last executing test programs: 10.387981003s ago: executing program 3 (id=3853): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0xfffffffffffffffe, 0x101000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) socket(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getuid() sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) fcntl$lock(r3, 0x5, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) r4 = fanotify_init(0x202, 0x101000) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0d, 0x0) dup2(r4, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x200) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_usb_connect(0x0, 0x64, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100390a240108000b020102082407010500070e11240606060509000600040007000300390c2402050302060254df000a092403050001031f0409240303"], 0x0) ioctl$PPPIOCBRIDGECHAN(r1, 0x40047435, &(0x7f00000000c0)=0x7) close_range(r1, 0xffffffffffffffff, 0x2) 7.630244003s ago: executing program 0 (id=3863): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0600000004000000101000008900000000000000", @ANYRESDEC], 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "16"}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000005000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="05005b"], 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x24, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, 'k'}]}, 0x24}}, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ssse3\x00'}, 0x58) r11 = accept4(r10, 0x0, 0x0, 0x0) sendmmsg$inet6(r11, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002f00)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x24000802) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa88800000000500012800e0001006970366772657461700000003c000280080014000e000000060003000700000008000d0005000000060002001ef7000005000b000f00000006000200030000000800010026"], 0x70}}, 0x0) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r13}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r13}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x1e, &(0x7f0000000000)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @void, {@can={0xc, {{0x1, 0x0, 0x1}, 0x2, 0x2, 0x0, 0x0, "5ef42005fbf3ee39"}}}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 7.437763844s ago: executing program 2 (id=3864): socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) syz_open_dev$usbfs(0x0, 0xfffffffffffffffb, 0x40082) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/asound/timers\x00', 0x0, 0x0) read$char_usb(r0, &(0x7f0000001840)=""/4090, 0xffa) socket(0x3, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) renameat(r0, &(0x7f0000000240)='./file0/file0\x00', r0, &(0x7f0000000100)='./file0\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x81}) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x2) r5 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 6.329976149s ago: executing program 3 (id=3870): syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff0000000071106b000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x15) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x2) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) ptrace(0x11, r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x18, 0x80000, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ptrace$poke(0x5, r1, &(0x7f0000000080), 0x4) 5.976981922s ago: executing program 3 (id=3871): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) socket(0x40000000015, 0x5, 0x0) (async) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xca}, 0x1c) (async) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xca}, 0x1c) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) (async) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) (async) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 5.621750488s ago: executing program 1 (id=3873): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000740)='|', 0x1, 0x0, &(0x7f00000007c0)={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) setsockopt(r0, 0x84, 0x80, &(0x7f0000000080)="1a4f30d089f5bd5b", 0x8) 5.562180412s ago: executing program 1 (id=3875): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, r0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$video4linux(&(0x7f00000007c0), 0x5, 0x20040) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f00000000c0)={0x0, 0xe7, {0x1, 0x1, 0x101c, 0x9, 0x0, 0x0, 0x5, 0x3}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x68, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}, @IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00'}]}}}]}, 0x68}}, 0x0) r6 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r7 = openat$vcs(0xffffff9c, &(0x7f0000000000), 0x121002, 0x0) lseek(r7, 0x7fffeffc, 0x4) ftruncate(r6, 0x2007ffb) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, r9, 0x331, 0x0, 0x0, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) close(r6) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) 5.507920173s ago: executing program 0 (id=3876): socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (rerun: 64) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) r1 = eventfd(0x39b) (async) r2 = eventfd(0xf7) (async) r3 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async, rerun: 32) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x8) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r5, @ANYRES64=r2, @ANYRESOCT=0x0, @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) (async) syz_usb_control_io(r3, 0x0, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="8800000010001fff26bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="d0d2b19500000000680012800e0001006970366772657461700000005400028008000d009000000004001200050016000200000008000100", @ANYRES32=0x0, @ANYBLOB="050016000200000005000b00ff000000060010004e2300001400070000000000000002"], 0x88}}, 0x24004880) (async) syz_usb_control_io$printer(r3, 0x0, 0x0) (async) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) (async) syz_usb_control_io$uac1(r3, 0x0, 0x0) (async) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\f\x00\b\x00'], 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r2}) (async) r7 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/user\x00') pwritev(r7, &(0x7f0000000280)=[{&(0x7f0000000500)="2c5c1a78185115ff0c7b04431fe574640252ba7520cad7142afc915f213a7cbca70c2c6e05a6580d696836576662646d519ef6e947b5319a94123a015f0cd6e958916ced8058d5902fcbbe0438f1b4147f370113c6621e931dc7158943fef3fe0e53a2480e1992d3ca543324131e22d0e376e6c76883dd8fe4bba2978eb984f2e95a3b981f81cb13e02556147b60048b5531fa8406bc72100045cda2029d9fa65ca6ec8f917409e3bfe3bc773aeb37f595a12209190058d3724e918c7264d28cdc00e3a18933ca08d0a1fd1e40b0cadb3df15af3aa5d785279fe3163686d05bac89f88468cb1e78fb76249ca67", 0xed}, {&(0x7f0000000240)="7a4240d086a240ceb975d699766cbc2ca755c6b3eee620fa3a17b5fea83249132fbdbca8", 0x24}], 0x2, 0x4, 0x8) (async) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) 5.413968054s ago: executing program 4 (id=3877): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0xd00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 5.343810298s ago: executing program 4 (id=3878): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, 0x0, 0x8) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x0) openat$audio(0xffffff9c, 0x0, 0x80, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x40) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000004c0)={0x2e, 0x1c, '\x00', [@padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x5}, @generic={0x3, 0xda, "9c421ca6a745088d3260a21ad95bec103b2b76c9e7447a8f68bae8268e95eb318a1dd54344a76783c123ef44f1f767cbb932375c7128e21b2458c04d896d0a374bd3968d844d3ef6c0395fb5c372c2c07bdec703ca20d2f419309df5468d697e048e06ccf678a71d2fcbc472aaab5318a2d172d99568f82641fa2ce53812481cae4bcac40a40356ecb4d335c76dfa3416fa21263d1bc4e600cd7d68313f6adb0d0376659e67e173204fcbebfff0baf55afd0fac57c955e44d6cf277c99d131f07f6053169fb3bf3a42ce598fe8679cf35d33cd1ae63fafc0a689"}]}, 0xf0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0xee24, 0xffffffffffffffff, 0x0, 0x3}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000380)={0x8, 0x0, 0x3, 0x0, 0x6}) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000001c0)=@multiplanar_fd={0x7, 0x2, 0x4, 0x20, 0xa, {0x0, 0x2710}, {0x4, 0x0, 0x5, 0x3, 0x14, 0x6, "00000300"}, 0x1b1, 0x4, {0x0}, 0xedc5}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = io_uring_setup(0x46a8, &(0x7f0000000080)={0x0, 0x5d50, 0x0, 0x0, 0x3c1}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00y\x00\x00'], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120001", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETSTEERINGEBPF(r6, 0x800454e0, &(0x7f0000002180)=r8) close_range(r5, 0xffffffffffffffff, 0x0) 5.132438857s ago: executing program 0 (id=3879): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000240)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000200)=[{r2, 0x6600}, {r1, 0x200}], 0x2, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.293828191s ago: executing program 1 (id=3880): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000007000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xf0}}, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000acd000/0x400000)=nil) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) syz_kvm_add_vcpu$x86(r3, &(0x7f0000000080)={0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000007300000000000000c744240005000000c7442402d1259bb7c7442406000000000f01145f"], 0x73}) syz_kvm_add_vcpu$x86(r3, &(0x7f0000000000)={0x0, &(0x7f00000004c0)=[@uexit={0x0, 0x18, 0x100}, @cpuid={0x2, 0x18, {0x8ada, 0x3}}, @code={0x1, 0x4d, {"c4a1a15e27400f01c3450fc73866b8dc000f00d00f01cab9800000c00f3235004000000f3066b809000f00d83e410f00d1420f01df66ba4200b07dee"}}, @uexit={0x0, 0x18, 0x8}, @cpuid={0x2, 0x18, {0x8000, 0x400}}, @cpuid={0x2, 0x18, {0x5, 0x2b}}, @uexit={0x0, 0x18}, @uexit={0x0, 0x18, 0x6266}, @cpuid={0x2, 0x18, {0x7ff, 0x6}}, @cpuid={0x2, 0x18, {0x8000, 0x5}}, @uexit={0x0, 0x18, 0x800}, @cpuid={0x2, 0x18, {0x7, 0x80000000}}, @code={0x1, 0x68, {"0f35410fca410f01c3c74424001c000000c74424028f000000c7442406000000000f011424650f01cac4017e12e948b804000000000000000f23c00f21f83502000b000f23f8459b66ba4000ed67440f001c4d0f000000"}}, @cpuid={0x2, 0x18, {0xfffffffc, 0x9}}, @cpuid={0x2, 0x18, {0x0, 0x5}}, @code={0x1, 0x60, {"440f518020000000b93d020000b804000000ba000000000f30460f01f866b8fc008ee0c482ddb9edf466ba2000b800000000efc481fb2c6700c744240092000000c7442402f4940000ff1c240f01c2"}}, @code={0x1, 0x5b, {"c744240089000000c744240298ce0000ff1c240f20c035000000400f22c066420f64d566400fc7b1283700002e0f0666b81e008ed066460f388021420f2227c4e17f7c1266b804008ed8"}}, @code={0x1, 0x50, {"0f78db660f38801c0a650f01dfb9800000c00f3235002000000f3066ba4300b000ee36646666264010c3674b0fc72926f24280e6d9470f09b9a00900000f32"}}, @code={0x1, 0x40, {"362e360f01c426fec966b831018ed8660f38817516f4460f233f643e0f001ff30fc776ce3e430f2246c4e2b5de71aa"}}, @code={0x1, 0x47, {"643e0f070fdb730f3e660f14b9080000000f07f26cc4018d15a21d4d648b460f420cd2430f1f9ff6000000450f79f30f01bb171ff78b"}}, @cpuid={0x2, 0x18, {0x8, 0x101}}, @uexit={0x0, 0x18, 0x4f0}, @code={0x1, 0x66, {"f2650f32c44179119c6f01000000450f234d3e0f01c4440f20c0350f000000440f22c066baf80cb8be824283ef66bafc0c66ed66b825008ed04720a098a96f4126f30fc7755c66baf80cb8ae895f85ef66bafc0cec"}}, @cpuid={0x2, 0x18, {0xb1, 0x1ff}}, @cpuid={0x2, 0x18, {0x8, 0x401}}], 0x445}) 4.293507045s ago: executing program 3 (id=3881): syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da"], 0x0) fsopen(&(0x7f00000000c0)='affs\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) bind$rds(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_ACT={0x4}]}}]}, 0x38}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f0000002940)=[{{&(0x7f0000000180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, &(0x7f0000003cc0), 0x0, &(0x7f0000002a00)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000001540)=@xdp, 0x80, &(0x7f0000002800)=[{&(0x7f00000015c0)=""/135, 0x87}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000002680)=""/187, 0xbb}, {&(0x7f0000002740)=""/126, 0x7e}], 0x4, &(0x7f0000002840)=""/242, 0xf2}, 0x5}], 0x2, 0x161, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x9}, 0x0) r7 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) syz_usb_connect(0x2, 0x5f, 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) add_key(0x0, 0x0, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 4.278424666s ago: executing program 2 (id=3882): ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = syz_io_uring_setup(0x184, &(0x7f0000000080)={0x0, 0x0, 0x13100, 0x4}, &(0x7f0000000480)=0x0, &(0x7f0000000000)=0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x5, &(0x7f0000000200)={0x77359400}, 0x1, 0x4}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000180)={0x84, @local, 0x11, 0x3, 'ovf\x00', 0x3f, 0x4, 0x7f}, 0x2c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d5c, 0x12d5c}}, 0x44) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r5, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0xf, 0x1000e1b2, 0x1}}, 0x44) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000140)={0x5, r0, 0x1c, {0x9, 0x1}, 0x6}, 0x1) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) syz_open_dev$loop(&(0x7f00000000c0), 0x9, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000200), 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000380)={0x200, 0x1, &(0x7f0000000440)=[r7], &(0x7f0000000200), &(0x7f0000000300)=[r8], &(0x7f0000000340)}) pselect6(0x0, 0x0, 0x0, &(0x7f0000000400)={0x1f, 0xee, 0x4000000000000, 0x785, 0x0, 0x0, 0x3, 0x100000}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r9, 0x0, 0xc}, 0x18) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) 4.185842661s ago: executing program 0 (id=3883): r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x5, &(0x7f0000000080)='dirsync\x00', 0x0, 0x300) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x69}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x5519, 0x0, 0x2, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r6, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}, 0xfffffffe}], 0x1, 0x10000, 0x0) r7 = socket(0x2, 0x80805, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f00000002c0)={r9}, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x96}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) socket$inet_mptcp(0x2, 0x1, 0x106) syz_usb_connect(0x4, 0x24, &(0x7f0000000100)=ANY=[], 0x0) 3.999599736s ago: executing program 2 (id=3884): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 3.85384735s ago: executing program 1 (id=3885): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x80, &(0x7f0000000080)="1a4f30d089f5bd5b", 0x8) 3.818245456s ago: executing program 2 (id=3886): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x43) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000001640)=0xc, 0x45) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0xafd28e2fbb6f0cb3) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES16=r1], 0x0) 3.654079929s ago: executing program 1 (id=3887): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x21, 0x0, &(0x7f0000000c80)) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_io_uring_setup(0x4d79, &(0x7f0000000300)={0x0, 0xaee2, 0x10000, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$video4linux(0x0, 0x0, 0x800) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x75fa, 0xe475, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x8c) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1027, 0x0) 2.593975339s ago: executing program 4 (id=3888): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x1800, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.528012505s ago: executing program 4 (id=3889): syz_usb_connect$hid(0x59c7271563034cba, 0x0, 0x0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x55, &(0x7f0000000580)=@string={0x55, 0x3, "f34c2a690f9edebae6e528230fbc28a8648b019527eaa18106f93b2762db6c23ee51dd91b80c0423907b5013a6212e814d37637d351fcd98c90e4fdfaaf16079e116382e7c5d3d57b4e88f26024cfb18dce543"}}]}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000000feff00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 2.183641536s ago: executing program 2 (id=3890): r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000280), 0x200100, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 1.965751363s ago: executing program 2 (id=3891): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000e08004500003c000000000006907864010102ac1414aa40010000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ac0000b6c1e85308bf01907800001343583ecfd2106a000000000000"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f0000000880)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe}, {0xfffffff9}]}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203, @void, @value}, 0x94) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r7, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x8, 0x0, 0x0, 0x80000000000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x8000000000000000, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x2, 0x0, 0x2000000000000000, 0xc0c0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) openat$vimc2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x2, 0x2ff7afedf}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='f`=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r5, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB="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"]) r8 = socket(0x10, 0x2, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0x80000000, 0x0, 0x0, 0x3, 0x0, 0x10, 0x6, 0x0, 0x2, 0x0, 0xa, 0x0, 0x4}, {0xa, 0x0, 0x0, 0x0, 0x40, 0x1, 0x8, 0xff, 0x7, 0x0, 0x4, 0x0, 0xfffffffffffffff7}, {0x200000, 0xc, 0x21, 0x53, 0x0, 0x2, 0x0, 0x0, 0x58, 0xb, 0x0, 0x0, 0x8080}], 0x3fb}) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="2ea8d2811b2a246ba8a8a78787aee7bb20c96807b6d8761f859ec6fa331e777591ed11248a94c0cfc19c61fe7c081ddaf685d4d5b414a01ac8d511cfb5d75e8878514da879142e585b1f9213b0f04d67baae20dd2e742f1286afc7a9bb0ad44aa05e2e3db382651792f2945409e7c6dda83d14fef1fb50a3cb8d0a189d28277f501a04c5d4414479db27bd23c1fbdf28124c317129fe42ebf9", @ANYRES32, @ANYRES8, @ANYRES64, @ANYRESOCT=r3, @ANYRES32, @ANYRES16, @ANYRESDEC=r6], 0x30}, 0x1, 0x0, 0x0, 0xc885}, 0x4000880) 1.965540399s ago: executing program 1 (id=3892): socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) syz_open_dev$usbfs(0x0, 0xfffffffffffffffb, 0x40082) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/asound/timers\x00', 0x0, 0x0) read$char_usb(r0, &(0x7f0000001840)=""/4090, 0xffa) socket(0x3, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) renameat(r0, &(0x7f0000000240)='./file0/file0\x00', r0, &(0x7f0000000100)='./file0\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x81}) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x2) r5 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 1.673781135s ago: executing program 4 (id=3893): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000240)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000200)=[{r2, 0x6600}, {r1, 0x200}], 0x2, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.337654771s ago: executing program 4 (id=3894): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="c21504239e1dc595f0766418b856f059", 0xfffffe99}], 0x2, &(0x7f0000001a00)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) r2 = syz_io_uring_setup(0x8d0, &(0x7f00000000c0)={0x0, 0xc48a, 0x800, 0x3}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x50, r5, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xe}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x32}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4048015) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) fsopen(&(0x7f0000000100)='cifs\x00', 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x3e80, 0x2, 0x0, 0x0) 1.105821952s ago: executing program 3 (id=3895): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1300"/12, @ANYRES32=0x0, @ANYBLOB="9e7dfd"], 0x20) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000001c0), 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000140)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x5, 0x1}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x206, 0x1, 0x9, r3}, &(0x7f00000000c0)=0x10) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYBLOB="020023004c78ad03fffffaa42e898acee67f2b6392191b053500"/39], 0x2b) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000380)={0x0, 0x2, 0xfffffffffffffff9, 0xac}) 748.374758ms ago: executing program 0 (id=3896): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 326.260643ms ago: executing program 0 (id=3897): ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = syz_io_uring_setup(0x184, &(0x7f0000000080)={0x0, 0x0, 0x13100, 0x4}, &(0x7f0000000480)=0x0, &(0x7f0000000000)=0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x5, &(0x7f0000000200)={0x77359400}, 0x1, 0x4}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000180)={0x84, @local, 0x11, 0x3, 'ovf\x00', 0x3f, 0x4, 0x7f}, 0x2c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d5c, 0x12d5c}}, 0x44) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r5, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0xf, 0x1000e1b2, 0x1}}, 0x44) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000140)={0x5, r0, 0x1c, {0x9, 0x1}, 0x6}, 0x1) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) syz_open_dev$loop(&(0x7f00000000c0), 0x9, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000200), 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000380)={0x200, 0x1, &(0x7f0000000440)=[r7], &(0x7f0000000200), &(0x7f0000000300)=[r8], &(0x7f0000000340)}) pselect6(0x0, 0x0, 0x0, &(0x7f0000000400)={0x1f, 0xee, 0x4000000000000, 0x785, 0x0, 0x0, 0x3, 0x100000}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r9, 0x0, 0xc}, 0x18) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) 0s ago: executing program 3 (id=3898): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_CLOCK(r3, 0x8030ae7c, &(0x7f00000003c0)) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close_range(r0, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e0000160002800500170003650000040012000500160002"], 0x48}}, 0x4000004) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) write$UHID_CREATE(r7, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040), 0x0, 0x7, 0x1, 0x4, 0x10, 0x2}}, 0x120) pread64(r7, &(0x7f0000001940)=""/4096, 0x1000, 0x2) kernel console output (not intermixed with test programs): 020.605774][T18526] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1020.642397][T18526] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1020.664799][T18526] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1020.686727][T18526] usb 1-1: string descriptor 0 read error: -22 [ 1020.694248][T18526] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1020.706576][T18526] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.733073][T16574] usb 3-1: config 0 has no interfaces? [ 1020.748423][ T5889] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1020.780565][T18526] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1020.845284][T16574] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1020.867663][T16574] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.894364][T16574] usb 3-1: Product: syz [ 1020.898589][ T5889] usb 2-1: Using ep0 maxpacket: 16 [ 1020.909380][ T5889] usb 2-1: too many endpoints for config 0 interface 0 altsetting 229: 247, using maximum allowed: 30 [ 1020.923754][ T5889] usb 2-1: config 0 interface 0 altsetting 229 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 1020.951933][T16574] usb 3-1: Manufacturer: syz [ 1020.968032][T16574] usb 3-1: SerialNumber: syz [ 1021.007351][ T5889] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1021.008740][T16574] usb 3-1: config 0 descriptor?? [ 1021.037271][ T5889] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=59.31 [ 1021.047136][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.063736][ T5889] usb 2-1: Product: syz [ 1021.075158][ T5889] usb 2-1: Manufacturer: syz [ 1021.087606][ T5889] usb 2-1: SerialNumber: syz [ 1021.121262][ T5889] usb 2-1: config 0 descriptor?? [ 1021.154545][ T5889] usb 2-1: cannot find UAC_HEADER [ 1021.205100][ T5893] usb 1-1: USB disconnect, device number 82 [ 1021.303768][ T5889] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1021.338140][ T5889] usb 2-1: USB disconnect, device number 102 [ 1021.364245][ T5843] udevd[5843]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1021.520295][T18846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1021.556602][T18846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1021.838410][ T5893] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1022.018482][ T5893] usb 1-1: device descriptor read/64, error -71 [ 1022.278464][ T5893] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1022.458482][ T5893] usb 1-1: device descriptor read/64, error -71 [ 1022.569171][ T5893] usb usb1-port1: attempt power cycle [ 1023.475679][T18879] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3450'. [ 1023.649638][T16557] Bluetooth: hci1: command 0x0406 tx timeout [ 1023.658791][T18846] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 1023.665818][T18846] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 1023.764749][T18885] fuse: Bad value for 'fd' [ 1023.808545][T18863] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 1023.819800][T16557] Bluetooth: hci5: command 0x0c1a tx timeout [ 1023.826027][T18846] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 1023.833981][T18846] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 1023.875105][T18863] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1023.881669][T18846] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1023.881760][T18863] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1023.896837][T18846] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1023.897072][T18863] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1023.970514][T18846] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1024.024833][T18846] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1024.075615][T18846] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1024.108858][T18846] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1024.158450][T16319] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1024.245852][ T5893] usb 3-1: USB disconnect, device number 75 [ 1024.341270][T16319] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1024.374466][T16319] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1024.396563][T18896] tipc: Started in network mode [ 1024.401605][T18896] tipc: Node identity 00000000000000000000ffffffffffff, cluster identity 4711 [ 1024.411244][T18896] tipc: Enabling of bearer rejected, failed to enable media [ 1024.420325][T16319] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1024.448669][T16319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.458474][T16574] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1024.483536][T18869] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1024.501894][T16319] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1024.620387][T16574] usb 5-1: Using ep0 maxpacket: 16 [ 1024.643574][T16574] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1024.662143][T16574] usb 5-1: config 0 has no interface number 0 [ 1024.686364][T16574] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1024.708428][T16574] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.727128][T16574] usb 5-1: Product: syz [ 1024.751622][T16574] usb 5-1: Manufacturer: syz [ 1024.764164][T16574] usb 5-1: SerialNumber: syz [ 1024.778245][T16574] usb 5-1: config 0 descriptor?? [ 1024.790900][T16574] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1024.915535][T18867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1024.956959][T18867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1025.006172][T18867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1025.055115][T18867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1025.063989][T18894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1025.114438][T18894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1025.368806][T18505] usb 4-1: USB disconnect, device number 64 [ 1025.410140][T16319] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1025.568946][T16319] usb 1-1: Using ep0 maxpacket: 16 [ 1025.582406][T16319] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1025.608892][T16319] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1039, setting to 1024 [ 1025.624730][T16319] usb 1-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 1025.634762][T16319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.657812][T16319] usb 1-1: config 0 descriptor?? [ 1025.683730][T18917] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22 [ 1025.968614][T18918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3461'. [ 1026.037316][T18919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1026.149766][T18894] netlink: 'syz.4.3455': attribute type 5 has an invalid length. [ 1026.192255][T18919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1026.420410][T18921] macvlan2: entered allmulticast mode [ 1026.559622][T16574] gspca_spca1528: reg_r err -32 [ 1026.574936][T16574] spca1528 5-1:0.1: probe with driver spca1528 failed with error -32 [ 1026.599613][T16319] uclogic 0003:5543:0005.0034: unknown main item tag 0x0 [ 1026.614039][T16319] uclogic 0003:5543:0005.0034: unknown main item tag 0x0 [ 1026.642532][T16319] uclogic 0003:5543:0005.0034: unknown main item tag 0x0 [ 1026.668172][T16319] uclogic 0003:5543:0005.0034: No inputs registered, leaving [ 1026.703554][T16319] uclogic 0003:5543:0005.0034: hidraw0: USB HID v0.05 Device [HID 5543:0005] on usb-dummy_hcd.0-1/input0 [ 1026.826864][T16319] usb 1-1: USB disconnect, device number 86 [ 1026.864865][T18926] fido_id[18926]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:5543:0005.0034/report_descriptor': No such file or directory [ 1027.075157][T18526] IPVS: starting estimator thread 0... [ 1027.168467][T18933] IPVS: using max 38 ests per chain, 91200 per kthread [ 1027.372839][T18940] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (34359738360 ns) > initial count (3800 ns). Using initial count to start timer. [ 1027.421968][T18940] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1027.588184][ T5889] usb 5-1: USB disconnect, device number 79 [ 1027.596257][T18943] lo: entered promiscuous mode [ 1027.649980][T18943] tunl0: entered promiscuous mode [ 1027.689194][T18943] gre0: entered promiscuous mode [ 1027.695198][T18943] gretap0: entered promiscuous mode [ 1027.717146][T18951] netlink: 'syz.4.3470': attribute type 21 has an invalid length. [ 1027.741761][T18943] erspan0: entered promiscuous mode [ 1027.747790][T18943] ip_vti0: entered promiscuous mode [ 1027.754552][T18943] ip6_vti0: entered promiscuous mode [ 1027.762465][T18958] sctp: [Deprecated]: syz.4.3470 (pid 18958) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1027.762465][T18958] Use struct sctp_sack_info instead [ 1027.780952][T18943] sit0: entered promiscuous mode [ 1027.782030][T18956] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 1027.786915][T18943] ip6tnl0: entered promiscuous mode [ 1027.792441][T18956] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1027.811891][T18956] vhci_hcd vhci_hcd.0: Device attached [ 1027.828410][T18959] vhci_hcd: connection closed [ 1027.830059][ T9596] vhci_hcd: stop threads [ 1027.848157][ T9596] vhci_hcd: release socket [ 1027.852824][ T9596] vhci_hcd: disconnect device [ 1027.861509][T18943] ip6gre0: entered promiscuous mode [ 1027.867871][T18943] ip6gretap0: entered promiscuous mode [ 1027.874256][T18943] bridge0: entered promiscuous mode [ 1027.883227][T18943] vcan0: entered promiscuous mode [ 1027.889438][T18943] bond0: entered promiscuous mode [ 1027.894611][T18943] bond_slave_0: entered promiscuous mode [ 1027.907199][T18943] bond_slave_1: entered promiscuous mode [ 1027.916165][T18943] team0: entered promiscuous mode [ 1027.921986][T18943] team_slave_0: entered promiscuous mode [ 1027.926394][T18963] netlink: 'syz.4.3473': attribute type 1 has an invalid length. [ 1027.928023][T18943] team_slave_1: entered promiscuous mode [ 1027.944121][T18943] dummy0: entered promiscuous mode [ 1027.951800][T18943] nlmon0: entered promiscuous mode [ 1027.957846][T18943] caif0: entered promiscuous mode [ 1027.963912][T18943] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1028.073640][T18963] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1028.122366][T18965] bond2: (slave veth3): Enslaving as an active interface with a down link [ 1028.154136][T18967] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1028.187378][T18963] batadv0: entered allmulticast mode [ 1028.194994][T18963] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3473'. [ 1028.206347][T18962] batadv0: left allmulticast mode [ 1028.366357][ T5889] IPVS: starting estimator thread 0... [ 1028.484465][T18978] IPVS: using max 26 ests per chain, 62400 per kthread [ 1028.740310][T18526] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1028.980086][T18526] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1029.002885][T18526] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.070805][T18526] usb 1-1: config 0 descriptor?? [ 1029.095415][T18526] cp210x 1-1:0.0: cp210x converter detected [ 1029.312197][T18526] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 1029.341265][T18526] cp210x 1-1:0.0: querying part number failed [ 1029.359039][T18526] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1029.407019][T18526] usb 1-1: USB disconnect, device number 87 [ 1029.479577][T18526] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1029.487739][T18526] cp210x 1-1:0.0: device disconnected [ 1031.200417][ T5889] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1031.378471][ T5889] usb 3-1: Using ep0 maxpacket: 16 [ 1031.488341][T18526] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1031.510194][ T5889] usb 3-1: config 0 has no interfaces? [ 1031.523201][ T5889] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1031.550537][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.676160][ T5889] usb 3-1: config 0 descriptor?? [ 1031.687959][T18526] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 1031.702899][T18526] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1031.727771][T18526] usb 5-1: config 0 has no interface number 0 [ 1031.743619][T18526] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1031.760702][T18526] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1031.784021][T18526] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1031.802951][T18526] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.812674][T18526] usb 5-1: Product: syz [ 1031.817089][T18526] usb 5-1: Manufacturer: syz [ 1031.828243][T18526] usb 5-1: SerialNumber: syz [ 1031.842364][T18526] usb 5-1: config 0 descriptor?? [ 1032.169379][T18526] usbtouchscreen 5-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 1032.213362][T18526] usb 5-1: USB disconnect, device number 80 [ 1032.718419][T16574] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 1032.818686][T16319] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1032.882007][T16574] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1032.954895][T16574] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1032.972041][T16574] usb 4-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 1032.983886][T16319] usb 1-1: device descriptor read/64, error -71 [ 1033.000208][T16574] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.034614][T16574] usb 4-1: config 0 descriptor?? [ 1033.052249][T19041] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1033.321729][T16319] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1033.478720][T18526] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1033.490523][T16319] usb 1-1: device descriptor read/64, error -71 [ 1033.530320][T16574] hid (null): unknown global tag 0xc [ 1033.564194][T16574] hid (null): unknown global tag 0xc [ 1033.684142][T16319] usb usb1-port1: attempt power cycle [ 1033.689639][T18526] usb 5-1: Using ep0 maxpacket: 32 [ 1033.697497][T18526] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1033.738555][T18526] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1033.762263][T16574] hid (null): unknown global tag 0xc [ 1033.773504][T16574] hid (null): unknown global tag 0xb8 [ 1033.788572][T18526] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1033.801766][T16574] hid (null): global environment stack underflow [ 1033.817756][T16574] hid (null): global environment stack underflow [ 1033.849339][T16574] hid (null): report_id 0 is invalid [ 1033.864937][T16574] hid (null): global environment stack underflow [ 1033.876871][T16574] hid (null): report_id 0 is invalid [ 1033.891759][ T5893] usb 3-1: USB disconnect, device number 76 [ 1033.894841][T18526] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.917807][T16574] hid (null): report_id 0 is invalid [ 1033.934256][T16574] hid (null): global environment stack underflow [ 1033.956286][T16574] uclogic 0003:28BD:0078.0035: interface is invalid, ignoring [ 1034.004220][T16574] usb 4-1: USB disconnect, device number 65 [ 1034.119848][T16319] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1034.139587][T16319] usb 1-1: device descriptor read/8, error -71 [ 1034.235850][T18526] usb 5-1: config 0 descriptor?? [ 1034.388507][ T5893] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1034.396306][T16319] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1034.481719][T19055] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3497'. [ 1034.501791][T16319] usb 1-1: device descriptor read/8, error -71 [ 1034.588411][ T5893] usb 3-1: device descriptor read/64, error -71 [ 1034.629644][T16319] usb usb1-port1: unable to enumerate USB device [ 1034.654033][T18526] savu 0003:1E7D:2D5A.0036: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 1034.828826][ T5889] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1034.848721][ T5893] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1035.039668][ T5889] usb 4-1: Using ep0 maxpacket: 32 [ 1035.056917][ T5889] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1035.090646][ T5893] usb 3-1: device descriptor read/64, error -71 [ 1035.114554][ T5889] usb 4-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 1035.131087][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.147926][ T5889] usb 4-1: Product: syz [ 1035.155318][ T5889] usb 4-1: Manufacturer: syz [ 1035.164842][ T5889] usb 4-1: SerialNumber: syz [ 1035.185308][ T5889] usb 4-1: config 0 descriptor?? [ 1035.198857][ T5893] usb usb3-port1: attempt power cycle [ 1035.223647][ T5889] hdpvr 4-1:0.0: Could not find bulk-in endpoint [ 1035.234897][ T5889] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 1035.576242][ T5893] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1035.623602][ T5893] usb 3-1: device descriptor read/8, error -71 [ 1035.899071][ T5893] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1035.919095][ T5893] usb 3-1: device descriptor read/8, error -71 [ 1036.038716][ T5893] usb usb3-port1: unable to enumerate USB device [ 1036.148545][T16319] usb 5-1: reset high-speed USB device number 81 using dummy_hcd [ 1036.308482][T18505] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1036.488624][T18505] usb 2-1: Using ep0 maxpacket: 16 [ 1036.503763][T18505] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1036.508956][T18526] usb 1-1: new full-speed USB device number 92 using dummy_hcd [ 1036.530042][T18505] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1036.548935][T18505] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1036.558737][T18505] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.574019][T18505] usb 2-1: config 0 descriptor?? [ 1036.711889][T18526] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1036.722493][T18526] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1036.731585][T18526] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1036.747988][T18526] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.771661][T18526] usb 1-1: config 0 descriptor?? [ 1036.788240][T18526] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1036.797988][T18526] dvb-usb: bulk message failed: -22 (3/0) [ 1036.853650][T18526] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1036.863024][T18526] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1036.877773][T18526] usb 1-1: media controller created [ 1036.885907][T18526] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1036.925983][T18526] dvb-usb: bulk message failed: -22 (6/0) [ 1036.936461][T18526] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1036.948012][T18526] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input133 [ 1036.982098][T18526] dvb-usb: schedule remote query interval to 150 msecs. [ 1037.004808][T18526] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1037.020098][T18505] corsair 0003:1B1C:1B02.0037: global environment stack underflow [ 1037.048231][T18505] corsair 0003:1B1C:1B02.0037: item 0 4 1 11 parsing failed [ 1037.080779][T18505] corsair 0003:1B1C:1B02.0037: parse failed [ 1037.117610][T18505] corsair 0003:1B1C:1B02.0037: probe with driver corsair failed with error -22 [ 1037.168696][ T5889] dvb-usb: bulk message failed: -22 (1/0) [ 1037.200796][ T5889] dvb-usb: error while querying for an remote control event. [ 1037.201703][T18505] usb 2-1: USB disconnect, device number 103 [ 1037.398471][ T5889] dvb-usb: bulk message failed: -22 (1/0) [ 1037.405334][ T5889] dvb-usb: error while querying for an remote control event. [ 1037.413886][ T5893] usb 5-1: USB disconnect, device number 81 [ 1037.476435][T16319] usb 4-1: USB disconnect, device number 66 [ 1037.686911][ T5889] dvb-usb: bulk message failed: -22 (1/0) [ 1037.714727][ T5889] dvb-usb: error while querying for an remote control event. [ 1037.888561][T18526] dvb-usb: bulk message failed: -22 (1/0) [ 1037.896261][T18526] dvb-usb: error while querying for an remote control event. [ 1038.070304][ T5889] dvb-usb: bulk message failed: -22 (1/0) [ 1038.082376][ T5889] dvb-usb: error while querying for an remote control event. [ 1038.168722][ T5893] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1038.228468][T16319] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1038.249015][ T5889] dvb-usb: bulk message failed: -22 (1/0) [ 1038.254786][ T5889] dvb-usb: error while querying for an remote control event. [ 1038.365734][ T5893] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1038.384573][T16319] usb 4-1: Using ep0 maxpacket: 8 [ 1038.390669][ T5893] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1038.402940][T16319] usb 4-1: config 0 has an invalid interface number: 151 but max is 2 [ 1038.415811][T16319] usb 4-1: config 0 has an invalid interface number: 21 but max is 2 [ 1038.428490][T18526] dvb-usb: bulk message failed: -22 (1/0) [ 1038.434381][T18526] dvb-usb: error while querying for an remote control event. [ 1038.436646][ T5893] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1038.460698][T16319] usb 4-1: config 0 has an invalid interface number: 188 but max is 2 [ 1038.479297][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.487567][T16319] usb 4-1: config 0 has no interface number 0 [ 1038.508096][T19084] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1038.524025][T16319] usb 4-1: config 0 has no interface number 1 [ 1038.544992][ T5893] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1038.555263][T16319] usb 4-1: config 0 has no interface number 2 [ 1038.563868][T16319] usb 4-1: config 0 interface 151 has no altsetting 0 [ 1038.584012][T16319] usb 4-1: New USB device found, idVendor=0812, idProduct=3101, bcdDevice=b5.ac [ 1038.597163][T16319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.608584][T18526] dvb-usb: bulk message failed: -22 (1/0) [ 1038.617140][T18526] dvb-usb: error while querying for an remote control event. [ 1038.649304][T16319] usb 4-1: config 0 descriptor?? [ 1038.758105][ T5893] usb 2-1: USB disconnect, device number 104 [ 1038.788632][T18526] dvb-usb: bulk message failed: -22 (1/0) [ 1038.806803][T18526] dvb-usb: error while querying for an remote control event. [ 1038.876737][T16319] usb 4-1: string descriptor 0 read error: -71 [ 1038.914831][T16319] usb 4-1: USB disconnect, device number 67 [ 1038.988527][T18526] dvb-usb: bulk message failed: -22 (1/0) [ 1038.994640][T18526] dvb-usb: error while querying for an remote control event. [ 1039.168166][T18526] usb 1-1: USB disconnect, device number 92 [ 1039.471396][T18526] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1039.639451][T19107] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3513'. [ 1039.964486][T19120] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3516'. [ 1040.509347][T19142] delete_channel: no stack [ 1040.670557][T19135] delete_channel: no stack [ 1040.708567][T16319] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1040.756674][T19149] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3522'. [ 1040.766293][T19149] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3522'. [ 1040.949732][T16319] usb 1-1: Using ep0 maxpacket: 32 [ 1040.960371][T16319] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1040.970015][T16319] usb 1-1: config 1 interface 0 altsetting 38 bulk endpoint 0x1 has invalid maxpacket 64 [ 1040.980586][T16319] usb 1-1: config 1 interface 0 altsetting 38 bulk endpoint 0x82 has invalid maxpacket 64 [ 1040.994404][T16319] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1041.025301][T16319] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1041.034650][T16319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.043107][T16319] usb 1-1: Product: syz [ 1041.047462][T16319] usb 1-1: Manufacturer: syz [ 1041.116616][T16319] usb 1-1: SerialNumber: syz [ 1041.252412][T19139] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1041.275367][T19139] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1041.479378][T19169] fuse: Bad value for 'group_id' [ 1041.484522][T19169] fuse: Bad value for 'group_id' [ 1041.553471][T16319] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 93 if 0 alt 38 proto 2 vid 0x0525 pid 0xA4A8 [ 1041.586565][T16319] usb 1-1: USB disconnect, device number 93 [ 1041.654884][T16319] usblp0: removed [ 1042.908409][ T5889] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1043.058813][ T5889] usb 4-1: Using ep0 maxpacket: 16 [ 1043.094161][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 62320, setting to 1024 [ 1043.105877][ T5889] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1043.131662][ T5889] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1043.150869][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.176802][ T5889] usb 4-1: Product: syz [ 1043.189938][ T5889] usb 4-1: Manufacturer: syz [ 1043.198819][ T5889] usb 4-1: SerialNumber: syz [ 1043.212643][ T5889] usb 4-1: config 0 descriptor?? [ 1043.231581][T19188] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1043.242924][ T5889] hub 4-1:0.0: bad descriptor, ignoring hub [ 1043.261760][ T5889] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1043.292258][ T5889] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input134 [ 1043.365857][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 1044.049084][T19205] netlink: 'syz.2.3541': attribute type 10 has an invalid length. [ 1044.085484][T19207] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3540'. [ 1044.125927][ T5893] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1044.137217][T19205] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1044.412235][ T5893] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1044.452192][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1044.497547][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1044.561781][ T5893] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1044.587278][ T5893] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1044.607483][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.639126][ T5893] usb 1-1: config 0 descriptor?? [ 1045.205046][ T5893] usbhid 1-1:0.0: can't add hid device: -71 [ 1045.212774][ T5893] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1045.245749][ T5893] usb 1-1: USB disconnect, device number 94 [ 1045.298644][T16319] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1045.499222][T18505] usb 4-1: USB disconnect, device number 68 [ 1045.508992][T16319] usb 2-1: Using ep0 maxpacket: 16 [ 1045.526734][T16319] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1045.556331][T16319] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1045.566001][T16319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.588559][T16319] usb 2-1: config 0 descriptor?? [ 1045.767235][T19217] macvlan0: entered promiscuous mode [ 1045.777352][T19217] netlink: 'syz.3.3543': attribute type 1 has an invalid length. [ 1045.804531][T19217] netlink: 'syz.3.3543': attribute type 2 has an invalid length. [ 1046.496927][T19240] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3545'. [ 1046.506448][T19240] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3545'. [ 1046.596953][T19239] loop6: detected capacity change from 0 to 7 [ 1046.650141][T19239] Dev loop6: unable to read RDB block 7 [ 1046.662924][T19239] loop6: AHDI p1 p2 p3 p4 [ 1046.703506][T19239] loop6: partition table partially beyond EOD, truncated [ 1046.754394][T19239] loop6: p1 start 2401632844 is beyond EOD, truncated [ 1046.797158][T19239] loop6: p2 size 47 extends beyond EOD, truncated [ 1046.839196][T19239] loop6: p3 start 1886353253 is beyond EOD, truncated [ 1047.150262][ T5841] udevd[5841]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1047.268455][T18526] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1047.288591][ T5889] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1047.443264][T18526] usb 4-1: config 0 has no interfaces? [ 1047.449039][ T5889] usb 5-1: Using ep0 maxpacket: 32 [ 1047.460489][T18526] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1047.471728][T18526] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.480859][ T5889] usb 5-1: config 0 has an invalid interface number: 23 but max is 0 [ 1047.493028][T18526] usb 4-1: Product: syz [ 1047.497245][ T5889] usb 5-1: config 0 has no interface number 0 [ 1047.504900][T18526] usb 4-1: Manufacturer: syz [ 1047.513788][ T5889] usb 5-1: config 0 interface 23 has no altsetting 0 [ 1047.520803][T18526] usb 4-1: SerialNumber: syz [ 1047.538796][ T5889] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice=f9.bf [ 1047.548053][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.573237][T18526] usb 4-1: config 0 descriptor?? [ 1047.580755][ T5889] usb 5-1: Product: syz [ 1047.593360][ T5889] usb 5-1: Manufacturer: syz [ 1047.638565][ T5889] usb 5-1: SerialNumber: syz [ 1047.655963][ T5889] usb 5-1: config 0 descriptor?? [ 1047.764492][T19252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1047.859089][T19252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1047.900559][T19248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1047.939001][T19248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1048.017318][T19249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1048.028664][T19249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1048.099309][ T5889] usb 5-1: USB disconnect, device number 82 [ 1050.028460][ T5889] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1050.180391][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 1050.218908][ T5889] usb 3-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 1050.365053][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.497371][ T5889] usb 3-1: config 0 descriptor?? [ 1051.169630][T16319] usbhid 2-1:0.0: can't add hid device: -32 [ 1051.394988][ T5889] usbhid 3-1:0.0: can't add hid device: -71 [ 1051.404135][ T5889] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1051.429648][ T5889] usb 3-1: USB disconnect, device number 81 [ 1051.450425][T16319] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 1051.745366][T19287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1051.762050][T19287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1051.814023][ T5889] usb 4-1: USB disconnect, device number 69 [ 1052.041191][T19298] vlan2: entered promiscuous mode [ 1052.409713][T19309] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3564'. [ 1052.444132][T19309] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3564'. [ 1052.604404][ T5889] usb 2-1: USB disconnect, device number 105 [ 1053.538424][ T5837] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1053.698794][ T5837] usb 3-1: Using ep0 maxpacket: 16 [ 1053.715902][ T5837] usb 3-1: config 0 has no interfaces? [ 1053.721683][ T5837] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1053.738809][ T5837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.828476][T18505] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1053.868599][T16319] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1053.913465][ T5837] usb 3-1: config 0 descriptor?? [ 1054.018850][T18505] usb 5-1: Using ep0 maxpacket: 8 [ 1054.059796][T16319] usb 2-1: Using ep0 maxpacket: 32 [ 1054.101690][T16319] usb 2-1: config 0 has an invalid interface number: 235 but max is 0 [ 1054.115822][T16319] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 1054.126500][T18505] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1054.136783][T18505] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.148425][T16319] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 1054.167230][T18505] usb 5-1: Product: syz [ 1054.171587][T16319] usb 2-1: config 0 has no interface number 0 [ 1054.178055][T18505] usb 5-1: Manufacturer: syz [ 1054.220327][T18505] usb 5-1: SerialNumber: syz [ 1054.225069][T16319] usb 2-1: config 0 has no interface number 1 [ 1054.251398][T18505] usb 5-1: config 0 descriptor?? [ 1054.256649][T16319] usb 2-1: config 0 interface 235 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 1054.276640][T16319] usb 2-1: config 0 interface 235 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1054.295245][T16319] usb 2-1: too many endpoints for config 0 interface 12 altsetting 197: 114, using maximum allowed: 30 [ 1054.307503][T16319] usb 2-1: config 0 interface 12 altsetting 197 has 1 endpoint descriptor, different from the interface descriptor's value: 114 [ 1054.328993][T16319] usb 2-1: config 0 interface 12 has no altsetting 0 [ 1054.367257][T16319] usb 2-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 1054.383090][T16319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.393998][T16319] usb 2-1: Product: syz [ 1054.399564][T16319] usb 2-1: Manufacturer: syz [ 1054.404859][T16319] usb 2-1: SerialNumber: syz [ 1054.421859][T16319] usb 2-1: config 0 descriptor?? [ 1054.453205][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.462557][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.482173][T18505] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1054.660382][T16319] kaweth 2-1:0.235: Firmware present in device. [ 1054.804596][T18505] usb write operation failed. (-71) [ 1054.816382][T18505] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1054.875516][T18505] dvbdev: DVB: registering new adapter (Terratec H7) [ 1054.893899][T18505] usb 5-1: media controller created [ 1054.933620][T18505] usb read operation failed. (-71) [ 1054.940593][T16319] kaweth 2-1:0.235: Error reading configuration (-71), no net device created [ 1054.966782][T18505] usb write operation failed. (-71) [ 1054.978909][T16319] kaweth 2-1:0.235: probe with driver kaweth failed with error -5 [ 1055.010187][T18505] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1055.028918][T16574] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1055.066027][T18505] usb 5-1: USB disconnect, device number 83 [ 1055.083137][T16319] kaweth 2-1:0.12: Firmware present in device. [ 1055.109091][T16319] kaweth 2-1:0.12: Error reading configuration (-71), no net device created [ 1055.128672][T16319] kaweth 2-1:0.12: probe with driver kaweth failed with error -5 [ 1055.208640][T16319] usb 2-1: USB disconnect, device number 106 [ 1055.344700][T16574] usb 4-1: config 0 has no interfaces? [ 1055.365355][T16574] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1055.393967][T16574] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.417226][T16574] usb 4-1: Product: syz [ 1055.426142][T16574] usb 4-1: Manufacturer: syz [ 1055.441182][T16574] usb 4-1: SerialNumber: syz [ 1055.472220][T16574] usb 4-1: config 0 descriptor?? [ 1055.861670][T19351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1055.876002][T19351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1056.408570][T18526] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1056.571494][T18526] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1056.584872][T18526] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1056.613677][T18526] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1056.635263][T18526] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1056.645375][T18526] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.666130][T18526] usb 5-1: config 0 descriptor?? [ 1056.938164][T18505] usb 3-1: USB disconnect, device number 82 [ 1057.107843][T18526] plantronics 0003:047F:FFFF.0038: reserved main item tag 0xd [ 1057.141875][T18526] plantronics 0003:047F:FFFF.0038: No inputs registered, leaving [ 1057.219786][T18526] plantronics 0003:047F:FFFF.0038: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1057.299634][T19372] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3581'. [ 1057.358469][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1057.358486][ T30] audit: type=1800 audit(1748897743.476:5944): pid=19374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3581" name="dmabuf" dev="dmabuf" ino=14 res=0 errno=0 [ 1057.418651][T18505] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 1057.444190][T16319] usb 5-1: USB disconnect, device number 84 [ 1057.588495][T18505] usb 3-1: device descriptor read/64, error -71 [ 1057.612229][T19376] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3582'. [ 1057.828393][T18505] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 1057.873473][ T5889] usb 4-1: USB disconnect, device number 70 [ 1057.978421][T18505] usb 3-1: device descriptor read/64, error -71 [ 1058.117036][T18505] usb usb3-port1: attempt power cycle [ 1058.176549][T19389] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3583'. [ 1058.196222][T19389] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3583'. [ 1058.488525][T18505] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 1058.521247][T18505] usb 3-1: device descriptor read/8, error -71 [ 1058.786667][T18505] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 1058.829171][T18505] usb 3-1: device descriptor read/8, error -71 [ 1058.949802][T18505] usb usb3-port1: unable to enumerate USB device [ 1059.551988][T19404] netlink: 'syz.1.3590': attribute type 11 has an invalid length. [ 1059.561164][T19404] netlink: 5128 bytes leftover after parsing attributes in process `syz.1.3590'. [ 1059.571184][T19404] netlink: 5128 bytes leftover after parsing attributes in process `syz.1.3590'. [ 1059.581029][T19404] netlink: 332 bytes leftover after parsing attributes in process `syz.1.3590'. [ 1059.648723][T18505] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1059.820632][T18505] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1059.831080][T18505] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.863275][T18505] usb 4-1: config 0 descriptor?? [ 1060.088411][ T5889] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1060.255294][ T5889] usb 2-1: config 0 has no interfaces? [ 1060.289929][ T5889] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1060.324377][T19418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3594'. [ 1060.372894][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.473388][ T5889] usb 2-1: Product: syz [ 1060.477677][ T5889] usb 2-1: Manufacturer: syz [ 1060.546985][ T5889] usb 2-1: SerialNumber: syz [ 1060.575039][ T5889] usb 2-1: config 0 descriptor?? [ 1060.768589][T16319] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1060.923781][T16319] usb 5-1: config 0 has an invalid interface number: 144 but max is 0 [ 1060.937129][T16319] usb 5-1: config 0 has no interface number 0 [ 1060.962992][T16319] usb 5-1: too many endpoints for config 0 interface 144 altsetting 138: 68, using maximum allowed: 30 [ 1060.975721][T16319] usb 5-1: config 0 interface 144 altsetting 138 has 0 endpoint descriptors, different from the interface descriptor's value: 68 [ 1060.995887][T16319] usb 5-1: config 0 interface 144 has no altsetting 0 [ 1061.003704][T16319] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1061.018786][T16319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.035852][T16319] usb 5-1: config 0 descriptor?? [ 1061.057214][T16319] cp210x 5-1:0.144: cp210x converter detected [ 1061.214261][T19397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1061.242494][T19397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1061.268905][T16319] cp210x 5-1:0.144: failed to get vendor val 0x370b size 1: -121 [ 1061.282123][T19397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1061.299032][T16319] cp210x 5-1:0.144: querying part number failed [ 1061.306102][T19397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1061.412376][T16319] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1061.428935][T18505] usb 4-1: Cannot set autoneg [ 1061.446314][T18505] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1061.539309][T16319] usb 5-1: USB disconnect, device number 85 [ 1061.582906][T16319] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1061.628754][T18505] usb 4-1: USB disconnect, device number 71 [ 1061.653890][T19424] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3596'. [ 1061.709474][T19414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1061.719415][T16319] cp210x 5-1:0.144: device disconnected [ 1061.770546][T19414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1061.925644][T19424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3596'. [ 1062.787076][T19440] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3598'. [ 1062.797268][T19440] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3598'. [ 1063.930734][ T5837] usb 2-1: USB disconnect, device number 107 [ 1064.189668][ T30] audit: type=1326 audit(1748897750.336:5945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19450 comm="syz.3.3604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6538e969 code=0x7ffc0000 [ 1064.228713][ T30] audit: type=1326 audit(1748897750.336:5946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19450 comm="syz.3.3604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6538e969 code=0x7ffc0000 [ 1064.255756][ T30] audit: type=1326 audit(1748897750.376:5947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19450 comm="syz.3.3604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f0b6538e969 code=0x7ffc0000 [ 1064.281838][ T30] audit: type=1326 audit(1748897750.376:5948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19450 comm="syz.3.3604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6538e969 code=0x7ffc0000 [ 1064.310688][ T30] audit: type=1326 audit(1748897750.376:5949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19450 comm="syz.3.3604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6538e969 code=0x7ffc0000 [ 1064.336499][ T30] audit: type=1326 audit(1748897750.406:5950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19450 comm="syz.3.3604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f0b6538e969 code=0x7ffc0000 [ 1064.392899][ T30] audit: type=1326 audit(1748897750.406:5951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19450 comm="syz.3.3604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6538e969 code=0x7ffc0000 [ 1064.426238][ T30] audit: type=1326 audit(1748897750.406:5952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19450 comm="syz.3.3604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6538e969 code=0x7ffc0000 [ 1064.712718][ T5837] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1064.888455][ T5837] usb 4-1: device descriptor read/64, error -71 [ 1065.019139][T19465] netlink: 'syz.2.3609': attribute type 3 has an invalid length. [ 1065.129139][ T5837] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1065.299616][ T5837] usb 4-1: device descriptor read/64, error -71 [ 1065.344245][T19474] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1065.446098][ T5837] usb usb4-port1: attempt power cycle [ 1065.818533][ T5837] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1065.861765][ T5837] usb 4-1: device descriptor read/8, error -71 [ 1066.028365][T18505] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1066.098411][ T5837] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1066.151286][ T5837] usb 4-1: device descriptor read/8, error -71 [ 1066.178630][T19495] Invalid option length (1044984) for dns_resolver key [ 1066.258712][ T5837] usb usb4-port1: unable to enumerate USB device [ 1066.261352][T18505] usb 3-1: config 0 has no interfaces? [ 1066.270114][T18505] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1066.270147][T18505] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.270170][T18505] usb 3-1: Product: syz [ 1066.270187][T18505] usb 3-1: Manufacturer: syz [ 1066.270203][T18505] usb 3-1: SerialNumber: syz [ 1066.280963][T18505] usb 3-1: config 0 descriptor?? [ 1066.305405][ T30] audit: type=1326 audit(1748897752.456:5953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19494 comm="syz.4.3617" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e2fd8e969 code=0x0 [ 1066.428445][T18526] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1066.618616][ T978] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1066.631778][T19486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1066.634726][T19486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1066.712364][T18526] usb 2-1: config 0 has no interfaces? [ 1066.714695][T18526] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1066.714719][T18526] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.714735][T18526] usb 2-1: Product: syz [ 1066.714747][T18526] usb 2-1: Manufacturer: syz [ 1066.714812][T18526] usb 2-1: SerialNumber: syz [ 1066.751651][T18526] usb 2-1: config 0 descriptor?? [ 1066.768415][ T978] usb 5-1: Using ep0 maxpacket: 16 [ 1066.769978][ T978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1066.770004][ T978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1066.770033][ T978] usb 5-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 1066.770051][ T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.772136][ T978] usb 5-1: config 0 descriptor?? [ 1067.009039][T19500] tipc: Enabling of bearer rejected, failed to enable media [ 1067.199743][ T978] playstation 0003:054C:05C4.0039: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.4-1/input0 [ 1067.322467][T19493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1067.345795][T19493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1067.858691][T19516] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3622'. [ 1068.942668][ T10] usb 3-1: USB disconnect, device number 87 [ 1069.268107][ T978] playstation 0003:054C:05C4.0039: Failed to retrieve feature with reportID 18: -71 [ 1069.392557][ T978] playstation 0003:054C:05C4.0039: Failed to retrieve DualShock4 pairing info: -71 [ 1069.412162][ T978] playstation 0003:054C:05C4.0039: Failed to get MAC address from DualShock4 [ 1069.428939][T18505] usb 2-1: USB disconnect, device number 108 [ 1069.448081][ T978] playstation 0003:054C:05C4.0039: Failed to create dualshock4. [ 1069.459527][ T978] playstation 0003:054C:05C4.0039: probe with driver playstation failed with error -71 [ 1069.482243][ T978] usb 5-1: USB disconnect, device number 86 [ 1069.891520][ T978] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1070.052786][ T978] usb 5-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1070.071582][ T978] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1070.093220][ T978] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1070.113590][ T978] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1070.123181][ T978] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1070.144114][ T978] usb 5-1: Manufacturer: syz [ 1070.149392][ T978] usb 5-1: SerialNumber: syz [ 1072.523590][T19544] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3631'. [ 1073.277217][ T978] yealink 5-1:36.0: invalid payload size 0, expected 16 [ 1073.343945][ T978] input: Yealink usb-p1k as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:36.0/input/input137 [ 1073.375489][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1073.382824][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1073.389789][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1073.396763][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1073.403740][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1073.410750][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1073.417690][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1073.424674][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1073.431455][ C1] yealink 5-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 1073.452247][T19559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3634'. [ 1073.477428][ T978] usb 5-1: USB disconnect, device number 87 [ 1073.593393][T19557] ip6gretap1: entered promiscuous mode [ 1073.632130][T19557] ip6gretap1: entered allmulticast mode [ 1074.328506][T18526] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1074.583530][T18526] usb 3-1: Using ep0 maxpacket: 16 [ 1074.605557][T18526] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1074.626357][T18526] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.661962][T18526] usb 3-1: Product: syz [ 1074.682262][T18526] usb 3-1: Manufacturer: syz [ 1074.693575][T18526] usb 3-1: SerialNumber: syz [ 1074.723500][T18526] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1074.741415][T18526] r8152-cfgselector 3-1: config 0 descriptor?? [ 1075.088247][T19585] netlink: 'syz.0.3644': attribute type 1 has an invalid length. [ 1075.130165][T19585] xt_hashlimit: size too large, truncated to 1048576 [ 1075.245160][T18505] r8152-cfgselector 3-1: USB disconnect, device number 88 [ 1075.819009][T19597] vlan2: entered allmulticast mode [ 1075.860465][T18526] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1076.052339][ T5837] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1076.065060][T18526] usb 4-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1076.274564][T18526] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1076.392509][T18526] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1076.407787][ T5837] usb 5-1: Using ep0 maxpacket: 16 [ 1076.435890][T18526] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1076.445883][T18526] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1076.455638][ T5837] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1076.466609][T18526] usb 4-1: Manufacturer: syz [ 1076.471867][ T5837] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1076.490140][T18526] usb 4-1: SerialNumber: syz [ 1076.507618][ T5837] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1076.523919][ T5837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.532457][ T5837] usb 5-1: Product: syz [ 1076.536758][ T5837] usb 5-1: Manufacturer: syz [ 1076.542020][ T5837] usb 5-1: SerialNumber: syz [ 1076.615246][T19617] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3653'. [ 1076.624485][ T10] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1076.633450][T19617] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3653'. [ 1076.914991][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1076.940026][ T10] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1076.949035][ T10] usb 3-1: config 0 has no interface number 0 [ 1076.986410][ T10] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1077.001768][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.037339][ T10] usb 3-1: Product: syz [ 1077.061971][ T10] usb 3-1: Manufacturer: syz [ 1077.176295][ T10] usb 3-1: SerialNumber: syz [ 1077.271574][ T10] usb 3-1: config 0 descriptor?? [ 1077.315824][ T10] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1077.376220][ T5837] usb 5-1: 0:2 : does not exist [ 1077.399294][ T5837] usb 5-1: unit 9 not found! [ 1077.512696][ T5837] usb 5-1: USB disconnect, device number 88 [ 1077.694448][T19611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1077.716437][T19611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1077.717464][ T10] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1077.882169][ T5843] udevd[5843]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1078.026266][ T10] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1078.208668][ T5837] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1078.227784][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1078.234538][ T5889] usb 3-1: USB disconnect, device number 89 [ 1078.272941][ T5889] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1078.299593][ T5889] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1078.315689][ T5889] quatech2 3-1:0.51: device disconnected [ 1078.412808][ T5837] usb 2-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 1078.428935][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.479676][ T5837] usb 2-1: Product: syz [ 1078.487512][ T5837] usb 2-1: Manufacturer: syz [ 1078.492967][ T5837] usb 2-1: SerialNumber: syz [ 1078.516915][ T5837] usb 2-1: config 0 descriptor?? [ 1078.545412][ T5837] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 1078.755401][T19620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1078.796204][T19620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1078.823679][ T5837] sonixb 2-1:0.0: Error reading register 00: -71 [ 1078.872680][ T5837] usb 2-1: USB disconnect, device number 109 [ 1079.124626][T18526] yealink 4-1:36.0: invalid payload size 0, expected 16 [ 1079.222946][T18526] input: Yealink usb-p1k as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:36.0/input/input138 [ 1079.274814][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 1079.282087][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 1079.290550][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 1079.298442][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 1079.308417][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 1079.315692][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 1079.322798][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 1079.330218][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 1079.337017][ C1] yealink 4-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 1079.351501][T18526] usb 4-1: USB disconnect, device number 76 [ 1079.513057][T19633] Unknown options in mask 5 [ 1079.519263][T19633] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.3658'. [ 1079.529423][T19633] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.3658'. [ 1079.658895][ T5889] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1079.856430][ T5889] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1079.898469][T18505] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1079.978809][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.054335][ T5889] usb 5-1: config 0 descriptor?? [ 1080.366572][T18505] usb 2-1: config 0 has no interfaces? [ 1080.447910][T18505] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1080.546983][T18505] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.555769][T18505] usb 2-1: Product: syz [ 1080.589249][T18505] usb 2-1: Manufacturer: syz [ 1080.717762][T18505] usb 2-1: SerialNumber: syz [ 1080.850383][T18505] usb 2-1: config 0 descriptor?? [ 1081.106964][T19639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1081.144213][T19639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1082.048442][T16319] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1082.197973][ T5889] usb 5-1: Cannot set autoneg [ 1082.204546][ T5889] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1082.218529][T16319] usb 4-1: Using ep0 maxpacket: 8 [ 1082.234258][T16319] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1082.256652][T16319] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1082.278697][T16319] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1082.294015][T16319] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1082.317038][T16319] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1082.329094][T18526] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1082.354970][T16319] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1082.372193][T16319] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1082.400022][T16319] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1082.421328][T16319] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1082.436506][T16319] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1082.453201][T16319] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1082.462821][T16319] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1082.487053][T16319] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1082.498408][ T5889] usb 5-1: USB disconnect, device number 89 [ 1082.516902][T16319] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1082.549106][T18526] usb 3-1: device descriptor read/64, error -71 [ 1082.559607][T16319] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1082.703705][T16319] usb 4-1: string descriptor 0 read error: -22 [ 1082.778387][T16319] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1082.819431][T16319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.828477][T18526] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1082.900305][ T5837] usb 2-1: USB disconnect, device number 110 [ 1082.993429][T16319] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1082.999004][T18526] usb 3-1: device descriptor read/64, error -71 [ 1083.119956][T18526] usb usb3-port1: attempt power cycle [ 1083.392139][T16319] usb 4-1: USB disconnect, device number 77 [ 1083.488436][T18526] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1083.529094][T18526] usb 3-1: device descriptor read/8, error -71 [ 1083.789815][T18526] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1083.852154][T18526] usb 3-1: device descriptor read/8, error -71 [ 1084.018652][T16319] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1084.033757][T19690] pim6reg: entered allmulticast mode [ 1084.046451][T19690] pim6reg: left allmulticast mode [ 1084.088525][T18526] usb usb3-port1: unable to enumerate USB device [ 1084.183272][T16319] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 1084.394838][T16319] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1084.482202][T16319] usb 4-1: config 0 has no interface number 0 [ 1084.514093][T16319] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1084.524018][T16319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.532913][T16319] usb 4-1: Product: syz [ 1084.537388][T16319] usb 4-1: Manufacturer: syz [ 1084.542984][T16319] usb 4-1: SerialNumber: syz [ 1084.554896][T16319] usb 4-1: config 0 descriptor?? [ 1084.786439][ T5837] usb 4-1: USB disconnect, device number 78 [ 1084.858460][T16319] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1084.995671][T19700] netlink: 'syz.2.3676': attribute type 2 has an invalid length. [ 1085.011598][T16319] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 1085.022183][T16319] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 1085.036607][T16319] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1085.047297][T16319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.055929][T16319] usb 2-1: Product: ⸉ἱ嵈毃ҡ᳈亠怶䚵翐ན嵽㨚ᨡⶢ赫瓕쒅菝ᖭ唉㻻돡䑅皨褷揫⅓혯쬱慢ດ [ 1085.069601][T16319] usb 2-1: Manufacturer: 䁎䥖饓衣࣋瀘䠫镰ꈈ宜䌽썁吙魌㴤溶ꥀ傹삀豇⬺ [ 1085.109711][T16319] usb 2-1: SerialNumber: 鱢珪굻욵￁뇪楉簁ⶎ뗡錃獪⎐嵩ཬ雈ﯠ㺆죱䭨㡄ｱ퍺澰㍛ƫٶꏊ뾓듨䃆퉘ం⣋駜⅀ [ 1085.234943][ T30] audit: type=1326 audit(1748897771.376:5954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19704 comm="syz.4.3677" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e2fd8e969 code=0x0 [ 1085.298783][T19712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3675'. [ 1085.308924][T19712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3675'. [ 1085.601851][T16319] cdc_ncm 2-1:1.0: bind() failure [ 1085.676124][T16319] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1085.725143][T16319] cdc_ncm 2-1:1.1: bind() failure [ 1085.763233][T16319] usb 2-1: USB disconnect, device number 111 [ 1086.889028][T19742] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3687'. [ 1087.032287][T19714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1087.050731][T19742] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3687'. [ 1087.123677][T19742] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3687'. [ 1087.172578][T19742] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3687'. [ 1087.229603][T19742] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3687'. [ 1087.311192][T19742] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3687'. [ 1087.331725][T19742] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3687'. [ 1087.342372][T19742] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3687'. [ 1087.429895][ T5837] hid-generic 0000:0003:0006.003A: item fetching failed at offset 5/183 [ 1087.447315][ T5837] hid-generic 0000:0003:0006.003A: probe with driver hid-generic failed with error -22 [ 1087.478365][T18526] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1087.823285][T18526] usb 5-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1087.868408][ T10] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1087.906695][T18526] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1087.927637][T18526] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1088.038714][T18526] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1088.048000][T18526] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1088.068398][T18526] usb 5-1: Manufacturer: syz [ 1088.073072][T18526] usb 5-1: SerialNumber: syz [ 1088.330940][T19761] dlm: no locking on control device [ 1088.342132][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1088.404732][ T10] usb 2-1: config 0 has no interfaces? [ 1088.420699][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1088.440055][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.471186][ T10] usb 2-1: config 0 descriptor?? [ 1088.630083][T16319] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1088.701213][T19763] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1088.850516][T16319] usb 4-1: Using ep0 maxpacket: 32 [ 1088.873750][T16319] usb 4-1: config 0 has an invalid interface number: 42 but max is 0 [ 1088.894130][T16319] usb 4-1: config 0 has no interface number 0 [ 1088.942090][T16319] usb 4-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=42.27 [ 1089.062671][T16319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.079350][T16319] usb 4-1: Product: syz [ 1089.085263][T16319] usb 4-1: Manufacturer: syz [ 1089.098426][T16319] usb 4-1: SerialNumber: syz [ 1089.151001][T16319] usb 4-1: config 0 descriptor?? [ 1089.228509][ T5837] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1089.387507][ T30] audit: type=1326 audit(1748897775.526:5955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19760 comm="syz.3.3693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6538e969 code=0x7ffc0000 [ 1089.434042][T16319] usb 4-1: Found UVC 0.00 device syz (1bcf:0b40) [ 1089.444015][T16319] usb 4-1: Forcing UVC version to 1.0a [ 1089.451689][ T30] audit: type=1326 audit(1748897775.526:5956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19760 comm="syz.3.3693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f0b6538e969 code=0x7ffc0000 [ 1089.478387][T16319] usb 4-1: No valid video chain found. [ 1089.500614][ T5837] usb 3-1: Using ep0 maxpacket: 32 [ 1089.514431][ T5837] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1089.523253][T16319] usb 4-1: USB disconnect, device number 79 [ 1089.542980][ T30] audit: type=1326 audit(1748897775.556:5957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19760 comm="syz.3.3693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6538e969 code=0x7ffc0000 [ 1089.582396][ T30] audit: type=1326 audit(1748897775.556:5958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19760 comm="syz.3.3693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6538e969 code=0x7ffc0000 [ 1089.615166][ T5837] usb 3-1: can't read configurations, error -61 [ 1089.848586][ T5837] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1090.008938][ T5837] usb 3-1: Using ep0 maxpacket: 32 [ 1090.132572][ T5837] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1090.187330][ T5837] usb 3-1: can't read configurations, error -61 [ 1090.222421][ T5837] usb usb3-port1: attempt power cycle [ 1090.420754][ T978] usb 2-1: USB disconnect, device number 112 [ 1090.548448][T16319] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 1090.656310][T18526] yealink 5-1:36.0: invalid payload size 0, expected 16 [ 1090.663515][ T5837] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1090.686176][T18526] input: Yealink usb-p1k as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:36.0/input/input139 [ 1090.708580][T16319] usb 4-1: device descriptor read/64, error -71 [ 1090.709386][ T5837] usb 3-1: Using ep0 maxpacket: 32 [ 1090.734539][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1090.741667][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1090.748641][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1090.755627][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1090.762627][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1090.769638][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1090.776621][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1090.783588][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1090.790374][ C1] yealink 5-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 1090.830939][ T5837] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1090.846494][T18526] usb 5-1: USB disconnect, device number 90 [ 1090.852579][ T5837] usb 3-1: can't read configurations, error -61 [ 1090.968451][T16319] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 1090.968508][ T978] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1091.008550][ T5837] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1091.039820][ T5837] usb 3-1: Using ep0 maxpacket: 32 [ 1091.046967][ T5837] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1091.054986][ T5837] usb 3-1: can't read configurations, error -61 [ 1091.083716][ T5837] usb usb3-port1: unable to enumerate USB device [ 1091.118469][T16319] usb 4-1: device descriptor read/64, error -71 [ 1091.158399][ T978] usb 2-1: Using ep0 maxpacket: 16 [ 1091.166323][ T978] usb 2-1: config 166 has an invalid interface number: 177 but max is 1 [ 1091.175280][ T978] usb 2-1: config 166 has an invalid interface number: 34 but max is 1 [ 1091.183796][ T978] usb 2-1: config 166 has no interface number 0 [ 1091.190291][ T978] usb 2-1: config 166 has no interface number 1 [ 1091.196720][ T978] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1091.208157][ T978] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1091.219461][ T978] usb 2-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1091.230535][ T978] usb 2-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1091.242676][ T978] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 1091.254411][ T978] usb 2-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1091.270971][ T978] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1091.284847][ T978] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1091.296493][ T978] usb 2-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1091.313389][ T978] usb 2-1: config 166 interface 177 has no altsetting 0 [ 1091.320693][ T978] usb 2-1: config 166 interface 34 has no altsetting 0 [ 1091.330562][ T978] usb 2-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 1091.343096][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.351592][ T978] usb 2-1: Product: syz [ 1091.355858][ T978] usb 2-1: Manufacturer: syz [ 1091.364485][ T978] usb 2-1: SerialNumber: syz [ 1091.369741][T16319] usb usb4-port1: attempt power cycle [ 1091.562278][T19789] FAULT_INJECTION: forcing a failure. [ 1091.562278][T19789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1091.575765][T19789] CPU: 1 UID: 0 PID: 19789 Comm: syz.0.3702 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(full) [ 1091.575792][T19789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1091.575806][T19789] Call Trace: [ 1091.575814][T19789] [ 1091.575823][T19789] dump_stack_lvl+0x189/0x250 [ 1091.575862][T19789] ? __pfx____ratelimit+0x10/0x10 [ 1091.575887][T19789] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1091.575928][T19789] ? __pfx__printk+0x10/0x10 [ 1091.575961][T19789] should_fail_ex+0x414/0x560 [ 1091.575993][T19789] _copy_to_user+0x31/0xb0 [ 1091.576015][T19789] simple_read_from_buffer+0xe1/0x170 [ 1091.576050][T19789] proc_fail_nth_read+0x1df/0x250 [ 1091.576074][T19789] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1091.576099][T19789] ? rw_verify_area+0x258/0x650 [ 1091.576124][T19789] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1091.576147][T19789] vfs_read+0x200/0x980 [ 1091.576180][T19789] ? __pfx___mutex_lock+0x10/0x10 [ 1091.576208][T19789] ? __pfx_vfs_read+0x10/0x10 [ 1091.576236][T19789] ? __fget_files+0x2a/0x420 [ 1091.576261][T19789] ? __fget_files+0x3a0/0x420 [ 1091.576279][T19789] ? __fget_files+0x2a/0x420 [ 1091.576302][T19789] ksys_read+0x145/0x250 [ 1091.576320][T19789] ? __fget_files+0x2a/0x420 [ 1091.576334][T19789] ? __pfx_ksys_read+0x10/0x10 [ 1091.576358][T19789] ? do_syscall_64+0xbe/0x3b0 [ 1091.576379][T19789] do_syscall_64+0xfa/0x3b0 [ 1091.576396][T19789] ? lockdep_hardirqs_on+0x9c/0x150 [ 1091.576414][T19789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.576428][T19789] ? clear_bhb_loop+0x60/0xb0 [ 1091.576445][T19789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.576459][T19789] RIP: 0033:0x7f21e318d37c [ 1091.576473][T19789] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1091.576486][T19789] RSP: 002b:00007f21e3fb0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1091.576502][T19789] RAX: ffffffffffffffda RBX: 00007f21e33b5fa0 RCX: 00007f21e318d37c [ 1091.576513][T19789] RDX: 000000000000000f RSI: 00007f21e3fb00a0 RDI: 0000000000000004 [ 1091.576522][T19789] RBP: 00007f21e3fb0090 R08: 0000000000000000 R09: 0000000000000000 [ 1091.576531][T19789] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001 [ 1091.576541][T19789] R13: 0000000000000000 R14: 00007f21e33b5fa0 R15: 00007f21e34dfa28 [ 1091.576562][T19789] [ 1091.911931][ T978] ums-realtek 2-1:166.177: USB Mass Storage device detected [ 1091.958378][T16319] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 1091.989659][T16319] usb 4-1: device descriptor read/8, error -71 [ 1092.125638][T19780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1092.156266][T19780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1092.177954][ C1] raw-gadget.2 gadget.1: ignoring, device is not running [ 1092.194602][ T978] ums-realtek 2-1:166.34: USB Mass Storage device detected [ 1092.206632][T19807] IPVS: set_ctl: invalid protocol: 1 224.0.0.1:20000 [ 1092.249388][T16319] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 1092.274623][ T978] ums-realtek 2-1:166.34: probe with driver ums-realtek failed with error -5 [ 1092.294930][T16319] usb 4-1: device descriptor read/8, error -71 [ 1092.297001][ T978] usb 2-1: Found UVC 0.00 device syz (0bda:0138) [ 1092.326102][ T978] usb 2-1: No valid video chain found. [ 1092.367445][ T978] usb 2-1: USB disconnect, device number 113 [ 1092.380003][ T10] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1092.418975][T16319] usb usb4-port1: unable to enumerate USB device [ 1092.550278][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1092.568995][ T10] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1092.593301][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.611334][ T10] usb 3-1: config 0 descriptor?? [ 1092.622447][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 1092.958446][T16319] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1093.169970][T16319] usb 5-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1093.183283][T16319] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1093.195185][T16319] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1093.218606][T16319] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1093.227984][T16319] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1093.247912][T16319] usb 5-1: Manufacturer: syz [ 1093.253347][T16319] usb 5-1: SerialNumber: syz [ 1093.273977][ T10] pwc: recv_control_msg error -71 req 02 val 2700 [ 1093.303100][ T10] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1093.316755][ T10] pwc: recv_control_msg error -71 req 04 val 1000 [ 1093.326302][ T10] pwc: recv_control_msg error -71 req 04 val 1300 [ 1093.361354][ T10] pwc: recv_control_msg error -71 req 04 val 1400 [ 1093.387381][ T10] pwc: recv_control_msg error -71 req 02 val 2000 [ 1093.409254][ T10] pwc: recv_control_msg error -71 req 02 val 2100 [ 1093.426447][ T10] pwc: recv_control_msg error -71 req 04 val 1500 [ 1093.440080][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 1093.459884][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 1093.477896][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 1093.488744][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 1093.507466][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 1093.535923][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 1093.563018][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 1093.676151][ T10] pwc: Registered as video103. [ 1093.702150][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input140 [ 1093.798966][ T10] usb 3-1: USB disconnect, device number 98 [ 1093.848740][T18505] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1094.257704][T18505] usb 4-1: config 0 has no interfaces? [ 1094.367940][T18505] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1094.435947][T19858] __nla_validate_parse: 58 callbacks suppressed [ 1094.436218][T19858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3717'. [ 1094.452962][T18505] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.506606][T19858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3717'. [ 1094.542466][T18505] usb 4-1: Product: syz [ 1094.546966][T18505] usb 4-1: Manufacturer: syz [ 1094.552135][T18505] usb 4-1: SerialNumber: syz [ 1094.566736][T18505] usb 4-1: config 0 descriptor?? [ 1094.606805][T19860] loop6: detected capacity change from 0 to 7 [ 1094.677528][T19862] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1094.747292][ T5843] Dev loop6: unable to read RDB block 7 [ 1094.776210][ T5843] loop6: AHDI p1 p2 p3 p4 [ 1094.790276][ T5843] loop6: partition table partially beyond EOD, truncated [ 1094.814300][ T5843] loop6: p1 start 2401632844 is beyond EOD, truncated [ 1094.835257][ T5843] loop6: p2 size 47 extends beyond EOD, truncated [ 1094.865945][ T5843] loop6: p3 start 1886353253 is beyond EOD, truncated [ 1094.926000][T19860] Dev loop6: unable to read RDB block 7 [ 1094.954432][T19860] loop6: AHDI p1 p2 p3 p4 [ 1094.971374][T19860] loop6: partition table partially beyond EOD, truncated [ 1094.986479][T19860] loop6: p1 start 2401632844 is beyond EOD, truncated [ 1094.993826][T19860] loop6: p2 size 47 extends beyond EOD, truncated [ 1095.006181][T19860] loop6: p3 start 1886353253 is beyond EOD, truncated [ 1095.133015][T19833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1095.172377][T19833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1095.254203][ T5843] udevd[5843]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1095.314392][T19871] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3723'. [ 1095.377447][ T5843] udevd[5843]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1096.299742][T16319] yealink 5-1:36.0: invalid payload size 0, expected 16 [ 1096.375849][T16319] input: Yealink usb-p1k as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:36.0/input/input141 [ 1096.433356][T19891] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3728'. [ 1096.443056][T19891] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3728'. [ 1096.476831][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1096.483877][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1096.491074][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1096.498121][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1096.505184][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1096.512218][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1096.519377][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1096.526535][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1096.533358][ C0] yealink 5-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 1096.553466][T16319] usb 5-1: USB disconnect, device number 91 [ 1096.920869][ T5837] usb 4-1: USB disconnect, device number 84 [ 1097.518508][T16319] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1097.683140][T16319] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1097.694224][T16319] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1097.739705][T16319] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1097.788062][T16319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1097.808528][T16319] usb 2-1: SerialNumber: syz [ 1097.818740][T18505] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1097.980376][T18505] usb 4-1: Using ep0 maxpacket: 8 [ 1097.993739][T18505] usb 4-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 1098.027159][T18505] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.043203][T18505] usb 4-1: Product: syz [ 1098.065818][T18505] usb 4-1: Manufacturer: syz [ 1098.076449][T18505] usb 4-1: SerialNumber: syz [ 1098.105452][T18505] usb 4-1: config 0 descriptor?? [ 1098.141061][T18505] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 1098.288607][ T5837] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1098.454814][ T5837] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1098.471352][ T5837] usb 3-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 1098.496849][ T5837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.639966][ T5837] usb 3-1: config 0 descriptor?? [ 1099.445796][T18505] input: sonixj as /devices/platform/dummy_hcd.3/usb4/4-1/input/input142 [ 1100.185692][T18505] usb 4-1: USB disconnect, device number 85 [ 1100.214387][T16319] usb 2-1: 0:2 : does not exist [ 1100.370833][T19928] netlink: 'syz.0.3736': attribute type 1 has an invalid length. [ 1100.385151][T16319] usb 2-1: unit 255 not found! [ 1100.440046][T16319] usb 2-1: USB disconnect, device number 114 [ 1100.813282][T19920] xt_hashlimit: size too large, truncated to 1048576 [ 1100.848670][T16319] usb 2-1: new low-speed USB device number 115 using dummy_hcd [ 1101.033310][T16319] usb 2-1: config 6 has an invalid interface number: 137 but max is 0 [ 1101.074248][T16319] usb 2-1: config 6 has no interface number 0 [ 1101.106859][T16319] usb 2-1: config 6 interface 137 has no altsetting 0 [ 1101.179917][T16319] usb 2-1: string descriptor 0 read error: -22 [ 1101.186234][T16319] usb 2-1: New USB device found, idVendor=19d2, idProduct=0042, bcdDevice=22.a4 [ 1101.213360][T16319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.341027][ T5837] usb 3-1: USB disconnect, device number 99 [ 1101.554491][T16319] usb 2-1: USB disconnect, device number 115 [ 1102.116733][T19954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3742'. [ 1102.918498][T19965] kvm: pic: non byte write [ 1104.459010][T18505] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1104.658552][T16574] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1104.671477][T18505] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1104.708574][T18505] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1104.729776][T19982] trusted_key: encrypted_key: insufficient parameters specified [ 1104.763050][T18505] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.815922][T19982] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1104.826000][T18505] usb 3-1: config 0 descriptor?? [ 1104.831154][T16574] usb 4-1: Using ep0 maxpacket: 16 [ 1104.860404][T16574] usb 4-1: config 0 has an invalid descriptor of length 131, skipping remainder of the config [ 1104.881154][T18505] pwc: Askey VC010 type 2 USB webcam detected. [ 1104.902951][T16574] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1104.913243][T16574] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 1104.925582][T16574] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.947833][T16574] usb 4-1: config 0 descriptor?? [ 1105.237067][T19991] netlink: 'syz.1.3751': attribute type 1 has an invalid length. [ 1105.277228][T19991] xt_hashlimit: size too large, truncated to 1048576 [ 1105.517392][T18505] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1105.534384][T19993] xt_TCPMSS: Only works on TCP SYN packets [ 1105.547757][T19993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3750'. [ 1105.571657][T18505] pwc: recv_control_msg error -32 req 02 val 2700 [ 1105.596811][T18505] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1105.619741][T18505] pwc: recv_control_msg error -32 req 04 val 1000 [ 1105.639434][T18505] pwc: recv_control_msg error -32 req 04 val 1300 [ 1106.019079][T18505] pwc: recv_control_msg error -71 req 02 val 2000 [ 1106.073012][T18505] pwc: recv_control_msg error -71 req 02 val 2100 [ 1106.137371][T18505] pwc: recv_control_msg error -71 req 04 val 1500 [ 1106.166990][T18505] pwc: recv_control_msg error -71 req 02 val 2500 [ 1106.177326][T18505] pwc: recv_control_msg error -71 req 02 val 2400 [ 1106.281084][T18505] pwc: recv_control_msg error -71 req 02 val 2600 [ 1106.345043][T20011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3755'. [ 1106.364663][T18505] pwc: recv_control_msg error -71 req 02 val 2900 [ 1106.386133][T20011] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3755'. [ 1106.395816][T18505] pwc: recv_control_msg error -71 req 02 val 2800 [ 1106.442672][T18505] pwc: recv_control_msg error -71 req 04 val 1100 [ 1106.485658][T18505] pwc: recv_control_msg error -71 req 04 val 1200 [ 1106.522753][T18505] pwc: Registered as video103. [ 1106.571429][T18505] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input143 [ 1106.680105][T18505] usb 3-1: USB disconnect, device number 100 [ 1106.768728][ T978] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1106.978422][ T978] usb 5-1: Using ep0 maxpacket: 16 [ 1107.012735][ T978] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 1107.048223][ T978] usb 5-1: config 0 has no interface number 0 [ 1107.076205][ T978] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1107.158224][ T978] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1107.235914][ T978] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1107.252149][ T978] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1107.296673][ T978] usb 5-1: Product: syz [ 1107.320362][T20038] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3763'. [ 1107.345059][ T978] usb 5-1: SerialNumber: syz [ 1107.350257][ T5837] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1107.410096][ T978] usb 5-1: config 0 descriptor?? [ 1107.433657][ T978] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 1107.455807][ T978] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input144 [ 1107.639896][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 1107.725290][T16319] usb 5-1: USB disconnect, device number 92 [ 1107.826845][T20044] netlink: 'syz.4.3765': attribute type 1 has an invalid length. [ 1107.841941][T20044] xt_hashlimit: size too large, truncated to 1048576 [ 1107.852361][T16319] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1107.870425][ T5837] usb 2-1: config 0 has no interfaces? [ 1107.964849][ T5837] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1108.142427][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.225061][ T5837] usb 2-1: Product: syz [ 1108.279965][ T5837] usb 2-1: Manufacturer: syz [ 1108.297936][ T5837] usb 2-1: SerialNumber: syz [ 1108.386667][ T5837] usb 2-1: config 0 descriptor?? [ 1109.120663][T18526] usb 4-1: USB disconnect, device number 86 [ 1109.314966][T20033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1109.356059][T20033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1109.868512][T18526] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1110.030332][T18526] usb 5-1: config 0 has no interfaces? [ 1110.137819][T18526] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1110.183229][T18526] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.206249][T18526] usb 5-1: Product: syz [ 1110.218736][T18526] usb 5-1: Manufacturer: syz [ 1110.230719][T18526] usb 5-1: SerialNumber: syz [ 1110.258586][T18526] usb 5-1: config 0 descriptor?? [ 1110.348477][T18505] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1110.638701][T18505] usb 3-1: Using ep0 maxpacket: 16 [ 1110.666360][T18505] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1110.714831][T18505] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1110.811173][T18505] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1110.833056][ T5837] usb 2-1: USB disconnect, device number 116 [ 1110.903020][T18505] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.967136][T18505] usb 3-1: Product: 鋉졥ⓝ뜬⦄Λ佘ꭍ魁얖⓳萔㬫哊⋕쿝ꏽ⊂儷쒧㸽寚癘㿇ﳋ畍늵嫦넋﹑￸⹵믐᪑蓈錰㣁潫⛰슻⊅蓷䬪哨륫師윆ಓ䰤꺟炱൰太칛໱⸣ᒜ伸ͼ [ 1111.086758][T18505] usb 3-1: Manufacturer: 䀁 [ 1111.095670][T18505] usb 3-1: SerialNumber: 妅䰛쐣潕戺纀 [ 1111.191680][T20087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1111.206590][T20087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1111.291087][T18526] usb 5-1: USB disconnect, device number 93 [ 1111.338671][ T5837] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1111.355659][T18505] usb 3-1: 0:2 : does not exist [ 1111.402747][T18505] usb 3-1: USB disconnect, device number 101 [ 1111.410038][T16319] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1111.475012][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1111.496868][ T5837] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1111.540097][ T5837] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1111.598644][T16319] usb 4-1: Using ep0 maxpacket: 16 [ 1111.606174][T16319] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1111.607298][ T5837] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1111.630321][T16319] usb 4-1: too many endpoints for config 1 interface 1 altsetting 0: 31, using maximum allowed: 30 [ 1111.656290][ T5837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.658659][T16319] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 31 [ 1111.679889][T20085] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1111.707826][T16319] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1111.712721][ T5837] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1111.745382][T16319] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 1111.780811][T16319] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1111.797819][T16319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.813242][T16319] usb 4-1: Product: syz [ 1111.825220][T16319] usb 4-1: Manufacturer: syz [ 1111.830421][T16319] usb 4-1: SerialNumber: syz [ 1111.923759][T18505] usb 2-1: USB disconnect, device number 117 [ 1112.037890][T20096] syzkaller1: entered promiscuous mode [ 1112.050317][T20096] syzkaller1: entered allmulticast mode [ 1112.071640][T16319] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 1112.094676][T16319] cdc_ncm 4-1:1.0: bind() failure [ 1112.115261][T20099] netlink: 2036 bytes leftover after parsing attributes in process `syz.2.3781'. [ 1112.126924][T20099] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3781'. [ 1112.136042][T16319] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1112.136095][T16319] cdc_ncm 4-1:1.1: bind() failure [ 1112.149752][T16319] usb 4-1: USB disconnect, device number 87 [ 1112.244936][T20085] xt_socket: unknown flags 0xc [ 1112.418372][T16574] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1112.580392][T16574] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 192, changing to 11 [ 1112.627579][T16574] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1112.684561][T16574] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1112.710218][T16574] usb 3-1: Manufacturer: syz [ 1112.734320][T16574] usb 3-1: SerialNumber: syz [ 1112.770564][T20111] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3782'. [ 1112.803108][T20111] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3782'. [ 1113.261595][T20117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3785'. [ 1113.312028][T20117] netlink: 'syz.1.3785': attribute type 8 has an invalid length. [ 1113.615993][T20129] loop6: detected capacity change from 0 to 7 [ 1113.645764][T20129] Dev loop6: unable to read RDB block 7 [ 1113.674082][T20129] loop6: AHDI p1 p2 p3 p4 [ 1113.687531][T20129] loop6: partition table partially beyond EOD, truncated [ 1113.734864][T20129] loop6: p1 start 2401632844 is beyond EOD, truncated [ 1113.958451][T20129] loop6: p2 size 47 extends beyond EOD, truncated [ 1113.966686][T20129] loop6: p3 start 1886353253 is beyond EOD, truncated [ 1114.048438][T18526] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1114.202876][ T5843] udevd[5843]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1114.816307][T18526] usb 2-1: config 0 has no interfaces? [ 1114.858774][T18526] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1114.892526][T18526] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.922568][T18526] usb 2-1: Product: syz [ 1114.946423][T18526] usb 2-1: Manufacturer: syz [ 1114.974176][T18526] usb 2-1: SerialNumber: syz [ 1115.272633][T16574] usbhid 3-1:36.0: couldn't find an input interrupt endpoint [ 1115.279073][T18526] usb 2-1: config 0 descriptor?? [ 1115.314964][T16574] usb 3-1: USB disconnect, device number 102 [ 1115.759804][T20146] veth0: entered promiscuous mode [ 1115.768620][T20146] veth0: left promiscuous mode [ 1115.892159][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.900692][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.018887][T20151] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3793'. [ 1116.107275][T20153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1116.130985][T20153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1116.655076][T20171] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3798'. [ 1117.797151][ T5837] usb 2-1: USB disconnect, device number 118 [ 1118.168582][T20182] loop2: detected capacity change from 0 to 7 [ 1118.231880][T20182] loop2: [ 1118.271627][T20182] loop2: partition table partially beyond EOD, truncated [ 1118.693942][ T30] audit: type=1326 audit(1748897804.836:5959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20188 comm="syz.3.3802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6538e969 code=0x7ffc0000 [ 1118.795540][ T30] audit: type=1326 audit(1748897804.836:5960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20188 comm="syz.3.3802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6538e969 code=0x7ffc0000 [ 1118.883146][ T30] audit: type=1326 audit(1748897805.026:5961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20188 comm="syz.3.3802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0b6538e969 code=0x7ffc0000 [ 1118.917810][ T30] audit: type=1326 audit(1748897805.026:5962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20188 comm="syz.3.3802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6538e969 code=0x7ffc0000 [ 1118.944452][ T30] audit: type=1326 audit(1748897805.026:5963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20188 comm="syz.3.3802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6538e969 code=0x7ffc0000 [ 1119.108572][T16574] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1119.207965][ T30] audit: type=1326 audit(1748897805.026:5964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20188 comm="syz.3.3802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f0b6538e969 code=0x7ffc0000 [ 1119.231262][ T30] audit: type=1326 audit(1748897805.026:5965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20188 comm="syz.3.3802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6538e969 code=0x7ffc0000 [ 1119.287166][ T30] audit: type=1326 audit(1748897805.026:5966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20188 comm="syz.3.3802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6538e969 code=0x7ffc0000 [ 1119.318725][ T5837] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1119.350100][T16574] usb 2-1: config 0 has no interfaces? [ 1119.358123][T16574] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1119.377279][T16574] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1119.423498][ T30] audit: type=1326 audit(1748897805.026:5967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20188 comm="syz.3.3802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0b6538e969 code=0x7ffc0000 [ 1119.448785][T16574] usb 2-1: Product: syz [ 1119.453031][T16574] usb 2-1: Manufacturer: syz [ 1119.463096][ T30] audit: type=1326 audit(1748897805.026:5968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20188 comm="syz.3.3802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6538e969 code=0x7ffc0000 [ 1119.487861][T16574] usb 2-1: config 0 descriptor?? [ 1119.558580][ T5837] usb 4-1: Using ep0 maxpacket: 8 [ 1119.599355][ T5837] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1119.607705][ T5837] usb 4-1: config 179 has no interface number 0 [ 1119.646415][ T5837] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1119.720983][ T5837] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1119.888323][ T5837] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1119.957491][T16319] usb 2-1: USB disconnect, device number 119 [ 1119.987306][ T5837] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1120.023096][ T5837] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1120.032566][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.046935][T20197] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1120.118751][T16574] usb 5-1: new low-speed USB device number 94 using dummy_hcd [ 1120.248423][T18526] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1120.280620][T16574] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1120.290014][ T5837] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input145 [ 1120.344874][T16574] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1120.408493][T18526] usb 3-1: device descriptor read/64, error -71 [ 1120.441225][T16574] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 1120.472900][T16574] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1120.496068][T16574] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.526919][T20207] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1120.607791][ T5837] usb 4-1: USB disconnect, device number 88 [ 1120.607855][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1120.607905][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1120.658695][ T5837] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1120.670286][T18526] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1120.686957][T16574] hub 5-1:1.0: bad descriptor, ignoring hub [ 1120.759060][T16574] hub 5-1:1.0: probe with driver hub failed with error -5 [ 1120.789152][T16574] cdc_wdm 5-1:1.0: skipping garbage [ 1120.818490][T18526] usb 3-1: device descriptor read/64, error -71 [ 1120.833752][T16574] cdc_wdm 5-1:1.0: skipping garbage [ 1120.865751][T16574] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1120.894805][T16574] cdc_wdm 5-1:1.0: Unknown control protocol [ 1120.928889][T18526] usb usb3-port1: attempt power cycle [ 1121.338832][T18526] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1121.370494][T18526] usb 3-1: device descriptor read/8, error -71 [ 1121.501182][T20215] "syz.4.3809" (20215) uses obsolete ecb(arc4) skcipher [ 1121.586645][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1121.593641][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1121.678404][T18526] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1121.729479][T18526] usb 3-1: device descriptor read/8, error -71 [ 1121.753702][T20224] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 20224 comm: syz.3.3811) [ 1121.891938][T18526] usb usb3-port1: unable to enumerate USB device [ 1121.917235][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1121.923905][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1121.930412][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1121.937139][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1121.943477][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1121.950133][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1121.956637][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1121.963344][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1121.970018][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1121.973556][T20229] loop2: detected capacity change from 0 to 7 [ 1121.976638][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1121.976871][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1121.995406][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1122.004109][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1122.010952][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1122.017281][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1122.024012][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1122.030409][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1122.037029][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1122.104256][ T5841] loop2: [ 1122.151515][ T5841] loop2: partition table partially beyond EOD, truncated [ 1122.165435][T20229] loop2: [ 1122.187350][T20229] loop2: partition table partially beyond EOD, truncated [ 1123.458603][T18526] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1123.622672][T18526] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1123.652475][T18526] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.701536][T18526] usb 3-1: Product: syz [ 1123.728314][T18526] usb 3-1: Manufacturer: syz [ 1123.757333][T18526] usb 3-1: SerialNumber: syz [ 1123.784023][T18526] usb 3-1: config 0 descriptor?? [ 1123.841640][T18526] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1124.179532][T18526] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 1124.258426][T18526] sq905c 3-1:0.0: probe with driver sq905c failed with error -71 [ 1124.298499][T18526] usb 3-1: USB disconnect, device number 107 [ 1124.365605][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 1124.508626][ T5837] usb 5-1: USB disconnect, device number 94 [ 1124.740555][T20265] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3820'. [ 1124.749807][T20265] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3820'. [ 1124.888405][ T5837] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1125.068501][ T5837] usb 3-1: Using ep0 maxpacket: 16 [ 1125.103858][ T5837] usb 3-1: config 3 has an invalid interface number: 25 but max is 1 [ 1125.136501][ T5837] usb 3-1: config 3 has an invalid interface number: 198 but max is 1 [ 1125.154962][ T5837] usb 3-1: config 3 has no interface number 0 [ 1125.169569][ T5837] usb 3-1: config 3 has no interface number 1 [ 1125.192196][ T5837] usb 3-1: config 3 interface 198 altsetting 11 endpoint 0xE has an invalid bInterval 129, changing to 11 [ 1125.231522][ T5837] usb 3-1: config 3 interface 198 altsetting 11 has a duplicate endpoint with address 0xE, skipping [ 1125.256743][ T5837] usb 3-1: config 3 interface 198 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 1125.291314][ T5837] usb 3-1: config 3 interface 25 has no altsetting 0 [ 1125.315103][ T5837] usb 3-1: config 3 interface 198 has no altsetting 0 [ 1125.356695][ T5837] usb 3-1: New USB device found, idVendor=0403, idProduct=d071, bcdDevice=57.cc [ 1125.378648][ T5837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1125.417368][ T5837] usb 3-1: Product: Ѝ [ 1125.427519][ T5837] usb 3-1: Manufacturer: ␉ [ 1125.672907][ T5837] ftdi_sio 3-1:3.25: FTDI USB Serial Device converter detected [ 1125.699653][ T5837] ftdi_sio ttyUSB0: unknown device type: 0x57cc [ 1125.720619][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 1125.720636][ T30] audit: type=1326 audit(1748897811.866:6008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20269 comm="syz.0.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e318e969 code=0x7ffc0000 [ 1125.724356][ T5837] ftdi_sio 3-1:3.198: FTDI USB Serial Device converter detected [ 1125.798419][ T30] audit: type=1326 audit(1748897811.866:6009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20269 comm="syz.0.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e318e969 code=0x7ffc0000 [ 1125.806617][ T5837] ftdi_sio ttyUSB1: unknown device type: 0x57cc [ 1125.868459][ T5837] usb 3-1: USB disconnect, device number 108 [ 1125.920150][ T5837] ftdi_sio 3-1:3.25: device disconnected [ 1125.928132][ T5837] ftdi_sio 3-1:3.198: device disconnected [ 1125.949356][ T30] audit: type=1326 audit(1748897811.976:6010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20269 comm="syz.0.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f21e318e969 code=0x7ffc0000 [ 1125.978599][ T30] audit: type=1326 audit(1748897811.976:6011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20269 comm="syz.0.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e318e969 code=0x7ffc0000 [ 1126.005274][ T30] audit: type=1326 audit(1748897811.976:6012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20269 comm="syz.0.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e318e969 code=0x7ffc0000 [ 1126.034297][ T30] audit: type=1326 audit(1748897811.976:6013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20269 comm="syz.0.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f21e318e969 code=0x7ffc0000 [ 1126.112781][ T30] audit: type=1326 audit(1748897811.976:6014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20269 comm="syz.0.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e318e969 code=0x7ffc0000 [ 1126.144538][ T30] audit: type=1326 audit(1748897811.976:6015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20269 comm="syz.0.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e318e969 code=0x7ffc0000 [ 1126.172233][ T30] audit: type=1326 audit(1748897811.976:6016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20269 comm="syz.0.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f21e318e969 code=0x7ffc0000 [ 1126.218118][ T30] audit: type=1326 audit(1748897811.976:6017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20269 comm="syz.0.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e318e969 code=0x7ffc0000 [ 1127.030561][T18526] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1127.295951][T18526] usb 3-1: config 0 has no interfaces? [ 1127.315115][T18526] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1127.327667][T18526] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.337068][T18526] usb 3-1: Product: syz [ 1127.348383][T18526] usb 3-1: Manufacturer: syz [ 1127.376661][T18526] usb 3-1: SerialNumber: syz [ 1127.416028][T18526] usb 3-1: config 0 descriptor?? [ 1128.020497][T20283] macvlan0: left promiscuous mode [ 1128.032915][T20283] ip6gretap1: left promiscuous mode [ 1128.038592][T20283] ip6gretap1: left allmulticast mode [ 1128.106771][T20310] loop2: detected capacity change from 0 to 7 [ 1128.114838][T20310] loop2: [ 1128.125539][T20310] loop2: partition table partially beyond EOD, truncated [ 1128.403112][T20292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1128.431384][T20292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1129.363388][T20328] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3837'. [ 1130.337036][ T978] usb 3-1: USB disconnect, device number 109 [ 1130.426886][T20337] FAULT_INJECTION: forcing a failure. [ 1130.426886][T20337] name failslab, interval 1, probability 0, space 0, times 0 [ 1130.426968][T20337] CPU: 1 UID: 0 PID: 20337 Comm: syz.1.3839 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(full) [ 1130.426992][T20337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1130.427005][T20337] Call Trace: [ 1130.427013][T20337] [ 1130.427022][T20337] dump_stack_lvl+0x189/0x250 [ 1130.427057][T20337] ? __pfx____ratelimit+0x10/0x10 [ 1130.427083][T20337] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1130.427114][T20337] ? __pfx__printk+0x10/0x10 [ 1130.427141][T20337] ? look_up_lock_class+0x74/0x170 [ 1130.427173][T20337] should_fail_ex+0x414/0x560 [ 1130.427204][T20337] should_failslab+0xa8/0x100 [ 1130.427237][T20337] __kmalloc_noprof+0xcb/0x4f0 [ 1130.427265][T20337] ? io_alloc_ocqe+0x6f/0x550 [ 1130.427296][T20337] io_alloc_ocqe+0x6f/0x550 [ 1130.427320][T20337] ? io_cqe_cache_refill+0x1a8/0x240 [ 1130.427351][T20337] io_cqe_overflow_locked+0x26/0x40 [ 1130.427398][T20337] __io_submit_flush_completions+0x248/0xe40 [ 1130.427438][T20337] io_submit_sqes+0x181b/0x1c50 [ 1130.427494][T20337] __se_sys_io_uring_enter+0x2df/0x2b20 [ 1130.427540][T20337] ? ksys_write+0x1cb/0x250 [ 1130.427571][T20337] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1130.427595][T20337] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1130.427622][T20337] ? __pfx_vfs_write+0x10/0x10 [ 1130.427652][T20337] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1130.427683][T20337] ? __fget_files+0x3a0/0x420 [ 1130.427711][T20337] ? fput+0xa0/0xd0 [ 1130.427732][T20337] ? ksys_write+0x22a/0x250 [ 1130.427762][T20337] ? __pfx_ksys_write+0x10/0x10 [ 1130.427787][T20337] ? rcu_is_watching+0x15/0xb0 [ 1130.427819][T20337] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1130.427848][T20337] do_syscall_64+0xfa/0x3b0 [ 1130.427873][T20337] ? lockdep_hardirqs_on+0x9c/0x150 [ 1130.427897][T20337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.427917][T20337] ? clear_bhb_loop+0x60/0xb0 [ 1130.427947][T20337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.427966][T20337] RIP: 0033:0x7f238358e969 [ 1130.427989][T20337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1130.428005][T20337] RSP: 002b:00007f238440b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1130.428027][T20337] RAX: ffffffffffffffda RBX: 00007f23837b5fa0 RCX: 00007f238358e969 [ 1130.428042][T20337] RDX: 0000000000000000 RSI: 0000000000000092 RDI: 0000000000000003 [ 1130.428054][T20337] RBP: 00007f238440b090 R08: 0000000000000000 R09: 0000000000000000 [ 1130.428067][T20337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1130.428079][T20337] R13: 0000000000000000 R14: 00007f23837b5fa0 R15: 00007f23838dfa28 [ 1130.428110][T20337] [ 1131.046001][T16319] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1131.198541][T16319] usb 5-1: Using ep0 maxpacket: 32 [ 1131.203816][T16319] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 1131.203838][T16319] usb 5-1: config 0 has no interface number 0 [ 1131.203866][T16319] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1131.203886][T16319] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1131.211495][T16319] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1131.211518][T16319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.211534][T16319] usb 5-1: Product: syz [ 1131.211545][T16319] usb 5-1: Manufacturer: syz [ 1131.211557][T16319] usb 5-1: SerialNumber: syz [ 1131.213921][T16319] usb 5-1: config 0 descriptor?? [ 1131.417711][T16319] radio-si470x 5-1:0.35: this is not a si470x device. [ 1131.448894][T16319] radio-raremono 5-1:0.35: this is not Thanko's Raremono. [ 1131.481741][T16319] usb 5-1: USB disconnect, device number 95 [ 1132.098990][T20365] loop2: detected capacity change from 0 to 7 [ 1132.100294][T20365] loop2: [ 1132.100336][T20365] loop2: partition table partially beyond EOD, truncated [ 1132.338685][T15179] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1132.576867][T15179] usb 2-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1132.589152][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 1132.589170][ T30] audit: type=1800 audit(1748897818.716:6079): pid=20369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3850" name="file0" dev="tmpfs" ino=925 res=0 errno=0 [ 1132.648414][T15179] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1132.678343][T15179] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1132.767827][T15179] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1132.793752][T15179] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1132.868678][T15179] usb 2-1: Manufacturer: syz [ 1132.873420][T15179] usb 2-1: SerialNumber: syz [ 1133.594282][ T978] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1133.710297][ C1] raw-gadget.2 gadget.4: ignoring, device is not running [ 1133.848626][ T978] usb 5-1: device descriptor read/64, error -32 [ 1133.988481][ T5889] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1134.098430][ T978] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1134.224321][ T5889] usb 4-1: config 0 has no interfaces? [ 1134.315563][T20383] netlink: 'syz.2.3854': attribute type 5 has an invalid length. [ 1134.348861][ T5889] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1134.443080][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.468094][ T5889] usb 4-1: Product: syz [ 1134.481038][ T5889] usb 4-1: Manufacturer: syz [ 1134.492105][ T5889] usb 4-1: SerialNumber: syz [ 1134.517729][ T5889] usb 4-1: config 0 descriptor?? [ 1135.006484][T15179] yealink 2-1:36.0: invalid payload size 0, expected 16 [ 1135.047948][T15179] input: Yealink usb-p1k as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:36.0/input/input146 [ 1135.072791][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 1135.080130][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 1135.087242][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 1135.094451][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 1135.101974][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 1135.108972][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 1135.115925][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 1135.122833][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 1135.122851][ C1] yealink 2-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 1135.142043][T15179] usb 2-1: USB disconnect, device number 120 [ 1135.239690][ T978] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1135.386038][T20392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1135.402269][T20392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1135.432287][ T978] usb 5-1: string descriptor 0 read error: -71 [ 1135.488028][T20394] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1135.494690][T20394] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1135.518878][ T978] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1135.519402][T20394] vhci_hcd vhci_hcd.0: Device attached [ 1135.528046][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.556895][T20398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3859'. [ 1135.574273][T20398] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3859'. [ 1135.593109][T20400] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1135.599713][T20400] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1135.614274][ T978] usb 5-1: can't set config #1, error -71 [ 1135.642328][ T978] usb 5-1: USB disconnect, device number 97 [ 1135.664686][T20400] vhci_hcd vhci_hcd.0: Device attached [ 1135.738758][T20401] vhci_hcd: connection closed [ 1135.738998][T20395] vhci_hcd: connection closed [ 1135.746041][T20406] loop2: detected capacity change from 0 to 7 [ 1135.766154][ T36] vhci_hcd: stop threads [ 1135.774438][T20406] loop2: [ 1135.777656][T20406] loop2: partition table partially beyond EOD, truncated [ 1135.785003][T16319] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 1135.827207][T20396] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1135.850455][ T36] vhci_hcd: release socket [ 1135.874594][ T36] vhci_hcd: disconnect device [ 1135.889627][ T36] vhci_hcd: stop threads [ 1135.893953][ T36] vhci_hcd: release socket [ 1135.919935][ T36] vhci_hcd: disconnect device [ 1137.501541][ T978] usb 4-1: USB disconnect, device number 89 [ 1139.274351][ T30] audit: type=1800 audit(1748897825.416:6080): pid=20458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3875" name="bus" dev="ramfs" ino=88326 res=0 errno=0 [ 1139.671468][T20478] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3880'. [ 1140.028521][ T978] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1140.150080][T20493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3883'. [ 1140.248463][ T978] usb 4-1: Using ep0 maxpacket: 32 [ 1140.257317][ T978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1140.279558][ T978] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 1140.307583][ T978] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1140.327462][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.351277][ T978] usb 4-1: Product: syz [ 1140.367686][ T978] usb 4-1: Manufacturer: syz [ 1140.379332][ T978] usb 4-1: SerialNumber: syz [ 1140.409648][ T978] usb 4-1: config 0 descriptor?? [ 1140.430209][ T978] hub 4-1:0.0: bad descriptor, ignoring hub [ 1140.448771][ T978] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1140.477007][ T978] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input147 [ 1140.518110][ T978] usbtouchscreen 4-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 1140.538594][T15179] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1140.642862][T20480] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3881'. [ 1140.709914][ T978] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -90 [ 1140.775612][T15179] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1140.795176][T15179] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1140.806597][T15179] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1140.821950][T15179] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1140.853347][T15179] usb 3-1: SerialNumber: syz [ 1140.928799][T16319] vhci_hcd: vhci_device speed not set [ 1141.083923][T15179] usb 3-1: 0:2 : does not exist [ 1141.094482][T15179] usb 3-1: unit 5 not found! [ 1141.126984][T15179] usb 3-1: USB disconnect, device number 110 [ 1141.211554][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1141.426052][T20505] loop6: detected capacity change from 0 to 7 [ 1141.442769][ T5841] Dev loop6: unable to read RDB block 7 [ 1141.449154][ T5841] loop6: AHDI p1 p2 p3 p4 [ 1141.453875][ T5841] loop6: partition table partially beyond EOD, truncated [ 1141.461962][ T5841] loop6: p1 start 2401632844 is beyond EOD, truncated [ 1141.469203][ T5841] loop6: p2 size 47 extends beyond EOD, truncated [ 1141.478579][ T5841] loop6: p3 start 1886353253 is beyond EOD, truncated [ 1141.500395][T20505] Dev loop6: unable to read RDB block 7 [ 1141.506919][T20505] loop6: AHDI p1 p2 p3 p4 [ 1141.512833][T20505] loop6: partition table partially beyond EOD, truncated [ 1141.525594][T20505] loop6: p1 start 2401632844 is beyond EOD, truncated [ 1141.533720][T20505] loop6: p2 size 47 extends beyond EOD, truncated [ 1141.549796][T20505] loop6: p3 start 1886353253 is beyond EOD, truncated [ 1141.637129][ T5841] udevd[5841]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1141.853636][ T5841] udevd[5841]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1142.229600][T20515] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.828787][T15179] usb 4-1: USB disconnect, device number 90 [ 1143.887092][T15179] IPVS: starting estimator thread 0... [ 1144.028367][T20534] IPVS: using max 30 ests per chain, 72000 per kthread [ 1144.042915][T20515] [ 1144.045297][T20515] ============================================ [ 1144.051475][T20515] WARNING: possible recursive locking detected [ 1144.057649][T20515] 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 Not tainted [ 1144.064407][T20515] -------------------------------------------- [ 1144.070555][T20515] syz.2.3891/20515 is trying to acquire lock: [ 1144.076619][T20515] ffff8880524b0d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: __netdev_update_features+0xcb1/0x1a20 [ 1144.087598][T20515] [ 1144.087598][T20515] but task is already holding lock: [ 1144.094965][T20515] ffff8880524b0d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x1990 [ 1144.104823][T20515] and the lock comparison function returns 0: [ 1144.110894][T20515] [ 1144.110894][T20515] other info that might help us debug this: [ 1144.118958][T20515] Possible unsafe locking scenario: [ 1144.118958][T20515] [ 1144.126418][T20515] CPU0 [ 1144.129715][T20515] ---- [ 1144.132997][T20515] lock(&dev_instance_lock_key#20); [ 1144.138305][T20515] lock(&dev_instance_lock_key#20); [ 1144.143631][T20515] [ 1144.143631][T20515] *** DEADLOCK *** [ 1144.143631][T20515] [ 1144.151784][T20515] May be due to missing lock nesting notation [ 1144.151784][T20515] [ 1144.160111][T20515] 2 locks held by syz.2.3891/20515: [ 1144.165331][T20515] #0: ffffffff8f50b248 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x1d0/0x1990 [ 1144.174324][T20515] #1: ffff8880524b0d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x1990 [ 1144.184619][T20515] [ 1144.184619][T20515] stack backtrace: [ 1144.190635][T20515] CPU: 0 UID: 0 PID: 20515 Comm: syz.2.3891 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(full) [ 1144.190657][T20515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1144.190669][T20515] Call Trace: [ 1144.190678][T20515] [ 1144.190697][T20515] dump_stack_lvl+0x189/0x250 [ 1144.190728][T20515] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1144.190765][T20515] ? __pfx__printk+0x10/0x10 [ 1144.190784][T20515] ? print_lock_name+0xde/0x100 [ 1144.190803][T20515] print_deadlock_bug+0x28b/0x2a0 [ 1144.190836][T20515] validate_chain+0x1a3f/0x2140 [ 1144.190877][T20515] __lock_acquire+0xab9/0xd20 [ 1144.190899][T20515] ? __netdev_update_features+0xcb1/0x1a20 [ 1144.190919][T20515] lock_acquire+0x120/0x360 [ 1144.190936][T20515] ? __netdev_update_features+0xcb1/0x1a20 [ 1144.190959][T20515] __mutex_lock+0x182/0xe80 [ 1144.190980][T20515] ? __netdev_update_features+0xcb1/0x1a20 [ 1144.190998][T20515] ? unwind_get_return_address+0x4d/0x90 [ 1144.191019][T20515] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1144.191044][T20515] ? arch_stack_walk+0xfc/0x150 [ 1144.191068][T20515] ? __netdev_update_features+0xcb1/0x1a20 [ 1144.191086][T20515] ? __pfx___mutex_lock+0x10/0x10 [ 1144.191107][T20515] ? bond_fix_features+0x191/0x1d0 [ 1144.191128][T20515] __netdev_update_features+0xcb1/0x1a20 [ 1144.191158][T20515] ? __pfx___netdev_update_features+0x10/0x10 [ 1144.191179][T20515] ? finish_task_switch+0x266/0x950 [ 1144.191204][T20515] ? rcu_is_watching+0x15/0xb0 [ 1144.191225][T20515] ? trace_sched_exit_tp+0x38/0x120 [ 1144.191242][T20515] ? __schedule+0x1713/0x4d00 [ 1144.191264][T20515] netdev_change_features+0x72/0xd0 [ 1144.191281][T20515] ? __pfx_netdev_change_features+0x10/0x10 [ 1144.191299][T20515] ? cfg80211_netdev_notifier_call+0x1ea/0x13c0 [ 1144.191315][T20515] ? preempt_schedule_irq+0xb5/0x150 [ 1144.191335][T20515] ? netif_set_tso_max_size+0x10e/0x1d0 [ 1144.191352][T20515] bond_compute_features+0x615/0x680 [ 1144.191376][T20515] ? __pfx_bond_compute_features+0x10/0x10 [ 1144.191402][T20515] bond_netdev_event+0x72e/0xe80 [ 1144.191422][T20515] ? __pfx_bond_netdev_event+0x10/0x10 [ 1144.191439][T20515] ? inetdev_event+0x464/0x15b0 [ 1144.191461][T20515] ? igmp_netdev_event+0x7c/0x770 [ 1144.191483][T20515] notifier_call_chain+0x1b6/0x3e0 [ 1144.191508][T20515] netdev_features_change+0x85/0xc0 [ 1144.191530][T20515] ? __pfx_netdev_features_change+0x10/0x10 [ 1144.191561][T20515] ? dev_ethtool+0xf3c/0x1990 [ 1144.191581][T20515] dev_ethtool+0x1520/0x1990 [ 1144.191603][T20515] ? __pfx_dev_ethtool+0x10/0x10 [ 1144.191627][T20515] ? dev_load+0x21/0x1f0 [ 1144.191649][T20515] dev_ioctl+0x392/0x1150 [ 1144.191672][T20515] sock_do_ioctl+0x22c/0x300 [ 1144.191692][T20515] ? irqentry_exit+0x74/0x90 [ 1144.191712][T20515] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1144.191733][T20515] ? __pfx_sock_ioctl+0x10/0x10 [ 1144.191754][T20515] sock_ioctl+0x576/0x790 [ 1144.191773][T20515] ? __pfx_sock_ioctl+0x10/0x10 [ 1144.191791][T20515] ? __fget_files+0x2a/0x420 [ 1144.191806][T20515] ? __fget_files+0x3a0/0x420 [ 1144.191820][T20515] ? __fget_files+0x2a/0x420 [ 1144.191836][T20515] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1144.191856][T20515] ? __pfx_sock_ioctl+0x10/0x10 [ 1144.191874][T20515] __se_sys_ioctl+0xfc/0x170 [ 1144.191895][T20515] do_syscall_64+0xfa/0x3b0 [ 1144.191919][T20515] ? lockdep_hardirqs_on+0x9c/0x150 [ 1144.191938][T20515] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1144.191955][T20515] ? clear_bhb_loop+0x60/0xb0 [ 1144.191974][T20515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1144.191991][T20515] RIP: 0033:0x7f14f918e969 [ 1144.192007][T20515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1144.192022][T20515] RSP: 002b:00007f14fa018038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1144.192040][T20515] RAX: ffffffffffffffda RBX: 00007f14f93b6240 RCX: 00007f14f918e969 [ 1144.192053][T20515] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000007 [ 1144.192064][T20515] RBP: 00007f14f9210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1144.192075][T20515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1144.192085][T20515] R13: 0000000000000000 R14: 00007f14f93b6240 R15: 00007f14f94dfa28 [ 1144.192102][T20515]