last executing test programs: 41.194528078s ago: executing program 0 (id=970): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = syz_open_procfs(0x0, &(0x7f0000000400)='attr\x00') process_vm_writev(0x0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, 0x0, 0x300, 0x0) pread64(r3, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000300)={0x1, @sliced={0x4, [0x0, 0x4, 0x2, 0x7, 0x0, 0x1, 0x1, 0x5, 0x8, 0x9, 0x1, 0x665, 0x4e, 0x200, 0x2f6, 0xfe01, 0x5, 0x9, 0x8, 0x643, 0x5, 0x1, 0x298b, 0x7, 0x7, 0x8000, 0x8, 0x639, 0x3, 0xfffd, 0x87b8, 0xb, 0x8, 0x2, 0xa, 0x2, 0x8001, 0x7c, 0xc, 0x4, 0x1, 0xb, 0x1ff, 0x0, 0x7, 0x8, 0x948, 0xc], 0x8b}}) r4 = syz_open_dev$vbi(&(0x7f0000000140), 0x3, 0x2) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000001c0)={0x7, @pix_mp={0x49, 0x2, 0x3432564e, 0x1, 0x1, [{0x1, 0x4}, {0xfa, 0x2}, {0x0, 0x4f11}, {0x5, 0x6}, {0x4, 0x3}, {0x400, 0x80000001}, {0x3ff, 0x2000002}, {0x5, 0x800003}], 0x9, 0xbe, 0x3}}) keyctl$read(0x20, r2, 0x0, 0x0) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r5, 0x52b242d) request_key(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, r5) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) unshare(0x2c020400) r6 = socket$igmp(0x2, 0x3, 0x2) fgetxattr(r6, &(0x7f0000000000)=@random={'security.', '\x00'}, &(0x7f0000000040)=""/1, 0x1) syz_usb_connect(0x0, 0x3e, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r7, &(0x7f0000000600)=""/4099, 0x1003, 0x0) 38.81697727s ago: executing program 4 (id=977): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xd0}], {0x95, 0x0, 0x0, 0xffffff95}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 38.794888144s ago: executing program 1 (id=978): r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10) (async) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000000)={0x3, 0x3, 0xe90, 0x19}) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0xfffffffd, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20040800) io_uring_setup(0x5bde, &(0x7f0000000380)={0x0, 0x5f41, 0x10, 0x0, 0x160}) (async) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff}, 0x80) (async) r4 = add_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0x0) (async) keyctl$revoke(0x3, r4) (async) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x1) (async) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) (async) ioctl$UI_SET_KEYBIT(r6, 0x40045565, 0xea) (async) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e8, 0x1d8, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x330, 0x20a, 0x278, 0x330, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0x0, 0x0, 0xff], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x7a, 0x198, 0x1c0, 0x0, {}, [@common=@unspec=@limit={{}, {0x7fffffff, 0x8, 0x80000001, 0x10f, 0x2, 0x4, 0x7}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa395e046d7c8e944613a407abbf4ed3e800000000000000082a850e79009e2905d2f98ba18f91f3c93686e9bee067f4e77d9ad6623805004100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9528c46178ed5f9192dae000e579c80eca35a58dc47d1d5e4ff6e216c724e88c70244858700", 0x28, 0x2}}]}, @common=@unspec=@MARK={0x0, 'MARK\x00', 0x2, {0x6, 0x8}}}, {{@uncond, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x5, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xdf) (async) ioctl$UI_DEV_CREATE(r6, 0x5501) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000140)={0xf4, 0x3, 0x1, "d99701cb24596feddfa4b4d4e29996a5ab3ac98a9eb06fb2d58504bcf23ab6ae", 0x20303159}) (async) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) 38.56952479s ago: executing program 4 (id=980): r0 = syz_io_uring_setup(0x952, &(0x7f0000000240)={0x0, 0x0, 0xd964b0e800c9f9d5, 0x4, 0x388}, 0x0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x7ffffffe) unshare(0x22020400) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010000217fffff0080030c00010020010000000000000c000100040000000000000008000500", @ANYRES32=r2, @ANYBLOB="080003"], 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x8000) 38.410825696s ago: executing program 4 (id=981): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) io_setup(0x0, &(0x7f0000000000)) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xc3) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='v', 0xf4240}], 0x1}], 0x1, 0x8004) accept4(r5, 0x0, 0x0, 0x0) accept4(r5, &(0x7f00000009c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x0, 0x800) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$nci(r3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv4_newroute={0x4c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x28, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x24, 0x1, {{0x1}, [@loopback]}}}]}, 0x4c}}, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001000c0080000000", @ANYRES32=0x0, @ANYBLOB="000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) r6 = dup(0xffffffffffffffff) ioctl$KVM_NMI(r6, 0xae9a) 37.929203407s ago: executing program 0 (id=983): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x3c00, 0x300, 0x3f000000, 0x4b0, 0xbbba, 0x300000, 0x0, 0x0, {}, {0x2, 0x101}, {0x0, 0x3, 0x20}, {0x0, 0x8}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x10681}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbfc, {0xa, 0x40, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x781}]}, 0x34}}, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) r10 = dup(r9) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4c831, 0xffffffffffffffff, 0x0) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r11, 0x4b4c, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x83f}, &(0x7f00000000c0)=0x8) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a800000010000304017b70000000000000b7b465", @ANYRES32=0x0, @ANYBLOB="00000000000000007800128009000100766c616e000000006800028010000380f8ff0100ffffff7f0800000006000100000000004c0004800c000100000000006a0000003c00050003000000018000000c000100220b0000000000000c00010004000005000000000c000100000000000400000002000100800000000000000008000500", @ANYRES32=r14], 0xa8}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) sendmsg$nl_route_sched(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000b40)=@newtclass={0x88c, 0x28, 0x400, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0xfff1, 0xf}, {0xffff, 0xfff2}, {0x10, 0x1}}, [@tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x6, 0x1}}, @TCA_RATE={0x6, 0x5, {0xd, 0x5}}, @tclass_kind_options=@c_htb={{0x8}, {0x828, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0x10001, 0xfffffffe, 0x9, 0x5, 0x2c, 0xffff, 0xf0, 0x8, 0x9, 0x8, 0x889, 0x2, 0x2, 0x28000, 0xfffff800, 0x3, 0xffff, 0x7, 0x5, 0x6, 0x9, 0x1, 0x442d9af9, 0xdc9, 0x8, 0x8, 0x5, 0x1, 0x9, 0x6, 0x1, 0x3, 0x7f, 0xb77, 0x8, 0x5, 0x6, 0x2, 0x80000000, 0x5, 0x1, 0xa8, 0x6241, 0x8, 0x8, 0x80, 0x7, 0x9, 0x8, 0x6, 0x7f, 0x100, 0x5b28, 0xb3, 0xa4, 0x9, 0x7, 0x5, 0x0, 0x2, 0x9, 0x3, 0x5, 0x9, 0x2, 0x76a, 0xc, 0x7, 0x7, 0x1, 0x4, 0x1, 0x2, 0x10000, 0x2, 0x200, 0x6, 0xc, 0xd, 0x4, 0x5, 0x1, 0xe, 0xff, 0x877, 0x4, 0x8, 0xd8eb, 0xa, 0x8000, 0x80000001, 0xfffffffc, 0x6, 0x7f, 0x80000000, 0x869, 0x6, 0x80000001, 0x2, 0x7fffffff, 0x4, 0x1000, 0x3, 0x3, 0x13, 0x1, 0x10, 0x0, 0x401, 0x0, 0x9, 0x5, 0x1ff, 0x4, 0x0, 0x10001, 0x8, 0x4, 0x800, 0x5, 0x10, 0x0, 0xdb, 0x9, 0x2, 0x9, 0x80000000, 0x3, 0x3, 0x7, 0x100, 0x9, 0x6, 0x40d, 0x4, 0x7, 0xc227, 0xc, 0xf53, 0x280, 0x4, 0x5, 0x7, 0xd, 0xc43, 0x5, 0xe, 0x3, 0x1, 0x800, 0x7fffffff, 0x7, 0x1, 0x8, 0x9, 0x1, 0x1, 0x100, 0x1, 0x5, 0x6, 0x0, 0x1, 0x8c5, 0x101, 0x10, 0x8001, 0x92, 0x9, 0x86, 0x6, 0x8000, 0x80000000, 0x9, 0x4, 0x5, 0x5, 0xb981, 0xffffff80, 0xf, 0xd, 0x8, 0x7, 0x5, 0x7fff, 0x400, 0x0, 0xc4f, 0x7, 0x5, 0x28ed, 0x10, 0x7ff, 0x0, 0x800, 0x3, 0x5, 0x1000, 0x556, 0x81, 0x9, 0x7ed9, 0xb8, 0x1, 0xc6, 0x7, 0x0, 0xa, 0x1ff, 0xfffffffc, 0x0, 0xda, 0x7, 0x7f, 0x1, 0x3ff, 0x1000, 0x8, 0x8, 0x101, 0x8, 0x4, 0x42, 0xe35, 0x4, 0x5, 0x2, 0xffff, 0xffffffff, 0x2, 0x80000000, 0x1ddd, 0xa5a, 0xc3, 0x2, 0x6, 0x2, 0x4, 0x80, 0xfffffffe, 0x5, 0x5, 0xf, 0xa, 0x5, 0x0, 0x9, 0x3, 0x3, 0x4, 0x31, 0xc, 0x3, 0xffff9565, 0x1dfd, 0x187]}, @TCA_HTB_CEIL64={0xc, 0x7, 0x1}, @TCA_HTB_RTAB={0x404, 0x4, [0x82b, 0x5, 0x8, 0x7, 0xa, 0x2, 0x2, 0x356c, 0xfffffffa, 0x97, 0xc0, 0x1, 0x8001, 0x528e, 0x14, 0x2, 0x7fffffff, 0x0, 0x7, 0xef, 0x800, 0xfffffff9, 0x1, 0x3, 0x5, 0x80000001, 0x1ff, 0xa, 0x80, 0x5, 0x10, 0x1, 0x138d, 0x9, 0x7, 0x1, 0xff, 0x3, 0xbb20, 0x0, 0x3, 0xfffffff3, 0x5, 0x3, 0xc, 0x1ff, 0x1, 0x3, 0xffffffff, 0x2, 0x8, 0x6, 0x5, 0x3, 0x9, 0x81, 0xff, 0x80000001, 0x603, 0x80, 0xe0, 0x5, 0x1, 0x2, 0x3, 0x80000000, 0x0, 0x7, 0x7f, 0xffffffff, 0x1, 0xfffffff8, 0x80000001, 0x1, 0xfffffffa, 0x0, 0x10, 0x1800, 0x2, 0x4, 0x7, 0x10001, 0x5438, 0x4, 0x26, 0x451, 0x8, 0x5, 0x1ff, 0x1000, 0x8, 0x80000000, 0x6, 0x3, 0x4, 0x7, 0xb9, 0x4c43, 0x6, 0xab, 0x3, 0xfff, 0x7, 0x0, 0x8, 0x0, 0x1, 0x3, 0xffff71a3, 0x40, 0x7, 0x3, 0xc, 0x8, 0x7fffffff, 0xc, 0x4, 0x3ff, 0x1, 0x1, 0xfffffccf, 0x8, 0xfff, 0x0, 0x2, 0x84, 0xc, 0xb98, 0x400000, 0xfffffffe, 0x8, 0xfff, 0x1000, 0x7fff, 0x8, 0x5, 0x1, 0x2, 0x8c, 0x9, 0x5, 0x4, 0x7, 0x3, 0x7fffffff, 0xe6, 0x10000, 0xc, 0x359, 0x7, 0xffff14d5, 0x9, 0x1, 0x8, 0x6, 0x8, 0xa6b7, 0x6, 0x2, 0x2, 0x7da, 0x0, 0x8001, 0x1, 0x1f600, 0x7, 0x6, 0xc38b, 0xc, 0x3e9, 0x401, 0x8f, 0x8, 0x0, 0x401, 0x2, 0x4fa, 0x2, 0x5, 0xddcf, 0xffffffff, 0x100, 0xa, 0x8, 0x21, 0x3, 0x39e, 0x5, 0xfffffffb, 0x5, 0x7, 0x9, 0xf2, 0x1, 0x7, 0x6, 0x6, 0x1000, 0xb24, 0x7f, 0x7, 0x8000, 0xad, 0x5, 0x4, 0x7, 0x7, 0x5, 0x4, 0x101, 0x6, 0x5, 0x200, 0xffff0b0f, 0x5, 0x4, 0x7fff, 0x9, 0x7fffffff, 0x10001, 0xfffffff8, 0x0, 0x1, 0x7, 0x5, 0x0, 0x2, 0x2, 0x7fffffff, 0x0, 0x2, 0x8, 0x7ff, 0xbf, 0x80000000, 0x2, 0x100, 0x7, 0x0, 0x162, 0x0, 0x400, 0x3, 0x0, 0x5, 0x1, 0xfe, 0x4, 0x7, 0x0, 0x0, 0xfffffffb, 0x8080000, 0xe, 0x91d5, 0x5]}, @TCA_HTB_RATE64={0xc, 0x6, 0x6}, @TCA_HTB_OFFLOAD={0x4}]}}, @TCA_RATE={0x6, 0x5, {0x1a, 0x81}}, @TCA_RATE={0x6, 0x5, {0x2, 0x6}}, @tclass_kind_options=@c_netem={0xa}]}, 0x88c}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) ioctl$RNDADDTOENTCNT(r10, 0x40045201, &(0x7f0000000000)=0x5) 37.888457277s ago: executing program 2 (id=984): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e0000000000000000010500060020feff000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x24000000) 37.363595023s ago: executing program 0 (id=985): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x0, 0xd968d5b908ac0cde, 0x0, {0x0, 0x8}, {0x350, 0x53ae}, {0xf4ef, 0x0, 0xfffffffc}, {0x0, 0x0, 0x1}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x400000, 0x0, 0x0, 0xfffffffd, 0xfffffffe, 0x0, 0x0, 0x8, 0x4, 0x0, 0xb}) 37.299570284s ago: executing program 2 (id=986): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000003ac0)={0x0, [[0x3, 0x443, 0x40, 0x0, 0x4], [0x7f7f, 0x40, 0x0, 0xfffffffe, 0x0, 0x0, 0xff], [0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x8001]], '\x00', [{0x0, 0x21, 0x0, 0x1}, {0x0, 0x1ff}, {0x0, 0x1000}, {}, {0x0, 0xfffffff8}, {0x0, 0xfffffffc}, {0x0, 0xfffffffd}, {0x0, 0x2000000}, {}, {}, {0xd4}], '\x00', 0x7}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x24008000) socket$inet_udplite(0x2, 0x2, 0x88) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000100)=ANY=[]) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="ac008ac5ab41a2361d3e86d1", 0xc, 0x20040045, &(0x7f00000000c0)={0xa, 0x4e21, 0x5ed1, @empty, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='yeah\x00', 0x5) r7 = io_uring_setup(0x4edd, &(0x7f0000000080)) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r7, 0x14, 0x0, 0x2) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r7, 0x13, &(0x7f0000000000), 0x2) 36.924915967s ago: executing program 0 (id=987): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c0000001800010025bd7000000000000a00000000030006000000001400070000000000001000000000000000000001"], 0x6c}}, 0x0) 36.543691248s ago: executing program 0 (id=990): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000700)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88000) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001280)={r0, 0x200, {0x2a12, 0x80010000, 0x0, 0x2, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000013000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) 36.130401138s ago: executing program 4 (id=992): r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x100, 0x20) (async) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x200002) (async) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xa44cac06db9861a9, 0x40010, 0xffffffffffffffff, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x108, &(0x7f00000000c0)=0xef75, 0x0, 0x4) (async) syz_clone(0x800c9200, &(0x7f0000000100)="79d6e48c453e7f1655e7adbb27b968e3c7907de94dc6cbe8c42168b1fa1440566797fef2f2748c60224abb8813a82df124a3710f2228da987f82b0bc1784f930314365306e2a6d602e75fc888f4fb34b947cda11b20c1624a572e6799ebd957a5db0cf2602", 0x65, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="283a0b675a3dba42004075524ed0fb54478f06186c65254196b4a428a9782a8f2bf96aa836cc9c22ecad6b67f710fe1f118b9227caa5feec36f8cfdec1b47901e6f0c79510b41bf2966c4b440b1157e38f3c158b18fb4fdb8f1e967ec2ec286cd7b6f6006877a8d3efe01c6fcbaca923c21735abbb6f0609c7628cfc0a69ef90cf812f2062363b9e8525aa7bafd3ccf42499e68947372939f7a1ad65fd3edcfb81e28305b2f232e462b0a20c0c19c6578e9ba455770566490f25bb22a8905b0cc79f0cf2952527d3548f059184075ac64ea8aa23760f1c") (async) setsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000000300)=0x80, 0x4) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r3, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4fb57953ffb8cc9a}, 0x40) write$apparmor_current(r1, &(0x7f0000000480)=@profile={'permprofile ', '/dev/dri/card#\x00'}, 0x1b) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f00000004c0)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f00000005c0)={0x28, 0x4, r4, 0x0, 0x0, 0x0, 0x0, 0x47, &(0x7f0000000540)="7c1c4412e0ca7dde6f532749015041afced43d2a154ad68fe44a08611cdbaef1520e362a789311bd6d14aa57240447302a8178666c7b0dcce4b9e813a8df36c3b9a4a392a51b32"}) (async) rename(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='./file0\x00') (async) syz_clone(0x9882200, &(0x7f0000000680)="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", 0xff, &(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)="3b44196e3fc04994590b16890e4f707ea6ab447b1296c2721462693e6d05311c757b2b4dfcbb8742971f49e14415dc5d2179b126b4fb0429a122be1c4fccb89bca79111e8e55ecc79758e91c3ab80bc21349e19c44a46d5917d99915da4b32bfcaf67dfa85c2a0d555e99b13c7769d9e9f39ba98b28f044c3d26792d78e8c619cd77772010539721a941097addd2cfdd6608ad1a435448b8") (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000009c0)={@cgroup=r1, 0x12, 0x0, 0xffffffff, &(0x7f00000008c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0], &(0x7f0000000980)=[0x0]}, 0x40) (async) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, &(0x7f0000000a00)) write(r0, &(0x7f0000000a40)="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", 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001ac0)=@IORING_OP_SYMLINKAT={0x26, 0x20, 0x0, r0, &(0x7f0000001a40)='./file0\x00', &(0x7f0000001a80)='./file0/file0\x00', 0x0, 0x0, 0x1}) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000001b00)={0x3b, @broadcast, 0x4e24, 0x1, 'lblc\x00', 0x39, 0x6, 0x1a}, 0x2c) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001b40)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) recvmmsg$unix(r6, &(0x7f0000001c80)=[{{&(0x7f0000001b80), 0x6e, &(0x7f0000001c40)=[{&(0x7f0000001c00)=""/50, 0x32}], 0x1}}], 0x1, 0x10101, &(0x7f0000001cc0)={0x77359400}) (async) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000001d00)={0x0, 0x1, 0x1, [0x8]}, 0xa) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d80), r6) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001dc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000001e80)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x2c, r7, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xa}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c4) syz_usb_connect(0x5, 0xd9, &(0x7f0000001ec0)={{0x12, 0x1, 0x0, 0xab, 0xe4, 0x92, 0x10, 0xe96, 0xc001, 0x9761, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc7, 0x1, 0x3, 0x8, 0xd0, 0x4, [{{0x9, 0x4, 0xab, 0x4, 0x2, 0x5e, 0x85, 0xb0, 0x0, [], [{{0x9, 0x5, 0x0, 0x10, 0x8, 0x26, 0x1, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xe, 0x3}, @generic={0x90, 0x36, "30c0aab90b58aab700cda75ed2507e0aefb1c7a46773864d14c3ec00a8cfc96161aeefbea377dcf2cdc20f8328df813f169308d88983e8ee083fe06b6cc72a2b07d3fe269384076282dbca4222caf8d0be65f52d1cf3c8f9c1a1b5530e38b437bcb2fcd9fb83fbef3d42048ffcd8b49673d5b40c0a9ceba001463522e55aba4d55ad85ea4f35c69be2190a5068e9"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x0, 0x49, 0x0, [@generic={0x5, 0x24, "afd12a"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xe, 0xfff7}]}}]}}]}}]}}, &(0x7f0000002540)={0xa, &(0x7f0000001fc0)={0xa, 0x6, 0x300, 0x9, 0x7, 0x8, 0x20, 0x2}, 0x5, &(0x7f0000002000)={0x5, 0xf, 0x5}, 0xa, [{0x4, &(0x7f0000002040)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000002080)=@lang_id={0x4, 0x3, 0x41f}}, {0x14, &(0x7f00000020c0)=@string={0x14, 0x3, "ece55391d3e0cfea78bd5fd8a98149e225c5"}}, {0x5c, &(0x7f0000002100)=@string={0x5c, 0x3, "b0e078ba7f83391954565326353ef966b2e2e56b742d18016051498f882ae3c8b7e12b98790414245e5cefb533367a32400ec2e851869c18f7081fd230cffb0df7d09f08b5c1d3d3b21d6ee96d5c81653487fc952a16e7d35901"}}, {0x4, &(0x7f0000002180)=@lang_id={0x4, 0x3, 0x3411}}, {0xde, &(0x7f00000021c0)=@string={0xde, 0x3, "1e0953b12237f6630d1461d7128249f44cdd3a038453a328b1d336a157c740aedb8c99ee686148a82f451ebffbaf21bcd7cd4487a0eb52d423a6dc5fd828232bb8eed53cca8719ff52c88e9054e1419c197e4985f3d73dc89937c413e3f97b4ce6955c21f9fec8e92aafc63aae585002635ba209c5faf03be974cebda61f41ac424e12595d0f31e77639f2d1b3ad17193cc8fae33b56e06405308bd575620c02a65d96f096b828dd75db78cfd3ec5a3b5725f04eadd5e89811122bbf78c09112f44894838e80b8afd3f74c54922e4e0eb65a9aa9008054d2aee8fa55"}}, {0x92, &(0x7f00000022c0)=@string={0x92, 0x3, "91d447d700c593af8bdda15413c9b177c2f7e069533dc6dc0196de11ff61d4813c9bec7ba58b4db3518f83a426093afc4b2647791bf897196022998b4a3efcf025d8beff7390e52c41d00f55ed3a1662e79736d908638ede522a787a4804cf42c21c794d3bce6bdf740fc6c9f28790b147ea3b75e0784a05c2eb05cc652f68eb4bd18f78b7f9548f73e1bee265bdb619"}}, {0xf, &(0x7f0000002380)=@string={0xf, 0x3, "bedff024948f02513cb0ba9ed0"}}, {0xd1, &(0x7f00000023c0)=@string={0xd1, 0x3, "a404286a4829bd255c1479c21495aa8f5792ff4b3376f913fc6417e500b6c58c49988f118521c4696892e1e254762e969f002a52dc1a8551f1b0c8af94a92529912518cf3c6641b4fb1b62663ec590a923562f240a7f13a1a08a3a6994793db4aa586a43378a3fb7f056fa99f7b8787f1233c5f7f5ab66f0e6b5bb5d934c39a83b0919983e6348f05dab2064a35dd024c7b765b4e10115be6e32c5588788dee1e99ffd3b919369112cc021e6b6cf13999aee14a3c2735c2383bf68fc6a6105f8b9f539fed17bcb1ad7a9365f82c024"}}, {0x5e, &(0x7f00000024c0)=@string={0x5e, 0x3, "119ef8a69a05f80c726c44855e6799fd8715597c46254f55e31bdfab28c514388523139942b20ec1121832ed250ee48f3e230e137efe2670a7093cbb58806400936c547614315143492e94fd57e522542c7413139146ea0bbc3d7e5e"}}]}) mremap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ffa000/0x4000)=nil) (async) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000002600)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) (async) recvmsg$can_raw(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000002640)=""/80, 0x50}, {&(0x7f00000026c0)=""/21, 0x15}, {&(0x7f0000002700)=""/105, 0x69}, {&(0x7f0000002780)=""/229, 0xe5}], 0x4, &(0x7f00000028c0)=""/201, 0xc9}, 0x0) 36.051489141s ago: executing program 0 (id=993): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = syz_open_procfs(0x0, &(0x7f0000000400)='attr\x00') process_vm_writev(0x0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, 0x0, 0x300, 0x0) pread64(r3, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000300)={0x1, @sliced={0x4, [0x0, 0x4, 0x2, 0x7, 0x0, 0x1, 0x1, 0x5, 0x8, 0x9, 0x1, 0x665, 0x4e, 0x200, 0x2f6, 0xfe01, 0x5, 0x9, 0x8, 0x643, 0x5, 0x1, 0x298b, 0x7, 0x7, 0x8000, 0x8, 0x639, 0x3, 0xfffd, 0x87b8, 0xb, 0x8, 0x2, 0xa, 0x2, 0x8001, 0x7c, 0xc, 0x4, 0x1, 0xb, 0x1ff, 0x0, 0x7, 0x8, 0x948, 0xc], 0x8b}}) r4 = syz_open_dev$vbi(&(0x7f0000000140), 0x3, 0x2) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000001c0)={0x7, @pix_mp={0x49, 0x2, 0x3432564e, 0x1, 0x1, [{0x1, 0x4}, {0xfa, 0x2}, {0x0, 0x4f11}, {0x5, 0x6}, {0x4, 0x3}, {0x400, 0x80000001}, {0x3ff, 0x2000002}, {0x5, 0x800003}], 0x9, 0xbe, 0x3}}) keyctl$read(0x20, r2, 0x0, 0x0) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r5, 0x52b242d) request_key(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, r5) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) unshare(0x2c020400) r6 = socket$igmp(0x2, 0x3, 0x2) fgetxattr(r6, &(0x7f0000000000)=@random={'security.', '\x00'}, &(0x7f0000000040)=""/1, 0x1) syz_usb_connect(0x0, 0x3e, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r7, &(0x7f0000000600)=""/4099, 0x1003, 0x0) 36.029238173s ago: executing program 1 (id=994): r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000000)=0x400, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000000000000012aaff0200000000000000000000000000013a"], 0xfdef) 35.752294824s ago: executing program 3 (id=995): r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) open_tree(r0, &(0x7f0000000100)='./file0\x00', 0x89901) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x40800000000000, 0x7, 0x48}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2508007a0000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="1400060064756d6d7930000000080000000000001400040076657468315f746f5f626f016400000005005300010000000800050004"], 0x54}}, 0x0) 35.571737933s ago: executing program 4 (id=996): r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) open_tree(r0, &(0x7f0000000100)='./file0\x00', 0x89901) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x40800000000000, 0x7, 0x48}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2508007a0000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="1400060064756d6d7930000000100000000000001400040076657468315f746f5f626f016400000005005300010000000800050004"], 0x54}}, 0x0) 35.570635971s ago: executing program 1 (id=997): socket(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="34000000020601080000000000000000000000000d000300"], 0x34}}, 0x24008040) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000003000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca4198914"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 35.496929909s ago: executing program 3 (id=998): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x30, 0x3e, 0x107, 0xfffffffe, 0x0, {0x4, 0x7c}, [@nested={0xc, 0x142, 0x0, 0x1, [@typed={0x8, 0x8, 0x0, 0x0, @ipv4=@multicast1}]}, @typed={0xc, 0x9, 0x0, 0x0, @u64=0x2}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="a7ff364e2d681edb", 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x1, {0x1, 0xff, 0x3}, 0x83}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) mbind(&(0x7f0000bdc000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000140)=0x3ff, 0x3, 0x0) mbind(&(0x7f0000bdb000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000080)=0x103e, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r6, 0x20000000004, {0x0, 0x1}}, 0x18) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000107010100000000000000000a00000a1c000780080001"], 0x30}, 0x1, 0x0, 0x0, 0x4008801}, 0x20008004) sendmsg$can_j1939(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x1, {0x0, 0xf0, 0x3}}, 0x18, &(0x7f0000000180)={0x0}}, 0xee) 35.307985669s ago: executing program 1 (id=999): r0 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) r1 = open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x84) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000580)=ANY=[@ANYRESOCT=r2, @ANYRES32=r0, @ANYRES16=r0, @ANYBLOB="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"], 0x2b) sendfile(r2, r1, 0x0, 0x4000000053d2) 35.143630126s ago: executing program 3 (id=1000): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1], 0x48}}, 0x0) 35.048705069s ago: executing program 1 (id=1001): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xd0}], {0x95, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 35.041231994s ago: executing program 2 (id=1002): r0 = syz_io_uring_setup(0x952, &(0x7f0000000240)={0x0, 0x0, 0xd964b0e800c9f9d5, 0x4, 0x388}, 0x0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x7ffffffe) unshare(0x22020400) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010000217fffff0080030c00010000030000000000000c000100040000000000000008000500", @ANYRES32=r2, @ANYBLOB="080003"], 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x8000) 34.887585528s ago: executing program 4 (id=1003): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000100000000000000040001000000f6a610000600000000002000000000000000"], 0x24, 0x0) getxattr(&(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xaa4, 0x0, &(0x7f0000000100)}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) syz_clone3(&(0x7f00000004c0)={0x80000, 0x0, 0x0, 0x0, {0x15}, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0xffffffffffffffff, 0x0, 0x0], 0x3}, 0x58) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r3, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000dc0)="5c5eafd3ae55a73702d6befaee97f47f4be65587e1fca708cee084691e4587d887a5eaab43ac5edc4886496910cd7a153cd84b93208c7b1a625b3ea990092389b19dab4f61e30ee60a4d7e51ffc9a5accbe20844356dd0ce192542d5e58d80657b3b5fb7a3d39337df22f77303c6895a8a9e41b12b97510f561bc2e4ee706a19e02f31bf2facf144960e57edc8337ba2b83accaa532145fc1b05aa42d18a69668308153e37d6cba0c7f76deab5eb00edf94382d09cfe9d1d50ec41ffebc62ae63d7ed6993ad955aeeac7472c37e41a5b762eb9858653011b1d935193c69caeab9cbb6980eb848aa40e3e5df9772cdcb37c719a62956e8afada", 0xf9}, {&(0x7f0000000cc0)}], 0x2}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001a80)="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", 0x153}], 0x1}}], 0x2, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x73, 0x86, 0x40, 0x20, 0xc72, 0x14, 0x39ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0xa, [{{0x9, 0x4, 0x1d, 0xf3, 0x0, 0x71, 0x6c, 0x75}}]}}]}}, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r5, 0x4188aec6, &(0x7f0000000040)) ioctl$KVM_SET_CLOCK(r5, 0x4188aec6, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x95d}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000000000000e006"]) 34.86557351s ago: executing program 3 (id=1004): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x0, 0xd968d5b908ac0cde, 0x0, {0x0, 0x8}, {0x350}, {0xf4ef}, {0x0, 0x0, 0xffe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0xb}) 34.818331119s ago: executing program 2 (id=1005): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 34.703499326s ago: executing program 1 (id=1006): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={0x0, 0x80}, 0x1, 0x7}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) shutdown(0xffffffffffffffff, 0x2) shutdown(0xffffffffffffffff, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0xde) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00'}) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='veth0_to_batadv\x00', 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000180)='blkio.bfq.io_merged\x00', 0x0, 0x0) preadv2(r6, &(0x7f0000000040)=[{&(0x7f0000000100)=""/65, 0x77}], 0x1, 0x0, 0x0, 0x0) socket(0x26, 0x1, 0x4e35) socket$unix(0x1, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x7e, 0x6, 0x10, @mcast1, @loopback={0x0, 0xffff888101827518}, 0x40, 0x8000, 0x5, 0xffffffff}}) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000005f"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 34.640337484s ago: executing program 3 (id=1007): syz_io_uring_submit(0x0, 0x0, 0x0) close(0xffffffffffffffff) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0xfffffffffffffe44, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x80800) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @empty}], 0x10) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x600, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 34.503889299s ago: executing program 2 (id=1008): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x40000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) syz_emit_ethernet(0x4f, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6c2d01000019840100000000f8ffffff0000ffff0a010102fe8000000000000100000000000000aaa5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"], 0x0) 34.242789431s ago: executing program 3 (id=1009): openat$tun(0xffffffffffffff9c, 0x0, 0x101600, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) fcntl$addseals(r2, 0x409, 0xe) connect$unix(r0, &(0x7f000057eff8)=@abs={0x1}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x3, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e1e, @rand_addr=0x1}, 0x10) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCGETMIFCNT_IN6(r6, 0x89e0, &(0x7f0000000200)={0x1}) syz_pidfd_open(0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8417f, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 33.721077379s ago: executing program 2 (id=1010): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c61737400"], 0x140}}, 0x0) 0s ago: executing program 32 (id=993): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = syz_open_procfs(0x0, &(0x7f0000000400)='attr\x00') process_vm_writev(0x0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, 0x0, 0x300, 0x0) pread64(r3, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000300)={0x1, @sliced={0x4, [0x0, 0x4, 0x2, 0x7, 0x0, 0x1, 0x1, 0x5, 0x8, 0x9, 0x1, 0x665, 0x4e, 0x200, 0x2f6, 0xfe01, 0x5, 0x9, 0x8, 0x643, 0x5, 0x1, 0x298b, 0x7, 0x7, 0x8000, 0x8, 0x639, 0x3, 0xfffd, 0x87b8, 0xb, 0x8, 0x2, 0xa, 0x2, 0x8001, 0x7c, 0xc, 0x4, 0x1, 0xb, 0x1ff, 0x0, 0x7, 0x8, 0x948, 0xc], 0x8b}}) r4 = syz_open_dev$vbi(&(0x7f0000000140), 0x3, 0x2) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000001c0)={0x7, @pix_mp={0x49, 0x2, 0x3432564e, 0x1, 0x1, [{0x1, 0x4}, {0xfa, 0x2}, {0x0, 0x4f11}, {0x5, 0x6}, {0x4, 0x3}, {0x400, 0x80000001}, {0x3ff, 0x2000002}, {0x5, 0x800003}], 0x9, 0xbe, 0x3}}) keyctl$read(0x20, r2, 0x0, 0x0) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r5, 0x52b242d) request_key(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, r5) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) unshare(0x2c020400) r6 = socket$igmp(0x2, 0x3, 0x2) fgetxattr(r6, &(0x7f0000000000)=@random={'security.', '\x00'}, &(0x7f0000000040)=""/1, 0x1) syz_usb_connect(0x0, 0x3e, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r7, &(0x7f0000000600)=""/4099, 0x1003, 0x0) kernel console output (not intermixed with test programs): 7 [ 215.971766][ T5986] usb 3-1: Using ep0 maxpacket: 16 [ 215.981346][ T5986] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.993083][ T5986] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 216.014648][ T5986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.054102][ T5986] usb 3-1: config 0 descriptor?? [ 216.071860][ T5944] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 216.232198][ T5944] usb 1-1: Using ep0 maxpacket: 16 [ 216.242790][ T5944] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 216.258459][ T5944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.345876][ T5944] usb 1-1: config 0 descriptor?? [ 216.359455][ T5944] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 216.442532][ T7808] netlink: 108 bytes leftover after parsing attributes in process `syz.4.520'. [ 216.463105][ T7808] netlink: 108 bytes leftover after parsing attributes in process `syz.4.520'. [ 216.475247][ T7808] netlink: 108 bytes leftover after parsing attributes in process `syz.4.520'. [ 216.566034][ T5986] mcp2221 0003:04D8:00DD.0007: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 216.626752][ T7810] netlink: 24 bytes leftover after parsing attributes in process `syz.4.521'. [ 216.742312][ T7789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.755905][ T7789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.895281][ T7812] openvswitch: netlink: Tunnel attr 202 out of range max 16 [ 217.038097][ T982] usb 3-1: USB disconnect, device number 17 [ 217.498151][ T7818] openvswitch: netlink: Tunnel attr 202 out of range max 16 [ 218.181840][ T982] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 218.361736][ T982] usb 5-1: Using ep0 maxpacket: 16 [ 218.445602][ T982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.501966][ T982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.512207][ T982] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 218.531157][ T982] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 218.559021][ T982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.665162][ T7812] netlink: 80 bytes leftover after parsing attributes in process `syz.1.516'. [ 218.873692][ T7818] netlink: 80 bytes leftover after parsing attributes in process `syz.0.518'. [ 218.884036][ T982] usb 5-1: config 0 descriptor?? [ 219.329913][ T982] hid_parser_main: 1 callbacks suppressed [ 219.329934][ T982] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 219.392003][ T24] gspca_sonixj: reg_w1 err -110 [ 219.397276][ T24] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 219.422955][ T5944] gspca_sonixj: reg_w1 err -110 [ 219.430591][ T5944] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 219.489244][ T982] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 219.598255][ T982] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 219.617608][ T982] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 219.627240][ T982] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 219.639276][ T982] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 219.659144][ T982] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 219.671447][ T982] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 219.701064][ T982] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 219.742259][ T982] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 219.799390][ T982] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0008/input/input9 [ 219.848813][ T7829] vcan0: tx drop: invalid sa for name 0x0000020000000004 [ 220.035059][ T982] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 220.084184][ T24] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 220.191195][ T982] usb 5-1: USB disconnect, device number 13 [ 220.248516][ T24] usb 4-1: config 252 has an invalid interface number: 191 but max is 0 [ 220.257140][ T24] usb 4-1: config 252 has no interface number 0 [ 220.267038][ T24] usb 4-1: New USB device found, idVendor=054c, idProduct=0069, bcdDevice=6d.6f [ 220.288351][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.325975][ T24] usb 4-1: Product: syz [ 220.340471][ T24] usb 4-1: Manufacturer: syz [ 220.372333][ T24] usb 4-1: SerialNumber: syz [ 220.442509][ T24] usb-storage 4-1:252.191: USB Mass Storage device detected [ 220.473565][ T7833] fido_id[7833]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 220.548186][ T24] usb-storage 4-1:252.191: Quirks match for vid 054c pid 0069: 1 [ 220.624682][ T7830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.057368][ T7830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.644596][ T7850] netlink: 12 bytes leftover after parsing attributes in process `syz.4.532'. [ 221.707823][ T5944] usb 1-1: USB disconnect, device number 17 [ 221.758961][ T5986] usb 2-1: USB disconnect, device number 23 [ 221.979676][ T7858] syz_tun: entered promiscuous mode [ 222.006866][ T7858] syz_tun: left promiscuous mode [ 222.237197][ T7865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.535'. [ 222.601740][ T7871] vcan0: tx drop: invalid sa for name 0x0000020000000004 [ 223.005617][ T24] usb 4-1: USB disconnect, device number 14 [ 223.585575][ T7887] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.542'. [ 224.089140][ T7897] openvswitch: netlink: Tunnel attr 202 out of range max 16 [ 224.202950][ T7895] netlink: 80 bytes leftover after parsing attributes in process `syz.0.545'. [ 225.497421][ T7909] vcan0: tx drop: invalid sa for name 0x0000020000000004 [ 225.802128][ T24] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 225.987031][ T24] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.001323][ T24] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.041045][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 226.050332][ T24] usb 3-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.00 [ 226.066459][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.084221][ T24] usb 3-1: config 0 descriptor?? [ 226.092151][ T5944] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 226.263711][ T5944] usb 4-1: config 252 has an invalid interface number: 191 but max is 0 [ 226.276924][ T5944] usb 4-1: config 252 has no interface number 0 [ 226.291345][ T5944] usb 4-1: New USB device found, idVendor=054c, idProduct=0069, bcdDevice=6d.6f [ 226.301364][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.317271][ T5944] usb 4-1: Product: syz [ 226.326405][ T5944] usb 4-1: Manufacturer: syz [ 226.332535][ T5867] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 226.341741][ T5944] usb 4-1: SerialNumber: syz [ 226.359840][ T5944] usb-storage 4-1:252.191: USB Mass Storage device detected [ 226.375920][ T5944] usb-storage 4-1:252.191: Quirks match for vid 054c pid 0069: 1 [ 226.522152][ T24] asus 0003:0B05:1822.0009: hidraw0: USB HID v0.00 Device [HID 0b05:1822] on usb-dummy_hcd.2-1/input0 [ 226.542720][ T5867] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 226.562286][ T24] asus 0003:0B05:1822.0009: Asus input not registered [ 226.579121][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.589225][ T7915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.598157][ T5867] usb 5-1: Product: syz [ 226.605508][ T24] asus 0003:0B05:1822.0009: probe with driver asus failed with error -12 [ 226.618431][ T5867] usb 5-1: Manufacturer: syz [ 226.631335][ T5867] usb 5-1: SerialNumber: syz [ 226.642827][ T7915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.667438][ T5867] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 226.754080][ T24] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 227.863697][ T24] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 227.871203][ T24] ath9k_htc: Failed to initialize the device [ 228.434533][ T5944] usb 5-1: USB disconnect, device number 14 [ 228.444346][ T7935] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (18) [ 228.486976][ T5944] usb 5-1: ath9k_htc: USB layer deinitialized [ 228.491893][ T43] usb 3-1: USB disconnect, device number 18 [ 228.864099][ T980] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 228.913753][ T5944] usb 4-1: USB disconnect, device number 15 [ 229.203734][ T980] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 229.228926][ T980] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 229.243888][ T980] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 229.260295][ T980] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 229.296591][ T980] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 229.329214][ T980] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 229.338569][ T980] usb 1-1: Product: syz [ 229.343106][ T980] usb 1-1: Manufacturer: syz [ 229.384040][ T980] cdc_wdm 1-1:1.0: skipping garbage [ 229.393845][ T980] cdc_wdm 1-1:1.0: skipping garbage [ 229.399379][ T980] cdc_wdm 1-1:1.0: skipping garbage [ 229.406274][ T980] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 229.431733][ T5986] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 229.531779][ T5944] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 229.591763][ T5986] usb 3-1: Using ep0 maxpacket: 32 [ 229.609910][ T5867] usb 1-1: USB disconnect, device number 18 [ 229.669257][ T5986] usb 3-1: config 0 has an invalid interface number: 206 but max is 1 [ 229.700427][ T7949] vcan0: tx drop: invalid sa for name 0x0000020000000004 [ 229.708115][ T5986] usb 3-1: config 0 has no interface number 1 [ 229.720897][ T5944] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 229.733669][ T5944] usb 4-1: config 0 has no interface number 0 [ 229.740410][ T5944] usb 4-1: config 0 interface 41 has no altsetting 0 [ 229.748111][ T5986] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 229.773604][ T5986] usb 3-1: config 0 interface 206 has no altsetting 0 [ 229.784480][ T5986] usb 3-1: New USB device found, idVendor=13d3, idProduct=3393, bcdDevice=6b.ed [ 229.794692][ T5986] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.816322][ T5944] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 229.830193][ T5986] usb 3-1: Product: syz [ 229.847531][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.855823][ T5986] usb 3-1: Manufacturer: syz [ 229.860450][ T5986] usb 3-1: SerialNumber: syz [ 229.879188][ T5944] usb 4-1: Product: syz [ 229.885241][ T30] audit: type=1326 audit(1754846502.244:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7950 comm="syz.4.563" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2fd5b8ebe9 code=0x0 [ 229.887750][ T5986] usb 3-1: config 0 descriptor?? [ 229.912430][ T5944] usb 4-1: Manufacturer: syz [ 229.917985][ T5944] usb 4-1: SerialNumber: syz [ 229.925612][ T5944] usb 4-1: config 0 descriptor?? [ 230.405625][ T5944] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 230.423028][ T5944] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 230.444337][ T5944] usb 4-1: USB disconnect, device number 16 [ 230.935062][ T7963] netlink: 12 bytes leftover after parsing attributes in process `syz.4.565'. [ 231.087960][ T7965] netlink: 28 bytes leftover after parsing attributes in process `syz.3.566'. [ 231.098502][ T7965] netlink: 28 bytes leftover after parsing attributes in process `syz.3.566'. [ 232.231758][ T43] usb 3-1: USB disconnect, device number 19 [ 232.280166][ T7983] vcan0: tx drop: invalid sa for name 0x0000020000000004 [ 232.332190][ T5944] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 232.495233][ T5944] usb 1-1: config 252 has an invalid interface number: 191 but max is 0 [ 232.534957][ T5944] usb 1-1: config 252 has no interface number 0 [ 232.569007][ T5944] usb 1-1: New USB device found, idVendor=054c, idProduct=0069, bcdDevice=6d.6f [ 232.585693][ T5944] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.604248][ T5944] usb 1-1: Product: syz [ 232.617113][ T5944] usb 1-1: Manufacturer: syz [ 232.622472][ T5944] usb 1-1: SerialNumber: syz [ 232.639452][ T5944] usb-storage 1-1:252.191: USB Mass Storage device detected [ 232.689820][ T5944] usb-storage 1-1:252.191: Quirks match for vid 054c pid 0069: 1 [ 232.856595][ T7980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.894883][ T7980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.731870][ T5944] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 233.904298][ T5944] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 233.941148][ T5944] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 233.969507][ T5944] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 234.008423][ T5944] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 234.030629][ T8003] netlink: 60 bytes leftover after parsing attributes in process `syz.1.578'. [ 234.059259][ T5944] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 14129, setting to 64 [ 234.104111][ T5944] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 234.117913][ T5944] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 234.144904][ T5944] usb 3-1: Product: syz [ 234.158172][ T5944] usb 3-1: Manufacturer: syz [ 234.205278][ T5944] cdc_wdm 3-1:1.0: skipping garbage [ 234.227504][ T5944] cdc_wdm 3-1:1.0: skipping garbage [ 234.240923][ T5944] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 234.381995][ T8007] netlink: 12 bytes leftover after parsing attributes in process `syz.1.579'. [ 234.426244][ T43] usb 3-1: USB disconnect, device number 20 [ 235.168957][ T5944] usb 1-1: USB disconnect, device number 19 [ 235.725039][ T8030] vcan0: tx drop: invalid sa for name 0x0000020000000004 [ 235.895760][ T8037] netlink: 'syz.3.589': attribute type 1 has an invalid length. [ 236.334089][ T8039] bond1: entered promiscuous mode [ 236.339418][ T8039] bond1: entered allmulticast mode [ 236.352993][ T8039] 8021q: adding VLAN 0 to HW filter on device bond1 [ 236.912271][ T928] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 236.981734][ T43] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 237.098179][ T928] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 237.113025][ T928] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 237.122665][ T928] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 237.133232][ T43] usb 5-1: device descriptor read/64, error -71 [ 237.188248][ T928] usb 3-1: config 220 has no interface number 2 [ 237.204987][ T928] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 237.229181][ T8056] tipc: Enabled bearer , priority 0 [ 237.244273][ T8055] tipc: Enabling of bearer rejected, already enabled [ 237.258487][ T928] usb 3-1: config 220 interface 0 has no altsetting 0 [ 237.261129][ T8056] syzkaller0: entered promiscuous mode [ 237.282061][ T8056] syzkaller0: entered allmulticast mode [ 237.288762][ T928] usb 3-1: config 220 interface 76 has no altsetting 0 [ 237.301742][ T928] usb 3-1: config 220 interface 1 has no altsetting 0 [ 237.348366][ T8055] tipc: Resetting bearer [ 237.364875][ T928] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 237.374826][ T928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.389809][ T928] usb 3-1: Product: syz [ 237.404122][ T928] usb 3-1: Manufacturer: syz [ 237.412679][ T43] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 237.441646][ T928] usb 3-1: SerialNumber: syz [ 237.546876][ T8054] tipc: Resetting bearer [ 237.562324][ T43] usb 5-1: device descriptor read/64, error -71 [ 237.630427][ T8054] tipc: Disabling bearer [ 237.704768][ T43] usb usb5-port1: attempt power cycle [ 237.721475][ T928] usb 3-1: selecting invalid altsetting 0 [ 237.755759][ T928] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 237.832132][ T928] usb 3-1: No valid video chain found. [ 237.854902][ T928] usb 3-1: selecting invalid altsetting 0 [ 237.868477][ T928] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 237.962642][ T928] usb 3-1: USB disconnect, device number 21 [ 238.091748][ T43] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 238.126954][ T43] usb 5-1: device descriptor read/8, error -71 [ 238.251130][ T8065] netlink: 12 bytes leftover after parsing attributes in process `syz.3.595'. [ 238.351726][ T24] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 238.402098][ T43] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 238.422516][ T43] usb 5-1: device descriptor read/8, error -71 [ 238.532952][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 238.553795][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.563893][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 238.578676][ T43] usb usb5-port1: unable to enumerate USB device [ 238.607686][ T24] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 238.624162][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.638165][ T24] usb 2-1: config 0 descriptor?? [ 238.660267][ T24] pxrc 2-1:0.0: Could not find endpoint [ 238.669404][ T24] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 238.858570][ T8063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.870209][ T8063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.921874][ T24] usb 2-1: USB disconnect, device number 24 [ 239.286361][ T8077] netlink: 'syz.0.599': attribute type 11 has an invalid length. [ 239.332863][ T5986] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 239.581789][ T5986] usb 4-1: Using ep0 maxpacket: 32 [ 239.596829][ T5986] usb 4-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 239.613663][ T5986] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.632004][ T8081] vcan0: tx drop: invalid sa for name 0x0000020000000004 [ 239.640609][ T5986] usb 4-1: config 0 descriptor?? [ 239.685379][ T5986] rndis_host 4-1:0.0: probe with driver rndis_host failed with error -22 [ 240.246059][ T5986] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 240.443405][ T5986] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 240.464103][ T5986] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 240.500091][ T5986] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 240.514948][ T5986] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 240.529633][ T5986] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 14129, setting to 64 [ 240.548077][ T5986] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 240.572239][ T980] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 240.601167][ T5986] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 240.619978][ T5986] usb 5-1: Product: syz [ 240.630424][ T5986] usb 5-1: Manufacturer: syz [ 240.664891][ T5986] cdc_wdm 5-1:1.0: skipping garbage [ 240.670204][ T5986] cdc_wdm 5-1:1.0: skipping garbage [ 240.690151][ T5986] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 240.763840][ T980] usb 3-1: config 0 has an invalid interface number: 101 but max is 0 [ 240.776456][ T980] usb 3-1: config 0 has no interface number 0 [ 240.785631][ T980] usb 3-1: too many endpoints for config 0 interface 101 altsetting 159: 32, using maximum allowed: 30 [ 240.799953][ T980] usb 3-1: config 0 interface 101 altsetting 159 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 240.817445][ T980] usb 3-1: config 0 interface 101 has no altsetting 0 [ 240.832433][ T980] usb 3-1: New USB device found, idVendor=093a, idProduct=2623, bcdDevice=b2.14 [ 240.845639][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.860639][ T980] usb 3-1: Product: syz [ 240.863658][ T928] usb 5-1: USB disconnect, device number 19 [ 240.870128][ T980] usb 3-1: Manufacturer: syz [ 240.877491][ T980] usb 3-1: SerialNumber: syz [ 240.898294][ T980] usb 3-1: config 0 descriptor?? [ 240.921877][ T43] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 241.101768][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 241.113236][ T43] usb 1-1: config 0 has an invalid interface number: 202 but max is 1 [ 241.125365][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.161436][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 241.207362][ T43] usb 1-1: config 0 has no interface number 0 [ 241.228074][ T43] usb 1-1: too many endpoints for config 0 interface 202 altsetting 87: 182, using maximum allowed: 30 [ 241.240038][ T43] usb 1-1: config 0 interface 202 altsetting 87 endpoint 0x2 has invalid maxpacket 255, setting to 64 [ 241.269413][ T43] usb 1-1: config 0 interface 202 altsetting 87 has 1 endpoint descriptor, different from the interface descriptor's value: 182 [ 241.303581][ T43] usb 1-1: config 0 interface 202 has no altsetting 0 [ 241.330802][ T43] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.2b [ 241.341728][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.352014][ T43] usb 1-1: Product: syz [ 241.356399][ T43] usb 1-1: Manufacturer: syz [ 241.362953][ T43] usb 1-1: SerialNumber: syz [ 241.369403][ T980] gspca_main: gspca_pac7302-2.14.0 probing 093a:2623 [ 241.404406][ T980] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 241.405401][ T43] usb 1-1: config 0 descriptor?? [ 241.422006][ T980] gspca_pac7302 3-1:0.101: probe with driver gspca_pac7302 failed with error -71 [ 241.453608][ T43] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 241.468604][ T980] usb 3-1: USB disconnect, device number 22 [ 241.859550][ T43] usb 1-1: USB disconnect, device number 20 [ 241.870519][ T1144] usb 1-1: Failed to submit usb control message: -71 [ 241.900032][ T1144] usb 1-1: unable to send the bmi data to the device: -71 [ 241.926910][ T1144] usb 1-1: unable to get target info from device [ 241.949707][ T1144] usb 1-1: could not get target info (-71) [ 241.988565][ T1144] usb 1-1: could not probe fw (-71) [ 242.079492][ T982] usb 4-1: USB disconnect, device number 17 [ 242.999743][ T5923] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 243.212750][ T5923] usb 4-1: Using ep0 maxpacket: 16 [ 243.341906][ T5923] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.372616][ T5923] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 243.420086][ T5923] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 243.429944][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.439879][ T5923] usb 4-1: Product: syz [ 243.444604][ T5923] usb 4-1: Manufacturer: syz [ 243.449445][ T5923] usb 4-1: SerialNumber: syz [ 243.701929][ T980] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 243.716394][ T5923] usb 4-1: 0:2 : does not exist [ 243.747486][ T5923] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 243.799929][ T5923] usb 4-1: USB disconnect, device number 18 [ 243.861950][ T980] usb 5-1: Using ep0 maxpacket: 8 [ 243.871373][ T980] usb 5-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 243.889673][ T980] usb 5-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 243.909290][ T980] usb 5-1: config 1 interface 0 has no altsetting 0 [ 243.958858][ T980] usb 5-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.40 [ 243.964093][ T6047] udevd[6047]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 243.978461][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.026461][ T980] usb 5-1: Product: syz [ 244.037581][ T980] usb 5-1: Manufacturer: 盩쇰象骧癵陪삥졯鬨ಋ鷄â…ì©äŠ¢á’¯é£¨à¢¥í‰¨í‡— [ 244.073238][ T980] usb 5-1: SerialNumber: syz [ 244.105991][ T8145] netlink: 60 bytes leftover after parsing attributes in process `syz.1.618'. [ 244.406067][ T980] usbhid 5-1:1.0: can't add hid device: -71 [ 244.471480][ T980] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 244.506390][ T980] usb 5-1: USB disconnect, device number 20 [ 244.751817][ T928] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 244.916487][ T928] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 244.942429][ T928] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 244.957091][ T928] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 245.076376][ T8167] netlink: 'syz.4.625': attribute type 6 has an invalid length. [ 245.104651][ T928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.135076][ T5923] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 245.392329][ T8169] bridge2: entered allmulticast mode [ 245.474224][ T5923] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 245.495058][ T5923] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 245.544157][ T5923] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 245.569329][ T5923] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 245.599579][ T5923] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 14129, setting to 64 [ 245.631235][ T5923] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 245.655564][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 245.693989][ T5923] usb 3-1: Product: syz [ 245.777690][ T5923] usb 3-1: Manufacturer: syz [ 245.874287][ T5923] cdc_wdm 3-1:1.0: skipping garbage [ 245.880177][ T5923] cdc_wdm 3-1:1.0: skipping garbage [ 245.893337][ T8180] loop6: detected capacity change from 0 to 1 [ 245.900855][ T8180] Dev loop6: unable to read RDB block 1 [ 245.910110][ T8180] loop6: unable to read partition table [ 245.917309][ T8180] loop6: partition table beyond EOD, truncated [ 245.937320][ T8180] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 245.937382][ T5923] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 246.020476][ T8179] ALSA: mixer_oss: invalid OSS volume 'u' [ 246.139505][ T5923] usb 3-1: USB disconnect, device number 23 [ 246.230124][ T8185] tipc: Enabled bearer , priority 0 [ 246.264838][ T8185] syzkaller0: entered promiscuous mode [ 246.275498][ T8185] syzkaller0: entered allmulticast mode [ 246.355046][ T8184] tipc: Resetting bearer [ 246.469864][ T8184] tipc: Disabling bearer [ 246.665667][ T8193] netlink: 'syz.3.634': attribute type 11 has an invalid length. [ 246.823890][ T8197] netlink: 12 bytes leftover after parsing attributes in process `syz.0.635'. [ 247.441326][ T5923] usb 2-1: USB disconnect, device number 25 [ 248.173936][ T8208] bridge4: entered allmulticast mode [ 249.265724][ T8231] netlink: 104 bytes leftover after parsing attributes in process `syz.1.646'. [ 249.352779][ T980] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 249.561911][ T980] usb 1-1: device descriptor read/64, error -71 [ 249.771220][ T8239] openvswitch: netlink: Tunnel attr 202 out of range max 16 [ 249.872113][ T980] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 250.064701][ T8244] sctp: [Deprecated]: syz.3.650 (pid 8244) Use of int in maxseg socket option. [ 250.064701][ T8244] Use struct sctp_assoc_value instead [ 250.081851][ T980] usb 1-1: device descriptor read/64, error -71 [ 250.131950][ T5986] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 250.196503][ T980] usb usb1-port1: attempt power cycle [ 250.402448][ T5986] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 250.426968][ T5986] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 250.498921][ T8239] netlink: 80 bytes leftover after parsing attributes in process `syz.2.648'. [ 250.511755][ T5986] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 250.581494][ T5986] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 250.616245][ T5986] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 250.666490][ T5986] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 250.676024][ T5986] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 250.717565][ T980] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 250.806016][ T5986] usb 2-1: Product: syz [ 250.810419][ T5986] usb 2-1: Manufacturer: syz [ 250.837613][ T980] usb 1-1: device descriptor read/8, error -71 [ 250.990138][ T5986] cdc_wdm 2-1:1.0: skipping garbage [ 251.009140][ T5986] cdc_wdm 2-1:1.0: skipping garbage [ 251.027305][ T5986] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 251.039660][ T5986] cdc_wdm 2-1:1.0: Unknown control protocol [ 251.081800][ T980] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 251.118450][ T980] usb 1-1: device descriptor read/8, error -71 [ 251.240170][ T980] usb usb1-port1: unable to enumerate USB device [ 251.316538][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 251.317208][ T928] usb 2-1: USB disconnect, device number 26 [ 251.323456][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 251.323481][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 251.345620][ T8257] cdc_wdm 2-1:1.0: Tx URB error: -19 [ 251.411717][ T5923] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 251.445307][ T8260] bridge9: entered allmulticast mode [ 251.681708][ T5923] usb 5-1: Using ep0 maxpacket: 8 [ 251.694297][ T5923] usb 5-1: config 0 has an invalid interface number: 246 but max is 0 [ 251.713471][ T5923] usb 5-1: config 0 has no interface number 0 [ 251.719995][ T5923] usb 5-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 251.794177][ T5923] usb 5-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 251.806440][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.818509][ T5923] usb 5-1: Product: syz [ 251.849323][ T5923] usb 5-1: Manufacturer: syz [ 251.873890][ T5923] usb 5-1: SerialNumber: syz [ 251.904944][ T5923] usb 5-1: config 0 descriptor?? [ 252.341727][ T5923] msi2500 5-1:0.246: Registered as swradio24 [ 252.352042][ T5923] msi2500 5-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 252.666528][ T980] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 252.868564][ T980] usb 1-1: Using ep0 maxpacket: 32 [ 252.921476][ T980] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 252.929830][ T980] usb 1-1: config 0 has no interface number 0 [ 252.989990][ T980] usb 1-1: New USB device found, idVendor=1bdf, idProduct=c150, bcdDevice=ce.6f [ 253.005198][ T980] usb 1-1: New USB device strings: Mfr=1, Product=1, SerialNumber=235 [ 253.024652][ T980] usb 1-1: Product: syz [ 253.044965][ T980] usb 1-1: Manufacturer: syz [ 253.065876][ T980] usb 1-1: SerialNumber: syz [ 253.106454][ T980] usb 1-1: config 0 descriptor?? [ 253.626151][ T980] usb 5-1: USB disconnect, device number 21 [ 253.799360][ T8297] netlink: 108 bytes leftover after parsing attributes in process `syz.4.662'. [ 253.820732][ T8297] netlink: 108 bytes leftover after parsing attributes in process `syz.4.662'. [ 253.840161][ T8297] netlink: 108 bytes leftover after parsing attributes in process `syz.4.662'. [ 255.132135][ T982] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 255.292246][ T928] usb 1-1: USB disconnect, device number 25 [ 255.293901][ T982] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 255.395101][ T982] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 255.416326][ T982] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 255.458007][ T982] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 255.488583][ T982] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 255.506698][ T8322] netlink: 12 bytes leftover after parsing attributes in process `syz.3.672'. [ 255.562443][ T982] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 255.585119][ T982] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 255.629909][ T982] usb 3-1: Product: syz [ 255.649416][ T982] usb 3-1: Manufacturer: syz [ 255.703017][ T982] cdc_wdm 3-1:1.0: skipping garbage [ 255.712507][ T982] cdc_wdm 3-1:1.0: skipping garbage [ 255.757141][ T982] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 255.927584][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.934071][ T982] cdc_wdm 3-1:1.0: Unknown control protocol [ 255.937858][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.011777][ T8333] netlink: 24 bytes leftover after parsing attributes in process `syz.4.673'. [ 256.276439][ T982] usb 3-1: USB disconnect, device number 24 [ 256.877037][ T8345] sit0: entered promiscuous mode [ 257.009627][ T8345] netlink: 'syz.3.677': attribute type 1 has an invalid length. [ 257.080185][ T8345] netlink: 1 bytes leftover after parsing attributes in process `syz.3.677'. [ 257.843549][ T8361] netlink: 104 bytes leftover after parsing attributes in process `syz.1.682'. [ 258.372688][ T8375] tipc: Enabled bearer , priority 0 [ 258.432636][ T8373] tipc: Disabling bearer [ 258.506432][ T30] audit: type=1800 audit(1754846530.854:4): pid=8379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.688" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 259.344022][ T928] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 259.518509][ T928] usb 1-1: config 252 has an invalid interface number: 191 but max is 0 [ 259.709449][ T928] usb 1-1: config 252 has no interface number 0 [ 259.826060][ T8393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.692'. [ 260.099434][ T928] usb 1-1: New USB device found, idVendor=054c, idProduct=0069, bcdDevice=6d.6f [ 260.109085][ T928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.118592][ T928] usb 1-1: Product: syz [ 260.127822][ T928] usb 1-1: Manufacturer: syz [ 260.149913][ T928] usb 1-1: SerialNumber: syz [ 260.197908][ T928] usb-storage 1-1:252.191: USB Mass Storage device detected [ 260.338597][ T928] usb-storage 1-1:252.191: Quirks match for vid 054c pid 0069: 1 [ 260.388198][ T8388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.464158][ T8388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.712536][ T24] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 260.933633][ T24] usb 5-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.944906][ T24] usb 5-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.959188][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 261.006074][ T24] usb 5-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.00 [ 261.029305][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.044401][ T24] usb 5-1: config 0 descriptor?? [ 262.020200][ T24] asus 0003:0B05:1822.000A: hidraw0: USB HID v0.00 Device [HID 0b05:1822] on usb-dummy_hcd.4-1/input0 [ 262.032166][ T24] asus 0003:0B05:1822.000A: Asus input not registered [ 262.041271][ T24] asus 0003:0B05:1822.000A: probe with driver asus failed with error -12 [ 262.107224][ T24] usb 1-1: USB disconnect, device number 26 [ 262.784884][ T8431] netlink: 'syz.0.701': attribute type 12 has an invalid length. [ 262.801675][ T8431] netlink: 'syz.0.701': attribute type 29 has an invalid length. [ 262.833370][ T8431] netlink: 148 bytes leftover after parsing attributes in process `syz.0.701'. [ 262.917174][ T8431] netlink: 52 bytes leftover after parsing attributes in process `syz.0.701'. [ 263.042261][ T8431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.701'. [ 263.139522][ T8431] netlink: 16 bytes leftover after parsing attributes in process `syz.0.701'. [ 263.262541][ T980] usb 5-1: USB disconnect, device number 22 [ 263.483090][ T5867] usb 1-1: new low-speed USB device number 27 using dummy_hcd [ 263.548345][ T8441] tipc: Enabled bearer , priority 0 [ 263.583546][ T8441] syzkaller0: entered promiscuous mode [ 263.617184][ T8441] syzkaller0: entered allmulticast mode [ 263.681749][ T5867] usb 1-1: Invalid ep0 maxpacket: 16 [ 263.775139][ T8448] syzkaller0: mtu less than device minimum [ 263.802290][ T8440] tipc: Resetting bearer [ 263.861720][ T5867] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 263.899340][ T8440] tipc: Disabling bearer [ 264.067662][ T5867] usb 1-1: Invalid ep0 maxpacket: 16 [ 264.082922][ T5867] usb usb1-port1: attempt power cycle [ 264.170927][ T8454] bridge11: entered allmulticast mode [ 264.176848][ T980] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 264.331755][ T980] usb 3-1: Using ep0 maxpacket: 16 [ 264.346097][ T980] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.377169][ T980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 264.414319][ T980] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 264.431838][ T5867] usb 1-1: new low-speed USB device number 29 using dummy_hcd [ 264.434100][ T980] usb 3-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 264.453799][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.467193][ T980] usb 3-1: Product: syz [ 264.541100][ T980] usb 3-1: Manufacturer: syz [ 264.561816][ T5867] usb 1-1: Invalid ep0 maxpacket: 16 [ 264.599664][ T980] usb 3-1: SerialNumber: syz [ 264.641249][ T980] usb 3-1: config 0 descriptor?? [ 264.680575][ T980] peak_usb 3-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -8 [ 264.699770][ T980] peak_usb 3-1:0.0: unable to read PCAN-USB serial number (err -8) [ 264.751733][ T5867] usb 1-1: new low-speed USB device number 30 using dummy_hcd [ 264.861452][ T5867] usb 1-1: Invalid ep0 maxpacket: 16 [ 264.900082][ T5867] usb usb1-port1: unable to enumerate USB device [ 264.940078][ T980] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -8 [ 264.962253][ T982] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 264.999802][ T980] usb 3-1: USB disconnect, device number 25 [ 265.016608][ T8461] netlink: 104 bytes leftover after parsing attributes in process `syz.1.712'. [ 265.148099][ T982] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 265.164704][ T982] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 265.186082][ T982] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 265.208852][ T982] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 265.267272][ T982] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 265.296842][ T982] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 265.308058][ T982] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 265.320524][ T982] usb 5-1: Product: syz [ 265.336422][ T982] usb 5-1: Manufacturer: syz [ 265.356539][ T982] cdc_wdm 5-1:1.0: skipping garbage [ 265.368794][ T982] cdc_wdm 5-1:1.0: skipping garbage [ 265.377022][ T982] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 265.389122][ T982] cdc_wdm 5-1:1.0: Unknown control protocol [ 265.755716][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 265.759994][ T928] usb 5-1: USB disconnect, device number 23 [ 265.762367][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 265.762388][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 265.785271][ T8470] cdc_wdm 5-1:1.0: Tx URB error: -19 [ 266.121950][ T982] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 266.264637][ T8480] netlink: 104 bytes leftover after parsing attributes in process `syz.3.717'. [ 266.297631][ T982] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.348976][ T982] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.383884][ T982] usb 3-1: config 0 interface 0 has no altsetting 0 [ 266.404723][ T982] usb 3-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.00 [ 266.431933][ T982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.467466][ T982] usb 3-1: config 0 descriptor?? [ 267.133433][ T982] asus 0003:0B05:1822.000B: hidraw0: USB HID v0.00 Device [HID 0b05:1822] on usb-dummy_hcd.2-1/input0 [ 267.154358][ T982] asus 0003:0B05:1822.000B: Asus input not registered [ 267.185509][ T982] asus 0003:0B05:1822.000B: probe with driver asus failed with error -12 [ 267.279020][ T8487] bridge5: entered allmulticast mode [ 267.781697][ T5867] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 267.954071][ T5867] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.964448][ T5867] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 267.973890][ T5867] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 267.988976][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.001475][ T5867] usb 1-1: config 0 descriptor?? [ 268.020980][ T5867] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 268.031362][ T5867] dvb-usb: bulk message failed: -22 (3/0) [ 268.054994][ T5867] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 268.069217][ T5867] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 268.078507][ T5867] usb 1-1: media controller created [ 268.091521][ T5867] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 268.147026][ T5867] dvb-usb: bulk message failed: -22 (6/0) [ 268.163026][ T5867] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 268.334878][ T5867] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10 [ 268.424319][ T5867] dvb-usb: schedule remote query interval to 150 msecs. [ 268.466627][ T5867] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 268.623937][ T5867] dvb-usb: bulk message failed: -22 (1/0) [ 268.663095][ T5867] dvb-usb: error while querying for an remote control event. [ 268.739578][ T5867] usb 3-1: USB disconnect, device number 26 [ 268.859167][ T928] dvb-usb: bulk message failed: -22 (1/0) [ 268.895904][ T928] dvb-usb: error while querying for an remote control event. [ 269.103031][ T928] usb 1-1: USB disconnect, device number 31 [ 269.235969][ T928] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 269.336935][ T8514] netlink: 20 bytes leftover after parsing attributes in process `syz.3.730'. [ 269.441038][ T8514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.730'. [ 269.515596][ T8514] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 270.161697][ T928] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 270.372556][ T928] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 270.411948][ T928] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 270.427391][ T928] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 270.460170][ T928] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 270.496336][ T928] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 270.590824][ T928] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 270.714499][ T928] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 270.747730][ T928] usb 3-1: Product: syz [ 270.778115][ T928] usb 3-1: Manufacturer: syz [ 271.081763][ T5986] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 271.087820][ T928] cdc_wdm 3-1:1.0: skipping garbage [ 271.179562][ T928] cdc_wdm 3-1:1.0: skipping garbage [ 271.204652][ T928] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 271.212599][ T928] cdc_wdm 3-1:1.0: Unknown control protocol [ 271.241798][ T5986] usb 1-1: Using ep0 maxpacket: 32 [ 271.267555][ T5986] usb 1-1: unable to get BOS descriptor or descriptor too short [ 271.288303][ T5986] usb 1-1: config 120 has an invalid interface number: 86 but max is 0 [ 271.344626][ T5986] usb 1-1: config 120 has no interface number 0 [ 271.403517][ T5986] usb 1-1: New USB device found, idVendor=12d1, idProduct=9c20, bcdDevice=e5.af [ 271.431845][ T5986] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.462378][ T5986] usb 1-1: Product: syz [ 271.466654][ T5986] usb 1-1: Manufacturer: syz [ 271.506136][ T5986] usb 1-1: SerialNumber: syz [ 271.568710][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 271.575374][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 271.581929][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 271.588561][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 271.595343][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 271.601983][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 271.608473][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 271.615101][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 271.621504][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 271.628211][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 271.634627][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 271.641336][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 271.651738][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 271.658442][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 271.671746][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 271.678377][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 271.691521][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 271.698362][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 271.705316][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 271.711939][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 271.722277][ T980] usb 3-1: USB disconnect, device number 27 [ 271.728503][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 271.759277][ T5986] huawei_cdc_ncm 1-1:120.86: More than one union descriptor, skipping ... [ 271.772867][ T5986] huawei_cdc_ncm 1-1:120.86: CDC Union missing and no IAD found [ 271.817561][ T5986] huawei_cdc_ncm 1-1:120.86: bind() failure [ 271.864936][ T5986] usb 1-1: USB disconnect, device number 32 [ 272.172206][ T982] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 272.431493][ T982] usb 2-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.459678][ T982] usb 2-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.523904][ T982] usb 2-1: config 0 interface 0 has no altsetting 0 [ 272.542654][ T982] usb 2-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.00 [ 272.584738][ T982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.659455][ T982] usb 2-1: config 0 descriptor?? [ 272.731701][ T980] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 272.891715][ T980] usb 5-1: Using ep0 maxpacket: 8 [ 272.898827][ T980] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 272.907951][ T980] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 272.919995][ T980] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0x5F, changing to 0xF [ 272.937214][ T980] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 272.949592][ T980] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 272.980593][ T980] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 273.015021][ T980] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 273.066274][ T980] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0x5F, changing to 0xF [ 273.146846][ T982] asus 0003:0B05:1822.000C: hidraw0: USB HID v0.00 Device [HID 0b05:1822] on usb-dummy_hcd.1-1/input0 [ 273.171671][ T980] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 273.196574][ T982] asus 0003:0B05:1822.000C: Asus input not registered [ 273.242301][ T980] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 273.301023][ T982] asus 0003:0B05:1822.000C: probe with driver asus failed with error -12 [ 273.312010][ T980] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 273.387496][ T980] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 273.454959][ T980] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0x5F, changing to 0xF [ 273.540151][ T980] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 273.569967][ T980] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 273.669432][ T980] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 273.671174][ T8568] bridge6: entered allmulticast mode [ 273.679642][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.703582][ T980] usb 5-1: Product: syz [ 273.715231][ T980] usb 5-1: Manufacturer: syz [ 273.723913][ T980] usb 5-1: SerialNumber: syz [ 273.955546][ T980] adutux 5-1:168.0: interrupt endpoints not found [ 274.017166][ T980] usb 5-1: USB disconnect, device number 24 [ 274.024206][ T8577] netlink: 'syz.2.745': attribute type 11 has an invalid length. [ 274.184174][ T8580] netlink: 12 bytes leftover after parsing attributes in process `syz.4.746'. [ 274.692712][ T5923] usb 2-1: USB disconnect, device number 27 [ 275.511875][ T5923] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 275.685136][ T980] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 275.801681][ T5923] usb 5-1: Using ep0 maxpacket: 16 [ 275.809582][ T5923] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 275.819229][ T5923] usb 5-1: config 0 has no interface number 0 [ 275.828541][ T5923] usb 5-1: config 0 interface 255 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 275.851816][ T5923] usb 5-1: config 0 interface 255 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 275.884670][ T5923] usb 5-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=bb.ee [ 275.913340][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.921390][ T5923] usb 5-1: Product: syz [ 275.936401][ T5923] usb 5-1: Manufacturer: syz [ 275.941023][ T5923] usb 5-1: SerialNumber: syz [ 276.005665][ T5923] usb 5-1: config 0 descriptor?? [ 276.036224][ T980] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 276.055607][ T980] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 276.089696][ T8593] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 276.102235][ T8593] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 276.173444][ T980] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 276.201671][ T980] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 276.241863][ T980] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 276.261462][ T980] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 276.277710][ T980] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 276.286478][ T980] usb 2-1: Product: syz [ 276.290931][ T980] usb 2-1: Manufacturer: syz [ 276.335957][ T980] cdc_wdm 2-1:1.0: skipping garbage [ 276.346891][ T980] cdc_wdm 2-1:1.0: skipping garbage [ 276.351787][ T5923] asix 5-1:0.255 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 276.354643][ T980] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 276.368737][ T980] cdc_wdm 2-1:1.0: Unknown control protocol [ 276.433931][ T5923] asix 5-1:0.255: probe with driver asix failed with error -71 [ 276.552122][ T5923] usb 5-1: USB disconnect, device number 25 [ 276.716269][ C0] wdm_int_callback: 2 callbacks suppressed [ 276.716295][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 276.728935][ C0] wdm_int_callback: 2 callbacks suppressed [ 276.728954][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 276.741341][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 276.747969][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 276.754324][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 276.760979][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 276.767283][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 276.773991][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 276.780661][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 276.787658][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 276.794120][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 276.800745][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 276.807061][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 276.813702][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 276.821762][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 276.828398][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 276.838676][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 276.845334][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 276.851758][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 276.858392][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 276.866030][ T5951] usb 2-1: USB disconnect, device number 28 [ 276.866127][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 277.274328][ T8576] syz.0.744: vmalloc error: size 812154880, failed to allocated page array size 1586240, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 277.432543][ T8576] CPU: 0 UID: 0 PID: 8576 Comm: syz.0.744 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(full) [ 277.432574][ T8576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 277.432582][ T8576] Call Trace: [ 277.432587][ T8576] [ 277.432592][ T8576] dump_stack_lvl+0x189/0x250 [ 277.432615][ T8576] ? __pfx_dump_stack_lvl+0x10/0x10 [ 277.432630][ T8576] ? __pfx__printk+0x10/0x10 [ 277.432649][ T8576] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 277.432670][ T8576] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 277.432685][ T8576] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 277.432701][ T8576] warn_alloc+0x214/0x310 [ 277.432727][ T8576] ? __pfx_warn_alloc+0x10/0x10 [ 277.432750][ T8576] ? __get_vm_area_node+0x28f/0x300 [ 277.432767][ T8576] ? ip_set_sockfn_get+0x13a/0xc30 [ 277.432784][ T8576] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 277.432819][ T8576] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 277.432841][ T8576] ? ip_set_sockfn_get+0x13a/0xc30 [ 277.432855][ T8576] vmalloc_noprof+0xb2/0xf0 [ 277.432872][ T8576] ? ip_set_sockfn_get+0x13a/0xc30 [ 277.432894][ T8576] ip_set_sockfn_get+0x13a/0xc30 [ 277.432912][ T8576] nf_getsockopt+0x26b/0x290 [ 277.432929][ T8576] ip_getsockopt+0x1c4/0x220 [ 277.432950][ T8576] ? __pfx_ip_getsockopt+0x10/0x10 [ 277.432968][ T8576] ? sock_common_getsockopt+0x2d/0xb0 [ 277.432983][ T8576] ? raw_getsockopt+0xce/0x200 [ 277.432994][ T8576] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 277.433011][ T8576] do_sock_getsockopt+0x36f/0x450 [ 277.433025][ T8576] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 277.433036][ T8576] ? write_ibpb+0x30/0x40 [ 277.433052][ T8576] ? __fget_files+0x3a0/0x420 [ 277.433063][ T8576] ? __fget_files+0x2a/0x420 [ 277.433078][ T8576] __x64_sys_getsockopt+0x1a5/0x250 [ 277.433089][ T8576] ? write_ibpb+0x30/0x40 [ 277.433106][ T8576] ? write_ibpb+0x30/0x40 [ 277.433126][ T8576] do_syscall_64+0xfa/0x3b0 [ 277.433144][ T8576] ? lockdep_hardirqs_on+0x9c/0x150 [ 277.433159][ T8576] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.433171][ T8576] ? clear_bhb_loop+0x60/0xb0 [ 277.433186][ T8576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.433197][ T8576] RIP: 0033:0x7fa9f818ebe9 [ 277.433209][ T8576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.433220][ T8576] RSP: 002b:00007fa9f8f3b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 277.433235][ T8576] RAX: ffffffffffffffda RBX: 00007fa9f83b6090 RCX: 00007fa9f818ebe9 [ 277.433244][ T8576] RDX: 0000000000000053 RSI: 0000000000000000 RDI: 0000000000000004 [ 277.433252][ T8576] RBP: 00007fa9f8211e19 R08: 0000200000000080 R09: 0000000000000000 [ 277.433260][ T8576] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.433268][ T8576] R13: 00007fa9f83b6128 R14: 00007fa9f83b6090 R15: 00007fa9f84dfa28 [ 277.433286][ T8576] [ 277.433291][ T8576] Mem-Info: [ 277.791763][ T5867] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 277.806919][ T8576] active_anon:6393 inactive_anon:0 isolated_anon:0 [ 277.806919][ T8576] active_file:15654 inactive_file:39945 isolated_file:0 [ 277.806919][ T8576] unevictable:768 dirty:166 writeback:0 [ 277.806919][ T8576] slab_reclaimable:10511 slab_unreclaimable:98959 [ 277.806919][ T8576] mapped:31458 shmem:1371 pagetables:1305 [ 277.806919][ T8576] sec_pagetables:0 bounce:0 [ 277.806919][ T8576] kernel_misc_reclaimable:0 [ 277.806919][ T8576] free:1275679 free_pcp:21689 free_cma:0 [ 277.872978][ T8576] Node 0 active_anon:25672kB inactive_anon:0kB active_file:62564kB inactive_file:159580kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125780kB dirty:660kB writeback:0kB shmem:3948kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12420kB pagetables:5052kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 277.930351][ T8576] Node 1 active_anon:0kB inactive_anon:0kB active_file:52kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 277.982650][ T8576] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 278.021721][ T5867] usb 4-1: Using ep0 maxpacket: 32 [ 278.037701][ T5867] usb 4-1: too many configurations: 29, using maximum allowed: 8 [ 278.067737][ T5867] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=82.d5 [ 278.077006][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.085542][ T5867] usb 4-1: Product: syz [ 278.089815][ T5867] usb 4-1: Manufacturer: syz [ 278.117182][ T8576] lowmem_reserve[]: 0 [ 278.117210][ T5867] usb 4-1: SerialNumber: syz [ 278.136420][ T5867] usb 4-1: config 0 descriptor?? [ 278.145988][ T8576] 2497 2499 2499 2499 [ 278.154860][ T5867] hub 4-1:0.0: Invalid hub with more than one config or interface [ 278.163330][ T8576] Node 0 DMA32 free:1209352kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26444kB inactive_anon:0kB active_file:62564kB inactive_file:158008kB unevictable:1536kB writepending:660kB present:3129332kB managed:2557484kB mlocked:0kB bounce:0kB free_pcp:50112kB local_pcp:28536kB free_cma:0kB [ 278.196282][ T5867] hub 4-1:0.0: probe with driver hub failed with error -22 [ 278.209916][ T5867] gspca_main: 0ac8:c301 too many config [ 278.224850][ T8576] lowmem_reserve[]: 0 0 1 1 1 [ 278.229916][ T8576] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 278.331381][ T8576] lowmem_reserve[]: 0 0 0 0 0 [ 278.336312][ T8576] Node 1 Normal free:3878044kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:52kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:36056kB local_pcp:7616kB free_cma:0kB [ 278.396524][ T8576] lowmem_reserve[]: 0 0 0 0 0 [ 278.434335][ T8576] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 278.452259][ T5951] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 278.471833][ T8576] Node 0 DMA32: 439*4kB (UME) 306*8kB (UME) 130*16kB (UME) 170*32kB (UME) 233*64kB (ME) 122*128kB (UME) 22*256kB (ME) 10*512kB (M) 3*1024kB (M) 7*2048kB (UME) 278*4096kB (M) = 1209100kB [ 278.494267][ T8576] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 278.509770][ T8576] Node 1 Normal: 71*4kB (UME) 4*8kB (UE) 8*16kB (UE) 85*32kB (UME) 19*64kB (UE) 5*128kB (UE) 3*256kB (UE) 1*512kB (M) 1*1024kB (E) 2*2048kB (UE) 944*4096kB (M) = 3878044kB [ 278.546480][ T8629] netlink: 12 bytes leftover after parsing attributes in process `syz.1.759'. [ 278.565774][ T8576] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 278.605959][ T8576] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 278.614276][ T5951] usb 5-1: not running at top speed; connect to a high speed hub [ 278.632792][ T5951] usb 5-1: config 1 has an invalid interface number: 74 but max is 0 [ 278.641059][ T5951] usb 5-1: config 1 has no interface number 0 [ 278.648184][ T5951] usb 5-1: config 1 interface 74 has no altsetting 0 [ 278.663969][ T5951] usb 5-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice=22.be [ 278.665495][ T8576] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 278.683765][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.687142][ T8576] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 278.692206][ T5951] usb 5-1: Product: syz [ 278.706255][ T5951] usb 5-1: Manufacturer: syz [ 278.711144][ T5951] usb 5-1: SerialNumber: syz [ 278.714696][ T8576] 56968 total pagecache pages [ 278.736665][ T8576] 0 pages in swap cache [ 278.744642][ T8576] Free swap = 124996kB [ 278.751337][ T8576] Total swap = 124996kB [ 278.759499][ T8576] 2097051 pages RAM [ 278.766327][ T8576] 0 pages HighMem/MovableOnly [ 278.771047][ T8576] 425654 pages reserved [ 278.775814][ T982] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 278.851927][ T8576] 0 pages cma reserved [ 278.934434][ T982] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.959513][ T5951] usb 5-1: unknown interface protocol 0x55, assuming v1 [ 278.982158][ T982] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.007591][ T5951] usb 5-1: cannot find UAC_HEADER [ 279.017664][ T982] usb 3-1: config 0 interface 0 has no altsetting 0 [ 279.101951][ T982] usb 3-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.00 [ 279.115758][ T982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.142786][ T982] usb 3-1: config 0 descriptor?? [ 279.187882][ T5951] snd-usb-audio 5-1:1.74: probe with driver snd-usb-audio failed with error -22 [ 279.317874][ T6047] udevd[6047]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.74/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 279.352784][ T5951] usb 5-1: USB disconnect, device number 26 [ 279.582819][ T982] asus 0003:0B05:1822.000D: hidraw0: USB HID v0.00 Device [HID 0b05:1822] on usb-dummy_hcd.2-1/input0 [ 279.628110][ T982] asus 0003:0B05:1822.000D: Asus input not registered [ 279.844200][ T8639] netlink: 60 bytes leftover after parsing attributes in process `syz.4.762'. [ 279.878768][ T982] asus 0003:0B05:1822.000D: probe with driver asus failed with error -12 [ 280.299736][ T8646] bridge4: entered allmulticast mode [ 280.328167][ T8648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.766'. [ 280.365216][ T8648] netlink: 24 bytes leftover after parsing attributes in process `syz.4.766'. [ 280.629112][ T5923] usb 4-1: USB disconnect, device number 19 [ 280.711911][ T982] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 280.894062][ T982] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 280.935184][ T982] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 280.972048][ T982] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 280.981840][ T5867] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 281.011320][ T982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.051964][ T5923] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 281.068441][ T8649] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 281.102547][ T982] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 281.121860][ T5867] usb 2-1: device descriptor read/64, error -71 [ 281.224710][ T5923] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 281.236459][ T5923] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 281.254461][ T5923] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 281.266309][ T5923] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 281.291347][ T928] usb 5-1: USB disconnect, device number 27 [ 281.360026][ T982] usb 3-1: USB disconnect, device number 28 [ 281.361449][ T5923] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 281.378086][ T5867] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 281.442111][ T5923] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 281.455388][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 281.469986][ T8658] FAULT_INJECTION: forcing a failure. [ 281.469986][ T8658] name failslab, interval 1, probability 0, space 0, times 0 [ 281.501072][ T8658] CPU: 0 UID: 0 PID: 8658 Comm: syz.2.770 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(full) [ 281.501103][ T8658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 281.501114][ T8658] Call Trace: [ 281.501122][ T8658] [ 281.501131][ T8658] dump_stack_lvl+0x189/0x250 [ 281.501160][ T8658] ? __pfx____ratelimit+0x10/0x10 [ 281.501187][ T8658] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.501210][ T8658] ? __pfx__printk+0x10/0x10 [ 281.501246][ T8658] ? __pfx___might_resched+0x10/0x10 [ 281.501273][ T8658] should_fail_ex+0x414/0x560 [ 281.501305][ T8658] should_failslab+0xa8/0x100 [ 281.501337][ T8658] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 281.501365][ T8658] ? __alloc_skb+0x112/0x2d0 [ 281.501398][ T8658] __alloc_skb+0x112/0x2d0 [ 281.501432][ T8658] netlink_dump+0x1b7/0xe90 [ 281.501474][ T8658] ? __pfx_netlink_dump+0x10/0x10 [ 281.501523][ T8658] ? kmem_cache_free+0x18f/0x400 [ 281.501555][ T8658] netlink_recvmsg+0x676/0xa30 [ 281.501599][ T8658] ? __pfx_netlink_recvmsg+0x10/0x10 [ 281.501633][ T8658] ? __lock_acquire+0xab9/0xd20 [ 281.501659][ T8658] ? aa_sock_msg_perm+0xf1/0x1d0 [ 281.501691][ T8658] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 281.501713][ T8658] ? security_socket_recvmsg+0x7e/0x2e0 [ 281.501734][ T8658] ? __pfx_netlink_recvmsg+0x10/0x10 [ 281.501762][ T8658] sock_recvmsg+0x22c/0x270 [ 281.501792][ T8658] ____sys_recvmsg+0x1c9/0x460 [ 281.501832][ T8658] ? __pfx_____sys_recvmsg+0x10/0x10 [ 281.501874][ T8658] ? import_iovec+0x74/0xa0 [ 281.501902][ T8658] ___sys_recvmsg+0x1b5/0x510 [ 281.501931][ T8658] ? __pfx____sys_recvmsg+0x10/0x10 [ 281.501981][ T8658] ? __fget_files+0x3a0/0x420 [ 281.502011][ T8658] do_recvmmsg+0x307/0x770 [ 281.502044][ T8658] ? __pfx_do_recvmmsg+0x10/0x10 [ 281.502079][ T8658] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 281.502128][ T8658] __x64_sys_recvmmsg+0x190/0x240 [ 281.502152][ T8658] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 281.502170][ T8658] ? rcu_is_watching+0x15/0xb0 [ 281.502198][ T8658] ? do_syscall_64+0xbe/0x3b0 [ 281.502230][ T8658] do_syscall_64+0xfa/0x3b0 [ 281.502252][ T8658] ? lockdep_hardirqs_on+0x9c/0x150 [ 281.502276][ T8658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.502295][ T8658] ? clear_bhb_loop+0x60/0xb0 [ 281.502318][ T8658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.502333][ T8658] RIP: 0033:0x7f4a4458ebe9 [ 281.502353][ T8658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.502369][ T8658] RSP: 002b:00007f4a45438038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 281.502390][ T8658] RAX: ffffffffffffffda RBX: 00007f4a447b5fa0 RCX: 00007f4a4458ebe9 [ 281.502404][ T8658] RDX: 0000000000000006 RSI: 0000200000002c00 RDI: 0000000000000003 [ 281.502417][ T8658] RBP: 00007f4a45438090 R08: 0000000000000000 R09: 0000000000000000 [ 281.502430][ T8658] R10: 0000000040002020 R11: 0000000000000246 R12: 0000000000000001 [ 281.502441][ T8658] R13: 00007f4a447b6038 R14: 00007f4a447b5fa0 R15: 00007f4a448dfa28 [ 281.502475][ T8658] [ 281.807672][ T5867] usb 2-1: device descriptor read/64, error -71 [ 281.814265][ T5923] usb 4-1: Product: syz [ 281.820013][ T5923] usb 4-1: Manufacturer: syz [ 281.853358][ T5923] cdc_wdm 4-1:1.0: skipping garbage [ 281.862600][ T5923] cdc_wdm 4-1:1.0: skipping garbage [ 281.881145][ T5923] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 281.897103][ T5923] cdc_wdm 4-1:1.0: Unknown control protocol [ 281.932075][ T5867] usb usb2-port1: attempt power cycle [ 282.040974][ T8661] netlink: 12 bytes leftover after parsing attributes in process `syz.2.771'. [ 282.180177][ C1] wdm_int_callback: 2 callbacks suppressed [ 282.180195][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 282.192635][ C1] wdm_int_callback: 2 callbacks suppressed [ 282.192659][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 282.204808][ C1] vkms_vblank_simulate: vblank timer overrun [ 282.211954][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 282.218711][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 282.226369][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 282.233000][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 282.239372][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 282.246141][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 282.252606][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 282.259221][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 282.265502][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 282.272109][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 282.278396][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 282.284989][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 282.291242][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 282.297864][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 282.304141][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 282.310827][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 282.317352][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 282.323965][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 282.330465][ T5923] usb 4-1: USB disconnect, device number 20 [ 282.336504][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 282.421699][ T5867] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 282.445916][ T5867] usb 2-1: device descriptor read/8, error -71 [ 282.693963][ T5867] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 282.733431][ T5867] usb 2-1: device descriptor read/8, error -71 [ 282.842387][ T5867] usb usb2-port1: unable to enumerate USB device [ 283.131802][ T982] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 283.157313][ T8681] netlink: 24 bytes leftover after parsing attributes in process `syz.2.777'. [ 283.314182][ T982] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.347189][ T982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 283.359031][ T982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 283.377909][ T982] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 283.396338][ T982] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 283.406655][ T982] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 283.418150][ T982] usb 5-1: Manufacturer: syz [ 283.441371][ T982] usb 5-1: config 0 descriptor?? [ 283.601729][ T5923] usb 1-1: new low-speed USB device number 33 using dummy_hcd [ 283.764431][ T982] rc_core: IR keymap rc-hauppauge not found [ 283.765894][ T5923] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 283.784405][ T5923] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 283.801073][ T5923] usb 1-1: config 0 has no interface number 0 [ 283.840404][ T982] Registered IR keymap rc-empty [ 283.891848][ T5923] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 283.902468][ T982] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 283.919957][ T5923] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x1 is Bulk; changing to Interrupt [ 283.941797][ T5923] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 283.965445][ T982] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 283.991766][ T5923] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 284.002225][ T982] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 284.021324][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.029522][ T982] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input11 [ 284.081248][ T982] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 284.100741][ T5923] usb 1-1: config 0 descriptor?? [ 284.123436][ T982] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 284.165928][ T982] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 284.232207][ T982] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 284.271896][ T982] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 284.305084][ T982] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 284.355643][ T8683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.369791][ T982] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 284.371479][ T8683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.412552][ T982] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 284.459432][ T8683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.472172][ T5951] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 284.479949][ T982] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 284.520325][ T8683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.531741][ T982] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 284.576597][ T982] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 284.587958][ T5923] usb 1-1: USB disconnect, device number 33 [ 284.617213][ T982] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 284.664673][ T5951] usb 4-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.678397][ T8703] netlink: 12 bytes leftover after parsing attributes in process `syz.2.786'. [ 284.682165][ T982] usb 5-1: USB disconnect, device number 28 [ 284.701769][ T5951] usb 4-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.733383][ T5951] usb 4-1: config 0 interface 0 has no altsetting 0 [ 284.750163][ T5951] usb 4-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.00 [ 284.779776][ T5951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.836179][ T5951] usb 4-1: config 0 descriptor?? [ 284.988457][ T8709] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.263356][ T8721] netlink: 548 bytes leftover after parsing attributes in process `syz.2.789'. [ 286.388631][ T5951] asus 0003:0B05:1822.000E: hidraw0: USB HID v0.00 Device [HID 0b05:1822] on usb-dummy_hcd.3-1/input0 [ 286.613441][ T928] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 286.718779][ T5951] asus 0003:0B05:1822.000E: Asus input not registered [ 286.771355][ T5951] asus 0003:0B05:1822.000E: probe with driver asus failed with error -12 [ 286.772729][ T8729] netlink: 104 bytes leftover after parsing attributes in process `syz.1.792'. [ 286.798125][ T928] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 286.848226][ T928] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 286.921715][ T8729] FAULT_INJECTION: forcing a failure. [ 286.921715][ T8729] name failslab, interval 1, probability 0, space 0, times 0 [ 286.944764][ T8729] CPU: 0 UID: 0 PID: 8729 Comm: syz.1.792 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(full) [ 286.944794][ T8729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 286.944804][ T8729] Call Trace: [ 286.944812][ T8729] [ 286.944821][ T8729] dump_stack_lvl+0x189/0x250 [ 286.944849][ T8729] ? __pfx____ratelimit+0x10/0x10 [ 286.944874][ T8729] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.944897][ T8729] ? __pfx__printk+0x10/0x10 [ 286.944930][ T8729] ? __pfx___might_resched+0x10/0x10 [ 286.944949][ T8729] ? fs_reclaim_acquire+0x7d/0x100 [ 286.944984][ T8729] should_fail_ex+0x414/0x560 [ 286.945024][ T8729] should_failslab+0xa8/0x100 [ 286.945054][ T8729] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 286.945081][ T8729] ? __alloc_skb+0x112/0x2d0 [ 286.945115][ T8729] __alloc_skb+0x112/0x2d0 [ 286.945147][ T8729] netlink_ack+0x146/0xa50 [ 286.945175][ T8729] ? rcu_is_watching+0x15/0xb0 [ 286.945196][ T8729] ? trace_contention_end+0x39/0x120 [ 286.945230][ T8729] netlink_rcv_skb+0x28c/0x470 [ 286.945259][ T8729] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 286.945283][ T8729] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 286.945326][ T8729] ? netlink_deliver_tap+0x2e/0x1b0 [ 286.945354][ T8729] ? netlink_deliver_tap+0x2e/0x1b0 [ 286.945382][ T8729] xfrm_netlink_rcv+0x79/0x90 [ 286.945404][ T8729] netlink_unicast+0x82c/0x9e0 [ 286.945438][ T8729] ? __pfx_netlink_unicast+0x10/0x10 [ 286.945465][ T8729] ? netlink_sendmsg+0x642/0xb30 [ 286.945490][ T8729] ? skb_put+0x11b/0x210 [ 286.945523][ T8729] netlink_sendmsg+0x805/0xb30 [ 286.945559][ T8729] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.945590][ T8729] ? aa_sock_msg_perm+0xf1/0x1d0 [ 286.945622][ T8729] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 286.945643][ T8729] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.945671][ T8729] __sock_sendmsg+0x21c/0x270 [ 286.945701][ T8729] ____sys_sendmsg+0x505/0x830 [ 286.945727][ T8729] ? __pfx_____sys_sendmsg+0x10/0x10 [ 286.945763][ T8729] ? import_iovec+0x74/0xa0 [ 286.945790][ T8729] ___sys_sendmsg+0x21f/0x2a0 [ 286.945812][ T8729] ? __pfx____sys_sendmsg+0x10/0x10 [ 286.945876][ T8729] ? __fget_files+0x2a/0x420 [ 286.945893][ T8729] ? __fget_files+0x3a0/0x420 [ 286.945924][ T8729] __x64_sys_sendmsg+0x19b/0x260 [ 286.945948][ T8729] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 286.945980][ T8729] ? __pfx_ksys_write+0x10/0x10 [ 286.946004][ T8729] ? rcu_is_watching+0x15/0xb0 [ 286.946037][ T8729] ? do_syscall_64+0xbe/0x3b0 [ 286.946069][ T8729] do_syscall_64+0xfa/0x3b0 [ 286.946095][ T8729] ? lockdep_hardirqs_on+0x9c/0x150 [ 286.946119][ T8729] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.946138][ T8729] ? clear_bhb_loop+0x60/0xb0 [ 286.946162][ T8729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.946181][ T8729] RIP: 0033:0x7f31b998ebe9 [ 286.946200][ T8729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.946217][ T8729] RSP: 002b:00007f31ba74a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.946239][ T8729] RAX: ffffffffffffffda RBX: 00007f31b9bb5fa0 RCX: 00007f31b998ebe9 [ 286.946253][ T8729] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 286.946265][ T8729] RBP: 00007f31ba74a090 R08: 0000000000000000 R09: 0000000000000000 [ 286.946277][ T8729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.946288][ T8729] R13: 00007f31b9bb6038 R14: 00007f31b9bb5fa0 R15: 00007f31b9cdfa28 [ 286.946321][ T8729] [ 287.290430][ T928] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 287.299580][ T928] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 287.310860][ T928] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 287.336484][ T928] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 287.349998][ T928] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 287.535984][ T928] usb 1-1: Product: syz [ 287.560305][ T5951] usb 4-1: USB disconnect, device number 21 [ 287.592522][ T928] usb 1-1: Manufacturer: syz [ 287.644797][ T928] cdc_wdm 1-1:1.0: skipping garbage [ 287.691758][ T928] cdc_wdm 1-1:1.0: skipping garbage [ 287.756798][ T928] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 287.771165][ T928] cdc_wdm 1-1:1.0: Unknown control protocol [ 287.862219][ T928] usb 1-1: USB disconnect, device number 34 [ 288.037587][ T8748] netlink: 24 bytes leftover after parsing attributes in process `syz.2.796'. [ 289.482471][ T8761] netlink: 12 bytes leftover after parsing attributes in process `syz.0.799'. [ 289.641516][ T8765] openvswitch: netlink: Tunnel attr 202 out of range max 16 [ 289.862204][ T8766] netlink: 80 bytes leftover after parsing attributes in process `syz.4.798'. [ 290.608596][ T8771] netlink: 24 bytes leftover after parsing attributes in process `syz.0.800'. [ 291.597402][ T8788] netlink: 60 bytes leftover after parsing attributes in process `syz.3.805'. [ 292.541692][ T43] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 292.793432][ T43] usb 4-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.805553][ T43] usb 4-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.015188][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 293.041690][ T43] usb 4-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.00 [ 293.080958][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.179149][ T43] usb 4-1: config 0 descriptor?? [ 293.561883][ T5867] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 293.619495][ T8807] netlink: 12 bytes leftover after parsing attributes in process `syz.1.810'. [ 293.661549][ T43] asus 0003:0B05:1822.000F: hidraw0: USB HID v0.00 Device [HID 0b05:1822] on usb-dummy_hcd.3-1/input0 [ 293.674702][ T43] asus 0003:0B05:1822.000F: Asus input not registered [ 293.735908][ T8811] netlink: 24 bytes leftover after parsing attributes in process `syz.4.811'. [ 293.754257][ T5867] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 293.763418][ T5867] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 293.777735][ T43] asus 0003:0B05:1822.000F: probe with driver asus failed with error -12 [ 293.796492][ T5867] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 293.835610][ T5867] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 293.857383][ T5867] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 294.092228][ T5867] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 294.101632][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 294.223148][ T5867] usb 1-1: Product: syz [ 294.238586][ T5867] usb 1-1: Manufacturer: syz [ 294.284695][ T5867] cdc_wdm 1-1:1.0: skipping garbage [ 294.290652][ T5867] cdc_wdm 1-1:1.0: skipping garbage [ 294.339856][ T5867] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 294.356181][ T5867] cdc_wdm 1-1:1.0: Unknown control protocol [ 294.617880][ T5867] usb 1-1: USB disconnect, device number 35 [ 295.170461][ T5951] usb 4-1: USB disconnect, device number 22 [ 296.496649][ T8852] input: syz1 as /devices/virtual/input/input12 [ 296.572515][ T8858] openvswitch: netlink: Tunnel attr 202 out of range max 16 [ 296.687816][ T8858] netlink: 80 bytes leftover after parsing attributes in process `syz.0.821'. [ 297.024052][ T5951] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 297.032113][ T5944] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 297.066789][ T8863] netlink: 24 bytes leftover after parsing attributes in process `syz.2.820'. [ 297.194198][ T5944] usb 2-1: Using ep0 maxpacket: 32 [ 297.202885][ T5944] usb 2-1: too many configurations: 29, using maximum allowed: 8 [ 297.236106][ T5944] usb 2-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=82.d5 [ 297.246498][ T5944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.255380][ T5944] usb 2-1: Product: syz [ 297.264379][ T5944] usb 2-1: Manufacturer: syz [ 297.361703][ T5951] usb 5-1: Using ep0 maxpacket: 16 [ 297.446856][ T5951] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 297.494590][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 297.511358][ T5944] usb 2-1: SerialNumber: syz [ 297.520182][ T5951] usb 5-1: Product: syz [ 297.527837][ T5944] usb 2-1: config 0 descriptor?? [ 297.539237][ T5951] usb 5-1: Manufacturer: syz [ 297.545038][ T5951] usb 5-1: SerialNumber: syz [ 297.584407][ T5944] hub 2-1:0.0: Invalid hub with more than one config or interface [ 297.611027][ T5944] hub 2-1:0.0: probe with driver hub failed with error -22 [ 297.619763][ T5951] usb 5-1: config 0 descriptor?? [ 297.714214][ T5944] gspca_main: 0ac8:c301 too many config [ 298.055920][ T8852] vcan0: tx drop: invalid sa for name 0x0000020000000004 [ 298.067127][ T43] usb 5-1: USB disconnect, device number 29 [ 299.042004][ T5944] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 299.225394][ T5944] usb 4-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.245725][ T5944] usb 4-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.256124][ T980] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 299.273879][ T5944] usb 4-1: config 0 interface 0 has no altsetting 0 [ 299.282292][ T5944] usb 4-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.00 [ 299.292065][ T5944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.337718][ T5944] usb 4-1: config 0 descriptor?? [ 299.512502][ T980] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 299.521512][ T980] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 299.571766][ T980] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 299.580847][ T980] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 299.656817][ T980] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 299.679614][ T5951] usb 2-1: USB disconnect, device number 33 [ 299.736458][ T980] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 299.748182][ T980] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 299.765777][ T5944] asus 0003:0B05:1822.0010: hidraw0: USB HID v0.00 Device [HID 0b05:1822] on usb-dummy_hcd.3-1/input0 [ 299.781657][ T980] usb 5-1: Product: syz [ 299.793641][ T980] usb 5-1: Manufacturer: syz [ 299.825542][ T5944] asus 0003:0B05:1822.0010: Asus input not registered [ 299.869349][ T980] cdc_wdm 5-1:1.0: skipping garbage [ 299.889880][ T5944] asus 0003:0B05:1822.0010: probe with driver asus failed with error -12 [ 299.899646][ T980] cdc_wdm 5-1:1.0: skipping garbage [ 299.918203][ T980] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 299.918231][ T980] cdc_wdm 5-1:1.0: Unknown control protocol [ 300.239190][ C0] wdm_int_callback: 2 callbacks suppressed [ 300.239207][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 300.251649][ C0] wdm_int_callback: 2 callbacks suppressed [ 300.251664][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 300.263968][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 300.270566][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 300.276811][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 300.283490][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 300.289866][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 300.296650][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 300.302977][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 300.309573][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 300.315981][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 300.322609][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 300.328932][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 300.335618][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 300.341884][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 300.348863][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 300.355188][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 300.361801][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 300.368217][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 300.374991][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 300.389551][ T980] usb 5-1: USB disconnect, device number 30 [ 300.395791][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 300.854729][ T8895] : renamed from lo (while UP) [ 300.922030][ T43] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 301.104006][ T43] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 301.104040][ T43] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 301.104061][ T43] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 301.104113][ T43] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 301.104142][ T43] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 301.225330][ T43] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 301.225365][ T43] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 301.225386][ T43] usb 1-1: Product: syz [ 301.225470][ T43] usb 1-1: Manufacturer: syz [ 301.268220][ T43] cdc_wdm 1-1:1.0: skipping garbage [ 301.268238][ T43] cdc_wdm 1-1:1.0: skipping garbage [ 301.279136][ T43] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 301.279155][ T43] cdc_wdm 1-1:1.0: Unknown control protocol [ 301.511893][ T5944] usb 4-1: USB disconnect, device number 23 [ 301.627767][ T5867] usb 1-1: USB disconnect, device number 36 [ 301.627860][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 301.631187][ T8905] cdc_wdm 1-1:1.0: Tx URB error: -19 [ 301.765156][ T8909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.836'. [ 302.208807][ T8901] tty tty1: ldisc open failed (-12), clearing slot 0 [ 302.276789][ T8915] openvswitch: netlink: Tunnel attr 202 out of range max 16 [ 302.379363][ T8915] sit0: left promiscuous mode [ 302.384705][ T8915] netlink: 80 bytes leftover after parsing attributes in process `syz.3.837'. [ 303.061551][ T8924] fuse: Bad value for 'fd' [ 305.154617][ T8946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.848'. [ 305.263616][ T5923] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 305.517542][ T5923] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.528801][ T5923] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.565768][ T5923] usb 3-1: config 0 interface 0 has no altsetting 0 [ 305.599551][ T5923] usb 3-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.00 [ 305.611709][ T5867] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 305.684268][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.718316][ T5923] usb 3-1: config 0 descriptor?? [ 305.820997][ T5867] usb 1-1: config 0 has no interfaces? [ 305.837659][ T5867] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 305.851671][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.869778][ T5867] usb 1-1: Product: syz [ 305.874804][ T5867] usb 1-1: Manufacturer: syz [ 305.894976][ T5867] usb 1-1: SerialNumber: syz [ 305.928562][ T5867] usb 1-1: config 0 descriptor?? [ 306.108168][ T8964] netlink: 24 bytes leftover after parsing attributes in process `syz.4.849'. [ 306.152672][ T5923] asus 0003:0B05:1822.0011: hidraw0: USB HID v0.00 Device [HID 0b05:1822] on usb-dummy_hcd.2-1/input0 [ 306.188176][ T5923] asus 0003:0B05:1822.0011: Asus input not registered [ 306.305094][ T5923] asus 0003:0B05:1822.0011: probe with driver asus failed with error -12 [ 306.335132][ T8968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.852'. [ 307.352633][ T5867] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 307.523692][ T5867] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 307.532928][ T5867] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 307.544183][ T5867] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 307.570953][ T5867] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 307.607039][ T5867] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 307.631844][ T5867] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 307.641309][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 307.650272][ T5867] usb 4-1: Product: syz [ 307.665598][ T5867] usb 4-1: Manufacturer: syz [ 307.683915][ T5867] cdc_wdm 4-1:1.0: skipping garbage [ 307.690744][ T5867] cdc_wdm 4-1:1.0: skipping garbage [ 307.701277][ T5867] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 307.708566][ T5867] cdc_wdm 4-1:1.0: Unknown control protocol [ 307.787939][ T5986] usb 3-1: USB disconnect, device number 29 [ 307.890374][ T5867] usb 4-1: USB disconnect, device number 24 [ 308.411827][ T5867] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 308.565238][ T5867] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 308.574724][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.589330][ T5867] usb 3-1: config 0 descriptor?? [ 309.431719][ T5986] usb 1-1: USB disconnect, device number 37 [ 310.329049][ T5867] pegasus 3-1:0.0: can't reset MAC [ 310.349585][ T5867] pegasus 3-1:0.0: probe with driver pegasus failed with error -5 [ 310.430252][ T5867] usb 3-1: USB disconnect, device number 30 [ 311.338291][ T9015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.866'. [ 311.646530][ T9022] netlink: 12 bytes leftover after parsing attributes in process `syz.0.867'. [ 312.356516][ T9039] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 312.437987][ T9039] tipc: Cannot configure node identity twice [ 312.841328][ T9044] netlink: 24 bytes leftover after parsing attributes in process `syz.0.873'. [ 313.011879][ T43] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 313.187726][ T43] usb 3-1: device descriptor read/64, error -71 [ 313.441765][ T43] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 313.471747][ T928] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 313.591802][ T43] usb 3-1: device descriptor read/64, error -71 [ 313.639284][ T928] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 313.660889][ T928] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 313.674620][ T928] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 313.686387][ T928] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 313.702429][ T928] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 313.717063][ T43] usb usb3-port1: attempt power cycle [ 313.726225][ T928] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 313.749976][ T928] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 313.764986][ T928] usb 4-1: Product: syz [ 313.770228][ T928] usb 4-1: Manufacturer: syz [ 313.802652][ T928] cdc_wdm 4-1:1.0: skipping garbage [ 313.807886][ T928] cdc_wdm 4-1:1.0: skipping garbage [ 313.840493][ T928] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 313.858219][ T928] cdc_wdm 4-1:1.0: Unknown control protocol [ 314.072004][ T43] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 314.112213][ C0] wdm_int_callback: 96 callbacks suppressed [ 314.112239][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 314.112680][ T5867] usb 4-1: USB disconnect, device number 25 [ 314.118194][ C0] wdm_int_callback: 96 callbacks suppressed [ 314.118214][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 314.118234][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 314.152283][ T9054] cdc_wdm 4-1:1.0: Tx URB error: -19 [ 314.153267][ T43] usb 3-1: device descriptor read/8, error -71 [ 314.311722][ T928] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 314.414907][ T43] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 314.442018][ T928] usb 1-1: device descriptor read/64, error -71 [ 314.449037][ T43] usb 3-1: device descriptor read/8, error -71 [ 314.563321][ T43] usb usb3-port1: unable to enumerate USB device [ 314.691766][ T928] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 314.831650][ T928] usb 1-1: device descriptor read/64, error -71 [ 314.984939][ T928] usb usb1-port1: attempt power cycle [ 315.009030][ T9059] vxcan1: tx drop: invalid sa for name 0x0000020000000004 [ 315.351850][ T928] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 315.382953][ T928] usb 1-1: device descriptor read/8, error -71 [ 316.628430][ T928] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 316.667576][ T928] usb 1-1: device descriptor read/8, error -71 [ 316.877384][ T928] usb usb1-port1: unable to enumerate USB device [ 316.941811][ T43] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 317.146308][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 317.171281][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 317.202231][ T43] usb 2-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 317.211323][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.212634][ T980] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 317.254379][ T43] usb 2-1: config 0 descriptor?? [ 317.279336][ T43] usb 2-1: bad CDC descriptors [ 317.333271][ T43] cdc_acm 2-1:0.0: Control and data interfaces are not separated! [ 317.358625][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.365133][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.453629][ T980] usb 4-1: Using ep0 maxpacket: 16 [ 317.465210][ T9074] netlink: 104 bytes leftover after parsing attributes in process `syz.1.882'. [ 317.499441][ T980] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 317.528079][ T43] cdc_acm 2-1:0.0: This needs exactly 3 endpoints [ 317.542039][ T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.545051][ T9095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.887'. [ 317.566794][ T980] usb 4-1: config 0 descriptor?? [ 317.605893][ T43] cdc_acm 2-1:0.0: probe with driver cdc_acm failed with error -22 [ 317.609415][ T980] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 318.828266][ T9111] openvswitch: netlink: Tunnel attr 202 out of range max 16 [ 320.618542][ T5951] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 320.676852][ T9111] netlink: 80 bytes leftover after parsing attributes in process `syz.3.885'. [ 320.863673][ T5951] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 320.881062][ T5951] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 320.917554][ T5951] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 320.959230][ T5951] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 321.032099][ T5951] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 321.034898][ T928] usb 2-1: USB disconnect, device number 34 [ 321.104875][ T5951] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 321.138551][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 321.195911][ T5951] usb 5-1: Product: syz [ 321.218159][ T5951] usb 5-1: Manufacturer: syz [ 321.232068][ T980] gspca_sonixj: reg_w1 err -110 [ 321.237347][ T980] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 321.325869][ T5951] cdc_wdm 5-1:1.0: skipping garbage [ 321.341428][ T5951] cdc_wdm 5-1:1.0: skipping garbage [ 321.363819][ T5951] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 321.370053][ T5951] cdc_wdm 5-1:1.0: Unknown control protocol [ 321.639123][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 321.645782][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 321.652409][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 321.659114][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 321.665381][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 321.672078][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 321.678447][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 321.685147][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 321.691661][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 321.698276][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 321.704631][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 321.711255][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 321.717633][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 321.724254][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 321.730522][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 321.737368][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 321.744336][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 321.750989][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 321.757344][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 321.764028][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 321.770511][ T5951] usb 5-1: USB disconnect, device number 31 [ 321.776633][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 321.996065][ T980] usb 4-1: USB disconnect, device number 26 [ 324.086537][ T9177] FAULT_INJECTION: forcing a failure. [ 324.086537][ T9177] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 324.157949][ T9177] CPU: 1 UID: 0 PID: 9177 Comm: syz.2.911 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(full) [ 324.157981][ T9177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 324.157994][ T9177] Call Trace: [ 324.158003][ T9177] [ 324.158011][ T9177] dump_stack_lvl+0x189/0x250 [ 324.158043][ T9177] ? __pfx____ratelimit+0x10/0x10 [ 324.158070][ T9177] ? __pfx_dump_stack_lvl+0x10/0x10 [ 324.158094][ T9177] ? __pfx__printk+0x10/0x10 [ 324.158122][ T9177] ? __might_fault+0xb0/0x130 [ 324.158162][ T9177] should_fail_ex+0x414/0x560 [ 324.158193][ T9177] _copy_from_user+0x2d/0xb0 [ 324.158216][ T9177] ___sys_recvmsg+0x12e/0x510 [ 324.158242][ T9177] ? __pfx____sys_recvmsg+0x10/0x10 [ 324.158300][ T9177] ? __might_fault+0xb0/0x130 [ 324.158329][ T9177] do_recvmmsg+0x307/0x770 [ 324.158360][ T9177] ? __pfx_do_recvmmsg+0x10/0x10 [ 324.158396][ T9177] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 324.158444][ T9177] __x64_sys_recvmmsg+0x190/0x240 [ 324.158469][ T9177] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 324.158488][ T9177] ? rcu_is_watching+0x15/0xb0 [ 324.158514][ T9177] ? do_syscall_64+0xbe/0x3b0 [ 324.158546][ T9177] do_syscall_64+0xfa/0x3b0 [ 324.158581][ T9177] ? lockdep_hardirqs_on+0x9c/0x150 [ 324.158607][ T9177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.158626][ T9177] ? clear_bhb_loop+0x60/0xb0 [ 324.158651][ T9177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.158669][ T9177] RIP: 0033:0x7f4a4458ebe9 [ 324.158687][ T9177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.158704][ T9177] RSP: 002b:00007f4a45438038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 324.158732][ T9177] RAX: ffffffffffffffda RBX: 00007f4a447b5fa0 RCX: 00007f4a4458ebe9 [ 324.158747][ T9177] RDX: 0000000000000006 RSI: 0000200000002c00 RDI: 0000000000000003 [ 324.158760][ T9177] RBP: 00007f4a45438090 R08: 0000000000000000 R09: 0000000000000000 [ 324.158773][ T9177] R10: 0000000040002020 R11: 0000000000000246 R12: 0000000000000001 [ 324.158785][ T9177] R13: 00007f4a447b6038 R14: 00007f4a447b5fa0 R15: 00007f4a448dfa28 [ 324.158817][ T9177] [ 324.376036][ T9176] netlink: 60 bytes leftover after parsing attributes in process `syz.1.909'. [ 324.913941][ T9188] netlink: 20 bytes leftover after parsing attributes in process `syz.2.916'. [ 325.361974][ T9196] openvswitch: netlink: Tunnel attr 202 out of range max 16 [ 325.463346][ T9196] netlink: 80 bytes leftover after parsing attributes in process `syz.1.917'. [ 325.852419][ T928] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 326.023619][ T928] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 326.046344][ T928] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 326.130793][ T928] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 326.169625][ T928] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 326.348917][ T928] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 326.432984][ T928] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 326.456949][ T928] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 326.499196][ T928] usb 5-1: Product: syz [ 326.520474][ T928] usb 5-1: Manufacturer: syz [ 326.564589][ T928] cdc_wdm 5-1:1.0: skipping garbage [ 326.569866][ T928] cdc_wdm 5-1:1.0: skipping garbage [ 326.608198][ T928] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 326.637885][ T928] cdc_wdm 5-1:1.0: Unknown control protocol [ 326.826799][ T9205] netlink: 'syz.3.922': attribute type 11 has an invalid length. [ 326.898473][ C1] wdm_int_callback: 3 callbacks suppressed [ 326.898499][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 326.911056][ C1] wdm_int_callback: 3 callbacks suppressed [ 326.911081][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 326.923814][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 326.930815][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 326.937101][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 326.943803][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 326.950270][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 326.956867][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 326.963297][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 326.969905][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 326.976297][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 326.983240][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 326.989486][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 326.998255][ T928] usb 5-1: USB disconnect, device number 32 [ 327.019976][ T9209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.921'. [ 327.338065][ T9214] vcan0: tx drop: invalid sa for name 0x0000020000000004 [ 327.361921][ T43] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 327.522327][ T43] usb 1-1: device descriptor read/64, error -71 [ 327.731139][ T5867] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 327.791690][ T43] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 327.808419][ T9220] netlink: 104 bytes leftover after parsing attributes in process `syz.2.927'. [ 327.892626][ T5867] usb 4-1: Using ep0 maxpacket: 32 [ 327.901043][ T5867] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 327.910643][ T5867] usb 4-1: config 0 has no interface number 0 [ 327.917641][ T5867] usb 4-1: config 0 interface 12 has no altsetting 0 [ 327.924540][ T43] usb 1-1: device descriptor read/64, error -71 [ 327.935246][ T5867] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 327.945024][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.954170][ T5867] usb 4-1: Product: syz [ 327.958683][ T5867] usb 4-1: Manufacturer: syz [ 327.964000][ T5867] usb 4-1: SerialNumber: syz [ 328.038999][ T43] usb usb1-port1: attempt power cycle [ 328.055701][ T5867] usb 4-1: config 0 descriptor?? [ 328.235458][ T9227] netlink: 24 bytes leftover after parsing attributes in process `syz.2.929'. [ 328.394941][ T43] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 328.447194][ T43] usb 1-1: device descriptor read/8, error -71 [ 328.552653][ T9216] program syz.3.925 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 328.700113][ T43] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 328.722498][ T43] usb 1-1: device descriptor read/8, error -71 [ 328.770691][ T5867] f81534 4-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71 [ 328.780754][ T5867] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 328.790247][ T5867] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 328.810939][ T5867] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 328.819679][ T928] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 328.845268][ T43] usb usb1-port1: unable to enumerate USB device [ 329.195811][ T928] usb 2-1: not running at top speed; connect to a high speed hub [ 329.205070][ T928] usb 2-1: config 1 has an invalid interface number: 44 but max is 0 [ 329.226581][ T928] usb 2-1: config 1 has no interface number 0 [ 329.295257][ T5867] usb 4-1: USB disconnect, device number 27 [ 329.301302][ T928] usb 2-1: config 1 interface 44 has no altsetting 0 [ 329.326034][ T928] usb 2-1: New USB device found, idVendor=1803, idProduct=5510, bcdDevice=9a.d7 [ 329.363919][ T928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.378887][ T928] usb 2-1: Product: syz [ 329.416631][ T928] usb 2-1: Manufacturer: syz [ 329.422592][ T928] usb 2-1: SerialNumber: syz [ 329.647215][ T928] cxacru 2-1:1.44: usbatm_usb_probe: bind failed: -19! [ 329.687429][ T928] usb 2-1: USB disconnect, device number 35 [ 329.823031][ T9238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.934'. [ 330.400424][ T9263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.945'. [ 330.451735][ T928] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 330.483854][ T9263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.945'. [ 330.576461][ T9263] kvm: Disabled LAPIC found during irq injection [ 330.715918][ T928] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 330.783925][ T928] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 330.867055][ T9266] tipc: Started in network mode [ 330.952156][ T9266] tipc: Node identity 1e2bae603adf, cluster identity 4711 [ 331.007869][ T928] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 331.091909][ T9266] tipc: Enabled bearer , priority 0 [ 331.119455][ T9266] syzkaller0: entered promiscuous mode [ 331.125166][ T928] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 331.137711][ T928] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 331.164953][ T9266] syzkaller0: entered allmulticast mode [ 331.184166][ T928] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 331.194673][ T928] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 331.211677][ T928] usb 5-1: Product: syz [ 331.226041][ T928] usb 5-1: Manufacturer: syz [ 331.284755][ T928] cdc_wdm 5-1:1.0: skipping garbage [ 331.320280][ T928] cdc_wdm 5-1:1.0: skipping garbage [ 331.333144][ T928] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 331.339367][ T928] cdc_wdm 5-1:1.0: Unknown control protocol [ 331.420393][ T9263] tipc: Resetting bearer [ 331.464884][ T9263] tipc: Disabling bearer [ 331.643066][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 331.649746][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 331.656500][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 331.663125][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 331.671673][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 331.678322][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 331.684841][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 331.691490][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 331.707559][ T980] usb 5-1: USB disconnect, device number 33 [ 331.707664][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 332.465824][ T9298] random: crng reseeded on system resumption [ 332.673947][ T980] usb 1-1: new low-speed USB device number 46 using dummy_hcd [ 332.791865][ T9301] netlink: 40 bytes leftover after parsing attributes in process `syz.1.956'. [ 332.826015][ T980] usb 1-1: device descriptor read/64, error -71 [ 333.419894][ T9308] FAULT_INJECTION: forcing a failure. [ 333.419894][ T9308] name failslab, interval 1, probability 0, space 0, times 0 [ 333.432997][ T980] usb 1-1: new low-speed USB device number 47 using dummy_hcd [ 333.450617][ T9308] CPU: 0 UID: 0 PID: 9308 Comm: syz.4.958 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(full) [ 333.450637][ T9308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 333.450649][ T9308] Call Trace: [ 333.450655][ T9308] [ 333.450661][ T9308] dump_stack_lvl+0x189/0x250 [ 333.450681][ T9308] ? __pfx____ratelimit+0x10/0x10 [ 333.450697][ T9308] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.450711][ T9308] ? __pfx__printk+0x10/0x10 [ 333.450731][ T9308] ? __pfx___might_resched+0x10/0x10 [ 333.450746][ T9308] should_fail_ex+0x414/0x560 [ 333.450765][ T9308] should_failslab+0xa8/0x100 [ 333.450784][ T9308] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 333.450800][ T9308] ? __alloc_skb+0x112/0x2d0 [ 333.450826][ T9308] __alloc_skb+0x112/0x2d0 [ 333.450846][ T9308] netlink_dump+0x1b7/0xe90 [ 333.450870][ T9308] ? __pfx_netlink_dump+0x10/0x10 [ 333.450898][ T9308] ? kmem_cache_free+0x18f/0x400 [ 333.450917][ T9308] netlink_recvmsg+0x676/0xa30 [ 333.450940][ T9308] ? __pfx_netlink_recvmsg+0x10/0x10 [ 333.450959][ T9308] ? __lock_acquire+0xab9/0xd20 [ 333.450975][ T9308] ? aa_sock_msg_perm+0xf1/0x1d0 [ 333.450993][ T9308] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 333.451008][ T9308] ? __pfx_netlink_recvmsg+0x10/0x10 [ 333.451025][ T9308] sock_recvmsg_nosec+0x183/0x1c0 [ 333.451043][ T9308] ____sys_recvmsg+0x3aa/0x460 [ 333.451061][ T9308] ? __pfx_____sys_recvmsg+0x10/0x10 [ 333.451083][ T9308] ? import_iovec+0x74/0xa0 [ 333.451099][ T9308] ___sys_recvmsg+0x1b5/0x510 [ 333.451115][ T9308] ? __pfx____sys_recvmsg+0x10/0x10 [ 333.451147][ T9308] ? __might_fault+0xb0/0x130 [ 333.451166][ T9308] do_recvmmsg+0x307/0x770 [ 333.451184][ T9308] ? __pfx_do_recvmmsg+0x10/0x10 [ 333.451217][ T9308] __x64_sys_recvmmsg+0x190/0x240 [ 333.451232][ T9308] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 333.451248][ T9308] ? do_syscall_64+0xbe/0x3b0 [ 333.451266][ T9308] do_syscall_64+0xfa/0x3b0 [ 333.451281][ T9308] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.451295][ T9308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.451307][ T9308] ? clear_bhb_loop+0x60/0xb0 [ 333.451322][ T9308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.451333][ T9308] RIP: 0033:0x7f2fd5b8ebe9 [ 333.451344][ T9308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.451355][ T9308] RSP: 002b:00007f2fd69ce038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 333.451369][ T9308] RAX: ffffffffffffffda RBX: 00007f2fd5db5fa0 RCX: 00007f2fd5b8ebe9 [ 333.451378][ T9308] RDX: 0000000000000006 RSI: 0000200000002c00 RDI: 0000000000000003 [ 333.451385][ T9308] RBP: 00007f2fd69ce090 R08: 0000000000000000 R09: 0000000000000000 [ 333.451393][ T9308] R10: 0000000040002020 R11: 0000000000000246 R12: 0000000000000001 [ 333.451400][ T9308] R13: 00007f2fd5db6038 R14: 00007f2fd5db5fa0 R15: 00007f2fd5edfa28 [ 333.451419][ T9308] [ 333.571790][ T980] usb 1-1: device descriptor read/64, error -71 [ 334.604358][ T5923] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 334.629079][ T980] usb usb1-port1: attempt power cycle [ 334.670738][ T5986] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 334.772279][ T5923] usb 5-1: Using ep0 maxpacket: 16 [ 334.780094][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 334.841699][ T5986] usb 4-1: Using ep0 maxpacket: 32 [ 334.841727][ T5923] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 334.860545][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.869603][ T5986] usb 4-1: config 0 interface 0 has no altsetting 0 [ 334.873285][ T5923] usb 5-1: Product: syz [ 334.876903][ T5986] usb 4-1: New USB device found, idVendor=1e71, idProduct=2011, bcdDevice= 0.00 [ 334.880723][ T5923] usb 5-1: Manufacturer: syz [ 334.904979][ T5923] usb 5-1: SerialNumber: syz [ 334.910249][ T5986] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.927679][ T5923] usb 5-1: config 0 descriptor?? [ 334.934250][ T5986] usb 4-1: config 0 descriptor?? [ 334.963983][ T5923] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 334.971790][ T980] usb 1-1: new low-speed USB device number 48 using dummy_hcd [ 334.991897][ T5923] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 335.003723][ T980] usb 1-1: device descriptor read/8, error -71 [ 335.245996][ T980] usb 1-1: new low-speed USB device number 49 using dummy_hcd [ 335.273733][ T980] usb 1-1: device descriptor read/8, error -71 [ 335.402369][ T980] usb usb1-port1: unable to enumerate USB device [ 335.560585][ T5923] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 336.001246][ T5923] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 336.140320][ T5923] em28xx 5-1:0.0: board has no eeprom [ 336.366256][ T9337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.375416][ T9337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.560067][ T9313] em28xx 5-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 337.605712][ T5923] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 337.655191][ T5986] usbhid 4-1:0.0: can't add hid device: -71 [ 337.716730][ T5923] em28xx 5-1:0.0: dvb set to bulk mode. [ 337.736593][ T5986] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 337.760659][ T928] em28xx 5-1:0.0: Binding DVB extension [ 337.825794][ T5986] usb 4-1: USB disconnect, device number 28 [ 337.860035][ T5923] usb 5-1: USB disconnect, device number 34 [ 337.902449][ T9359] netlink: 20 bytes leftover after parsing attributes in process `syz.4.971'. [ 337.948831][ T9359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.971'. [ 337.977316][ T9359] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 338.038285][ T5923] em28xx 5-1:0.0: Disconnecting em28xx [ 338.151964][ T9362] sctp: [Deprecated]: syz.3.972 (pid 9362) Use of int in maxseg socket option. [ 338.151964][ T9362] Use struct sctp_assoc_value instead [ 338.330089][ T928] em28xx 5-1:0.0: Registering input extension [ 338.419779][ T5923] em28xx 5-1:0.0: Closing input extension [ 338.508447][ T9368] netlink: 44 bytes leftover after parsing attributes in process `syz.4.974'. [ 338.518594][ T5923] em28xx 5-1:0.0: Freeing device [ 339.038388][ T9380] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 340.633857][ T9408] netlink: 44 bytes leftover after parsing attributes in process `syz.3.988'. [ 340.804562][ T9412] netlink: 60 bytes leftover after parsing attributes in process `syz.0.987'. [ 341.883263][ T9435] netlink: 'syz.3.995': attribute type 11 has an invalid length. [ 342.151432][ T9440] netlink: 16 bytes leftover after parsing attributes in process `syz.3.998'. [ 342.188169][ T9440] vcan0: tx drop: invalid sa for name 0x0000020000000004 [ 342.200376][ T9441] netlink: 'syz.4.996': attribute type 11 has an invalid length. [ 342.540068][ T9445] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1000'. [ 343.985928][ T928] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 344.321917][ T9474] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1010'. [ 344.410121][ T9474] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1010'. [ 344.450826][ T928] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 344.539958][ T9474] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1010'. [ 345.270174][ T928] usb 5-1: config 0 has no interface number 0 [ 345.358461][ T928] usb 5-1: config 0 interface 29 has no altsetting 0 [ 348.871406][ T15] sched: DL replenish lagged too much [ 362.523043][ T928] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 362.967718][ T928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.802463][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.824776][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 456.501509][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 456.508510][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9433/1:b..l [ 456.516997][ C1] rcu: (detected by 1, t=10503 jiffies, g=42981, q=875538 ncpus=2) [ 456.525262][ C1] task:syz.0.993 state:R running task stack:25416 pid:9433 tgid:9424 ppid:5882 task_flags:0x40054c flags:0x00004004 [ 456.539811][ C1] Call Trace: [ 456.543145][ C1] [ 456.546112][ C1] __schedule+0x1798/0x4cc0 [ 456.550676][ C1] ? __pfx___schedule+0x10/0x10 [ 456.555569][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 456.560895][ C1] preempt_schedule_irq+0xb5/0x150 [ 456.566038][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 456.571806][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 456.577638][ C1] irqentry_exit+0x6f/0x90 [ 456.582099][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 456.588151][ C1] RIP: 0010:lock_acquire+0x175/0x360 [ 456.593469][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 eb e3 02 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 456.613373][ C1] RSP: 0018:ffffc9000e2feab8 EFLAGS: 00000206 [ 456.619488][ C1] RAX: c0f6a6a1c9654900 RBX: 0000000000000000 RCX: c0f6a6a1c9654900 [ 456.627488][ C1] RDX: 0000000000000000 RSI: ffffffff8dba5fb5 RDI: ffffffff8be33380 [ 456.635492][ C1] RBP: ffffffff8172c195 R08: 0000000000000000 R09: ffffffff8172c195 [ 456.643493][ C1] R10: ffffc9000e2fec78 R11: ffffffff81ac3890 R12: 0000000000000002 [ 456.651487][ C1] R13: ffffffff8e139ee0 R14: 0000000000000000 R15: 0000000000000246 [ 456.659572][ C1] ? unwind_next_frame+0xa5/0x2390 [ 456.664721][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 456.670900][ C1] ? unwind_next_frame+0xa5/0x2390 [ 456.676053][ C1] ? unwind_next_frame+0xa5/0x2390 [ 456.681202][ C1] ? save_stack+0xf5/0x1f0 [ 456.685911][ C1] ? unwind_next_frame+0xa5/0x2390 [ 456.691132][ C1] unwind_next_frame+0xc2/0x2390 [ 456.696100][ C1] ? unwind_next_frame+0xa5/0x2390 [ 456.701244][ C1] ? unwind_next_frame+0xa5/0x2390 [ 456.706384][ C1] ? stack_trace_save+0x9c/0xe0 [ 456.711307][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 456.717571][ C1] arch_stack_walk+0x11c/0x150 [ 456.722369][ C1] ? save_stack+0xf5/0x1f0 [ 456.726822][ C1] stack_trace_save+0x9c/0xe0 [ 456.731522][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 456.736933][ C1] save_stack+0xf5/0x1f0 [ 456.741216][ C1] ? __pfx_save_stack+0x10/0x10 [ 456.746213][ C1] ? page_ext_put+0x97/0xc0 [ 456.750758][ C1] __reset_page_owner+0x71/0x1f0 [ 456.755734][ C1] free_unref_folios+0xdbd/0x1520 [ 456.760901][ C1] ? folios_put_refs+0x299/0x640 [ 456.765957][ C1] folios_put_refs+0x559/0x640 [ 456.771297][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 456.776700][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 456.782643][ C1] ? free_swap_cache+0x109/0x300 [ 456.787703][ C1] free_pages_and_swap_cache+0x277/0x520 [ 456.793384][ C1] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 456.799619][ C1] ? tlb_table_flush+0x145/0x410 [ 456.804592][ C1] tlb_flush_mmu+0x3a0/0x680 [ 456.809294][ C1] ? unmap_page_range+0x3b0e/0x4370 [ 456.814527][ C1] unmap_page_range+0x3b31/0x4370 [ 456.819625][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 456.825070][ C1] ? mas_find+0xb0e/0xd30 [ 456.829428][ C1] ? unmap_vmas+0x144/0x580 [ 456.833956][ C1] unmap_vmas+0x399/0x580 [ 456.838322][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 456.843224][ C1] exit_mmap+0x248/0xb50 [ 456.847497][ C1] ? uprobe_clear_state+0x20f/0x290 [ 456.852725][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 456.857515][ C1] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 456.863200][ C1] ? __pfx_exit_aio+0x10/0x10 [ 456.867931][ C1] ? uprobe_clear_state+0x274/0x290 [ 456.873256][ C1] __mmput+0x118/0x420 [ 456.877358][ C1] exit_mm+0x1da/0x2c0 [ 456.881542][ C1] ? __pfx_exit_mm+0x10/0x10 [ 456.886161][ C1] ? rcu_is_watching+0x15/0xb0 [ 456.890950][ C1] do_exit+0x648/0x2300 [ 456.895140][ C1] ? do_raw_spin_lock+0x121/0x290 [ 456.900196][ C1] ? __pfx_do_exit+0x10/0x10 [ 456.904816][ C1] ? cgroup_freezing+0x20/0x350 [ 456.909714][ C1] do_group_exit+0x21c/0x2d0 [ 456.914422][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 456.919656][ C1] get_signal+0x1286/0x1340 [ 456.924208][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 456.929905][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 456.936199][ C1] ? exit_to_user_mode_loop+0x40/0x110 [ 456.941785][ C1] exit_to_user_mode_loop+0x75/0x110 [ 456.947103][ C1] do_syscall_64+0x2bd/0x3b0 [ 456.951725][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 456.957037][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.963132][ C1] ? clear_bhb_loop+0x60/0xb0 [ 456.967835][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.973777][ C1] RIP: 0033:0x7fa9f818ebe9 [ 456.978387][ C1] RSP: 002b:00007fa9f5ff40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 456.986998][ C1] RAX: fffffffffffffe00 RBX: 00007fa9f83b6278 RCX: 00007fa9f818ebe9 [ 456.994990][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa9f83b6278 [ 457.003048][ C1] RBP: 00007fa9f83b6270 R08: 0000000000000000 R09: 0000000000000000 [ 457.011212][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 457.019202][ C1] R13: 00007fa9f83b6308 R14: 00007fa9f84df940 R15: 00007fa9f84dfa28 [ 457.027214][ C1] [ 457.030257][ C1] rcu: rcu_preempt kthread starved for 5983 jiffies! g42981 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 457.041727][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 457.052060][ C1] rcu: RCU grace-period kthread stack dump: [ 457.057958][ C1] task:rcu_preempt state:R running task stack:27160 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 457.071566][ C1] Call Trace: [ 457.074863][ C1] [ 457.077822][ C1] __schedule+0x1798/0x4cc0 [ 457.082468][ C1] ? __lock_acquire+0xab9/0xd20 [ 457.087345][ C1] ? __pfx___schedule+0x10/0x10 [ 457.092277][ C1] ? schedule+0x91/0x360 [ 457.096645][ C1] schedule+0x165/0x360 [ 457.100832][ C1] schedule_timeout+0x12b/0x270 [ 457.105710][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 457.111102][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 457.117023][ C1] ? __pfx_process_timeout+0x10/0x10 [ 457.122341][ C1] ? prepare_to_swait_event+0x341/0x380 [ 457.128004][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 457.132905][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 457.139087][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 457.144396][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 457.149660][ C1] rcu_gp_kthread+0x99/0x390 [ 457.154371][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 457.159683][ C1] ? __kthread_parkme+0x7b/0x200 [ 457.164639][ C1] ? __kthread_parkme+0x1a1/0x200 [ 457.169695][ C1] kthread+0x70e/0x8a0 [ 457.173793][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 457.179022][ C1] ? __pfx_kthread+0x10/0x10 [ 457.183727][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 457.188961][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 457.194706][ C1] ? __pfx_kthread+0x10/0x10 [ 457.199325][ C1] ret_from_fork+0x3f9/0x770 [ 457.203944][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 457.209085][ C1] ? __switch_to_asm+0x39/0x70 [ 457.214135][ C1] ? __switch_to_asm+0x33/0x70 [ 457.218922][ C1] ? __pfx_kthread+0x10/0x10 [ 457.223629][ C1] ret_from_fork_asm+0x1a/0x30 [ 457.228440][ C1] [ 457.231473][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 457.237810][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(full) [ 457.249107][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 457.259180][ C1] RIP: 0010:unwind_next_frame+0x171c/0x2390 [ 457.265202][ C1] Code: 4b 0c 01 0f 85 18 02 00 00 80 3d 2e b9 33 11 00 0f 85 0b 02 00 00 c6 05 21 b9 33 11 01 4c 89 f7 e8 89 0c 00 00 e9 f7 01 00 00 <48> 8b 54 24 08 48 8d 5a 02 48 83 c2 03 48 89 d8 48 c1 e8 03 0f b6 [ 457.285352][ C1] RSP: 0018:ffffc90000a07bf8 EFLAGS: 00000246 [ 457.291443][ C1] RAX: 0000000000000000 RBX: ffffc90000a07d00 RCX: 0000000000000000 [ 457.299443][ C1] RDX: ffffffff90b9ef14 RSI: 0000000000000001 RDI: ffffc90000a07d28 [ 457.307441][ C1] RBP: dffffc0000000000 R08: ffffc90000a07d27 R09: 0000000000000000 [ 457.315523][ C1] R10: ffffc90000a07d18 R11: fffff52000140fa5 R12: ffffc90000a08200 [ 457.323513][ C1] R13: ffffc90000a07d18 R14: ffffc90000a07cc8 R15: 1ffffffff2173de2 [ 457.331508][ C1] FS: 0000000000000000(0000) GS:ffff888125d1c000(0000) knlGS:0000000000000000 [ 457.340452][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 457.347052][ C1] CR2: 000020000024a030 CR3: 000000003276c000 CR4: 00000000003526f0 [ 457.355051][ C1] Call Trace: [ 457.358348][ C1] [ 457.361225][ C1] ? unwind_next_frame+0xa5/0x2390 [ 457.366374][ C1] ? consume_skb+0x60/0xf0 [ 457.370917][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 457.377273][ C1] arch_stack_walk+0x11c/0x150 [ 457.382069][ C1] ? nft_synproxy_eval_v4+0x376/0x560 [ 457.387467][ C1] stack_trace_save+0x9c/0xe0 [ 457.392256][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 457.397653][ C1] ? __asan_memset+0x22/0x50 [ 457.402278][ C1] kasan_save_stack+0x3e/0x60 [ 457.407074][ C1] ? kasan_save_stack+0x3e/0x60 [ 457.411951][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 457.417347][ C1] ? call_rcu+0x157/0x9c0 [ 457.421694][ C1] ? skb_release_head_state+0x71/0x250 [ 457.427184][ C1] ? consume_skb+0x60/0xf0 [ 457.431686][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 457.436996][ C1] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 457.442394][ C1] call_rcu+0x157/0x9c0 [ 457.446591][ C1] ? rcuref_put+0x1b7/0x210 [ 457.451113][ C1] ? __pfx_call_rcu+0x10/0x10 [ 457.455816][ C1] ? percpu_counter_add_batch+0xea/0x1e0 [ 457.461482][ C1] ? dst_release+0x126/0x1b0 [ 457.466088][ C1] skb_release_head_state+0x71/0x250 [ 457.471398][ C1] consume_skb+0x60/0xf0 [ 457.475670][ C1] nft_synproxy_eval_v4+0x376/0x560 [ 457.480908][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 457.486748][ C1] ? nf_ip_checksum+0x13c/0x510 [ 457.491650][ C1] nft_synproxy_do_eval+0x345/0x570 [ 457.496900][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 457.502761][ C1] nft_do_chain+0x40c/0x1920 [ 457.507404][ C1] ? unwind_next_frame+0xa5/0x2390 [ 457.512560][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 457.517636][ C1] ? common_startup_64+0x13e/0x147 [ 457.522792][ C1] ? stack_trace_save+0x9c/0xe0 [ 457.527697][ C1] nft_do_chain_inet+0x25d/0x340 [ 457.532668][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 457.538241][ C1] ? __lock_acquire+0xab9/0xd20 [ 457.543152][ C1] ? NF_HOOK+0x9a/0x3a0 [ 457.547349][ C1] ? NF_HOOK+0x9a/0x3a0 [ 457.551531][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 457.557045][ C1] nf_hook_slow+0xc2/0x220 [ 457.561614][ C1] NF_HOOK+0x206/0x3a0 [ 457.565806][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 457.571817][ C1] ? NF_HOOK+0x9a/0x3a0 [ 457.576001][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 457.580624][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 457.585944][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 457.591960][ C1] ? skb_dst+0x4f/0xd0 [ 457.596065][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 457.601127][ C1] NF_HOOK+0x30c/0x3a0 [ 457.605223][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 457.610445][ C1] ? NF_HOOK+0x9a/0x3a0 [ 457.614626][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 457.619287][ C1] ? ip_rcv_core+0x7f7/0xd00 [ 457.623920][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 457.629077][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 457.633609][ C1] __netif_receive_skb+0x143/0x380 [ 457.638746][ C1] ? process_backlog+0x2d5/0x14f0 [ 457.643808][ C1] process_backlog+0x60e/0x14f0 [ 457.648728][ C1] ? __pfx_process_backlog+0x10/0x10 [ 457.654062][ C1] __napi_poll+0xc7/0x360 [ 457.658603][ C1] ? net_rx_action+0x46d/0xe30 [ 457.663398][ C1] net_rx_action+0x707/0xe30 [ 457.668040][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 457.673249][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 457.678486][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 457.683916][ C1] handle_softirqs+0x283/0x870 [ 457.688710][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 457.693502][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 457.698824][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 457.704059][ C1] __irq_exit_rcu+0xca/0x1f0 [ 457.708679][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 457.713904][ C1] irq_exit_rcu+0x9/0x30 [ 457.718167][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 457.723859][ C1] [ 457.726808][ C1] [ 457.729755][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 457.735762][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 457.741504][ C1] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 f7 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 457.761134][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 457.767233][ C1] RAX: 351bd0b878f87000 RBX: ffffffff81968308 RCX: 351bd0b878f87000 [ 457.775233][ C1] RDX: 0000000000000001 RSI: ffffffff8d9b6d6c RDI: ffffffff8be33380 [ 457.783227][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 457.791223][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fa37e30 [ 457.799214][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d5b40 [ 457.807239][ C1] ? do_idle+0x1e8/0x510 [ 457.811632][ C1] default_idle+0x13/0x20 [ 457.816096][ C1] default_idle_call+0x74/0xb0 [ 457.820889][ C1] do_idle+0x1e8/0x510 [ 457.824992][ C1] ? __pfx_do_idle+0x10/0x10 [ 457.829624][ C1] cpu_startup_entry+0x44/0x60 [ 457.834412][ C1] start_secondary+0x101/0x110 [ 457.839205][ C1] common_startup_64+0x13e/0x147 [ 457.844195][ C1] [ 458.374264][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 458.396841][ T1302] ieee802154 phy1 wpan1: encryption failed: -22