last executing test programs: 11.632044851s ago: executing program 1 (id=838): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) syz_open_dev$video4linux(&(0x7f0000000100), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) tgkill(0x0, r1, 0x5) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000000c0)={0xfffffff, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x5, @raw_data="5d263f6cc5158808ae0baa9e2873bf92576675ca25509e6b5bfd8c4d7522b7aaaa5d639b95e0ffc6508848143581316844faf779a7b97c0c1dc5ffa270e294a0119bb3f1262ce1edc78f042daeb0ebbdf4c69b829f4ca94b4e91d9d9abd0dd4a0817238cb85b8b59ba4e13ba7a49e43afaf61a0b09bfae51d4f381b7f9ea1af0b8d00b283cf2da56dc8df7b6443ae92b305323542d13e8d5a5b390e5c7c6b7c2d66cd3aba75de3e4e8de274476fcaf8df73410160f1bad4e4ebf08ba1f83723412dfbd7551d533f5"}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x119001, 0x0) msync(&(0x7f0000313000/0x4000)=nil, 0x4000, 0x1) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000280)={{0x1005, 0xfffd}, 'syz1\x00', 0x2a}) syz_open_dev$evdev(&(0x7f0000000340), 0xaa54, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000280), 0x80002, 0x0) socket$rxrpc(0x21, 0x2, 0x2) socket$tipc(0x1e, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad}, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) 10.698109136s ago: executing program 1 (id=845): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) unshare(0x28020480) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xa0}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000f40)=ANY=[@ANYBLOB="85000000780000003d0a000000000000630a00ff0000000095000000000000003cb61ea78be018d646ddfba75f3693c794759aa4e82bfa48b193952cf637d4596402f29abb31ff2ae4f752547c146ce3eff92d017eda25cc304233b9334d35df00a0728b9c61a6ea303195bc8b52f18f20e3f7bdfaadbe1bf4f4f495"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d412000000000000002900000004000000", 0xfe60) r6 = socket$rds(0x15, 0x5, 0x0) dup2(r4, r4) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_dest={0x18, 0x114, 0x2, {0x9, 0xffff}}], 0x18, 0x22008004}, 0x0) 8.362793381s ago: executing program 0 (id=860): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x2010, r0, 0xa16da000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x22, 0x800000000004, @thr={&(0x7f0000000300)="ee44fe77b8e8c667f29b7c0b6916b2c038a1f5be171643fd24a52c33a4b0e9c7054619ee03944ae44e8b2767e37f895b5b94e815a2a9ec2644158d80b68043a93a568dabd0d1e128d14ec4feef7116abb72a8fbcb87a39a08b195c8f1c93206b9ae774682b6dd3031ff7bf5cdb9a6a24a444333d9ab241736ca271ede7586b4b810b91386f1f3753048b9fb5353073d089e0353e75ccca26", &(0x7f0000000040)="8b748f5aef401d7f2bda2f467557eda55108bbc95ac35c38b09ca80167372568fc3e4f04590a6777bdf9922ae2b8c4ab588620439dd48feb09bb86b82ce035fb"}}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x8004) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000060027000000000008000a00a8"], 0x6c}}, 0x0) syz_open_dev$vbi(&(0x7f0000000100), 0x3, 0x2) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x3}, 0x10) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080088484803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) sendmsg$tipc(r6, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) 7.261899506s ago: executing program 1 (id=862): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) fcntl$setstatus(r0, 0x4, 0x42400) 6.991100408s ago: executing program 0 (id=864): r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) epoll_pwait2(r0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x4, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000180), 0x8) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002380)={0x14, 0x52, 0x109, 0x0, 0x25dfdbfb, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) recvmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40002120) r2 = socket$nl_route(0x10, 0x3, 0x0) close_range(r0, r1, 0x0) r3 = fsopen(&(0x7f0000000180)='adfs\x00', 0x0) close(r3) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000006c00010025bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1c20000035020000140035007465616d5f736c6176655f31000000001800348014"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 6.841207943s ago: executing program 0 (id=865): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0xffc, 0x10ffff, 0x6, 0x0, 0x1, 0xffffff80}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x49, &(0x7f00000000c0)=0x1ff, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x50, 0xffffffffffffffff, 0x793ce000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000001c0), 0x5b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x5, 0x0, 0xffffffff}, 0x0) r4 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r4, 0x0, 0xffffffffffffff1d) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, 0x0, 0x0) syz_usb_connect(0x0, 0x43, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000143a5aa40801b96e3b1a700000001090212002100000000972440a91f00d5ac00"], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) writev(r0, &(0x7f0000000a40)=[{0x0}, {0x0}], 0x2) r6 = syz_open_dev$vim2m(&(0x7f0000000200), 0x6, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0xafa5, 0x7, 0x38416761, 0x4, 0x7, 0x3ff, 0x0, 0x9, 0x1, 0x0, 0x0, 0x5}}) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0xa0400, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000040)) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000080)=0x80007) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x4a, &(0x7f0000000000)=0x20, 0x4) 6.173475125s ago: executing program 1 (id=870): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0xffffffff80000001, r0, &(0x7f0000000040)={0x90000000}) connect$unix(0xffffffffffffffff, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, 0x0) r4 = dup2(r3, r3) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x5) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x100008000000) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text16={0x10, &(0x7f0000000580)="0f0666b9300a000066b83c00000066ba000000000f300f01cb0fba27f7260f01ca0f09670f01c80f01c30f01caf3ab", 0x2f}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @void, @value}, 0x28) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000000000107d1e5a2d00000000000109022400010000000009040000010300020921000000012205000905810a35db03000000000000"], 0x0) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000080)={'syz0\x00', {0x0, 0x0, 0xb}, 0x0, [0x0, 0x3, 0x403, 0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x3, 0x10000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0xa9a4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffff8, 0x0, 0x0, 0x79, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x47, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x7fff0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000, 0xf1a, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x20], [0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x1000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xffffffff, 0x89, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x80000000, 0x0, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x351e, 0x0, 0xfffffffd, 0x0, 0x0, 0x6492, 0x8], [0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffff7b, 0x200000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x804, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, 0x40, 0xd67c, 0x2, 0x0, 0x4, 0x0, 0xfd32, 0x6, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0xc0ac, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x11) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r8, 0x5501) 5.365869143s ago: executing program 2 (id=872): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) (async) unshare(0x62040200) (async) r1 = socket(0x10, 0x3, 0x4) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x8202) (async) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f0000000180)=0xf) (async) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) vmsplice(r1, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2, 0x1) (async) unshare(0x10000000) (async) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/kexec_crash_size', 0x40002, 0x0) write$tun(r4, &(0x7f0000000100)=ANY=[@ANYRESDEC], 0x15) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f00000000c0)=0x81) (async) socket$netlink(0x10, 0x3, 0x5) pselect6(0x40, &(0x7f0000000000)={0x8, 0x6, 0x3ff, 0x20000001, 0x0, 0x0, 0x1, 0xffffffffffff7fff}, &(0x7f0000000040)={0x2, 0x5, 0x2, 0x7f, 0x400, 0xf, 0x4, 0x1}, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8) (async) unshare(0x10000000) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x103080, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r6, 0x3) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) (async) shutdown(r7, 0x1) (async) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0004002000010327bd700000000000020000000400000800000000"], 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=0x0, @ANYBLOB="010900000008001b0000000000000000"], 0x28}}, 0x0) 4.960840414s ago: executing program 4 (id=874): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x2010, r0, 0xa16da000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x22, 0x800000000004, @thr={&(0x7f0000000300)="ee44fe77b8e8c667f29b7c0b6916b2c038a1f5be171643fd24a52c33a4b0e9c7054619ee03944ae44e8b2767e37f895b5b94e815a2a9ec2644158d80b68043a93a568dabd0d1e128d14ec4feef7116abb72a8fbcb87a39a08b195c8f1c93206b9ae774682b6dd3031ff7bf5cdb9a6a24a444333d9ab241736ca271ede7586b4b810b91386f1f3753048b9fb5353073d089e0353e75ccca26", &(0x7f0000000040)="8b748f5aef401d7f2bda2f467557eda55108bbc95ac35c38b09ca80167372568fc3e4f04590a6777bdf9922ae2b8c4ab588620439dd48feb09bb86b82ce035fb"}}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x8004) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000060027000000000008000a00a8"], 0x6c}}, 0x0) syz_open_dev$vbi(&(0x7f0000000100), 0x3, 0x2) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x3}, 0x10) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080088484803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) sendmsg$tipc(r6, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) 4.878502925s ago: executing program 2 (id=875): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) unshare(0x28020480) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000f40)=ANY=[@ANYBLOB="85000000780000003d0a000000000000630a00ff0000000095000000000000003cb61ea78be018d646ddfba75f3693c794759aa4e82bfa48b193952cf637d4596402f29abb31ff2ae4f752547c146ce3eff92d017eda25cc304233b9334d35df00a0728b9c61a6ea303195bc8b52f18f20e3f7bdfaadbe1bf4f4f495"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d412000000000000002900000004000000", 0xfe60) r6 = socket$rds(0x15, 0x5, 0x0) dup2(r4, r4) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_dest={0x18, 0x114, 0x2, {0x9, 0xffff}}], 0x18, 0x22008004}, 0x0) 3.557741343s ago: executing program 0 (id=878): r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0xa001) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl(r1, 0xfffff000, &(0x7f0000000000)) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000100)={'\x00', 0x0, 0x200081, 0x5}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) 3.556820313s ago: executing program 4 (id=879): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) (async) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) (async) r0 = syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000000, 0x200000005c832, 0xffffffffffffffff, 0x53b33000) move_pages(r0, 0x1, &(0x7f0000000000)=[&(0x7f00003e6000/0x2000)=nil], &(0x7f0000000040)=[0x200, 0x2, 0x22, 0xfff, 0x78de, 0x1, 0xfffeffff], &(0x7f0000000080), 0x4) 3.377083774s ago: executing program 3 (id=880): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) fcntl$setstatus(r0, 0x4, 0x42400) 3.370039313s ago: executing program 1 (id=881): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r2 = syz_open_dev$video(&(0x7f00000000c0), 0x1, 0x105041) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000000100)={0xb, 0x102, 0x0, {0x6, 0x7, 0x10001, 0x6}}) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064d1, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000000080)=[0x0, 0x0]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000034276d20402002c68e0100000001090212000100000000090400"], 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) (async) syz_open_dev$video(&(0x7f00000000c0), 0x1, 0x105041) (async) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000000100)={0xb, 0x102, 0x0, {0x6, 0x7, 0x10001, 0x6}}) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064d1, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000000080)=[0x0, 0x0]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000034276d20402002c68e0100000001090212000100000000090400"], 0x0) (async) 3.244563616s ago: executing program 0 (id=882): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f00000002c0)={0x3f}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x2881) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffffff, {0x5, 0xc}, {}, @raw32={[0x2600, 0x11d0, 0x2000]}}], 0x1c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a41d106c720000f5ffffff2fad0a4883cdbba10a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES32=r4], 0x0) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) r6 = epoll_create(0x9) writev(r5, &(0x7f0000000240)=[{&(0x7f0000000280)='I', 0x1}], 0x1) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)={0x30000001}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x48, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}, @IFLA_BR_GROUP_ADDR={0x6, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.976897175s ago: executing program 4 (id=883): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x20, 0xfff00002}, {0x16, 0x0, 0x0, 0x31}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) sendto$packet(r5, &(0x7f00000000c0)="3f031c000302140006001e0089e9", 0xe, 0x0, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000040)={0x80109, "fa02946a000000001dda524f03000000000000000000003673000000002000"}) close(r8) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_CROP(r10, 0x4014563c, &(0x7f0000000000)={0xc, {0x2, 0x1b288141, 0xe182, 0x300}}) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000300000000000000000000000000000000000000fe8000000000000000000000000000bb0000fffd000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f8ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000800000000000000000000000000000000000000000000000000000000000000000000000000104000000000044000506e0000002000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000535000001002100"/180], 0xfc}}, 0x4040000) r11 = memfd_create(&(0x7f0000000300)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2A7:n\x8c\xa7P\x1a\x87\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x19M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xff\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\bB\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fl\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \x90\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2o\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xff\x0f\x00\x00\x00\x00\x00\x00Li\r\x95Z\x89\"_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b)\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca\x00\x00\x00\x00\x00\x03\xfcWZ!<\x16a5ZL.\xe6\x15]\xebY\xaa\xbea\x8e\xdc\xc52r\"\xea\x9e\x03\x11&\xc3JU\xa7\xd6\x8a\xf8\xae>S\xde', 0x0) write(r11, &(0x7f0000000140)='/', 0x1) sendfile(r11, r11, &(0x7f0000001000), 0xfec) 2.688014938s ago: executing program 3 (id=884): r0 = socket$netlink(0x10, 0x3, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x15) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = gettid() prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r2, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r5, 0xfffffffffffffc01, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) tee(r1, r5, 0x60000000000, 0x1000000000000000) r6 = socket$tipc(0x1e, 0x5, 0x0) r7 = syz_io_uring_setup(0x6435, &(0x7f0000001540)={0x0, 0x0, 0x8, 0x0, 0x200000, 0x0, r4}, 0x0, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_generic(r7, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000002780)=ANY=[@ANYBLOB="c01100004000000427bd7000fbdbdf251100000008004200", @ANYRES32=r3, @ANYBLOB="70c7d24f705c523aa708aeb429b424fd275ff1dde365bfd7a6888ca0c727b5c69450794dd0c39634d4e7d5038de9bba702d9b864682a65cc18ab047e7b4e2641c2fae065b61b219cc58aaad2ba8b0478c7606e60a42db660d7eef84afa96892359bf2c42a25a99545ce62add9427783ded7fe53dd5abb6fb92253bd05ca8ac6524dbb7aadeb7b06be282ce8c735d9c983f02b06f1c8e7eac19c5168030b430a28b569e0a9e47049a17a95b211dcc561a13e185e815966a9a12cd8c65bf1e0718b12f11798c8ac14f698ccab010618008001c00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYRES8=r6, @ANYRES32=0x0, @ANYBLOB="14004700fe8000000000000000000000000000bb00"], 0x11c0}, 0x1, 0x0, 0x0, 0x9050}, 0x8) setsockopt$inet6_IPV6_HOPOPTS(r9, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r9, &(0x7f0000000180)={0xa, 0x4e22, 0x4, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000140)='batadv0\x00', 0x10) sendmmsg$inet6(r9, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="cf8f12008d990fbd70", 0x9}], 0x1}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)="8c3762", 0xd}], 0x1}}], 0x2, 0x0) sendto$inet6(r9, &(0x7f0000000300), 0x16, 0x1657287e, 0x0, 0xfffffffffffffdfd) bind$tipc(r6, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42, 0x4}}}, 0x10) bind$tipc(r8, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r5, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x1}}, 0x10) close_range(r0, r6, 0x0) 2.325332519s ago: executing program 3 (id=885): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0100001000130728bd700000000000ac1414aa0000000000000000000000002001000000000000000000000000000100020001000000000a00000084000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff01000000000000000000000000000100000000320000002001000000000000ff800000000000010000000000000000000000000100000008000000000000000100000001000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000007000000000000000c000000000000000000000029bd7000000000000a00000000000000000000004c001200726663343534332867636d286165732929000000000000000000000000000000000000000000000000000000000000000000000080000000de95ee8b83f73e193678"], 0x13c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2.212933914s ago: executing program 3 (id=886): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000540)) socket(0x10, 0x3, 0x0) (async) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) 1.491293921s ago: executing program 2 (id=887): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd600000f500140600fe80"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@newqdisc={0xfffffffffffffdba, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0x6, 0xf5, 0x1, 0x7, 0x1, 0x8000, 0x3}}, {0x0, 0x2, [0x40, 0x3, 0x44]}}]}, @TCA_RATE={0x0, 0x5, {0x2, 0x7}}, @TCA_RATE={0x0, 0x5, {0x1, 0xc}}, @qdisc_kind_options=@q_sfq={{}, {0x0, 0x2, {{0x80000001, 0x7ff, 0x7, 0x7, 0x7f}, 0x8, 0x0, 0x3, 0x5, 0x1, 0x14, 0x16, 0x18, 0x2, 0x0, {0x1, 0x7, 0x3, 0x400, 0x8, 0x101}}}}, @qdisc_kind_options=@q_taprio={{}, {0x0, 0x2, [@TCA_TAPRIO_ATTR_TXTIME_DELAY={0x0, 0xb, 0x5ea}, @TCA_TAPRIO_ATTR_FLAGS={0x0, 0xa, 0xfffffc0f}]}}, @TCA_RATE={0x0, 0x5, {0x4, 0xd9}}, @TCA_RATE={0x0, 0x5, {0x9, 0xe}}]}, 0x24}}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') read$FUSE(r2, &(0x7f0000000240)={0x2020}, 0x2020) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r1, r1}, &(0x7f0000000200)=""/56, 0x38, &(0x7f0000000280)={&(0x7f00000000c0)={'poly1305-simd\x00'}}) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f00000001c0)='\xa7x{8\xb8\x81\xae$\xbb\x17\x90\xaa\x96\xd4\x9b\xd8\x87\x84\xca\xf6\xa6;\xd2!?,J\r\x94EA\x11\xc2\n\xc4h\xad\xc4\xe7*<\x87\xb5H\xfb\xf6t\x12\xed\x8f\x9caU^\xffW\xa1\x06\xcc', 0x0) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @broadcast}, 0x1, 0x0, 0x0, 0xfffffffd}}, 0x39) r5 = socket$igmp(0x2, 0x3, 0x2) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x7f}) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x1, 0x0, 0x100, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x43}, @dev}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000480)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000095}, 0x4009) ioctl$KVM_RUN(r7, 0xae80, 0x0) 971.110001ms ago: executing program 2 (id=888): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2, 0x0, 0x3, 0x0, 0x0, 0xc07}}, 0x120) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x3f, 0x0, {0x0, r4}}) io_uring_enter(r1, 0x48ed, 0x0, 0x2, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000200), 0x4) 751.60864ms ago: executing program 2 (id=889): r0 = syz_open_dev$vbi(&(0x7f0000000180), 0x0, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000000)={0x8, 0x4, 0x4, 0x400, 0x1, {0x77359400}, {0x4, 0xc, 0xb, 0x4, 0x6, 0x91, "dc0fd5bb"}, 0x3, 0x4, {}, 0x5}) (fail_nth: 1) 748.211822ms ago: executing program 4 (id=890): r0 = syz_open_dev$vbi(&(0x7f0000000180), 0x0, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000000)={0x8, 0x4, 0x4, 0x400, 0x1, {0x77359400}, {0x4, 0xc, 0xb, 0x4, 0x6, 0x91, "dc0fd5bb"}, 0x3, 0x4, {}, 0x5}) 573.593427ms ago: executing program 4 (id=891): ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r0, 0x0, 0x10000, 0x0, 0x6, 0xe0491, 0x1c01c9}) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000100)={0x2a, 0xffffffffffffffff, 0x4001}, 0xc) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote, 0x8}, 0x1c) r3 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="cfacbee95763d68e2c6f1822acf7dd7a25be63b32486d68c8b4d4bcbbf72a2b00b189768d931906d97aa304c91a18fa4712937f47f40d5c39fbd62de82c00cdc37ed8110e2015ac5c830c661131ade675cb75fc30717b99b381b88b3785f6857fdd806cc748a8420f94237047def7d495bd73b178adf00d54f2453467fed6e3faf8e0e0d80c64e1818b4", 0x8a, 0xfffffffffffffffa) r4 = add_key(&(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)="684ba95761058172f56279662449ca5036a789ef6659aade04c8bdfa64c0e2e7b82ec33e40c4d1205333744a4b82e403fdcae7a2de15f42c96e45391cbbf85383668287e553f3b6895eeff6a8e3b44d25eade725bd4b5152904ccc21ca00ac01fc47531da90caba4ab880b3a582ddaf00c04ac1cf43b5d34a998a34995ef16b277437da32b7f4cdb93993d4504ca51a48c137b3b25e8", 0x96, 0x0) r5 = add_key$user(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)="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", 0x1000, 0xfffffffffffffffa) keyctl$dh_compute(0x17, &(0x7f0000001480)={r3, r4, r5}, &(0x7f00000014c0)=""/4096, 0x1000, &(0x7f00000025c0)={&(0x7f00000024c0)={'sha512\x00'}, &(0x7f0000002500)="b10aefa3093bf638f30719cd48ff5feef5ef2d730d1cf1df2d9a2205932ca597505d726a054416bd0237757bfde97d4c1f1166188c6f0337eaf06d99f3f58f6ae65a8f2ca0ae06406694b63caba26a81dd73726c0890649fbb4809bc3afc5b578b431092da20f3c6aff271ee464475b85108315ef104cf9ed1a64e3f7bf1df9d93648c8b8c66aef8129b28f361035a25d7f8fb1ab6f4656852c231b033cdea50c238", 0xa2}) r6 = dup2(r1, r2) getsockopt$inet_dccp_int(r6, 0x21, 0x10, &(0x7f0000002600), &(0x7f0000002640)=0x4) fanotify_init(0x0, 0x88e56ed0b01aa5d2) timer_create(0x3, &(0x7f0000002800)={0x0, 0x24, 0x4, @thr={&(0x7f0000002680)="c31fb476455bde8050c76e7ed41f719e556068e92d65fc5e862a1e23ca046c9318d88f6a95f8bdbfbbac1bf437c60e6940290ad0fedc3696f7c5d0b97372cd7a0b042e395c5d1747a2ec40a8f47e6c506859bff4713d234c6a1f0d69b3bdb9b3dc2e8a9527fe9f90acc5c978302f7db61921f6227bd18db9048212812a84302317619cd821916f8f823711ae2a4d1a14dd733597445211756f3c8f6781e39c5ee230137bfd7c5ce580a900b04655073365259eb60160bf2c2ed3af56170cead8", &(0x7f0000002740)="3f191f7275b3d64772eadecfacc32ed00c1fe222c28cb56dbb3a3037750ea3d54bfc05d007b1d7123833dd0eff3a7a98f7a04baaeccde5e7816f05251e8ea942984b148d686fbeff9588e93f85604da378af1af9d4e90a859aa6bc37de26168dcebabd787b29125dcb7f0ec913f1ace6a74575c695c858dbc942e06457b187b5659a2284391d92558a5fa802be49b143c20df1fe63c6da669217cde4662f810e"}}, &(0x7f0000002840)=0x0) timer_settime(r7, 0x0, &(0x7f0000002880), &(0x7f00000028c0)) setsockopt$MRT6_PIM(r6, 0x29, 0xcf, &(0x7f0000002900)=0x1, 0x4) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000002940)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000002980)={0x42, 0x2, 0x2}, 0x10) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000029c0), 0x80, 0x0) r10 = timerfd_create(0x9, 0x800) timerfd_gettime(r10, &(0x7f0000002a00)) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r9, 0x3ba0, &(0x7f0000002a40)={0x48, 0x7, r0, 0x0, 0x0, 0x0, 0x3, 0xd7cb, 0x38ec03}) r11 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) r12 = socket$igmp(0x2, 0x3, 0x2) recvmmsg(r12, &(0x7f0000002cc0)=[{{&(0x7f0000002ac0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000002bc0)=[{&(0x7f0000002b40)=""/104, 0x68}], 0x1, &(0x7f0000002c00)=""/142, 0x8e}, 0x2}], 0x1, 0x40000001, &(0x7f0000002d00)={0x0, 0x3938700}) socket$nl_netfilter(0x10, 0x3, 0xc) r13 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000002d40), 0x2, 0x0) ioctl$VIDIOC_G_FREQUENCY(r13, 0xc02c5638, &(0x7f0000002d80)={0x6, 0x1, 0x8}) 568.998587ms ago: executing program 3 (id=892): r0 = syz_open_dev$vbi(&(0x7f0000000180), 0x0, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [], {0x14}}, 0x28}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x1cf, 0x3, 0x1, 0x5bd5841a, 0x4, 0x6, 0x1}, &(0x7f0000000240)={0x9, 0x4, 0x1, 0x0, 0x80000001, 0x7, 0x100000001, 0x4}, 0x0, &(0x7f00000002c0)={0x77359400}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x2, &(0x7f0000002400)=0x0) recvmmsg$unix(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)=""/246, 0xf6}, {&(0x7f0000000400)=""/79, 0x4f}, {&(0x7f0000000480)=""/79, 0x4f}], 0x3, &(0x7f00000005c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x130}}, {{&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000700)=""/101, 0x65}], 0x1}}, {{&(0x7f0000000780), 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)=""/93, 0x5d}, {&(0x7f0000000880)=""/14, 0xe}], 0x2, &(0x7f0000000900)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}], 0x3, 0x40, 0x0) io_submit(r6, 0x1, &(0x7f0000000200)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x2}]) fcntl$setpipe(r4, 0x407, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r7, 0x0, 0x3, &(0x7f0000000000)=0x7ffffffc, 0x4) setsockopt$inet_int(r7, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000140)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000000)={0x8, 0x4, 0x4, 0x400, 0x1, {0x77359400}, {0x4, 0xc, 0xb, 0x4, 0x6, 0x91, "dc0fd5bb"}, 0x3, 0x4, {}, 0x5}) 384.94025ms ago: executing program 2 (id=893): syz_usbip_server_init(0x1) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa4010203010902240001000000000904000002437d67000905fc"], 0x0) 383.815554ms ago: executing program 4 (id=894): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x1d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x3, 0x0, 0x0, &(0x7f0000000ac0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x0, 0x8, 0x8, 0x3, 0x10, 0x10}, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="000064739c83aa9c2dd37b34ebc03a77f005bd56d7ae798552284f2e79ec5ead000000dcdfd9fb6d0d71a0b288467d1e6403affcb6a00bd4924cb25ac1a56d0cdf48f4fa9ffcd7ca0f1029d97ae76dae17ad3595f466134fb3fb2c7f4efbebb0d2"], 0x5, [{0x0, 0x0}, {0x0, 0x0}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x444}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x44d}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = memfd_secret(0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, 0xa}, 0x20) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f00000002c0)={0x1, 0x80}, 0x2) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a800800028008000200080000003e1200000800020010"], 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 225.142655ms ago: executing program 1 (id=895): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000880)={'syztnl0\x00', 0x0, 0x4, 0x80, 0x5, 0x0, 0x53, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x20, 0x0, 0x0, 0xffffffff}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x11) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) recvmmsg(r4, &(0x7f0000000440), 0x6f5, 0x2, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r4, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES8=r1], 0x10}}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) 129.753219ms ago: executing program 0 (id=896): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000017c0)={'#! ', '', [], 0xa, "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"}, 0x1cf) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000380)='.\x00', 0xa0000061) copy_file_range(r3, &(0x7f0000000080), r2, 0x0, 0xfffffffffffffff8, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) readv(r4, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/175, 0xaf}, {&(0x7f0000000100)=""/47, 0x2f}, {&(0x7f0000000280)=""/124, 0x7c}, {0x0}, {&(0x7f0000000500)=""/155, 0x9b}, {&(0x7f0000000300)=""/54, 0x36}, {&(0x7f00000005c0)=""/230, 0xe6}, {0x0}], 0x8) r5 = add_key(&(0x7f0000000480)='big_key\x00', &(0x7f00000014c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) add_key$fscrypt_provisioning(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000001500)=ANY=[@ANYBLOB="01000000000000000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f4082d24d36e4e183d786a7880cf5e4a418dcf4ad4bd5ba5eade836bbf4f39494154e3d483ae19590abe01c034c7421d4a9f73ea270e3a8338ad99e94fd1f9fb0578224b85a12cc0134579d52c7c243fadec7ed2c6589569e074dfe2691eab177f0ba505a84"], 0x48, r5) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_enter(r6, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r7, &(0x7f0000002e40)={0x0, 0x0, 0x0}, 0x40000000) landlock_restrict_self(0xffffffffffffffff, 0x3) r8 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000008007000000ffffffff10400003", @ANYRES32, @ANYBLOB="01000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000004000000030000000e00"/28], 0x50) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r9, 0xc008ae05, &(0x7f00000004c0)=""/4096) r10 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r10, 0x0, 0x32, 0x0, &(0x7f0000002140)) sendto$inet6(r1, &(0x7f0000000080)="382c5dead311f5a6ea86081b8725c9dd5c3dc1dccbaa74753af89e84687798e78a892ff6315e41d02e420ff8f63b98ab7ab461c7d569353d9bb554e7e6e517071547f950368acad455f89a8e4fd085f5fd6bdf01edbc65449f806fbc4917d41703cca1cd48c972e6a7fd9a3eeaa91c4324eed5d199aef86defa4d81f3935e5b127bcf92a64d4d8d0946a140b8bf7f3c72157943ed6b10777e69cc05a71ca74b3b30b64ba4e354ed56a0e5733e692b9c12d834214d84878cb26670dfc211f927a46b1115a699c7aa49a3c8dd5e8f6044c6bbb500a5098d52cf511e8501ab9037a002e", 0xe2, 0x80, &(0x7f0000000200)={0xa, 0x4e24, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x1c) 0s ago: executing program 3 (id=897): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) unshare(0x28020480) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000f40)=ANY=[@ANYBLOB="85000000780000003d0a000000000000630a00ff0000000095000000000000003cb61ea78be018d646ddfba75f3693c794759aa4e82bfa48b193952cf637d4596402f29abb31ff2ae4f752547c146ce3eff92d017eda25cc304233b9334d35df00a0728b9c61a6ea303195bc8b52f18f20e3f7bdfaadbe1bf4f4f495"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d412000000000000002900000004000000", 0xfe60) r6 = socket$rds(0x15, 0x5, 0x0) dup2(r4, r4) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_dest={0x18, 0x114, 0x2, {0x9, 0xffff}}], 0x18, 0x22008004}, 0x0) kernel console output (not intermixed with test programs): syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa054d8d169 code=0x7ffc0000 [ 198.536881][ T5894] usb 2-1: Using ep0 maxpacket: 16 [ 198.551225][ T5894] usb 2-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 198.565813][ T30] audit: type=1326 audit(1743494774.311:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.4.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7fa054d8d169 code=0x7ffc0000 [ 198.575283][ T5894] usb 2-1: config 253 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 198.666544][ T30] audit: type=1326 audit(1743494774.311:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.4.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa054d8d169 code=0x7ffc0000 [ 198.715361][ T5894] usb 2-1: config 253 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 198.786166][ T5894] usb 2-1: config 253 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 198.905389][ T5894] usb 2-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 198.961614][ T5894] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 198.974527][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 198.989877][ T5894] usb 2-1: SerialNumber: syz [ 199.016184][ T7434] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 199.024805][ T7434] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 199.039747][ T7434] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 199.056864][ T5896] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 199.218950][ T5896] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 199.233023][ T5896] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 199.260077][ T5896] usb 5-1: config 4 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 199.275053][ T5896] usb 5-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x56, changing to 0x6 [ 199.290820][ T5896] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 199.301770][ T5896] usb 5-1: config 4 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 199.327858][ T5894] usb 2-1: USB disconnect, device number 18 [ 199.335015][ T5896] usb 5-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 199.353415][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.362878][ T5896] usb 5-1: Product: syz [ 199.375717][ T5896] usb 5-1: Manufacturer: syz [ 199.381117][ T5896] usb 5-1: SerialNumber: syz [ 199.393673][ T5896] usb 5-1: ucan: probing device on interface #0 [ 199.408899][ T5896] usb 5-1: ucan: invalid endpoint configuration [ 199.416589][ T5896] usb 5-1: ucan: probe failed; try to update the device firmware [ 199.496817][ T47] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 199.600655][ T7452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.630161][ T7452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.672324][ T47] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 199.690630][ T5893] usb 5-1: USB disconnect, device number 13 [ 199.746607][ T47] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 199.790582][ T47] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 199.820951][ T47] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 199.836023][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.862806][ T47] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 199.938275][ T47] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 200.008613][ T6493] udevd[6493]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 200.084823][ T47] usb 1-1: USB disconnect, device number 24 [ 200.329338][ T5894] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 200.573067][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 200.597627][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.610088][ T5894] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 200.619424][ T5894] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 200.627810][ T5894] usb 2-1: Manufacturer: syz [ 200.634718][ T5894] usb 2-1: config 0 descriptor?? [ 200.786983][ T5896] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 200.980273][ T5896] usb 3-1: config 0 has no interfaces? [ 200.996739][ T5896] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 201.006034][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.018122][ T5896] usb 3-1: Product: syz [ 201.024858][ T5896] usb 3-1: Manufacturer: syz [ 201.040183][ T5896] usb 3-1: SerialNumber: syz [ 201.054006][ T5894] cougar 0003:060B:700A.0006: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 201.074110][ T5896] usb 3-1: config 0 descriptor?? [ 201.311686][ T7490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.321387][ T7490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.332646][ T7490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.472'. [ 201.404685][ T7470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.468'. [ 201.424002][ T5896] usb 2-1: USB disconnect, device number 19 [ 202.777836][ T980] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 202.957083][ T980] usb 1-1: Using ep0 maxpacket: 8 [ 202.973585][ T980] usb 1-1: config 231 has an invalid interface number: 85 but max is 1 [ 203.019146][ T980] usb 1-1: config 231 has an invalid interface number: 214 but max is 1 [ 203.028197][ T980] usb 1-1: config 231 has an invalid descriptor of length 1, skipping remainder of the config [ 203.043695][ T980] usb 1-1: config 231 has no interface number 0 [ 203.053401][ T980] usb 1-1: config 231 has no interface number 1 [ 203.063656][ T980] usb 1-1: config 231 interface 85 altsetting 120 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 203.080414][ T980] usb 1-1: config 231 interface 85 altsetting 120 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 203.095154][ T980] usb 1-1: config 231 interface 85 altsetting 120 has an invalid descriptor for endpoint zero, skipping [ 203.106964][ T980] usb 1-1: config 231 interface 85 altsetting 120 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 203.148981][ T980] usb 1-1: config 231 interface 85 altsetting 120 has an invalid descriptor for endpoint zero, skipping [ 203.181779][ T980] usb 1-1: config 231 interface 85 altsetting 120 endpoint 0xA has an invalid bInterval 64, changing to 7 [ 203.195625][ T980] usb 1-1: config 231 interface 85 altsetting 120 has a duplicate endpoint with address 0xB, skipping [ 203.218558][ T980] usb 1-1: config 231 interface 85 altsetting 120 has a duplicate endpoint with address 0xA, skipping [ 203.231473][ T980] usb 1-1: config 231 interface 85 altsetting 120 has an invalid descriptor for endpoint zero, skipping [ 203.319988][ T980] usb 1-1: config 231 interface 85 altsetting 120 endpoint 0xD has an invalid bInterval 192, changing to 7 [ 203.352050][ T980] usb 1-1: config 231 interface 85 altsetting 120 has a duplicate endpoint with address 0x7, skipping [ 203.399005][ T980] usb 1-1: config 231 interface 85 altsetting 120 has an endpoint descriptor with address 0xBB, changing to 0x8B [ 203.440383][ T980] usb 1-1: config 231 interface 85 altsetting 120 has a duplicate endpoint with address 0x8B, skipping [ 203.470436][ T980] usb 1-1: config 231 interface 85 altsetting 120 has a duplicate endpoint with address 0x6, skipping [ 203.515609][ T980] usb 1-1: config 231 interface 85 altsetting 120 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 203.573059][ T980] usb 1-1: config 231 interface 214 altsetting 250 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 203.600326][ T980] usb 1-1: config 231 interface 85 has no altsetting 0 [ 203.686841][ T980] usb 1-1: config 231 interface 214 has no altsetting 0 [ 203.703829][ T980] usb 1-1: New USB device found, idVendor=12d1, idProduct=bf0a, bcdDevice=75.ab [ 203.713234][ T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.736789][ T980] usb 1-1: Product: 潶᫚伢謙鯆῿錧鳲吨볜꿍૱Ʋޅ爯胃爄㪷诔䞰쀑鿮疰儲㮈廙캒䛕ꛡ樑娡ꎰ軐甪ꏭꀌﾊ⟽予דּ憭낯筓̆벞㪪穈䖃ඡ´ᆄꇓ♝짏ᑱ벒꬯欂伓샒◎ꀙ煝㢇譸碏秦쇂鋷뎂噚紩늰㺇ᝍ។흒쟷羿ᰵ韄ᗇꧼꈈ蚕傩쇮飉鎂֟듑婂壉泣㸩勁ᒣ쁵泯ｬ鈞ꎳ㡨肔籊ꭶ⹪㹜憌 [ 203.855917][ T980] usb 1-1: Manufacturer: 蕥뒄恚䱉୤ƙ壟맋倵養椰汥⁸녆႑䠁玄᳚⥡㓶캇븺㊲隆ပ앣筕呫ᜥ懑寒❋ù놤ଊ銷↕쩺ꋣ⋥ೌ佘踢⊁懜ﹰฮ則斎๎îᡈ⡐૲즑넺๷猀鈛肦爊穄ሴᔌ骰ꖚ陬鼇ḕꩠ᭧䠀̔舂쀖뿀큒⨍㼻ᗵȯ㣹ꉿ뉞饕谽ﾷ厽雈皃ħ臛㰉텗ꗎ賑嵌˩吗굦 [ 203.937853][ T5893] usb 3-1: USB disconnect, device number 23 [ 203.950608][ T47] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 203.960021][ T980] usb 1-1: SerialNumber: ч [ 204.093075][ T7505] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 204.613383][ T7537] geneve2: entered promiscuous mode [ 204.622294][ T47] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 204.634553][ T7537] geneve2: entered allmulticast mode [ 204.646342][ T47] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 204.671193][ T47] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 204.754646][ T7505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.763420][ T7505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.793962][ T980] option 1-1:231.85: GSM modem (1-port) converter detected [ 204.796875][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.822351][ T7528] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 204.823024][ T980] usb 1-1: USB disconnect, device number 25 [ 204.900032][ T47] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 204.902831][ T980] option 1-1:231.85: device disconnected [ 205.067486][ T47] usb 4-1: USB disconnect, device number 19 [ 205.298091][ T7534] xt_nfacct: accounting object `syz1' does not exists [ 205.319083][ T7547] input: syz1 as /devices/virtual/input/input17 [ 205.398486][ T6041] udevd[6041]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 205.617019][ T980] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 205.782854][ T980] usb 3-1: config index 0 descriptor too short (expected 80, got 53) [ 205.808432][ T980] usb 3-1: config 8 has an invalid interface number: 223 but max is 0 [ 205.850028][ T980] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 205.870393][ T980] usb 3-1: config 8 has no interface number 0 [ 205.880765][ T980] usb 3-1: config 8 interface 223 altsetting 0 endpoint 0xC has invalid maxpacket 54048, setting to 64 [ 205.892483][ T980] usb 3-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 205.913223][ T980] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 205.923313][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.931955][ T980] usb 3-1: Product: syz [ 205.936447][ T980] usb 3-1: Manufacturer: syz [ 205.941932][ T980] usb 3-1: SerialNumber: syz [ 205.953826][ T7543] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 206.167771][ T7543] netlink: 16 bytes leftover after parsing attributes in process `syz.2.486'. [ 206.214273][ T7543] netlink: 16 bytes leftover after parsing attributes in process `syz.2.486'. [ 206.478231][ T7569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.498'. [ 206.492376][ T7569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.498'. [ 206.512657][ T7569] netlink: 'syz.0.498': attribute type 11 has an invalid length. [ 206.609106][ T5894] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 206.680967][ T7574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.500'. [ 206.692564][ T7574] netlink: 12 bytes leftover after parsing attributes in process `syz.4.500'. [ 206.777688][ T5894] usb 4-1: Using ep0 maxpacket: 8 [ 206.785289][ T5894] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 206.802791][ T7579] vlan2: entered allmulticast mode [ 206.812101][ T7579] hsr0: entered allmulticast mode [ 206.817926][ T7579] hsr_slave_0: entered allmulticast mode [ 206.833790][ T5894] usb 4-1: config 0 has no interface number 0 [ 206.833803][ T7579] hsr_slave_1: entered allmulticast mode [ 206.842811][ T5894] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 206.859502][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.869101][ T5894] usb 4-1: Product: syz [ 206.873318][ T5894] usb 4-1: Manufacturer: syz [ 206.882244][ T5894] usb 4-1: SerialNumber: syz [ 207.356080][ T56] Bluetooth: hci0: command 0x0406 tx timeout [ 207.362992][ T56] Bluetooth: hci4: command 0x0406 tx timeout [ 207.369802][ T56] Bluetooth: hci1: command 0x0406 tx timeout [ 207.376459][ T56] Bluetooth: hci3: command 0x0406 tx timeout [ 207.382594][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 207.523205][ T980] usb 3-1: USB disconnect, device number 24 [ 207.650260][ T5894] usb 4-1: config 0 descriptor?? [ 207.907696][ T5894] usb 4-1: USB disconnect, device number 20 [ 208.127470][ T980] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 208.289231][ T980] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 208.303816][ T980] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 208.314129][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 208.327006][ T980] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 208.340673][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.371189][ T7584] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 208.395010][ T980] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 208.412754][ T7592] input: syz1 as /devices/virtual/input/input18 [ 208.516976][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 208.542815][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.573413][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x33, changing to 0x3 [ 208.642620][ T980] usb 3-1: USB disconnect, device number 25 [ 208.663352][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 208.707287][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 208.823308][ T9] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 208.833158][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.842288][ T9] usb 1-1: Product: syz [ 208.851313][ T9] usb 1-1: Manufacturer: syz [ 208.856575][ T9] usb 1-1: SerialNumber: syz [ 208.864438][ T9] usb 1-1: config 0 descriptor?? [ 208.875250][ T9] imon_raw 1-1:0.0: IR endpoint missing [ 209.083747][ T9] usb 1-1: USB disconnect, device number 26 [ 209.343021][ T7600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.510'. [ 209.351935][ T7600] netlink: 24 bytes leftover after parsing attributes in process `syz.1.510'. [ 209.676909][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 209.845636][ T7613] can: request_module (can-proto-3) failed. [ 209.863619][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 209.873667][ T9] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 209.891158][ T9] usb 2-1: config 0 has an invalid descriptor of length 110, skipping remainder of the config [ 209.917532][ T9] usb 2-1: config 0 has no interface number 0 [ 209.936495][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 209.957402][ T840] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 209.968348][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.986146][ T9] usb 2-1: Product: syz [ 209.995290][ T9] usb 2-1: Manufacturer: syz [ 210.004001][ T9] usb 2-1: SerialNumber: syz [ 210.011918][ T9] usb 2-1: config 0 descriptor?? [ 210.126933][ T840] usb 3-1: Using ep0 maxpacket: 32 [ 210.133789][ T840] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 210.145568][ T840] usb 3-1: config 0 has no interface number 0 [ 210.152186][ T840] usb 3-1: config 0 interface 35 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 210.168497][ T840] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 210.180811][ T840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.189953][ T840] usb 3-1: Product: syz [ 210.194437][ T840] usb 3-1: Manufacturer: syz [ 210.201893][ T840] usb 3-1: SerialNumber: syz [ 210.228012][ T840] usb 3-1: config 0 descriptor?? [ 210.236586][ T840] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 210.246835][ T840] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5 [ 210.587560][ T7632] input: syz1 as /devices/virtual/input/input19 [ 210.644150][ T840] radio-raremono 3-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 210.766352][ T840] radio-raremono 3-1:0.35: V4L2 device registered as radio48 [ 210.884255][ T7641] kvm: apic: phys broadcast and lowest prio [ 210.954687][ T9] usb 3-1: USB disconnect, device number 26 [ 211.004631][ T9] radio-raremono 3-1:0.35: Thanko's Raremono disconnected [ 211.996802][ T5893] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 212.147765][ T7665] syz.4.528 uses obsolete (PF_INET,SOCK_PACKET) [ 212.159249][ T5893] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 212.180913][ T5893] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 212.207644][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 212.219452][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 212.276911][ T5893] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 212.414799][ T5892] usb 2-1: USB disconnect, device number 20 [ 212.522586][ T5893] usb 1-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 212.543150][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.589844][ T5893] usb 1-1: Product: syz [ 212.603468][ T5893] usb 1-1: Manufacturer: syz [ 212.620321][ T5893] usb 1-1: SerialNumber: syz [ 212.714783][ T5893] usb 1-1: config 0 descriptor?? [ 212.758225][ T5893] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 212.852933][ T5893] imon 1-1:0.0: unable to initialize intf0, err -90 [ 212.881822][ T5893] imon:imon_probe: failed to initialize context! [ 212.944316][ T5893] imon 1-1:0.0: unable to register, err -19 [ 212.957063][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 213.150983][ T9] usb 5-1: config 0 has no interfaces? [ 213.177043][ T5892] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 213.213643][ T9] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 213.227098][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.235348][ T9] usb 5-1: Product: syz [ 213.245433][ T9] usb 5-1: Manufacturer: syz [ 213.251324][ T9] usb 5-1: SerialNumber: syz [ 213.265194][ T9] usb 5-1: config 0 descriptor?? [ 213.396990][ T5892] usb 2-1: Using ep0 maxpacket: 8 [ 213.553406][ T5892] usb 2-1: config 0 has an invalid interface number: 142 but max is 0 [ 213.579209][ T5892] usb 2-1: config 0 has no interface number 0 [ 213.644650][ T5892] usb 2-1: config 0 interface 142 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 213.683079][ T5892] usb 2-1: config 0 interface 142 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 213.699017][ T5892] usb 2-1: config 0 interface 142 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 213.724912][ T5892] usb 2-1: New USB device found, idVendor=0c45, idProduct=602c, bcdDevice=f3.5d [ 213.736058][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.753390][ T5892] usb 2-1: Product: syz [ 213.763183][ T5892] usb 2-1: Manufacturer: syz [ 213.778261][ T7674] workqueue: name exceeds WQ_NAME_LEN. Truncating to: >ZcUË+u!8 [ 213.864054][ T5892] usb 2-1: SerialNumber: syz [ 213.884986][ T5892] usb 2-1: config 0 descriptor?? [ 213.901899][ T7678] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 213.922037][ T5892] gspca_main: sonixb-2.14.0 probing 0c45:602c [ 214.010452][ T7690] input: syz1 as /devices/virtual/input/input20 [ 214.119834][ T5892] sonixb 2-1:0.142: Error reading register 00: -71 [ 214.139177][ T5892] usb 2-1: USB disconnect, device number 21 [ 214.763847][ T5892] usb 1-1: USB disconnect, device number 27 [ 215.006882][ T5893] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 215.156908][ T47] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 215.182195][ T7715] netlink: 68 bytes leftover after parsing attributes in process `syz.3.542'. [ 215.486075][ T5893] usb 2-1: Using ep0 maxpacket: 32 [ 215.510358][ T5893] usb 2-1: unable to get BOS descriptor or descriptor too short [ 215.519756][ T5893] usb 2-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 215.542943][ T5893] usb 2-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 215.682547][ T5893] usb 2-1: config 1 interface 0 has no altsetting 0 [ 215.722100][ T9] usb 5-1: USB disconnect, device number 14 [ 215.722852][ T5893] usb 2-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.40 [ 215.758025][ T47] usb 3-1: Using ep0 maxpacket: 8 [ 215.801321][ T47] usb 3-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 216.019445][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.045606][ T47] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 216.057758][ T5893] usb 2-1: Product: syz [ 216.062004][ T5893] usb 2-1: Manufacturer: syz [ 216.081102][ T47] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59378, setting to 1024 [ 216.092602][ T5893] usb 2-1: SerialNumber: syz [ 216.108575][ T47] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 216.118335][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.133870][ T7703] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 216.282880][ T7707] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 216.298846][ T47] hub 3-1:32.0: USB hub found [ 216.517494][ T47] hub 3-1:32.0: config failed, can't read hub descriptor (err -22) [ 216.541075][ T5893] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input21 [ 216.627709][ T47] usb 3-1: USB disconnect, device number 27 [ 216.686689][ T6053] udevd[6053]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 216.702784][ T5909] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 216.856827][ T5909] usb 1-1: Using ep0 maxpacket: 8 [ 216.875415][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 122, changing to 10 [ 216.889125][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 24801, setting to 1024 [ 216.949471][ T5909] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 216.973867][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.026191][ T5909] usb 1-1: config 0 descriptor?? [ 217.108996][ T5197] bcm5974 2-1:1.0: could not read from device [ 217.109252][ T9] usb 2-1: USB disconnect, device number 22 [ 217.142469][ T5197] bcm5974 2-1:1.0: could not read from device [ 217.183563][ T5938] bcm5974 2-1:1.0: could not read from device [ 217.220823][ T7735] input: syz1 as /devices/virtual/input/input22 [ 217.257105][ T5909] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 217.448656][ T7726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.461949][ T7726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.480413][ T5909] usb 1-1: USB disconnect, device number 28 [ 217.966798][ T7744] xt_hashlimit: size too large, truncated to 1048576 [ 217.996091][ T7744] xt_hashlimit: max too large, truncated to 1048576 [ 218.041615][ T7744] Cannot find del_set index 1 as target [ 218.105765][ T7747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.205586][ T7747] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.606205][ T5894] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 218.771916][ T5894] usb 1-1: Using ep0 maxpacket: 32 [ 218.868181][ T5894] usb 1-1: unable to get BOS descriptor or descriptor too short [ 218.882197][ T5894] usb 1-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 218.906158][ T5894] usb 1-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 218.927052][ T5894] usb 1-1: config 1 interface 0 has no altsetting 0 [ 218.946110][ T5894] usb 1-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.40 [ 218.955616][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.985898][ T5894] usb 1-1: Product: syz [ 218.998463][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 219.015679][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 219.037449][ T5894] usb 1-1: Manufacturer: syz [ 219.046604][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 219.062783][ T5894] usb 1-1: SerialNumber: syz [ 219.076182][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 219.218552][ T7754] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 219.242362][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 219.251158][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 219.327910][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 219.354634][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 219.370673][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 219.383003][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 219.393461][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 219.407485][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 219.415156][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 219.494516][ T5894] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input23 [ 219.513923][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 219.548417][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 219.578340][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 219.585932][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 219.596106][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 219.609146][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 219.619058][ T5892] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 219.630353][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 219.649455][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 219.659662][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 219.691616][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 219.707353][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 219.715476][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 219.726494][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 219.737675][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 219.745307][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 219.756627][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 219.767939][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 219.775533][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 219.787968][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 219.795720][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 219.810674][ T5892] usb 4-1: Using ep0 maxpacket: 32 [ 219.821364][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.840464][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.850954][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 219.864089][ T5892] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 219.875361][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 219.894996][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.908794][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 219.928879][ T5892] usb 4-1: config 0 descriptor?? [ 219.935053][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 219.944382][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 219.953870][ T5892] hub 4-1:0.0: USB hub found [ 219.959580][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 219.967741][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 219.975858][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 219.984294][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 219.993156][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 220.003401][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 220.012309][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 220.021158][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 220.041057][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 220.050096][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 220.058203][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 220.066305][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 220.075174][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 220.084714][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 220.154203][ T5892] hub 4-1:0.0: config failed, can't read hub descriptor (err -90) [ 220.166031][ T5197] bcm5974 1-1:1.0: could not read from device [ 220.208405][ T5894] usb 1-1: USB disconnect, device number 29 [ 220.214795][ T5197] bcm5974 1-1:1.0: could not read from device [ 220.232891][ T5197] bcm5974 1-1:1.0: could not read from device [ 220.256903][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 220.297213][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 220.315187][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 220.344424][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 220.362360][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 220.371983][ T5892] usbhid 4-1:0.0: can't add hid device: -71 [ 220.381288][ T5892] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 220.390530][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 220.419350][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 220.428066][ T5892] usb 4-1: USB disconnect, device number 21 [ 220.437596][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 220.446872][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 220.454553][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 220.464738][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 220.476947][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 220.484441][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 220.492097][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 220.506440][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 220.534692][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 220.557157][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 220.567419][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 220.597403][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 220.604853][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 220.614623][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 220.624536][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 220.635886][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 220.646861][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 220.664418][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 220.672369][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 220.682835][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 220.691820][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 220.706338][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 220.714020][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 220.724207][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 220.734591][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 220.758328][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 220.771219][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 220.782709][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 220.792213][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 220.799676][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 220.813466][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 220.823547][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 220.836966][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 220.855428][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 220.864313][ T7783] input: syz1 as /devices/virtual/input/input24 [ 220.877639][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 220.906828][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 220.914284][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 220.923814][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 220.933971][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 220.946938][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 220.966197][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 220.983467][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 221.017142][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 221.025558][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 221.033242][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 221.043222][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 221.052031][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 221.060833][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 221.068458][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 221.079476][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 221.088191][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 221.095793][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 221.106851][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 221.114364][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 221.143341][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 221.175927][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 221.213727][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 221.243315][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 221.263618][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 221.285656][ T9] hid-generic 0002:0000:0007.0007: unknown main item tag 0x0 [ 221.309659][ T9] hid-generic 0002:0000:0007.0007: hidraw0: HID v0.07 Device [syz1] on syz0 [ 221.567225][ T5893] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 221.712903][ T5893] usb 5-1: device descriptor read/64, error -71 [ 221.966784][ T5909] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 221.983739][ T5893] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 222.131429][ T5893] usb 5-1: device descriptor read/64, error -71 [ 222.146870][ T5909] usb 1-1: Using ep0 maxpacket: 16 [ 222.154847][ T5909] usb 1-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 222.175896][ T5909] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 222.200213][ T5909] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 222.213264][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.218713][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 222.222149][ T5909] usb 1-1: Product: syz [ 222.233531][ T5909] usb 1-1: Manufacturer: syz [ 222.239080][ T5909] usb 1-1: SerialNumber: syz [ 222.257989][ T5893] usb usb5-port1: attempt power cycle [ 222.386781][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 222.396776][ T7818] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 222.401540][ T9] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 222.422718][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.423101][ T7819] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 222.444911][ T9] usb 2-1: Product: syz [ 222.451033][ T9] usb 2-1: Manufacturer: syz [ 222.464936][ T5909] usb 1-1: 0:2 : does not exist [ 222.465445][ T9] usb 2-1: SerialNumber: syz [ 222.479064][ T9] usb 2-1: config 0 descriptor?? [ 222.483968][ T5909] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 222.495055][ T9] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 222.549170][ T5909] usb 1-1: USB disconnect, device number 30 [ 222.612078][ T5893] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 222.652741][ T5893] usb 5-1: device descriptor read/8, error -71 [ 222.757431][ T6053] udevd[6053]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 222.906821][ T5893] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 222.960083][ T5893] usb 5-1: device descriptor read/8, error -71 [ 223.077217][ T5893] usb usb5-port1: unable to enumerate USB device [ 223.133954][ T7835] input: syz1 as /devices/virtual/input/input25 [ 223.899362][ T7843] netlink: 'syz.2.582': attribute type 27 has an invalid length. [ 224.236821][ T5893] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 224.349345][ T5909] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 224.397703][ T5893] usb 1-1: Using ep0 maxpacket: 32 [ 224.425435][ T5893] usb 1-1: unable to get BOS descriptor or descriptor too short [ 224.448156][ T5893] usb 1-1: config 128 has an invalid interface number: 255 but max is 3 [ 224.456622][ T5893] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 224.473814][ T5893] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 224.485983][ T5893] usb 1-1: config 128 has no interface number 0 [ 224.503794][ T5893] usb 1-1: config 128 interface 255 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 224.516077][ T5893] usb 1-1: config 128 interface 255 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 224.528596][ T5909] usb 4-1: Using ep0 maxpacket: 8 [ 224.533749][ T5893] usb 1-1: config 128 interface 255 has no altsetting 0 [ 224.544749][ T5909] usb 4-1: config 0 has an invalid interface number: 85 but max is 1 [ 224.560907][ T5909] usb 4-1: config 0 has an invalid interface number: 89 but max is 1 [ 224.569925][ T5909] usb 4-1: config 0 has no interface number 0 [ 224.576479][ T5893] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 224.585628][ T5909] usb 4-1: config 0 has no interface number 1 [ 224.591802][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.600058][ T5893] usb 1-1: Product: syz [ 224.604502][ T5893] usb 1-1: Manufacturer: syz [ 224.609600][ T5893] usb 1-1: SerialNumber: syz [ 224.615480][ T5909] usb 4-1: New USB device found, idVendor=0e96, idProduct=c001, bcdDevice=62.3f [ 224.625371][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.638519][ T5909] usb 4-1: Product: syz [ 224.644308][ T5909] usb 4-1: Manufacturer: syz [ 224.649243][ T5909] usb 4-1: SerialNumber: syz [ 224.657928][ T5909] usb 4-1: config 0 descriptor?? [ 224.731052][ T5892] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 224.869622][ T5892] usb 5-1: device descriptor read/64, error -71 [ 224.942491][ T9] usb 2-1: USB disconnect, device number 23 [ 224.974697][ T7859] netlink: 'syz.0.584': attribute type 5 has an invalid length. [ 225.061816][ T5894] usb 4-1: USB disconnect, device number 22 [ 225.160040][ T5892] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 225.297050][ T5892] usb 5-1: device descriptor read/64, error -71 [ 225.362495][ T7867] capability: warning: `syz.2.591' uses 32-bit capabilities (legacy support in use) [ 225.420777][ T5892] usb usb5-port1: attempt power cycle [ 225.446943][ T9] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 225.777965][ T5892] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 225.798855][ T5892] usb 5-1: device descriptor read/8, error -71 [ 225.806143][ T9] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 225.815127][ T9] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 225.824075][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 225.833624][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 225.845384][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 225.929439][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 226.066739][ T5892] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 226.087652][ T5892] usb 5-1: device descriptor read/8, error -71 [ 226.116872][ T9] usb 2-1: string descriptor 0 read error: -22 [ 226.124644][ T9] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 226.155239][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.176223][ T9] usb 2-1: config 0 descriptor?? [ 226.188145][ T7865] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 226.203553][ T9] hub 2-1:0.0: bad descriptor, ignoring hub [ 226.221774][ T9] hub 2-1:0.0: probe with driver hub failed with error -5 [ 226.253789][ T9] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input26 [ 226.266236][ T5892] usb usb5-port1: unable to enumerate USB device [ 226.552989][ T7865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.563766][ T7865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.596065][ C1] usb_acecad 2-1:0.0: can't resubmit intr, dummy_hcd.1-1/input0, status -19 [ 226.606327][ T47] usb 2-1: USB disconnect, device number 24 [ 226.939113][ T7879] input: syz1 as /devices/virtual/input/input27 [ 227.068486][ T7882] netlink: 56 bytes leftover after parsing attributes in process `syz.0.595'. [ 227.083909][ T5893] usb 1-1: USB disconnect, device number 31 [ 227.159800][ T7882] netlink: 20 bytes leftover after parsing attributes in process `syz.0.595'. [ 227.248636][ T7886] netlink: 16 bytes leftover after parsing attributes in process `syz.1.596'. [ 227.267546][ T5889] udevd[5889]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.255/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 227.274168][ T7886] netlink: 24 bytes leftover after parsing attributes in process `syz.1.596'. [ 227.325466][ T7886] vxcan1: entered promiscuous mode [ 227.636820][ T5893] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 227.666862][ T5892] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 227.786765][ T5893] usb 4-1: Using ep0 maxpacket: 8 [ 227.793922][ T5893] usb 4-1: config 0 has an invalid interface number: 156 but max is 0 [ 227.803027][ T5893] usb 4-1: config 0 has no interface number 0 [ 227.810860][ T5893] usb 4-1: config 0 interface 156 altsetting 6 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 227.825353][ T5893] usb 4-1: config 0 interface 156 altsetting 6 endpoint 0x3 has an invalid bInterval 115, changing to 10 [ 227.837302][ T5893] usb 4-1: config 0 interface 156 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 227.837477][ T5892] usb 2-1: Using ep0 maxpacket: 16 [ 227.855307][ T5893] usb 4-1: config 0 interface 156 altsetting 6 bulk endpoint 0xA has invalid maxpacket 32 [ 227.939299][ T5892] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 227.952645][ T5892] usb 2-1: config 0 has no interface number 0 [ 227.962917][ T5893] usb 4-1: config 0 interface 156 has no altsetting 0 [ 227.975167][ T5892] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 227.986015][ T5893] usb 4-1: New USB device found, idVendor=413c, idProduct=4007, bcdDevice=e7.2b [ 227.987925][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.999020][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.013462][ T5893] usb 4-1: Product: syz [ 228.017957][ T5892] usb 2-1: Product: syz [ 228.023010][ T5892] usb 2-1: Manufacturer: syz [ 228.039939][ T7904] netlink: 68 bytes leftover after parsing attributes in process `syz.2.602'. [ 228.377816][ T5893] usb 4-1: Manufacturer: syz [ 228.396755][ T5893] usb 4-1: SerialNumber: syz [ 228.406274][ T5893] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 228.415931][ T5893] usb 4-1: no configuration chosen from 1 choice [ 228.420349][ T5892] usb 2-1: SerialNumber: syz [ 228.454223][ T5892] usb 2-1: config 0 descriptor?? [ 228.508669][ T5892] asix 2-1:0.251: probe with driver asix failed with error -22 [ 228.906745][ T5893] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 229.030501][ T7911] sctp: [Deprecated]: syz.2.605 (pid 7911) Use of int in max_burst socket option deprecated. [ 229.030501][ T7911] Use struct sctp_assoc_value instead [ 229.042138][ T7891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.060473][ T7891] batadv_slave_1: entered promiscuous mode [ 229.079086][ T5893] usb 5-1: unable to get BOS descriptor or descriptor too short [ 229.087759][ T5893] usb 5-1: not running at top speed; connect to a high speed hub [ 229.097250][ T5893] usb 5-1: config 1 interface 0 altsetting 129 endpoint 0x82 has invalid wMaxPacketSize 0 [ 229.107821][ T5893] usb 5-1: config 1 interface 0 altsetting 129 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 229.122569][ T5893] usb 5-1: config 1 interface 0 has no altsetting 0 [ 229.132828][ T5893] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 229.143771][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.159253][ T5893] usb 5-1: Product: syz [ 229.163517][ T5893] usb 5-1: Manufacturer: 줥뫪ﾅ勧뼕ⱶ틑럠漈셥㝡뀖瞅欳瀌ⲮԆ漅ꏱ데퐛첗隣䏐ꙭᦇ닚ฤ䱺邲ꘃꈹ嵒䴊獣ﳰ⡶㤚Ցz [ 229.183189][ T5893] usb 5-1: SerialNumber: syz [ 229.418698][ T5893] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 229.444351][ T5893] usb 5-1: USB disconnect, device number 23 [ 230.406784][ T5892] usb 4-1: USB disconnect, device number 23 [ 230.472845][ T7922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.608'. [ 230.750699][ T5893] usb 2-1: USB disconnect, device number 25 [ 230.996795][ T5892] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 231.015815][ T7922] team0 (unregistering): Port device team_slave_0 removed [ 231.054931][ T7922] team0 (unregistering): Port device team_slave_1 removed [ 231.087752][ T7926] vlan2: entered allmulticast mode [ 231.094806][ T7926] bond0: entered allmulticast mode [ 231.116864][ T7926] bond_slave_0: entered allmulticast mode [ 231.125079][ T7926] bond_slave_1: entered allmulticast mode [ 231.187444][ T5892] usb 4-1: Using ep0 maxpacket: 8 [ 231.200357][ T5892] usb 4-1: config 0 has an invalid interface number: 155 but max is 1 [ 231.225846][ T5892] usb 4-1: config 0 has an invalid interface number: 245 but max is 1 [ 231.255924][ T5892] usb 4-1: config 0 has no interface number 0 [ 231.265492][ T7933] input: syz1 as /devices/virtual/input/input28 [ 231.282219][ T5892] usb 4-1: config 0 has no interface number 1 [ 231.319972][ T5892] usb 4-1: config 0 interface 155 has no altsetting 0 [ 231.328457][ T5892] usb 4-1: config 0 interface 245 has no altsetting 0 [ 231.335493][ T5892] usb 4-1: New USB device found, idVendor=04c8, idProduct=0720, bcdDevice=b8.b6 [ 231.353886][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.382899][ T5892] usb 4-1: config 0 descriptor?? [ 231.605611][ T5892] usb 4-1: string descriptor 0 read error: -71 [ 231.641130][ T5892] usb 4-1: USB disconnect, device number 24 [ 232.734854][ T7960] "syz.1.619" (7960) uses obsolete ecb(arc4) skcipher [ 232.754785][ T7969] x_tables: unsorted underflow at hook 1 [ 233.018773][ T7971] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 233.386911][ T5893] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 233.466993][ T5896] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 233.495515][ T7982] input: syz1 as /devices/virtual/input/input29 [ 233.636742][ T5893] usb 5-1: Using ep0 maxpacket: 8 [ 233.702589][ T5896] usb 4-1: Using ep0 maxpacket: 8 [ 233.709677][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 233.739184][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 233.751186][ T5893] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 233.776776][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.784900][ T5896] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 233.803256][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.815883][ T5893] usb 5-1: config 0 descriptor?? [ 233.835607][ T5896] usb 4-1: config 0 descriptor?? [ 234.034098][ T5893] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 234.065651][ T5896] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 234.234253][ T5893] usb 5-1: USB disconnect, device number 24 [ 234.234392][ C0] iowarrior 5-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 234.257059][ T5892] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 234.300238][ T5894] usb 4-1: USB disconnect, device number 25 [ 234.416846][ T5896] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 234.438826][ T5892] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.449375][ T5892] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 234.463261][ T5892] usb 3-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 234.474150][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.491598][ T5892] usb 3-1: config 0 descriptor?? [ 234.502027][ T5892] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 234.566844][ T5896] usb 2-1: Using ep0 maxpacket: 32 [ 234.582909][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.594259][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.605342][ T5896] usb 2-1: New USB device found, idVendor=0079, idProduct=1843, bcdDevice= 0.00 [ 234.614975][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.625514][ T5896] usb 2-1: config 0 descriptor?? [ 234.711523][ T5893] usb 3-1: USB disconnect, device number 28 [ 235.110145][ T8026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.148867][ T5894] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 235.201744][ T8026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.235130][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 235.242888][ T30] audit: type=1326 audit(1743494811.991:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8029 comm="syz.0.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c478d169 code=0x7ffc0000 [ 235.323577][ T8033] input: syz1 as /devices/virtual/input/input30 [ 235.457890][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801e6cc800: rx timeout, send abort [ 235.556437][ T30] audit: type=1326 audit(1743494811.991:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8029 comm="syz.0.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c478d169 code=0x7ffc0000 [ 235.579695][ C1] vkms_vblank_simulate: vblank timer overrun [ 235.628678][ T5894] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 235.633278][ T30] audit: type=1326 audit(1743494811.991:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8029 comm="syz.0.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f53c4729359 code=0x7ffc0000 [ 235.659607][ C1] vkms_vblank_simulate: vblank timer overrun [ 235.676436][ T30] audit: type=1326 audit(1743494811.991:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8029 comm="syz.0.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f53c4729359 code=0x7ffc0000 [ 235.711859][ T30] audit: type=1326 audit(1743494811.991:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8029 comm="syz.0.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c478d169 code=0x7ffc0000 [ 235.737345][ T30] audit: type=1326 audit(1743494811.991:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8029 comm="syz.0.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f53c4729359 code=0x7ffc0000 [ 235.759340][ C1] vkms_vblank_simulate: vblank timer overrun [ 235.817733][ T5894] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.859596][ T30] audit: type=1326 audit(1743494811.991:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8029 comm="syz.0.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c478d169 code=0x7ffc0000 [ 235.901990][ T5894] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 235.948849][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.966155][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801e6cc800: abort rx timeout. Force session deactivation [ 235.991324][ T5894] usb 4-1: Product: syz [ 236.018859][ T5894] usb 4-1: Manufacturer: syz [ 236.037383][ T30] audit: type=1326 audit(1743494811.991:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8029 comm="syz.0.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c478d169 code=0x7ffc0000 [ 236.053229][ T5894] usb 4-1: SerialNumber: syz [ 236.059481][ C1] vkms_vblank_simulate: vblank timer overrun [ 236.224818][ T30] audit: type=1326 audit(1743494811.991:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8029 comm="syz.0.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f53c4729359 code=0x7ffc0000 [ 236.246999][ C1] vkms_vblank_simulate: vblank timer overrun [ 236.274320][ T5894] usb 4-1: config 0 descriptor?? [ 236.355887][ T5894] ims_pcu 4-1:0.0: Missing CDC union descriptor [ 236.357628][ T30] audit: type=1326 audit(1743494811.991:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8029 comm="syz.0.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f53c4729359 code=0x7ffc0000 [ 236.456793][ T5894] ims_pcu 4-1:0.0: probe with driver ims_pcu failed with error -22 [ 237.216768][ T5893] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 237.350791][ T5896] usbhid 2-1:0.0: can't add hid device: -71 [ 237.384705][ T5896] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 237.440027][ T8039] 8021q: VLANs not supported on caif0 [ 237.451814][ T5893] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 237.481138][ T5896] usb 2-1: USB disconnect, device number 26 [ 237.487405][ T5893] usb 3-1: config 0 has no interface number 0 [ 237.522039][ T5893] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 237.539081][ T5893] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 237.552765][ T5893] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 237.564174][ T5893] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 237.619593][ T8055] netlink: 20 bytes leftover after parsing attributes in process `syz.1.648'. [ 237.670346][ T5893] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 237.684637][ T5893] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 237.694075][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.855837][ T5893] usb 3-1: config 0 descriptor?? [ 237.901781][ T5894] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 238.032221][ T5893] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 238.119216][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 238.156825][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 238.171604][ T5892] usb 4-1: USB disconnect, device number 26 [ 238.230718][ T8037] ldusb 3-1:0.55: Couldn't submit interrupt_in_urb -90 [ 238.292323][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 238.306924][ T5894] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 238.316375][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.422403][ T5894] usb 5-1: config 0 descriptor?? [ 238.595301][ T8068] netlink: 4268 bytes leftover after parsing attributes in process `syz.0.652'. [ 238.606842][ T8068] netlink: 4268 bytes leftover after parsing attributes in process `syz.0.652'. [ 238.656878][ T980] usb 5-1: USB disconnect, device number 25 [ 238.697409][ T5892] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 238.846999][ T5892] usb 4-1: Using ep0 maxpacket: 8 [ 238.854481][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 238.865850][ T5894] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 238.875893][ T5892] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 238.888462][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.902748][ T5892] usb 4-1: config 0 descriptor?? [ 238.971110][ T8077] input: syz1 as /devices/virtual/input/input33 [ 239.028447][ T5894] usb 1-1: config index 0 descriptor too short (expected 3133, got 61) [ 239.037373][ T5894] usb 1-1: config 0 has an invalid interface number: 156 but max is 1 [ 239.046456][ T5894] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.059029][ T5894] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 239.076430][ T5894] usb 1-1: config 0 has no interface number 0 [ 239.084203][ T5894] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 239.098275][ T5894] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 239.108915][ T5894] usb 1-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 239.128283][ T5894] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 239.138219][ T5892] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 239.152865][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.164810][ T5894] usb 1-1: config 0 descriptor?? [ 239.174922][ T5894] gspca_main: spca561-2.14.0 probing abcd:cdee [ 239.304527][ T5893] usb 3-1: USB disconnect, device number 29 [ 239.330525][ T5895] usb 4-1: USB disconnect, device number 27 [ 239.374032][ T8068] netlink: 4268 bytes leftover after parsing attributes in process `syz.0.652'. [ 239.392890][ T8081] netlink: 80 bytes leftover after parsing attributes in process `syz.4.656'. [ 239.403849][ T8068] netlink: 4268 bytes leftover after parsing attributes in process `syz.0.652'. [ 239.413845][ T8081] netlink: 80 bytes leftover after parsing attributes in process `syz.4.656'. [ 239.423252][ T8081] netlink: 80 bytes leftover after parsing attributes in process `syz.4.656'. [ 239.432791][ T8081] netlink: 80 bytes leftover after parsing attributes in process `syz.4.656'. [ 239.442210][ T8081] netlink: 80 bytes leftover after parsing attributes in process `syz.4.656'. [ 239.452596][ T5893] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 239.495509][ T5894] spca561 1-1:0.156: probe with driver spca561 failed with error -22 [ 239.522219][ T5894] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 239.563430][ T5894] usb 1-1: MIDIStreaming interface descriptor not found [ 239.689165][ T5894] usb 1-1: USB disconnect, device number 32 [ 239.843254][ T8094] ip6tnl0: entered promiscuous mode [ 239.877356][ T8092] ip6tnl0: left promiscuous mode [ 240.129802][ T5894] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 240.429722][ T5894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.046237][ T5894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.063703][ T5894] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 241.085907][ T5894] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 241.144013][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.183807][ T5894] usb 1-1: config 0 descriptor?? [ 241.206810][ T30] kauditd_printk_skb: 247 callbacks suppressed [ 241.206827][ T30] audit: type=1326 audit(1743494817.961:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8125 comm="syz.2.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7003529359 code=0x7ffc0000 [ 241.434140][ T30] audit: type=1326 audit(1743494817.961:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8125 comm="syz.2.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7003529359 code=0x7ffc0000 [ 241.575715][ T30] audit: type=1326 audit(1743494817.961:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8125 comm="syz.2.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7003529359 code=0x7ffc0000 [ 241.607281][ T8132] input: syz1 as /devices/virtual/input/input34 [ 241.692914][ T5894] plantronics 0003:047F:FFFF.0008: reserved main item tag 0xd [ 241.780003][ T5894] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 241.788425][ T30] audit: type=1326 audit(1743494817.961:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8125 comm="syz.2.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7003529359 code=0x7ffc0000 [ 241.849997][ T5894] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 242.173590][ T30] audit: type=1326 audit(1743494817.961:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8125 comm="syz.2.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7003529359 code=0x7ffc0000 [ 242.243705][ T6493] udevd[6493]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 242.254413][ T30] audit: type=1326 audit(1743494817.961:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8125 comm="syz.2.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7003529359 code=0x7ffc0000 [ 242.546734][ T30] audit: type=1326 audit(1743494817.961:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8125 comm="syz.2.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7003529359 code=0x7ffc0000 [ 242.603143][ T30] audit: type=1326 audit(1743494817.961:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8125 comm="syz.2.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7003529359 code=0x7ffc0000 [ 242.693007][ T30] audit: type=1326 audit(1743494817.961:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8125 comm="syz.2.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7003529359 code=0x7ffc0000 [ 242.843700][ T30] audit: type=1326 audit(1743494817.961:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8125 comm="syz.2.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7003529359 code=0x7ffc0000 [ 243.166914][ T5895] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 243.336759][ T5895] usb 2-1: Using ep0 maxpacket: 16 [ 243.352457][ T5895] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.467142][ T5896] usb 1-1: reset high-speed USB device number 33 using dummy_hcd [ 243.486858][ T5895] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 243.607399][ T5895] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 243.644453][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.676948][ T5895] usb 2-1: Product: syz [ 243.686692][ T5895] usb 2-1: Manufacturer: syz [ 243.692214][ T5895] usb 2-1: SerialNumber: syz [ 243.966793][ T5894] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 244.099605][ T980] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 244.159573][ T5894] usb 5-1: unable to get BOS descriptor or descriptor too short [ 244.181808][ T5894] usb 5-1: not running at top speed; connect to a high speed hub [ 244.204077][ T5894] usb 5-1: config 1 has an invalid descriptor of length 82, skipping remainder of the config [ 244.220887][ T5894] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 244.234170][ T5894] usb 5-1: too many endpoints for config 1 interface 2 altsetting 217: 252, using maximum allowed: 30 [ 244.249035][ T5894] usb 5-1: config 1 interface 2 altsetting 217 has 0 endpoint descriptors, different from the interface descriptor's value: 252 [ 244.264550][ T5894] usb 5-1: config 1 interface 2 has no altsetting 1 [ 244.275654][ T5894] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 244.285016][ T980] usb 3-1: Using ep0 maxpacket: 8 [ 244.293107][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.304336][ T980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 244.315771][ T5894] usb 5-1: Product: syz [ 244.320384][ T980] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 244.329889][ T5894] usb 5-1: Manufacturer: syz [ 244.334662][ T5894] usb 5-1: SerialNumber: syz [ 244.339519][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.340944][ T47] usb 1-1: USB disconnect, device number 33 [ 244.360323][ T980] usb 3-1: config 0 descriptor?? [ 244.586344][ T980] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 244.782775][ T980] usb 3-1: USB disconnect, device number 30 [ 245.107448][ T8169] input: syz1 as /devices/virtual/input/input36 [ 245.783237][ T5895] usb 2-1: skipping empty audio interface (v1) [ 245.886328][ T5895] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 245.898877][ T5894] usb 5-1: unit 5 not found! [ 246.131417][ T5895] usb 2-1: USB disconnect, device number 27 [ 246.141583][ T5894] usb 5-1: USB disconnect, device number 26 [ 246.399086][ T5889] udevd[5889]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 246.609458][ T6053] udevd[6053]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 246.810420][ T5894] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 246.973580][ T8210] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 246.989608][ T5894] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 247.019843][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.040076][ T5894] usb 2-1: Product: syz [ 247.044323][ T5894] usb 2-1: Manufacturer: syz [ 247.064340][ T8213] __nla_validate_parse: 125 callbacks suppressed [ 247.064360][ T8213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.695'. [ 247.070194][ T5894] usb 2-1: SerialNumber: syz [ 247.109805][ T5894] usb 2-1: config 0 descriptor?? [ 247.118589][ T8215] input: syz1 as /devices/virtual/input/input37 [ 247.134268][ T5894] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 247.197131][ T5892] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 247.325829][ T8224] "syz.3.700" (8224) uses obsolete ecb(arc4) skcipher [ 247.346777][ T5896] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 247.366744][ T5892] usb 3-1: Using ep0 maxpacket: 8 [ 247.377861][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 247.397350][ T5909] usb 2-1: USB disconnect, device number 28 [ 247.424202][ T5892] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 247.437895][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.488521][ T5892] usb 3-1: config 0 descriptor?? [ 247.502881][ T47] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 247.524324][ T5896] usb 1-1: config 0 has no interfaces? [ 247.540933][ T5896] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 247.551789][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.567505][ T8227] netlink: 32 bytes leftover after parsing attributes in process `syz.3.700'. [ 247.587495][ T5896] usb 1-1: Product: syz [ 247.591712][ T5896] usb 1-1: Manufacturer: syz [ 247.596336][ T5896] usb 1-1: SerialNumber: syz [ 247.659139][ T5896] usb 1-1: config 0 descriptor?? [ 247.698512][ T47] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 247.710318][ T47] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 247.710661][ T5892] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 247.735492][ T47] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 247.745053][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.851099][ T8222] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 247.892138][ T47] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 247.913302][ T5892] usb 3-1: USB disconnect, device number 31 [ 248.093820][ T47] usb 5-1: USB disconnect, device number 27 [ 248.115891][ T8235] netlink: 'syz.1.704': attribute type 12 has an invalid length. [ 248.144422][ T8235] netlink: 'syz.1.704': attribute type 29 has an invalid length. [ 248.153635][ T8235] netlink: 148 bytes leftover after parsing attributes in process `syz.1.704'. [ 248.426542][ T8239] xt_ecn: cannot match TCP bits for non-tcp packets [ 248.463837][ T8239] loop2: detected capacity change from 0 to 7 [ 248.502534][ T8239] Dev loop2: unable to read RDB block 7 [ 248.513601][ T8239] loop2: unable to read partition table [ 248.522915][ T8239] loop2: partition table beyond EOD, truncated [ 248.529991][ T8239] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 248.833543][ T30] kauditd_printk_skb: 358 callbacks suppressed [ 248.833561][ T30] audit: type=1326 audit(1743494825.591:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8248 comm="syz.2.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700358d169 code=0x7ffc0000 [ 248.863000][ T47] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 248.871802][ T30] audit: type=1326 audit(1743494825.591:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8248 comm="syz.2.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700358d169 code=0x7ffc0000 [ 248.911806][ T30] audit: type=1326 audit(1743494825.631:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8248 comm="syz.2.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f700358d169 code=0x7ffc0000 [ 248.918668][ T8249] sctp: [Deprecated]: syz.2.709 (pid 8249) Use of int in maxseg socket option. [ 248.918668][ T8249] Use struct sctp_assoc_value instead [ 249.001536][ T30] audit: type=1326 audit(1743494825.631:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8248 comm="syz.2.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700358d169 code=0x7ffc0000 [ 249.048355][ T47] usb 4-1: Using ep0 maxpacket: 32 [ 249.064689][ T47] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 249.077614][ T47] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.091430][ T47] usb 4-1: config 0 has no interface number 0 [ 249.098495][ T30] audit: type=1326 audit(1743494825.631:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8248 comm="syz.2.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700358d169 code=0x7ffc0000 [ 249.145153][ T47] usb 4-1: config 0 interface 8 altsetting 248 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 249.162524][ T47] usb 4-1: config 0 interface 8 altsetting 248 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 249.171704][ T8253] input: syz1 as /devices/virtual/input/input38 [ 249.190069][ T30] audit: type=1326 audit(1743494825.631:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8248 comm="syz.2.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700358d169 code=0x7ffc0000 [ 249.226351][ T47] usb 4-1: config 0 interface 8 has no altsetting 0 [ 249.239440][ T30] audit: type=1326 audit(1743494825.631:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8248 comm="syz.2.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f700358d169 code=0x7ffc0000 [ 249.264397][ T30] audit: type=1326 audit(1743494825.671:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8248 comm="syz.2.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700358d169 code=0x7ffc0000 [ 249.294180][ T30] audit: type=1326 audit(1743494825.671:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8248 comm="syz.2.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700358d169 code=0x7ffc0000 [ 249.317007][ T47] usb 4-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 249.328591][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.336809][ T47] usb 4-1: Product: syz [ 249.341056][ T47] usb 4-1: Manufacturer: syz [ 249.346157][ T47] usb 4-1: SerialNumber: syz [ 249.360643][ T47] usb 4-1: config 0 descriptor?? [ 249.375939][ T30] audit: type=1326 audit(1743494825.671:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8248 comm="syz.2.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700358d169 code=0x7ffc0000 [ 249.417149][ T5894] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 249.586912][ T5894] usb 2-1: Using ep0 maxpacket: 16 [ 249.594061][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.639765][ T5894] usb 2-1: New USB device found, idVendor=046d, idProduct=c713, bcdDevice= 0.00 [ 249.661664][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.692400][ T5894] usb 2-1: config 0 descriptor?? [ 249.717325][ T47] ath6kl: Failed to submit usb control message: -71 [ 249.739832][ T47] ath6kl: unable to send the bmi data to the device: -71 [ 249.755450][ T47] ath6kl: Unable to send get target info: -71 [ 249.772325][ T47] ath6kl: Failed to init ath6kl core: -71 [ 249.781527][ T47] ath6kl_usb 4-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 249.815234][ T47] usb 4-1: USB disconnect, device number 28 [ 249.913726][ T5892] usb 1-1: USB disconnect, device number 34 [ 250.180646][ T8246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.217371][ T8246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.240205][ T5894] logitech-djreceiver 0003:046D:C713.0009: unknown main item tag 0x0 [ 250.280830][ T8269] sctp: [Deprecated]: syz.4.713 (pid 8269) Use of struct sctp_assoc_value in delayed_ack socket option. [ 250.280830][ T8269] Use struct sctp_sack_info instead [ 250.297258][ T5894] logitech-djreceiver 0003:046D:C713.0009: item fetching failed at offset 3/5 [ 250.336962][ T5894] logitech-djreceiver 0003:046D:C713.0009: logi_dj_probe: parse failed [ 250.380646][ T5894] logitech-djreceiver 0003:046D:C713.0009: probe with driver logitech-djreceiver failed with error -22 [ 250.451818][ T8271] !oup_id=00: renamed from bond_slave_0 (while UP) [ 251.031145][ T8287] fuse: Bad value for 'fd' [ 251.035972][ T8286] fuse: Bad value for 'fd' [ 251.058281][ T8286] fuse: Unknown parameter '0x0000000000000005' [ 251.075156][ T8287] fuse: Unknown parameter '0x0000000000000005' [ 251.168755][ T8293] netlink: 20 bytes leftover after parsing attributes in process `syz.3.717'. [ 251.457879][ T5893] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 251.532991][ T8307] input: syz1 as /devices/virtual/input/input39 [ 251.606761][ T5893] usb 1-1: Using ep0 maxpacket: 8 [ 251.615114][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 251.627452][ T5893] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 251.638357][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.659326][ T5893] usb 1-1: config 0 descriptor?? [ 251.824447][ T5896] usb 2-1: USB disconnect, device number 29 [ 251.898995][ T5893] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 251.935568][ T5893] usb 1-1: USB disconnect, device number 35 [ 251.956782][ T5909] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 252.001722][ T8312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.724'. [ 252.108458][ T5909] usb 5-1: config 0 has no interfaces? [ 252.121745][ T5909] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 252.146727][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.156987][ T5909] usb 5-1: Product: syz [ 252.161711][ T5909] usb 5-1: Manufacturer: syz [ 252.166399][ T5909] usb 5-1: SerialNumber: syz [ 252.177503][ T5909] usb 5-1: config 0 descriptor?? [ 252.636793][ T5909] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 252.860397][ T5909] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.871033][ T5909] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 252.881822][ T5909] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 252.891910][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 252.900458][ T5909] usb 4-1: SerialNumber: syz [ 253.168912][ T5909] usb 4-1: 0:2 : does not exist [ 253.173905][ T5909] usb 4-1: unit 255 not found! [ 253.204723][ T5909] usb 4-1: USB disconnect, device number 29 [ 253.326762][ T5896] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 253.404273][ T5889] udevd[5889]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 253.587210][ T5896] usb 1-1: Using ep0 maxpacket: 16 [ 253.630504][ T5896] usb 1-1: descriptor type invalid, skip [ 253.707257][ T5896] usb 1-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 177, changing to 11 [ 253.765133][ T5896] usb 1-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 253.804063][ T8337] netlink: 68 bytes leftover after parsing attributes in process `syz.3.729'. [ 253.813097][ T5896] usb 1-1: config 1 interface 0 has no altsetting 0 [ 253.815347][ T5896] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.40 [ 253.830464][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.838781][ T5896] usb 1-1: Product: syz [ 253.843094][ T5896] usb 1-1: Manufacturer: syz [ 253.848174][ T5896] usb 1-1: SerialNumber: syz [ 253.979620][ T8340] netlink: 44 bytes leftover after parsing attributes in process `syz.2.731'. [ 254.167827][ T8341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.190311][ T8341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.673663][ T5892] usb 5-1: USB disconnect, device number 28 [ 254.836822][ T5894] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 255.256988][ T5894] usb 3-1: Using ep0 maxpacket: 16 [ 255.354688][ T5894] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=d3.06 [ 255.376496][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 255.390525][ T8349] syzkaller0: entered promiscuous mode [ 255.397476][ T5894] usb 3-1: Product: syz [ 255.406814][ T5894] usb 3-1: Manufacturer: syz [ 255.411705][ T8349] syzkaller0: entered allmulticast mode [ 255.417643][ T5894] usb 3-1: SerialNumber: syz [ 255.433940][ T5894] r8152-cfgselector 3-1: Unknown version 0x0000 [ 255.440631][ T5894] r8152-cfgselector 3-1: config 0 descriptor?? [ 255.855614][ T5896] usbhid 1-1:1.0: can't add hid device: -71 [ 255.907332][ T5896] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 255.955299][ T5896] usb 1-1: USB disconnect, device number 36 [ 256.409312][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.415664][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.934696][ T8363] netlink: 20 bytes leftover after parsing attributes in process `syz.0.736'. [ 257.019084][ T8365] input: syz1 as /devices/virtual/input/input40 [ 257.268518][ T5895] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 257.436698][ T5895] usb 4-1: Using ep0 maxpacket: 32 [ 257.455646][ T5895] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 257.474031][ T5895] usb 4-1: config 0 has no interface number 0 [ 257.497270][ T5895] usb 4-1: config 0 interface 105 has no altsetting 0 [ 257.532115][ T5895] usb 4-1: New USB device found, idVendor=2fb9, idProduct=97fd, bcdDevice=45.72 [ 257.557046][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.584415][ T5895] usb 4-1: Product: syz [ 257.604672][ T5895] usb 4-1: Manufacturer: syz [ 257.624993][ T5894] r8152-cfgselector 3-1: Unknown version 0x0000 [ 257.632092][ T5895] usb 4-1: SerialNumber: syz [ 257.641511][ T5894] r8152-cfgselector 3-1: bad CDC descriptors [ 257.652522][ T5895] usb 4-1: config 0 descriptor?? [ 257.675247][ T5894] r8152-cfgselector 3-1: USB disconnect, device number 32 [ 257.784864][ T8372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.739'. [ 257.890070][ T8369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.902691][ T8369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.914388][ T8369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.926518][ T8369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.939535][ T8369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.959957][ T8369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.973945][ T8369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.985543][ T8369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.998174][ T8369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.009034][ T8369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.188814][ T5894] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 258.362812][ T5894] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 258.374666][ T5894] usb 2-1: config 0 has no interfaces? [ 258.398785][ T5894] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 258.408264][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.416418][ T5894] usb 2-1: Product: syz [ 258.426152][ T5894] usb 2-1: Manufacturer: syz [ 258.431008][ T5894] usb 2-1: SerialNumber: syz [ 258.439044][ T5894] usb 2-1: config 0 descriptor?? [ 258.950117][ T8368] ip6gre0: mtu less than device minimum [ 258.965497][ T8368] ip6gre0: mtu less than device minimum [ 259.005800][ T8368] ip6gre0: mtu less than device minimum [ 259.051957][ T8368] ip6gre0: mtu less than device minimum [ 259.074590][ T8368] ip6gre0: mtu less than device minimum [ 259.082168][ T8368] ip6gre0: mtu less than device minimum [ 259.090242][ T8368] ip6gre0: mtu less than device minimum [ 259.096478][ T8368] ip6gre0: mtu less than device minimum [ 259.103858][ T8368] ip6gre0: mtu less than device minimum [ 259.112268][ T8368] ip6gre0: mtu less than device minimum [ 259.135007][ T8382] sit0: entered promiscuous mode [ 259.143053][ T5895] usb 4-1: bad CDC descriptors [ 259.161575][ T8382] netlink: 'syz.2.742': attribute type 1 has an invalid length. [ 259.187963][ T8382] netlink: 1 bytes leftover after parsing attributes in process `syz.2.742'. [ 259.203884][ T5895] usb 4-1: USB disconnect, device number 30 [ 259.536818][ T5896] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 259.628384][ T8406] input: syz1 as /devices/virtual/input/input41 [ 259.710922][ T5896] usb 1-1: config 0 has no interfaces? [ 259.732644][ T5896] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 259.759092][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.772321][ T5896] usb 1-1: Product: syz [ 259.780258][ T5896] usb 1-1: Manufacturer: syz [ 259.785087][ T5896] usb 1-1: SerialNumber: syz [ 259.795607][ T5896] usb 1-1: config 0 descriptor?? [ 260.452891][ T8419] netlink: 20 bytes leftover after parsing attributes in process `syz.3.753'. [ 260.936110][ T5894] usb 2-1: USB disconnect, device number 30 [ 261.041483][ T8426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.050644][ T8426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.172683][ T8431] netlink: 'syz.4.757': attribute type 10 has an invalid length. [ 261.212470][ T8431] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.221017][ T8431] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.246352][ T8431] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.253568][ T8431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.261893][ T8431] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.269044][ T8431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.384178][ T8431] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 261.406983][ T5894] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 261.566823][ T5894] usb 2-1: device descriptor read/64, error -71 [ 261.765006][ T8447] input: syz1 as /devices/virtual/input/input42 [ 261.814569][ T5894] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 261.897625][ T5895] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 261.967343][ T5894] usb 2-1: device descriptor read/64, error -71 [ 262.046815][ T5895] usb 4-1: Using ep0 maxpacket: 16 [ 262.054912][ T5895] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.066141][ T5895] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.079072][ T5894] usb usb2-port1: attempt power cycle [ 262.194917][ T5896] usb 1-1: USB disconnect, device number 37 [ 262.202104][ T5895] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.273023][ T5895] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 262.296085][ T5895] usb 4-1: config 0 interface 0 has no altsetting 0 [ 262.346169][ T5895] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 262.355931][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.375500][ T5895] usb 4-1: config 0 descriptor?? [ 262.589693][ T8441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.608201][ T5894] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 262.619835][ T8453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.642599][ T8441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.662434][ T8453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.672430][ T5894] usb 2-1: device descriptor read/8, error -71 [ 262.867812][ T8459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.767'. [ 262.916872][ T5894] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 262.972264][ T5894] usb 2-1: device descriptor read/8, error -71 [ 263.097482][ T5894] usb usb2-port1: unable to enumerate USB device [ 263.360073][ T5894] usb 5-1: new low-speed USB device number 29 using dummy_hcd [ 263.550735][ T5894] usb 5-1: unable to get BOS descriptor or descriptor too short [ 263.572857][ T5894] usb 5-1: config 8 has an invalid interface number: 32 but max is 0 [ 263.599395][ T5894] usb 5-1: config 8 has no interface number 0 [ 263.606052][ T5894] usb 5-1: config 8 interface 32 altsetting 7 endpoint 0x8 has invalid maxpacket 32, setting to 8 [ 263.617292][ T5896] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 263.618220][ T5894] usb 5-1: config 8 interface 32 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 263.639239][ T5894] usb 5-1: config 8 interface 32 has no altsetting 0 [ 263.749418][ T8477] netlink: 20 bytes leftover after parsing attributes in process `syz.0.772'. [ 263.796823][ T5896] usb 3-1: Using ep0 maxpacket: 32 [ 263.807662][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.822348][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.870369][ T5896] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 263.899985][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.922158][ T5896] usb 3-1: config 0 descriptor?? [ 263.930856][ T5896] hub 3-1:0.0: USB hub found [ 264.134484][ T5896] hub 3-1:0.0: 1 port detected [ 264.763472][ T5896] hub 3-1:0.0: activate --> -90 [ 264.897744][ T5895] usbhid 4-1:0.0: can't add hid device: -71 [ 264.924494][ T5895] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 264.979850][ T5895] usb 4-1: USB disconnect, device number 31 [ 265.167131][ T5893] usb 3-1-port1: cannot reset (err = -71) [ 265.167625][ T9] usb 3-1: USB disconnect, device number 33 [ 265.174442][ T5893] usb 3-1-port1: attempt power cycle [ 265.408297][ T980] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 265.487066][ T5896] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 265.506778][ T5909] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 265.586975][ T980] usb 1-1: Using ep0 maxpacket: 32 [ 265.597667][ T980] usb 1-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 265.607807][ T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.615873][ T980] usb 1-1: Product: syz [ 265.620297][ T980] usb 1-1: Manufacturer: syz [ 265.624931][ T980] usb 1-1: SerialNumber: syz [ 265.632066][ T980] usb 1-1: config 0 descriptor?? [ 265.640667][ T980] radioshark 1-1:0.0: Invalid radioSHARK device [ 265.644671][ T5896] usb 2-1: config 0 has no interfaces? [ 265.647133][ T980] radioshark 1-1:0.0: probe with driver radioshark failed with error -22 [ 265.647460][ T980] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 265.672312][ T5909] usb 4-1: config 0 has an invalid interface number: 94 but max is 0 [ 265.684375][ T5909] usb 4-1: config 0 has no interface number 0 [ 265.692895][ T5909] usb 4-1: config 0 interface 94 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 265.705279][ T5896] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 265.720521][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.729787][ T5909] usb 4-1: config 0 interface 94 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 265.746489][ T5896] usb 2-1: Product: syz [ 265.750994][ T5896] usb 2-1: Manufacturer: syz [ 265.755615][ T5896] usb 2-1: SerialNumber: syz [ 265.760791][ T5909] usb 4-1: config 0 interface 94 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 4 [ 265.774890][ T5896] usb 2-1: config 0 descriptor?? [ 265.785898][ T5909] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=d3.37 [ 265.802825][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.813773][ T5909] usb 4-1: Product: syz [ 265.819124][ T5909] usb 4-1: Manufacturer: syz [ 265.823898][ T5909] usb 4-1: SerialNumber: syz [ 265.831748][ T5909] usb 4-1: config 0 descriptor?? [ 265.845442][ T8493] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 265.860136][ T5909] imon_raw 4-1:0.94: IR endpoint missing [ 265.868666][ T9] usb 1-1: USB disconnect, device number 38 [ 266.063979][ T5909] usb 4-1: USB disconnect, device number 32 [ 266.098828][ T5894] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.00 [ 266.115741][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 266.129752][ T5894] usb 5-1: can't set config #8, error -71 [ 266.141856][ T5894] usb 5-1: USB disconnect, device number 29 [ 266.206925][ T980] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 266.377074][ T980] usb 3-1: Using ep0 maxpacket: 16 [ 266.392952][ T980] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 266.409573][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.424400][ T980] usb 3-1: Product: syz [ 266.429767][ T980] usb 3-1: Manufacturer: syz [ 266.434617][ T980] usb 3-1: SerialNumber: syz [ 266.455377][ T980] r8152-cfgselector 3-1: Unknown version 0x0000 [ 266.464226][ T980] r8152-cfgselector 3-1: config 0 descriptor?? [ 266.704279][ T8503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.737065][ T8503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.017345][ T5909] r8152-cfgselector 3-1: USB disconnect, device number 38 [ 267.353723][ T8529] netlink: 20 bytes leftover after parsing attributes in process `syz.0.787'. [ 267.401392][ T5896] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 267.579754][ T5896] usb 4-1: not running at top speed; connect to a high speed hub [ 267.590640][ T5896] usb 4-1: config 1 interface 0 has no altsetting 0 [ 267.599703][ T5896] usb 4-1: New USB device found, idVendor=044f, idProduct=b605, bcdDevice= 0.40 [ 267.611541][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.623053][ T5896] usb 4-1: Product: ࠊ [ 267.629962][ T5896] usb 4-1: Manufacturer: 儲ꭎ謏騔밠ᡤꮅ㭁볒⤑兇㟁꓂쏀佸枈ꅧ꜒縜뻡싥浊盓ꗿ蒺祦ῡṉল䁮壪蘢葜膍즧㺔ⰹ圃齲臒哳텆焫秆ࣖᩁ、팑᜼浈퉉ￂ캺櫡㎩龕似㦋짙喚헵샙挓潂ȁ涅騯ᓠ牶呣驢汵ốᄮ湛ต᭙⋳㽨 [ 267.689922][ T5896] usb 4-1: SerialNumber: ⤦࢙厊앩ㄟ凇ḃ앴仝摓教㹭潲廘칁ᑅ鈹盍臸썘岝䏌쇮Ꞌ⟺뢝㖛❵蜻Ὀ⛉헢橑秷Ꙟ౉ࡿ୷礵郜皝ﾒʰ䣹唢ሺ판⌓Ⳉ㲫⯑膂씩隹◟틂澘芌쥱฼⸼槰䫡ᳳ⤫∔䛮틡㊐凛䠱氢㪾㠼榶蚃嶺沎吜䐉㮥ꕮ﯀氶粈ᒔ߽䓩ꥁ魾뮳赛翜䩡⑿挰媶贇 [ 267.948544][ T5909] usb 2-1: USB disconnect, device number 35 [ 268.071889][ T5896] usbhid 4-1:1.0: can't add hid device: -71 [ 268.108822][ T5896] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 268.174756][ T5896] usb 4-1: USB disconnect, device number 33 [ 269.048416][ T8565] input: syz0 as /devices/virtual/input/input43 [ 269.335590][ T8569] netlink: 20 bytes leftover after parsing attributes in process `syz.0.798'. [ 269.369333][ T980] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 269.536748][ T980] usb 5-1: Using ep0 maxpacket: 16 [ 269.543804][ T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.579143][ T980] usb 5-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.00 [ 269.604183][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.634803][ T980] usb 5-1: config 0 descriptor?? [ 269.662825][ T980] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input44 [ 269.826989][ T9] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 270.026380][ T8582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.038651][ T9] usb 2-1: config 0 has no interfaces? [ 270.047584][ T9] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 270.116874][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.124892][ T8582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.170726][ T9] usb 2-1: Product: syz [ 270.182374][ T9] usb 2-1: Manufacturer: syz [ 270.196865][ T9] usb 2-1: SerialNumber: syz [ 270.219922][ T9] usb 2-1: config 0 descriptor?? [ 270.226738][ T5909] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 270.378787][ T5909] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.537104][ T5896] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 270.632467][ T5909] usb 3-1: config 0 has no interfaces? [ 270.663697][ T5909] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 270.700249][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.749329][ T5909] usb 3-1: Product: syz [ 270.765517][ T5909] usb 3-1: Manufacturer: syz [ 270.774732][ T5896] usb 1-1: config 0 has no interfaces? [ 270.789428][ T5909] usb 3-1: SerialNumber: syz [ 270.799346][ T5896] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 270.808889][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.830059][ T5896] usb 1-1: Product: syz [ 270.842100][ T5909] usb 3-1: config 0 descriptor?? [ 270.874430][ T5896] usb 1-1: Manufacturer: syz [ 270.889891][ T5896] usb 1-1: SerialNumber: syz [ 270.908889][ T5896] usb 1-1: config 0 descriptor?? [ 271.292598][ T8605] ptm ptm4: ldisc open failed (-12), clearing slot 4 [ 271.390683][ T5197] bcm5974 5-1:0.0: could not read from device [ 271.419981][ T5197] bcm5974 5-1:0.0: could not read from device [ 271.516904][ T5197] bcm5974 5-1:0.0: could not read from device [ 271.529592][ T980] usb 5-1: USB disconnect, device number 30 [ 272.030421][ T5909] usb 2-1: USB disconnect, device number 36 [ 272.918080][ T8628] netlink: 20 bytes leftover after parsing attributes in process `syz.3.814'. [ 273.001609][ T5909] usb 3-1: USB disconnect, device number 39 [ 273.625608][ T8643] netlink: 68 bytes leftover after parsing attributes in process `syz.4.817'. [ 274.154352][ T5909] usb 1-1: USB disconnect, device number 39 [ 275.347330][ T8656] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 275.389369][ T8656] macsec1: entered allmulticast mode [ 275.436160][ T8656] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 275.517784][ T8656] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 275.525072][ T8656] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 275.596875][ T47] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 275.748966][ T47] usb 2-1: config 0 has no interfaces? [ 275.761674][ T47] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 275.777866][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.786044][ T47] usb 2-1: Product: syz [ 275.790865][ T47] usb 2-1: Manufacturer: syz [ 275.795495][ T47] usb 2-1: SerialNumber: syz [ 275.810967][ T47] usb 2-1: config 0 descriptor?? [ 275.877285][ T5909] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 275.975989][ T8671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.985576][ T8671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.026719][ T5909] usb 5-1: Using ep0 maxpacket: 32 [ 276.033568][ T5909] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 276.042226][ T5909] usb 5-1: config 0 has no interface number 0 [ 276.049585][ T5909] usb 5-1: config 0 interface 184 has no altsetting 0 [ 276.059503][ T5909] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 276.069041][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.078079][ T5909] usb 5-1: Product: syz [ 276.096417][ T5909] usb 5-1: Manufacturer: syz [ 276.103031][ T5909] usb 5-1: SerialNumber: syz [ 276.112555][ T5909] usb 5-1: config 0 descriptor?? [ 276.123585][ T5909] smsc75xx v1.0.0 [ 276.206766][ T47] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 276.346571][ T47] usb 3-1: device descriptor read/64, error -71 [ 276.354891][ T5896] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 276.517592][ T5896] usb 1-1: too many configurations: 227, using maximum allowed: 8 [ 276.537183][ T5909] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 276.567070][ T5896] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 276.584755][ T5896] usb 1-1: can't read configurations, error -61 [ 276.591134][ T5909] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 276.616886][ T47] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 276.625338][ T5909] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 276.650465][ T5909] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 276.736950][ T5896] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 276.776739][ T47] usb 3-1: device descriptor read/64, error -71 [ 276.817676][ T980] usb 5-1: USB disconnect, device number 31 [ 276.888365][ T5896] usb 1-1: too many configurations: 227, using maximum allowed: 8 [ 276.898868][ T47] usb usb3-port1: attempt power cycle [ 276.919540][ T5896] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 276.928024][ T5896] usb 1-1: can't read configurations, error -61 [ 276.935062][ T5896] usb usb1-port1: attempt power cycle [ 276.966951][ T5909] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 277.154212][ T5909] usb 4-1: Using ep0 maxpacket: 8 [ 277.189843][ T8690] netlink: 20 bytes leftover after parsing attributes in process `syz.4.832'. [ 277.221096][ T5909] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 277.239511][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.252095][ T5909] usb 4-1: config 0 descriptor?? [ 277.273365][ T47] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 277.285165][ T5896] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 277.308764][ T47] usb 3-1: device descriptor read/8, error -71 [ 277.319395][ T5896] usb 1-1: too many configurations: 227, using maximum allowed: 8 [ 277.329865][ T5896] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 277.337806][ T5896] usb 1-1: can't read configurations, error -61 [ 277.466785][ T5896] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 277.490619][ T5896] usb 1-1: too many configurations: 227, using maximum allowed: 8 [ 277.525962][ T5896] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 277.541939][ T5909] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 277.551667][ T47] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 277.566786][ T5896] usb 1-1: can't read configurations, error -61 [ 277.579921][ T5896] usb usb1-port1: unable to enumerate USB device [ 277.591407][ T47] usb 3-1: device descriptor read/8, error -71 [ 277.707082][ T47] usb usb3-port1: unable to enumerate USB device [ 278.190267][ T9] usb 2-1: USB disconnect, device number 37 [ 278.377435][ T980] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 278.546819][ T980] usb 5-1: Using ep0 maxpacket: 32 [ 278.569186][ T980] usb 5-1: config 0 has an invalid interface number: 124 but max is 0 [ 278.582290][ T980] usb 5-1: config 0 has no interface number 0 [ 278.588750][ T980] usb 5-1: config 0 interface 124 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 278.603429][ T980] usb 5-1: config 0 interface 124 altsetting 0 bulk endpoint 0xB has invalid maxpacket 64 [ 278.629455][ T980] usb 5-1: New USB device found, idVendor=187f, idProduct=0201, bcdDevice=4f.c3 [ 278.638611][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.646830][ T980] usb 5-1: Product: syz [ 278.651017][ T980] usb 5-1: Manufacturer: syz [ 278.655650][ T980] usb 5-1: SerialNumber: syz [ 278.668615][ T980] usb 5-1: config 0 descriptor?? [ 278.674437][ T8696] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 278.891196][ T8696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.899972][ T8696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.910905][ T8696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.924096][ T8696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.935871][ T980] smsusb:smsusb_probe: board id=3, interface number 124 [ 278.949343][ T980] usb 5-1: USB disconnect, device number 32 [ 279.405052][ T8724] netlink: 20 bytes leftover after parsing attributes in process `syz.2.843'. [ 279.676382][ T5909] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 279.703139][ T5909] asix 4-1:0.0: probe with driver asix failed with error -71 [ 279.757334][ T5909] usb 4-1: USB disconnect, device number 34 [ 279.825617][ T8729] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 279.833134][ T8729] IPv6: NLM_F_CREATE should be set when creating new route [ 279.840414][ T8729] IPv6: NLM_F_CREATE should be set when creating new route [ 279.847648][ T8729] IPv6: NLM_F_CREATE should be set when creating new route [ 280.296716][ T5909] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 280.347497][ T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 280.530709][ T5909] usb 2-1: config 0 has no interfaces? [ 280.535488][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 280.550257][ T5909] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 280.563698][ T9] usb 5-1: config 135 has an invalid interface number: 230 but max is 0 [ 280.579913][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.591795][ T9] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 280.596257][ T5909] usb 2-1: Product: syz [ 280.610679][ T5909] usb 2-1: Manufacturer: syz [ 280.628511][ T9] usb 5-1: config 135 has no interface number 0 [ 280.635734][ T5909] usb 2-1: SerialNumber: syz [ 280.657012][ T5909] usb 2-1: config 0 descriptor?? [ 280.687018][ T9] usb 5-1: config 135 interface 230 has no altsetting 0 [ 280.718912][ T9] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 281.045089][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.122524][ T9] usb 5-1: Product: syz [ 281.140344][ T9] usb 5-1: Manufacturer: syz [ 281.157655][ T9] usb 5-1: SerialNumber: syz [ 281.414078][ T9] usb 5-1: USB disconnect, device number 33 [ 281.596438][ T8759] netlink: 'syz.0.854': attribute type 11 has an invalid length. [ 281.827717][ T8767] pim6reg: entered allmulticast mode [ 281.837799][ T8767] pim6reg: left allmulticast mode [ 282.327476][ T5896] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 282.348547][ T8781] netlink: 20 bytes leftover after parsing attributes in process `syz.0.860'. [ 282.475220][ T5909] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 282.510746][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.543387][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.555604][ T5896] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 282.686720][ T5909] usb 5-1: Using ep0 maxpacket: 16 [ 282.695420][ T5909] usb 5-1: config 0 has too many interfaces: 245, using maximum allowed: 32 [ 282.714176][ T5909] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 245 [ 282.786520][ T5895] usb 2-1: USB disconnect, device number 38 [ 282.799106][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.956912][ T5909] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0102, bcdDevice=9a.fd [ 282.978437][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.986751][ T5909] usb 5-1: Product: syz [ 282.991011][ T5909] usb 5-1: Manufacturer: syz [ 282.996229][ T5896] usb 3-1: config 0 descriptor?? [ 283.023512][ T5909] usb 5-1: SerialNumber: syz [ 283.073601][ T5909] usb 5-1: config 0 descriptor?? [ 283.245479][ T8769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.265384][ T8769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.348529][ T8786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.387142][ T8786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.424998][ T9] usb 5-1: USB disconnect, device number 34 [ 283.492062][ T5896] usbhid 3-1:0.0: can't add hid device: -71 [ 283.516769][ T5896] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 283.558281][ T5896] usb 3-1: USB disconnect, device number 44 [ 283.956728][ T5909] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 284.225101][ T5909] usb 1-1: config 0 has too many interfaces: 33, using maximum allowed: 32 [ 284.235725][ T8811] FAULT_INJECTION: forcing a failure. [ 284.235725][ T8811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.358411][ T8811] CPU: 1 UID: 0 PID: 8811 Comm: syz.2.869 Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 284.358437][ T8811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 284.358460][ T8811] Call Trace: [ 284.358467][ T8811] [ 284.358473][ T8811] dump_stack_lvl+0x241/0x360 [ 284.358505][ T8811] ? __pfx_dump_stack_lvl+0x10/0x10 [ 284.358528][ T8811] ? __pfx__printk+0x10/0x10 [ 284.358562][ T8811] should_fail_ex+0x424/0x570 [ 284.358591][ T8811] copy_fpstate_to_sigframe+0xae4/0xdc0 [ 284.358620][ T8811] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 284.358644][ T8811] ? do_raw_spin_lock+0x151/0x370 [ 284.358672][ T8811] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 284.358693][ T8811] ? do_raw_spin_unlock+0x13c/0x8b0 [ 284.358716][ T8811] ? fpu__alloc_mathframe+0xab/0x130 [ 284.358735][ T8811] get_sigframe+0x5de/0x810 [ 284.358766][ T8811] ? __pfx_get_sigframe+0x10/0x10 [ 284.358801][ T8811] x64_setup_rt_frame+0x17d/0xda0 [ 284.358828][ T8811] ? get_signal+0x1442/0x1730 [ 284.358856][ T8811] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 284.358884][ T8811] arch_do_signal_or_restart+0x428/0x840 [ 284.358908][ T8811] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 284.358931][ T8811] ? restore_signal_shadow_stack+0x392/0x450 [ 284.358965][ T8811] ? syscall_exit_to_user_mode+0xa3/0x340 [ 284.358993][ T8811] syscall_exit_to_user_mode+0xce/0x340 [ 284.359021][ T8811] do_syscall_64+0x100/0x230 [ 284.359037][ T8811] ? clear_bhb_loop+0x45/0xa0 [ 284.359056][ T8811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.359077][ T8811] RIP: 0033:0x7f700358d167 [ 284.359092][ T8811] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 284.359131][ T8811] RSP: 002b:00007f700442e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 284.359150][ T8811] RAX: 000000000000002f RBX: 00007f70037a5fa0 RCX: 00007f700358d169 [ 284.359161][ T8811] RDX: 0000000000000002 RSI: 0000200000000280 RDI: 0000000000000003 [ 284.359171][ T8811] RBP: 00007f700442e090 R08: 0000000000000000 R09: 0000000000000000 [ 284.359181][ T8811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.359190][ T8811] R13: 0000000000000000 R14: 00007f70037a5fa0 R15: 00007f70038cfa28 [ 284.359216][ T8811] [ 284.589557][ C1] vkms_vblank_simulate: vblank timer overrun [ 284.620524][ T5909] usb 1-1: config 0 has an invalid descriptor of length 151, skipping remainder of the config [ 284.630907][ T5909] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 33 [ 284.642062][ T5909] usb 1-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 284.652266][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.857218][ T8820] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 285.066567][ T5909] usb 1-1: config 0 descriptor?? [ 285.256851][ T47] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 285.416876][ T47] usb 2-1: Using ep0 maxpacket: 16 [ 285.439996][ T47] usb 2-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 285.459495][ T47] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 285.785681][ T47] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 285.809059][ T8847] netlink: 20 bytes leftover after parsing attributes in process `syz.4.874'. [ 285.849044][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.885445][ T47] usb 2-1: config 0 descriptor?? [ 286.056872][ T5895] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 286.117413][ T8821] input: syz0 as /devices/virtual/input/input46 [ 286.133051][ T8821] input: failed to attach handler leds to device input46, error: -6 [ 286.220839][ T5895] usb 3-1: config 0 has no interfaces? [ 286.240308][ T5895] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 286.308218][ T47] usb 2-1: string descriptor 0 read error: -71 [ 286.350217][ T47] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 286.376893][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.394406][ T47] usb 2-1: USB disconnect, device number 39 [ 286.418440][ T5895] usb 3-1: Product: syz [ 286.436686][ T5895] usb 3-1: Manufacturer: syz [ 286.441341][ T5895] usb 3-1: SerialNumber: syz [ 286.476200][ T5895] usb 3-1: config 0 descriptor?? [ 286.788581][ T47] usb 1-1: USB disconnect, device number 44 [ 286.949144][ T8860] netlink: 'syz.0.878': attribute type 21 has an invalid length. [ 286.974655][ T8860] netlink: 128 bytes leftover after parsing attributes in process `syz.0.878'. [ 287.026514][ T8860] netlink: 'syz.0.878': attribute type 4 has an invalid length. [ 287.067952][ T8860] netlink: 3 bytes leftover after parsing attributes in process `syz.0.878'. [ 287.396957][ T5895] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 287.566896][ T47] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 287.576960][ T5895] usb 2-1: device descriptor read/64, error -71 [ 287.764087][ T30] kauditd_printk_skb: 96 callbacks suppressed [ 287.764101][ T30] audit: type=1326 audit(1743494864.521:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8878 comm="syz.3.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8ec98d169 code=0x7ffc0000 [ 287.831194][ T47] usb 1-1: config 0 has no interfaces? [ 287.859297][ T47] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 287.873027][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.888747][ T47] usb 1-1: Product: syz [ 287.901034][ T47] usb 1-1: Manufacturer: syz [ 287.921434][ T47] usb 1-1: SerialNumber: syz [ 287.946734][ T5895] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 287.972569][ T30] audit: type=1326 audit(1743494864.551:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8878 comm="syz.3.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8ec98d169 code=0x7ffc0000 [ 288.024620][ T47] usb 1-1: config 0 descriptor?? [ 288.196708][ T5895] usb 2-1: device descriptor read/64, error -71 [ 288.290247][ T8873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.299818][ T8873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.311402][ T8873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.882'. [ 288.356283][ T30] audit: type=1326 audit(1743494864.551:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8878 comm="syz.3.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fa8ec98d169 code=0x7ffc0000 [ 288.418922][ T5895] usb usb2-port1: attempt power cycle [ 288.466348][ T30] audit: type=1326 audit(1743494864.551:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8878 comm="syz.3.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8ec98d169 code=0x7ffc0000 [ 288.488564][ C1] vkms_vblank_simulate: vblank timer overrun [ 288.602895][ T30] audit: type=1326 audit(1743494864.551:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8878 comm="syz.3.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8ec98d169 code=0x7ffc0000 [ 288.806734][ T5895] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 288.852531][ T5895] usb 2-1: device descriptor read/8, error -71 [ 288.883100][ T980] usb 3-1: USB disconnect, device number 45 [ 288.911864][ T30] audit: type=1326 audit(1743494864.551:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8878 comm="syz.3.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fa8ec98d169 code=0x7ffc0000 [ 288.976421][ T30] audit: type=1326 audit(1743494864.551:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8878 comm="syz.3.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8ec98d169 code=0x7ffc0000 [ 289.035720][ T30] audit: type=1326 audit(1743494864.551:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8878 comm="syz.3.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa8ec98d169 code=0x7ffc0000 [ 289.111279][ T30] audit: type=1326 audit(1743494864.551:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8878 comm="syz.3.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8ec98d169 code=0x7ffc0000 [ 289.140517][ T5895] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 289.177660][ T5895] usb 2-1: device descriptor read/8, error -71 [ 289.194120][ T30] audit: type=1326 audit(1743494864.551:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8878 comm="syz.3.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7fa8ec98d169 code=0x7ffc0000 [ 289.287442][ T5895] usb usb2-port1: unable to enumerate USB device [ 289.495683][ T5895] hid-generic 0000:0003:0000.000A: unknown main item tag 0x0 [ 289.515810][ T5895] hid-generic 0000:0003:0000.000A: unknown main item tag 0x0 [ 289.550619][ T5895] hid-generic 0000:0003:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 289.654898][ T8896] FAULT_INJECTION: forcing a failure. [ 289.654898][ T8896] name failslab, interval 1, probability 0, space 0, times 0 [ 289.675298][ T8896] CPU: 1 UID: 0 PID: 8896 Comm: syz.2.889 Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 289.675325][ T8896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 289.675334][ T8896] Call Trace: [ 289.675342][ T8896] [ 289.675349][ T8896] dump_stack_lvl+0x241/0x360 [ 289.675380][ T8896] ? __pfx_dump_stack_lvl+0x10/0x10 [ 289.675411][ T8896] ? __pfx__printk+0x10/0x10 [ 289.675439][ T8896] ? __pfx___might_resched+0x10/0x10 [ 289.675464][ T8896] should_fail_ex+0x424/0x570 [ 289.675495][ T8896] should_failslab+0xac/0x100 [ 289.675516][ T8896] __kmalloc_noprof+0xdf/0x4d0 [ 289.675534][ T8896] ? tomoyo_realpath_from_path+0xc2/0x5e0 [ 289.675557][ T8896] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 289.675586][ T8896] tomoyo_realpath_from_path+0xcf/0x5e0 [ 289.675622][ T8896] tomoyo_path_number_perm+0x245/0x790 [ 289.675646][ T8896] ? tomoyo_path_number_perm+0x215/0x790 [ 289.675667][ T8896] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 289.675694][ T8896] ? ksys_write+0x24e/0x2d0 [ 289.675725][ T8896] ? __lock_acquire+0xad5/0xd80 [ 289.675760][ T8896] ? __fget_files+0x2a/0x420 [ 289.675779][ T8896] ? __fget_files+0x2a/0x420 [ 289.675801][ T8896] ? __fget_files+0x2a/0x420 [ 289.675825][ T8896] security_file_ioctl+0xc6/0x2a0 [ 289.675846][ T8896] __se_sys_ioctl+0x46/0x160 [ 289.675872][ T8896] do_syscall_64+0xf3/0x230 [ 289.675890][ T8896] ? clear_bhb_loop+0x45/0xa0 [ 289.675910][ T8896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.675926][ T8896] RIP: 0033:0x7f700358d169 [ 289.675942][ T8896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.675955][ T8896] RSP: 002b:00007f700442e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 289.675975][ T8896] RAX: ffffffffffffffda RBX: 00007f70037a5fa0 RCX: 00007f700358d169 [ 289.675987][ T8896] RDX: 0000200000000000 RSI: 00000000c0585609 RDI: 0000000000000003 [ 289.675998][ T8896] RBP: 00007f700442e090 R08: 0000000000000000 R09: 0000000000000000 [ 289.676008][ T8896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.676018][ T8896] R13: 0000000000000000 R14: 00007f70037a5fa0 R15: 00007f70038cfa28 [ 289.676046][ T8896] [ 289.676053][ T8896] ERROR: Out of memory at tomoyo_realpath_from_path. [ 290.043782][ T8906] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 290.050577][ T8906] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 290.123966][ T8904] netlink: 4 bytes leftover after parsing attributes in process `syz.4.894'. [ 290.130264][ T8906] vhci_hcd vhci_hcd.0: Device attached [ 290.153609][ T8904] bridge_slave_1: left allmulticast mode [ 290.174452][ T8904] bridge_slave_1: left promiscuous mode [ 290.213701][ T8904] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.246196][ T5896] usb 1-1: USB disconnect, device number 45 [ 290.327036][ T8904] bridge_slave_0: left allmulticast mode [ 290.333812][ T8904] bridge_slave_0: left promiscuous mode [ 290.346747][ T5895] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 290.361327][ T8904] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.366853][ T5909] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 290.380676][ T36] [ 290.385730][ T36] ============================= [ 290.390726][ T36] WARNING: suspicious RCU usage [ 290.395584][ T36] 6.14.0-syzkaller-11125-g609706855d90 #0 Not tainted [ 290.403027][ T36] ----------------------------- [ 290.407963][ T36] net/sched/sch_generic.c:1285 suspicious rcu_dereference_protected() usage! [ 290.416813][ T36] [ 290.416813][ T36] other info that might help us debug this: [ 290.416813][ T36] [ 290.427136][ T36] [ 290.427136][ T36] rcu_scheduler_active = 2, debug_locks = 1 [ 290.435478][ T36] 3 locks held by kworker/u8:2/36: [ 290.440724][ T36] #0: ffff88806350a148 ((wq_completion)bond0#5){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 290.451899][ T36] #1: ffffc90000ad7c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 290.464909][ T36] #2: ffffffff8ed3b560 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x17f/0x3170 [ 290.474693][ T36] [ 290.474693][ T36] stack backtrace: [ 290.480859][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 290.480881][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 290.480892][ T36] Workqueue: bond0 bond_mii_monitor [ 290.480919][ T36] Call Trace: [ 290.480926][ T36] [ 290.480933][ T36] dump_stack_lvl+0x241/0x360 [ 290.480961][ T36] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.480985][ T36] ? __pfx__printk+0x10/0x10 [ 290.481011][ T36] ? print_lock+0x171/0x1a0 [ 290.481037][ T36] lockdep_rcu_suspicious+0x175/0x200 [ 290.481060][ T36] dev_deactivate_queue+0x8f/0x1b0 [ 290.481085][ T36] dev_deactivate_many+0x14c/0xca0 [ 290.481111][ T36] ? __pfx_dev_deactivate_many+0x10/0x10 [ 290.481137][ T36] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 290.481164][ T36] dev_deactivate+0x186/0x280 [ 290.481187][ T36] ? __pfx_dev_deactivate+0x10/0x10 [ 290.481205][ T36] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 290.481227][ T36] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 290.481248][ T36] ? do_raw_spin_unlock+0x13c/0x8b0 [ 290.481273][ T36] ? rfc2863_policy+0x1ce/0x3f0 [ 290.481300][ T36] linkwatch_do_dev+0x10a/0x170 [ 290.481334][ T36] ethtool_op_get_link+0x15/0x60 [ 290.481354][ T36] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 290.481373][ T36] bond_check_dev_link+0x1fb/0x4b0 [ 290.481397][ T36] ? __pfx_bond_check_dev_link+0x10/0x10 [ 290.481435][ T36] bond_mii_monitor+0x49d/0x3170 [ 290.481467][ T36] ? bond_mii_monitor+0x17f/0x3170 [ 290.481491][ T36] ? do_raw_spin_unlock+0x13c/0x8b0 [ 290.481520][ T36] ? __pfx_bond_mii_monitor+0x10/0x10 [ 290.481544][ T36] ? register_lock_class+0x54/0x330 [ 290.481565][ T36] ? __lock_acquire+0xad5/0xd80 [ 290.481606][ T36] ? process_scheduled_works+0x9cb/0x18e0 [ 290.481625][ T36] process_scheduled_works+0xac3/0x18e0 [ 290.481671][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 290.481700][ T36] ? assign_work+0x367/0x3d0 [ 290.481724][ T36] worker_thread+0x870/0xd50 [ 290.481758][ T36] ? __kthread_parkme+0x1a8/0x200 [ 290.481782][ T36] ? __pfx_worker_thread+0x10/0x10 [ 290.481802][ T36] kthread+0x7b7/0x940 [ 290.481826][ T36] ? __pfx_worker_thread+0x10/0x10 [ 290.481847][ T36] ? __pfx_kthread+0x10/0x10 [ 290.481866][ T36] ? __pfx_kthread+0x10/0x10 [ 290.481888][ T36] ? __pfx_kthread+0x10/0x10 [ 290.481909][ T36] ? __pfx_kthread+0x10/0x10 [ 290.481931][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 290.481950][ T36] ? lockdep_hardirqs_on+0x9d/0x150 [ 290.481974][ T36] ? __pfx_kthread+0x10/0x10 [ 290.481997][ T36] ret_from_fork+0x4b/0x80 [ 290.482014][ T36] ? __pfx_kthread+0x10/0x10 [ 290.482036][ T36] ret_from_fork_asm+0x1a/0x30 [ 290.482067][ T36] [ 290.769934][ T36] [ 290.772348][ T36] ============================= [ 290.777421][ T36] WARNING: suspicious RCU usage [ 290.782310][ T36] 6.14.0-syzkaller-11125-g609706855d90 #0 Not tainted [ 290.788302][ T5895] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.789110][ T36] ----------------------------- [ 290.805897][ T36] ./include/linux/rtnetlink.h:163 suspicious rcu_dereference_protected() usage! [ 290.806907][ T5895] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 290.815004][ T36] [ 290.815004][ T36] other info that might help us debug this: [ 290.815004][ T36] [ 290.836786][ T36] [ 290.836786][ T36] rcu_scheduler_active = 2, debug_locks = 1 [ 290.846005][ T36] 3 locks held by kworker/u8:2/36: [ 290.851225][ T36] #0: ffff88806350a148 ((wq_completion)bond0#5){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 290.862448][ T36] #1: ffffc90000ad7c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 290.875545][ T36] #2: ffffffff8ed3b560 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x17f/0x3170 [ 290.885424][ T36] [ 290.885424][ T36] stack backtrace: [ 290.891393][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 290.891415][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 290.891425][ T36] Workqueue: bond0 bond_mii_monitor [ 290.891450][ T36] Call Trace: [ 290.891458][ T36] [ 290.891464][ T36] dump_stack_lvl+0x241/0x360 [ 290.891493][ T36] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.891513][ T36] ? __pfx__printk+0x10/0x10 [ 290.891544][ T36] lockdep_rcu_suspicious+0x175/0x200 [ 290.891567][ T36] dev_deactivate_many+0x228/0xca0 [ 290.891594][ T36] ? __pfx_dev_deactivate_many+0x10/0x10 [ 290.891619][ T36] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 290.891643][ T36] dev_deactivate+0x186/0x280 [ 290.891664][ T36] ? __pfx_dev_deactivate+0x10/0x10 [ 290.891679][ T36] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 290.891698][ T36] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 290.891718][ T36] ? do_raw_spin_unlock+0x13c/0x8b0 [ 290.891744][ T36] ? rfc2863_policy+0x1ce/0x3f0 [ 290.891770][ T36] linkwatch_do_dev+0x10a/0x170 [ 290.891797][ T36] ethtool_op_get_link+0x15/0x60 [ 290.891818][ T36] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 290.891836][ T36] bond_check_dev_link+0x1fb/0x4b0 [ 290.891861][ T36] ? __pfx_bond_check_dev_link+0x10/0x10 [ 290.891899][ T36] bond_mii_monitor+0x49d/0x3170 [ 290.891932][ T36] ? bond_mii_monitor+0x17f/0x3170 [ 290.891956][ T36] ? do_raw_spin_unlock+0x13c/0x8b0 [ 290.891984][ T36] ? __pfx_bond_mii_monitor+0x10/0x10 [ 290.892008][ T36] ? register_lock_class+0x54/0x330 [ 290.892031][ T36] ? __lock_acquire+0xad5/0xd80 [ 290.892072][ T36] ? process_scheduled_works+0x9cb/0x18e0 [ 290.892090][ T36] process_scheduled_works+0xac3/0x18e0 [ 290.892130][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 290.892153][ T36] ? assign_work+0x367/0x3d0 [ 290.892175][ T36] worker_thread+0x870/0xd50 [ 290.892204][ T36] ? __kthread_parkme+0x1a8/0x200 [ 290.892226][ T36] ? __pfx_worker_thread+0x10/0x10 [ 290.892245][ T36] kthread+0x7b7/0x940 [ 290.892279][ T36] ? __pfx_worker_thread+0x10/0x10 [ 290.892299][ T36] ? __pfx_kthread+0x10/0x10 [ 290.892323][ T36] ? __pfx_kthread+0x10/0x10 [ 290.892342][ T36] ? __pfx_kthread+0x10/0x10 [ 290.892362][ T36] ? __pfx_kthread+0x10/0x10 [ 290.892381][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 290.892408][ T36] ? lockdep_hardirqs_on+0x9d/0x150 [ 290.892431][ T36] ? __pfx_kthread+0x10/0x10 [ 290.892452][ T36] ret_from_fork+0x4b/0x80 [ 290.892467][ T36] ? __pfx_kthread+0x10/0x10 [ 290.892488][ T36] ret_from_fork_asm+0x1a/0x30 [ 290.892517][ T36] [ 290.892642][ T36] [ 290.954803][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 290.959276][ T36] ============================= [ 290.959294][ T36] WARNING: suspicious RCU usage [ 290.959303][ T36] 6.14.0-syzkaller-11125-g609706855d90 #0 Not tainted [ 290.959312][ T36] ----------------------------- [ 290.959319][ T36] net/sched/sch_generic.c:1301 suspicious rcu_dereference_protected() usage! [ 290.959330][ T36] [ 290.959330][ T36] other info that might help us debug this: [ 290.959330][ T36] [ 290.959337][ T36] [ 290.959337][ T36] rcu_scheduler_active = 2, debug_locks = 1 [ 290.959348][ T36] 3 locks held by kworker/u8:2/36: [ 290.959359][ T36] #0: ffff88806350a148 ((wq_completion)bond0#5){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 290.959421][ T36] #1: ffffc90000ad7c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 290.959471][ T36] #2: ffffffff8ed3b560 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x17f/0x3170 [ 291.051293][ T5895] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 291.052803][ T36] [ 291.052803][ T36] stack backtrace: [ 291.052820][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 291.052840][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 291.052850][ T36] Workqueue: bond0 bond_mii_monitor [ 291.052876][ T36] Call Trace: [ 291.052883][ T36] [ 291.052889][ T36] dump_stack_lvl+0x241/0x360 [ 291.052917][ T36] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.052940][ T36] ? __pfx__printk+0x10/0x10 [ 291.052965][ T36] ? print_lock+0x171/0x1a0 [ 291.052989][ T36] lockdep_rcu_suspicious+0x175/0x200 [ 291.053011][ T36] dev_reset_queue+0x88/0x1b0 [ 291.053033][ T36] dev_deactivate_many+0x61d/0xca0 [ 291.053055][ T36] ? dev_deactivate_many+0x2e5/0xca0 [ 291.053076][ T36] ? __pfx_dev_deactivate_many+0x10/0x10 [ 291.053106][ T36] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 291.053132][ T36] dev_deactivate+0x186/0x280 [ 291.053154][ T36] ? __pfx_dev_deactivate+0x10/0x10 [ 291.053172][ T36] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 291.053193][ T36] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 291.053213][ T36] ? do_raw_spin_unlock+0x13c/0x8b0 [ 291.053237][ T36] ? rfc2863_policy+0x1ce/0x3f0 [ 291.053263][ T36] linkwatch_do_dev+0x10a/0x170 [ 291.053288][ T36] ethtool_op_get_link+0x15/0x60 [ 291.053308][ T36] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 291.053327][ T36] bond_check_dev_link+0x1fb/0x4b0 [ 291.053381][ T36] ? __pfx_bond_check_dev_link+0x10/0x10 [ 291.053417][ T36] bond_mii_monitor+0x49d/0x3170 [ 291.053449][ T36] ? bond_mii_monitor+0x17f/0x3170 [ 291.053472][ T36] ? do_raw_spin_unlock+0x13c/0x8b0 [ 291.053497][ T36] ? __pfx_bond_mii_monitor+0x10/0x10 [ 291.053519][ T36] ? register_lock_class+0x54/0x330 [ 291.053540][ T36] ? __lock_acquire+0xad5/0xd80 [ 291.053579][ T36] ? process_scheduled_works+0x9cb/0x18e0 [ 291.053596][ T36] process_scheduled_works+0xac3/0x18e0 [ 291.053642][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 291.053669][ T36] ? assign_work+0x367/0x3d0 [ 291.053692][ T36] worker_thread+0x870/0xd50 [ 291.053725][ T36] ? __kthread_parkme+0x1a8/0x200 [ 291.053748][ T36] ? __pfx_worker_thread+0x10/0x10 [ 291.053767][ T36] kthread+0x7b7/0x940 [ 291.053790][ T36] ? __pfx_worker_thread+0x10/0x10 [ 291.053810][ T36] ? __pfx_kthread+0x10/0x10 [ 291.053829][ T36] ? __pfx_kthread+0x10/0x10 [ 291.053850][ T36] ? __pfx_kthread+0x10/0x10 [ 291.053870][ T36] ? __pfx_kthread+0x10/0x10 [ 291.053890][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 291.053909][ T36] ? lockdep_hardirqs_on+0x9d/0x150 [ 291.053932][ T36] ? __pfx_kthread+0x10/0x10 [ 291.053954][ T36] ret_from_fork+0x4b/0x80 [ 291.053970][ T36] ? __pfx_kthread+0x10/0x10 [ 291.053992][ T36] ret_from_fork_asm+0x1a/0x30 [ 291.054021][ T36] [ 291.054059][ T36] [ 291.078559][ T5895] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 291.079732][ T36] ============================= [ 291.084379][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.089301][ T36] WARNING: suspicious RCU usage [ 291.089314][ T36] 6.14.0-syzkaller-11125-g609706855d90 #0 Not tainted [ 291.089324][ T36] ----------------------------- [ 291.089330][ T36] net/sched/sch_generic.c:1332 suspicious rcu_dereference_protected() usage! [ 291.089349][ T36] [ 291.089349][ T36] other info that might help us debug this: [ 291.089349][ T36] [ 291.089357][ T36] [ 291.089357][ T36] rcu_scheduler_active = 2, debug_locks = 1 [ 291.089368][ T36] 3 locks held by kworker/u8:2/36: [ 291.089380][ T36] #0: ffff88806350a148 ((wq_completion)bond0#5){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 291.089442][ T36] #1: ffffc90000ad7c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 291.089493][ T36] #2: ffffffff8ed3b560 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x17f/0x3170 [ 291.089545][ T36] [ 291.089545][ T36] stack backtrace: [ 291.089557][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 291.089576][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 291.089587][ T36] Workqueue: bond0 bond_mii_monitor [ 291.089605][ T36] Call Trace: [ 291.089612][ T36] [ 291.089619][ T36] dump_stack_lvl+0x241/0x360 [ 291.089644][ T36] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.089667][ T36] ? __pfx__printk+0x10/0x10 [ 291.089700][ T36] lockdep_rcu_suspicious+0x175/0x200 [ 291.089725][ T36] dev_deactivate_many+0x93b/0xca0 [ 291.089751][ T36] ? __pfx_dev_deactivate_many+0x10/0x10 [ 291.089775][ T36] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 291.089802][ T36] dev_deactivate+0x186/0x280 [ 291.089825][ T36] ? __pfx_dev_deactivate+0x10/0x10 [ 291.089842][ T36] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 291.089863][ T36] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 291.089884][ T36] ? do_raw_spin_unlock+0x13c/0x8b0 [ 291.089908][ T36] ? rfc2863_policy+0x1ce/0x3f0 [ 291.089934][ T36] linkwatch_do_dev+0x10a/0x170 [ 291.089958][ T36] ethtool_op_get_link+0x15/0x60 [ 291.089979][ T36] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 291.089997][ T36] bond_check_dev_link+0x1fb/0x4b0 [ 291.090021][ T36] ? __pfx_bond_check_dev_link+0x10/0x10 [ 291.090056][ T36] bond_mii_monitor+0x49d/0x3170 [ 291.090087][ T36] ? bond_mii_monitor+0x17f/0x3170 [ 291.090110][ T36] ? do_raw_spin_unlock+0x13c/0x8b0 [ 291.090137][ T36] ? __pfx_bond_mii_monitor+0x10/0x10 [ 291.090160][ T36] ? register_lock_class+0x54/0x330 [ 291.090181][ T36] ? __lock_acquire+0xad5/0xd80 [ 291.090221][ T36] ? process_scheduled_works+0x9cb/0x18e0 [ 291.090238][ T36] process_scheduled_works+0xac3/0x18e0 [ 291.090282][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 291.090309][ T36] ? assign_work+0x367/0x3d0 [ 291.090332][ T36] worker_thread+0x870/0xd50 [ 291.090372][ T36] ? __kthread_parkme+0x1a8/0x200 [ 291.090394][ T36] ? __pfx_worker_thread+0x10/0x10 [ 291.090413][ T36] kthread+0x7b7/0x940 [ 291.090437][ T36] ? __pfx_worker_thread+0x10/0x10 [ 291.090456][ T36] ? __pfx_kthread+0x10/0x10 [ 291.090476][ T36] ? __pfx_kthread+0x10/0x10 [ 291.090496][ T36] ? __pfx_kthread+0x10/0x10 [ 291.090516][ T36] ? __pfx_kthread+0x10/0x10 [ 291.090536][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 291.090556][ T36] ? lockdep_hardirqs_on+0x9d/0x150 [ 291.090579][ T36] ? __pfx_kthread+0x10/0x10 [ 291.090601][ T36] ret_from_fork+0x4b/0x80 [ 291.090617][ T36] ? __pfx_kthread+0x10/0x10 [ 291.090638][ T36] ret_from_fork_asm+0x1a/0x30 [ 291.090669][ T36] [ 291.091502][ T36] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1523 [ 291.100384][ T5895] usb 3-1: Product: syz [ 291.106240][ T36] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 36, name: kworker/u8:2 [ 291.110026][ T5895] usb 3-1: Manufacturer: syz [ 291.115056][ T36] preempt_count: 0, expected: 0 [ 291.119146][ T5895] usb 3-1: SerialNumber: syz [ 291.181529][ T36] RCU nest depth: 1, expected: 0 [ 291.983481][ T36] 3 locks held by kworker/u8:2/36: [ 291.990329][ T36] #0: ffff88806350a148 ((wq_completion)bond0#5){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 291.993550][ T5895] usb 3-1: config 0 descriptor?? [ 292.001719][ T36] #1: ffffc90000ad7c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 292.024983][ T36] #2: ffffffff8ed3b560 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x17f/0x3170 [ 292.032452][ T5895] xbox_remote_probe: Unexpected endpoint_in [ 292.034990][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 292.035013][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 292.035024][ T36] Workqueue: bond0 bond_mii_monitor [ 292.035050][ T36] Call Trace: [ 292.035058][ T36] [ 292.035065][ T36] dump_stack_lvl+0x241/0x360 [ 292.035093][ T36] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.035134][ T36] __might_resched+0x558/0x6c0 [ 292.035160][ T36] ? __pfx___might_resched+0x10/0x10 [ 292.035196][ T36] down_read+0x90/0xa50 [ 292.035215][ T36] ? __local_bh_enable_ip+0x168/0x200 [ 292.035231][ T36] ? lockdep_hardirqs_on+0x9d/0x150 [ 292.035255][ T36] ? __local_bh_enable_ip+0x168/0x200 [ 292.035278][ T36] ? __pfx_down_read+0x10/0x10 [ 292.035292][ T36] ? dev_deactivate_many+0xa9b/0xca0 [ 292.035313][ T36] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 292.035339][ T36] ? dev_get_flags+0x147/0x1d0 [ 292.035366][ T36] wext_netdev_notifier_call+0x1f/0x120 [ 292.035391][ T36] notifier_call_chain+0x1a5/0x3f0 [ 292.035419][ T36] netdev_state_change+0x123/0x1a0 [ 292.035439][ T36] ? __pfx_netdev_state_change+0x10/0x10 [ 292.035458][ T36] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 292.035481][ T36] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 292.035501][ T36] ? do_raw_spin_unlock+0x13c/0x8b0 [ 292.035526][ T36] ? rfc2863_policy+0x1ce/0x3f0 [ 292.035552][ T36] linkwatch_do_dev+0x112/0x170 [ 292.035576][ T36] ethtool_op_get_link+0x15/0x60 [ 292.035596][ T36] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 292.035615][ T36] bond_check_dev_link+0x1fb/0x4b0 [ 292.035638][ T36] ? __pfx_bond_check_dev_link+0x10/0x10 [ 292.035675][ T36] bond_mii_monitor+0x49d/0x3170 [ 292.035708][ T36] ? bond_mii_monitor+0x17f/0x3170 [ 292.035731][ T36] ? do_raw_spin_unlock+0x13c/0x8b0 [ 292.035759][ T36] ? __pfx_bond_mii_monitor+0x10/0x10 [ 292.035782][ T36] ? register_lock_class+0x54/0x330 [ 292.035804][ T36] ? __lock_acquire+0xad5/0xd80 [ 292.035844][ T36] ? process_scheduled_works+0x9cb/0x18e0 [ 292.035862][ T36] process_scheduled_works+0xac3/0x18e0 [ 292.035909][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 292.035941][ T36] ? assign_work+0x367/0x3d0 [ 292.035964][ T36] worker_thread+0x870/0xd50 [ 292.035998][ T36] ? __kthread_parkme+0x1a8/0x200 [ 292.036020][ T36] ? __pfx_worker_thread+0x10/0x10 [ 292.036040][ T36] kthread+0x7b7/0x940 [ 292.036063][ T36] ? __pfx_worker_thread+0x10/0x10 [ 292.036083][ T36] ? __pfx_kthread+0x10/0x10 [ 292.036102][ T36] ? __pfx_kthread+0x10/0x10 [ 292.036122][ T36] ? __pfx_kthread+0x10/0x10 [ 292.036143][ T36] ? __pfx_kthread+0x10/0x10 [ 292.036164][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 292.036183][ T36] ? lockdep_hardirqs_on+0x9d/0x150 [ 292.036205][ T36] ? __pfx_kthread+0x10/0x10 [ 292.036227][ T36] ret_from_fork+0x4b/0x80 [ 292.036244][ T36] ? __pfx_kthread+0x10/0x10 [ 292.036274][ T36] ret_from_fork_asm+0x1a/0x30 [ 292.036306][ T36] [ 292.036409][ T36] [ 292.331381][ T36] ============================= [ 292.336210][ T36] [ BUG: Invalid wait context ] [ 292.341045][ T36] 6.14.0-syzkaller-11125-g609706855d90 #0 Tainted: G W [ 292.349435][ T36] ----------------------------- [ 292.354284][ T36] kworker/u8:2/36 is trying to lock: [ 292.359549][ T36] ffffffff900e8950 (net_rwsem){++++}-{4:4}, at: wext_netdev_notifier_call+0x1f/0x120 [ 292.369023][ T36] other info that might help us debug this: [ 292.374897][ T36] context-{5:5} [ 292.378335][ T36] 3 locks held by kworker/u8:2/36: [ 292.383425][ T36] #0: ffff88806350a148 ((wq_completion)bond0#5){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 292.394469][ T36] #1: ffffc90000ad7c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 292.407329][ T36] #2: ffffffff8ed3b560 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x17f/0x3170 [ 292.416978][ T36] stack backtrace: [ 292.420689][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Tainted: G W 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 292.420707][ T36] Tainted: [W]=WARN [ 292.420712][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 292.420722][ T36] Workqueue: bond0 bond_mii_monitor [ 292.420739][ T36] Call Trace: [ 292.420746][ T36] [ 292.420751][ T36] dump_stack_lvl+0x241/0x360 [ 292.420771][ T36] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.420788][ T36] ? __pfx__printk+0x10/0x10 [ 292.420806][ T36] __lock_acquire+0xc30/0xd80 [ 292.420821][ T36] lock_acquire+0x116/0x2f0 [ 292.420832][ T36] ? wext_netdev_notifier_call+0x1f/0x120 [ 292.420851][ T36] down_read+0xb3/0xa50 [ 292.420864][ T36] ? wext_netdev_notifier_call+0x1f/0x120 [ 292.420879][ T36] ? __local_bh_enable_ip+0x168/0x200 [ 292.420891][ T36] ? lockdep_hardirqs_on+0x9d/0x150 [ 292.420910][ T36] ? __local_bh_enable_ip+0x168/0x200 [ 292.420921][ T36] ? __pfx_down_read+0x10/0x10 [ 292.420932][ T36] ? dev_deactivate_many+0xa9b/0xca0 [ 292.420947][ T36] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 292.420962][ T36] ? dev_get_flags+0x147/0x1d0 [ 292.420979][ T36] wext_netdev_notifier_call+0x1f/0x120 [ 292.420995][ T36] notifier_call_chain+0x1a5/0x3f0 [ 292.421012][ T36] netdev_state_change+0x123/0x1a0 [ 292.421027][ T36] ? __pfx_netdev_state_change+0x10/0x10 [ 292.421040][ T36] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 292.421057][ T36] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 292.421073][ T36] ? do_raw_spin_unlock+0x13c/0x8b0 [ 292.421090][ T36] ? rfc2863_policy+0x1ce/0x3f0 [ 292.421109][ T36] linkwatch_do_dev+0x112/0x170 [ 292.421127][ T36] ethtool_op_get_link+0x15/0x60 [ 292.421142][ T36] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 292.421157][ T36] bond_check_dev_link+0x1fb/0x4b0 [ 292.421173][ T36] ? __pfx_bond_check_dev_link+0x10/0x10 [ 292.421192][ T36] bond_mii_monitor+0x49d/0x3170 [ 292.421214][ T36] ? bond_mii_monitor+0x17f/0x3170 [ 292.421230][ T36] ? do_raw_spin_unlock+0x13c/0x8b0 [ 292.421248][ T36] ? __pfx_bond_mii_monitor+0x10/0x10 [ 292.421263][ T36] ? register_lock_class+0x54/0x330 [ 292.421277][ T36] ? __lock_acquire+0xad5/0xd80 [ 292.421294][ T36] ? process_scheduled_works+0x9cb/0x18e0 [ 292.421308][ T36] process_scheduled_works+0xac3/0x18e0 [ 292.421328][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 292.421344][ T36] ? assign_work+0x367/0x3d0 [ 292.421358][ T36] worker_thread+0x870/0xd50 [ 292.421376][ T36] ? __kthread_parkme+0x1a8/0x200 [ 292.421391][ T36] ? __pfx_worker_thread+0x10/0x10 [ 292.421405][ T36] kthread+0x7b7/0x940 [ 292.421421][ T36] ? __pfx_worker_thread+0x10/0x10 [ 292.421435][ T36] ? __pfx_kthread+0x10/0x10 [ 292.421450][ T36] ? __pfx_kthread+0x10/0x10 [ 292.421466][ T36] ? __pfx_kthread+0x10/0x10 [ 292.421482][ T36] ? __pfx_kthread+0x10/0x10 [ 292.421497][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 292.421513][ T36] ? lockdep_hardirqs_on+0x9d/0x150 [ 292.421529][ T36] ? __pfx_kthread+0x10/0x10 [ 292.421545][ T36] ret_from_fork+0x4b/0x80 [ 292.421558][ T36] ? __pfx_kthread+0x10/0x10 [ 292.421573][ T36] ret_from_fork_asm+0x1a/0x30 [ 292.421589][ T36] [ 292.431925][ T5895] usb 3-1: USB disconnect, device number 46 [ 292.447825][ T8907] vhci_hcd: connection reset by peer [ 292.458185][ T36] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:564 [ 292.576696][ T5896] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 292.611105][ T13] vhci_hcd: stop threads [ 292.645091][ T36] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 36, name: kworker/u8:2 [ 292.778543][ T36] preempt_count: 0, expected: 0 [ 292.783839][ T36] RCU nest depth: 1, expected: 0 [ 292.783865][ T13] vhci_hcd: release socket [ 292.788973][ T36] INFO: lockdep is turned off. [ 292.793977][ T13] vhci_hcd: disconnect device [ 292.798198][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Tainted: G W 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 292.798224][ T36] Tainted: [W]=WARN [ 292.798229][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 292.798241][ T36] Workqueue: bond0 bond_mii_monitor [ 292.798267][ T36] Call Trace: [ 292.798273][ T36] [ 292.798280][ T36] dump_stack_lvl+0x241/0x360 [ 292.798306][ T36] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.798328][ T36] ? __pfx__printk+0x10/0x10 [ 292.798348][ T36] ? rcu_is_watching+0x15/0xb0 [ 292.798369][ T36] __might_resched+0x558/0x6c0 [ 292.798389][ T36] ? __pfx___might_resched+0x10/0x10 [ 292.798407][ T36] ? br_get_link_ksettings+0x376/0x420 [ 292.798428][ T36] ? __pfx_br_get_link_ksettings+0x10/0x10 [ 292.798453][ T36] ? rcu_is_watching+0x15/0xb0 [ 292.798474][ T36] __mutex_lock+0x12c/0x10c0 [ 292.798493][ T36] ? tee_netdev_event+0x86/0x460 [ 292.798509][ T36] ? __pfx___mutex_lock+0x10/0x10 [ 292.798528][ T36] ? net_generic+0x1f/0x240 [ 292.798543][ T36] tee_netdev_event+0x86/0x460 [ 292.798556][ T36] ? nft_offload_netdev_event+0x27d/0x360 [ 292.798575][ T36] notifier_call_chain+0x1a5/0x3f0 [ 292.798597][ T36] netdev_state_change+0x123/0x1a0 [ 292.798616][ T36] ? __pfx_netdev_state_change+0x10/0x10 [ 292.798633][ T36] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 292.798661][ T36] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 292.798681][ T36] ? do_raw_spin_unlock+0x13c/0x8b0 [ 292.798704][ T36] ? rfc2863_policy+0x1ce/0x3f0 [ 292.798727][ T36] linkwatch_do_dev+0x112/0x170 [ 292.798749][ T36] ethtool_op_get_link+0x15/0x60 [ 292.798769][ T36] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 292.798789][ T36] bond_check_dev_link+0x1fb/0x4b0 [ 292.798808][ T36] ? __pfx_bond_check_dev_link+0x10/0x10 [ 292.798832][ T36] bond_mii_monitor+0x49d/0x3170 [ 292.798861][ T36] ? bond_mii_monitor+0x17f/0x3170 [ 292.798881][ T36] ? do_raw_spin_unlock+0x13c/0x8b0 [ 292.798905][ T36] ? __pfx_bond_mii_monitor+0x10/0x10 [ 292.798925][ T36] ? register_lock_class+0x54/0x330 [ 292.798942][ T36] ? __lock_acquire+0xad5/0xd80 [ 292.798969][ T36] ? process_scheduled_works+0x9cb/0x18e0 [ 292.798988][ T36] process_scheduled_works+0xac3/0x18e0 [ 292.799012][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 292.799032][ T36] ? assign_work+0x367/0x3d0 [ 292.799051][ T36] worker_thread+0x870/0xd50 [ 292.799073][ T36] ? __kthread_parkme+0x1a8/0x200 [ 292.799094][ T36] ? __pfx_worker_thread+0x10/0x10 [ 292.799111][ T36] kthread+0x7b7/0x940 [ 292.799132][ T36] ? __pfx_worker_thread+0x10/0x10 [ 292.799150][ T36] ? __pfx_kthread+0x10/0x10 [ 292.799169][ T36] ? __pfx_kthread+0x10/0x10 [ 292.799189][ T36] ? __pfx_kthread+0x10/0x10 [ 292.799209][ T36] ? __pfx_kthread+0x10/0x10 [ 292.799228][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 292.799248][ T36] ? lockdep_hardirqs_on+0x9d/0x150 [ 292.799271][ T36] ? __pfx_kthread+0x10/0x10 [ 292.799291][ T36] ret_from_fork+0x4b/0x80 [ 292.799306][ T36] ? __pfx_kthread+0x10/0x10 [ 292.799326][ T36] ret_from_fork_asm+0x1a/0x30 [ 292.799346][ T36] [ 293.147813][ T5896] usb 4-1: config 0 has no interfaces? [ 293.157335][ T8904] bond0: (slave bridge0): Releasing backup interface [ 293.165526][ T5896] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 293.177775][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.187131][ T5896] usb 4-1: Product: syz [ 293.191414][ T5896] usb 4-1: Manufacturer: syz [ 293.196059][ T5896] usb 4-1: SerialNumber: syz [ 293.202858][ T5896] usb 4-1: config 0 descriptor?? [ 294.428356][ T5896] usb 4-1: USB disconnect, device number 35 [ 295.837303][ T5909] vhci_hcd: vhci_device speed not set