last executing test programs: 6m54.185542836s ago: executing program 4 (id=2478): syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x5, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x23}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08060001080006040001aaaaaaaaaa37ac1452aaaaaaaaaaaa38ac"], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000000000007f000001000000000000000000000000ac1e000100000000000000000000000000000000000000000a003080"], 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x0, 0x0, 0x3000000}, {0x0, 0x8}}}, 0xb8}}, 0x0) 6m53.966202129s ago: executing program 4 (id=2479): syz_io_uring_setup(0x2825, &(0x7f0000000380)={0x0, 0xf023, 0x80, 0x3, 0x2bb}, &(0x7f0000000400), &(0x7f0000000440)) (async) r0 = syz_io_uring_setup(0x2825, &(0x7f0000000380)={0x0, 0xf023, 0x80, 0x3, 0x2bb}, &(0x7f0000000400), &(0x7f0000000440)) io_uring_register$IORING_REGISTER_MEM_REGION(r0, 0x22, &(0x7f0000000500)={0x0}, 0x1) (async) io_uring_register$IORING_REGISTER_MEM_REGION(r0, 0x22, &(0x7f0000000500)={0x0}, 0x1) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) (async) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket(0x10, 0x803, 0x0) (async) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, 0x0, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x800) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x800) socket$inet_tcp(0x2, 0x1, 0x0) userfaultfd(0x801) (async) userfaultfd(0x801) syz_emit_ethernet(0x76, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6000000000403a00fe8000000000000000000000000000bbff020000000000000000000000000001020090780000000166c1665dfffb000100000000000000000000000000000001ff02000000000000000000000000000133000046"], 0x0) openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) eventfd2(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) pipe2(&(0x7f0000000280)={0x0, 0x0}, 0x84000) syz_io_uring_setup(0x1150, &(0x7f0000000100)={0x0, 0x263e, 0x14, 0x20000002, 0x34f, 0x0, r3}, &(0x7f00000000c0), &(0x7f0000000000)) (async) r4 = syz_io_uring_setup(0x1150, &(0x7f0000000100)={0x0, 0x263e, 0x14, 0x20000002, 0x34f, 0x0, r3}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x4, 0xcf4e74310708dfc4, 0xc}) 6m53.910620332s ago: executing program 4 (id=2480): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0xa, 0x1, 0x3, "9adf4b552fb8af2b8f72f309000000a590d25fdab1e043cc1a70c317fd815cee", 0x3131354f}) 6m53.841405252s ago: executing program 4 (id=2481): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x1714, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x120, 0x1}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(r5, &(0x7f0000000bc0)='./file0\x00', 0x800) syz_usb_connect(0x6, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="120100030a242bff800410d0e50c01"], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r5) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x68, r6, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x10001}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004880}, 0x40a1) io_uring_enter(r1, 0x27e2, 0x0, 0x0, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000020303000000000000000000000000000900020000000008020000000800010001"], 0x28}}, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x100, 0x100) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0003800400028005000100000000002c00018014000300fe80000000000000000000000000002414000400000000000000000000000000000000003c0002802c00018014000300fc00000000000000000000000000000014000400fc0100000000000000000000000000010c00028005000100000000003c0001"], 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0x8000) getsockopt$CAN_RAW_JOIN_FILTERS(r7, 0x65, 0x6, &(0x7f0000000240), &(0x7f0000000280)=0x4) write(r7, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400070080000300", 0x33a) 6m52.054052564s ago: executing program 4 (id=2483): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="120100003a982a08cd0ca310a22301020301090212003f33d5b4b482f61de8c601000000"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="0000db3d00000b0000000000"], 0x0, 0x0}) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8042, 0x100) fallocate(r2, 0x0, 0x1000000, 0x3) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000680)={0x0, 0x7fffffff, 0x10, 0x9}, &(0x7f00000006c0)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000700)={0x6, 0x2, 0x8000, 0xd24, 0x0, 0x800, 0x9a, 0x1ff, r3}, &(0x7f0000000740)=0x20) syz_io_uring_setup(0x49ea, &(0x7f0000000080)={0x0, 0xa199, 0x800, 0x2, 0x1d, 0x0, r2}, &(0x7f0000000100), &(0x7f0000000140)) bind$alg(r1, &(0x7f0000019080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x7c) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c582", 0x56ad) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x1}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000200)={0x14, &(0x7f0000000180)={0x20, 0x22, 0x1a, {0x1a, 0x3, "c1e79e6bbfbdef71f27545b5cd9abfd951e518679d40a82a"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000005c0)={0x44, &(0x7f00000002c0)={0x20, 0x17, 0xc0, "095a1e32510d4de5bd64cd16ae6e26bb8decb47a7b4704f9420ceda609a97466e053745ed4892e70860918f5fc79acca12641bb590ae7166a21ff9c28704eb9a83c52646cb141c6d5680a41f22d55da336adecb7a82c4c0c287e95a6b716ade93ccffac9d77308ac79f4c2c80e5d17f78f53a9641fbc414c16f83128858d2f50a62394cb2d0880d6930c805f13d13897e2292e2f255140d1ecc20ccca391eaa6af1b8dbda3d67ea977a904f729d569bb51459131484008bc9a422a005d26f66a"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xff}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000480)={0x20, 0x80, 0x1c, {0x3, 0x7, 0x3, 0x5, 0x6, 0x7, 0x7, 0x3, 0xdba, 0xf1c2, 0x4, 0xff}}, &(0x7f00000004c0)={0x20, 0x85, 0x4, 0x5}, &(0x7f0000000500)={0x20, 0x83, 0x2}, &(0x7f0000000540)={0x20, 0x87, 0x2, 0x6}, &(0x7f0000000580)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000440)=[{0x6, 0xfc, 0x0, 0x1}]}, 0x10) listen(r6, 0xfffffff8) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x2, @multicast1}, 0x10) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r8, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x218, 0x218, 0x0, 0x218, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'pimreg1\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) close_range(r6, 0xffffffffffffffff, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 6m51.3774046s ago: executing program 4 (id=2487): r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000400)=""/135, 0x87}], 0x1, 0x7, 0x0) 6m49.785660458s ago: executing program 32 (id=2487): r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000400)=""/135, 0x87}], 0x1, 0x7, 0x0) 11.995958719s ago: executing program 1 (id=4174): syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0xcf, 0x0, &(0x7f0000000140)=0xa4ffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x1}, 0x0) 9.571176694s ago: executing program 0 (id=4191): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000021c0)=@delchain={0x24, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x4}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x91}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 9.480642756s ago: executing program 0 (id=4193): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) 8.479502398s ago: executing program 1 (id=4195): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@ipv6_delrule={0x38, 0x21, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x1, 0x0, 0x0, 0x0, 0x1, 0x10}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'macvtap0\x00'}, @FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x4}]}, 0x38}}, 0x40) 8.351776736s ago: executing program 0 (id=4196): r0 = syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029b0003010000000904000000010100000a2401000000020102092408000000004c58062404000052072405000053f10b24050000133b9bda531c092405fc0596efc359090401000001020000090401010101020000090501090000000000072501000600000904020000010200000904020101010200000b2402017f0200018b7e8e07240100000000090582091000000000072501f5"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="2800020000000207"], &(0x7f0000000140)=ANY=[@ANYBLOB="00037d0000007d030a"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000040)=ANY=[@ANYBLOB='\b\x00\x00\x00']) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 8.273884488s ago: executing program 1 (id=4197): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x9, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) sendmmsg$inet(r2, &(0x7f0000008b80)=[{{0x0, 0x0, 0x0}}], 0x1a000, 0x40000) 8.044846887s ago: executing program 5 (id=4198): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x101}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="3de6", 0x2}], 0x1}}], 0x1, 0x48819) sendto$inet6(r0, &(0x7f00000014c0), 0x0, 0x4000, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/158, 0x9e, 0x1, 0x0}, &(0x7f0000000180)=0x40) 7.910417537s ago: executing program 5 (id=4199): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x205, 0x6, 0x0, 0x0, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x4, 0x0, 0x7, 0x0, 0x2, 0x0, 0x6a, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000280)={'\x00', 0xf, 0x66a, 0x9, 0x0, 0x1, 0x80a4000, 0xd000, '\x00', 0xd5ad}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.347982461s ago: executing program 5 (id=4201): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat2$dir(0xffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001300000008000300", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x45}, 0x48850) 7.280277254s ago: executing program 1 (id=4202): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r1, 0x6200}], 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x4000006, 0x1, "42341f9b1000007e4f00"}) r2 = syz_open_pts(r1, 0x103100) dup3(r2, r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x0) 7.239126141s ago: executing program 5 (id=4203): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x10000000}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0xffffffc0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xf, &(0x7f0000000380)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffd}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r3, 0x305, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x20000000) 6.774155662s ago: executing program 3 (id=4204): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4a2000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="e9a4ea8d246a02fb3d7b6d", 0xb}], 0x1}}, {{0x0, 0x0, 0x0, 0xd}}], 0x2, 0x4008) recvmsg$kcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) 6.044465712s ago: executing program 1 (id=4205): syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0xcf, 0x0, &(0x7f0000000140)=0xa4ffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x1}, 0x0) 4.134514747s ago: executing program 0 (id=4208): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f0000000280)={0x0, 0x6, 0x0, 0x4, 0x20, 0x1e, 0x100000e}) syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x26, 0x17, 0xc, 0x40, 0x1934, 0x706, 0xe29e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd1, 0x5e, 0xa4}}]}}]}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_GET_IRQCHIP(r5, 0xc208ae62, &(0x7f00000003c0)={0x2, 0x0, @pic={0x3, 0xf5, 0x72, 0x7, 0x85, 0x5, 0x3, 0x2, 0x6, 0x6, 0x7, 0x96, 0x6, 0x0, 0x4, 0x9}}) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000440)=@ccm_128={{0x303}, "32b11d99d8c73206", "637394d624c28c1f98c3e463609ba2dd", "d3c61201", "bfe500142fce281e"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "0300", "95670cff05e29ee8dcfc54e13b2dd711", "fdffb26f", "a2deb79f8c96bff4"}, 0x28) 3.93298118s ago: executing program 2 (id=4209): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x101}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="3de6", 0x2}], 0x1}}], 0x1, 0x48819) sendto$inet6(r0, &(0x7f00000014c0), 0x0, 0x4000, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/158, 0x9e, 0x1, 0x0}, &(0x7f0000000180)=0x40) 3.814748102s ago: executing program 2 (id=4210): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) r2 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000700), 0x119200, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r7, 0xc0286405, &(0x7f0000000380)={0x69, 0x12, {0xffffffffffffffff}, {0xee01}, 0x0, 0x1000}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r6, {0xee01, 0xee00}}, './file0\x00'}) sendmsg$unix(r0, &(0x7f0000000780)={&(0x7f0000000280)=@abs={0xdc5d84db4e0d8ff2, 0x0, 0x4e21}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000200)="b6dfbabef5c6236520e67a7599a821ebbae8a3c3cc256499259d1fd3f13fcdfb49aa8434aa650dd499c47a11fd125994", 0x30}, {&(0x7f0000000a00)="d74fc4ecd631da86b2f70a", 0xb}, {&(0x7f0000000340)="d45f98474e05618400abc4b5", 0xc}, {0x0}, {&(0x7f00000004c0)="0a1f6058f2940e57bf7d17373739558a984daa8b3fa06dcc42caf7693577dc5312ace9369989c3373f4c22b29d72e348841083ca9377fbc80cb3fc0b551fbc55f42abb5375fdc6157609289356f03129fb959dcc29ed980e5579083d31ab4f466576b2fd92949db9faaa5097c13001630c027c2a8fbc95a0867a7f1495089b13448649203f090c73be68e733f313dcc9d3e9c84a3da8d50a7f56c399a6315b0f52908d1ace5d6d97b0d284bf933fba07b5ab41adb420625cedf190238937", 0xbe}, {0x0}], 0x6, &(0x7f0000000740)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r8, r9}}}], 0x20}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) io_uring_enter(r2, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) r10 = getpid() r11 = syz_pidfd_open(r10, 0x0) open_by_handle_at(r11, &(0x7f0000000180)=@OVL_FILEID_V0={0x15, 0xfe, {0x0, 0xfb, 0x15, 0x2, 0x44, "b464e15688d32a5c55332899da424cb5"}}, 0x1) shutdown(r5, 0x1) r12 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r13 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r13, 0x0, 0x40, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r12, 0x84, 0x21, 0x0, &(0x7f0000000480)) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003a80)=ANY=[@ANYBLOB="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"], 0x1cdc}}, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) r15 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r16 = ioctl$LOOP_CTL_GET_FREE(r15, 0x4c82) ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, r16) 3.692723872s ago: executing program 5 (id=4211): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x9, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) sendmmsg$inet(r2, &(0x7f0000008b80)=[{{0x0, 0x0, 0x0}}], 0x1a000, 0x40000) 3.535988765s ago: executing program 3 (id=4212): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x9, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) sendmmsg$inet(r0, &(0x7f0000008b80)=[{{0x0, 0x0, 0x0}}], 0x1a000, 0x40000) 2.728594821s ago: executing program 3 (id=4213): socket(0x27, 0x3, 0x3d) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[], 0x33fe0}}, 0x40010) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) pipe(&(0x7f0000000140)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4092, 0xffc}], 0x1, 0x0, 0x0, 0x20000800}, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffa, @rand_addr, 0x5}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd27, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x4}, {0x6, 0xffff}, {0xfff3, 0xfff3}}}, 0x24}}, 0x880) ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000100)={0x9, {0xf8000002, 0x9, 0x8, 0xb}}) 2.034479938s ago: executing program 0 (id=4214): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r0) r1 = epoll_create1(0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x60003018}) ppoll(&(0x7f0000001040)=[{r2, 0x48}, {r1, 0x8502}], 0x2, 0x0, 0x0, 0x0) 1.656428241s ago: executing program 2 (id=4215): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r1, 0x6200}], 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x4000006, 0x1, "42341f9b1000007e4f00"}) r2 = syz_open_pts(r1, 0x103100) dup3(r2, r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x0) 1.468806645s ago: executing program 5 (id=4216): socket(0x27, 0x3, 0x3d) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[], 0x33fe0}}, 0x40010) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) pipe(&(0x7f0000000140)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4092, 0xffc}], 0x1, 0x0, 0x0, 0x20000800}, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffa, @rand_addr, 0x5}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)='D', 0x1, 0x404c814, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd27, 0xfffffffc, {0x0, 0x0, 0x0, r5, {0x8, 0x4}, {0x6, 0xffff}, {0xfff3, 0xfff3}}}, 0x24}}, 0x880) ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000100)={0x9, {0xf8000002, 0x9, 0x8, 0xb}}) 1.036525344s ago: executing program 1 (id=4217): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x10000000}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r3, 0x305, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x20000000) 870.807871ms ago: executing program 3 (id=4218): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) pipe(&(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_TIMEOUT={0xc}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd8}}, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) epoll_create1(0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 682.744521ms ago: executing program 2 (id=4219): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=r0, @ANYRESDEC=0x0]) r1 = socket(0x2, 0x3, 0xff) getsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000140), &(0x7f0000000040)=0x3d) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x205, 0x6, 0x0, 0x0, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x4, 0x0, 0x7, 0x0, 0x2, 0x0, 0x6a, 0x8d], 0xeeee8000, 0x2011c0}) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000440)={0x0, 0xf2, 0x7f, 0x4, 0x577, 0x130, 0x1, 0x625, {0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x4, 0x4, 0x8, 0x7fffffff, 0x3}}, &(0x7f0000000100)=0xb0) sendmsg$NFT_BATCH(r1, 0x0, 0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 285.904993ms ago: executing program 2 (id=4220): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x101}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="3de6", 0x2}], 0x1}}], 0x1, 0x48819) sendto$inet6(r0, &(0x7f00000014c0)="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", 0x159, 0x4000, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/158, 0x9e, 0x1, 0x0}, &(0x7f0000000180)=0x40) 284.702094ms ago: executing program 3 (id=4221): r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="180000002e00090027bd700000000000040000000400"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 80.295221ms ago: executing program 3 (id=4222): add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000000c0), 0x6088, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000240)=0x9) lsetxattr$security_capability(&(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r2 = epoll_create(0xd752) socket$can_bcm(0x1d, 0x2, 0x2) socket(0x16, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x4809, 0x0, 0xfffffdfffffffffd, 0xfa11, 0xfbffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r5, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x64, r7, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffeffffc}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x20}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) epoll_pwait(r2, &(0x7f00000000c0)=[{}], 0x1, 0xef19, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)={0x1}) bpf$MAP_CREATE(0x1101000000000000, &(0x7f00000002c0)=ANY=[@ANYBLOB="1900000700"/20, @ANYRES32, @ANYBLOB="8100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000000000000300"/28], 0x50) syz_usb_connect(0x0, 0x3d, &(0x7f0000000780)={{0x12, 0x1, 0x0, 0xc9, 0x66, 0x7c, 0x40, 0x1d50, 0x60c6, 0xafe7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x58, 0x77, 0x2, 0x25, 0x84, 0x53, 0x0, [], [{{0x9, 0x5, 0xb, 0x0, 0x10, 0x1, 0x2, 0x2}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0xff, 0x0, 0x6, [@generic={0x7, 0x5, "d57a3b2b6c"}]}}]}}]}}]}}, 0x0) 34.553802ms ago: executing program 2 (id=4223): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x9, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) sendmmsg$inet(r0, &(0x7f0000008b80)=[{{0x0, 0x0, 0x0}}], 0x1a000, 0x40000) 0s ago: executing program 0 (id=4224): socket(0x27, 0x3, 0x3d) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[], 0x33fe0}}, 0x40010) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) pipe(&(0x7f0000000140)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4092, 0xffc}], 0x1, 0x0, 0x0, 0x20000800}, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffa, @rand_addr, 0x5}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)='D', 0x1, 0x404c814, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd27, 0xfffffffc, {0x0, 0x0, 0x0, r5, {0x8, 0x4}, {0x6, 0xffff}, {0xfff3, 0xfff3}}}, 0x24}}, 0x880) ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000100)={0x9, {0xf8000002, 0x9, 0x8, 0xb}}) kernel console output (not intermixed with test programs): -1: Product: syz [ 975.627064][ T24] usb 1-1: SerialNumber: syz [ 975.642558][ T24] usb 1-1: config 0 descriptor?? [ 975.661977][ T24] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 975.690048][ T24] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input85 [ 975.829162][ T10] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 975.958656][T17387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 976.034281][T17387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 976.057293][ T10] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 976.066188][T17387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3348'. [ 976.123632][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 976.179679][ T856] usb 1-1: USB disconnect, device number 25 [ 976.179857][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 976.192645][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.246735][ T856] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 976.269657][ T5904] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 976.294061][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 976.309993][ T5917] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 976.364601][ T10] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 976.406460][T15717] udevd[15717]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 976.424365][ T5904] usb 3-1: device descriptor read/64, error -71 [ 976.504860][T17404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 976.530376][ T5917] usb 2-1: Using ep0 maxpacket: 8 [ 976.538727][T17404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 976.569644][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 976.582953][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 976.607728][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 976.620545][ T5917] usb 2-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=f6.82 [ 976.639255][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.659264][ T5917] usb 2-1: Product: syz [ 976.663960][ T5917] usb 2-1: Manufacturer: syz [ 976.668589][ T5917] usb 2-1: SerialNumber: syz [ 976.681659][T17404] fuse: Bad value for 'user_id' [ 976.682863][ T5917] usb 2-1: config 0 descriptor?? [ 976.693847][ T5904] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 976.703983][T17404] fuse: Bad value for 'user_id' [ 976.849149][ T5904] usb 3-1: device descriptor read/64, error -71 [ 976.961894][ T5904] usb usb3-port1: attempt power cycle [ 977.300559][ T5904] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 977.330031][ T5904] usb 3-1: device descriptor read/8, error -71 [ 977.570110][ T5904] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 977.589798][ T5904] usb 3-1: device descriptor read/8, error -71 [ 977.622611][ T856] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 977.706447][ T5904] usb usb3-port1: unable to enumerate USB device [ 977.850328][ T856] usb 1-1: Using ep0 maxpacket: 32 [ 977.858403][ T856] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 977.879244][ T856] usb 1-1: config 0 has no interfaces? [ 977.884911][ T856] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 977.970935][ T856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.982739][ T856] usb 1-1: config 0 descriptor?? [ 978.337121][ T5931] usb 2-1: USB disconnect, device number 15 [ 978.779991][ T5931] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 978.943869][ T5931] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 978.961398][ T5931] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 978.982656][ T5931] usb 2-1: config 1 interface 0 has no altsetting 0 [ 978.999420][ T5931] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 979.017998][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.107398][ T5931] usb 2-1: Product: syz [ 979.129733][T13287] usb 4-1: USB disconnect, device number 105 [ 979.140476][T17450] veth3: entered promiscuous mode [ 979.148615][ T5931] usb 2-1: Manufacturer: syz [ 979.153950][ T5931] usb 2-1: SerialNumber: syz [ 979.172879][T17450] veth3: entered allmulticast mode [ 979.182566][T17440] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 979.199506][T17440] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 979.486803][T17453] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3369'. [ 979.494073][ T5931] rtl8150 2-1:1.0: couldn't reset the device [ 979.508073][ T5931] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 979.547466][ T5931] usb 2-1: USB disconnect, device number 16 [ 980.061464][T17464] sctp: [Deprecated]: syz.1.3373 (pid 17464) Use of int in max_burst socket option. [ 980.061464][T17464] Use struct sctp_assoc_value instead [ 980.209457][ T5904] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 980.364177][ T5931] usb 1-1: USB disconnect, device number 26 [ 980.376419][T17452] syz.2.3369 (17452): drop_caches: 2 [ 980.401317][ T5904] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 980.412935][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.438974][ T5904] usb 4-1: config 0 descriptor?? [ 980.458257][ T5904] cp210x 4-1:0.0: cp210x converter detected [ 980.802355][ T5931] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 980.867290][ T5904] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 980.892283][T17483] fuse: Bad value for 'user_id' [ 980.897681][T17483] fuse: Bad value for 'user_id' [ 980.939336][ T5931] usb 1-1: device descriptor read/64, error -71 [ 980.949556][ T24] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 981.056652][T17486] vlan2: entered allmulticast mode [ 981.062675][T17486] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 981.107341][ T5904] usb 4-1: cp210x converter now attached to ttyUSB0 [ 981.109280][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 981.123806][ T24] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 981.133702][T13287] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 981.142315][ T24] usb 3-1: config 0 has no interface number 0 [ 981.150984][ T24] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 981.162784][ T24] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 981.175419][ T24] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 981.184880][ T5931] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 981.193867][ T24] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 981.203297][ T24] usb 3-1: Product: syz [ 981.207756][ T24] usb 3-1: SerialNumber: syz [ 981.224155][ T24] usb 3-1: config 0 descriptor?? [ 981.235754][ T24] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 981.247091][ T24] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input86 [ 981.302167][T13287] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 981.302682][ T5904] usb 4-1: USB disconnect, device number 106 [ 981.318722][T13287] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 981.331388][ T5931] usb 1-1: device descriptor read/64, error -71 [ 981.349156][T13287] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.349990][ T5904] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 981.413361][T13287] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 981.457733][ T5904] cp210x 4-1:0.0: device disconnected [ 981.459487][ T5931] usb usb1-port1: attempt power cycle [ 981.535474][T13287] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 981.642769][T17481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 981.652010][T17481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 981.661190][T17493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 981.680409][T17493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 981.720610][T17481] fuse: Bad value for 'user_id' [ 981.725520][T17481] fuse: Bad value for 'user_id' [ 981.734406][T17478] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3379'. [ 981.797222][T17478] 8021q: adding VLAN 0 to HW filter on device bond1 [ 981.870208][ C1] cm109_urb_ctl_callback: 11 callbacks suppressed [ 981.870236][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 981.870757][ T5904] usb 3-1: USB disconnect, device number 16 [ 981.876716][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 981.939241][ T5931] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 981.959901][ T5931] usb 1-1: device descriptor read/8, error -71 [ 981.998406][ T5904] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 982.199143][ T5931] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 982.270316][ T5931] usb 1-1: device descriptor read/8, error -71 [ 982.309132][T13287] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 982.381328][ T5931] usb usb1-port1: unable to enumerate USB device [ 982.471058][T13287] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 982.503926][T13287] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 982.535720][T13287] usb 4-1: config 1 interface 0 has no altsetting 0 [ 982.558969][T13287] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 982.579831][T13287] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.588149][T13287] usb 4-1: Product: syz [ 982.593430][T13287] usb 4-1: Manufacturer: syz [ 982.598108][T13287] usb 4-1: SerialNumber: syz [ 982.610831][T17498] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 982.618251][T17498] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 982.887548][T13287] rtl8150 4-1:1.0: couldn't reset the device [ 982.894411][T13287] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 982.910397][ T856] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 982.910595][T13287] usb 4-1: USB disconnect, device number 107 [ 983.089509][ T856] usb 2-1: Using ep0 maxpacket: 32 [ 983.096714][ T856] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 983.107091][ T856] usb 2-1: config 0 has no interfaces? [ 983.112670][ T856] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 983.121940][ T856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.133957][ T856] usb 2-1: config 0 descriptor?? [ 983.789184][T17526] trusted_key: encrypted_key: insufficient parameters specified [ 983.891073][ T5904] usb 6-1: USB disconnect, device number 58 [ 984.119675][ T856] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 984.289137][ T856] usb 4-1: Using ep0 maxpacket: 16 [ 984.296290][ T856] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 984.308302][ T856] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 984.325495][ T856] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 984.335350][ T856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.368669][ T856] usb 4-1: Product: syz [ 984.375432][ T856] usb 4-1: Manufacturer: syz [ 984.384779][ T856] usb 4-1: SerialNumber: syz [ 984.811815][ T856] usb 4-1: config 0 descriptor?? [ 984.835910][ T856] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 984.853679][ T856] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 985.513998][ T856] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 985.523019][ T856] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 985.644390][ T10] usb 2-1: USB disconnect, device number 17 [ 985.949237][T13287] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 985.969233][ T5904] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 986.049658][ T5931] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 986.113221][T13287] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 986.121862][ T5904] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 986.124090][T13287] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 986.133905][ T5904] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 986.145953][T13287] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 986.162591][T13287] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.164259][ T856] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 986.171010][T13287] usb 1-1: Product: syz [ 986.171031][T13287] usb 1-1: Manufacturer: syz [ 986.171047][T13287] usb 1-1: SerialNumber: syz [ 986.193498][ T5904] usb 3-1: config 1 interface 0 has no altsetting 0 [ 986.200939][ T856] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 986.202192][ T5931] usb 6-1: device descriptor read/64, error -71 [ 986.209823][ T5904] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 986.226055][ T856] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 986.232725][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.240941][ T856] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 986.247417][ T5904] usb 3-1: Product: syz [ 986.252355][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 986.261013][ T856] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 986.267513][ T5904] usb 3-1: Manufacturer: syz [ 986.272372][ T5904] usb 3-1: SerialNumber: syz [ 986.277144][ T856] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 986.293691][T17545] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 986.298966][ T856] usb 4-1: USB disconnect, device number 108 [ 986.304031][T17545] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 986.416683][T13287] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 986.434361][ T10] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 986.448114][ T10] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 986.459850][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 986.469337][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.471334][ T5931] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 986.490594][T17555] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 986.512315][T13287] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 986.538755][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 986.542544][T13287] usb 1-1: USB disconnect, device number 31 [ 986.596495][T15715] udevd[15715]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 986.629220][ T856] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 986.632404][ T5931] usb 6-1: device descriptor read/64, error -71 [ 986.687321][ T5904] rtl8150 3-1:1.0: couldn't reset the device [ 986.707184][T17560] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3404'. [ 987.254283][ T5904] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 987.294387][ T5904] usb 3-1: USB disconnect, device number 17 [ 987.329303][ T856] usb 4-1: Using ep0 maxpacket: 16 [ 987.335771][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 987.346169][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 987.356879][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 987.364874][ T856] usb 4-1: device descriptor read/all, error -32 [ 987.369801][ T5931] usb usb6-port1: attempt power cycle [ 987.587830][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 987.587851][ T30] audit: type=1326 audit(1761914369.980:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17563 comm="syz.0.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa74ef8efc9 code=0x7ffc0000 [ 987.617133][ C0] vkms_vblank_simulate: vblank timer overrun [ 987.859685][ T30] audit: type=1326 audit(1761914370.020:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17563 comm="syz.0.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa74ef8efc9 code=0x7ffc0000 [ 987.889395][ T5931] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 987.900900][ T30] audit: type=1326 audit(1761914370.260:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17563 comm="syz.0.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa74ef8efc9 code=0x7ffc0000 [ 987.927219][ T5931] usb 6-1: device descriptor read/8, error -71 [ 987.957660][ T30] audit: type=1326 audit(1761914370.260:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17563 comm="syz.0.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa74ef8efc9 code=0x7ffc0000 [ 988.009569][ T30] audit: type=1326 audit(1761914370.260:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17563 comm="syz.0.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa74ef8efc9 code=0x7ffc0000 [ 988.049260][ T30] audit: type=1326 audit(1761914370.280:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17563 comm="syz.0.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa74ef8efc9 code=0x7ffc0000 [ 988.075702][ T30] audit: type=1326 audit(1761914370.290:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17563 comm="syz.0.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa74ef8efc9 code=0x7ffc0000 [ 988.100913][ T30] audit: type=1326 audit(1761914370.290:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17563 comm="syz.0.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa74ef8efc9 code=0x7ffc0000 [ 988.126130][ T30] audit: type=1326 audit(1761914370.300:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17563 comm="syz.0.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fa74ef8efc9 code=0x7ffc0000 [ 988.245458][ T30] audit: type=1326 audit(1761914370.300:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17563 comm="syz.0.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa74ef8efc9 code=0x7ffc0000 [ 988.268022][ C0] vkms_vblank_simulate: vblank timer overrun [ 988.359390][ T856] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 988.377692][ T5931] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 988.470548][ T5931] usb 6-1: device descriptor read/8, error -71 [ 988.588238][ T5931] usb usb6-port1: unable to enumerate USB device [ 988.662863][ T856] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 988.675000][ T856] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 988.694662][ T856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.761989][ T856] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 988.923676][ T5820] usb 2-1: USB disconnect, device number 18 [ 988.966992][T17568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 988.979349][T17568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 988.997151][T17568] fuse: Bad value for 'user_id' [ 989.002458][T17568] fuse: Bad value for 'user_id' [ 989.109735][ T856] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 989.594985][ T5820] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 989.917143][ T5820] usb 2-1: Using ep0 maxpacket: 32 [ 989.931499][ T5820] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 989.942528][ T5820] usb 2-1: config 0 has no interfaces? [ 989.948130][ T5820] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 989.971811][ T5820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.998673][ T5820] usb 2-1: config 0 descriptor?? [ 991.884267][T13287] usb 4-1: USB disconnect, device number 110 [ 991.958142][T17599] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3416'. [ 992.231026][ T10] usb 2-1: USB disconnect, device number 19 [ 992.285006][T17601] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3417'. [ 992.582199][T17608] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 992.771448][T17614] debugfs: 'netdev:nicvf0' already exists in 'phy22' [ 993.064530][T17617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3422'. [ 993.130344][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.136921][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.279232][ T856] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 994.359177][ T10] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 994.439179][ T856] usb 3-1: Using ep0 maxpacket: 16 [ 994.447313][ T856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 994.458825][ T856] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 994.468353][ T856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.494198][ T856] usb 3-1: config 0 descriptor?? [ 994.522143][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 994.533707][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 994.563090][ T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 994.588976][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.641837][ T10] usb 4-1: config 0 descriptor?? [ 994.921451][ T5820] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 994.950323][T17636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 994.961275][T17634] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 994.980198][T17636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 995.011248][ T856] usbhid 3-1:0.0: can't add hid device: -71 [ 995.041697][ T856] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 995.062721][ T856] usb 3-1: USB disconnect, device number 18 [ 995.120562][ T5820] usb 6-1: Using ep0 maxpacket: 32 [ 995.137517][ T5820] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 170, using maximum allowed: 30 [ 995.159168][ T5820] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 170 [ 995.175446][ T5820] usb 6-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 995.190696][ T5820] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.199726][ T5820] usb 6-1: Product: syz [ 995.205841][ T5820] usb 6-1: Manufacturer: syz [ 995.211533][ T5820] usb 6-1: SerialNumber: syz [ 995.404176][T17645] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3433'. [ 995.425402][ T10] pyra 0003:1E7D:2CF6.0029: item fetching failed at offset 0/7 [ 995.445816][ T5820] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 995.454264][ T10] pyra 0003:1E7D:2CF6.0029: parse failed [ 995.460078][ T10] pyra 0003:1E7D:2CF6.0029: probe with driver pyra failed with error -22 [ 995.473874][ T5820] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 995.497893][ T5820] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 995.623022][ T5820] usb 4-1: USB disconnect, device number 111 [ 995.651344][ T10] usb 6-1: USB disconnect, device number 63 [ 995.663593][ T10] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 995.686859][ T10] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 995.701690][ T10] visor 6-1:1.0: device disconnected [ 995.829161][ T5931] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 995.990602][ T5931] usb 3-1: Using ep0 maxpacket: 32 [ 996.000254][ T5931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 996.011324][ T5931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 996.021155][ T5931] usb 3-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 996.030274][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.041319][ T5931] usb 3-1: config 0 descriptor?? [ 996.499130][ T10] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 996.507008][ T5820] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 996.519823][T13287] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 996.580195][ T5931] smartjoyplus 0003:0925:8866.002A: hidraw0: USB HID v0.00 Device [HID 0925:8866] on usb-dummy_hcd.2-1/input0 [ 996.603171][ T5931] smartjoyplus 0003:0925:8866.002A: Force feedback for SmartJoy PLUS PS2/USB adapter [ 996.659287][ T5820] usb 6-1: Using ep0 maxpacket: 16 [ 996.666762][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 996.679358][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 996.688476][ T5820] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 996.690227][T13287] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 996.700911][ T5820] usb 6-1: config 0 has no interface number 0 [ 996.713824][ T5820] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 996.725362][ T10] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 996.729069][T13287] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 996.744787][ T10] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 996.752981][ T5820] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 996.759871][T13287] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 996.765980][ T10] usb 4-1: Manufacturer: syz [ 996.779752][ T5820] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 996.794948][T13287] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.800309][ T10] usb 4-1: config 0 descriptor?? [ 996.808953][ T5820] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 996.821368][ T5820] usb 6-1: Product: syz [ 996.826073][ T5820] usb 6-1: SerialNumber: syz [ 996.827175][T13287] usb 1-1: config 0 descriptor?? [ 996.853017][ T5820] usb 6-1: config 0 descriptor?? [ 996.853981][T13287] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 996.866674][ T5820] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 996.874214][T13287] dvb-usb: bulk message failed: -22 (3/0) [ 996.886152][ T5820] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input87 [ 996.899069][T13287] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 996.923488][T13287] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 996.931748][T13287] usb 1-1: media controller created [ 996.941845][T13287] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 996.961689][T13287] dvb-usb: bulk message failed: -22 (6/0) [ 996.975897][T13287] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 996.992612][T13287] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input88 [ 997.165710][T13287] dvb-usb: schedule remote query interval to 150 msecs. [ 997.180160][T13287] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 997.202941][T17651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 997.212070][T17651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 997.226390][T17651] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3436'. [ 997.240206][ T10] usb 1-1: USB disconnect, device number 32 [ 997.325244][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 997.388849][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 997.392276][T13287] usb 6-1: USB disconnect, device number 64 [ 997.395867][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 997.424820][T13287] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 997.866804][T17674] FAULT_INJECTION: forcing a failure. [ 997.866804][T17674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 998.174512][T17674] CPU: 1 UID: 0 PID: 17674 Comm: syz.0.3442 Not tainted syzkaller #0 PREEMPT(full) [ 998.174541][T17674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 998.174554][T17674] Call Trace: [ 998.174563][T17674] [ 998.174573][T17674] dump_stack_lvl+0x189/0x250 [ 998.174607][T17674] ? __pfx____ratelimit+0x10/0x10 [ 998.174635][T17674] ? __pfx_dump_stack_lvl+0x10/0x10 [ 998.174672][T17674] ? __pfx__printk+0x10/0x10 [ 998.174709][T17674] should_fail_ex+0x414/0x560 [ 998.174747][T17674] _copy_to_user+0x31/0xb0 [ 998.174777][T17674] simple_read_from_buffer+0xe1/0x170 [ 998.174814][T17674] proc_fail_nth_read+0x1b3/0x220 [ 998.174845][T17674] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 998.174875][T17674] ? rw_verify_area+0x2a6/0x4d0 [ 998.174901][T17674] ? __lock_acquire+0xab9/0xd20 [ 998.174920][T17674] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 998.174949][T17674] vfs_read+0x200/0xa30 [ 998.174977][T17674] ? fdget_pos+0x247/0x320 [ 998.175002][T17674] ? __pfx___mutex_lock+0x10/0x10 [ 998.175032][T17674] ? __pfx_vfs_read+0x10/0x10 [ 998.175062][T17674] ? __fget_files+0x2a/0x420 [ 998.175093][T17674] ? __fget_files+0x3a0/0x420 [ 998.175112][T17674] ? __fget_files+0x2a/0x420 [ 998.175143][T17674] ksys_read+0x145/0x250 [ 998.175175][T17674] ? __pfx_ksys_read+0x10/0x10 [ 998.175208][T17674] ? do_syscall_64+0xbe/0xfa0 [ 998.175239][T17674] do_syscall_64+0xfa/0xfa0 [ 998.175262][T17674] ? lockdep_hardirqs_on+0x9c/0x150 [ 998.175289][T17674] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.175310][T17674] ? clear_bhb_loop+0x60/0xb0 [ 998.175336][T17674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.175356][T17674] RIP: 0033:0x7fa74ef8d9dc [ 998.175376][T17674] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 998.175394][T17674] RSP: 002b:00007fa74fee0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 998.175416][T17674] RAX: ffffffffffffffda RBX: 00007fa74f1e5fa0 RCX: 00007fa74ef8d9dc [ 998.175432][T17674] RDX: 000000000000000f RSI: 00007fa74fee00a0 RDI: 0000000000000005 [ 998.175445][T17674] RBP: 00007fa74fee0090 R08: 0000000000000000 R09: 0000000000000000 [ 998.175459][T17674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 998.175471][T17674] R13: 00007fa74f1e6038 R14: 00007fa74f1e5fa0 R15: 00007fa74f30fa28 [ 998.175508][T17674] [ 998.412382][ C1] vkms_vblank_simulate: vblank timer overrun [ 998.866843][ T5820] usb 3-1: USB disconnect, device number 19 [ 999.279132][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 999.479131][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 999.486821][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 999.502589][ T10] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 999.518010][ T10] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 999.534697][ T10] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 999.545887][ T10] usb 2-1: config 128 has no interface number 0 [ 999.554524][ T10] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 999.623208][T17698] wireguard1: entered promiscuous mode [ 999.631567][T17698] wireguard1: entered allmulticast mode [ 1000.471681][ T10] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1000.472713][ T5891] usb 4-1: USB disconnect, device number 112 [ 1000.741532][ T10] usb 2-1: config 128 interface 127 has no altsetting 0 [ 1000.782185][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1000.791366][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.801515][ T10] usb 2-1: Product: syz [ 1000.819115][ T10] usb 2-1: Manufacturer: syz [ 1000.823880][ T10] usb 2-1: SerialNumber: syz [ 1001.129733][ T10] usb 2-1: USB disconnect, device number 20 [ 1001.229149][ T5891] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1001.232496][T15715] udevd[15715]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1001.419773][ T5891] usb 4-1: Using ep0 maxpacket: 16 [ 1001.428358][ T5891] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1001.441049][ T5891] usb 4-1: config 0 has no interface number 0 [ 1001.461376][ T5891] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1001.491759][ T5891] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1001.521312][ T5891] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1001.534613][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1001.563300][ T5891] usb 4-1: Product: syz [ 1001.567612][ T5891] usb 4-1: SerialNumber: syz [ 1001.580062][ T5891] usb 4-1: config 0 descriptor?? [ 1001.584108][ T5820] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1001.588576][ T5891] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 1001.639487][ T5891] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input89 [ 1001.714836][T17713] binder: 17711:17713 unknown command 0 [ 1001.730438][T17713] binder: 17711:17713 ioctl c0306201 200000000080 returned -22 [ 1001.867031][T17704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1001.875982][T17713] binder: 17711:17713 ioctl c0306201 2000000003c0 returned -14 [ 1001.887200][T17704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1001.904548][T17717] binder: 17711:17717 ioctl c0306201 200000000180 returned -14 [ 1001.921758][T17704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3449'. [ 1001.970062][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1001.970847][ T856] usb 4-1: USB disconnect, device number 113 [ 1001.977074][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1002.023843][ T856] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1002.071957][ T10] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1002.228462][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1002.228483][ T30] audit: type=1326 audit(1761914384.600:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17722 comm="syz.1.3457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068a58efc9 code=0x7ffc0000 [ 1002.341651][ T5820] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1002.386810][ T5820] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1002.459452][ T5820] usb 6-1: can't read configurations, error -71 [ 1002.469606][ T30] audit: type=1326 audit(1761914384.600:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17722 comm="syz.1.3457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068a58efc9 code=0x7ffc0000 [ 1002.685495][T17734] veth3: entered promiscuous mode [ 1002.699232][ T30] audit: type=1326 audit(1761914384.610:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17722 comm="syz.1.3457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f068a58efc9 code=0x7ffc0000 [ 1002.733548][T17734] veth3: entered allmulticast mode [ 1002.741883][ T30] audit: type=1326 audit(1761914384.620:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17722 comm="syz.1.3457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f068a58efc9 code=0x7ffc0000 [ 1002.765437][ T30] audit: type=1326 audit(1761914384.620:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17725 comm="syz.1.3457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f068a5c1885 code=0x7ffc0000 [ 1002.792167][ T30] audit: type=1326 audit(1761914384.770:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17725 comm="syz.1.3457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f068a58efc9 code=0x7ffc0000 [ 1002.959315][ T5820] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1003.192058][ T5820] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1003.203013][ T5820] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1003.301800][T17749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3463'. [ 1003.321062][ T5820] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1003.330454][ T5820] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1003.347012][ T5820] usb 6-1: Manufacturer: syz [ 1003.349247][T17746] macvlan0: entered promiscuous mode [ 1003.358770][ T5820] usb 6-1: config 0 descriptor?? [ 1003.366833][T17746] netlink: 'syz.1.3463': attribute type 1 has an invalid length. [ 1003.403620][T17746] netlink: 'syz.1.3463': attribute type 2 has an invalid length. [ 1003.679172][ T5820] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1003.861949][ T5820] usb 4-1: Using ep0 maxpacket: 8 [ 1003.878482][ T5820] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1003.891318][ T5820] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1003.902610][ T5820] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1003.913228][ T5820] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1003.955579][ T5820] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1004.006206][ T5820] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1004.046939][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.317124][ T5820] usb 4-1: GET_CAPABILITIES returned 0 [ 1004.336880][ T30] audit: type=1326 audit(1761914386.730:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17757 comm="syz.1.3467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068a58efc9 code=0x7ffc0000 [ 1004.359803][ T5820] usbtmc 4-1:16.0: can't read capabilities [ 1004.377398][ T30] audit: type=1326 audit(1761914386.730:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17757 comm="syz.1.3467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f068a58efc9 code=0x7ffc0000 [ 1004.404336][ T30] audit: type=1326 audit(1761914386.760:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17757 comm="syz.1.3467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068a58efc9 code=0x7ffc0000 [ 1004.437913][ T30] audit: type=1326 audit(1761914386.760:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17757 comm="syz.1.3467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f068a58efc9 code=0x7ffc0000 [ 1004.639128][T13287] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1004.669330][T17764] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3468'. [ 1004.799649][T13287] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1004.811877][T13287] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1004.824130][T13287] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1004.835453][T13287] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1004.846250][T13287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.915722][T13287] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1005.067655][T13287] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1005.098772][ T5891] usb 4-1: USB disconnect, device number 114 [ 1005.155066][T15715] udevd[15715]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1005.413939][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1005.423233][ T10] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1005.436897][ T10] usb 1-1: can't read configurations, error -71 [ 1005.949349][ T5820] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1006.110002][ T5820] usb 3-1: Using ep0 maxpacket: 16 [ 1006.122615][ T5820] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 1006.320011][ T5820] usb 3-1: config 0 has no interface number 0 [ 1006.326251][ T5820] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1006.339890][ T5891] usb 6-1: USB disconnect, device number 66 [ 1006.342955][ T5820] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1006.428340][ T5820] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1006.461050][ T5820] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1006.652818][ T5820] usb 3-1: Product: syz [ 1006.659502][ T5820] usb 3-1: SerialNumber: syz [ 1006.766474][ T5820] usb 3-1: config 0 descriptor?? [ 1006.791983][ T5820] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 1006.829313][ T5820] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input90 [ 1006.847432][T17788] futex_wake_op: syz.3.3476 tries to shift op by 36; fix this program [ 1006.849160][ T10] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1006.891533][ T5891] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1006.914554][T17789] sctp: [Deprecated]: syz.3.3476 (pid 17789) Use of int in max_burst socket option. [ 1006.914554][T17789] Use struct sctp_assoc_value instead [ 1006.985258][T17773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1006.994237][T17773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1007.008525][T17773] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3471'. [ 1007.009435][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 1007.028523][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1007.039592][ T10] usb 1-1: config 0 has no interfaces? [ 1007.045547][ T10] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1007.055340][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.066647][ T10] usb 1-1: config 0 descriptor?? [ 1007.071144][ T5891] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 1007.083522][ T5891] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 1007.096261][ T5891] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1007.107593][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1007.108230][ T5891] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 1007.115265][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1007.132220][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1007.140915][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.140926][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1007.141060][ T10] usb 3-1: USB disconnect, device number 20 [ 1007.149182][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1007.149209][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1007.178519][ T5891] usb 6-1: Product: syz [ 1007.183411][ T5891] usb 6-1: Manufacturer: syz [ 1007.188285][ T5891] usb 6-1: SerialNumber: syz [ 1007.199888][ T10] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1007.218795][T17783] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1007.234546][T17783] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1007.276751][ T24] usb 2-1: USB disconnect, device number 21 [ 1007.513864][ T5891] rtl8150 6-1:1.0: couldn't reset the device [ 1007.520627][ T5891] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 1007.536090][ T5891] usb 6-1: USB disconnect, device number 67 [ 1008.475569][T17808] CUSE: info not properly terminated [ 1008.489613][T17803] : renamed from bridge_slave_0 (while UP) [ 1009.240582][ T5891] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1009.359530][ T24] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1009.466066][ T5891] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1009.476722][ T5891] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1009.496754][ T5820] usb 1-1: USB disconnect, device number 35 [ 1009.505092][ T5891] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1009.515392][ T5891] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1009.527772][ T24] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1009.553347][ T5891] usb 2-1: Manufacturer: syz [ 1009.558804][ T24] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1009.601558][ T5891] usb 2-1: config 0 descriptor?? [ 1009.607762][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.649532][ T5891] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1009.680277][ T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1009.761111][ T24] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1009.775871][T15717] udevd[15717]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1009.874230][T17824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1009.883819][T17824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1009.895858][T17824] fuse: Bad value for 'user_id' [ 1009.900845][T17824] fuse: Bad value for 'user_id' [ 1009.987475][T17832] netlink: 'syz.2.3490': attribute type 1 has an invalid length. [ 1010.079226][ T10] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1010.219788][T17832] veth3: entered promiscuous mode [ 1010.227075][T17832] bond2: (slave veth3): Enslaving as an active interface with a down link [ 1010.241607][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 1010.288651][T17832] bond2: (slave veth5): Enslaving as an active interface with a down link [ 1010.303078][ T10] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 1010.311638][ T10] usb 1-1: config 0 has no interface number 0 [ 1010.317851][ T10] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1010.346720][ T10] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1010.362562][T17832] bond2: entered promiscuous mode [ 1010.378790][T17832] bond2: entered allmulticast mode [ 1010.385383][ T10] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1010.394722][ T10] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1010.403356][ T10] usb 1-1: Product: syz [ 1010.409414][ T10] usb 1-1: SerialNumber: syz [ 1010.425765][ T10] usb 1-1: config 0 descriptor?? [ 1010.438196][ T10] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 1010.448292][ T10] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input91 [ 1010.485248][T17832] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1010.660084][T17830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1010.699808][T17830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1010.740291][T17830] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3489'. [ 1010.866394][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1010.873725][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1010.880905][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1010.888092][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1010.896774][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1010.916998][ T10] usb 1-1: USB disconnect, device number 36 [ 1010.923045][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1010.959838][T13287] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1011.010931][ T10] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1011.141752][T13287] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 1011.152943][T13287] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 1011.164161][T13287] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1011.175061][T13287] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 1011.185389][T13287] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.193977][T13287] usb 6-1: Product: syz [ 1011.198776][T13287] usb 6-1: Manufacturer: syz [ 1011.203940][T13287] usb 6-1: SerialNumber: syz [ 1011.219216][T17842] raw-gadget.5 gadget.5: fail, usb_ep_enable returned -22 [ 1011.226666][T17842] raw-gadget.5 gadget.5: fail, usb_ep_enable returned -22 [ 1011.269145][ T24] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1011.429358][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 1011.458945][ T24] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 1011.468964][ T24] usb 3-1: config 0 has no interface number 0 [ 1011.480330][ T24] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1011.535521][ T24] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1011.572259][ T24] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1011.591751][ T24] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1011.600680][ T24] usb 3-1: Product: syz [ 1011.605314][ T24] usb 3-1: SerialNumber: syz [ 1011.614838][T13287] rtl8150 6-1:1.0: couldn't reset the device [ 1011.623417][T13287] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 1011.635487][ T24] usb 3-1: config 0 descriptor?? [ 1011.677726][ T24] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 1011.708350][T13287] usb 6-1: USB disconnect, device number 68 [ 1011.722353][ T24] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input92 [ 1011.914426][T17848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1011.923991][T17848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1012.010680][ T10] usb 3-1: USB disconnect, device number 21 [ 1012.010744][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1012.027866][ T10] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1012.469852][ T10] usb 2-1: USB disconnect, device number 22 [ 1012.919614][ T5917] usb 4-1: USB disconnect, device number 115 [ 1012.948168][T17867] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1013.339193][T13287] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1013.509129][T13287] usb 3-1: Using ep0 maxpacket: 32 [ 1013.515844][T17882] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1013.517290][T13287] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1013.533505][ T5891] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1013.557318][T13287] usb 3-1: config 0 has no interfaces? [ 1013.563074][T13287] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1013.572386][T13287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.594778][T13287] usb 3-1: config 0 descriptor?? [ 1013.719123][ T24] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1013.729113][ T5891] usb 4-1: Using ep0 maxpacket: 8 [ 1013.736459][ T5891] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 1013.747327][ T5891] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1013.757236][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.767166][ T5891] usb 4-1: Product: syz [ 1013.774992][ T5891] usb 4-1: Manufacturer: syz [ 1013.780184][ T5891] usb 4-1: SerialNumber: syz [ 1013.794883][ T5891] usb 4-1: config 0 descriptor?? [ 1013.804634][ T5891] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1013.812957][ T5891] usb 4-1: setting power ON [ 1013.818000][ T5891] dvb-usb: bulk message failed: -22 (2/0) [ 1013.880969][ T5917] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1013.887667][ T5891] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1013.899431][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 1013.906601][ T24] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 1013.915163][ T24] usb 6-1: config 0 has no interface number 0 [ 1013.921579][ T24] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1013.933211][ T5891] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1013.941739][ T24] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1013.951749][ T5891] usb 4-1: media controller created [ 1013.965982][ T24] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1013.987821][ T24] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1014.007266][ T5891] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1014.036883][ T24] usb 6-1: Product: syz [ 1014.046318][ T24] usb 6-1: SerialNumber: syz [ 1014.069801][ T24] usb 6-1: config 0 descriptor?? [ 1014.082206][ T5917] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 1014.085790][ T5891] usb 4-1: selecting invalid altsetting 6 [ 1014.107229][ T5917] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 1014.108941][ T24] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 1014.126683][ T5891] usb 4-1: digital interface selection failed (-22) [ 1014.138358][ T5891] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1014.156675][ T5917] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1014.159400][ T24] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input93 [ 1014.186119][ T5891] usb 4-1: setting power OFF [ 1014.190999][ T5917] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 1014.201262][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.210858][ T5891] dvb-usb: bulk message failed: -22 (2/0) [ 1014.211702][ T5917] usb 2-1: Product: syz [ 1014.227399][ T5891] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1014.236003][ T5917] usb 2-1: Manufacturer: syz [ 1014.255675][ T5917] usb 2-1: SerialNumber: syz [ 1014.313703][T17881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1014.319108][ T5891] (NULL device *): no alternate interface [ 1014.325373][T17885] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1014.352235][T17881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1014.379331][T17885] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1014.436419][T17881] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3504'. [ 1014.586763][ C1] cm109_urb_ctl_callback: 68 callbacks suppressed [ 1014.586787][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1014.603952][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1014.611138][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1014.618319][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1014.625365][ T24] usb 6-1: USB disconnect, device number 69 [ 1014.631453][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1014.631476][ C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1014.675125][ T24] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1014.748713][ T5917] rtl8150 2-1:1.0: couldn't reset the device [ 1014.767062][ T5917] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 1014.802991][ T5917] usb 2-1: USB disconnect, device number 23 [ 1014.997485][T17873] dvb-usb: bulk message failed: -22 (4/0) [ 1015.005685][T17873] cxusb: i2c read failed [ 1015.322976][T17891] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3506'. [ 1015.336023][T17893] netlink: 6 bytes leftover after parsing attributes in process `syz.5.3507'. [ 1015.589108][T13287] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 1015.621394][T17906] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3513'. [ 1015.630973][T17906] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3513'. [ 1015.640534][T17906] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3513'. [ 1015.744336][T13287] usb 2-1: config 16 has an invalid interface number: 131 but max is 0 [ 1015.755945][T13287] usb 2-1: config 16 has no interface number 0 [ 1015.765172][T13287] usb 2-1: config 16 interface 131 has no altsetting 0 [ 1015.774656][T17910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1015.783584][T13287] usb 2-1: New USB device found, idVendor=06cd, idProduct=010e, bcdDevice=58.93 [ 1015.794410][T17910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1015.802918][T13287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.851461][T13287] usb 3-1: USB disconnect, device number 22 [ 1016.269206][T13287] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1016.527384][T13287] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 1016.539745][T13287] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 1016.550458][T13287] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1016.570091][T13287] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 1016.579260][T13287] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.587715][T13287] usb 3-1: Product: syz [ 1016.592408][T13287] usb 3-1: Manufacturer: syz [ 1016.597016][T13287] usb 3-1: SerialNumber: syz [ 1016.637279][ T24] usb 2-1: USB disconnect, device number 24 [ 1016.703623][T17916] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1016.716178][T17916] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1016.770897][T17934] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.786260][T17934] bridge0: port 2(bridge_slave_1) entered disabled state [ 1017.119725][T17943] trusted_key: encrypted_key: insufficient parameters specified [ 1017.190313][T13287] rtl8150 3-1:1.0: couldn't reset the device [ 1017.206788][T13287] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 1017.247504][T13287] usb 3-1: USB disconnect, device number 23 [ 1017.610476][ T48] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1017.748606][T17956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1017.779228][ T48] usb 6-1: Using ep0 maxpacket: 32 [ 1017.788609][ T48] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1017.799217][ T48] usb 6-1: config 0 has no interfaces? [ 1017.804724][ T48] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1017.829452][ T48] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.855650][T17956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1017.857520][ T48] usb 6-1: config 0 descriptor?? [ 1017.904541][T17956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1017.916820][T17956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1017.935026][T17956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1017.961356][T17956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1018.088575][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 1018.088595][ T30] audit: type=1800 audit(1761914400.480:1715): pid=17963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3532" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1018.261037][T17970] Cannot find del_set index 4 as target [ 1018.347584][T17975] FAULT_INJECTION: forcing a failure. [ 1018.347584][T17975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1018.370319][T17975] CPU: 0 UID: 0 PID: 17975 Comm: syz.2.3535 Not tainted syzkaller #0 PREEMPT(full) [ 1018.370348][T17975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1018.370361][T17975] Call Trace: [ 1018.370370][T17975] [ 1018.370389][T17975] dump_stack_lvl+0x189/0x250 [ 1018.370425][T17975] ? __pfx____ratelimit+0x10/0x10 [ 1018.370450][T17975] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1018.370477][T17975] ? __pfx__printk+0x10/0x10 [ 1018.370511][T17975] should_fail_ex+0x414/0x560 [ 1018.370548][T17975] _copy_to_user+0x31/0xb0 [ 1018.370575][T17975] simple_read_from_buffer+0xe1/0x170 [ 1018.370616][T17975] proc_fail_nth_read+0x1b3/0x220 [ 1018.370645][T17975] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1018.370674][T17975] ? rw_verify_area+0x2a6/0x4d0 [ 1018.370699][T17975] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1018.370724][T17975] vfs_read+0x200/0xa30 [ 1018.370749][T17975] ? __pfx_vfs_read+0x10/0x10 [ 1018.370771][T17975] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1018.370785][T17975] ? lockdep_hardirqs_on+0x9c/0x150 [ 1018.370806][T17975] ksys_read+0x145/0x250 [ 1018.370830][T17975] ? __pfx_ksys_read+0x10/0x10 [ 1018.370849][T17975] ? do_syscall_64+0xbe/0xfa0 [ 1018.370867][T17975] do_syscall_64+0xfa/0xfa0 [ 1018.370887][T17975] ? lockdep_hardirqs_on+0x9c/0x150 [ 1018.370902][T17975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.370914][T17975] ? clear_bhb_loop+0x60/0xb0 [ 1018.370929][T17975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.370941][T17975] RIP: 0033:0x7efc4f18d9dc [ 1018.370954][T17975] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1018.370965][T17975] RSP: 002b:00007efc50055030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1018.370981][T17975] RAX: ffffffffffffffda RBX: 00007efc4f3e6090 RCX: 00007efc4f18d9dc [ 1018.370990][T17975] RDX: 000000000000000f RSI: 00007efc500550a0 RDI: 0000000000000006 [ 1018.370998][T17975] RBP: 00007efc50055090 R08: 0000000000000000 R09: 0000000000000000 [ 1018.371006][T17975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1018.371013][T17975] R13: 00007efc4f3e6128 R14: 00007efc4f3e6090 R15: 00007efc4f50fa28 [ 1018.371033][T17975] [ 1018.878884][T17989] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1018.939457][T13287] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1019.100057][T13287] usb 1-1: Using ep0 maxpacket: 32 [ 1019.111533][T13287] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1019.122875][T13287] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1019.132257][T13287] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1019.142230][T13287] usb 1-1: config 1 has no interface number 0 [ 1019.148450][T13287] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1019.160099][T13287] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1019.173427][T13287] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1019.184022][T13287] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.200810][ T5917] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1019.202500][T13287] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1019.369115][ T5917] usb 3-1: Using ep0 maxpacket: 16 [ 1019.376328][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1019.389957][ T5917] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1019.399701][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.406797][T13287] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 1019.416806][ T5917] usb 3-1: config 0 descriptor?? [ 1019.502483][T18001] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3545'. [ 1019.676223][T18005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1019.691630][T18005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1019.731667][T18007] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1019.821096][ T5820] usb 1-1: USB disconnect, device number 37 [ 1019.837896][ T5820] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1019.847311][T17992] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1019.874653][ T5917] usbhid 3-1:0.0: can't add hid device: -71 [ 1019.892195][ T5917] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1019.908616][ T5917] usb 3-1: USB disconnect, device number 24 [ 1020.179139][T13287] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1020.309143][T13287] usb 2-1: device descriptor read/64, error -71 [ 1020.369535][ T5820] usb 6-1: USB disconnect, device number 70 [ 1020.551686][T13287] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1020.769159][T13287] usb 2-1: device descriptor read/64, error -71 [ 1020.780678][T18042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1020.854602][T18042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1021.202928][T13287] usb usb2-port1: attempt power cycle [ 1021.296602][T18048] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3563'. [ 1021.296602][T18047] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3563'. [ 1021.561830][T13287] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1021.647905][T13287] usb 2-1: device descriptor read/8, error -71 [ 1021.889494][T13287] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1021.929920][T13287] usb 2-1: device descriptor read/8, error -71 [ 1022.052798][T13287] usb usb2-port1: unable to enumerate USB device [ 1022.659105][T13287] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1022.990024][T13287] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1023.006614][T13287] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1023.027955][T13287] usb 6-1: can't read configurations, error -71 [ 1023.089578][T18086] binder: 18083:18086 ioctl 40046205 0 returned -22 [ 1023.111865][T18085] veth3: entered promiscuous mode [ 1023.120111][T18085] veth3: entered allmulticast mode [ 1023.594760][T18088] bond1: down delay (8) is not a multiple of miimon (5), value rounded to 5 ms [ 1023.624537][T18088] bond1: peer notification delay (237) is not a multiple of miimon (5), value rounded to 235 ms [ 1023.798456][T18088] bond1: entered promiscuous mode [ 1023.817312][T18088] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1024.244851][T18107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3583'. [ 1024.255638][T18106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3584'. [ 1024.266497][T18106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3584'. [ 1024.275584][T18109] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3585'. [ 1024.295321][T18106] netlink: 'syz.1.3584': attribute type 11 has an invalid length. [ 1024.559275][T13287] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1025.313547][T13287] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1025.325157][T13287] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1025.341461][T13287] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1025.374731][T13287] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1025.393852][T13287] usb 6-1: Manufacturer: syz [ 1025.422624][T13287] usb 6-1: config 0 descriptor?? [ 1025.435297][T18125] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3590'. [ 1025.436018][T13287] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1025.472609][T18125] syzkaller0: entered promiscuous mode [ 1025.478413][T18125] syzkaller0: entered allmulticast mode [ 1025.529167][ T24] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1025.684822][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 1025.694377][ T24] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 1025.703078][ T24] usb 1-1: config 0 has no interface number 0 [ 1025.720425][ T24] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1025.765308][ T24] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1025.785618][ T24] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1025.798810][ T24] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1025.817496][ T24] usb 1-1: Product: syz [ 1025.827627][ T24] usb 1-1: SerialNumber: syz [ 1025.848520][ T24] usb 1-1: config 0 descriptor?? [ 1025.853167][ T24] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 1025.864538][ T24] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input94 [ 1025.965866][T18137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1025.982529][T18137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1025.990383][T18137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1026.122657][T18123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1026.131911][T18137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1026.140739][T18123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1026.345609][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1026.354038][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1026.361589][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1026.368866][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1026.376440][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1026.383736][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1026.390910][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1026.397873][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1026.406899][ T24] usb 1-1: USB disconnect, device number 38 [ 1026.428418][ T24] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1027.897494][T18176] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3603'. [ 1028.074569][T18176] syzkaller0: entered promiscuous mode [ 1028.095081][T18176] syzkaller0: entered allmulticast mode [ 1028.200646][ T24] usb 6-1: USB disconnect, device number 73 [ 1028.790783][T18196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3611'. [ 1028.899275][ T5820] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1028.905191][T18198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.907024][ T10] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1029.045554][T18198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1029.186724][ T5820] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1029.199846][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 1029.207854][ T5820] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1029.228558][ T10] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 1029.238118][ T5820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.248235][ T10] usb 3-1: config 0 has no interface number 0 [ 1029.270894][ T10] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1029.294095][ T5820] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1029.323343][ T10] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1029.381034][ T10] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1029.393084][ T5820] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1029.416230][ T10] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1029.530457][ T10] usb 3-1: Product: syz [ 1029.546643][ T10] usb 3-1: SerialNumber: syz [ 1029.560636][T18193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1029.571041][T18193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1029.590889][T18193] fuse: Bad value for 'user_id' [ 1029.595948][T18193] fuse: Bad value for 'user_id' [ 1029.607301][ T10] usb 3-1: config 0 descriptor?? [ 1029.616466][ T10] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 1029.727153][ T10] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input95 [ 1029.825494][T18192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1029.874706][T18192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1029.926028][T18192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3608'. [ 1029.959160][ T5931] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1030.155361][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1030.162761][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1030.169911][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1030.186717][ T5820] usb 3-1: USB disconnect, device number 25 [ 1030.192866][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1030.210084][ T10] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1030.247376][ T5820] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1030.393980][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1030.404833][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1030.432321][ T10] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1030.441991][ T10] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1030.453058][ T10] usb 6-1: Manufacturer: syz [ 1030.477718][ T10] usb 6-1: config 0 descriptor?? [ 1030.495283][ T10] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1031.437667][T18218] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3617'. [ 1031.535865][T18218] syzkaller0: entered promiscuous mode [ 1031.549381][T18218] syzkaller0: entered allmulticast mode [ 1031.959200][T18231] tipc: Enabled bearer , priority 0 [ 1031.966792][T18231] syzkaller0: entered promiscuous mode [ 1031.972566][T18231] syzkaller0: entered allmulticast mode [ 1032.003165][T18231] tipc: Resetting bearer [ 1032.099841][T18231] tipc: Resetting bearer [ 1032.124679][T13287] usb 2-1: USB disconnect, device number 29 [ 1032.225022][T18231] tipc: Disabling bearer [ 1033.101317][ T5820] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1033.253534][ T10] usb 6-1: USB disconnect, device number 74 [ 1033.330202][ T5820] usb 3-1: Using ep0 maxpacket: 32 [ 1033.337412][ T5820] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1033.349124][ T5820] usb 3-1: config 0 has no interface number 0 [ 1033.369652][ T5820] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1033.407641][ T5820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.475270][ T5820] usb 3-1: Product: syz [ 1033.509150][ T5820] usb 3-1: Manufacturer: syz [ 1033.517901][ T5931] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1033.551991][ T5820] usb 3-1: SerialNumber: syz [ 1033.564060][ T5931] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1033.590885][ T5931] usb 1-1: can't read configurations, error -71 [ 1033.597358][ T5820] usb 3-1: config 0 descriptor?? [ 1033.630744][ T5820] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1033.668670][ T5820] usb 3-1: selecting invalid altsetting 1 [ 1033.678245][ T5820] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1033.734009][ T5820] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1033.776229][ T5820] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1033.807127][ T5820] usb 3-1: media controller created [ 1033.896494][ T5820] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1033.969822][T18264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1033.978718][T18264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1033.979122][ T5931] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1034.260830][ T5931] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1034.389150][ T5931] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1034.431681][ T5931] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1034.495231][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.520859][T18267] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3632'. [ 1034.535676][T18259] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1034.560233][ T5931] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1034.811523][ T5931] usb 1-1: USB disconnect, device number 40 [ 1035.109598][ T5820] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1035.208832][ T5820] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1035.765284][ T30] audit: type=1326 audit(1761914418.160:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18277 comm="syz.1.3636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068a58efc9 code=0x7ffc0000 [ 1035.999070][ T30] audit: type=1326 audit(1761914418.160:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18277 comm="syz.1.3636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068a58efc9 code=0x7ffc0000 [ 1036.133583][ T30] audit: type=1326 audit(1761914418.160:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18277 comm="syz.1.3636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068a58efc9 code=0x7ffc0000 [ 1036.239223][ T30] audit: type=1326 audit(1761914418.160:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18277 comm="syz.1.3636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f068a58efc9 code=0x7ffc0000 [ 1036.302972][ T5820] usb 3-1: USB disconnect, device number 26 [ 1036.315109][ T30] audit: type=1326 audit(1761914418.160:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18277 comm="syz.1.3636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068a58efc9 code=0x7ffc0000 [ 1036.387806][ T30] audit: type=1326 audit(1761914418.230:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18277 comm="syz.1.3636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f068a5c1885 code=0x7ffc0000 [ 1036.446796][ T30] audit: type=1326 audit(1761914418.230:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18277 comm="syz.1.3636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f068a5c1885 code=0x7ffc0000 [ 1036.470379][ T30] audit: type=1326 audit(1761914418.230:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18277 comm="syz.1.3636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f068a5c1885 code=0x7ffc0000 [ 1036.495175][ T30] audit: type=1326 audit(1761914418.230:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18277 comm="syz.1.3636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f068a5c1885 code=0x7ffc0000 [ 1036.727630][ T30] audit: type=1326 audit(1761914418.230:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18277 comm="syz.1.3636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f068a5c1885 code=0x7ffc0000 [ 1036.939324][ T856] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1037.595575][ T856] usb 6-1: Using ep0 maxpacket: 8 [ 1037.627114][ T856] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 1037.678717][ T856] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1037.823279][ T856] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.852484][ T856] usb 6-1: Product: syz [ 1037.856846][ T856] usb 6-1: Manufacturer: syz [ 1037.917180][ T856] usb 6-1: SerialNumber: syz [ 1037.999726][ T856] usb 6-1: config 0 descriptor?? [ 1038.011558][ T856] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1038.043625][ T856] usb 6-1: setting power ON [ 1038.060122][ T856] dvb-usb: bulk message failed: -22 (2/0) [ 1038.077057][ T856] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1038.115940][ T856] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1038.169391][ T856] usb 6-1: media controller created [ 1038.341041][ T856] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1038.794831][ T856] usb 6-1: selecting invalid altsetting 6 [ 1039.006128][ T856] usb 6-1: digital interface selection failed (-22) [ 1039.076976][ T856] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1039.111838][ T856] usb 6-1: setting power OFF [ 1039.579155][ T856] dvb-usb: bulk message failed: -22 (2/0) [ 1039.584958][ T856] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1039.645851][ T856] (NULL device *): no alternate interface [ 1039.793836][ T856] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1040.098288][T18324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3649'. [ 1040.656592][T18328] syzkaller0: entered promiscuous mode [ 1040.701980][T18328] syzkaller0: entered allmulticast mode [ 1041.562582][ T5931] usb 6-1: USB disconnect, device number 75 [ 1042.218617][T18354] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3657'. [ 1044.059233][T18363] tipc: Started in network mode [ 1044.064171][T18363] tipc: Node identity 1, cluster identity 7 [ 1044.115664][T18363] tipc: Node number set to 1 [ 1044.129752][T18363] tipc: Cannot configure node identity twice [ 1044.709136][ T5931] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1044.962204][ T5931] usb 3-1: config index 0 descriptor too short (expected 72, got 10) [ 1044.973367][ T5931] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 1044.982147][ T5931] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1045.005306][T18375] futex_wake_op: syz.2.3662 tries to shift op by 144; fix this program [ 1045.517140][T18386] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3668'. [ 1047.011481][T18284] Set syz1 is full, maxelem 65536 reached [ 1047.194816][ T5931] usb 3-1: string descriptor 0 read error: -71 [ 1047.212817][ T5931] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1047.244981][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.305179][ T5931] usb 3-1: can't set config #1, error -71 [ 1047.354905][ T5931] usb 3-1: USB disconnect, device number 27 [ 1048.630444][T18411] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3676'. [ 1048.809144][T13287] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1048.921152][T18415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3678'. [ 1049.039527][T13287] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1049.117814][T13287] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1049.153107][T13287] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1049.231315][T13287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.895376][T18429] netlink: 312 bytes leftover after parsing attributes in process `syz.3.3681'. [ 1050.079497][T18428] fuse: Bad value for 'fd' [ 1050.146508][T18432] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3683'. [ 1051.114195][T18435] syzkaller0: entered promiscuous mode [ 1051.124432][T18435] syzkaller0: entered allmulticast mode [ 1051.874637][ T856] usb 2-1: USB disconnect, device number 30 [ 1052.749227][T18448] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3689'. [ 1052.962575][T18452] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3690'. [ 1053.078559][T18454] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3693'. [ 1054.552340][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.552410][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.617909][T18472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3697'. [ 1057.479356][T18482] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3698'. [ 1057.775618][ T856] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1057.959112][ T856] usb 1-1: Using ep0 maxpacket: 16 [ 1057.971279][ T856] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1058.003872][ T856] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1058.046368][ T856] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1058.103588][ T856] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1058.136286][ T856] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.156254][ T856] usb 1-1: Product: syz [ 1058.169133][ T856] usb 1-1: Manufacturer: syz [ 1058.239208][ T10] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1058.264421][ T856] usb 1-1: SerialNumber: syz [ 1058.661821][ T10] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1058.788109][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.828754][ T10] usb 2-1: Product: syz [ 1058.834984][ T10] usb 2-1: Manufacturer: syz [ 1058.840240][ T10] usb 2-1: SerialNumber: syz [ 1058.853204][ T10] usb 2-1: config 0 descriptor?? [ 1058.900801][ T856] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 1058.913665][ T10] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1059.011510][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1059.190440][ T10] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1059.468869][ T10] usb 2-1: media controller created [ 1059.720647][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1060.009598][ T10] DVB: Unable to find symbol mt352_attach() [ 1060.072781][ T856] usb 1-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 1060.154608][ T856] usb 1-1: USB disconnect, device number 41 [ 1060.227676][ T10] DVB: Unable to find symbol nxt6000_attach() [ 1060.330297][ T10] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1060.392848][T15721] udevd[15721]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1060.487147][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input96 [ 1060.528206][ T10] dvb-usb: schedule remote query interval to 1000 msecs. [ 1060.541188][ T10] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1060.697889][ T10] dvb-usb: bulk message failed: -22 (7/0) [ 1060.823492][ T10] dvb-usb: bulk message failed: -22 (7/0) [ 1061.332271][ T10] usb 2-1: USB disconnect, device number 31 [ 1061.538189][T18525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3712'. [ 1061.950728][ T10] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1063.897858][T18552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1063.930360][T18552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1064.461220][T18564] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3724'. [ 1065.390096][T18577] binder: 18572:18577 ioctl c018620c 200000000100 returned -1 [ 1069.109344][T18616] IPv6: NLM_F_CREATE should be specified when creating new route [ 1069.373291][T18628] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3743'. [ 1069.735121][T18625] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1069.741780][T18625] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1069.748141][T18625] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1069.754446][T18625] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1069.832402][T18625] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1070.020711][T18633] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3754'. [ 1071.752705][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 1071.832650][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 1071.842964][ T5840] Bluetooth: hci4: command 0x0c1a tx timeout [ 1071.869243][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 1071.899137][T14080] Bluetooth: hci5: command 0x0c1a tx timeout [ 1072.996499][T18657] mmap: syz.2.3751 (18657): VmData 37986304 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 1073.136045][T18663] netlink: 'syz.0.3753': attribute type 5 has an invalid length. [ 1073.203430][T18663] ip6erspan0: entered promiscuous mode [ 1073.920216][T18668] syzkaller1: entered promiscuous mode [ 1073.925845][T18668] syzkaller1: entered allmulticast mode [ 1075.842578][T18673] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3757'. [ 1076.013114][ T5931] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1076.188048][ T5931] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1076.236071][ T5931] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1076.307064][ T5931] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1076.339338][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.021594][T18691] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1077.131964][T18710] hub 9-0:1.0: USB hub found [ 1077.141042][T18710] hub 9-0:1.0: 1 port detected [ 1077.153572][ T5931] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1077.605325][ T5931] usb 1-1: USB disconnect, device number 42 [ 1079.081543][T18729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3777'. [ 1079.223420][T18731] fuse: Bad value for 'fd' [ 1079.360538][ T5931] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 1079.401773][ T5931] hid-generic 0000:0000:0000.002B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1079.618225][T18735] fido_id[18735]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1080.041595][T18741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3780'. [ 1080.067720][T18741] netlink: 'syz.1.3780': attribute type 10 has an invalid length. [ 1080.185189][T18741] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1080.439814][T18737] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3778'. [ 1080.461056][T18750] netlink: 312 bytes leftover after parsing attributes in process `syz.5.3782'. [ 1082.629112][ T5917] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1083.456425][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1083.739853][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1083.803205][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1083.897545][ T5917] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1083.908370][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.945292][ T5917] usb 1-1: Product: syz [ 1083.959930][ T5917] usb 1-1: Manufacturer: syz [ 1083.990977][ T5917] usb 1-1: SerialNumber: syz [ 1084.037170][ T5917] usb 1-1: config 0 descriptor?? [ 1084.271973][ T5917] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1084.481038][T13287] usb 1-1: USB disconnect, device number 43 [ 1084.816579][T18797] usb usb8: usbfs: process 18797 (syz.1.3799) did not claim interface 0 before use [ 1085.158858][T18787] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3796'. [ 1085.501213][ T5917] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1085.697558][ T5917] usb 6-1: Using ep0 maxpacket: 8 [ 1085.728746][ T5917] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1085.759206][ T5917] usb 6-1: config 0 has no interface number 0 [ 1085.778867][ T5917] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1085.809378][ T5917] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1085.880941][ T5917] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1085.933085][ T5917] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1086.415994][ T5917] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1086.436905][ T5917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.505207][ T5917] usb 6-1: config 0 descriptor?? [ 1086.517878][ T5917] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1086.692066][T18826] syzkaller0: entered promiscuous mode [ 1086.712524][T18826] syzkaller0: entered allmulticast mode [ 1086.734072][ T5917] usb 6-1: USB disconnect, device number 76 [ 1086.745955][ T5917] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 1087.058034][T18818] syz.3.3807 (18818): drop_caches: 2 [ 1088.283069][T18858] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3821'. [ 1088.491526][T18864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1088.533442][T18864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1090.734599][T18902] binder: 18895:18902 ioctl c018620c 200000000100 returned -1 [ 1090.905508][T18904] netlink: 'syz.5.3838': attribute type 5 has an invalid length. [ 1090.934410][T18904] ip6erspan0: entered promiscuous mode [ 1091.720472][T18908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3840'. [ 1092.258821][T18924] IPv6: NLM_F_CREATE should be specified when creating new route [ 1093.450093][T18939] xt_NFQUEUE: number of queues (65297) out of range (got 111634) [ 1093.485399][T18939] fuse: Bad value for 'rootmode' [ 1094.332754][T18948] netlink: 312 bytes leftover after parsing attributes in process `syz.0.3853'. [ 1094.537755][T18952] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3856'. [ 1095.086440][T18960] hub 9-0:1.0: USB hub found [ 1095.108279][T18960] hub 9-0:1.0: 1 port detected [ 1095.536265][T18970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3863'. [ 1096.670985][ T10] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1096.881676][ T10] usb 6-1: config index 0 descriptor too short (expected 72, got 10) [ 1096.906046][ T10] usb 6-1: config 1 descriptor has 1 excess byte, ignoring [ 1097.006478][ T10] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1097.040249][T18985] futex_wake_op: syz.5.3867 tries to shift op by 144; fix this program [ 1097.477423][T19001] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3874'. [ 1097.487461][T19001] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3874'. [ 1097.498043][T19001] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3874'. [ 1097.574675][T19003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3875'. [ 1098.799296][ T5917] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1099.129110][ T5917] usb 2-1: Using ep0 maxpacket: 16 [ 1099.167613][ T5917] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1099.366409][ T5917] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1099.555742][ T10] usb 6-1: string descriptor 0 read error: -71 [ 1099.566203][ T5917] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1099.591764][ T10] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1099.609256][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.622753][ T5917] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1099.635453][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.661709][ T10] usb 6-1: can't set config #1, error -71 [ 1099.668349][ T5917] usb 2-1: Product: syz [ 1099.679298][ T10] usb 6-1: USB disconnect, device number 77 [ 1099.685548][ T5917] usb 2-1: Manufacturer: syz [ 1099.751505][ T5917] usb 2-1: SerialNumber: syz [ 1100.261723][T19037] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3888'. [ 1100.366290][T19037] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3888'. [ 1100.436980][T19037] dummy0: entered promiscuous mode [ 1100.516193][T19037] team0: entered promiscuous mode [ 1100.529140][T19037] team_slave_0: entered promiscuous mode [ 1100.546222][T19037] team_slave_1: entered promiscuous mode [ 1100.582498][T19037] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 1100.593201][T19037] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network [ 1100.816788][ T5917] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 1100.817146][T19040] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3889'. [ 1101.358410][ T5917] usb 2-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 1101.469867][ T5917] usb 2-1: USB disconnect, device number 32 [ 1101.618921][T19068] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3901'. [ 1101.849177][ T24] usb 1-1: new low-speed USB device number 44 using dummy_hcd [ 1102.011780][ T24] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1102.021234][ T24] usb 1-1: config 0 has no interface number 0 [ 1102.057685][ T24] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1102.389656][ T24] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1102.435166][ T24] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1102.462389][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.522964][ T24] usb 1-1: config 0 descriptor?? [ 1102.551625][T19067] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1102.573661][ T24] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1104.025211][T19097] tipc: Cannot configure node identity twice [ 1104.187930][T19101] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3912'. [ 1104.629169][ T24] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1104.693234][ T10] usb 1-1: USB disconnect, device number 44 [ 1104.727605][T19117] trusted_key: encrypted_key: insufficient parameters specified [ 1104.858788][ T24] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1104.905819][ T24] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1104.943711][ T24] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1104.964296][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.002531][T19105] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1105.031954][ T24] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1105.237386][ T24] usb 6-1: USB disconnect, device number 78 [ 1105.349786][ T10] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1105.687246][ T10] usb 1-1: config 0 has no interfaces? [ 1105.703798][ T10] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1105.719091][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.888601][ T10] usb 1-1: Product: syz [ 1105.919432][ T10] usb 1-1: Manufacturer: syz [ 1106.010186][ T10] usb 1-1: SerialNumber: syz [ 1106.153143][ T10] usb 1-1: config 0 descriptor?? [ 1106.676450][T19135] tipc: Cannot configure node identity twice [ 1106.956194][T19146] bridge0: entered allmulticast mode [ 1106.978634][T19146] pim6reg: entered allmulticast mode [ 1107.543964][T19158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1107.570367][T19158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1108.346947][ T10] usb 1-1: USB disconnect, device number 45 [ 1109.275756][T19204] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3948'. [ 1109.499332][T19209] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3952'. [ 1109.510089][T19209] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3952'. [ 1109.525304][T19209] dummy0: entered promiscuous mode [ 1109.532607][T19209] team0: entered promiscuous mode [ 1109.537768][T19209] team_slave_0: entered promiscuous mode [ 1109.544300][T19209] team_slave_1: entered promiscuous mode [ 1109.570823][T19209] debugfs: 'hsr1' already exists in 'hsr' [ 1109.580444][T19209] Cannot create hsr debugfs directory [ 1109.708825][T19212] netlink: 192 bytes leftover after parsing attributes in process `syz.3.3953'. [ 1110.701673][T19215] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1112.759730][T19248] bond2: option arp_interval: invalid value (18446744073709551615) [ 1112.767894][T19248] bond2: option arp_interval: allowed values 0 - 2147483647 [ 1112.922452][T19254] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3964'. [ 1112.963584][T19248] bond2 (unregistering): Released all slaves [ 1113.377552][T19254] misc userio: Invalid payload size [ 1114.970136][T19283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3969'. [ 1115.296144][T19289] tipc: Started in network mode [ 1115.301389][T19289] tipc: Node identity 1, cluster identity 4711 [ 1115.307816][T19289] tipc: Node number set to 1 [ 1115.489067][ T24] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1115.985312][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.991704][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.999124][ T5931] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1116.007361][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 1116.109133][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 1116.118333][ T24] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1116.134362][ T24] usb 6-1: config 0 has no interface number 0 [ 1116.141155][ T5931] usb 1-1: device descriptor read/64, error -32 [ 1116.252881][ T24] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=72.08 [ 1116.263443][ T24] usb 6-1: New USB device strings: Mfr=198, Product=120, SerialNumber=3 [ 1116.280974][ T24] usb 6-1: Product: syz [ 1116.289412][ T24] usb 6-1: Manufacturer: syz [ 1116.294018][ T24] usb 6-1: SerialNumber: syz [ 1116.321116][ T24] usb 6-1: config 0 descriptor?? [ 1116.414735][ T24] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1116.525531][ T24] usb 6-1: selecting invalid altsetting 1 [ 1116.539868][ T5931] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1116.599117][ T24] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1116.636568][ T24] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1116.686783][ T24] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1116.696763][T19298] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3973'. [ 1116.728091][ T24] usb 6-1: media controller created [ 1116.782905][T19298] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3973'. [ 1116.812796][ T5931] usb 1-1: Using ep0 maxpacket: 8 [ 1116.849669][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1116.869624][ T5931] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 1116.878005][T19298] gretap0: entered promiscuous mode [ 1116.884906][T19298] gretap0: left promiscuous mode [ 1117.009816][ T5931] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1117.019306][ T24] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1117.026372][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.035035][ T24] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1117.049398][ T5931] usb 1-1: Product: syz [ 1117.056087][ T24] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1117.077251][ T5931] usb 1-1: Manufacturer: syz [ 1117.097882][ T5931] usb 1-1: SerialNumber: syz [ 1117.146405][T19301] pim6reg: entered allmulticast mode [ 1117.224438][ T5931] usb 1-1: config 0 descriptor?? [ 1117.351857][ T5931] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1117.556712][ T5931] usb 1-1: setting power ON [ 1117.597480][ T5931] dvb-usb: bulk message failed: -22 (2/0) [ 1117.628812][ T24] usb 6-1: USB disconnect, device number 79 [ 1117.670692][ T5931] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1117.702824][ T5931] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1117.725973][ T5931] usb 1-1: media controller created [ 1117.805801][ T5931] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1118.261135][ T5931] usb 1-1: selecting invalid altsetting 6 [ 1118.269037][ T5931] usb 1-1: digital interface selection failed (-22) [ 1118.289871][ T5931] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1118.313998][ T5931] usb 1-1: setting power OFF [ 1118.318678][ T5931] dvb-usb: bulk message failed: -22 (2/0) [ 1118.327093][ T5931] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1118.338660][ T5931] (NULL device *): no alternate interface [ 1118.423654][ T5931] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1118.556352][T19319] binder: 19318:19319 ioctl c0cc5605 200000000300 returned -22 [ 1118.623362][T19321] tipc: Cannot configure node identity twice [ 1119.009357][T13287] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1119.094585][ T10] usb 1-1: USB disconnect, device number 47 [ 1119.221246][T13287] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1119.234429][T13287] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1119.263959][T13287] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1119.326925][T13287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.594194][T19325] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1119.633253][T13287] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1119.923271][T13287] usb 2-1: USB disconnect, device number 33 [ 1120.182088][T19338] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3988'. [ 1120.219441][T19338] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3988'. [ 1121.132160][T19354] tipc: Enabled bearer , priority 10 [ 1121.730887][T19359] pim6reg: entered allmulticast mode [ 1123.019158][T13287] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1123.194697][T13287] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1123.208392][T13287] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1123.239098][T13287] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1123.256405][T13287] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.298827][T19377] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1123.312665][T13287] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1123.793793][T13287] usb 6-1: USB disconnect, device number 80 [ 1124.225692][T19390] input: syz0 as /devices/virtual/input/input97 [ 1125.297826][T19410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4011'. [ 1125.339377][T19410] netlink: 'syz.2.4011': attribute type 2 has an invalid length. [ 1125.619116][ T5917] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1125.784505][ T5917] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1125.829142][ T5917] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1125.939306][ T5917] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1125.959202][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.981238][ T5917] usb 2-1: config 0 descriptor?? [ 1126.003032][ T5917] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1126.509056][ T10] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1126.685793][ T10] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1126.739046][ T10] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1126.769192][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1126.811386][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.852247][T19427] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1126.864187][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1127.085480][ T10] usb 1-1: USB disconnect, device number 48 [ 1127.895640][T19448] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4023'. [ 1128.379083][T13287] usb 2-1: USB disconnect, device number 34 [ 1128.445860][T19456] ======================================================= [ 1128.445860][T19456] WARNING: The mand mount option has been deprecated and [ 1128.445860][T19456] and is ignored by this kernel. Remove the mand [ 1128.445860][T19456] option from the mount to silence this warning. [ 1128.445860][T19456] ======================================================= [ 1128.480767][ C0] vkms_vblank_simulate: vblank timer overrun [ 1129.330026][T19457] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1129.460591][T19457] netlink: 'syz.1.4027': attribute type 8 has an invalid length. [ 1130.351794][T19491] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4039'. [ 1130.452292][ T5931] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1130.865868][ T5931] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1130.896543][ T5931] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1130.923938][ T5931] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1130.948252][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.977530][T19483] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1131.019723][ T5931] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1131.192989][ T5931] usb 2-1: USB disconnect, device number 35 [ 1132.992699][T19537] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4051'. [ 1134.277141][T19550] fuse: Bad value for 'fd' [ 1134.473269][T19556] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1134.595761][ T5917] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1134.871450][ T5917] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1134.894919][ T5917] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1134.949298][ T5917] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1134.971991][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.006939][T19547] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1135.022958][ T5917] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1135.056765][T19560] pim6reg: entered allmulticast mode [ 1135.073086][T19560] netlink: 'syz.3.4058': attribute type 10 has an invalid length. [ 1135.120980][T19560] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 1135.131477][T19560] team0: Failed to send options change via netlink (err -105) [ 1135.139941][T19560] team0: Port device netdevsim0 added [ 1135.225388][ T5917] usb 1-1: USB disconnect, device number 49 [ 1135.584076][T19562] IPv6: addrconf: prefix option has invalid lifetime [ 1135.907610][T19568] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4062'. [ 1140.154221][T19635] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4084'. [ 1140.665962][T19653] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1143.229205][ T10] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1143.382748][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1143.391546][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1143.403615][ T10] usb 6-1: config 0 has no interfaces? [ 1143.413751][ T10] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1143.566898][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.581061][ T10] usb 6-1: config 0 descriptor?? [ 1144.082550][T19708] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4108'. [ 1144.242149][T19711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4109'. [ 1144.909123][ T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1145.140876][ T10] usb 3-1: config 4 has an invalid interface number: 88 but max is 0 [ 1145.159332][ T10] usb 3-1: config 4 has no interface number 0 [ 1145.169596][ T10] usb 3-1: config 4 interface 88 altsetting 119 has a duplicate endpoint with address 0xB, skipping [ 1145.252927][ T10] usb 3-1: config 4 interface 88 altsetting 119 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 1145.275327][ T10] usb 3-1: config 4 interface 88 altsetting 119 endpoint 0x85 has invalid maxpacket 11067, setting to 1024 [ 1145.308926][ T10] usb 3-1: config 4 interface 88 altsetting 119 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1145.403956][ T10] usb 3-1: config 4 interface 88 altsetting 119 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1145.513933][ T10] usb 3-1: config 4 interface 88 has no altsetting 0 [ 1145.543768][ T10] usb 3-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=af.e7 [ 1145.554321][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.562673][ T10] usb 3-1: Product: syz [ 1145.569122][ T10] usb 3-1: Manufacturer: syz [ 1145.574897][ T10] usb 3-1: SerialNumber: syz [ 1145.588591][T19699] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1146.276309][T15745] usb 6-1: USB disconnect, device number 81 [ 1146.393381][T19732] fuse: Bad value for 'user_id' [ 1146.399562][T19732] fuse: Bad value for 'user_id' [ 1146.859335][T15745] usb 3-1: USB disconnect, device number 28 [ 1146.865509][T19742] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4120'. [ 1147.020157][T19748] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4123'. [ 1147.040615][T19748] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4123'. [ 1147.066296][T19748] team0: entered promiscuous mode [ 1147.083813][T19748] team_slave_0: entered promiscuous mode [ 1147.189494][T19748] team_slave_1: entered promiscuous mode [ 1147.199540][T19748] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1147.346331][T19748] bond0: entered promiscuous mode [ 1147.369324][T19748] bond_slave_0: entered promiscuous mode [ 1147.626672][T19748] bond_slave_1: entered promiscuous mode [ 1147.678165][T19748] bond0: left promiscuous mode [ 1147.687052][T19748] bond_slave_0: left promiscuous mode [ 1147.752942][T19748] bond_slave_1: left promiscuous mode [ 1147.760710][T19748] team0: left promiscuous mode [ 1147.765968][T19748] team_slave_0: left promiscuous mode [ 1147.959457][T19748] team_slave_1: left promiscuous mode [ 1147.965207][T19748] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1149.417301][T19779] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4132'. [ 1149.974299][T19793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1149.983310][T19793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1150.175770][T19811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4145'. [ 1151.293341][ T5820] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1151.451345][ T5820] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1151.558491][ T5820] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1151.620859][ T5820] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1151.630648][ T5820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.685520][T19822] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1151.699765][ T5820] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1152.050755][T15745] usb 2-1: USB disconnect, device number 36 [ 1152.897422][T19846] bridge0: entered allmulticast mode [ 1153.619097][ T856] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1154.199050][ T856] usb 3-1: Using ep0 maxpacket: 32 [ 1154.209551][ T856] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1154.261866][ T856] usb 3-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 1154.295389][ T856] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.350626][T19880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1154.361591][T19880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1154.378762][ T856] usb 3-1: Product: syz [ 1154.411273][ T856] usb 3-1: Manufacturer: syz [ 1154.418381][ T856] usb 3-1: SerialNumber: syz [ 1154.438704][ T856] usb 3-1: config 0 descriptor?? [ 1154.472979][ T856] hdpvr 3-1:0.0: Could not find bulk-in endpoint [ 1154.479736][ T856] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 1155.501955][T19887] bridge0: entered allmulticast mode [ 1155.998375][T19903] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4177'. [ 1156.461708][ T856] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1156.701263][ T856] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1156.717807][ T856] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1156.813121][ T856] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1156.850548][ T856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.913952][T19905] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1156.925792][ T856] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1156.967688][ T24] usb 3-1: USB disconnect, device number 29 [ 1157.183650][ T856] usb 1-1: USB disconnect, device number 50 [ 1157.849434][T19928] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4187'. [ 1157.887918][T19930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1157.925743][T19930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1157.955925][T19932] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4190'. [ 1158.249178][ T856] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1159.110298][ T856] usb 3-1: Using ep0 maxpacket: 32 [ 1159.122209][ T856] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1159.139155][ T856] usb 3-1: config 0 has no interfaces? [ 1159.144795][ T856] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1159.227693][ T856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.297449][ T856] usb 3-1: config 0 descriptor?? [ 1159.709097][T15745] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1159.889171][T15745] usb 1-1: Using ep0 maxpacket: 16 [ 1159.916240][T15745] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1159.930471][T15745] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1159.947148][T15745] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1159.948525][T19959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1159.977824][T15745] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1159.990224][T15745] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.002428][T15745] usb 1-1: Product: syz [ 1160.008502][T15745] usb 1-1: Manufacturer: syz [ 1160.016009][T15745] usb 1-1: SerialNumber: syz [ 1160.069981][T19959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1160.381592][T19963] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4201'. [ 1160.487779][T15745] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 1161.191685][ T856] usb 3-1: USB disconnect, device number 30 [ 1163.051950][T19980] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4206'. [ 1163.460767][T15745] usb 1-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 1163.761599][T15745] usb 1-1: USB disconnect, device number 51 [ 1164.289544][T15745] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1164.629443][T15745] usb 1-1: New USB device found, idVendor=1934, idProduct=0706, bcdDevice=e2.9e [ 1164.638851][T15745] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.653206][T15745] usb 1-1: Product: syz [ 1164.663394][T15745] usb 1-1: Manufacturer: syz [ 1164.670934][T15745] usb 1-1: SerialNumber: syz [ 1164.682013][T15745] usb 1-1: config 0 descriptor?? [ 1164.692078][T15745] f81232 1-1:0.0: f81232 converter detected [ 1164.701399][T15745] usb 1-1: f81232 converter now attached to ttyUSB0 [ 1164.997134][T15745] usb 1-1: USB disconnect, device number 52 [ 1165.011419][T15745] f81232 ttyUSB0: f81232 converter now disconnected from ttyUSB0 [ 1165.021234][T15745] f81232 1-1:0.0: device disconnected [ 1166.169123][T15745] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1166.321311][T15745] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1166.351778][T15745] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1166.397660][T15745] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1166.407484][T15745] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.428831][T20006] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1166.488822][T15745] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1166.772899][T15745] usb 1-1: USB disconnect, device number 53 [ 1166.990218][T20021] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4218'. [ 1167.008070][T20025] fuse: Bad value for 'user_id' [ 1167.015377][T20021] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4218'. [ 1167.031863][T20025] fuse: Bad value for 'user_id' [ 1167.819181][ T31] INFO: task kworker/1:3:5891 blocked for more than 143 seconds. [ 1167.827052][ T31] Not tainted syzkaller #0 [ 1167.832206][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1168.033335][ T31] task:kworker/1:3 state:D stack:20440 pid:5891 tgid:5891 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1168.065935][ T31] Workqueue: usb_hub_wq hub_event [ 1168.080127][ T31] Call Trace: [ 1168.086950][ T31] [ 1168.093327][ T31] __schedule+0x1798/0x4cc0 [ 1168.105891][ T31] ? hub_event+0x2958/0x4a20 [ 1168.116289][ T31] ? __lock_acquire+0xab9/0xd20 [ 1168.126069][ T31] ? __pfx___schedule+0x10/0x10 [ 1168.179005][ T31] ? schedule+0x91/0x360 [ 1168.189273][ T31] schedule+0x165/0x360 [ 1168.197981][ T31] schedule_timeout+0x9a/0x270 [ 1168.210797][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1168.224110][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1168.236889][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1168.247841][ T31] ? wait_for_completion+0x267/0x5d0 [ 1168.262372][ T31] wait_for_completion+0x2bf/0x5d0 [ 1168.277267][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 1168.291202][ T31] i2c_del_adapter+0x581/0x6e0 [ 1168.297359][ T31] ? dvb_usb_adapter_exit+0xd7/0x240 [ 1168.305790][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 1168.312190][ T31] ? dvb_usb_adapter_exit+0xd7/0x240 [ 1168.317946][ T31] ? kfree+0x4d/0x6d0 [ 1168.323065][ T31] dvb_usb_i2c_exit+0x64/0xb0 [ 1168.328282][ T31] dvb_usb_device_exit+0x1be/0x350 [ 1168.336573][T20032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1168.350934][ T31] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 1168.358643][T20032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1168.375895][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1168.384909][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1168.391592][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1168.398718][ T31] cxusb_probe+0x603/0x700 [ 1168.404620][ T31] ? __pfx_cxusb_probe+0x10/0x10 [ 1168.481833][ T31] ? __pm_runtime_set_status+0x785/0xa50 [ 1168.499403][ T31] usb_probe_interface+0x668/0xc30 [ 1168.518473][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 1168.550048][ T31] really_probe+0x26d/0x9e0 [ 1168.555900][ T31] __driver_probe_device+0x18c/0x2f0 [ 1168.858232][ T31] driver_probe_device+0x4f/0x430 [ 1168.882773][ T31] __device_attach_driver+0x2ce/0x530 [ 1168.903407][ T31] bus_for_each_drv+0x251/0x2e0 [ 1168.918139][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 1168.941008][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1168.962510][ T31] __device_attach+0x2b8/0x400 [ 1168.978215][ T31] ? __pfx___device_attach+0x10/0x10 [ 1168.993793][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 1169.017076][ T31] bus_probe_device+0x185/0x260 [ 1169.032628][ T31] device_add+0x7b6/0xb50 [ 1169.043028][ T31] usb_set_configuration+0x1a87/0x20e0 [ 1169.059069][ T31] usb_generic_driver_probe+0x8d/0x150 [ 1169.073391][ T31] usb_probe_device+0x1c4/0x390 [ 1169.082846][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 1169.088583][ T31] really_probe+0x26d/0x9e0 [ 1169.093538][ T31] __driver_probe_device+0x18c/0x2f0 [ 1169.101500][ T31] driver_probe_device+0x4f/0x430 [ 1169.107046][ T31] __device_attach_driver+0x2ce/0x530 [ 1169.129509][ T31] bus_for_each_drv+0x251/0x2e0 [ 1169.138590][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 1169.152056][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1169.163164][ T31] __device_attach+0x2b8/0x400 [ 1169.172886][ T31] ? __pfx___device_attach+0x10/0x10 [ 1169.184619][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 1169.190170][ T31] bus_probe_device+0x185/0x260 [ 1169.195162][ T31] device_add+0x7b6/0xb50 [ 1169.201371][ T31] usb_new_device+0xa39/0x16f0 [ 1169.206677][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 1169.212629][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1169.217933][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1169.223550][ T31] hub_event+0x2958/0x4a20 [ 1169.228489][ T31] ? __pfx_hub_event+0x10/0x10 [ 1169.233546][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1169.240435][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1169.247216][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1169.253133][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1169.259476][ T31] process_scheduled_works+0xae1/0x17b0 [ 1169.265667][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1169.272175][ T31] worker_thread+0x8a0/0xda0 [ 1169.277991][ T31] kthread+0x711/0x8a0 [ 1169.282302][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1169.287542][ T31] ? __pfx_kthread+0x10/0x10 [ 1169.292785][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1169.298908][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1169.306070][ T31] ? __pfx_kthread+0x10/0x10 [ 1169.311005][ T31] ret_from_fork+0x4bc/0x870 [ 1169.315805][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1169.321322][ T31] ? __switch_to_asm+0x39/0x70 [ 1169.326466][ T31] ? __switch_to_asm+0x33/0x70 [ 1169.331361][ T31] ? __pfx_kthread+0x10/0x10 [ 1169.335998][ T31] ret_from_fork_asm+0x1a/0x30 [ 1169.346687][ T31] [ 1169.355318][ T31] [ 1169.355318][ T31] Showing all locks held in the system: [ 1169.363629][ T31] 1 lock held by khungtaskd/31: [ 1169.369760][ T31] #0: ffffffff8df3d4e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1169.380569][ T31] 2 locks held by getty/5590: [ 1169.387138][ T31] #0: ffff88802fbf30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1169.397062][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1169.408678][ T31] 5 locks held by kworker/1:3/5891: [ 1169.414182][ T31] #0: ffff888020a98548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1169.427247][ T31] #1: ffffc90004437ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1169.439537][ T31] #2: ffff888144f55198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 1169.448682][ T31] #3: ffff88807617c198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 1169.458147][ T31] #4: ffff88806e3a6160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 1169.467580][ T31] 4 locks held by udevd/15715: [ 1169.472393][ T31] #0: ffff88802e0dd2f0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe20 [ 1169.481363][ T31] #1: ffff888028014488 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 1169.491014][ T31] #2: ffff8880480da0f8 (kn->active#19){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 1169.504478][ T31] #3: ffff88807617c198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 1169.515559][ T31] [ 1169.517921][ T31] ============================================= [ 1169.517921][ T31] [ 1169.526512][ T31] NMI backtrace for cpu 0 [ 1169.526530][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1169.526553][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1169.526564][ T31] Call Trace: [ 1169.526572][ T31] [ 1169.526582][ T31] dump_stack_lvl+0x189/0x250 [ 1169.526617][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1169.526645][ T31] ? __pfx__printk+0x10/0x10 [ 1169.526689][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1169.526712][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1169.526732][ T31] ? __pfx__printk+0x10/0x10 [ 1169.526755][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1169.526789][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1169.526812][ T31] watchdog+0xf60/0xfa0 [ 1169.526835][ T31] ? watchdog+0x1e2/0xfa0 [ 1169.526861][ T31] kthread+0x711/0x8a0 [ 1169.526889][ T31] ? __pfx_watchdog+0x10/0x10 [ 1169.526906][ T31] ? __pfx_kthread+0x10/0x10 [ 1169.526933][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1169.526958][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1169.526982][ T31] ? __pfx_kthread+0x10/0x10 [ 1169.527010][ T31] ret_from_fork+0x4bc/0x870 [ 1169.527032][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1169.527061][ T31] ? __switch_to_asm+0x39/0x70 [ 1169.527077][ T31] ? __switch_to_asm+0x33/0x70 [ 1169.527093][ T31] ? __pfx_kthread+0x10/0x10 [ 1169.527121][ T31] ret_from_fork_asm+0x1a/0x30 [ 1169.527156][ T31] [ 1169.527164][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1169.679717][ C1] NMI backtrace for cpu 1 [ 1169.679739][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1169.679758][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1169.679768][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1169.679794][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 01 22 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1169.679808][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 1169.679824][ C1] RAX: 6389096a6f8d8000 RBX: ffffffff81967be7 RCX: 6389096a6f8d8000 [ 1169.679838][ C1] RDX: 0000000000000001 RSI: ffffffff8d70ceaa RDI: ffffffff8bbf0760 [ 1169.679849][ C1] RBP: ffffc90000197f10 R08: ffff8880b8932fdb R09: 1ffff110171265fb [ 1169.679861][ C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f7cd870 [ 1169.679873][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1100395cb58 [ 1169.679885][ C1] FS: 0000000000000000(0000) GS:ffff88812623e000(0000) knlGS:0000000000000000 [ 1169.679898][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1169.679909][ C1] CR2: 00007fa74f1b3ad8 CR3: 00000000774ca000 CR4: 00000000003526f0 [ 1169.679926][ C1] DR0: 0000000000000008 DR1: 0000000000000002 DR2: 0000000000000081 [ 1169.679936][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1169.679948][ C1] Call Trace: [ 1169.679955][ C1] [ 1169.679961][ C1] default_idle+0x13/0x20 [ 1169.679984][ C1] default_idle_call+0x73/0xb0 [ 1169.679998][ C1] do_idle+0x1e7/0x510 [ 1169.680017][ C1] ? __pfx_do_idle+0x10/0x10 [ 1169.680041][ C1] cpu_startup_entry+0x44/0x60 [ 1169.680058][ C1] start_secondary+0x101/0x110 [ 1169.680082][ C1] common_startup_64+0x13e/0x147 [ 1169.680110][ C1] [ 1169.864929][ C1] vkms_vblank_simulate: vblank timer overrun [ 1171.360203][ T5197] udevd[5197]: worker [15715] /devices/platform/dummy_hcd.3/usb4/4-1 is taking a long time [ 1177.424052][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.430520][ T1300] ieee802154 phy1 wpan1: encryption failed: -22