last executing test programs: 10.895496704s ago: executing program 4 (id=875): modify_ldt$read(0x1100, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="38000000061401"], 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 10.802340862s ago: executing program 4 (id=877): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) gettid() r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) open(&(0x7f00000000c0)='./file1\x00', 0x147842, 0x88) 9.876716014s ago: executing program 4 (id=880): syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000acbc5840ba0d0030ea26000000010902120001000000000904"], 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x280, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff0100000001", 0x15}], 0x1) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fsopen(0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) connect$inet(0xffffffffffffffff, &(0x7f00000009c0)={0x2, 0x4e20, @loopback}, 0x10) writev(r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x0, 0x18}, {0xf, 0x3}, 0x1ff, 0x3, 0x5}) io_uring_setup(0x25f3, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x10, 0x13d}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000000)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x8001, 0x0, 0x0, 0x2ad7a3, 0x12fe6e}) 9.77243479s ago: executing program 3 (id=882): syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000acbc5840ba0d0030ea26000000010902120001000000000904"], 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x280, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff0100000001", 0x15}], 0x1) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fsopen(0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) connect$inet(0xffffffffffffffff, &(0x7f00000009c0)={0x2, 0x4e20, @loopback}, 0x10) writev(r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x0, 0x18}, {0xf, 0x3}, 0x1ff, 0x3, 0x5}) io_uring_setup(0x25f3, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x10, 0x13d}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000000)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x8001, 0x0, 0x0, 0x2ad7a3, 0x12fe6e}) 8.589066913s ago: executing program 0 (id=886): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r0, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f00004f4000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000300)="660fc7320f01d1b8010000000f01c126f2e100b9800000c00f3235000100000f300f35c4c279347a2e66ba400066b8060066ef0f783c61b8c3e993710f23c00f21f835010003000f23f8", 0x4a}], 0x1, 0x22, &(0x7f0000000100)=[@dstype0={0x6, 0xa}, @dstype0={0x6, 0xc}], 0x2) 8.54701834s ago: executing program 0 (id=887): r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f00000025c0)=""/4092, 0xffc) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x30313953, 0x0, 0xa, [{}, {0x10}, {}, {0xfffffffe}, {}, {}, {0x0, 0xfffffffd}, {0x0, 0xc}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400000019000100000000000000d700547cf6ae000111000500000081f8437f00e0000001"], 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586", @ANYRES64=r1, @ANYRESOCT=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="000426bd7000fcdbdf250c00000034000980080002000010000008000100fbffff"], 0x2d0}, 0x1, 0x0, 0x0, 0x40408c1}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e"], 0xdc}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x200) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r5, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) 6.243191973s ago: executing program 4 (id=891): mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0xffffffff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./bus\x00', &(0x7f0000000500), 0x20, &(0x7f0000000540)={[{@uuid_on}, {@redirect_dir_nofollow}, {@uuid_off}, {@uuid_null}, {@uuid_null}, {@lowerdir={'lowerdir', 0x3d, './bus'}}], [{@seclabel}, {@fowner_gt}, {@subj_type={'subj_type', 0x3d, '{%\\'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'lo\x00'}}, {@context={'context', 0x3d, 'user_u'}}]}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006272696467650000180002800a0014000180e1000000000006000900"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000180)=0x6, 0x4) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) mount(&(0x7f0000000400)=@filename='./bus\x00', &(0x7f0000000440)='./bus\x00', &(0x7f0000000480)='devtmpfs\x00', 0x2000, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f0000000180)='ntfs\x00', 0x400080, &(0x7f00000001c0)='discard') recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@getchain={0x24, 0x66, 0x100, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xffff}, {0x2, 0xfff2}, {0x0, 0x8}}}, 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x80000000}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x3000881c) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f0000000100)=0x3, &(0x7f00000003c0)=0x1) inotify_init1(0x800) 5.959116758s ago: executing program 3 (id=893): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x3ff, 0x0) inotify_init1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000340)="41000000010006", 0x7) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f00000024c0), 0x80000, 0x0) ioctl$LOOP_SET_FD(r5, 0x7b9, r4) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001000000000000000000"], 0xb8}}, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_UIE_ON(r6, 0x7003) ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000000280)={0x24, 0x2f, 0x0, 0x1c, 0x6, 0x400004f, 0x100010, 0x2c, 0xffffffffffffffff}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000b40), 0x80002, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x60680, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r7, 0x0, 0x80, &(0x7f00000004c0)={'nat\x00', 0x0, 0x0, 0x0, [0x1, 0xffffffffffffffff, 0x0, 0xae, 0x401, 0x8]}, &(0x7f0000000280)=0x78) 5.440491616s ago: executing program 1 (id=895): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x2, 0x3, 0x67) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x1, 0x1, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x20) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x203, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0xffffffffffffffff}) 5.250619307s ago: executing program 4 (id=896): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000001c0)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e9", @ANYRESOCT=r2], 0xffffffffffffffe7) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) r4 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r4, &(0x7f0000001280)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}}, 0x1c}}, 0x0) syz_emit_ethernet(0x879, &(0x7f00000012c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000e08004500086b000000000011907800000000e00000014e214e20085790782fb8f44b9f9f508bead7cf4e3e8c47ffa37d8707b8b523bdd76d0947d33d2572e47e34ad333c89d98e3d041052cddf12aafcf174c3e72b46d0e23f4d2983d3411acfe9a88cb49bf1c20271850c4089639907359aee0a1bba7c5c8cba7b3aea33f49a73d0a55ea63ef1eee6b5e2c0a17812bcda310fe7fe4b1b4ae90fdcf85c1ec0718c2cbda07fbfcc45e950b77368ddd0e376b8f23d975cd8d9ac0a2aa7c25a0d3b7a4a3580b2ec56cd55a982e20d48ae496f9d9e9e1054dd4c36de28cbb383be2a2c67183cf3ad4001649445d422702532f6aeeb3463bb0f8d89a0e4ac544345c4eb5b64f164f3d38da16aa98eab3b690bfd675c546f759ddabd8a7a1b6f045941bcb77df0a62640f02de0fa154a5358f3bdfbddcbaafa560ff6a463414173d4ae4feb83bc1bbd2e28a03264d9e4c18ecf77d1b9d0ec45ba92508cf383d779354a07b59de17c388c15fe38675765464ef35aff177057ff9654dde8499c96b563ca9d1153468a68c0ad99452290c43cacf0cb1ba1fea67f16b4a30c9d19eabd9718d82881c909b5efdefa4967303398fb3ebbb62ab2470ff1295bad42b623ef6d3ea7ae8921832be97f5c2ba1c065aca41ccd323311321e4e46f99c1abddeb15f9ef538761bf457ccb2e83fb5a93e9b11ec2d326b4493665db4ad99485c864b0ae1aecb3501feda45aa3287afa60cf150c82407fdccc0a2ebe5c88ca4b221081c324e1f114ef9bd95f6b697c275fd278ef4983ee630001ca52d9647dda6e2dd7a07d5946c83ae6bcc6fe424fcc3645fa8ea0745d51fa4a68168f86e63f04d88d9fd95537823724804f0835543d0e89840552c4885db4d9b1889fd83891bd895ff433ef99f68fc41d765a31b75909c3932ebd156c6760361d6caf56c834703a9bbe09dff572ad735bc1bc4f5d97d2b95b9898d9c10ac10d9982f2c23cd3a724d67e4e7476bc5a40a1263ae67edcb1abcf6a2d996b8a4dc00887639d7658cf45a4718ec7290da4f230c34fbdb5cbc36f06e39d00520756710a2b5c1c53711c8ff0c9e19ead3ea0460ac4605650cb139562e8199a109cc5ed7b4f2b45c2f7100192cca135a88afb9176f408e4a6fb1fad0528bcfecbd21a2d709ccd4df6275f8bb52ba5cb07bd9dd401d0ac1dc1c0017080f71b5c0c8d03fbdf95610c9d05007a92493456c363913773423d3a1fd0e2cb794d765f2a7e7980f22c27bfd70b2d441dafd0caa382b028d8c4669f898d46f3089bd3f1bc549635250cd09065db60470e781d65413e234328a76fd59466709917832b257cf447092c70ca7b879b1f661e0c13e2b7e8ce59cef9668947a3381c040c2e3feb8c3c53a5eef4cf70483807d8794b42cdc420d9cae21bc5c682ac8a14a12338e70375966d7af4099f44779ce09476251cf2a2a56ee9cff29f56aa9c33dc755439d1af9f58907f3471c30a1a694d62f22c28cf84756101e561c941da535f9fc466bbacd075d68dda8084d63596f48c34508b2786f89f20b8989a11109a880edc7f40e403bf5cba40a38a24b21e9bd3ceac1c6ab85672bddbf70dd425872489a4338f6dbfe5cfcb077531f1748e9e2f67641a0a52d05d95a3d736ed96236733cf2da3848a8ba228e479e7bb1ea385e51ab9f74b52fc235f206cac116ac5befc6ab74b789b69a83e5614a93f0e38f0e862b7a428c75824b62eb88614937b70c0ac407cb27fd26ed19f1b052c881047ebc8267b4049ca0010ac188a0bdb36858eb7aa3e0a4e367a48e3fa46bd38381e8118ab9486d16829ca51a1620dc335796e472fedf03c3861bbfcc6467b811a8240fc00941250c58386fe01336ed98496d6de8c79e8d81be90e884e211ef64bd226c8d20bbdeda3c59443a643e3ed1933f4de4bb70abac88d3733b160cd999d8c0fd6fc21b244bb7429b51a01da7c16bc0b1f86fed81fa30b1bc71f97aa3825e45b71f9d5f781c880c3071f76f2385a222f2f10d4b3feb461f294def69d3b9cfb497e378aefadab9bcb36b292c1d9223b7ccb87966b27cffaa48b683c05bed1e197cdf31ae85d3fec356d26b3a3fa05bfce5872fbdda6d25e370764b84baf4002d131251af37fd49d29d5ca32435c3b642f00a59b3438fe5b2c51f83523e439a81ccca07556aaa0868788d11a5353fadfe5cd7122f5964fed4a6adfd4bb6343fe1ce2ada342329541ecb0d81bcf596c262fee37cf359eeaf39ffe628f9d48b23c783ce7c83fba430746494b3742cfe9a492bd43b3ca27aec50aeaab23977f0b1dcc57a21b68a7cf23981de0d4719f5901c0ee6c6b1b72475adad4515dee5fc0508dbabeef8f574414ce15d188e51d3a521d2b067f4709672a5a14e162c6920cc0eddc0f96ab31c944f6c8ca75fb196ffd767105201a00563425ec474d1ac0b5918c60df36e315786374d94d86c7e98d8e0e0276499da63926fa0992add83dae394f3c0858cb98ae4780287be3466b16a41ceb8405689913bbc4077bfd99771b6917b38b214d6d1d7842d7709bbb08fef3af581faca8a5cb0d2298e396c94fcea21b6e58eadb33fc6496896908d593c5fb9235b9f5c808514dd7f154438c9ff5ac92e26e1a2e073e05f8cc7672d78900e8a7c886b1c850666b81521471ccd17783d2acfb7a2e031b990bc822e3421897b6b243291a3522f9708595e1265defd678efc12a94dcc76f0d9156557bd02f4bd0e4900b7463165555483cef562fbbebb6cbf5f312584581a54b690b3d34fd5aeedc9bb9a35c4f856f98eaa5e3a9eff7bba47292b774d5848ff93ffe21c9317cc0b1135fa7468620842a8460e7befddde90007e87dcb5626fc3e097084e6326fdd686000bc47800a90dc6f2f091ed3565022546663a30424eef276aa3dc6cba298349f49e6590d57c1f3ab13765a9cfa86b192730809d891f07a594c8790df0e731251134beff38f8cfa9e6a3681ad82236bfb31b4a815a6a72cb750ad65aca58b23923397afc80424ad387da2532c626a67f1019a5701212db5483ded6c78e6ede4626c67c5b7a16d5143dff"], 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000180), 0x12) 5.194828081s ago: executing program 1 (id=897): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r0, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f00004f4000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000300)="660fc7320f01d1b8010000000f01c126f2e100b9800000c00f3235000100000f300f35c4c279347a2e66ba400066b8060066ef0f783c61b8c3e993710f23c00f21f835010003000f23f8", 0x4a}], 0x1, 0x22, &(0x7f0000000100)=[@dstype0={0x6, 0xa}, @dstype0={0x6, 0xc}], 0x2) 5.193742682s ago: executing program 1 (id=898): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000b40)={'filter\x00', 0x5, 0x4, 0x3c8, 0x1f8, 0x0, 0x110, 0x2e0, 0x2e0, 0x1f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x1c}, @loopback, 0xffffffff, 0x0, 0xc, 0x2, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff]}}, 0x800, 0x5, 0x0, 0x2, 0x9, 0x8, 'bridge_slave_1\x00', 'veth0_virt_wifi\x00', {}, {}, 0x0, 0x120}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) socket$caif_seqpacket(0x25, 0x5, 0x5) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000300)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r3, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) r4 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0xffffffffffffff53, r5}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x187842, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0xc, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x7f03) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x53, 0x0, r6, &(0x7f0000000380)={0x8}, r9, 0x3, 0x0, 0x1}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 4.291528887s ago: executing program 1 (id=899): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xe, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0xba}, @ldst={0x1, 0x2, 0x2, 0x4, 0xb, 0xffffffffffffffc0, 0xffffffffffffffff}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}]}, &(0x7f0000000100)='syzkaller\x00', 0x1, 0x4c, &(0x7f0000000340)=""/76, 0x41000, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x0, 0x9, 0x0, 0x20000}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000400)=[0xffffffffffffffff, 0x1], &(0x7f0000000440)=[{0x0, 0x1, 0x2, 0x5}, {0x1, 0x3, 0x5, 0x1}], 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='wbt_stat\x00', r1, 0x0, 0xb}, 0x18) connect$802154_dgram(r0, &(0x7f0000000180)={0x27, @short}, 0x14) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x10, 0x803, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) mq_open(&(0x7f00000001c0)='ethtool\x00', 0x2, 0x8, &(0x7f0000000300)={0x25, 0x7, 0x6, 0xfffffffffffffffd}) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x2}, 0x8) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0}) 3.358151701s ago: executing program 1 (id=900): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="20000000100001070000000000"], 0x20}}, 0x800) recvmmsg(r4, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35, 0x23}, {&(0x7f0000000680)=""/127, 0x7f}], 0x2, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000), 0x4) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) r6 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r5, &(0x7f0000001640)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r5, &(0x7f0000000100)='./file1\x00', r6, &(0x7f0000000240)='./file0\x00', 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x61) syz_open_dev$vim2m(&(0x7f00000001c0), 0x8, 0x2) lseek(r7, 0x100, 0x0) 2.808657966s ago: executing program 2 (id=901): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) dup(r0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x40000000002) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000018080)='\n', 0x1, 0xa2b0) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 2.770830474s ago: executing program 0 (id=902): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0xfffffffffffffe9a, {0xd000, 0x80a0000}}, "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", "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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.354482372s ago: executing program 2 (id=903): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000140)={'veth1_to_team\x00', @link_local}) r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0x40045017, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) (async) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000500)={{0x2, 0x0, 0xee01, 0xee00, r3, 0x0, 0x1}, 0x0, 0x0, 0xfff, 0x800, 0x800, 0x80000000, 0x2, 0x58, 0x7fff, 0x69}) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) getgroups(0x7, &(0x7f0000000700)=[0xee01, 0xffffffffffffffff, 0xee00, 0xee00, 0xee01, 0xee01, 0xee01]) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000740)={{{@in6=@mcast1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6}}, &(0x7f0000000840)=0xe8) (async, rerun: 64) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000880)={0x0, 0x0, 0x0}, &(0x7f00000008c0)=0xc) (rerun: 64) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000640)=[{&(0x7f00000003c0)="94f2bfeaff3ad550e28a9656e97f39a01c8ec6f8a7650c5cde4b6cd4e513246423fb835f81f62b70cbbf4a53167aa9f1afcbd7eb16f925eeee9d08d93471a31bedc2b2ae4238d7aae3609b517c5cbe", 0x4f}, {&(0x7f0000000300)}, {&(0x7f0000000440)="8ed1b3c601ebb57b6fd3530084fa3a23d20b782f15a43b7ef8d228741af637b25d650da573326dab16cb1cc29a01765129dfb3b8e5a29a87d0f70c2228b0f0c8962c0075aff8862c6430e15fbdd7aa465f8ab5d26b3c920b17233f5216e56d74f82c284faf80bd83bcd09371c34ab6278e9ebf8cd1d29def725420b8868d159eb94a053286d1f7a9532f4285f574644ce06783d64f95cbdb4ce5b855d6cc1fc0be15034e76545696e9a7b02ede38e4f306ef1390fd5d5d47cd4d1486112861299377bf1249772de3edcc25aad6688b470f6d912a4bab100855", 0xd9}, {&(0x7f0000000540)="ad993aeceee8418be0dcf9", 0xb}, {&(0x7f0000000580)="d0c9cb87f87fe0d11b3c3c8022e907b29483d0cb1d2753afddc082c3f6114e265c4f08ccb64f8939f123dc90640ecb225ad991378e6bf2bbbf16b41079f2bdc40d3ab3694b2ccb9643cb0793e7e74b78e6a194648cb8a1889da8e0b379e0a6bd5356317b1eb5a4aadb7d1522ddbea6e9a2e95463bac11c68c99cf646e289fe43159da2b53bd89864915c773a2b1e783f402a37a16543be72d933e0119920eacc47a3b227453002725d94df1808be31d2", 0xb0}], 0x5, &(0x7f0000000900)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r3}}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xee00, r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}], 0x60, 0x800}, 0x4000) (async, rerun: 32) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000600004805c0001800900010068617368000000004c000280080002400000010c080002400000000b080002400000000e080001400000000208000540000000090800074100000001080005400000000208000740000000010800014000000013140000001100010000000000000000000000000a"], 0xb4}}, 0x4008090) (async, rerun: 32) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000080)={0x12}) r10 = syz_io_uring_setup(0x1da9, &(0x7f0000005b80)={0x0, 0xe874, 0x1, 0x2000000, 0x2d1}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r10, 0x22, &(0x7f0000000380)={&(0x7f0000002000), 0x0, 0x1}, 0x1) (async, rerun: 64) socket$unix(0x1, 0x4, 0x0) (rerun: 64) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r11, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) (async, rerun: 32) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r11, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) (rerun: 32) r12 = getpid() sched_setscheduler(r12, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x2, r12, 0x0, &(0x7f0000000100)) (async, rerun: 64) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) (rerun: 64) 2.242084923s ago: executing program 0 (id=904): socket$inet6_udplite(0xa, 0x2, 0x88) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x22d4, 0x1503, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x20000000000001f4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x24fa, &(0x7f00000006c0)={0x0, 0x0, 0x10100, 0x0, 0x1c5}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x24844}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7e, 0x9e, 0xb4, 0x10, 0x54c, 0x38, 0x16f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0xc5, 0x38}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000140)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 2.022485908s ago: executing program 3 (id=905): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'netpci0\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4d, 0x8, 0x6, 0x1, 0x7, 0xc, 0xff, 0x9, 0xc, 0x4, [0x9, 0x9e6e, 0x42, 0x4fe0, 0xb, 0x0, 0x7, 0xd], [0x1, 0x7, 0x693, 0xc0000000, 0x1, 0x9, 0x800, 0x19c]}}) (async) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)="a2b617cf544435ac073094383e8e0659f13cfa02ddf841a4ed4b04517469739feab46644836777382ebf8d5ce8a60d5ce7bae3e0e6dd74905bce1a2e74ef8c6bf435323f50e4368a2362938e6caff9b73388835dcc737b50327b95eddac31e8d5f1959c51e08ee995f4a7f20f61d95e039bce54e1660aba3e3715d07c8e84275a09ee7e5cb230f4dc6b86f1470a37f1d083f408f164eecc302d950de096861544311a8c3a41a06c8f1f2eee5ccb0ef589e0249898819c7ce27f576be5d4939fdc434c9cba7", 0xc5}], 0x1}, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r0, 0xc0c85666, &(0x7f0000000480)={{0x1, @name="52e4def1d4599cf4cd1f26145ab3e3f2cfb4003b26c051431dcf9df8b0d884aa"}, "770557d9f48ad22179ec1c04ede60a0cee30e8110e006a5cedb06c181098478e"}) (async) recvmsg$unix(r0, &(0x7f0000000180)={0x0, 0x57, &(0x7f0000000340)=[{&(0x7f0000000140)=""/14, 0xffffff91}], 0x1}, 0x40002061) 1.995011165s ago: executing program 2 (id=906): connect$unix(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ppoll(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x9ea, 0x8ba, 0x2, {0x6, @vbi={0x8, 0x6, 0x401, 0x31324d4e, [0x7], [0x40, 0x2], 0x1}}, 0x40004}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.949898754s ago: executing program 3 (id=907): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x101001) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d39e6908402000d3b3160102030109021b0001000000000904"], 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x60) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setsig(r3, 0xa, 0x21) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_emit_ethernet(0xfdef, &(0x7f0000000140)=ANY=[@ANYBLOB="5b1a033f2511aaaaaaaaaabb080046004578000000000011907800000000000000000000000000649078100000000004000000000000fdcdae25a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bdae0000000000000000e400000000000035f3c07eeca4a20a9858ac150000000063081fe8fe001a08ed082ad7121d696f"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000006c0)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syslog(0x2, &(0x7f00000006c0)=""/10, 0xa) syslog(0x2, &(0x7f0000000700)=""/31, 0x1f) inotify_init1(0x0) close(0xffffffffffffffff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) fcntl$setlease(r3, 0x400, 0x1) syz_usb_connect$cdc_ncm(0x7, 0x8f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002020000102505a1a440000102030109027d0002018240000904000001020d000005240600010524002339756c0f010100000001000700fc06241a080004152483db00a317a88b045e4f01a607c0ffcb7e392a0c241b0d00090021070200070905810308f5040904010000020d00000904010102020d000009058202ff03fe000a09050302400042073a"], &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x0, 0x3, 0x6, 0x40, 0x4}, 0x8b, &(0x7f0000000180)={0x5, 0xf, 0x8b, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "b625cf92321de213fc624f554fa86d4b"}, @generic={0x48, 0x10, 0x0, "35185b38684054b147d46c3f85e3d9c3f084271d6579502d70d3e3f983026897df335318c025e64f482447bc50d5b7da89946da9905f9600f16a8e6c2d7049d273a4e8abf0"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x98, 0x85, 0x2, 0x0, 0x29}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "70fcffed462221638c6116d56c27025b"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x24, 0xff, 0x8, 0x38d}]}, 0x3, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x2409}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x449}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x82c}}]}) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000060000000387e70d00000000186700000b00000000000000000000001800000001000000000000000700000018650000030000000000000001000000bf57fe276b2d5b730ef882c1fff0ffffff85100000050000"], &(0x7f0000000480)='GPL\x00', 0x5, 0xc8, &(0x7f00000004c0)=""/200, 0x40f00, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x0, 0x6, 0x8e9b, 0x8001}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000740)=[{0x5, 0x5, 0x1, 0x7}, {0x5, 0x2, 0xc, 0x2}, {0x1, 0x5, 0x3, 0x6}], 0x10, 0x40, @void, @value}, 0x94) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f00000006c0)={0x0, 0x56, &(0x7f0000003b00), 0x0, 0x0, 0x0, 0x0, 0x2000000000000583}) 895.257089ms ago: executing program 2 (id=908): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000020000000095000000ca10cf8b"], &(0x7f0000000200)='GPL\x00', 0xff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r2}, 0x18) syz_open_dev$MSR(&(0x7f0000000080), 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) gettid() mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r5 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) readv(r5, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1) write$FUSE_INIT(r5, &(0x7f0000000140)={0x50}, 0xffd3) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c0002"], 0x140}}, 0x0) 842.811148ms ago: executing program 4 (id=909): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r1, 0xc0884123, &(0x7f00000000c0)={0x0, "d8d7531c1c6054b6b70257ec47e25dc91f003f19004f6ceb55fb98d58dccd7f0fe41ae63a0df07926f45a38667304ab9b9b98347fbe76528e77e751fd98d62be", {0x2}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 833.322168ms ago: executing program 0 (id=910): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x9, 0x2, 0x1}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000300)=@mmap={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'BRTI'}, 0xfffffffe}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x300, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4140aecd, &(0x7f00000002c0)=ANY=[@ANYBLOB="553f76ac4f381b351fd51c55c5376ee691ee5efd028e7a42f52868ce8a956dc5ad9d1048d7cdd901c25c412abccfb73ea8b494583d1037b118c72936d3533a5737283fdf0fd05f219463d60fdfb7bf47952d7bf49f88a9fb82cf6524cf3a403083fda838a417b5f4d633caababf993db65da1538a7efb2dc80dc522ebe82e441a59d92e0b414cf33c6017e55269a2f2b2780a2bed8db71db2be53b2ca176efc722923925bd03", @ANYBLOB="74cfc989d8594a0fd35b6e8121075c919b39b10d84c646a5287a8e1f7b881fc75305f1862058a21a839b9b85146e7bb47bcf1a384fa27cd44ff542fedfc07733d3ee371fc0e51ead4ca4bf692c056f887978b3"]) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1a, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8, @void, @value}, 0x94) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058560f, &(0x7f00000000c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x100, 0x7bc0, {0x77359400}, {0x0, 0x0, 0x8}, 0x0, 0x1, {0x0}}) 469.017014ms ago: executing program 2 (id=911): ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000640)=0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610408000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x3, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe6b, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0x0, 0x1d8, 0x1d8, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'ip6gre0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa8, 0x0, {0x88000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@private, @rand_addr=0x64010102, 0x0, 0x0, 'bridge_slave_0\x00'}, 0x0, 0xd0, 0x130, 0x0, {0x122}, [@common=@inet=@dscp={{0x28}}, @common=@unspec=@connbytes={{0x38}, {[{0x7fffffff}, {0x8}], 0x571dc3c1a8f3e291, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast, 0x81, 0xe, [0x19, 0x2a, 0x28, 0x10, 0x32, 0xd, 0x17, 0xf, 0x25, 0x2c, 0x9, 0x37, 0x32, 0x36, 0x22, 0x4], 0x0, 0xa, 0x6}}}, {{@uncond, 0x0, 0x90, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f000069a000/0x4000)=nil, 0x4000, 0x4, 0x10, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 390.132602ms ago: executing program 2 (id=912): r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f00000025c0)=""/4092, 0xffc) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x30313953, 0x0, 0xa, [{}, {0x10}, {}, {0xfffffffe}, {}, {}, {0x0, 0xfffffffd}, {0x0, 0xc}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400000019000100000000000000d700547cf6ae000111000500000081f8437f00e0000001"], 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586", @ANYRES64=r1, @ANYRESOCT=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="000426bd7000fcdbdf250c00000034000980080002000010000008000100fbffff"], 0x2d0}, 0x1, 0x0, 0x0, 0x40408c1}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e"], 0xdc}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x200) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r5, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) 337.024829ms ago: executing program 1 (id=913): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1}, 0x0) sendmmsg(r0, &(0x7f0000000300)=[{{&(0x7f0000000180)=@l2={0x1f, 0x6, @any, 0x3, 0x2}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000380)="2098293b6b7a92d4018fcb052f9a5236c5bba644c46ec875460c331e0938ee215277b9e7891926e32895b19c321ba321d65a41b36ca003d31c50e0819e01bba285296f26e33697fd3d8dfe015105bdee4fe0c8e38364cc4de40ad20dc950f98d8953f731d49547c8fabd14bc84", 0x6d}, {&(0x7f0000000400)="398136e124e95eee710e19241702d6b512dcb30ef67c32359ab4277b97676730992aa0f56534ce8be06a60c3d9e9b144c87a21963228f0da75b8706c160910b53b11a58d8af143064bb92e0aaef7d56ff33e2f8c32fabf380c88901b0b5df2549cdb1f6ecfce0fb4af59e43afe7605739bd969b183923313090743c608cfe2f7e65f35ae08c52f25f1bf42dc1a985f2aa04564bc74c5539ca6755f2cbeaf5390e0de434289145f5a0c644b72764291c769c144df6d30c10bc8e279617d817cc09ee755bf769a62bb4fba85bbef2a36dd56c468", 0xd3}, {&(0x7f0000000500)="57eaacdd3d1bf8f891aca272ff8919f9b4c4ad510155cb09560f83c2913b133a7b0ee04eacf679285272b323c38e445931e686bc6e37ae7077378c40e8033edf3d53bc68f5618a9ab917d77b367bb6aa60a0512f08a40e0e5528b37251", 0x5d}, {&(0x7f0000000580)="1071be5d8c42d44b1a8d5068f880eebb283fcc232e466af038c837d51c2d37092969753bfa09ec9bd89c1fdfbe53a32bcc7cac176c15b69e8e5425f5a7f0681f1093daa31869e3bde60069279c9fa5f7e9a106aa457c24bf269d245860cb72ed82950d9fc9", 0x65}], 0x4, &(0x7f0000000600)=[{0xa8, 0x88, 0x3, "b12127be3c4177ac7c9934b64e9d07c8e5debc71c32e8bea9b73a5bd2a4676099ab86105e8109bd58fba5608c43ba6dc222753f5d364126e1e7b0ccb761371d30a7f38ffaa9c65b244ccad6a04accdb654785630ef1e3f1ccb2a0656a9dbb0c21b146db62e684aa4e96d0b4ca86b3c5a7b3758a15252914e91cef355a442b35aa39dea9363463d3e4046a11ab24da79e2d503159a9ccfd"}, {0xa8, 0x10a, 0xe307, "cdd8a4e1479acc16368423fde0dfb2f5dfc372496db6411695f79a788e60120bc350eb79d2eeb4cfd5606631d493047c1ece287ec6ea0d2536aaf1fd3b66f2539502af7a8abdcfc795d25f5a76175c85357462afcae5ebbcb6f3ce4e3ca978c18b56fbfde4199e934e282820423c321b2e9514879c0803855d51b721c919bbe8c8a127c3052528505e5a7f10de7f69d4ca0781"}, {0x80, 0x117, 0x7f, "8e328eb3b483388091caaf184969acf6affd2c4590870e367f6306d91a9febcd7380e5a9de0f0974866ae679a49476ea37aa28e88b3f2d82e60a268c1401f348cb8930e813f9d7a5b2fb2d5f38e1b8e38bf4f2e0b03fd0bb13671255ef2ea5fd6200db80679bb6690fc90c9442"}], 0x1d0}}], 0x1, 0x44810) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x804) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xd) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) clock_settime(0x0, &(0x7f00000014c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x4100}, 0x0) 274.95523ms ago: executing program 3 (id=914): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x2, [r2, r3, 0x0, r4], [0x2b8]}) 24.010411ms ago: executing program 3 (id=915): mkdirat(0xffffffffffffff9c, 0x0, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x40001043, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4007, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x3516, 0x300, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=916): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x7) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000280)={'gre0\x00', {0x2, 0x4e20, @empty}}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$UI_DEV_DESTROY(r2, 0x5502) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r4}, 0x20) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff]}) kernel console output (not intermixed with test programs): r msi2500 failed with error -23 [ 188.982097][ T5914] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 189.168760][ T5914] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 189.397012][ T5914] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 189.429737][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 189.458115][ T5902] usb 1-1: USB disconnect, device number 22 [ 189.749442][ T5862] usb 2-1: USB disconnect, device number 18 [ 189.787222][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 189.822454][ T5914] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 190.093531][ T5914] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 190.103311][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.112743][ T5914] usb 5-1: Product: syz [ 190.117025][ T5914] usb 5-1: Manufacturer: syz [ 190.122281][ T5914] usb 5-1: SerialNumber: syz [ 190.122556][ T5902] usb 4-1: USB disconnect, device number 19 [ 190.129323][ T5914] usb 5-1: config 0 descriptor?? [ 190.144383][ T5914] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input30 [ 190.463921][ T5813] Bluetooth: hci4: unexpected event for opcode 0x0c20 [ 190.474149][ T9] usb 5-1: USB disconnect, device number 25 [ 190.480316][ T5914] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 190.641560][ T5914] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 190.656459][ T5914] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 190.672056][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 190.683175][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 49351, setting to 64 [ 190.697387][ T5914] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 190.715949][ T5914] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 190.726898][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.735108][ T5914] usb 3-1: Product: syz [ 190.739387][ T5914] usb 3-1: Manufacturer: syz [ 190.744649][ T5914] usb 3-1: SerialNumber: syz [ 190.756482][ T5914] usb 3-1: config 0 descriptor?? [ 190.765504][ T7505] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 190.790304][ T5914] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input31 [ 191.084945][ T7517] overlayfs: missing 'workdir' [ 191.572695][ T7519] block nbd1: shutting down sockets [ 191.644894][ T5862] usb 3-1: USB disconnect, device number 24 [ 192.684242][ T7526] block nbd1: shutting down sockets [ 193.160504][ T5865] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 193.342056][ T5865] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.354338][ T5865] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 193.367715][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.433873][ T5865] usb 1-1: config 0 descriptor?? [ 193.448806][ T5865] pwc: Askey VC010 type 2 USB webcam detected. [ 193.777491][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.783874][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.020102][ T5865] pwc: recv_control_msg error -32 req 02 val 2b00 [ 194.037189][ T5865] pwc: recv_control_msg error -32 req 02 val 2700 [ 194.041956][ T7560] cgroup: subsys name conflicts with all [ 194.050441][ T5865] pwc: recv_control_msg error -32 req 02 val 2c00 [ 194.060025][ T5865] pwc: recv_control_msg error -32 req 04 val 1000 [ 194.072378][ T7560] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 194.088876][ T5865] pwc: recv_control_msg error -32 req 04 val 1300 [ 194.098087][ T5865] pwc: recv_control_msg error -32 req 04 val 1400 [ 194.105542][ T5865] pwc: recv_control_msg error -32 req 02 val 2000 [ 194.122991][ T5865] pwc: recv_control_msg error -32 req 02 val 2100 [ 194.132961][ T5865] pwc: recv_control_msg error -32 req 04 val 1500 [ 194.343053][ T5865] pwc: recv_control_msg error -71 req 02 val 2400 [ 194.352521][ T5865] pwc: recv_control_msg error -71 req 02 val 2600 [ 194.359309][ T5865] pwc: recv_control_msg error -71 req 02 val 2900 [ 194.369454][ T5865] pwc: recv_control_msg error -71 req 02 val 2800 [ 194.392979][ T5865] pwc: recv_control_msg error -71 req 04 val 1100 [ 194.412979][ T5865] pwc: recv_control_msg error -71 req 04 val 1200 [ 194.422562][ T5865] pwc: Registered as video103. [ 194.433502][ T5865] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input32 [ 194.895219][ T5865] usb 1-1: USB disconnect, device number 23 [ 195.080874][ T7578] block nbd0: shutting down sockets [ 195.294720][ T7588] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.303074][ T7588] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.311192][ T7588] bridge0: entered allmulticast mode [ 195.323751][ T7588] bridge_slave_1: left allmulticast mode [ 195.329460][ T7588] bridge_slave_1: left promiscuous mode [ 195.335355][ T7588] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.369854][ T5902] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 195.383382][ T7588] bridge_slave_0: left allmulticast mode [ 195.905928][ T7588] bridge_slave_0: left promiscuous mode [ 195.921059][ T7588] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.009961][ T5902] usb 3-1: Using ep0 maxpacket: 32 [ 196.103107][ T5902] usb 3-1: config 0 interface 0 has no altsetting 0 [ 196.119443][ T5902] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 196.129119][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.140822][ T5902] usb 3-1: Product: syz [ 196.211613][ T5902] usb 3-1: Manufacturer: syz [ 196.216354][ T5902] usb 3-1: SerialNumber: syz [ 196.265101][ T5902] usb 3-1: config 0 descriptor?? [ 196.659849][ T5862] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 196.693972][ T7576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.707563][ T7576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.719471][ T7576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.011256][ T7576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.089889][ T5862] usb 1-1: Using ep0 maxpacket: 8 [ 197.107264][ T5862] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.141112][ T7603] vivid-000: disconnect [ 197.152539][ T5862] usb 1-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 197.170647][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.183845][ T5862] usb 1-1: Product: syz [ 197.197992][ T5862] usb 1-1: Manufacturer: syz [ 197.205606][ T5862] usb 1-1: SerialNumber: syz [ 197.217315][ T5862] usb 1-1: config 0 descriptor?? [ 197.365437][ T5902] gs_usb 3-1:0.0: Configuring for 195 interfaces [ 197.421772][ T5902] gs_usb 3-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 197.570724][ T7576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.642289][ T5902] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -22 [ 197.693520][ T7576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.722390][ T5862] msi2500 1-1:0.0: Registered as swradio24 [ 197.728284][ T5862] msi2500 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 198.042795][ T7576] 9pnet: Could not find request transport: xen [ 198.122333][ T7574] vivid-000: reconnect [ 198.135116][ T5865] usb 3-1: USB disconnect, device number 25 [ 198.162238][ T5914] usb 1-1: USB disconnect, device number 24 [ 198.539802][ T5865] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 199.079817][ T5865] usb 5-1: Using ep0 maxpacket: 32 [ 199.088114][ T5865] usb 5-1: config 0 interface 0 has no altsetting 0 [ 199.106727][ T5865] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 199.120478][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.128519][ T5865] usb 5-1: Product: syz [ 199.138830][ T5865] usb 5-1: Manufacturer: syz [ 199.152760][ T5865] usb 5-1: SerialNumber: syz [ 199.168394][ T5865] usb 5-1: config 0 descriptor?? [ 199.190252][ T7631] block nbd2: shutting down sockets [ 199.516699][ T7623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.526042][ T7623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.542104][ T7623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.551922][ T7623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.102309][ T7640] vivid-004: disconnect [ 200.312910][ T5865] gs_usb 5-1:0.0: Configuring for 195 interfaces [ 200.319273][ T5865] gs_usb 5-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 200.340171][ T5865] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -22 [ 200.415238][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 200.595196][ T5862] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 200.634876][ T7623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.643920][ T7623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.671879][ T7623] 9pnet: Could not find request transport: xen [ 200.681510][ T7622] vivid-004: reconnect [ 200.686123][ T5865] usb 5-1: USB disconnect, device number 26 [ 200.759761][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 200.762944][ T5862] usb 1-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 200.766367][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.773862][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.775600][ T5862] usb 1-1: config 0 descriptor?? [ 200.815060][ T5862] usb 1-1: Invalid firmware size=18. [ 200.823192][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 200.832832][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.841503][ T9] usb 2-1: Product: syz [ 200.845775][ T9] usb 2-1: Manufacturer: syz [ 200.850561][ T9] usb 2-1: SerialNumber: syz [ 200.856697][ T9] usb 2-1: config 0 descriptor?? [ 200.885048][ T9] msi2500 2-1:0.0: Registered as swradio24 [ 200.891472][ T9] msi2500 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 201.253053][ T7657] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 201.958844][ T7663] netlink: 24 bytes leftover after parsing attributes in process `syz.2.481'. [ 201.974495][ T5865] usb 2-1: USB disconnect, device number 19 [ 202.651978][ T9] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 202.821100][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 202.832141][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 202.843681][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 202.854687][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 202.864454][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 202.879499][ T9] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 202.888624][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.896706][ T9] usb 5-1: Product: syz [ 202.900948][ T9] usb 5-1: Manufacturer: syz [ 202.905600][ T9] usb 5-1: SerialNumber: syz [ 202.911453][ T9] usb 5-1: config 0 descriptor?? [ 202.918887][ T9] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input33 [ 202.969815][ T5902] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 203.119853][ T5902] usb 3-1: Using ep0 maxpacket: 32 [ 203.126377][ T5862] usb 5-1: USB disconnect, device number 27 [ 203.133478][ T5902] usb 3-1: config 0 interface 0 has no altsetting 0 [ 203.143971][ T5902] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 203.153532][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.162180][ T5902] usb 3-1: Product: syz [ 203.169682][ T5902] usb 3-1: Manufacturer: syz [ 203.174774][ T5902] usb 3-1: SerialNumber: syz [ 203.181089][ T5902] usb 3-1: config 0 descriptor?? [ 203.210539][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 203.278685][ T5865] usb 1-1: USB disconnect, device number 25 [ 203.391281][ T7673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.402797][ T7673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.412023][ T7673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.422607][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 203.434614][ T7673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.444527][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.457849][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 203.466947][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.475089][ T9] usb 2-1: Product: syz [ 203.479272][ T9] usb 2-1: Manufacturer: syz [ 203.483927][ T9] usb 2-1: SerialNumber: syz [ 203.880767][ T9] usb 2-1: config 0 descriptor?? [ 203.906182][ T5902] gs_usb 3-1:0.0: Configuring for 195 interfaces [ 203.919947][ T5902] gs_usb 3-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 203.920917][ T9] msi2500 2-1:0.0: Registered as swradio24 [ 203.933772][ T9] msi2500 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 203.944188][ T5902] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -22 [ 204.119138][ T7679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.131012][ T7679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.592297][ T9] usb 2-1: USB disconnect, device number 20 [ 205.283323][ T30] kauditd_printk_skb: 71 callbacks suppressed [ 205.283336][ T30] audit: type=1326 audit(1746140327.924:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7695 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6978e969 code=0x7ffc0000 [ 205.314762][ T30] audit: type=1326 audit(1746140327.924:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7695 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f4f6978e969 code=0x7ffc0000 [ 205.409436][ T5865] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 205.416313][ T30] audit: type=1326 audit(1746140327.924:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7695 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6978e969 code=0x7ffc0000 [ 205.441413][ T30] audit: type=1326 audit(1746140327.924:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7695 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4f6978d2d0 code=0x7ffc0000 [ 205.465978][ T30] audit: type=1326 audit(1746140327.924:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7695 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6978e969 code=0x7ffc0000 [ 205.490520][ T30] audit: type=1326 audit(1746140327.924:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7695 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f4f6978e969 code=0x7ffc0000 [ 205.514317][ T30] audit: type=1326 audit(1746140327.924:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7695 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6978e969 code=0x7ffc0000 [ 205.537571][ C0] vkms_vblank_simulate: vblank timer overrun [ 205.543945][ T30] audit: type=1326 audit(1746140327.924:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7695 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6978e969 code=0x7ffc0000 [ 205.574871][ T30] audit: type=1326 audit(1746140327.924:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7695 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4f6978e969 code=0x7ffc0000 [ 205.600603][ T30] audit: type=1326 audit(1746140327.924:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7695 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6978e969 code=0x7ffc0000 [ 205.623863][ C0] vkms_vblank_simulate: vblank timer overrun [ 205.633562][ T5865] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 205.645469][ T5865] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 205.662674][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 205.682384][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 205.694199][ T5865] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 205.711705][ T5865] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 205.723808][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.731989][ T5865] usb 5-1: Product: syz [ 205.736289][ T5865] usb 5-1: Manufacturer: syz [ 205.743655][ T5865] usb 5-1: SerialNumber: syz [ 205.757572][ T5865] usb 5-1: config 0 descriptor?? [ 205.772970][ T5865] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input34 [ 205.836302][ T5914] usb 3-1: USB disconnect, device number 26 [ 206.009600][ T5813] Bluetooth: hci4: unexpected event for opcode 0x0c20 [ 206.017457][ T5865] usb 5-1: USB disconnect, device number 28 [ 206.239814][ T5914] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 206.349951][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 206.389872][ T5914] usb 3-1: Using ep0 maxpacket: 8 [ 206.396125][ T5914] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.407848][ T5914] usb 3-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 206.417785][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.426060][ T5914] usb 3-1: Product: syz [ 206.430425][ T5914] usb 3-1: Manufacturer: syz [ 206.435209][ T5914] usb 3-1: SerialNumber: syz [ 206.441869][ T5914] usb 3-1: config 0 descriptor?? [ 206.466457][ T5914] msi2500 3-1:0.0: Registered as swradio24 [ 206.472328][ T5914] msi2500 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 206.509783][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 206.516177][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.536146][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 206.545414][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.564214][ T9] usb 2-1: Product: syz [ 206.568383][ T9] usb 2-1: Manufacturer: syz [ 206.573948][ T9] usb 2-1: SerialNumber: syz [ 206.584352][ T9] usb 2-1: config 0 descriptor?? [ 206.666284][ T5902] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 206.825261][ T5902] usb 4-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 207.169761][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.250449][ T9] videodev: could not get a free minor [ 207.264535][ T5902] usb 4-1: config 0 descriptor?? [ 207.397098][ T9] msi2500 2-1:0.0: Failed to register as video device (-23) [ 207.399309][ T5902] usb 4-1: Invalid firmware size=18. [ 207.638195][ T9] msi2500 2-1:0.0: probe with driver msi2500 failed with error -23 [ 207.782632][ T9] usb 2-1: USB disconnect, device number 21 [ 207.954571][ T7736] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 208.345773][ T5865] usb 3-1: USB disconnect, device number 27 [ 209.414450][ T52] usb 4-1: USB disconnect, device number 20 [ 209.531053][ T7760] netlink: 24 bytes leftover after parsing attributes in process `syz.3.507'. [ 210.080947][ T5902] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 210.259739][ T5902] usb 3-1: Using ep0 maxpacket: 32 [ 210.398209][ T5902] usb 3-1: config 0 interface 0 has no altsetting 0 [ 210.407529][ T5902] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 210.417579][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.437619][ T5902] usb 3-1: Product: syz [ 210.867626][ T5902] usb 3-1: Manufacturer: syz [ 210.891906][ T5902] usb 3-1: SerialNumber: syz [ 210.914469][ T5902] usb 3-1: config 0 descriptor?? [ 211.136824][ T7758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.145533][ T7758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.157208][ T7758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.165989][ T7758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.238070][ T7779] vivid-000: disconnect [ 211.635860][ T5902] gs_usb 3-1:0.0: Configuring for 195 interfaces [ 211.643655][ T5902] gs_usb 3-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 211.654562][ T5902] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -22 [ 211.839403][ T7758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.852199][ T7758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.868787][ T5865] usb 3-1: USB disconnect, device number 28 [ 212.187212][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 212.187228][ T30] audit: type=1326 audit(1746140334.824:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7788 comm="syz.3.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6978e969 code=0x7ffc0000 [ 212.216954][ T30] audit: type=1326 audit(1746140334.824:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7788 comm="syz.3.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f6978e969 code=0x7ffc0000 [ 212.240230][ C0] vkms_vblank_simulate: vblank timer overrun [ 212.256360][ T30] audit: type=1326 audit(1746140334.824:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7788 comm="syz.3.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6978e969 code=0x7ffc0000 [ 212.340468][ T30] audit: type=1326 audit(1746140334.824:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7788 comm="syz.3.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f4f6978e969 code=0x7ffc0000 [ 212.389809][ T30] audit: type=1326 audit(1746140334.824:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7788 comm="syz.3.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6978e969 code=0x7ffc0000 [ 212.435616][ T30] audit: type=1326 audit(1746140334.824:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7788 comm="syz.3.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4f6978e969 code=0x7ffc0000 [ 212.493913][ T30] audit: type=1326 audit(1746140334.824:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7788 comm="syz.3.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6978e969 code=0x7ffc0000 [ 212.555953][ T30] audit: type=1326 audit(1746140334.834:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7788 comm="syz.3.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4f6978e969 code=0x7ffc0000 [ 212.583638][ T30] audit: type=1326 audit(1746140334.834:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7788 comm="syz.3.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6978e969 code=0x7ffc0000 [ 212.606934][ C0] vkms_vblank_simulate: vblank timer overrun [ 212.641228][ T30] audit: type=1326 audit(1746140334.854:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7788 comm="syz.3.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f4f6978e969 code=0x7ffc0000 [ 213.070611][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 213.305544][ T7806] netlink: 16 bytes leftover after parsing attributes in process `syz.0.520'. [ 213.337594][ T7775] vivid-000: reconnect [ 213.419760][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 213.446101][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.465482][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 213.479750][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.499762][ T10] usb 4-1: Product: syz [ 213.508077][ T10] usb 4-1: Manufacturer: syz [ 213.518192][ T10] usb 4-1: SerialNumber: syz [ 213.573010][ T10] usb 4-1: config 0 descriptor?? [ 214.008919][ T5914] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 214.392049][ T5914] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.402709][ T5914] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 214.429827][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.449243][ T10] msi2500 4-1:0.0: Registered as swradio24 [ 214.456390][ T5914] usb 1-1: config 0 descriptor?? [ 214.466774][ T10] msi2500 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 214.478849][ T5914] pwc: Askey VC010 type 2 USB webcam detected. [ 214.497000][ T10] usb 4-1: USB disconnect, device number 21 [ 215.063896][ T5914] pwc: recv_control_msg error -32 req 02 val 2b00 [ 215.072077][ T5914] pwc: recv_control_msg error -32 req 02 val 2700 [ 215.085338][ T5914] pwc: recv_control_msg error -32 req 02 val 2c00 [ 215.102430][ T5914] pwc: recv_control_msg error -32 req 04 val 1000 [ 215.109733][ T5914] pwc: recv_control_msg error -32 req 04 val 1300 [ 215.118209][ T5914] pwc: recv_control_msg error -32 req 04 val 1400 [ 215.136845][ T5914] pwc: recv_control_msg error -32 req 02 val 2000 [ 215.145653][ T5914] pwc: recv_control_msg error -32 req 02 val 2100 [ 215.153145][ T5914] pwc: recv_control_msg error -32 req 04 val 1500 [ 215.185346][ T7841] block nbd2: shutting down sockets [ 215.370188][ T5914] pwc: recv_control_msg error -71 req 02 val 2400 [ 215.378792][ T5914] pwc: recv_control_msg error -71 req 02 val 2600 [ 215.385977][ T5914] pwc: recv_control_msg error -71 req 02 val 2900 [ 215.393754][ T5914] pwc: recv_control_msg error -71 req 02 val 2800 [ 215.408086][ T5914] pwc: recv_control_msg error -71 req 04 val 1100 [ 215.419961][ T5865] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 215.440352][ T5914] pwc: recv_control_msg error -71 req 04 val 1200 [ 215.468071][ T5914] pwc: Registered as video103. [ 215.477071][ T5914] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input35 [ 215.543418][ T5914] usb 1-1: USB disconnect, device number 26 [ 215.641265][ T5865] usb 5-1: Using ep0 maxpacket: 32 [ 215.656726][ T5865] usb 5-1: config 0 interface 0 has no altsetting 0 [ 215.669913][ T5865] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 215.859779][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.878178][ T5865] usb 5-1: Product: syz [ 215.884909][ T5865] usb 5-1: Manufacturer: syz [ 215.893022][ T5865] usb 5-1: SerialNumber: syz [ 215.901478][ T5865] usb 5-1: config 0 descriptor?? [ 216.079060][ T7855] netlink: 16 bytes leftover after parsing attributes in process `syz.3.533'. [ 216.156179][ T7837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.373261][ T7837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.555475][ T7837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.565900][ T7837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.055428][ T5865] gs_usb 5-1:0.0: Couldn't send data format (err=-110) [ 217.064951][ T5865] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -110 [ 217.095120][ T7837] vivid-004: disconnect [ 217.297705][ T7864] block nbd0: shutting down sockets [ 217.816346][ T7874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.826751][ T7874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.267913][ T7878] bridge0: port 3(vlan2) entered disabled state [ 218.274352][ T7878] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.281854][ T7878] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.300338][ T7878] bridge0: entered allmulticast mode [ 218.317350][ T7878] vlan2: left promiscuous mode [ 218.322311][ T7878] vlan1: left promiscuous mode [ 218.330013][ T7878] bridge0: port 3(vlan2) entered disabled state [ 218.345018][ T7878] bridge_slave_1: left allmulticast mode [ 218.351297][ T7878] bridge_slave_1: left promiscuous mode [ 218.357464][ T7878] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.370405][ T7878] bridge_slave_0: left allmulticast mode [ 218.376666][ T7878] bridge_slave_0: left promiscuous mode [ 218.383741][ T7878] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.864670][ T7837] vivid-004: reconnect [ 218.870673][ T5865] usb 5-1: USB disconnect, device number 29 [ 218.990022][ T52] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 219.159754][ T52] usb 1-1: Using ep0 maxpacket: 8 [ 219.166511][ T52] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.198350][ T52] usb 1-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 219.207465][ T52] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.216051][ T5865] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 219.216381][ T52] usb 1-1: Product: syz [ 219.227826][ T52] usb 1-1: Manufacturer: syz [ 219.243321][ T52] usb 1-1: SerialNumber: syz [ 219.260421][ T52] usb 1-1: config 0 descriptor?? [ 219.308036][ T52] msi2500 1-1:0.0: Registered as swradio24 [ 219.368939][ T52] msi2500 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 219.401273][ T5865] usb 5-1: Using ep0 maxpacket: 8 [ 219.408530][ T5865] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.765908][ T5865] usb 5-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 219.959368][ T52] usb 1-1: USB disconnect, device number 27 [ 219.996704][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.011201][ T5865] usb 5-1: Product: syz [ 220.018730][ T5865] usb 5-1: Manufacturer: syz [ 220.023522][ T5865] usb 5-1: SerialNumber: syz [ 220.041728][ T5865] usb 5-1: config 0 descriptor?? [ 220.055573][ T7900] netlink: 16 bytes leftover after parsing attributes in process `syz.3.545'. [ 220.128485][ T5865] msi2500 5-1:0.0: Registered as swradio24 [ 220.134653][ T5865] msi2500 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 220.339849][ T5902] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 220.400925][ T7910] block nbd2: shutting down sockets [ 220.557043][ T52] usb 5-1: USB disconnect, device number 30 [ 220.589790][ T5865] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 220.591019][ T5902] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.610702][ T5902] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 220.620637][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.638731][ T5902] usb 2-1: config 0 descriptor?? [ 220.648534][ T5902] pwc: Askey VC010 type 2 USB webcam detected. [ 220.763917][ T5865] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 220.776663][ T5865] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 220.791795][ T5865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 220.802955][ T5865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 220.813370][ T5865] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 220.838255][ T5865] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 220.876397][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.885756][ T5865] usb 4-1: Product: syz [ 220.893456][ T5865] usb 4-1: Manufacturer: syz [ 220.898124][ T5865] usb 4-1: SerialNumber: syz [ 220.905623][ T5865] usb 4-1: config 0 descriptor?? [ 220.915665][ T5865] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input36 [ 221.082670][ T5902] pwc: recv_control_msg error -32 req 02 val 2b00 [ 221.089793][ T5902] pwc: recv_control_msg error -32 req 02 val 2700 [ 221.112002][ T5902] pwc: recv_control_msg error -32 req 02 val 2c00 [ 221.119265][ T5902] pwc: recv_control_msg error -32 req 04 val 1000 [ 221.126866][ T5902] pwc: recv_control_msg error -32 req 04 val 1300 [ 221.133412][ T52] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 221.152006][ T5902] pwc: recv_control_msg error -32 req 04 val 1400 [ 221.162339][ T5902] pwc: recv_control_msg error -32 req 02 val 2000 [ 221.169234][ T5865] usb 4-1: USB disconnect, device number 22 [ 221.190342][ T5902] pwc: recv_control_msg error -32 req 02 val 2100 [ 221.207340][ T5902] pwc: recv_control_msg error -32 req 04 val 1500 [ 221.336035][ T52] usb 1-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 221.368674][ T52] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.505433][ T52] usb 1-1: config 0 descriptor?? [ 221.523859][ T5902] pwc: recv_control_msg error -71 req 02 val 2400 [ 221.563970][ T52] usb 1-1: Invalid firmware size=18. [ 221.590915][ T5902] pwc: recv_control_msg error -71 req 02 val 2600 [ 221.633473][ T5902] pwc: recv_control_msg error -71 req 02 val 2900 [ 221.663109][ T5902] pwc: recv_control_msg error -71 req 02 val 2800 [ 221.709769][ T5902] pwc: recv_control_msg error -71 req 04 val 1100 [ 221.716579][ T5902] pwc: recv_control_msg error -71 req 04 val 1200 [ 221.731599][ T5902] pwc: Registered as video103. [ 221.737146][ T5902] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input37 [ 221.757418][ T5902] usb 2-1: USB disconnect, device number 22 [ 222.038829][ T7933] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 222.589799][ T5865] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 222.739772][ T5865] usb 3-1: Using ep0 maxpacket: 32 [ 222.746069][ T5865] usb 3-1: config 0 interface 0 has no altsetting 0 [ 222.756466][ T5865] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 222.773488][ T5865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.783515][ T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 222.796277][ T5865] usb 3-1: Product: syz [ 222.806544][ T5865] usb 3-1: Manufacturer: syz [ 222.813221][ T5865] usb 3-1: SerialNumber: syz [ 222.820901][ T5865] usb 3-1: config 0 descriptor?? [ 222.961100][ T9] usb 5-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 222.970428][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.983531][ T9] usb 5-1: config 0 descriptor?? [ 222.990763][ T9] usb 5-1: Invalid firmware size=18. [ 223.032151][ T7929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.040975][ T7929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.050935][ T7929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.062828][ T7929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.130830][ T7945] vivid-000: disconnect [ 223.339850][ T5865] gs_usb 3-1:0.0: Configuring for 195 interfaces [ 223.355327][ T5865] gs_usb 3-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 223.364582][ T5865] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -22 [ 223.484909][ T7950] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 223.793166][ T7929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.801900][ T7929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.884415][ T7928] vivid-000: reconnect [ 223.967332][ T5866] usb 1-1: USB disconnect, device number 28 [ 223.968565][ T5914] usb 3-1: USB disconnect, device number 29 [ 224.699808][ T5866] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 224.711164][ T5865] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 224.869870][ T5865] usb 1-1: Using ep0 maxpacket: 8 [ 224.887568][ T5865] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.902629][ T5865] usb 1-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 224.919764][ T5866] usb 4-1: Using ep0 maxpacket: 8 [ 225.308203][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.320491][ T5865] usb 1-1: Product: syz [ 225.324702][ T5865] usb 1-1: Manufacturer: syz [ 225.329342][ T5865] usb 1-1: SerialNumber: syz [ 225.335655][ T5865] usb 1-1: config 0 descriptor?? [ 225.361475][ T5866] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.376104][ T5866] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 225.382809][ T5865] msi2500 1-1:0.0: Registered as swradio24 [ 225.392170][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.392858][ T5865] msi2500 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 225.411620][ T5866] usb 4-1: Product: syz [ 225.415840][ T5866] usb 4-1: Manufacturer: syz [ 225.420522][ T5866] usb 4-1: SerialNumber: syz [ 225.433008][ T5866] usb 4-1: config 0 descriptor?? [ 225.476622][ T5866] videodev: could not get a free minor [ 225.483720][ T5866] msi2500 4-1:0.0: Failed to register as video device (-23) [ 225.508617][ T5866] msi2500 4-1:0.0: probe with driver msi2500 failed with error -23 [ 225.605980][ T5865] usb 5-1: USB disconnect, device number 31 [ 226.128706][ T5914] usb 1-1: USB disconnect, device number 29 [ 226.154646][ T5865] usb 4-1: USB disconnect, device number 23 [ 227.119817][ T5914] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 227.302957][ T5914] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.313142][ T5914] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 227.322244][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.331500][ T5914] usb 5-1: config 0 descriptor?? [ 227.338151][ T5914] pwc: Askey VC010 type 2 USB webcam detected. [ 227.359971][ T52] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 227.500146][ T5865] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 227.511025][ T52] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 227.521875][ T52] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 227.533400][ T52] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 227.544386][ T52] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 227.554302][ T52] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 227.568984][ T52] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 227.578135][ T52] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.586303][ T52] usb 3-1: Product: syz [ 227.590601][ T52] usb 3-1: Manufacturer: syz [ 227.595188][ T52] usb 3-1: SerialNumber: syz [ 227.603367][ T52] usb 3-1: config 0 descriptor?? [ 227.613048][ T52] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input38 [ 227.651044][ T5865] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 227.661936][ T5865] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 227.673468][ T5865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 227.687353][ T5865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 227.697118][ T5865] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 227.712843][ T5865] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 227.721967][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.729996][ T5865] usb 4-1: Product: syz [ 227.734163][ T5865] usb 4-1: Manufacturer: syz [ 227.738764][ T5865] usb 4-1: SerialNumber: syz [ 227.744892][ T5865] usb 4-1: config 0 descriptor?? [ 227.750285][ T5914] pwc: recv_control_msg error -32 req 02 val 2b00 [ 227.758576][ T5865] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input39 [ 227.769310][ T5914] pwc: recv_control_msg error -32 req 02 val 2700 [ 227.776905][ T5914] pwc: recv_control_msg error -32 req 02 val 2c00 [ 227.786031][ T5914] pwc: recv_control_msg error -32 req 04 val 1000 [ 227.794594][ T5914] pwc: recv_control_msg error -32 req 04 val 1300 [ 227.801696][ T5914] pwc: recv_control_msg error -32 req 04 val 1400 [ 227.808588][ T5914] pwc: recv_control_msg error -32 req 02 val 2000 [ 227.819270][ T5914] pwc: recv_control_msg error -32 req 02 val 2100 [ 227.826434][ T910] usb 3-1: USB disconnect, device number 30 [ 227.827018][ T5914] pwc: recv_control_msg error -32 req 04 val 1500 [ 227.976076][ T5813] Bluetooth: hci1: unexpected event for opcode 0x0c20 [ 227.987460][ T5865] usb 4-1: USB disconnect, device number 24 [ 228.126778][ T5914] pwc: recv_control_msg error -71 req 02 val 2400 [ 228.133813][ T5914] pwc: recv_control_msg error -71 req 02 val 2600 [ 228.140591][ T5914] pwc: recv_control_msg error -71 req 02 val 2900 [ 228.147229][ T5914] pwc: recv_control_msg error -71 req 02 val 2800 [ 228.153981][ T5914] pwc: recv_control_msg error -71 req 04 val 1100 [ 228.161694][ T5914] pwc: recv_control_msg error -71 req 04 val 1200 [ 228.168881][ T5914] pwc: Registered as video103. [ 228.174420][ T5914] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input40 [ 228.186987][ T5914] usb 5-1: USB disconnect, device number 32 [ 228.272455][ T8008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.573'. [ 228.551821][ T910] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 228.770064][ T910] usb 1-1: Using ep0 maxpacket: 32 [ 228.835353][ T910] usb 1-1: config 0 interface 0 has no altsetting 0 [ 228.865274][ T910] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 228.874502][ T910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.882678][ T910] usb 1-1: Product: syz [ 228.887172][ T910] usb 1-1: Manufacturer: syz [ 228.894962][ T910] usb 1-1: SerialNumber: syz [ 228.915512][ T910] usb 1-1: config 0 descriptor?? [ 229.126751][ T8010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.146855][ T8010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.198382][ T5914] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 229.214292][ T8010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.259996][ T8010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.326611][ T8025] vivid-001: disconnect [ 229.351155][ T5914] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 229.370569][ T5914] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 229.403879][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 229.439593][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 229.467405][ T5914] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 229.514415][ T5914] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 229.525432][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.534177][ T910] gs_usb 1-1:0.0: Configuring for 195 interfaces [ 229.538421][ T5914] usb 5-1: Product: syz [ 229.548316][ T910] gs_usb 1-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 229.548367][ T5914] usb 5-1: Manufacturer: syz [ 229.563001][ T5914] usb 5-1: SerialNumber: syz [ 229.569750][ T5914] usb 5-1: config 0 descriptor?? [ 229.581721][ T910] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -22 [ 229.594174][ T5914] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input42 [ 229.884032][ T8010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.925132][ T8010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.939730][ T5813] Bluetooth: hci4: unexpected event for opcode 0x0c20 [ 229.949186][ T5914] usb 5-1: USB disconnect, device number 33 [ 230.101239][ T8009] vivid-001: reconnect [ 230.106806][ T5864] usb 1-1: USB disconnect, device number 30 [ 230.410708][ T5865] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 230.669748][ T5865] usb 4-1: Using ep0 maxpacket: 8 [ 230.687710][ T5865] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.055115][ T5865] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 231.064230][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.072851][ T5865] usb 4-1: Product: syz [ 231.077595][ T5865] usb 4-1: Manufacturer: syz [ 231.099663][ T5865] usb 4-1: SerialNumber: syz [ 231.106375][ T5865] usb 4-1: config 0 descriptor?? [ 231.153660][ T5865] msi2500 4-1:0.0: Registered as swradio24 [ 231.161264][ T5865] msi2500 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 231.559975][ T5865] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 231.638470][ T5864] usb 4-1: USB disconnect, device number 25 [ 231.783734][ T5865] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 231.968638][ T5865] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 232.054203][ T5865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 232.082307][ T5865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 49351, setting to 64 [ 232.116320][ T5865] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 232.158910][ T5865] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 232.198447][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.219431][ T5865] usb 2-1: Product: syz [ 232.225398][ T5865] usb 2-1: Manufacturer: syz [ 232.231365][ T5865] usb 2-1: SerialNumber: syz [ 232.238100][ T5865] usb 2-1: config 0 descriptor?? [ 232.246646][ T8051] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 232.287209][ T5865] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input44 [ 232.369767][ T5866] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 232.487341][ T5914] usb 2-1: USB disconnect, device number 23 [ 232.522393][ T5866] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.549751][ T5866] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 232.558819][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.567147][ T5865] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 232.576441][ T5866] usb 3-1: config 0 descriptor?? [ 232.580056][ T5866] pwc: Askey VC010 type 2 USB webcam detected. [ 232.709812][ T5865] usb 4-1: Using ep0 maxpacket: 8 [ 232.718775][ T5865] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.735671][ T5865] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 232.747942][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.758492][ T5865] usb 4-1: Product: syz [ 232.762714][ T5865] usb 4-1: Manufacturer: syz [ 232.767331][ T5865] usb 4-1: SerialNumber: syz [ 232.776956][ T5865] usb 4-1: config 0 descriptor?? [ 232.817464][ T5865] msi2500 4-1:0.0: Registered as swradio24 [ 232.823464][ T5865] msi2500 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 233.000188][ T5866] pwc: recv_control_msg error -32 req 02 val 2b00 [ 233.007161][ T5866] pwc: recv_control_msg error -32 req 02 val 2700 [ 233.014406][ T5866] pwc: recv_control_msg error -32 req 02 val 2c00 [ 233.030226][ T5866] pwc: recv_control_msg error -32 req 04 val 1000 [ 233.037718][ T5866] pwc: recv_control_msg error -32 req 04 val 1300 [ 233.044538][ T5866] pwc: recv_control_msg error -32 req 04 val 1400 [ 233.051405][ T5866] pwc: recv_control_msg error -32 req 02 val 2000 [ 233.058204][ T5866] pwc: recv_control_msg error -32 req 02 val 2100 [ 233.065018][ T5866] pwc: recv_control_msg error -32 req 04 val 1500 [ 233.275548][ T5866] pwc: recv_control_msg error -71 req 02 val 2400 [ 233.287774][ T5866] pwc: recv_control_msg error -71 req 02 val 2600 [ 233.301842][ T5866] pwc: recv_control_msg error -71 req 02 val 2900 [ 233.320104][ T5866] pwc: recv_control_msg error -71 req 02 val 2800 [ 233.355385][ T5866] pwc: recv_control_msg error -71 req 04 val 1100 [ 233.387331][ T5866] pwc: recv_control_msg error -71 req 04 val 1200 [ 233.417194][ T5866] videodev: could not get a free minor [ 233.429507][ T5866] pwc: Failed to register as video device (-23). [ 233.483829][ T5866] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -23 [ 233.494016][ T5864] usb 4-1: USB disconnect, device number 26 [ 233.504671][ T5866] usb 3-1: USB disconnect, device number 31 [ 235.853285][ T5864] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 235.925024][ T8105] block nbd4: shutting down sockets [ 236.204197][ T5864] usb 1-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 236.313192][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.340856][ T5864] usb 1-1: config 0 descriptor?? [ 236.380734][ T5864] usb 1-1: Invalid firmware size=18. [ 236.825199][ T8113] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 237.666387][ T52] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 238.119827][ T52] usb 5-1: Using ep0 maxpacket: 8 [ 238.128633][ T52] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.143940][ T52] usb 5-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 238.153438][ T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.162732][ T52] usb 5-1: Product: syz [ 238.166916][ T52] usb 5-1: Manufacturer: syz [ 238.171565][ T52] usb 5-1: SerialNumber: syz [ 238.177497][ T52] usb 5-1: config 0 descriptor?? [ 238.204562][ T52] msi2500 5-1:0.0: Registered as swradio24 [ 238.210545][ T52] msi2500 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 238.643586][ T5866] usb 1-1: USB disconnect, device number 31 [ 238.808815][ T5865] usb 5-1: USB disconnect, device number 34 [ 240.309763][ T5866] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 240.749779][ T5914] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 240.856867][ T5866] usb 4-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 240.866016][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.889779][ T5866] usb 4-1: config 0 descriptor?? [ 240.911902][ T5866] usb 4-1: Invalid firmware size=18. [ 240.934052][ T5914] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.973592][ T5914] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 240.987002][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.193899][ T5914] usb 1-1: config 0 descriptor?? [ 241.284313][ T5914] pwc: Askey VC010 type 2 USB webcam detected. [ 241.615866][ T8155] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 242.040398][ T5914] pwc: recv_control_msg error -32 req 02 val 2b00 [ 242.048399][ T5914] pwc: recv_control_msg error -32 req 02 val 2700 [ 242.068061][ T5914] pwc: recv_control_msg error -32 req 02 val 2c00 [ 242.098393][ T5914] pwc: recv_control_msg error -32 req 04 val 1000 [ 242.105475][ T5914] pwc: recv_control_msg error -32 req 04 val 1300 [ 242.114204][ T5914] pwc: recv_control_msg error -32 req 04 val 1400 [ 242.132544][ T5914] pwc: recv_control_msg error -32 req 02 val 2000 [ 242.148589][ T5914] pwc: recv_control_msg error -32 req 02 val 2100 [ 242.166565][ T5914] pwc: recv_control_msg error -32 req 04 val 1500 [ 242.268448][ T8160] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.275968][ T8160] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.306087][ T8160] bridge0: entered allmulticast mode [ 242.320187][ T8160] bridge_slave_1: left allmulticast mode [ 242.325872][ T8160] bridge_slave_1: left promiscuous mode [ 242.331834][ T8160] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.349482][ T8160] bridge_slave_0: left allmulticast mode [ 242.382591][ T8160] bridge_slave_0: left promiscuous mode [ 242.392503][ T5914] pwc: recv_control_msg error -71 req 02 val 2400 [ 242.399320][ T8160] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.499800][ T5914] pwc: recv_control_msg error -71 req 02 val 2600 [ 242.621901][ T5914] pwc: recv_control_msg error -71 req 02 val 2900 [ 242.646529][ T5914] pwc: recv_control_msg error -71 req 02 val 2800 [ 242.672852][ T8163] netlink: 76 bytes leftover after parsing attributes in process `syz.1.614'. [ 242.776897][ T5914] pwc: recv_control_msg error -71 req 04 val 1100 [ 242.790680][ T5914] pwc: recv_control_msg error -71 req 04 val 1200 [ 242.817788][ T5914] pwc: Registered as video103. [ 242.837285][ T5914] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input46 [ 242.854705][ T5914] usb 1-1: USB disconnect, device number 32 [ 242.869790][ T5901] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 243.220982][ T5866] usb 4-1: USB disconnect, device number 27 [ 243.305344][ T5901] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 243.464738][ T5901] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 243.517564][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 243.529709][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 243.549991][ T5901] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 243.577315][ T5901] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 243.627246][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.657615][ T5901] usb 3-1: Product: syz [ 243.669954][ T5901] usb 3-1: Manufacturer: syz [ 243.674595][ T5901] usb 3-1: SerialNumber: syz [ 243.774632][ T5901] usb 3-1: config 0 descriptor?? [ 243.892509][ T5901] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input47 [ 244.151173][ T5901] usb 3-1: USB disconnect, device number 32 [ 244.214278][ T5914] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 244.674923][ T5914] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.685132][ T5914] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 244.694324][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.704017][ T5914] usb 4-1: config 0 descriptor?? [ 244.712103][ T5914] pwc: Askey VC010 type 2 USB webcam detected. [ 245.134136][ T5914] pwc: recv_control_msg error -32 req 02 val 2b00 [ 245.186251][ T5914] pwc: recv_control_msg error -32 req 02 val 2700 [ 245.232578][ T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 245.240581][ T5914] pwc: recv_control_msg error -32 req 02 val 2c00 [ 245.266238][ T5914] pwc: recv_control_msg error -32 req 04 val 1000 [ 245.323351][ T5914] pwc: recv_control_msg error -32 req 04 val 1300 [ 245.356673][ T5914] pwc: recv_control_msg error -32 req 04 val 1400 [ 245.383967][ T5914] pwc: recv_control_msg error -32 req 02 val 2000 [ 245.431157][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 245.436371][ T5914] pwc: recv_control_msg error -32 req 02 val 2100 [ 245.443684][ T5914] pwc: recv_control_msg error -32 req 04 val 1500 [ 245.451449][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 245.460677][ T9] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 245.469795][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.477795][ T9] usb 1-1: Product: syz [ 245.481996][ T9] usb 1-1: Manufacturer: syz [ 245.486604][ T9] usb 1-1: SerialNumber: syz [ 245.492628][ T9] usb 1-1: config 0 descriptor?? [ 245.652621][ T5914] pwc: recv_control_msg error -71 req 02 val 2400 [ 245.663535][ T5914] pwc: recv_control_msg error -71 req 02 val 2600 [ 245.671550][ T5914] pwc: recv_control_msg error -71 req 02 val 2900 [ 245.680527][ T5914] pwc: recv_control_msg error -71 req 02 val 2800 [ 245.687478][ T5914] pwc: recv_control_msg error -71 req 04 val 1100 [ 245.696935][ T5914] pwc: recv_control_msg error -71 req 04 val 1200 [ 245.708712][ T8196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.719367][ T5914] pwc: Registered as video103. [ 245.727672][ T5914] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input48 [ 245.740143][ T8196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.756076][ T8196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.775269][ T5914] usb 4-1: USB disconnect, device number 28 [ 245.782289][ T8196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.859214][ T8205] vivid-001: disconnect [ 245.962548][ T8207] block nbd4: shutting down sockets [ 246.169987][ T9] gs_usb 1-1:0.0: Configuring for 195 interfaces [ 246.176546][ T9] gs_usb 1-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 246.294594][ T9] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -22 [ 246.295550][ T8196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.318091][ T8196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.390661][ T8214] netlink: 76 bytes leftover after parsing attributes in process `syz.1.627'. [ 246.425908][ T8195] vivid-001: reconnect [ 246.483507][ T5901] usb 1-1: USB disconnect, device number 33 [ 246.748094][ T8223] netlink: 76 bytes leftover after parsing attributes in process `syz.1.629'. [ 247.709776][ T5866] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 247.861011][ T5866] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 247.872886][ T5866] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 247.885881][ T5866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 247.964716][ T5866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 248.089755][ T5866] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 248.139799][ T5866] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 248.148869][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.186247][ T5866] usb 4-1: Product: syz [ 248.217878][ T5866] usb 4-1: Manufacturer: syz [ 248.329844][ T5866] usb 4-1: SerialNumber: syz [ 248.481819][ T5866] usb 4-1: config 0 descriptor?? [ 248.610191][ T5866] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input49 [ 248.815649][ T10] usb 4-1: USB disconnect, device number 29 [ 249.477696][ T5866] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 249.962222][ T5866] usb 1-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 249.971392][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.980700][ T5866] usb 1-1: config 0 descriptor?? [ 249.987391][ T5866] usb 1-1: Invalid firmware size=18. [ 249.997404][ T8260] netlink: 76 bytes leftover after parsing attributes in process `syz.4.639'. [ 250.119771][ T10] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 250.331271][ T10] usb 4-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 250.340990][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.351605][ T10] usb 4-1: config 0 descriptor?? [ 250.359962][ T10] usb 4-1: Invalid firmware size=18. [ 250.360160][ T8270] block nbd2: shutting down sockets [ 251.025782][ T9] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 251.759928][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 251.767117][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 251.787095][ T9] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 251.804683][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.827378][ T9] usb 5-1: Product: syz [ 251.836697][ T9] usb 5-1: Manufacturer: syz [ 251.845038][ T9] usb 5-1: SerialNumber: syz [ 251.846500][ T5866] usb 1-1: USB disconnect, device number 34 [ 251.958117][ T9] usb 5-1: config 0 descriptor?? [ 252.197604][ T8272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.216632][ T8272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.226717][ T5866] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 252.246471][ T8272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.283022][ T8272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.398934][ T8288] vivid-004: disconnect [ 252.431282][ T5866] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 252.442155][ T5866] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 252.454264][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 252.465863][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 252.475709][ T5866] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 252.498740][ T5866] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 252.507860][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.516070][ T5866] usb 1-1: Product: syz [ 252.520323][ T5866] usb 1-1: Manufacturer: syz [ 252.525213][ T5866] usb 1-1: SerialNumber: syz [ 252.532011][ T5866] usb 1-1: config 0 descriptor?? [ 252.540435][ T5866] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input50 [ 252.613242][ T9] gs_usb 5-1:0.0: Configuring for 195 interfaces [ 252.619769][ T9] gs_usb 5-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 252.627676][ T9] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -22 [ 252.743437][ T5866] usb 1-1: USB disconnect, device number 35 [ 252.767795][ T9] usb 4-1: USB disconnect, device number 30 [ 252.821069][ T8272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.829958][ T8272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.874990][ T8271] vivid-004: reconnect [ 252.904787][ T10] usb 5-1: USB disconnect, device number 35 [ 253.599929][ T10] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 253.749832][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 253.758028][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.770671][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 253.779818][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.787824][ T10] usb 1-1: Product: syz [ 253.792013][ T10] usb 1-1: Manufacturer: syz [ 253.796630][ T10] usb 1-1: SerialNumber: syz [ 253.803133][ T10] usb 1-1: config 0 descriptor?? [ 253.883473][ T10] msi2500 1-1:0.0: Registered as swradio24 [ 253.889357][ T10] msi2500 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 254.670512][ T9] usb 1-1: USB disconnect, device number 36 [ 254.859778][ T8319] netlink: 76 bytes leftover after parsing attributes in process `syz.4.652'. [ 255.220212][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.226528][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.299841][ T10] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 257.310003][ T5901] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 257.371185][ T8347] netlink: 76 bytes leftover after parsing attributes in process `syz.1.661'. [ 257.500100][ T5901] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 257.535710][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 257.549643][ T5901] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 257.563051][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 257.575419][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 257.586986][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 257.609013][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 257.622059][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 257.623018][ T5901] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 257.631874][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 257.675806][ T10] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 257.688041][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.696293][ T10] usb 1-1: Product: syz [ 257.700527][ T10] usb 1-1: Manufacturer: syz [ 257.717303][ T10] usb 1-1: SerialNumber: syz [ 257.742434][ T5901] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 257.754712][ T10] usb 1-1: config 0 descriptor?? [ 257.755181][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.767936][ T5901] usb 5-1: Product: syz [ 257.773075][ T5901] usb 5-1: Manufacturer: syz [ 257.777777][ T5901] usb 5-1: SerialNumber: syz [ 257.797981][ T5901] usb 5-1: config 0 descriptor?? [ 257.802032][ T10] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input51 [ 258.100816][ T5901] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input52 [ 258.212927][ T10] usb 1-1: USB disconnect, device number 37 [ 258.948112][ T5813] Bluetooth: hci4: unexpected event for opcode 0x0c20 [ 258.959308][ T52] usb 5-1: USB disconnect, device number 36 [ 259.029893][ T5901] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 259.229916][ T5866] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 259.241195][ T8373] netlink: 76 bytes leftover after parsing attributes in process `syz.1.667'. [ 259.298955][ T5901] usb 3-1: Using ep0 maxpacket: 8 [ 259.324336][ T5901] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.341718][ T5901] usb 3-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 259.359755][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.369914][ T5901] usb 3-1: Product: syz [ 259.374342][ T5901] usb 3-1: Manufacturer: syz [ 259.378950][ T5901] usb 3-1: SerialNumber: syz [ 259.388063][ T5901] usb 3-1: config 0 descriptor?? [ 259.403861][ T5866] usb 1-1: Using ep0 maxpacket: 8 [ 259.420628][ T5866] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.442318][ T5866] usb 1-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 259.461685][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.480900][ T5866] usb 1-1: Product: syz [ 259.485195][ T5901] msi2500 3-1:0.0: Registered as swradio24 [ 259.491945][ T5901] msi2500 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 259.502710][ T5866] usb 1-1: Manufacturer: syz [ 259.509058][ T5866] usb 1-1: SerialNumber: syz [ 259.516824][ T5866] usb 1-1: config 0 descriptor?? [ 259.583201][ T5866] videodev: could not get a free minor [ 259.599963][ T8376] netlink: 76 bytes leftover after parsing attributes in process `syz.1.669'. [ 259.618226][ T5866] msi2500 1-1:0.0: Failed to register as video device (-23) [ 259.744367][ T5866] msi2500 1-1:0.0: probe with driver msi2500 failed with error -23 [ 260.464025][ T5914] usb 1-1: USB disconnect, device number 38 [ 260.774542][ T5901] usb 3-1: USB disconnect, device number 33 [ 262.615917][ T8423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.680'. [ 263.372758][ T5914] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 263.622384][ T5914] usb 3-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 263.634541][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.645599][ T5914] usb 3-1: config 0 descriptor?? [ 263.656582][ T5914] usb 3-1: Invalid firmware size=18. [ 265.403504][ T8457] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.411531][ T8457] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.424189][ T8457] bridge0: entered allmulticast mode [ 265.436372][ T8457] bridge_slave_1: left allmulticast mode [ 265.444660][ T8457] bridge_slave_1: left promiscuous mode [ 265.450403][ T8457] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.460078][ T8457] bridge_slave_0: left allmulticast mode [ 265.465747][ T8457] bridge_slave_0: left promiscuous mode [ 265.471621][ T8457] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.489764][ T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 265.623348][ T8460] netlink: 76 bytes leftover after parsing attributes in process `syz.0.690'. [ 265.879756][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 265.879803][ T5901] usb 3-1: USB disconnect, device number 34 [ 265.892827][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 265.902697][ T9] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 265.912310][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.921716][ T9] usb 4-1: Product: syz [ 265.926260][ T9] usb 4-1: Manufacturer: syz [ 265.932028][ T9] usb 4-1: SerialNumber: syz [ 265.938404][ T9] usb 4-1: config 0 descriptor?? [ 266.209151][ T8452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.242378][ T8452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.269647][ T8452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.282575][ T8452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.348320][ T8469] vivid-002: disconnect [ 266.576442][ T5901] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 266.676928][ T9] gs_usb 4-1:0.0: Configuring for 195 interfaces [ 266.684398][ T9] gs_usb 4-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 266.692374][ T9] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -22 [ 266.848180][ T8452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.975138][ T8452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.056002][ T8452] 9pnet: Could not find request transport: xen [ 267.064775][ T5901] usb 1-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 267.077381][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.086331][ T8451] vivid-002: reconnect [ 267.091919][ T5866] usb 4-1: USB disconnect, device number 31 [ 267.109524][ T5901] usb 1-1: config 0 descriptor?? [ 267.119283][ T5901] usb 1-1: Invalid firmware size=18. [ 267.389773][ T9] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 267.571746][ T8480] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 268.101304][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 268.112383][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 268.123990][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 268.575286][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 268.587193][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 268.601949][ T9] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 268.611647][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.619667][ T9] usb 3-1: Product: syz [ 268.625756][ T9] usb 3-1: Manufacturer: syz [ 268.630890][ T9] usb 3-1: SerialNumber: syz [ 268.637607][ T9] usb 3-1: config 0 descriptor?? [ 268.642854][ T5914] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 268.659206][ T9] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input53 [ 268.812026][ T5914] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 268.824669][ T5914] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 268.836386][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 268.847600][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 268.857471][ T5914] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 268.872810][ T5914] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 268.882346][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.890420][ T5914] usb 2-1: Product: syz [ 268.894750][ T5914] usb 2-1: Manufacturer: syz [ 268.899395][ T5914] usb 2-1: SerialNumber: syz [ 268.917538][ T5914] usb 2-1: config 0 descriptor?? [ 268.937949][ T5914] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input54 [ 268.952030][ T5813] Bluetooth: hci3: unexpected event for opcode 0x0c20 [ 268.963964][ T9] usb 3-1: USB disconnect, device number 35 [ 268.971835][ T5914] input: failed to attach handler mousedev to device input54, error: -5 [ 269.160331][ T5866] usb 2-1: USB disconnect, device number 24 [ 269.315998][ T5902] usb 1-1: USB disconnect, device number 39 [ 269.398833][ T5914] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 269.440595][ T8503] netlink: 76 bytes leftover after parsing attributes in process `syz.0.702'. [ 269.607940][ T5914] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.699750][ T5914] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 269.727605][ T5914] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 269.755432][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.153801][ T5914] usb 5-1: Product: syz [ 270.158904][ T5914] usb 5-1: Manufacturer: syz [ 270.169285][ T5914] usb 5-1: SerialNumber: syz [ 270.374945][ T5914] cdc_mbim 5-1:1.0: skipping garbage [ 270.612656][ T8498] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 271.180418][ T9] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 271.278227][ T8522] netlink: 76 bytes leftover after parsing attributes in process `syz.2.707'. [ 271.482696][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 271.494587][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 271.506302][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 271.517601][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 49351, setting to 64 [ 271.580149][ T8498] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 271.644712][ T5914] cdc_mbim 5-1:1.0: setting tx_max = 184 [ 271.651267][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 271.665436][ T5914] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 271.677671][ T5914] wwan wwan0: port wwan0mbim0 attached [ 271.687512][ T9] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 272.109147][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.120383][ T5914] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, f2:24:ba:d3:85:5f [ 272.131865][ T9] usb 1-1: Product: syz [ 272.136081][ T9] usb 1-1: Manufacturer: syz [ 272.144939][ T5914] usb 5-1: USB disconnect, device number 37 [ 272.151018][ T9] usb 1-1: SerialNumber: syz [ 272.157835][ T5914] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 272.169320][ T9] usb 1-1: config 0 descriptor?? [ 272.176002][ T8512] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 272.194626][ T9] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input56 [ 272.208640][ T5914] wwan wwan0: port wwan0mbim0 disconnected [ 272.412774][ T5914] usb 1-1: USB disconnect, device number 40 [ 272.680159][ T5902] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 272.889861][ T5902] usb 4-1: Using ep0 maxpacket: 8 [ 272.937427][ T5902] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.949429][ T5902] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 272.961023][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.961046][ T5902] usb 4-1: Product: syz [ 272.976544][ T5902] usb 4-1: Manufacturer: syz [ 272.976563][ T5902] usb 4-1: SerialNumber: syz [ 272.978626][ T5902] usb 4-1: config 0 descriptor?? [ 273.014871][ T5902] msi2500 4-1:0.0: Registered as swradio24 [ 273.014890][ T5902] msi2500 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 273.707294][ T8547] netlink: 76 bytes leftover after parsing attributes in process `syz.0.715'. [ 275.086719][ T5902] usb 4-1: USB disconnect, device number 32 [ 275.199799][ T5866] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 275.569202][ T5866] usb 2-1: Using ep0 maxpacket: 8 [ 275.579707][ T5866] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.599729][ T5866] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 275.952995][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.963390][ T5866] usb 2-1: Product: syz [ 275.968303][ T5866] usb 2-1: Manufacturer: syz [ 275.973746][ T5866] usb 2-1: SerialNumber: syz [ 275.980669][ T5866] usb 2-1: config 0 descriptor?? [ 276.123497][ T8582] block nbd4: shutting down sockets [ 276.356966][ T5866] msi2500 2-1:0.0: Registered as swradio24 [ 276.365195][ T5866] msi2500 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 277.037343][ T8587] block nbd0: shutting down sockets [ 277.695576][ T5914] usb 2-1: USB disconnect, device number 25 [ 277.966722][ T8604] netlink: 76 bytes leftover after parsing attributes in process `syz.0.727'. [ 277.988698][ T10] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 278.199770][ T5864] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 278.272840][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 278.285318][ T8606] netlink: 44 bytes leftover after parsing attributes in process `syz.3.729'. [ 278.309742][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 278.341590][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 278.362783][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 49351, setting to 64 [ 278.389271][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 278.403459][ T5864] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.414935][ T5864] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 278.424466][ T10] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 278.433552][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.441611][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.450274][ T10] usb 3-1: Product: syz [ 278.456250][ T5864] usb 5-1: config 0 descriptor?? [ 278.466773][ T10] usb 3-1: Manufacturer: syz [ 278.482518][ T5864] pwc: Askey VC010 type 2 USB webcam detected. [ 278.488776][ T10] usb 3-1: SerialNumber: syz [ 278.511402][ T10] usb 3-1: config 0 descriptor?? [ 278.518968][ T8597] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 278.541785][ T10] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input57 [ 279.390714][ T5864] pwc: recv_control_msg error -32 req 02 val 2b00 [ 279.407393][ T10] usb 3-1: USB disconnect, device number 36 [ 279.446465][ T5864] pwc: recv_control_msg error -32 req 02 val 2700 [ 279.516278][ T8620] block nbd0: shutting down sockets [ 279.756838][ T5864] pwc: recv_control_msg error -32 req 02 val 2c00 [ 279.766684][ T5864] pwc: recv_control_msg error -32 req 04 val 1000 [ 279.776287][ T5864] pwc: recv_control_msg error -32 req 04 val 1300 [ 279.790325][ T5864] pwc: recv_control_msg error -32 req 04 val 1400 [ 279.801146][ T5864] pwc: recv_control_msg error -32 req 02 val 2000 [ 279.817497][ T5864] pwc: recv_control_msg error -32 req 02 val 2100 [ 279.829479][ T5864] pwc: recv_control_msg error -32 req 04 val 1500 [ 280.161607][ T5864] pwc: recv_control_msg error -71 req 02 val 2400 [ 280.180154][ T5864] pwc: recv_control_msg error -71 req 02 val 2600 [ 280.283923][ T5864] pwc: recv_control_msg error -71 req 02 val 2900 [ 280.304420][ T5864] pwc: recv_control_msg error -71 req 02 val 2800 [ 281.110241][ T5864] pwc: recv_control_msg error -71 req 04 val 1100 [ 281.128656][ T5864] pwc: recv_control_msg error -71 req 04 val 1200 [ 281.144730][ T5864] pwc: Registered as video103. [ 281.154118][ T5864] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input60 [ 281.166199][ T5864] usb 5-1: USB disconnect, device number 38 [ 281.429821][ T10] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 281.640143][ T5864] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 281.777504][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 281.819195][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.844626][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 281.862291][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.883533][ T10] usb 3-1: Product: syz [ 281.893329][ T10] usb 3-1: Manufacturer: syz [ 281.897938][ T10] usb 3-1: SerialNumber: syz [ 281.907932][ T10] usb 3-1: config 0 descriptor?? [ 281.951155][ T5864] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.965536][ T5864] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 281.979428][ T10] msi2500 3-1:0.0: Registered as swradio24 [ 281.985988][ T10] msi2500 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 281.999121][ T5864] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 282.008369][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.017510][ T5864] usb 5-1: Product: syz [ 282.021861][ T5864] usb 5-1: Manufacturer: syz [ 282.085002][ T5864] usb 5-1: SerialNumber: syz [ 282.251182][ T5866] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 282.330369][ T8660] block nbd3: shutting down sockets [ 282.345934][ T5864] cdc_mbim 5-1:1.0: skipping garbage [ 282.617477][ T8638] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 282.699815][ T5866] usb 2-1: Using ep0 maxpacket: 8 [ 282.794404][ T5866] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.962902][ T5866] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 282.974298][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.990691][ T52] usb 3-1: USB disconnect, device number 37 [ 283.002662][ T5866] usb 2-1: Product: syz [ 283.007899][ T5866] usb 2-1: Manufacturer: syz [ 283.081833][ T5866] usb 2-1: SerialNumber: syz [ 283.111498][ T5866] usb 2-1: config 0 descriptor?? [ 283.303202][ T5866] msi2500 2-1:0.0: Registered as swradio24 [ 283.309046][ T5866] msi2500 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 283.827932][ T8638] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 283.875771][ T5864] cdc_mbim 5-1:1.0: setting tx_max = 184 [ 284.001359][ T5864] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 284.175617][ T5864] wwan wwan0: port wwan0mbim0 attached [ 284.195427][ T5864] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 7e:67:87:6d:99:e5 [ 284.229023][ T52] usb 2-1: USB disconnect, device number 26 [ 284.402320][ T52] usb 5-1: USB disconnect, device number 39 [ 284.408759][ T52] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 284.643953][ T52] wwan wwan0: port wwan0mbim0 disconnected [ 284.779812][ T5866] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 285.055925][ T5866] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 285.067036][ T5866] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 285.078941][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 285.099735][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 285.109576][ T5866] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 285.159608][ T5866] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 285.168778][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.189723][ T5866] usb 3-1: Product: syz [ 285.215604][ T5866] usb 3-1: Manufacturer: syz [ 285.223247][ T5866] usb 3-1: SerialNumber: syz [ 285.230266][ T5866] usb 3-1: config 0 descriptor?? [ 285.242704][ T5866] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input63 [ 285.302736][ T5864] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 285.469797][ T5864] usb 2-1: Using ep0 maxpacket: 8 [ 286.383005][ T5864] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.396187][ T5864] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 286.405477][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.409975][ T5866] usb 3-1: USB disconnect, device number 38 [ 286.413480][ T5864] usb 2-1: Product: syz [ 286.429772][ T5864] usb 2-1: Manufacturer: syz [ 286.434490][ T5864] usb 2-1: SerialNumber: syz [ 286.475690][ T5864] usb 2-1: config 0 descriptor?? [ 286.547587][ T5864] msi2500 2-1:0.0: Registered as swradio24 [ 286.559822][ T5864] msi2500 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 286.617601][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 286.617614][ T30] audit: type=1400 audit(1746140409.254:1947): avc: denied { create } for pid=8710 comm="syz.4.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 286.733892][ T8714] netlink: 76 bytes leftover after parsing attributes in process `syz.3.756'. [ 286.873918][ T30] audit: type=1400 audit(1746140409.254:1948): avc: denied { write } for pid=8710 comm="syz.4.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 286.966072][ T30] audit: type=1400 audit(1746140409.284:1949): avc: denied { setopt } for pid=8710 comm="syz.4.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 287.599882][ T5901] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 287.785494][ T5864] usb 2-1: USB disconnect, device number 27 [ 287.800841][ T5901] usb 5-1: Using ep0 maxpacket: 32 [ 287.808895][ T5901] usb 5-1: config 0 interface 0 has no altsetting 0 [ 287.828972][ T5901] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 287.828997][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.829016][ T5901] usb 5-1: Product: syz [ 287.829030][ T5901] usb 5-1: Manufacturer: syz [ 287.829043][ T5901] usb 5-1: SerialNumber: syz [ 287.830695][ T5901] usb 5-1: config 0 descriptor?? [ 288.042884][ T8719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.080079][ T8719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.099438][ T8719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.137190][ T8719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.245279][ T8735] vivid-004: disconnect [ 288.460794][ T5901] gs_usb 5-1:0.0: Configuring for 195 interfaces [ 288.467180][ T5901] gs_usb 5-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 288.475065][ T5901] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -22 [ 288.659973][ T10] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 288.710849][ T8719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.719508][ T8719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.804561][ T8718] vivid-004: reconnect [ 288.938089][ T5901] usb 5-1: USB disconnect, device number 40 [ 288.938738][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.050017][ T10] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 289.091594][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 289.115321][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.124142][ T10] usb 2-1: Product: syz [ 289.128361][ T10] usb 2-1: Manufacturer: syz [ 289.133067][ T10] usb 2-1: SerialNumber: syz [ 289.140685][ T10] cdc_mbim 2-1:1.0: skipping garbage [ 289.345421][ T8740] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 289.419744][ T5864] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 289.598626][ T5864] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 289.639721][ T5864] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 289.673922][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 289.704605][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 289.714401][ T5864] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 289.729286][ T5864] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 289.738463][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.755341][ T5864] usb 4-1: Product: syz [ 289.763149][ T5914] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 289.771926][ T5864] usb 4-1: Manufacturer: syz [ 289.776530][ T5864] usb 4-1: SerialNumber: syz [ 289.792423][ T5864] usb 4-1: config 0 descriptor?? [ 289.814099][ T5864] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input65 [ 289.967384][ T5914] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 289.996416][ T8740] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 290.004903][ T8766] netlink: 76 bytes leftover after parsing attributes in process `syz.2.773'. [ 290.018542][ T10] cdc_mbim 2-1:1.0: setting tx_max = 184 [ 290.039936][ T5914] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 290.074473][ T10] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 290.088650][ T5813] Bluetooth: hci1: unexpected event for opcode 0x0c20 [ 290.088881][ T5901] usb 4-1: USB disconnect, device number 33 [ 290.095733][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 290.095759][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 49351, setting to 64 [ 290.095783][ T5914] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 290.100175][ T10] wwan wwan0: port wwan0mbim0 attached [ 290.276962][ T5914] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 290.313910][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.331703][ T10] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, e2:43:ff:99:fb:e7 [ 290.342337][ T5914] usb 5-1: Product: syz [ 290.347455][ T5914] usb 5-1: Manufacturer: syz [ 290.359396][ T5914] usb 5-1: SerialNumber: syz [ 290.367045][ T5914] usb 5-1: config 0 descriptor?? [ 290.373644][ T8755] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 290.384489][ T5914] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input66 [ 290.488602][ T10] usb 2-1: USB disconnect, device number 28 [ 290.496335][ T10] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 290.562426][ T10] wwan wwan0: port wwan0mbim0 disconnected [ 290.585906][ T5901] usb 5-1: USB disconnect, device number 41 [ 290.639866][ T5914] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 290.789741][ T9] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 290.797339][ T5914] usb 3-1: Using ep0 maxpacket: 8 [ 290.804571][ T5914] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.816642][ T5914] usb 3-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 290.825781][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.833835][ T5914] usb 3-1: Product: syz [ 290.837988][ T5914] usb 3-1: Manufacturer: syz [ 290.842590][ T5914] usb 3-1: SerialNumber: syz [ 290.848541][ T5914] usb 3-1: config 0 descriptor?? [ 290.872640][ T5914] msi2500 3-1:0.0: Registered as swradio24 [ 290.878444][ T5914] msi2500 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 290.929855][ T5864] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 290.961052][ T9] usb 1-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 290.970275][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.979403][ T9] usb 1-1: config 0 descriptor?? [ 290.986071][ T9] usb 1-1: Invalid firmware size=18. [ 291.211864][ T5864] usb 4-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 291.270651][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.329712][ T5864] usb 4-1: config 0 descriptor?? [ 291.449031][ T5864] usb 4-1: Invalid firmware size=18. [ 291.480402][ T5864] usb 3-1: USB disconnect, device number 39 [ 291.559277][ T8782] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 292.037243][ T5866] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 292.581137][ T5866] usb 5-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 292.590672][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.600157][ T5866] usb 5-1: config 0 descriptor?? [ 292.606862][ T5866] usb 5-1: Invalid firmware size=18. [ 292.699762][ T5864] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 292.939790][ T5864] usb 2-1: Using ep0 maxpacket: 8 [ 292.946407][ T5864] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.958765][ T5864] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 292.968205][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.079447][ T8795] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 293.414990][ T5864] usb 2-1: Product: syz [ 293.419275][ T5864] usb 2-1: Manufacturer: syz [ 293.424011][ T5864] usb 2-1: SerialNumber: syz [ 293.433272][ T5864] usb 2-1: config 0 descriptor?? [ 293.512868][ T5864] msi2500 2-1:0.0: Registered as swradio24 [ 293.532438][ T5864] msi2500 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 293.607364][ T5866] usb 1-1: USB disconnect, device number 41 [ 293.736844][ T910] usb 4-1: USB disconnect, device number 34 [ 294.134109][ T5864] usb 2-1: USB disconnect, device number 29 [ 294.574714][ T910] usb 5-1: USB disconnect, device number 42 [ 295.263697][ T8825] netlink: 76 bytes leftover after parsing attributes in process `syz.1.788'. [ 295.881696][ T8839] netlink: 76 bytes leftover after parsing attributes in process `syz.3.792'. [ 296.128635][ T910] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 296.136331][ T5866] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 296.186706][ T5901] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 296.351172][ T5866] usb 2-1: Using ep0 maxpacket: 8 [ 296.358670][ T5866] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.377812][ T910] usb 1-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 296.387282][ T910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.398885][ T5901] usb 5-1: Using ep0 maxpacket: 16 [ 296.405023][ T5866] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 296.762361][ T910] usb 1-1: config 0 descriptor?? [ 296.767998][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.882898][ T910] usb 1-1: Invalid firmware size=18. [ 297.033734][ T5866] usb 2-1: Product: syz [ 297.092497][ T5901] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 297.197670][ T5866] usb 2-1: Manufacturer: syz [ 297.202698][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.210793][ T5866] usb 2-1: SerialNumber: syz [ 297.218145][ T5866] usb 2-1: config 0 descriptor?? [ 297.223308][ T5901] usb 5-1: Product: syz [ 297.227473][ T5901] usb 5-1: Manufacturer: syz [ 297.232271][ T5901] usb 5-1: SerialNumber: syz [ 297.703674][ T5901] usb 5-1: config 0 descriptor?? [ 297.713165][ T5901] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 297.723497][ T5901] usb 5-1: Detected FT-X [ 297.786714][ T5866] msi2500 2-1:0.0: Registered as swradio24 [ 297.792653][ T5866] msi2500 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 298.630742][ T5866] usb 2-1: USB disconnect, device number 30 [ 298.756282][ T5901] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 298.870514][ T910] usb 1-1: USB disconnect, device number 42 [ 298.878593][ T5901] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 298.890470][ T5901] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 298.901353][ T5901] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 298.916816][ T5901] usb 5-1: USB disconnect, device number 43 [ 298.927204][ T5901] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 298.945628][ T5901] ftdi_sio 5-1:0.0: device disconnected [ 299.489844][ T5901] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 299.719852][ T5901] usb 2-1: Using ep0 maxpacket: 8 [ 299.727528][ T5901] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.741975][ T5901] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 299.751413][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.759399][ T5901] usb 2-1: Product: syz [ 299.763679][ T5901] usb 2-1: Manufacturer: syz [ 299.768285][ T5901] usb 2-1: SerialNumber: syz [ 299.774629][ T5901] usb 2-1: config 0 descriptor?? [ 299.802573][ T5901] msi2500 2-1:0.0: Registered as swradio24 [ 299.808410][ T5901] msi2500 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 300.031412][ T30] audit: type=1400 audit(1746140422.674:1950): avc: denied { read write } for pid=8884 comm="syz.4.803" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 300.031580][ T8887] O3ãc¤±: renamed from bridge_slave_0 (while UP) [ 300.063219][ T30] audit: type=1400 audit(1746140422.674:1951): avc: denied { open } for pid=8884 comm="syz.4.803" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 300.473226][ T5864] usb 2-1: USB disconnect, device number 31 [ 300.741816][ T30] audit: type=1400 audit(1746140423.384:1952): avc: denied { create } for pid=8901 comm="syz.2.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 300.761115][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.769621][ T30] audit: type=1400 audit(1746140423.384:1953): avc: denied { bind } for pid=8901 comm="syz.2.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 300.859751][ T5901] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 301.010910][ T5901] usb 4-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 301.020350][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.033466][ T5901] usb 4-1: config 0 descriptor?? [ 301.043103][ T5901] usb 4-1: Invalid firmware size=18. [ 301.059987][ T5864] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 301.157433][ T30] audit: type=1400 audit(1746140423.794:1954): avc: denied { connect } for pid=8907 comm="syz.1.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 301.178406][ T30] audit: type=1400 audit(1746140423.814:1955): avc: denied { accept } for pid=8907 comm="syz.1.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 301.222560][ T5864] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 301.232006][ T30] audit: type=1400 audit(1746140423.874:1956): avc: denied { write } for pid=8907 comm="syz.1.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 301.234498][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 384, setting to 64 [ 301.236400][ T5864] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 301.274036][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.290057][ T5864] usb 3-1: Product: syz [ 301.294365][ T5864] usb 3-1: Manufacturer: syz [ 301.298998][ T5864] usb 3-1: SerialNumber: syz [ 301.384346][ T5864] usb 3-1: config 0 descriptor?? [ 301.390129][ T8904] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 301.676278][ T8904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.873316][ T8904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.900669][ T5864] rc_core: IR keymap rc-streamzap not found [ 301.913958][ T5864] Registered IR keymap rc-empty [ 301.936670][ T5864] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 301.975237][ T5864] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input67 [ 302.014611][ T8920] xt_l2tp: invalid flags combination: c [ 302.030356][ T5864] usb 3-1: USB disconnect, device number 40 [ 302.119761][ T9] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 302.283654][ T9] usb 1-1: config 0 has an invalid interface number: 200 but max is 0 [ 302.292134][ T9] usb 1-1: config 0 has no interface number 0 [ 302.298267][ T9] usb 1-1: config 0 interface 200 has no altsetting 0 [ 302.309854][ T9] usb 1-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 302.765483][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.773919][ T9] usb 1-1: Product: syz [ 302.778158][ T9] usb 1-1: Manufacturer: syz [ 302.782830][ T9] usb 1-1: SerialNumber: syz [ 302.790684][ T9] usb 1-1: config 0 descriptor?? [ 302.821923][ T2969] Bluetooth: hci5: Frame reassembly failed (-84) [ 302.829560][ T8927] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 303.008400][ T8915] binder: 8914:8915 ioctl c00c620f 2000000002c0 returned -22 [ 303.044903][ T8932] tipc: Started in network mode [ 303.049951][ T8932] tipc: Node identity 6, cluster identity 4711 [ 303.056103][ T8932] tipc: Node number set to 6 [ 303.057346][ T9] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.200/input/input68 [ 303.112286][ T9] usb 1-1: USB disconnect, device number 43 [ 303.655460][ T910] usb 4-1: USB disconnect, device number 35 [ 304.299294][ T8944] can: request_module (can-proto-0) failed. [ 305.092106][ T5820] Bluetooth: hci5: command 0x1003 tx timeout [ 305.099382][ T5813] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 305.163676][ T5901] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 305.336518][ T5901] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 305.661688][ T5901] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 305.764848][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 305.883771][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 305.895321][ T5901] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 305.931414][ T5901] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 305.964524][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.004632][ T5901] usb 1-1: Product: syz [ 306.025240][ T5901] usb 1-1: Manufacturer: syz [ 306.043879][ T5901] usb 1-1: SerialNumber: syz [ 306.078532][ T5901] usb 1-1: config 0 descriptor?? [ 306.088256][ T5901] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input70 [ 306.106357][ T8974] syz.4.829 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 306.369143][ T8974] option changes via remount are deprecated (pid=8973 comm=syz.4.829) [ 306.391004][ T30] audit: type=1400 audit(1746140428.994:1957): avc: denied { remount } for pid=8973 comm="syz.4.829" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 306.420215][ T8978] block nbd2: shutting down sockets [ 306.444662][ T5866] usb 1-1: USB disconnect, device number 44 [ 307.087387][ T8986] netlink: 4 bytes leftover after parsing attributes in process `syz.4.832'. [ 307.096554][ T30] audit: type=1400 audit(1746140429.724:1958): avc: denied { bind } for pid=8982 comm="syz.4.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 307.305690][ T30] audit: type=1400 audit(1746140429.724:1959): avc: denied { setopt } for pid=8982 comm="syz.4.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 308.228127][ T30] audit: type=1400 audit(1746140430.864:1960): avc: denied { connect } for pid=8999 comm="syz.3.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 308.273593][ T9003] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 308.295972][ T9002] binder: 9000:9002 ioctl 4018620d 0 returned -22 [ 308.589906][ T52] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 308.618278][ T5866] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 308.899078][ T52] usb 5-1: Using ep0 maxpacket: 8 [ 308.995442][ T5866] usb 2-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 309.064714][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.129907][ T52] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.153991][ T5866] usb 2-1: config 0 descriptor?? [ 309.270384][ T5866] usb 2-1: Invalid firmware size=18. [ 309.408577][ T52] usb 5-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 309.418775][ T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.458272][ T52] usb 5-1: Product: syz [ 309.462914][ T52] usb 5-1: Manufacturer: syz [ 309.467792][ T52] usb 5-1: SerialNumber: syz [ 309.579175][ T52] usb 5-1: config 0 descriptor?? [ 310.479576][ T52] msi2500 5-1:0.0: Registered as swradio24 [ 310.489314][ T52] msi2500 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 310.595365][ T30] audit: type=1400 audit(1746140433.184:1961): avc: denied { connect } for pid=9022 comm="syz.3.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 310.757801][ T30] audit: type=1400 audit(1746140433.184:1962): avc: denied { write } for pid=9022 comm="syz.3.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 310.758410][ T52] usb 5-1: USB disconnect, device number 44 [ 310.950300][ T9035] block nbd3: shutting down sockets [ 311.105202][ T9] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 311.259828][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 311.269754][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.762329][ T5901] usb 2-1: USB disconnect, device number 32 [ 311.782684][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 311.834722][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.846130][ T9] usb 1-1: Product: syz [ 311.851083][ T9] usb 1-1: Manufacturer: syz [ 311.855720][ T9] usb 1-1: SerialNumber: syz [ 311.863344][ T9] usb 1-1: config 0 descriptor?? [ 311.998220][ T9] msi2500 1-1:0.0: Registered as swradio24 [ 312.419941][ T9] msi2500 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 312.909143][ T9] usb 1-1: USB disconnect, device number 45 [ 313.814751][ T30] audit: type=1400 audit(1746140436.114:1963): avc: denied { setopt } for pid=9064 comm="syz.3.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 313.934839][ T9070] Failed to initialize the IGMP autojoin socket (err -2) [ 314.399056][ T9077] netlink: 76 bytes leftover after parsing attributes in process `syz.0.854'. [ 314.684439][ T30] audit: type=1400 audit(1746140437.154:1964): avc: denied { read } for pid=9069 comm="syz.2.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 315.369990][ T9095] block nbd0: shutting down sockets [ 315.598034][ T9099] syz.4.860 (9099): drop_caches: 0 [ 315.638423][ T9099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.860'. [ 315.649818][ T9099] netlink: 12 bytes leftover after parsing attributes in process `syz.4.860'. [ 316.480523][ T9111] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 316.542981][ T9115] netlink: 'syz.0.863': attribute type 4 has an invalid length. [ 316.608350][ T9117] netlink: 'syz.0.863': attribute type 4 has an invalid length. [ 316.649185][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.655608][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.158570][ T30] audit: type=1400 audit(1746140439.794:1965): avc: denied { read } for pid=9124 comm="syz.1.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 317.755672][ T9134] netlink: 76 bytes leftover after parsing attributes in process `syz.1.868'. [ 317.808074][ T9149] input: syz0 as /devices/virtual/input/input72 [ 318.044037][ T9155] binder: 9154:9155 ioctl c00c620f 2000000002c0 returned -22 [ 319.986121][ T5864] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 319.993930][ T52] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 320.023047][ T9188] veth3: entered promiscuous mode [ 320.179218][ T52] usb 4-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 320.182328][ T5864] usb 5-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 320.199454][ T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.418022][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.450182][ T5864] usb 5-1: config 0 descriptor?? [ 320.450494][ T52] usb 4-1: config 0 descriptor?? [ 320.458202][ T5864] usb 5-1: Invalid firmware size=18. [ 320.514058][ T52] usb 4-1: Invalid firmware size=18. [ 320.664320][ T9200] FAULT_INJECTION: forcing a failure. [ 320.664320][ T9200] name failslab, interval 1, probability 0, space 0, times 0 [ 320.691891][ T9200] CPU: 0 UID: 0 PID: 9200 Comm: syz.2.888 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 320.691916][ T9200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 320.691925][ T9200] Call Trace: [ 320.691931][ T9200] [ 320.691938][ T9200] dump_stack_lvl+0x16c/0x1f0 [ 320.691963][ T9200] should_fail_ex+0x512/0x640 [ 320.691984][ T9200] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 320.692013][ T9200] should_failslab+0xc2/0x120 [ 320.692030][ T9200] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 320.692055][ T9200] ? __alloc_skb+0x2b2/0x380 [ 320.692080][ T9200] ? bpf_lsm_capable+0x9/0x10 [ 320.692098][ T9200] __alloc_skb+0x2b2/0x380 [ 320.692121][ T9200] ? __pfx___alloc_skb+0x10/0x10 [ 320.692146][ T9200] ? genl_rcv_msg+0x4a0/0x800 [ 320.692166][ T9200] ? genl_rcv_msg+0x4bb/0x800 [ 320.692192][ T9200] netlink_ack+0x15d/0xb80 [ 320.692211][ T9200] ? __lock_acquire+0xaa4/0x1ba0 [ 320.692240][ T9200] netlink_rcv_skb+0x347/0x440 [ 320.692259][ T9200] ? __pfx_genl_rcv_msg+0x10/0x10 [ 320.692281][ T9200] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 320.692312][ T9200] ? __pfx_down_read+0x10/0x10 [ 320.692335][ T9200] ? netlink_deliver_tap+0x1ae/0xd30 [ 320.692356][ T9200] genl_rcv+0x28/0x40 [ 320.692374][ T9200] netlink_unicast+0x53a/0x7f0 [ 320.692395][ T9200] ? __pfx_netlink_unicast+0x10/0x10 [ 320.692420][ T9200] netlink_sendmsg+0x8d1/0xdd0 [ 320.692442][ T9200] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.692470][ T9200] ____sys_sendmsg+0xa95/0xc70 [ 320.692491][ T9200] ? copy_msghdr_from_user+0x10a/0x160 [ 320.692506][ T9200] ? __pfx_____sys_sendmsg+0x10/0x10 [ 320.692536][ T9200] ___sys_sendmsg+0x134/0x1d0 [ 320.692553][ T9200] ? __pfx____sys_sendmsg+0x10/0x10 [ 320.692599][ T9200] __sys_sendmsg+0x16d/0x220 [ 320.692616][ T9200] ? __pfx___sys_sendmsg+0x10/0x10 [ 320.692639][ T9200] ? rcu_is_watching+0x12/0xc0 [ 320.692664][ T9200] do_syscall_64+0xcd/0x260 [ 320.692688][ T9200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.692713][ T9200] RIP: 0033:0x7f1cc9d8e969 [ 320.692726][ T9200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.692741][ T9200] RSP: 002b:00007f1ccabec038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 320.692756][ T9200] RAX: ffffffffffffffda RBX: 00007f1cc9fb5fa0 RCX: 00007f1cc9d8e969 [ 320.692767][ T9200] RDX: 0000000004000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 320.692777][ T9200] RBP: 00007f1ccabec090 R08: 0000000000000000 R09: 0000000000000000 [ 320.692787][ T9200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.692796][ T9200] R13: 0000000000000000 R14: 00007f1cc9fb5fa0 R15: 00007ffd9bdbbde8 [ 320.692819][ T9200] [ 322.787731][ T5914] usb 5-1: USB disconnect, device number 45 [ 323.054281][ T52] usb 4-1: USB disconnect, device number 36 [ 323.512258][ T30] audit: type=1400 audit(1746140446.029:1966): avc: denied { write } for pid=9215 comm="syz.2.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 323.643136][ T30] audit: type=1400 audit(1746140446.199:1967): avc: denied { mounton } for pid=9210 comm="syz.4.891" path="/186/bus" dev="tmpfs" ino=1014 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 323.739210][ T30] audit: type=1400 audit(1746140446.359:1968): avc: denied { append } for pid=9218 comm="syz.3.893" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 323.984305][ T9237] netlink: 72 bytes leftover after parsing attributes in process `syz.2.894'. [ 324.894646][ T5914] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 324.950686][ T30] audit: type=1400 audit(1746140447.599:1969): avc: denied { connect } for pid=9241 comm="syz.1.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 325.473139][ T5914] usb 5-1: Using ep0 maxpacket: 16 [ 325.482952][ T5914] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.494019][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 325.505223][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 325.514932][ T5914] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 325.524734][ T5914] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 325.539016][ T5914] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 325.548241][ T5914] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 325.556288][ T5914] usb 5-1: Manufacturer: syz [ 325.562294][ T5914] usb 5-1: config 0 descriptor?? [ 326.229783][ T5914] rc_core: IR keymap rc-hauppauge not found [ 326.261411][ T5914] Registered IR keymap rc-empty [ 326.266727][ T5914] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 326.529868][ T5914] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 326.540980][ T9253] block nbd2: shutting down sockets [ 326.571321][ T5914] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 326.586504][ T5914] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input74 [ 326.610534][ T5914] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 326.639995][ T5914] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 326.681025][ T5914] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 326.711624][ T5914] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 326.728363][ T9260] netlink: 'syz.2.903': attribute type 39 has an invalid length. [ 326.743892][ T5914] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 326.772500][ T5914] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 326.799978][ T5914] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 326.830434][ T5914] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 326.854406][ T9260] netlink: 'syz.2.903': attribute type 39 has an invalid length. [ 326.865144][ T9260] netlink: 'syz.2.903': attribute type 39 has an invalid length. [ 326.869819][ T5914] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 326.883838][ T9260] netlink: 'syz.2.903': attribute type 39 has an invalid length. [ 326.892630][ T9260] netlink: 'syz.2.903': attribute type 39 has an invalid length. [ 326.901164][ T9260] netlink: 'syz.2.903': attribute type 39 has an invalid length. [ 326.909603][ T9260] netlink: 'syz.2.903': attribute type 39 has an invalid length. [ 326.910262][ T5914] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 326.927584][ T9260] netlink: 'syz.2.903': attribute type 39 has an invalid length. [ 326.937367][ T9260] netlink: 'syz.2.903': attribute type 39 has an invalid length. [ 326.961724][ T9260] netlink: 'syz.2.903': attribute type 39 has an invalid length. [ 326.968162][ T5914] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 326.985903][ T5914] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 327.049729][ T5902] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 327.221686][ T5902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 327.234298][ T5902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 327.246240][ T5902] usb 1-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 327.255378][ T5902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.264884][ T5902] usb 1-1: config 0 descriptor?? [ 327.270452][ T9263] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 327.339822][ T5914] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 327.489743][ T5914] usb 4-1: Using ep0 maxpacket: 8 [ 327.497863][ T5914] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.512075][ T5914] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 327.521600][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.529883][ T5914] usb 4-1: Product: syz [ 327.534117][ T5914] usb 4-1: Manufacturer: syz [ 327.538760][ T5914] usb 4-1: SerialNumber: syz [ 327.539211][ T9263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.554038][ T9263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.554153][ T5914] usb 4-1: config 0 descriptor?? [ 327.574493][ T5902] usbhid 1-1:0.0: can't add hid device: -71 [ 327.580687][ T5902] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 327.593122][ T5902] usb 1-1: USB disconnect, device number 46 [ 327.603236][ T5914] msi2500 4-1:0.0: Registered as swradio24 [ 327.609131][ T5914] msi2500 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 328.096585][ T5914] usb 4-1: USB disconnect, device number 37 [ 328.138753][ T5902] usb 5-1: USB disconnect, device number 46 [ 328.462379][ T9284] netlink: 76 bytes leftover after parsing attributes in process `syz.2.908'. [ 328.682054][ T5902] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 328.728811][ T9296] netlink: 224 bytes leftover after parsing attributes in process `syz.1.913'. [ 328.891040][ T5902] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.919025][ T5902] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 328.933546][ T5902] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 328.951501][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.959708][ T5902] usb 5-1: Product: syz [ 328.963882][ T5902] usb 5-1: Manufacturer: syz [ 328.968532][ T5902] usb 5-1: SerialNumber: syz [ 328.992586][ T5902] cdc_mbim 5-1:1.0: skipping garbage [ 329.093690][ T9302] input: syz0 as /devices/virtual/input/input75 [ 434.109602][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 434.116571][ C1] rcu: 0-...!: (0 ticks this GP) idle=66fc/1/0x4000000000000000 softirq=39095/39095 fqs=0 [ 434.127328][ C1] rcu: (detected by 1, t=10503 jiffies, g=28965, q=67 ncpus=2) [ 434.134972][ C1] Sending NMI from CPU 1 to CPUs 0: [ 434.134996][ C0] NMI backtrace for cpu 0 [ 434.135007][ C0] CPU: 0 UID: 0 PID: 9302 Comm: syz.0.916 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 434.135023][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 434.135031][ C0] RIP: 0010:hlock_class+0x13/0x70 [ 434.135050][ C0] Code: 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f b7 47 20 66 25 ff 1f 0f b7 c0 48 0f a3 05 4d eb 12 14 <73> 15 48 8d 04 80 48 8d 04 80 48 8d 04 c5 60 8f aa 95 c3 cc cc cc [ 434.135062][ C0] RSP: 0018:ffffc90000007be8 EFLAGS: 00000047 [ 434.135072][ C0] RAX: 0000000000000000 RBX: ffff88803073d488 RCX: 00000000c032add5 [ 434.135080][ C0] RDX: 0000000000000000 RSI: ffff88803073d488 RDI: ffff88803073d488 [ 434.135088][ C0] RBP: ffff88803073d370 R08: 0000000000080000 R09: 0000000000000001 [ 434.135095][ C0] R10: 0000000000000007 R11: 0000000000000000 R12: 0000000000000000 [ 434.135103][ C0] R13: 0000000000000002 R14: ffff88803073c880 R15: 0000000000000000 [ 434.135110][ C0] FS: 00007fbb6a95d6c0(0000) GS:ffff8881249e2000(0000) knlGS:0000000000000000 [ 434.135123][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 434.135132][ C0] CR2: 000000110c3b4fcb CR3: 00000000366ad000 CR4: 00000000003526f0 [ 434.135139][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 434.135147][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 434.135154][ C0] Call Trace: [ 434.135160][ C0] [ 434.135164][ C0] __lock_acquire+0x5ca/0x1ba0 [ 434.135186][ C0] lock_acquire+0x179/0x350 [ 434.135203][ C0] ? debug_object_deactivate+0x135/0x3a0 [ 434.135222][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 434.135236][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 434.135251][ C0] ? debug_object_deactivate+0x135/0x3a0 [ 434.135268][ C0] debug_object_deactivate+0x135/0x3a0 [ 434.135285][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 434.135303][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 434.135321][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 434.135335][ C0] __hrtimer_run_queues+0x46f/0xad0 [ 434.135351][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 434.135363][ C0] ? read_tsc+0x9/0x20 [ 434.135381][ C0] hrtimer_interrupt+0x397/0x8e0 [ 434.135398][ C0] __sysvec_apic_timer_interrupt+0x108/0x3f0 [ 434.135414][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 434.135428][ C0] [ 434.135432][ C0] [ 434.135436][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 434.135450][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 434.135464][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 e6 ee 28 f6 48 89 df e8 8e 42 29 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 e5 ae 19 f6 65 8b 05 1e c4 34 08 85 c0 74 16 5b [ 434.135475][ C0] RSP: 0018:ffffc9000be078a8 EFLAGS: 00000246 [ 434.135484][ C0] RAX: 0000000000000006 RBX: ffff88801b492f08 RCX: 0000000000000006 [ 434.135492][ C0] RDX: 0000000000000000 RSI: ffffffff8dbe0901 RDI: ffffffff8bf47e20 [ 434.135500][ C0] RBP: 0000000000000283 R08: 0000000000000001 R09: 0000000000000001 [ 434.135507][ C0] R10: ffffffff9084fd17 R11: 0000000000000000 R12: 0000000000000283 [ 434.135515][ C0] R13: ffff88801b492f08 R14: 0000000000000000 R15: 1ffff920017c0f44 [ 434.135528][ C0] kthread_queue_work+0xa8/0x170 [ 434.135546][ C0] synchronize_rcu_expedited+0x2f4/0x460 [ 434.135565][ C0] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 434.135585][ C0] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 434.135605][ C0] led_trigger_set+0x554/0xc50 [ 434.135618][ C0] ? __pfx_led_trigger_set+0x10/0x10 [ 434.135630][ C0] ? led_classdev_register_ext+0x71f/0xa10 [ 434.135649][ C0] led_trigger_set_default+0x1bd/0x2a0 [ 434.135663][ C0] led_classdev_register_ext+0x7b8/0xa10 [ 434.135681][ C0] ? __pfx_led_classdev_register_ext+0x10/0x10 [ 434.135700][ C0] ? __pfx_kasprintf+0x10/0x10 [ 434.135718][ C0] ? input_open_device+0x296/0x390 [ 434.135734][ C0] input_leds_connect+0x552/0x8e0 [ 434.135753][ C0] input_attach_handler.isra.0+0x181/0x260 [ 434.135767][ C0] input_register_device+0xa84/0x1130 [ 434.135781][ C0] uinput_ioctl_handler.isra.0+0x1357/0x1df0 [ 434.135799][ C0] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 434.135817][ C0] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 434.135833][ C0] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 434.135856][ C0] ? selinux_file_ioctl+0x180/0x270 [ 434.135872][ C0] ? selinux_file_ioctl+0xb4/0x270 [ 434.135889][ C0] ? __pfx_uinput_ioctl+0x10/0x10 [ 434.135905][ C0] __x64_sys_ioctl+0x190/0x200 [ 434.135922][ C0] do_syscall_64+0xcd/0x260 [ 434.135938][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.135950][ C0] RIP: 0033:0x7fbb69b8e969 [ 434.135961][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.135972][ C0] RSP: 002b:00007fbb6a95d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 434.135988][ C0] RAX: ffffffffffffffda RBX: 00007fbb69db5fa0 RCX: 00007fbb69b8e969 [ 434.135996][ C0] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 000000000000000a [ 434.136004][ C0] RBP: 00007fbb69c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 434.136011][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.136018][ C0] R13: 0000000000000000 R14: 00007fbb69db5fa0 R15: 00007ffe0bd403e8 [ 434.136031][ C0] [ 434.136992][ C1] rcu: rcu_preempt kthread starved for 10503 jiffies! g28965 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 434.675567][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 434.685537][ C1] rcu: RCU grace-period kthread stack dump: [ 434.691410][ C1] task:rcu_preempt state:R running task stack:26760 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 434.704890][ C1] Call Trace: [ 434.708161][ C1] [ 434.711088][ C1] __schedule+0x116f/0x5de0 [ 434.715604][ C1] ? __pfx___schedule+0x10/0x10 [ 434.720454][ C1] ? find_held_lock+0x2b/0x80 [ 434.725129][ C1] ? schedule+0x2d7/0x3a0 [ 434.729456][ C1] schedule+0xe7/0x3a0 [ 434.733517][ C1] schedule_timeout+0x123/0x290 [ 434.738361][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 434.743726][ C1] ? __pfx_process_timeout+0x10/0x10 [ 434.749013][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 434.754813][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 434.760272][ C1] rcu_gp_fqs_loop+0x1ea/0xb00 [ 434.765037][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 434.770319][ C1] ? rcu_gp_init+0xc76/0x15a0 [ 434.774994][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 434.779845][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 434.785647][ C1] rcu_gp_kthread+0x270/0x380 [ 434.790321][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 434.795514][ C1] ? rcu_is_watching+0x12/0xc0 [ 434.800272][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 434.805469][ C1] ? __kthread_parkme+0x19e/0x250 [ 434.810490][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 434.815685][ C1] kthread+0x3c2/0x780 [ 434.819751][ C1] ? __pfx_kthread+0x10/0x10 [ 434.824330][ C1] ? __pfx_kthread+0x10/0x10 [ 434.828909][ C1] ? __pfx_kthread+0x10/0x10 [ 434.833489][ C1] ? __pfx_kthread+0x10/0x10 [ 434.838067][ C1] ? rcu_is_watching+0x12/0xc0 [ 434.842826][ C1] ? __pfx_kthread+0x10/0x10 [ 434.847407][ C1] ret_from_fork+0x45/0x80 [ 434.851817][ C1] ? __pfx_kthread+0x10/0x10 [ 434.856396][ C1] ret_from_fork_asm+0x1a/0x30 [ 434.861171][ C1] [ 434.864179][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 434.870493][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 434.882110][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 434.892153][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 434.897780][ C1] Code: 65 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 6a 1d 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 434.917381][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c6 [ 434.923443][ C1] RAX: 0000000002847db9 RBX: 0000000000000001 RCX: ffffffff8b6c8419 [ 434.931405][ C1] RDX: 0000000000000000 RSI: ffffffff8dbe0901 RDI: ffffffff8bf47e20 [ 434.939365][ C1] RBP: ffffed1003b5a488 R08: 0000000000000001 R09: ffffed10170a65bd [ 434.947333][ C1] R10: ffff8880b8532deb R11: 0000000000000000 R12: 0000000000000001 [ 434.955294][ C1] R13: ffff88801dad2440 R14: ffffffff9084fd10 R15: 0000000000000000 [ 434.963312][ C1] FS: 0000000000000000(0000) GS:ffff888124ae2000(0000) knlGS:0000000000000000 [ 434.972250][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 434.978832][ C1] CR2: 00007f7ee3bb3f98 CR3: 0000000021bce000 CR4: 00000000003526f0 [ 434.986806][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 434.994767][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 435.002728][ C1] Call Trace: [ 435.005999][ C1] [ 435.008920][ C1] default_idle+0x13/0x20 [ 435.013254][ C1] default_idle_call+0x6d/0xb0 [ 435.018016][ C1] do_idle+0x391/0x510 [ 435.022083][ C1] ? __pfx_do_idle+0x10/0x10 [ 435.026667][ C1] ? trace_sched_exit_tp+0x31/0x130 [ 435.031867][ C1] cpu_startup_entry+0x4f/0x60 [ 435.036626][ C1] start_secondary+0x21d/0x2b0 [ 435.041391][ C1] ? __pfx_start_secondary+0x10/0x10 [ 435.046681][ C1] common_startup_64+0x13e/0x148 [ 435.051625][ C1]