][ T8317] usb 1-1: config 0 descriptor?? [ 3554.499912][ T8317] f81534 1-1:0.12: required endpoints missing [ 3563.521429][ T4861] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 3563.808299][ T4861] usb 2-1: Using ep0 maxpacket: 16 [ 3563.908089][ T4861] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3563.909634][ T4861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3563.910905][ T4861] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 3563.912263][ T4861] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3563.977674][ T4861] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3563.979081][ T4861] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3563.980135][ T4861] usb 2-1: Manufacturer: syz [ 3564.199455][ T4861] usb 2-1: config 0 descriptor?? [ 3566.278146][ T4861] usb 1-1: USB disconnect, device number 79 [ 3568.578394][ T4861] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 3568.757311][ T4861] usb 1-1: Using ep0 maxpacket: 16 [ 3568.794946][ T4861] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3568.796770][ T4861] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3568.939532][ T4861] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3568.941381][ T4861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3568.942495][ T4861] usb 1-1: Product: syz [ 3568.943589][ T4861] usb 1-1: Manufacturer: syz [ 3568.944672][ T4861] usb 1-1: SerialNumber: syz [ 3569.462702][ T4861] usb 1-1: 0:2 : does not exist [ 3569.812612][ T4861] usb 1-1: USB disconnect, device number 80 [ 3575.293528][ T8317] usb 2-1: USB disconnect, device number 87 [ 3578.390492][ T8815] netlink: 'syz.0.918': attribute type 39 has an invalid length. [ 3581.428991][ T8317] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 3581.628594][ T8317] usb 2-1: Using ep0 maxpacket: 32 [ 3581.690914][ T8317] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 3581.694202][ T8317] usb 2-1: config 0 has no interface number 0 [ 3581.791822][ T8317] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 3581.793847][ T8317] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3581.803897][ T8317] usb 2-1: Product: syz [ 3581.805521][ T8317] usb 2-1: Manufacturer: syz [ 3581.823456][ T8317] usb 2-1: SerialNumber: syz [ 3581.944311][ T8317] usb 2-1: config 0 descriptor?? [ 3582.063464][ T8317] smsc95xx v2.0.0 [ 3583.176737][ T8317] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 3583.179316][ T8317] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 3583.502200][ T8317] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 3583.513422][ T8317] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 3584.679824][ T8317] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 3584.930729][ T8317] usb 1-1: Using ep0 maxpacket: 16 [ 3585.128428][ T8317] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3585.132864][ T8317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3585.135124][ T8317] usb 1-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 3585.141525][ T8317] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3585.200576][ T8317] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3585.204464][ T8317] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3585.241516][ T8317] usb 1-1: Manufacturer: syz [ 3585.399160][ T8317] usb 1-1: config 0 descriptor?? [ 3594.408354][ T8317] usb 2-1: USB disconnect, device number 88 [ 3597.315188][ T8658] usb 1-1: USB disconnect, device number 81 [ 3598.881180][ T8853] netlink: 'syz.0.923': attribute type 39 has an invalid length. [ 3599.598535][ T8855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.924'. [ 3603.118460][ T3848] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 3603.437673][ T3848] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 3603.440443][ T3848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 3603.442939][ T3848] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 3603.444856][ T3848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3603.583256][ T3848] usb 2-1: config 0 descriptor?? [ 3604.512460][ T3848] usb 2-1: USB disconnect, device number 89 [ 3607.550441][ T8317] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 3607.758702][ T8317] usb 1-1: Using ep0 maxpacket: 16 [ 3607.823234][ T8317] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3607.832509][ T8317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3607.834775][ T8317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 3607.846943][ T8317] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 3607.848925][ T8317] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3607.891018][ T8317] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3607.893225][ T8317] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3607.894985][ T8317] usb 1-1: Manufacturer: syz [ 3608.019198][ T8317] usb 1-1: config 0 descriptor?? [ 3615.232109][ T8884] netlink: 'syz.1.929': attribute type 39 has an invalid length. [ 3615.419403][ T8317] rc_core: IR keymap rc-hauppauge not found [ 3615.421578][ T8317] Registered IR keymap rc-empty [ 3615.433919][ T8317] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 3615.460433][ T8317] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 3615.510001][ T8317] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 3615.574359][ T8317] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5 [ 3615.650975][ T8317] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 3615.670349][ T8317] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 3615.709964][ T8317] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 3615.734057][ T8317] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 3615.759961][ T8317] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 3615.847331][ T8317] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 3615.879849][ T8317] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 3615.904632][ T8317] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 3615.951132][ T8317] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 3615.977851][ T8317] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 3616.362324][ T8317] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 3616.364473][ T8317] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 3616.561193][ T8317] usb 1-1: USB disconnect, device number 82 [ 3657.513648][ T8921] netlink: 'syz.0.934': attribute type 39 has an invalid length. [ 3661.570178][ T7123] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 3661.876927][ T7123] usb 1-1: Using ep0 maxpacket: 32 [ 3661.989042][ T7123] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 3661.991341][ T7123] usb 1-1: config 0 has no interface number 0 [ 3661.993376][ T7123] usb 1-1: config 0 interface 12 has no altsetting 0 [ 3662.147854][ T7123] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 3662.150165][ T7123] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3662.151990][ T7123] usb 1-1: Product: syz [ 3662.153470][ T7123] usb 1-1: Manufacturer: syz [ 3662.155026][ T7123] usb 1-1: SerialNumber: syz [ 3662.318994][ T7123] usb 1-1: config 0 descriptor?? [ 3662.460387][ T7123] f81534 1-1:0.12: required endpoints missing [ 3663.289212][ T9] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 3663.561037][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3663.563673][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3663.567771][ T9] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 3663.577294][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3663.731208][ T9] usb 2-1: config 0 descriptor?? [ 3664.678259][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 3664.682516][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 3664.919970][ T9] usb 2-1: USB disconnect, device number 90 [ 3674.198882][ T8658] usb 1-1: USB disconnect, device number 83 [ 3676.250308][ T8961] netlink: 'syz.0.939': attribute type 39 has an invalid length. [ 3694.897943][ T9] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 3695.107820][ T8826] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 3695.118088][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 3695.198609][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3695.200462][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3695.201767][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 3695.202954][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3695.339452][ T9] usb 1-1: config 0 descriptor?? [ 3695.474284][ T9] hub 1-1:0.0: USB hub found [ 3695.757641][ T8826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 3695.760106][ T8826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3695.762113][ T8826] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3695.764264][ T8826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 3695.810993][ T8826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 3695.813883][ T8826] usb 2-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 3695.826391][ T8826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3695.853651][ T9] hub 1-1:0.0: 1 port detected [ 3696.061884][ T8826] usb 2-1: config 0 descriptor?? [ 3696.139573][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 3696.147786][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 3696.156478][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 3696.171905][ T9] hub 1-1:0.0: hub_hub_status failed (err = -32) [ 3696.195168][ T9] hub 1-1:0.0: config failed, can't get hub status (err -32) [ 3696.295374][ T8972] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 3696.657240][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 3696.659780][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 3696.789841][ T8826] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 3696.791726][ T8826] usb 2-1: MIDIStreaming interface descriptor not found [ 3696.812680][ T9] usb 1-1: USB disconnect, device number 84 [ 3705.597577][ T8317] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 3705.888563][ T8317] usb 1-1: Using ep0 maxpacket: 32 [ 3706.078398][ T8317] usb 1-1: config 0 has no interfaces? [ 3706.080683][ T8317] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 3706.082507][ T8317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3706.293765][ T8317] usb 1-1: config 0 descriptor?? [ 3706.681779][ T8658] usb 1-1: USB disconnect, device number 85 [ 3716.578617][ T9022] netlink: 'syz.0.945': attribute type 39 has an invalid length. [ 3721.330885][ T8826] usb 2-1: USB disconnect, device number 91 [ 3727.374249][ T9035] batadv_slave_1: entered promiscuous mode [ 3733.389035][ T9023] batadv_slave_1: left promiscuous mode [ 3735.512821][ T35] audit: type=1326 audit(3733.240:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9041 comm="syz.1.947" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 3735.543303][ T35] audit: type=1326 audit(3733.250:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9041 comm="syz.1.947" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 3735.545327][ T35] audit: type=1326 audit(3733.260:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9041 comm="syz.1.947" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdb95a code=0x7ffc0000 [ 3735.548679][ T35] audit: type=1326 audit(3733.270:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9041 comm="syz.1.947" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 3735.550478][ T35] audit: type=1326 audit(3733.270:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9041 comm="syz.1.947" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 3735.552247][ T35] audit: type=1326 audit(3733.280:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9041 comm="syz.1.947" exe="/syz-executor" sig=0 arch=c00000f3 syscall=434 compat=0 ip=0xdb95a code=0x7ffc0000 [ 3735.553974][ T35] audit: type=1326 audit(3733.280:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9041 comm="syz.1.947" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 3735.567184][ T35] audit: type=1326 audit(3733.290:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9041 comm="syz.1.947" exe="/syz-executor" sig=0 arch=c00000f3 syscall=59 compat=0 ip=0xdb95a code=0x7ffc0000 [ 3735.599606][ T35] audit: type=1326 audit(3733.390:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9041 comm="syz.1.947" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 3735.604591][ T35] audit: type=1326 audit(3733.400:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9041 comm="syz.1.947" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 3748.271603][ T9052] netlink: 'syz.1.950': attribute type 39 has an invalid length. [ 3771.108397][ T8658] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 3771.407865][ T8658] usb 1-1: Using ep0 maxpacket: 32 [ 3771.683537][ T8658] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 3771.689699][ T8658] usb 1-1: config 0 has no interface number 0 [ 3771.708097][ T8658] usb 1-1: config 0 interface 12 has no altsetting 0 [ 3772.029259][ T8658] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 3772.031483][ T8658] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3772.033220][ T8658] usb 1-1: Product: syz [ 3772.034684][ T8658] usb 1-1: Manufacturer: syz [ 3772.066895][ T8658] usb 1-1: SerialNumber: syz [ 3772.437615][ T8658] usb 1-1: config 0 descriptor?? [ 3774.250040][ T8658] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 3774.253051][ T8658] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 3774.254730][ T8658] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 3774.310141][ T8658] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 3774.751720][ T8658] usb 1-1: USB disconnect, device number 86 [ 3781.658232][ T9078] netlink: 'syz.1.956': attribute type 39 has an invalid length. [ 3784.079152][ T8658] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 3784.390889][ T8658] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3784.393397][ T8658] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 3784.409932][ T8658] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 3784.412523][ T8658] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3784.414397][ T8658] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3784.564711][ T9080] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3784.678374][ T8658] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 3800.179180][ T7123] usb 1-1: USB disconnect, device number 87 [ 3816.609276][ T9] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 3816.892589][ T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3816.910267][ T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 3816.912759][ T9] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 3816.915037][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3816.932572][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3817.102404][ T9128] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3817.229547][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 3833.069191][ T3848] usb 2-1: USB disconnect, device number 92 [ 3834.828017][ T9168] netlink: 96 bytes leftover after parsing attributes in process `syz.1.966'. [ 3837.225424][ T35] kauditd_printk_skb: 14 callbacks suppressed [ 3837.246969][ T35] audit: type=1326 audit(3835.020:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9169 comm="syz.1.967" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 3837.281009][ T35] audit: type=1326 audit(3835.020:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9169 comm="syz.1.967" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 3837.298447][ T35] audit: type=1326 audit(3835.090:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9169 comm="syz.1.967" exe="/syz-executor" sig=0 arch=c00000f3 syscall=179 compat=0 ip=0xdb95a code=0x7ffc0000 [ 3837.318354][ T35] audit: type=1326 audit(3835.110:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9169 comm="syz.1.967" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 3837.372735][ T35] audit: type=1326 audit(3835.170:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9169 comm="syz.1.967" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 3875.638534][ T9] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 3876.503917][ T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3876.514892][ T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 3876.525372][ T9] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 3876.563273][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3876.565582][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3876.865089][ T9181] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3877.108362][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 3888.010312][ T8826] usb 2-1: USB disconnect, device number 93 [ 3940.251906][ T9225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3940.424894][ T9225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3951.053524][ T9225] hsr_slave_0: entered promiscuous mode [ 3951.102734][ T9225] hsr_slave_1: entered promiscuous mode [ 3951.128973][ T9225] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3951.131041][ T9225] Cannot create hsr debugfs directory [ 3953.843284][ T8826] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 3954.098933][ T8826] usb 2-1: Using ep0 maxpacket: 16 [ 3954.164923][ T8826] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 3954.170771][ T8826] usb 2-1: config 1 has no interface number 0 [ 3954.172621][ T8826] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 3954.174615][ T8826] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 3954.177619][ T8826] usb 2-1: config 1 interface 105 has no altsetting 0 [ 3954.337115][ T8826] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 3954.339331][ T8826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3954.341056][ T8826] usb 2-1: Product: syz [ 3954.342552][ T8826] usb 2-1: Manufacturer: syz [ 3954.344093][ T8826] usb 2-1: SerialNumber: syz [ 3954.611547][ T9487] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3954.657594][ T9487] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3956.008653][ T9487] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3956.012318][ T9487] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3956.728003][ T8826] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 3956.734295][ T8826] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 3956.771843][ T8826] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 3957.114308][ T8826] aqc111 2-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, be:59:25:43:a7:8f [ 3957.243020][ T8826] usb 2-1: USB disconnect, device number 94 [ 3957.411485][ T8826] aqc111 2-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 3957.863037][ T8826] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 3957.872556][ T8826] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 3957.918590][ T8826] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 3960.002127][ T9225] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 3960.117771][ T9225] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 3960.267864][ T9225] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 3960.455593][ T9225] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 3972.563165][ T9225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4008.340905][ T35] audit: type=1326 audit(4006.130:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9603 comm="syz.1.979" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4008.369219][ T35] audit: type=1326 audit(4006.160:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9603 comm="syz.1.979" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4011.047253][ T9608] netlink: 88 bytes leftover after parsing attributes in process `syz.1.980'. [ 4011.051246][ T9608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.980'. [ 4012.823168][ T9225] veth0_vlan: entered promiscuous mode [ 4013.254429][ T9225] veth1_vlan: entered promiscuous mode [ 4014.200585][ T9225] veth0_macvtap: entered promiscuous mode [ 4014.322896][ T9225] veth1_macvtap: entered promiscuous mode [ 4016.073256][ T9225] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4016.077225][ T9225] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4016.082066][ T9225] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4016.083979][ T9225] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4016.109463][ T8826] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 4016.327487][ T8826] usb 2-1: Using ep0 maxpacket: 32 [ 4016.399827][ T8826] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 4016.401078][ T8826] usb 2-1: config 0 has no interface number 0 [ 4016.402123][ T8826] usb 2-1: config 0 interface 12 has no altsetting 0 [ 4016.497709][ T8826] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 4016.499171][ T8826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4016.500246][ T8826] usb 2-1: Product: syz [ 4016.501096][ T8826] usb 2-1: Manufacturer: syz [ 4016.501941][ T8826] usb 2-1: SerialNumber: syz [ 4016.820252][ T8826] usb 2-1: config 0 descriptor?? [ 4018.905418][ T8826] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 4018.909667][ T8826] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 4018.911329][ T8826] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 4018.914069][ T8826] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 4019.072979][ T8826] usb 2-1: USB disconnect, device number 95 [ 4031.976653][ T9644] netlink: 28 bytes leftover after parsing attributes in process `syz.1.987'. [ 4042.503692][ T35] audit: type=1326 audit(4040.290:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9653 comm="syz.2.990" exe="/syz-executor" sig=31 arch=c00000f3 syscall=172 compat=0 ip=0xd53c4 code=0x0 [ 4044.313612][ T9656] syzkaller1: entered promiscuous mode [ 4044.319296][ T9656] syzkaller1: entered allmulticast mode [ 4049.482832][ T35] audit: type=1326 audit(4047.250:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9663 comm="syz.1.993" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4049.508502][ T35] audit: type=1326 audit(4047.300:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9663 comm="syz.1.993" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4049.564660][ T35] audit: type=1326 audit(4047.360:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9663 comm="syz.1.993" exe="/syz-executor" sig=0 arch=c00000f3 syscall=223 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4049.628986][ T35] audit: type=1326 audit(4047.390:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9663 comm="syz.1.993" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4049.723171][ T35] audit: type=1326 audit(4047.510:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9663 comm="syz.1.993" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4077.727895][ T9680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4077.780381][ T9680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4088.690006][ T9686] netlink: 12 bytes leftover after parsing attributes in process `syz.1.999'. [ 4093.079141][ T9692] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 4093.564619][ T9690] syzkaller1: entered promiscuous mode [ 4093.591146][ T9690] syzkaller1: entered allmulticast mode [ 4098.769945][ T9700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4098.849796][ T9700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4120.789939][ T9718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4120.837576][ T9718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4137.600041][ T9727] IPv6: NLM_F_REPLACE set, but no existing node found! [ 4145.578559][ T8658] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 4146.105132][ T8658] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0 [ 4146.107690][ T8658] usb 2-1: config 0 interface 0 has no altsetting 0 [ 4146.108814][ T8658] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 4146.109915][ T8658] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 4146.310283][ T8658] usb 2-1: config 0 descriptor?? [ 4151.511597][ T8658] usb 2-1: can't set config #0, error -110 [ 4152.138026][ T9733] usb 2-1: USB disconnect, device number 96 [ 4154.588341][ T9742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4154.642849][ T9742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4159.014593][ T9747] syzkaller1: entered promiscuous mode [ 4159.033492][ T9747] syzkaller1: entered allmulticast mode [ 4172.922131][ T9764] syzkaller1: entered promiscuous mode [ 4172.925206][ T9764] syzkaller1: entered allmulticast mode [ 4174.817472][ T9770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4174.898035][ T9770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4181.128706][ T9622] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 4181.451491][ T9622] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 4181.456543][ T9622] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 4181.458251][ T9622] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 4181.459625][ T9622] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 4181.592631][ T9622] usb 2-1: config 0 descriptor?? [ 4183.364511][ T9622] uclogic 0003:256C:006D.0012: failed retrieving Huion firmware version: -71 [ 4183.368151][ T9622] uclogic 0003:256C:006D.0012: failed probing parameters: -71 [ 4183.370731][ T9622] uclogic 0003:256C:006D.0012: probe with driver uclogic failed with error -71 [ 4183.541773][ T9622] usb 2-1: USB disconnect, device number 97 [ 4193.181311][ T9801] syzkaller1: entered promiscuous mode [ 4193.184504][ T9801] syzkaller1: entered allmulticast mode [ 4198.038333][ T9622] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 4198.261543][ T9622] usb 2-1: Using ep0 maxpacket: 32 [ 4198.362354][ T9622] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 4198.364072][ T9622] usb 2-1: config 0 has no interface number 0 [ 4198.715259][ T9622] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 4198.718319][ T9622] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4198.720146][ T9622] usb 2-1: Product: syz [ 4198.721606][ T9622] usb 2-1: Manufacturer: syz [ 4198.723109][ T9622] usb 2-1: SerialNumber: syz [ 4198.865043][ T9622] usb 2-1: config 0 descriptor?? [ 4198.988710][ T9622] smsc95xx v2.0.0 [ 4200.193328][ T9622] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 4200.194856][ T9622] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 4200.509934][ T9622] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 4200.513954][ T9622] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 4209.217457][ T9826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4209.259452][ T9826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4211.763673][ T9] usb 2-1: USB disconnect, device number 98 [ 4213.031093][ T9] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 4213.268046][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 4213.270822][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 4213.273075][ T9] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 4213.279247][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 4213.431242][ T9] usb 2-1: config 0 descriptor?? [ 4215.765360][ T9] uclogic 0003:256C:006D.0013: failed retrieving Huion firmware version: -71 [ 4215.779489][ T9] uclogic 0003:256C:006D.0013: failed probing parameters: -71 [ 4215.795507][ T9] uclogic 0003:256C:006D.0013: probe with driver uclogic failed with error -71 [ 4216.165235][ T9] usb 2-1: USB disconnect, device number 99 [ 4218.587743][ T9854] syzkaller1: entered promiscuous mode [ 4218.589111][ T9854] syzkaller1: entered allmulticast mode [ 4228.559535][ T7123] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 4228.781201][ T7123] usb 2-1: Using ep0 maxpacket: 32 [ 4228.888599][ T7123] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 4228.890812][ T7123] usb 2-1: config 0 has no interface number 0 [ 4229.088885][ T7123] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 4229.093948][ T7123] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4229.099246][ T7123] usb 2-1: Product: syz [ 4229.100890][ T7123] usb 2-1: Manufacturer: syz [ 4229.102372][ T7123] usb 2-1: SerialNumber: syz [ 4229.259153][ T7123] usb 2-1: config 0 descriptor?? [ 4229.461711][ T7123] smsc95xx v2.0.0 [ 4230.250820][ T7123] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 4230.253362][ T7123] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 4230.596509][ T7123] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 4230.603248][ T7123] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 4234.703077][ T9878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4234.740219][ T9878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4242.805216][ T9622] usb 2-1: USB disconnect, device number 100 [ 4244.480947][ T9890] syzkaller1: entered promiscuous mode [ 4244.482201][ T9890] syzkaller1: entered allmulticast mode [ 4253.928822][ T8317] usb 2-1: new full-speed USB device number 101 using dummy_hcd [ 4254.298085][ T8317] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 4254.301038][ T8317] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 4254.302990][ T8317] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 4254.364049][ T8317] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 4254.383120][ T8317] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 4254.385451][ T8317] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 4254.431243][ T8317] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 4254.433611][ T8317] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 4254.448860][ T8317] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 4254.543480][ T8317] usb 2-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 4254.546509][ T8317] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4254.548338][ T8317] usb 2-1: Product: syz [ 4254.549813][ T8317] usb 2-1: Manufacturer: syz [ 4254.551310][ T8317] usb 2-1: SerialNumber: syz [ 4254.659954][ T8317] usb 2-1: config 0 descriptor?? [ 4254.730512][ T8317] ti_usb_3410_5052 2-1:0.0: required endpoints missing [ 4255.522890][ T9622] usb 2-1: USB disconnect, device number 101 [ 4261.311137][ T9922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4261.512679][ T9922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4270.529642][ T9622] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 4270.878089][ T9622] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 4270.880355][ T9622] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 4270.926622][ T9622] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 4270.930044][ T9622] usb 2-1: config 1 has no interface number 1 [ 4270.932344][ T9622] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 4271.019657][ T9622] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 4271.021711][ T9622] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4271.023352][ T9622] usb 2-1: Product: syz [ 4271.024657][ T9622] usb 2-1: Manufacturer: syz [ 4271.047690][ T9622] usb 2-1: SerialNumber: syz [ 4272.341578][ T9622] usb 2-1: Failed to set altset [ 4272.343370][ T9622] usb 2-1: 0:2: cannot create sequencer device [ 4272.512957][ T9622] usb 2-1: Failed to set altset [ 4272.770984][ T9622] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 4272.861353][ T9622] usb 2-1: USB disconnect, device number 102 [ 4282.148217][ T3848] usb 2-1: new full-speed USB device number 103 using dummy_hcd [ 4282.433491][ T3848] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 4282.438517][ T3848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 4282.443666][ T3848] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 4282.727667][ T3848] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 4282.730331][ T3848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 4282.732080][ T3848] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 4282.842879][ T3848] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 4282.845419][ T3848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 4282.868680][ T3848] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 4283.000048][ T3848] usb 2-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 4283.002202][ T3848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4283.004412][ T3848] usb 2-1: Product: syz [ 4283.025420][ T3848] usb 2-1: Manufacturer: syz [ 4283.036159][ T3848] usb 2-1: SerialNumber: syz [ 4283.367520][ T3848] usb 2-1: config 0 descriptor?? [ 4283.548532][ T3848] ti_usb_3410_5052 2-1:0.0: required endpoints missing [ 4285.104002][ T7123] usb 2-1: USB disconnect, device number 103 [ 4286.290730][ T9981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4286.358730][ T9981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4294.810029][ T35] audit: type=1326 audit(4292.600:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9986 comm="syz.2.1047" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4294.848773][ T35] audit: type=1326 audit(4292.610:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9986 comm="syz.2.1047" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4294.972876][ T35] audit: type=1326 audit(4292.770:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9986 comm="syz.2.1047" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4295.002794][ T35] audit: type=1326 audit(4292.800:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9986 comm="syz.2.1047" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4295.057178][ T35] audit: type=1326 audit(4292.850:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9986 comm="syz.2.1047" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4295.102316][ T35] audit: type=1326 audit(4292.900:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9986 comm="syz.2.1047" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4295.143002][ T35] audit: type=1326 audit(4292.940:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9986 comm="syz.2.1047" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4295.177715][ T35] audit: type=1326 audit(4292.960:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9986 comm="syz.2.1047" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4295.205020][ T35] audit: type=1326 audit(4292.980:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9986 comm="syz.2.1047" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4295.243158][ T35] audit: type=1326 audit(4293.010:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9986 comm="syz.2.1047" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4300.653286][ T9996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4300.684148][ T9996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4328.457307][T10016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4328.507171][T10016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4338.060504][T10022] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1057'. [ 4343.471237][T10024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4343.645084][T10024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4356.022468][T10030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1060'. [ 4362.820280][ T7123] usb 2-1: new full-speed USB device number 104 using dummy_hcd [ 4362.937370][T10041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4362.981856][T10041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4363.242675][ T7123] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 4363.258439][ T7123] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 4363.348782][ T7123] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 4363.351060][ T7123] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 4363.659040][ T7123] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 4363.661791][ T7123] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 4363.850949][ T7123] usb 2-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 4363.853161][ T7123] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4363.854968][ T7123] usb 2-1: Product: syz [ 4363.866840][ T7123] usb 2-1: Manufacturer: syz [ 4363.871133][ T7123] usb 2-1: SerialNumber: syz [ 4364.083034][ T7123] usb 2-1: config 0 descriptor?? [ 4364.383386][ T7123] ti_usb_3410_5052 2-1:0.0: required endpoints missing [ 4365.219876][ T8658] usb 2-1: USB disconnect, device number 104 [ 4373.332190][T10054] ip6gre1: entered allmulticast mode [ 4379.620328][ T8317] usb 2-1: new low-speed USB device number 105 using dummy_hcd [ 4380.007914][ T8317] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 4380.012041][ T8317] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 4380.013904][ T8317] usb 2-1: config 0 interface 0 has no altsetting 0 [ 4380.030539][ T8317] usb 2-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 4380.032469][ T8317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 4380.283867][ T8317] usb 2-1: config 0 descriptor?? [ 4380.549523][ T35] kauditd_printk_skb: 15 callbacks suppressed [ 4380.550061][ T35] audit: type=1326 audit(4378.330:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10067 comm="syz.2.1067" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4380.606617][ T35] audit: type=1326 audit(4378.400:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10067 comm="syz.2.1067" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4380.983612][ T35] audit: type=1326 audit(4378.780:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10067 comm="syz.2.1067" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4381.131625][ T35] audit: type=1326 audit(4378.910:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10067 comm="syz.2.1067" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4381.156945][ T35] audit: type=1326 audit(4378.950:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10067 comm="syz.2.1067" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4381.242449][ T35] audit: type=1326 audit(4379.030:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10067 comm="syz.2.1067" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4381.388719][ T35] audit: type=1326 audit(4379.180:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10067 comm="syz.2.1067" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4381.445092][ T35] audit: type=1326 audit(4379.190:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10067 comm="syz.2.1067" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4381.471617][ T35] audit: type=1326 audit(4379.260:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10067 comm="syz.2.1067" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4381.515142][ T35] audit: type=1326 audit(4379.260:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10067 comm="syz.2.1067" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4386.148565][ T8317] usbhid 2-1:0.0: can't add hid device: -32 [ 4386.153702][ T8317] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 4386.917743][T10077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4387.010140][T10077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4392.952376][ T8317] usb 2-1: USB disconnect, device number 105 [ 4396.890191][T10106] netlink: 'syz.1.1069': attribute type 39 has an invalid length. [ 4409.323779][T10116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4409.362328][T10116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4444.488111][ T8317] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 4444.728708][ T8317] usb 2-1: Using ep0 maxpacket: 8 [ 4444.819277][ T8317] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 4444.821472][ T8317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 4445.051902][ T8317] usb 2-1: config 0 descriptor?? [ 4446.378915][ T8317] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 4446.381240][ T8317] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 4446.398917][ T8317] asix 2-1:0.0: probe with driver asix failed with error -32 [ 4453.652836][ T35] kauditd_printk_skb: 7 callbacks suppressed [ 4453.653346][ T35] audit: type=1326 audit(4451.440:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10145 comm="syz.2.1083" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4453.668817][ T35] audit: type=1326 audit(4451.450:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10145 comm="syz.2.1083" exe="/syz-executor" sig=0 arch=c00000f3 syscall=114 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4453.672282][ T35] audit: type=1326 audit(4451.460:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10145 comm="syz.2.1083" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4453.711802][ T35] audit: type=1326 audit(4451.470:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10145 comm="syz.2.1083" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4457.917030][ T8317] usb 2-1: USB disconnect, device number 106 [ 4468.207112][T10168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4468.283262][T10168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4486.644115][T10187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4486.680029][T10187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4497.503875][T10217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4497.528324][T10217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4506.664194][T10221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4506.721981][T10221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4535.999782][ T35] audit: type=1107 audit(4533.730:86): pid=10238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='>' [ 4568.249610][T10265] syzkaller0: entered promiscuous mode [ 4568.251705][T10265] syzkaller0: entered allmulticast mode [ 4594.588958][ T8658] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 4594.902391][ T8658] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 4594.904721][ T8658] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 4595.069490][ T8658] usb 2-1: config 0 descriptor?? [ 4600.868536][ T8658] usb 2-1: USB disconnect, device number 107 [ 4610.521324][ T3848] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 4610.778985][ T3848] usb 2-1: Using ep0 maxpacket: 8 [ 4610.894174][ T3848] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 4610.908429][ T3848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 4611.200603][ T3848] usb 2-1: config 0 descriptor?? [ 4613.071690][ T3848] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 4613.080766][ T3848] asix 2-1:0.0: probe with driver asix failed with error -32 [ 4624.678594][ T9733] usb 2-1: USB disconnect, device number 108 [ 4626.350142][ T8317] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 4626.485445][T10344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4626.572558][T10344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4626.692956][ T8317] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 4626.695176][ T8317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 4626.892273][ T8317] usb 2-1: config 0 descriptor?? [ 4633.136983][ T9733] usb 2-1: USB disconnect, device number 109 [ 4650.662011][ T9733] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 4650.869567][ T9733] usb 2-1: Using ep0 maxpacket: 8 [ 4650.943345][ T9733] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 4650.949252][ T9733] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 4651.082837][ T9733] usb 2-1: config 0 descriptor?? [ 4652.503288][ T9733] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 4652.513231][ T9733] asix 2-1:0.0: probe with driver asix failed with error -61 [ 4653.740808][T10379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4653.800400][T10379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4663.768049][T10387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4663.799376][T10387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4664.207323][ T9112] usb 2-1: USB disconnect, device number 110 [ 4677.587983][ T9112] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 4677.918091][ T9112] usb 2-1: Using ep0 maxpacket: 32 [ 4677.989659][ T9112] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 4677.991844][ T9112] usb 2-1: config 0 has no interface number 0 [ 4678.141961][ T9112] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 4678.158690][ T9112] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4678.160861][ T9112] usb 2-1: Product: syz [ 4678.162261][ T9112] usb 2-1: Manufacturer: syz [ 4678.163705][ T9112] usb 2-1: SerialNumber: syz [ 4678.459413][ T9112] usb 2-1: config 0 descriptor?? [ 4678.664302][ T9112] smsc95xx v2.0.0 [ 4678.689862][ T9112] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 4678.695438][ T9112] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22 [ 4682.984777][T10424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4683.022804][T10424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4690.757361][ T6481] usb 2-1: USB disconnect, device number 111 [ 4692.134491][T10438] netlink: 'syz.1.1145': attribute type 39 has an invalid length. [ 4694.208969][ T6481] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 4694.525174][ T6481] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 4694.537572][ T6481] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 4694.592867][ T6481] usb 2-1: config 0 descriptor?? [ 4695.207611][ T35] audit: type=1800 audit(4692.840:87): pid=10440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1144" name="/" dev="fuse" ino=5 res=0 errno=0 [ 4700.830815][ T6481] usb 2-1: USB disconnect, device number 112 [ 4703.061768][T10468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4703.101713][T10468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4713.154236][T10474] netlink: 'syz.2.1150': attribute type 39 has an invalid length. [ 4742.884352][T10324] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 4743.323857][T10324] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 4743.337812][T10324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 4743.520427][T10324] usb 2-1: config 0 descriptor?? [ 4751.988210][T10512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4752.050906][T10324] usb 2-1: USB disconnect, device number 113 [ 4752.110607][T10512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4759.152580][ T35] audit: type=1326 audit(4756.950:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10521 comm="syz.1.1156" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4759.202542][ T35] audit: type=1326 audit(4757.000:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10521 comm="syz.1.1156" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4759.352699][ T35] audit: type=1326 audit(4757.150:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10521 comm="syz.1.1156" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4759.361009][ T35] audit: type=1326 audit(4757.160:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10521 comm="syz.1.1156" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4759.377701][ T35] audit: type=1326 audit(4757.170:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10521 comm="syz.1.1156" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4759.391536][ T35] audit: type=1326 audit(4757.190:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10521 comm="syz.1.1156" exe="/syz-executor" sig=0 arch=c00000f3 syscall=434 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4759.433474][ T35] audit: type=1326 audit(4757.210:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10521 comm="syz.1.1156" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4759.453858][ T35] audit: type=1326 audit(4757.240:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10521 comm="syz.1.1156" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4759.469314][ T35] audit: type=1326 audit(4757.260:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10521 comm="syz.1.1156" exe="/syz-executor" sig=0 arch=c00000f3 syscall=160 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4759.477290][ T35] audit: type=1326 audit(4757.260:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10521 comm="syz.1.1156" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4763.453013][T10528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4763.503641][T10528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4766.258241][ T6481] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 4766.531207][ T6481] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 4766.532546][ T6481] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 4766.594617][ T6481] usb 2-1: config 0 descriptor?? [ 4773.223775][T10547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4773.322601][T10547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4773.671196][T10510] usb 2-1: USB disconnect, device number 114 [ 4784.343474][ T35] kauditd_printk_skb: 1 callbacks suppressed [ 4784.343935][ T35] audit: type=1326 audit(4782.140:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10560 comm="syz.1.1164" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4784.389373][ T35] audit: type=1326 audit(4782.160:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10560 comm="syz.1.1164" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4784.466928][ T35] audit: type=1326 audit(4782.250:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10560 comm="syz.1.1164" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4784.473195][ T35] audit: type=1326 audit(4782.270:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10560 comm="syz.1.1164" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4784.497837][ T35] audit: type=1326 audit(4782.290:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10560 comm="syz.1.1164" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4784.588306][ T35] audit: type=1326 audit(4782.380:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10560 comm="syz.1.1164" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4784.603131][T10563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4784.607051][ T35] audit: type=1326 audit(4782.400:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10560 comm="syz.1.1164" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4784.640525][ T35] audit: type=1326 audit(4782.430:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10560 comm="syz.1.1164" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4784.645046][T10563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4784.668226][ T35] audit: type=1326 audit(4782.460:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10560 comm="syz.1.1164" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4784.680775][ T35] audit: type=1326 audit(4782.470:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10560 comm="syz.1.1164" exe="/syz-executor" sig=0 arch=c00000f3 syscall=64 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4786.868827][ T9112] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 4787.300589][ T9112] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 4787.302879][ T9112] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 4787.440327][ T9112] usb 2-1: config 0 descriptor?? [ 4794.057719][ T9733] usb 2-1: USB disconnect, device number 115 [ 4807.214930][T10601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4807.270227][T10601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4823.422469][T10615] binder_alloc: 10610: binder_alloc_buf size 4120 failed, no address space [ 4823.437657][T10615] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 4838.375327][T10324] hid-generic 00A0:0006:0003.0014: unknown main item tag 0x0 [ 4838.380464][T10324] hid-generic 00A0:0006:0003.0014: unknown main item tag 0x0 [ 4838.382940][T10324] hid-generic 00A0:0006:0003.0014: unknown main item tag 0x0 [ 4838.385359][T10324] hid-generic 00A0:0006:0003.0014: unknown main item tag 0x0 [ 4838.394431][T10324] hid-generic 00A0:0006:0003.0014: unknown main item tag 0x0 [ 4838.401421][T10324] hid-generic 00A0:0006:0003.0014: unknown main item tag 0x0 [ 4838.403168][T10324] hid-generic 00A0:0006:0003.0014: unknown main item tag 0x0 [ 4838.405353][T10324] hid-generic 00A0:0006:0003.0014: unknown main item tag 0x0 [ 4838.412859][T10324] hid-generic 00A0:0006:0003.0014: unknown main item tag 0x0 [ 4838.633683][T10622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4838.810977][T10622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4839.050547][T10324] hid-generic 00A0:0006:0003.0014: hidraw0: HID v0.05 Device [syz1] on syz0 [ 4845.358657][T10324] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 4845.591016][T10324] usb 2-1: Using ep0 maxpacket: 32 [ 4845.680743][T10324] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 4845.682935][T10324] usb 2-1: config 0 has no interface number 0 [ 4845.909889][T10324] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 4845.912923][T10324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4845.931354][T10324] usb 2-1: Product: syz [ 4845.933153][T10324] usb 2-1: Manufacturer: syz [ 4845.934655][T10324] usb 2-1: SerialNumber: syz [ 4846.192420][T10324] usb 2-1: config 0 descriptor?? [ 4846.642973][T10324] smsc95xx v2.0.0 [ 4848.251140][T10324] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 4848.254981][T10324] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 4848.549241][T10324] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 4848.553063][T10324] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 4849.730656][T10642] xt_hashlimit: size too large, truncated to 1048576 [ 4860.290677][ T9733] usb 2-1: USB disconnect, device number 116 [ 4863.624590][T10658] binder: 10657:10658 ioctl c0306201 200000000240 returned -14 [ 4889.981452][ T8658] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 4890.389094][ T8658] usb 2-1: Using ep0 maxpacket: 32 [ 4890.692634][ T8658] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 4890.694782][ T8658] usb 2-1: config 0 has no interface number 0 [ 4891.612834][ T8658] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 4891.639380][ T8658] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4891.641476][ T8658] usb 2-1: Product: syz [ 4891.642995][ T8658] usb 2-1: Manufacturer: syz [ 4891.644508][ T8658] usb 2-1: SerialNumber: syz [ 4892.031465][ T8658] usb 2-1: config 0 descriptor?? [ 4892.472434][ T8658] smsc95xx v2.0.0 [ 4894.087076][ T8658] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 4894.088543][ T8658] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 4894.660363][ T8658] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 4894.678721][ T8658] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 4895.560898][T10679] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1186'. [ 4902.095144][ T35] kauditd_printk_skb: 3 callbacks suppressed [ 4902.103451][ T35] audit: type=1326 audit(4900.885:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10684 comm="syz.2.1188" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4902.132001][ T35] audit: type=1326 audit(4900.895:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10684 comm="syz.2.1188" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4902.139494][ T35] audit: type=1326 audit(4900.915:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10684 comm="syz.2.1188" exe="/syz-executor" sig=0 arch=c00000f3 syscall=134 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4902.167251][ T35] audit: type=1326 audit(4900.935:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10684 comm="syz.2.1188" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4902.212233][ T35] audit: type=1326 audit(4900.975:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10684 comm="syz.2.1188" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4902.218689][ T35] audit: type=1326 audit(4901.005:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10684 comm="syz.2.1188" exe="/syz-executor" sig=0 arch=c00000f3 syscall=279 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4902.247473][ T35] audit: type=1326 audit(4901.025:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10684 comm="syz.2.1188" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4902.256950][ T35] audit: type=1326 audit(4901.045:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10684 comm="syz.2.1188" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4902.298786][ T35] audit: type=1326 audit(4901.065:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10684 comm="syz.2.1188" exe="/syz-executor" sig=0 arch=c00000f3 syscall=47 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4902.318775][ T35] audit: type=1326 audit(4901.095:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10684 comm="syz.2.1188" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 4904.771354][T10688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4904.829502][T10688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4905.503545][ T8826] usb 2-1: USB disconnect, device number 117 [ 4921.746872][T10704] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1191'. [ 4921.996540][T10704] 0ªX¹¦D: renamed from gretap0 [ 4925.291818][T10704] 0ªX¹¦D: entered allmulticast mode [ 4925.347120][T10704] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 5017.411846][ T3526] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5018.654424][ T3526] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5019.650764][ T3526] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5020.843965][ T3526] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5030.148839][ T3526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 5030.354314][ T3526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 5030.469935][ T3526] bond0 (unregistering): Released all slaves [ 5042.083774][ T3526] hsr_slave_0: left promiscuous mode [ 5042.241479][ T3526] hsr_slave_1: left promiscuous mode [ 5042.799576][ T3526] veth1_macvtap: left promiscuous mode [ 5042.804167][ T3526] veth0_macvtap: left promiscuous mode [ 5042.823616][ T3526] veth1_vlan: left promiscuous mode [ 5042.859700][ T3526] veth0_vlan: left promiscuous mode [ 5097.783753][T10721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 5098.883268][T10721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 5109.197051][T10724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 5109.388101][T10724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 5123.169159][T10721] hsr_slave_0: entered promiscuous mode [ 5123.214666][T10721] hsr_slave_1: entered promiscuous mode [ 5123.268355][T10721] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 5123.271633][T10721] Cannot create hsr debugfs directory [ 5133.853419][T10724] hsr_slave_0: entered promiscuous mode [ 5133.894160][T10724] hsr_slave_1: entered promiscuous mode [ 5134.315088][T10724] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 5134.339581][T10724] Cannot create hsr debugfs directory [ 5141.319505][T10721] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 5142.189125][T10721] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 5142.639555][T10721] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 5143.515380][T10721] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 5150.740848][T10724] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 5151.014814][T10724] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 5151.424330][T10724] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 5151.724041][T10724] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 5165.362720][T10721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 5172.955112][T10724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 5236.719153][T10721] veth0_vlan: entered promiscuous mode [ 5237.164550][T10721] veth1_vlan: entered promiscuous mode [ 5239.965144][T10721] veth0_macvtap: entered promiscuous mode [ 5240.425272][T10721] veth1_macvtap: entered promiscuous mode [ 5242.892067][T10721] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 5242.894157][T10721] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 5242.920852][T10721] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 5242.922957][T10721] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 5246.783168][T10724] veth0_vlan: entered promiscuous mode [ 5247.630696][T10724] veth1_vlan: entered promiscuous mode [ 5250.262413][T10724] veth0_macvtap: entered promiscuous mode [ 5250.701450][T10724] veth1_macvtap: entered promiscuous mode [ 5253.064713][T10724] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 5253.074209][T10724] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 5253.119024][T10724] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 5253.123015][T10724] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 5253.790054][T11503] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1195'. [ 5262.511765][ T35] kauditd_printk_skb: 1 callbacks suppressed [ 5262.512265][ T35] audit: type=1107 audit(5261.275:123): pid=11505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 5266.160850][T11508] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1196'. [ 5273.197996][T11512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5273.265221][T11512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5286.117760][T11524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5286.201127][T11524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5287.419324][T11528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5287.450011][T11528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5297.252787][T11533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5297.343359][T11533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5298.601139][T11536] netlink: 'syz.4.1206': attribute type 39 has an invalid length. [ 5336.231294][T11559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5336.332455][T11559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5340.342988][T11563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5340.432518][T11563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5349.732096][ T35] audit: type=1326 audit(5348.525:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11571 comm="syz.3.1215" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5349.780498][ T35] audit: type=1326 audit(5348.535:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11571 comm="syz.3.1215" exe="/syz-executor" sig=0 arch=c00000f3 syscall=56 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5349.831189][ T35] audit: type=1326 audit(5348.585:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11571 comm="syz.3.1215" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5349.858819][ T35] audit: type=1326 audit(5348.645:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11571 comm="syz.3.1215" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5349.938538][ T35] audit: type=1326 audit(5348.685:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11571 comm="syz.3.1215" exe="/syz-executor" sig=0 arch=c00000f3 syscall=211 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5349.975149][ T35] audit: type=1326 audit(5348.765:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11571 comm="syz.3.1215" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5349.984525][ T35] audit: type=1326 audit(5348.765:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11571 comm="syz.3.1215" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5350.031923][ T35] audit: type=1326 audit(5348.815:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11571 comm="syz.3.1215" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5350.061607][ T35] audit: type=1326 audit(5348.855:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11571 comm="syz.3.1215" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5350.069486][ T35] audit: type=1326 audit(5348.855:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11571 comm="syz.3.1215" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5351.322139][T11567] syzkaller0: entered promiscuous mode [ 5351.323563][T11567] syzkaller0: entered allmulticast mode [ 5356.752600][T11574] binder: 11573:11574 unknown command 1836213880 [ 5356.753893][T11574] binder: 11573:11574 ioctl c0306201 2000000003c0 returned -22 [ 5375.103364][T11583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5375.198207][T11583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5401.169116][T11616] input: syz1 as /devices/virtual/input/input6 [ 5408.338760][T11626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5408.390771][T11626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5431.400577][T11637] syz.3.1225 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 5443.388258][T11646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5443.528879][T11646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5466.867023][T11656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5466.908167][T11656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5519.459383][ T35] kauditd_printk_skb: 15 callbacks suppressed [ 5519.459853][ T35] audit: type=1326 audit(5518.245:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11681 comm="syz.4.1238" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5519.551814][ T35] audit: type=1326 audit(5518.335:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11681 comm="syz.4.1238" exe="/syz-executor" sig=0 arch=c00000f3 syscall=34 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5519.649619][ T35] audit: type=1326 audit(5518.375:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11681 comm="syz.4.1238" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5519.652971][ T35] audit: type=1326 audit(5518.435:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11681 comm="syz.4.1238" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5519.724926][ T35] audit: type=1326 audit(5518.515:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11681 comm="syz.4.1238" exe="/syz-executor" sig=0 arch=c00000f3 syscall=5 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5519.859051][ T35] audit: type=1326 audit(5518.555:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11681 comm="syz.4.1238" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5519.898595][ T35] audit: type=1326 audit(5518.665:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11681 comm="syz.4.1238" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5526.543362][T11688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5526.604261][T11688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5547.256246][ T35] audit: type=1326 audit(5546.015:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11703 comm="syz.3.1246" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5547.297288][ T35] audit: type=1326 audit(5546.065:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11703 comm="syz.3.1246" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5547.305257][ T35] audit: type=1326 audit(5546.095:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11703 comm="syz.3.1246" exe="/syz-executor" sig=0 arch=c00000f3 syscall=41 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5547.384918][ T35] audit: type=1326 audit(5546.155:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11703 comm="syz.3.1246" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5547.429894][ T35] audit: type=1326 audit(5546.215:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11703 comm="syz.3.1246" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5565.109188][ T35] audit: type=1326 audit(5563.895:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11719 comm="syz.3.1250" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5565.127534][ T35] audit: type=1326 audit(5563.915:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11719 comm="syz.3.1250" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5565.157168][ T35] audit: type=1326 audit(5563.945:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11719 comm="syz.3.1250" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5565.276652][ T35] audit: type=1326 audit(5564.035:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11719 comm="syz.3.1250" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5565.290701][ T35] audit: type=1326 audit(5564.085:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11719 comm="syz.3.1250" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5566.161579][ T35] audit: type=1326 audit(5564.895:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11719 comm="syz.3.1250" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5566.178815][ T35] audit: type=1326 audit(5564.965:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11719 comm="syz.3.1250" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5566.298736][ T35] audit: type=1326 audit(5564.995:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11719 comm="syz.3.1250" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5566.301366][ T35] audit: type=1326 audit(5565.075:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11719 comm="syz.3.1250" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5566.389322][ T35] audit: type=1326 audit(5565.165:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11719 comm="syz.3.1250" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5611.148795][T11744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5611.203850][T11744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5630.802183][ T35] kauditd_printk_skb: 3 callbacks suppressed [ 5630.802705][ T35] audit: type=1326 audit(5629.535:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11762 comm="syz.4.1265" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5630.856447][ T35] audit: type=1326 audit(5629.605:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11762 comm="syz.4.1265" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5630.882717][ T35] audit: type=1326 audit(5629.645:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11762 comm="syz.4.1265" exe="/syz-executor" sig=0 arch=c00000f3 syscall=198 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5630.935103][ T35] audit: type=1326 audit(5629.725:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11762 comm="syz.4.1265" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5630.962227][ T35] audit: type=1326 audit(5629.755:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11762 comm="syz.4.1265" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5631.002412][ T35] audit: type=1326 audit(5629.775:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11762 comm="syz.4.1265" exe="/syz-executor" sig=0 arch=c00000f3 syscall=164 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5631.029984][ T35] audit: type=1326 audit(5629.775:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11762 comm="syz.4.1265" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5631.033573][ T35] audit: type=1326 audit(5629.825:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11762 comm="syz.4.1265" exe="/syz-executor" sig=0 arch=c00000f3 syscall=272 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5631.055060][ T35] audit: type=1326 audit(5629.835:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11762 comm="syz.4.1265" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5631.065150][ T35] audit: type=1326 audit(5629.855:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11762 comm="syz.4.1265" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5632.953545][T11765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5633.084759][T11765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5661.713534][ T35] audit: type=1326 audit(5660.505:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11776 comm="syz.3.1269" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5661.733965][ T35] audit: type=1326 audit(5660.515:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11776 comm="syz.3.1269" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5662.012201][ T35] audit: type=1326 audit(5660.795:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11776 comm="syz.3.1269" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5662.068039][ T35] audit: type=1326 audit(5660.845:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11776 comm="syz.3.1269" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5662.072466][ T35] audit: type=1326 audit(5660.865:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11776 comm="syz.3.1269" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5662.122718][ T35] audit: type=1326 audit(5660.905:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11776 comm="syz.3.1269" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5662.158392][ T35] audit: type=1326 audit(5660.945:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11776 comm="syz.3.1269" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5662.160684][ T35] audit: type=1326 audit(5660.955:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11776 comm="syz.3.1269" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5662.174329][ T35] audit: type=1326 audit(5660.965:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11776 comm="syz.3.1269" exe="/syz-executor" sig=0 arch=c00000f3 syscall=230 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5663.124555][ T35] audit: type=1326 audit(5661.915:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11776 comm="syz.3.1269" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5667.277985][T11782] netlink: 'syz.3.1271': attribute type 39 has an invalid length. [ 5668.920652][T11786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5668.951799][T11786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5698.094223][ T35] kauditd_printk_skb: 1 callbacks suppressed [ 5698.094772][ T35] audit: type=1326 audit(5696.885:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11813 comm="syz.3.1281" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5698.174678][ T35] audit: type=1326 audit(5696.965:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11813 comm="syz.3.1281" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5698.381256][ T35] audit: type=1326 audit(5697.155:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11813 comm="syz.3.1281" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5698.571202][ T35] audit: type=1326 audit(5697.355:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11813 comm="syz.3.1281" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5698.581014][ T35] audit: type=1326 audit(5697.365:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11813 comm="syz.3.1281" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5698.750446][ T35] audit: type=1326 audit(5697.495:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11813 comm="syz.3.1281" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5698.777828][ T35] audit: type=1326 audit(5697.565:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11813 comm="syz.3.1281" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5698.828657][ T35] audit: type=1326 audit(5697.595:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11813 comm="syz.3.1281" exe="/syz-executor" sig=0 arch=c00000f3 syscall=198 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5698.838375][ T35] audit: type=1326 audit(5697.615:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11813 comm="syz.3.1281" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5698.869964][ T35] audit: type=1326 audit(5697.645:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11813 comm="syz.3.1281" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 5720.031745][ T35] kauditd_printk_skb: 51 callbacks suppressed [ 5720.032206][ T35] audit: type=1326 audit(5718.815:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11830 comm="syz.4.1286" exe="/syz-executor" sig=9 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x0 [ 5741.115492][T11846] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1291'. [ 5741.132766][T11846] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1291'. [ 5748.164162][T11851] netlink: 'syz.3.1293': attribute type 39 has an invalid length. [ 5758.041647][T11862] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1296'. [ 5766.200312][T11878] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1297'. [ 5766.202950][T11878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1297'. [ 5772.851220][T11882] netlink: 'syz.4.1299': attribute type 39 has an invalid length. [ 5773.295359][T11884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5773.355419][T11884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5825.238898][T11909] netlink: 'syz.3.1306': attribute type 39 has an invalid length. [ 5839.181454][T11913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5839.523073][T11913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5867.044118][ T3526] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5868.102538][ T3526] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5868.904023][ T3526] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5869.619207][ T3526] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5880.930499][ T3526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 5881.073772][ T3526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 5881.232396][ T3526] bond0 (unregistering): Released all slaves [ 5893.189615][ T3526] hsr_slave_0: left promiscuous mode [ 5893.281841][ T3526] hsr_slave_1: left promiscuous mode [ 5894.047066][ T3526] veth1_macvtap: left promiscuous mode [ 5894.049061][ T3526] veth0_macvtap: left promiscuous mode [ 5894.059087][ T3526] veth1_vlan: left promiscuous mode [ 5894.061177][ T3526] veth0_vlan: left promiscuous mode [ 5895.150314][T11953] netlink: 'syz.3.1311': attribute type 39 has an invalid length. [ 5919.367367][T11962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5919.399814][T11962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5963.421020][T11924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 5963.723547][T11924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 5965.389871][T12139] netlink: 'syz.3.1315': attribute type 39 has an invalid length. [ 5969.290746][T12165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5969.320420][T12165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5984.673179][T11924] hsr_slave_0: entered promiscuous mode [ 5984.738291][T11924] hsr_slave_1: entered promiscuous mode [ 5984.900347][T11924] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 5984.903086][T11924] Cannot create hsr debugfs directory [ 5996.320770][T11924] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 5996.597576][T11924] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 5996.902335][T11924] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 5997.775039][T11924] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 6017.762296][T11924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 6034.421671][T12355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6034.529189][T12355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6079.865057][T12411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6079.922221][T12411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6086.172394][T11924] veth0_vlan: entered promiscuous mode [ 6086.974081][T11924] veth1_vlan: entered promiscuous mode [ 6088.018921][T11924] veth0_macvtap: entered promiscuous mode [ 6088.683583][T11924] veth1_macvtap: entered promiscuous mode [ 6092.284587][T11924] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 6092.289535][T11924] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 6092.290935][T11924] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 6092.292266][T11924] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 6112.700142][T12428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6112.728814][T12428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6113.539939][T12432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6113.550982][T12432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6142.323651][T12442] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1331'. [ 6150.236661][T12454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6150.300276][T12454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6152.317808][T12458] syz.3.1335: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 6152.324472][T12458] CPU: 0 UID: 0 PID: 12458 Comm: syz.3.1335 Not tainted 6.16.0-rc1-syzkaller-gfda589c28604 #0 PREEMPT [ 6152.324869][T12458] Hardware name: riscv-virtio,qemu (DT) [ 6152.325266][T12458] Call Trace: [ 6152.325490][T12458] [] dump_backtrace+0x2e/0x3c [ 6152.326019][T12458] [] show_stack+0x30/0x3c [ 6152.326289][T12458] [] dump_stack_lvl+0x12e/0x1a6 [ 6152.326689][T12458] [] dump_stack+0x1c/0x24 [ 6152.327053][T12458] [] warn_alloc+0x170/0x292 [ 6152.327397][T12458] [] __vmalloc_node_range_noprof+0xe62/0x11b0 [ 6152.327831][T12458] [] vmalloc_user_noprof+0xfc/0x128 [ 6152.328242][T12458] [] xskq_create+0xf2/0x1ae [ 6152.329034][T12458] [] xsk_setsockopt+0x338/0x908 [ 6152.329609][T12458] [] do_sock_setsockopt+0x208/0x400 [ 6152.330177][T12458] [] __sys_setsockopt+0x142/0x1e6 [ 6152.330861][T12458] [] __riscv_sys_setsockopt+0xa6/0x114 [ 6152.331543][T12458] [] syscall_handler+0x94/0x118 [ 6152.332048][T12458] [] do_trap_ecall_u+0x396/0x530 [ 6152.332625][T12458] [] handle_exception+0x146/0x152 [ 6152.346797][T12458] Mem-Info: [ 6152.348185][T12458] active_anon:4173 inactive_anon:0 isolated_anon:0 [ 6152.348185][T12458] active_file:487 inactive_file:36327 isolated_file:0 [ 6152.348185][T12458] unevictable:768 dirty:10 writeback:0 [ 6152.348185][T12458] slab_reclaimable:2865 slab_unreclaimable:32409 [ 6152.348185][T12458] mapped:12643 shmem:849 pagetables:1033 [ 6152.348185][T12458] sec_pagetables:0 bounce:0 [ 6152.348185][T12458] kernel_misc_reclaimable:0 [ 6152.348185][T12458] free:214579 free_pcp:2613 free_cma:52608 [ 6152.351568][T12458] Node 0 active_anon:16692kB inactive_anon:0kB active_file:1948kB inactive_file:145308kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:50572kB dirty:40kB writeback:0kB shmem:3396kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7776kB pagetables:4132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 6152.353915][T12458] Node 0 DMA32 free:858316kB boost:0kB min:22528kB low:28160kB high:33792kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16692kB inactive_anon:0kB active_file:1948kB inactive_file:145308kB unevictable:3072kB writepending:40kB present:2097152kB managed:1431536kB mlocked:0kB bounce:0kB free_pcp:10452kB local_pcp:2904kB free_cma:210432kB [ 6152.358021][T12458] lowmem_reserve[]: 0 0 0 [ 6152.360230][T12458] Node 0 DMA32: 601*4kB (UME) 243*8kB (UME) 243*16kB (ME) 287*32kB (UME) 215*64kB (UM) 50*128kB (UME) 20*256kB (UME) 15*512kB (UMEC) 15*1024kB (UMEC) 1*2048kB (E) 193*4096kB (MC) = 858316kB [ 6152.371843][T12458] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 6152.373664][T12458] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 6152.377140][T12458] 37664 total pagecache pages [ 6152.378074][T12458] 0 pages in swap cache [ 6152.379165][T12458] Free swap = 124996kB [ 6152.380508][T12458] Total swap = 124996kB [ 6152.381846][T12458] 524288 pages RAM [ 6152.382733][T12458] 0 pages HighMem/MovableOnly [ 6152.383575][T12458] 166404 pages reserved [ 6152.384354][T12458] 52736 pages cma reserved [ 6155.231236][T12460] netlink: 'syz.3.1336': attribute type 39 has an invalid length. [ 6164.049127][T12469] ======================================================= [ 6164.049127][T12469] WARNING: The mand mount option has been deprecated and [ 6164.049127][T12469] and is ignored by this kernel. Remove the mand [ 6164.049127][T12469] option from the mount to silence this warning. [ 6164.049127][T12469] ======================================================= [ 6194.349724][T12479] netlink: 'syz.3.1342': attribute type 39 has an invalid length. [ 6197.797960][T12484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6197.823051][T12484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6212.628982][T12496] netlink: 'syz.3.1349': attribute type 39 has an invalid length. [ 6221.892834][T12504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6221.913563][T12504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6222.508361][T12509] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1354'. [ 6272.660479][T12550] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1368'. [ 6296.437241][T12566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6296.489832][T12566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6298.469645][T12570] loop1: detected capacity change from 0 to 524255232 [ 6307.384989][T12581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6307.461886][T12581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6309.203214][T12585] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1376'. [ 6318.807480][T12584] mmap: syz.5.1376 (12584): VmData 17723392 exceed data ulimit 15. Update limits or use boot option ignore_rlimit_data. [ 6336.828843][T12601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6336.884882][T12601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6345.201842][T12606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6345.288798][T12606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6353.699734][T12617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6353.705637][T12617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6363.257422][T12633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6363.331752][T12633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6368.867306][T12637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6368.913076][T12637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6381.767610][T12648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6381.833969][T12648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6390.914021][T12663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6390.985525][T12663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6413.916996][T12683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6413.950842][T12683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6414.319600][T12688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6414.364956][T12688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6434.187383][T12717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6434.192928][T12717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6449.858313][T12733] syzkaller0: entered promiscuous mode [ 6449.859624][T12733] syzkaller0: entered allmulticast mode [ 6482.990908][T12767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6483.070217][T12767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6510.049226][T12793] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1426'. [ 6548.903068][T12810] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1432'. [ 6589.919210][T12827] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1440'. [ 6645.073273][T12857] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1453'. [ 6656.432020][T12877] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1458'. [ 6662.339104][ T35] audit: type=1326 audit(6661.105:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12882 comm="syz.3.1460" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 6662.342507][ T35] audit: type=1326 audit(6661.125:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12882 comm="syz.3.1460" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 6662.365416][ T35] audit: type=1326 audit(6661.155:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12882 comm="syz.3.1460" exe="/syz-executor" sig=0 arch=c00000f3 syscall=199 compat=0 ip=0xdb95a code=0x7ffc0000 [ 6662.374751][ T35] audit: type=1326 audit(6661.165:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12882 comm="syz.3.1460" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 6662.390477][ T35] audit: type=1326 audit(6661.175:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12882 comm="syz.3.1460" exe="/syz-executor" sig=0 arch=c00000f3 syscall=203 compat=0 ip=0xdb95a code=0x7ffc0000 [ 6662.477937][ T35] audit: type=1326 audit(6661.185:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12882 comm="syz.3.1460" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 6662.497239][ T35] audit: type=1326 audit(6661.245:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12882 comm="syz.3.1460" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 6662.516667][ T35] audit: type=1326 audit(6661.285:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12882 comm="syz.3.1460" exe="/syz-executor" sig=0 arch=c00000f3 syscall=198 compat=0 ip=0xdb95a code=0x7ffc0000 [ 6662.521478][ T35] audit: type=1326 audit(6661.305:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12882 comm="syz.3.1460" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 6662.525018][ T35] audit: type=1326 audit(6661.305:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12882 comm="syz.3.1460" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb95a code=0x7ffc0000 [ 6663.743436][T12885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6663.781363][T12885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6674.602099][T12894] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1464'. [ 6697.543001][T12905] syzkaller0: entered promiscuous mode [ 6697.576988][T12905] syzkaller0: entered allmulticast mode [ 6699.165181][T12915] netlink: 'syz.3.1470': attribute type 39 has an invalid length. [ 6724.479860][T12929] netlink: 'syz.5.1475': attribute type 39 has an invalid length. [ 6732.132715][T12938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6732.152922][T12938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6732.509165][T12939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6732.563002][T12939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6732.692273][T12797] hid-generic 00A0:0006:0003.0015: unknown main item tag 0x0 [ 6732.694301][T12797] hid-generic 00A0:0006:0003.0015: unknown main item tag 0x0 [ 6732.700397][T12797] hid-generic 00A0:0006:0003.0015: unknown main item tag 0x0 [ 6732.701482][T12797] hid-generic 00A0:0006:0003.0015: unknown main item tag 0x0 [ 6732.705353][T12797] hid-generic 00A0:0006:0003.0015: unknown main item tag 0x0 [ 6732.707646][T12797] hid-generic 00A0:0006:0003.0015: unknown main item tag 0x0 [ 6732.708598][T12797] hid-generic 00A0:0006:0003.0015: unknown main item tag 0x0 [ 6732.709519][T12797] hid-generic 00A0:0006:0003.0015: unknown main item tag 0x0 [ 6732.710458][T12797] hid-generic 00A0:0006:0003.0015: unknown main item tag 0x0 [ 6732.763281][T12797] hid-generic 00A0:0006:0003.0015: hidraw0: HID v0.05 Device [syz1] on syz0 [ 6747.411423][T12955] netlink: 'syz.5.1481': attribute type 39 has an invalid length. [ 6753.068575][T12959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6753.100901][T12959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6761.679974][T12966] netlink: 'syz.5.1486': attribute type 39 has an invalid length. [ 6762.223206][T12967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6762.301506][T12967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6773.600988][T12977] binder: 12976:12977 ioctl c0306201 0 returned -14 [ 6774.643152][T12979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6774.669407][T12979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6788.079992][T12988] binder: 12987:12988 unknown command 0 [ 6788.081415][T12988] binder: 12987:12988 ioctl c0306201 200000000080 returned -22 [ 6789.314164][T12990] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 6790.643877][T12992] binder: 12991:12992 ioctl c0306201 0 returned -14 [ 6790.899293][T12994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6790.964955][T12994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6806.629540][T13012] mmap: syz.3.1500 (13012) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 6820.045192][T13016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6820.115677][T13016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6852.879241][T13032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6852.927547][T13032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6862.061516][T13039] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1510'. [ 6864.177981][T13043] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1511'. [ 6868.418057][T13045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6868.464271][T13045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6885.921823][T13065] random: crng reseeded on system resumption [ 6895.957060][T13075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6895.995484][T13075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6907.953010][T13087] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 6922.603300][T13102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6922.632454][T13102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6926.740854][T13106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1531'. [ 6938.129859][T13119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6938.330991][T13119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6940.499060][T13123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6940.540020][T13123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6948.853713][T13127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6948.912044][T13127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6950.168721][T13131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6950.255153][T13131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6959.706772][T13135] xt_CT: No such helper "snmp" [ 6962.863886][T13143] [ 6962.864647][T13143] ====================================================== [ 6962.865499][T13143] WARNING: possible circular locking dependency detected [ 6962.866336][T13143] 6.16.0-rc1-syzkaller-gfda589c28604 #0 Not tainted [ 6962.867507][T13143] ------------------------------------------------------ [ 6962.868561][T13143] syz.5.1541/13143 is trying to acquire lock: [ 6962.870324][T13143] ffffaf801a261a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_open+0x3c0/0x6fe [ 6962.872398][T13143] [ 6962.872398][T13143] but task is already holding lock: [ 6962.873005][T13143] ffffffff88e269e8 (nbd_index_mutex){+.+.}-{4:4}, at: nbd_open+0x98/0x6fe [ 6962.874473][T13143] [ 6962.874473][T13143] which lock already depends on the new lock. [ 6962.874473][T13143] [ 6962.875251][T13143] [ 6962.875251][T13143] the existing dependency chain (in reverse order) is: [ 6962.876157][T13143] [ 6962.876157][T13143] -> #3 (nbd_index_mutex){+.+.}-{4:4}: [ 6962.877750][T13143] lock_acquire+0x1ac/0x448 [ 6962.878621][T13143] __mutex_lock+0x166/0x1292 [ 6962.879411][T13143] mutex_lock_nested+0x14/0x1c [ 6962.880138][T13143] nbd_open+0x98/0x6fe [ 6962.880895][T13143] blkdev_get_whole+0x8a/0x266 [ 6962.881707][T13143] bdev_open+0x292/0xce6 [ 6962.882365][T13143] blkdev_open+0x264/0x39a [ 6962.883089][T13143] do_dentry_open+0x97e/0x171e [ 6962.883837][T13143] vfs_open+0xbe/0x380 [ 6962.884509][T13143] path_openat+0x1bd8/0x2a82 [ 6962.885247][T13143] do_filp_open+0x19c/0x380 [ 6962.886076][T13143] do_sys_openat2+0x11a/0x1c2 [ 6962.887097][T13143] __riscv_sys_openat+0x178/0x1fe [ 6962.887966][T13143] syscall_handler+0x94/0x118 [ 6962.888750][T13143] do_trap_ecall_u+0x396/0x530 [ 6962.889531][T13143] handle_exception+0x146/0x152 [ 6962.890442][T13143] [ 6962.890442][T13143] -> #2 (&disk->open_mutex){+.+.}-{4:4}: [ 6962.891725][T13143] lock_acquire+0x1ac/0x448 [ 6962.892519][T13143] __mutex_lock+0x166/0x1292 [ 6962.893218][T13143] mutex_lock_nested+0x14/0x1c [ 6962.893920][T13143] __del_gendisk+0x132/0xac6 [ 6962.894734][T13143] del_gendisk+0xf6/0x19a [ 6962.895587][T13143] loop_control_ioctl+0x4ce/0x600 [ 6962.896460][T13143] __riscv_sys_ioctl+0x180/0x1e4 [ 6962.897330][T13143] syscall_handler+0x94/0x118 [ 6962.898060][T13143] do_trap_ecall_u+0x396/0x530 [ 6962.898940][T13143] handle_exception+0x146/0x152 [ 6962.899889][T13143] [ 6962.899889][T13143] -> #1 (&set->update_nr_hwq_lock){++++}-{4:4}: [ 6962.901286][T13143] lock_acquire+0x1ac/0x448 [ 6962.902059][T13143] down_write+0x9c/0x19a [ 6962.902811][T13143] blk_mq_update_nr_hw_queues+0x3e/0xb86 [ 6962.903549][T13143] nbd_start_device+0x140/0xb2c [ 6962.904456][T13143] nbd_genl_connect+0xae0/0x1b24 [ 6962.905292][T13143] genl_family_rcv_msg_doit+0x206/0x2e6 [ 6962.906148][T13143] genl_rcv_msg+0x514/0x78e [ 6962.907093][T13143] netlink_rcv_skb+0x206/0x3be [ 6962.907920][T13143] genl_rcv+0x36/0x4c [ 6962.908695][T13143] netlink_unicast+0x4f0/0x82c [ 6962.909779][T13143] netlink_sendmsg+0x85e/0xdd6 [ 6962.910683][T13143] __sock_sendmsg+0xcc/0x160 [ 6962.911471][T13143] ____sys_sendmsg+0x63e/0x79c [ 6962.912265][T13143] ___sys_sendmsg+0x144/0x1e6 [ 6962.913094][T13143] __sys_sendmsg+0x188/0x246 [ 6962.913984][T13143] __riscv_sys_sendmsg+0x70/0xa2 [ 6962.915027][T13143] syscall_handler+0x94/0x118 [ 6962.915977][T13143] do_trap_ecall_u+0x396/0x530 [ 6962.916849][T13143] handle_exception+0x146/0x152 [ 6962.917700][T13143] [ 6962.917700][T13143] -> #0 (&nbd->config_lock){+.+.}-{4:4}: [ 6962.918979][T13143] check_noncircular+0x132/0x146 [ 6962.919783][T13143] __lock_acquire+0x12b2/0x24ea [ 6962.920651][T13143] lock_acquire+0x1ac/0x448 [ 6962.921512][T13143] __mutex_lock+0x166/0x1292 [ 6962.922224][T13143] mutex_lock_nested+0x14/0x1c [ 6962.923149][T13143] nbd_open+0x3c0/0x6fe [ 6962.924464][T13143] blkdev_get_whole+0x8a/0x266 [ 6962.925787][T13143] bdev_open+0x292/0xce6 [ 6962.926531][T13143] blkdev_open+0x264/0x39a [ 6962.927322][T13143] do_dentry_open+0x97e/0x171e [ 6962.928001][T13143] vfs_open+0xbe/0x380 [ 6962.928689][T13143] path_openat+0x1bd8/0x2a82 [ 6962.929442][T13143] do_filp_open+0x19c/0x380 [ 6962.930325][T13143] do_sys_openat2+0x11a/0x1c2 [ 6962.931522][T13143] __riscv_sys_openat+0x178/0x1fe [ 6962.932557][T13143] syscall_handler+0x94/0x118 [ 6962.933287][T13143] do_trap_ecall_u+0x396/0x530 [ 6962.934170][T13143] handle_exception+0x146/0x152 [ 6962.935226][T13143] [ 6962.935226][T13143] other info that might help us debug this: [ 6962.935226][T13143] [ 6962.936160][T13143] Chain exists of: [ 6962.936160][T13143] &nbd->config_lock --> &disk->open_mutex --> nbd_index_mutex [ 6962.936160][T13143] [ 6962.937996][T13143] Possible unsafe locking scenario: [ 6962.937996][T13143] [ 6962.938674][T13143] CPU0 CPU1 [ 6962.939252][T13143] ---- ---- [ 6962.939806][T13143] lock(nbd_index_mutex); [ 6962.940992][T13143] lock(&disk->open_mutex); [ 6962.942130][T13143] lock(nbd_index_mutex); [ 6962.943065][T13143] lock(&nbd->config_lock); [ 6962.943998][T13143] [ 6962.943998][T13143] *** DEADLOCK *** [ 6962.943998][T13143] [ 6962.944926][T13143] 2 locks held by syz.5.1541/13143: [ 6962.946075][T13143] #0: ffffaf801a214358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x3d0/0xce6 [ 6962.948810][T13143] #1: ffffffff88e269e8 (nbd_index_mutex){+.+.}-{4:4}, at: nbd_open+0x98/0x6fe [ 6962.950784][T13143] [ 6962.950784][T13143] stack backtrace: [ 6962.951475][T13143] CPU: 1 UID: 0 PID: 13143 Comm: syz.5.1541 Not tainted 6.16.0-rc1-syzkaller-gfda589c28604 #0 PREEMPT [ 6962.951792][T13143] Hardware name: riscv-virtio,qemu (DT) [ 6962.951904][T13143] Call Trace: [ 6962.952008][T13143] [] dump_backtrace+0x2e/0x3c [ 6962.952323][T13143] [] show_stack+0x30/0x3c [ 6962.952574][T13143] [] dump_stack_lvl+0x12e/0x1a6 [ 6962.952937][T13143] [] dump_stack+0x1c/0x24 [ 6962.953291][T13143] [] print_circular_bug+0x254/0x29a [ 6962.953681][T13143] [] check_noncircular+0x132/0x146 [ 6962.954061][T13143] [] __lock_acquire+0x12b2/0x24ea [ 6962.954453][T13143] [] lock_acquire+0x1ac/0x448 [ 6962.954878][T13143] [] __mutex_lock+0x166/0x1292 [ 6962.955284][T13143] [] mutex_lock_nested+0x14/0x1c [ 6962.955738][T13143] [] nbd_open+0x3c0/0x6fe [ 6962.956366][T13143] [] blkdev_get_whole+0x8a/0x266 [ 6962.957028][T13143] [] bdev_open+0x292/0xce6 [ 6962.957433][T13143] [] blkdev_open+0x264/0x39a [ 6962.957855][T13143] [] do_dentry_open+0x97e/0x171e [ 6962.958288][T13143] [] vfs_open+0xbe/0x380 [ 6962.958729][T13143] [] path_openat+0x1bd8/0x2a82 [ 6962.959314][T13143] [] do_filp_open+0x19c/0x380 [ 6962.959866][T13143] [] do_sys_openat2+0x11a/0x1c2 [ 6962.960323][T13143] [] __riscv_sys_openat+0x178/0x1fe [ 6962.960786][T13143] [] syscall_handler+0x94/0x118 [ 6962.961295][T13143] [] do_trap_ecall_u+0x396/0x530 [ 6962.961879][T13143] [] handle_exception+0x146/0x152 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 6963.427930][T13144] binder: BINDER_SET_CONTEXT_MGR already set [ 6963.429097][T13144] binder: 13142:13144 ioctl 4018620d 200000000040 returned -16 [ 6965.140380][ T4370] block nbd5: Receive control failed (result -32) [ 6965.199944][T13143] block nbd5: shutting down sockets [ 6973.007830][T11919] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6973.770234][T11919] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6974.804950][T11919] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6975.234880][T11919] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6981.058255][T11919] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 6981.115517][T11919] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 6981.202258][T11919] bond0 (unregistering): Released all slaves [ 6986.000123][T11919] hsr_slave_0: left promiscuous mode [ 6986.046057][T11919] hsr_slave_1: left promiscuous mode [ 6986.359720][T11919] veth1_macvtap: left promiscuous mode [ 6986.361828][T11919] veth0_macvtap: left promiscuous mode [ 6986.364561][T11919] veth1_vlan: left promiscuous mode [ 6986.378331][T11919] veth0_vlan: left promiscuous mode VM DIAGNOSIS: 20:34:23 Registers: info registers vcpu 0 CPU#0 V = 0 pc ffffffff802d3192 mhartid 0000000000000000 mstatus 0000000a000001a2 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000000 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000444 medeleg 0000000000f0b509 hedeleg 000000000000b109 mtvec 00000000800004f0 stvec ffffffff8634b694 vstvec 0000000000000000 mepc ffffffff8008eba2 sepc ffffffff80360950 vsepc 0000000000000000 mcause 0000000000000009 scause 8000000000000009 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 000000008004a000 sscratch 0000000000000000 satp 90b4100000099457 x0/zero 0000000000000000 x1/ra ffffffff81da6420 x2/sp ffff8f8000005d60 x3/gp ffffffff89c83ca0 x4/tp ffffaf8018aab480 x5/t0 ffffaf801b2e5020 x6/t1 0000000000000001 x7/t2 ffffffffb0089055 x8/s0 ffff8f8000005d90 x9/s1 ffffaf801a0eca00 x10/a0 ffffaf801a0eca38 x11/a1 0000000000000000 x12/a2 0000000000f00000 x13/a3 ffffffff81da6420 x14/a4 1ffff5f00341d947 x15/a5 ffff8f8000069004 x16/a6 0000000000f00000 x17/a7 1ffff1f000000b98 x18/s2 0000000000000001 x19/s3 1ffff5f00341d948 x20/s4 0000000000000003 x21/s5 0000000000000000 x22/s6 ffffaf801b308800 x23/s7 1ffff5f003661118 x24/s8 00000000000088a2 x25/s9 0000000000000040 x26/s10 ffffaf801b3088c4 x27/s11 0000000000000000 x28/t3 fffff1ef00000dfc x29/t4 fffff5ef06c4f02c x30/t5 fffff5ef06c4f02d x31/t6 ffffaf8035ac8c08 fcsr 0000000000000000 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 CPU#1 V = 0 pc ffffffff80305412 mhartid 0000000000000001 mstatus 0000000a000000a0 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000022 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000444 medeleg 0000000000f0b509 hedeleg 000000000000b109 mtvec 00000000800004f0 stvec ffffffff8634b694 vstvec 0000000000000000 mepc ffffffff8327766a sepc ffffffff816fb9d8 vsepc 0000000000000000 mcause 8000000000000003 scause 8000000000000005 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 0000000080048000 sscratch 0000000000000000 satp 90b40000000a5aa2 x0/zero 0000000000000000 x1/ra ffffffff8030540e x2/sp ffff8f80051c6c40 x3/gp ffffffff89c83ca0 x4/tp ffffaf8012adcec0 x5/t0 35312e352e7a7973 x6/t1 fffffffef105d124 x7/t2 3435312e352e7a79 x8/s0 ffff8f80051c6c80 x9/s1 ffffffff88ff2940 x10/a0 0000000000000005 x11/a1 0000000000000000 x12/a2 0000000000080000 x13/a3 ffffffff8030540e x14/a4 ffff8f8006e66450 x15/a5 000000000002d450 x16/a6 0000000000000003 x17/a7 ffffffff882e8923 x18/s2 0000000200000020 x19/s3 0000000000000000 x20/s4 0000000000000000 x21/s5 0000000000000000 x22/s6 ffff8f80051c6d40 x23/s7 ffffffff88ff2998 x24/s8 1ffffffff11fe534 x25/s9 ffffffff88ff29a0 x26/s10 dfffffff00000000 x27/s11 ffff8f80051c6da0 x28/t3 ffffffff90e45f77 x29/t4 fffffffef105d124 x30/t5 fffffffef105d125 x31/t6 ffffffff90e45f77 fcsr 0000000000000000 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000