last executing test programs: 31m41.398267473s ago: executing program 2 (id=396): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) close(r2) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) sendmsg$NL80211_CMD_TESTMODE(r3, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000000700)=ANY=[@ANYBLOB="fc220000", @ANYRES16=0x0, @ANYBLOB="00012abd32725f747770e3fddbdf252d0b00", @ANYRES32, @ANYBLOB="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"], 0x22fc}, 0x1, 0x0, 0x0, 0xb9f3911cb1df809}, 0x8000) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) 31m40.994627363s ago: executing program 2 (id=399): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x31, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x4, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x7ffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 31m39.060618133s ago: executing program 2 (id=404): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x20, r6, 0x1, 0x0, 0x1000000, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 31m38.64713987s ago: executing program 2 (id=405): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000003c0)='./file0/file0\x00', 0x8) dup(r0) 31m37.417010276s ago: executing program 2 (id=412): open(&(0x7f0000000180)='.\x00', 0x0, 0xa0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xfffffffd}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0x10000, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x2, r2, 0x0, 0x0, 0x0, 0x80800}) listen(r2, 0x5) io_uring_enter(r3, 0x3517, 0xc2de, 0x9, 0x0, 0x0) 31m36.764181541s ago: executing program 2 (id=413): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @sack_perm, @window={0x3, 0x9, 0x2}, @mss={0x2, 0x400}, @mss={0x2, 0xcb2}, @mss={0x2, 0x3}, @timestamp, @sack_perm], 0x26) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000006c0)="4c0f742e9cb62dffba72a942ab132eee4537258721e7c2166a42ab1efd9851930e1f0552e074037a77fccb6368860d24145db745edb5fb0b030f3dc03e5bde6a9b1dcea779e6095f0108d3b32f2e38e659fbdb0dd1e40217", 0x58, 0x440dc, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x22, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000200)="184cbb4872cd7c19f8eabb1e8b1925204fda59f540e5c81f769b094a63077cc251012d314d2342669e45d8714c5d0ac8b61296ccd48a720e0dcf762194d296e2c659010071ce5b55e8c960e2f05345f074d75fdc5b99f965", 0x58, 0x410c1, 0x0, 0x0) 31m35.865777507s ago: executing program 32 (id=413): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @sack_perm, @window={0x3, 0x9, 0x2}, @mss={0x2, 0x400}, @mss={0x2, 0xcb2}, @mss={0x2, 0x3}, @timestamp, @sack_perm], 0x26) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000006c0)="4c0f742e9cb62dffba72a942ab132eee4537258721e7c2166a42ab1efd9851930e1f0552e074037a77fccb6368860d24145db745edb5fb0b030f3dc03e5bde6a9b1dcea779e6095f0108d3b32f2e38e659fbdb0dd1e40217", 0x58, 0x440dc, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x22, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000200)="184cbb4872cd7c19f8eabb1e8b1925204fda59f540e5c81f769b094a63077cc251012d314d2342669e45d8714c5d0ac8b61296ccd48a720e0dcf762194d296e2c659010071ce5b55e8c960e2f05345f074d75fdc5b99f965", 0x58, 0x410c1, 0x0, 0x0) 30m23.621311904s ago: executing program 0 (id=667): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpgid(0x0) sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f00000097c0)={0xffff1000, 0x11b000, 0x8}) 30m21.619036132s ago: executing program 0 (id=672): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x4000000, r3}, 0x10) 30m21.322057703s ago: executing program 0 (id=673): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x203) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f0000000240)=[{0xff00, 0xa210, 0x0, 0x0}], 0x1}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 30m16.619417062s ago: executing program 0 (id=682): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r3, r3, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 30m15.646221929s ago: executing program 0 (id=686): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x13, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000e879103000000000007b0a00ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) 30m14.233237743s ago: executing program 0 (id=691): socket(0x10, 0x3, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x639) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/sync_on_suspend', 0x1e9a21, 0x20) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, 0x0) r3 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000001180)={{0x3, 0x2, 0x80000002, 0x100, 'syz1\x00', 0xffffffff}, 0x0, [0x6ba74c59, 0x85, 0xf, 0x1, 0x9, 0x6, 0x5, 0xdb, 0x0, 0xf0, 0x3, 0x5, 0x8001, 0xfffffffffffffffb, 0x4, 0x2938, 0x100, 0xfffffffffffffff8, 0xfffffffffffffff9, 0xfffffffffffffffb, 0x6, 0x9025, 0x5, 0x5, 0x7, 0x100000001, 0x40, 0x9, 0x9, 0x2, 0x100, 0xa, 0xb, 0x1a7427c9, 0x7, 0x8, 0x7, 0x1ff, 0x5, 0x10001, 0xffffffff, 0xffffffffffffff3f, 0x800, 0x9, 0xe4e, 0xffffffffffffffff, 0x6, 0xff, 0x659, 0x5, 0xfff, 0x2, 0xffff, 0xffffffffffffff53, 0x0, 0x101, 0x7f, 0x4, 0x9, 0x10, 0x2, 0xd1c, 0x80000001, 0x9, 0x8001, 0x0, 0x1, 0xfffffffffffff3a0, 0x4, 0x4, 0x4, 0x1, 0x9, 0xe5, 0xfa0, 0x9, 0x1, 0x401, 0x8, 0x7fffffffffffffff, 0x101, 0xffffffffffffff2f, 0xe, 0x4, 0x4040000, 0xffffffff, 0x5, 0x7, 0x5, 0x1ff, 0x9, 0x4, 0x100, 0x5, 0x7, 0x1000, 0x7, 0xfffffffffffffff9, 0x6, 0x5, 0x3, 0x4, 0x9, 0x27ee, 0x0, 0x0, 0x0, 0x4, 0x6, 0x8, 0x6, 0x8000000000000001, 0x90, 0xd27, 0x0, 0x4, 0x3ff, 0x3, 0x9, 0x87, 0x80, 0x3, 0x2, 0x2c, 0xa, 0x1, 0x1, 0x8]}) 30m13.530022925s ago: executing program 33 (id=691): socket(0x10, 0x3, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x639) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/sync_on_suspend', 0x1e9a21, 0x20) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, 0x0) r3 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000001180)={{0x3, 0x2, 0x80000002, 0x100, 'syz1\x00', 0xffffffff}, 0x0, [0x6ba74c59, 0x85, 0xf, 0x1, 0x9, 0x6, 0x5, 0xdb, 0x0, 0xf0, 0x3, 0x5, 0x8001, 0xfffffffffffffffb, 0x4, 0x2938, 0x100, 0xfffffffffffffff8, 0xfffffffffffffff9, 0xfffffffffffffffb, 0x6, 0x9025, 0x5, 0x5, 0x7, 0x100000001, 0x40, 0x9, 0x9, 0x2, 0x100, 0xa, 0xb, 0x1a7427c9, 0x7, 0x8, 0x7, 0x1ff, 0x5, 0x10001, 0xffffffff, 0xffffffffffffff3f, 0x800, 0x9, 0xe4e, 0xffffffffffffffff, 0x6, 0xff, 0x659, 0x5, 0xfff, 0x2, 0xffff, 0xffffffffffffff53, 0x0, 0x101, 0x7f, 0x4, 0x9, 0x10, 0x2, 0xd1c, 0x80000001, 0x9, 0x8001, 0x0, 0x1, 0xfffffffffffff3a0, 0x4, 0x4, 0x4, 0x1, 0x9, 0xe5, 0xfa0, 0x9, 0x1, 0x401, 0x8, 0x7fffffffffffffff, 0x101, 0xffffffffffffff2f, 0xe, 0x4, 0x4040000, 0xffffffff, 0x5, 0x7, 0x5, 0x1ff, 0x9, 0x4, 0x100, 0x5, 0x7, 0x1000, 0x7, 0xfffffffffffffff9, 0x6, 0x5, 0x3, 0x4, 0x9, 0x27ee, 0x0, 0x0, 0x0, 0x4, 0x6, 0x8, 0x6, 0x8000000000000001, 0x90, 0xd27, 0x0, 0x4, 0x3ff, 0x3, 0x9, 0x87, 0x80, 0x3, 0x2, 0x2c, 0xa, 0x1, 0x1, 0x8]}) 17.593190479s ago: executing program 6 (id=5386): socket$igmp(0x2, 0x3, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509a914"], 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0xf, 0x9, 0xfa11, 0xffefffff}, 0x0) connect$unix(r3, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x20000011) read(r5, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 10.953418264s ago: executing program 6 (id=5434): socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6(0xa, 0x3, 0x3c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a32000000001400000011"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004043554d00000000000001090224000100003000090410907f03000000092100000001220a000905810300"], 0x0) unshare(0x24060400) r4 = syz_io_uring_setup(0x1714, &(0x7f0000002040)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2c, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}}) io_uring_enter(r4, 0x27e2, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x14, 0x6000, @fd, 0x0, 0x20000003, 0x8020, 0x0, 0x1, {0x2}}) r7 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000}, 0x1c) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10.872895568s ago: executing program 1 (id=5435): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x28, 0xfffd, 0x4000, 0x1, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x2, 0x0, 0x0, 0x43f6}}}}}}, 0x0) 10.86687758s ago: executing program 1 (id=5436): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000200)={0x20, 0x15, 0x7, "c33af5c6742701"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x5}, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_kvm_add_vcpu$x86(0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 8.689647098s ago: executing program 1 (id=5448): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) 8.16946921s ago: executing program 1 (id=5450): socket$igmp(0x2, 0x3, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509a914"], 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0xf, 0x9, 0xfa11, 0xffefffff}, 0x0) connect$unix(r3, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) socket$nl_route(0x10, 0x3, 0x0) read(r5, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 6.85607533s ago: executing program 3 (id=5452): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000440)="0b01feff0000021200ad202bab40300088ca1a00000000000000", 0x1a, 0x20000002, &(0x7f0000000080)={0x11, 0xf8, r2}, 0x14) 6.725167038s ago: executing program 3 (id=5453): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x38, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0xfffd]}}]}]}]}, 0x38}}, 0x0) 6.47009548s ago: executing program 3 (id=5454): syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509a914"], 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) read(r2, 0x0, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc040ff0b, &(0x7f0000000180)) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xff, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x80a0000, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xdddd0000, 0xdddd1000, 0x10, 0x3, 0x0, 0x7, 0x4, 0x1, 0x7d, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x3, 0xd, 0x6, 0x3, 0x4f, 0x1}, {0x100000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0x5, 0x6, 0x5, 0x7f, 0x2e, 0x4b}, {0xa2000, 0x8000000, 0xb, 0x6, 0x3, 0x6e, 0x1, 0xff, 0xc, 0x90, 0x1, 0xfa}, {0x8000000, 0x4000, 0x8, 0x4, 0x3, 0x5, 0x0, 0xa, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x7b, 0x2, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x1}, 0x0, 0x0, 0x4000, 0x300, 0x5, 0x3000, 0xe6e78c00, [0x0, 0x401, 0x7, 0xc5]}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x54, r8, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1c, 0x6a}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffeff}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3d8}]]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4004001) syz_open_dev$video(&(0x7f00000000c0), 0x1, 0x20080) syz_io_uring_setup(0x266a, &(0x7f0000000540)={0x0, 0x8693, 0x40, 0x0, 0x3d3, 0x0, r0}, &(0x7f00000005c0), &(0x7f0000000600)=0x0) syz_io_uring_submit(0x0, r9, &(0x7f0000000640)=@IORING_OP_FALLOCATE={0x11, 0x48, 0x0, @fd=r3, 0x1, 0x0, 0xd, 0x0, 0x1}) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x85b, 0x0, 0x8}]}) 4.524654928s ago: executing program 4 (id=5461): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=', @ANYBLOB=',g', @ANYRESDEC=0x0]) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000004100)={0x2020}, 0x2020) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="2400000016000d190a762d7f08", 0xd}, {0x0}], 0x2}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) fadvise64(r5, 0x400, 0x4, 0x1) socket$inet_udp(0x2, 0x2, 0x0) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400", @ANYRES32, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'caif0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r8, 0x1, 0x1000, 0x0, {0x2a}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x20}, 0x1, 0x30000, 0x0, 0x40040}, 0x0) 3.881226997s ago: executing program 5 (id=5464): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x51a23}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048071}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a"], 0x4c}}, 0x0) 3.877988449s ago: executing program 1 (id=5465): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2e) r3 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/kcm\x00') lseek(r4, 0x92, 0x1) write$tun(r4, &(0x7f00000006c0)={@void, @void, @ipv4=@dccp={{0x38, 0x4, 0x3, 0x21, 0x1ca, 0x64, 0x0, 0x8e, 0x21, 0x0, @private=0xa010101, @broadcast, {[@rr={0x7, 0x1b, 0xde, [@dev={0xac, 0x14, 0x14, 0x1b}, @multicast1, @rand_addr=0x64010102, @multicast1, @loopback, @local]}, @noop, @timestamp_prespec={0x44, 0x24, 0x50, 0x3, 0xf, [{@private=0xa010100, 0x7}, {@remote, 0x80000001}, {@rand_addr=0x64010101, 0x200}, {@broadcast, 0x7}]}, @cipso={0x86, 0x59, 0x0, [{0x1, 0x4, "00ea"}, {0x0, 0xf, "95099f3f5cf31c033688e8fa12"}, {0x0, 0xc, "96970acf14d42e586e35"}, {0x1, 0x7, "56ee0a6b5e"}, {0x2, 0xf, "10fff742a64cb93992d622a7d9"}, {0x5, 0x5, "45f343"}, {0x0, 0x7, "eaf9133195"}, {0x0, 0xc, "6606d3293c1df6ce02a0"}, {0x1, 0x6, "b94b27a3"}]}, @cipso={0x86, 0x30, 0x2, [{0x0, 0x6, "a0374686"}, {0x0, 0x2}, {0x5, 0x9, "8b791a526a4501"}, {0x7, 0x2}, {0x1, 0x7, "6c5846f5ff"}, {0x7, 0x4, "8d55"}, {0x1, 0xc, "556c28f58ff4bc156d50"}]}]}}, {{0x4e24, 0x4e20, 0x4, 0x1, 0xa, 0x0, 0x0, 0x0, 0x6, "aa3ebf", 0x92, "74b0f4"}, "3f5246f59e067f9a1d3c8d5fafbd027eee7596450b6fe173e4fb8ada81b5e76b37fdf9de9b30e3a759f5ea0cb16dc6ee2579e3764ea2a326386bf8d446265c88d7c192b50b7b8365cbc5a977720e98fbb74c0660ddd0407d2b85e38a5fdc5d1a08f4dd336f209f1b7dff1fc33aadd4597c0a948f8e96542864af1c75e3c08fa063fd83187be4af4567f126d2d308c1d4fec3ac40187bed83fefc603495e4792becb343abd62580b5c561dc199ddaf13452318d92f8b555f84ac2c4ec1de432f3ed17c74c95dc9b8e029a1d253aa1d6e5b551f2a84331438e42c3"}}}, 0x1ca) r5 = fsmount(r3, 0x0, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, &(0x7f0000000040)=0x6e) openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@fallback, 0xffffffffffffffff, 0x2a}, 0x20) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="b8000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000fffffffffeffffff0000800000200000fcffffffffffffff0000000000000000000a000000000000040000000000000002e3b5000000000800000000000000000101"], 0xb8}}, 0x4) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x7a, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}}, 0xb8}}, 0x8044) sendto$inet6(r6, &(0x7f0000000000)="c8", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x3f) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, 0x0, 0x8811) 3.810641063s ago: executing program 5 (id=5466): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x2000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000680)) 3.78267497s ago: executing program 6 (id=5467): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000840)='{', 0x1}], 0x1}, 0x20048843) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x2, [0x4, 0x0]}, 0x8) 3.64892505s ago: executing program 6 (id=5468): socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a32000000001400000011"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004043554d00000000000001090224000100003000090410907f03000000092100000001220a000905810300"], 0x0) unshare(0x24060400) r5 = syz_io_uring_setup(0x1714, &(0x7f0000002040)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2c, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}}) io_uring_enter(r5, 0x27e2, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000380)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="20210b0000000b0d186bb32a8969a6360d844d0f92e5033a33841dad51ed73d54470d48feb2a46009c6ce9d46e1938510e4e56e7a3e5933569"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x20000810) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x14, 0x6000, @fd, 0x0, 0x20000003, 0x8020, 0x0, 0x1, {0x2}}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r9 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000}, 0x1c) r10 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r10, 0xc02c564a, &(0x7f0000000100)={0x7, 0x32315659, 0x2, @stepwise={0x0, 0x2, 0x7, 0x0, 0x40000000, 0x5}}) 2.945459789s ago: executing program 5 (id=5469): ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x3, 0xff, 0x34324152, 0x7, 0xa, [{0x419, 0x9}, {0xfffffff9}, {0x3ff, 0x8}, {0x5, 0x4aa}, {0x1}, {0xfffffffb, 0x8e}, {0x1, 0x8}, {0xf, 0x4}], 0x3, 0x3, 0x3, 0x2}}) personality(0x619641b6fb4b8591) uname(0x0) 2.866362019s ago: executing program 4 (id=5470): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f00000005c0)={0x20, 0x10, 0x4, "7c103142"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000680)={0x0, 0x15, 0x4, "aef2ce1d"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.67300783s ago: executing program 5 (id=5471): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) read$char_usb(r1, 0x0, 0x0) 2.601135606s ago: executing program 3 (id=5472): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r3, 0x1) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000280)={0x2, r0}) 2.238209616s ago: executing program 1 (id=5473): socket$igmp(0x2, 0x3, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509a914"], 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0xf, 0x9, 0xfa11, 0xffefffff}, 0x0) connect$unix(r3, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x20000011) read(r5, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2.078560805s ago: executing program 4 (id=5474): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) socket$inet6(0xa, 0x2, 0x0) unshare(0x2a020400) inotify_init() pselect6(0x40, &(0x7f0000000100)={0x7, 0x5, 0xf, 0x447, 0x3ff, 0x7, 0x0, 0x80}, &(0x7f00000000c0)={0x38, 0x400000000d, 0xffff, 0x7, 0x3ff, 0x9, 0x9, 0x1}, 0x0, 0x0, 0x0) 1.73800228s ago: executing program 5 (id=5475): socket$igmp(0x2, 0x3, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509a914"], 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0xf, 0x9, 0xfa11, 0xffefffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) socket$nl_route(0x10, 0x3, 0x0) read(r3, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 1.368836713s ago: executing program 4 (id=5476): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x2e8}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 687.104211ms ago: executing program 5 (id=5477): socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6(0xa, 0x3, 0x3c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a32000000001400000011"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004043554d00000000000001090224000100003000090410907f03000000092100000001220a000905810300"], 0x0) unshare(0x24060400) r3 = syz_io_uring_setup(0x1714, &(0x7f0000002040)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2c, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}}) io_uring_enter(r3, 0x27e2, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x14, 0x6000, @fd, 0x0, 0x20000003, 0x8020, 0x0, 0x1, {0x2}}) r6 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000}, 0x1c) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 593.336941ms ago: executing program 4 (id=5478): mkdir(&(0x7f0000000000)='./cgroup/../file0/file0/file0\x00', 0x116) r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12) 302.365507ms ago: executing program 6 (id=5479): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x1}}]}, 0x38}}, 0x0) 302.232598ms ago: executing program 4 (id=5480): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x18, &(0x7f0000000400)=@req3={0xc, 0x47, 0x8004, 0x4, 0x3, 0xffffffff, 0xfffe0}, 0x1c) recvmmsg(r0, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f00000019c0)=""/4096, 0x1000}], 0x1}, 0x9}], 0x1, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) 260.051832ms ago: executing program 3 (id=5481): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="20f6c734e3d81107", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000200), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000380)="b1", 0xffe0, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 50.573281ms ago: executing program 6 (id=5482): socket(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x50, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 0s ago: executing program 3 (id=5483): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2e) r3 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/kcm\x00') lseek(r4, 0x92, 0x1) write$tun(r4, &(0x7f00000006c0)={@void, @void, @ipv4=@dccp={{0x38, 0x4, 0x3, 0x21, 0x1ca, 0x64, 0x0, 0x8e, 0x21, 0x0, @private=0xa010101, @broadcast, {[@rr={0x7, 0x1b, 0xde, [@dev={0xac, 0x14, 0x14, 0x1b}, @multicast1, @rand_addr=0x64010102, @multicast1, @loopback, @local]}, @noop, @timestamp_prespec={0x44, 0x24, 0x50, 0x3, 0xf, [{@private=0xa010100, 0x7}, {@remote, 0x80000001}, {@rand_addr=0x64010101, 0x200}, {@broadcast, 0x7}]}, @cipso={0x86, 0x59, 0x0, [{0x1, 0x4, "00ea"}, {0x0, 0xf, "95099f3f5cf31c033688e8fa12"}, {0x0, 0xc, "96970acf14d42e586e35"}, {0x1, 0x7, "56ee0a6b5e"}, {0x2, 0xf, "10fff742a64cb93992d622a7d9"}, {0x5, 0x5, "45f343"}, {0x0, 0x7, "eaf9133195"}, {0x0, 0xc, "6606d3293c1df6ce02a0"}, {0x1, 0x6, "b94b27a3"}]}, @cipso={0x86, 0x30, 0x2, [{0x0, 0x6, "a0374686"}, {0x0, 0x2}, {0x5, 0x9, "8b791a526a4501"}, {0x7, 0x2}, {0x1, 0x7, "6c5846f5ff"}, {0x7, 0x4, "8d55"}, {0x1, 0xc, "556c28f58ff4bc156d50"}]}]}}, {{0x4e24, 0x4e20, 0x4, 0x1, 0xa, 0x0, 0x0, 0x0, 0x6, "aa3ebf", 0x92, "74b0f4"}, "3f5246f59e067f9a1d3c8d5fafbd027eee7596450b6fe173e4fb8ada81b5e76b37fdf9de9b30e3a759f5ea0cb16dc6ee2579e3764ea2a326386bf8d446265c88d7c192b50b7b8365cbc5a977720e98fbb74c0660ddd0407d2b85e38a5fdc5d1a08f4dd336f209f1b7dff1fc33aadd4597c0a948f8e96542864af1c75e3c08fa063fd83187be4af4567f126d2d308c1d4fec3ac40187bed83fefc603495e4792becb343abd62580b5c561dc199ddaf13452318d92f8b555f84ac2c4ec1de432f3ed17c74c95dc9b8e029a1d253aa1d6e5b551f2a84331438e42c3"}}}, 0x1ca) r5 = fsmount(r3, 0x0, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, &(0x7f0000000040)=0x6e) openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@fallback, 0xffffffffffffffff, 0x2a}, 0x20) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="b8000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000fffffffffeffffff0000800000200000fcffffffffffffff0000000000000000000a000000000000040000000000000002e3b5000000000800000000000000000101"], 0xb8}}, 0x4) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x7a, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}}, 0xb8}}, 0x8044) sendto$inet6(r6, &(0x7f0000000000)="c8", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x3f) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, 0x0, 0x8811) kernel console output (not intermixed with test programs): audit(1770489669.013:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6716 comm="syz.6.4770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfe559aeb9 code=0x7ffc0000 [ 1885.402202][ T30] audit: type=1326 audit(1770489669.013:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6716 comm="syz.6.4770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbfe559aeb9 code=0x7ffc0000 [ 1885.425817][ T30] audit: type=1326 audit(1770489669.023:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6716 comm="syz.6.4770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfe559aeb9 code=0x7ffc0000 [ 1885.449324][ T30] audit: type=1326 audit(1770489669.023:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6716 comm="syz.6.4770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfe559aeb9 code=0x7ffc0000 [ 1885.472633][ T30] audit: type=1326 audit(1770489669.043:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6716 comm="syz.6.4770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbfe559aeb9 code=0x7ffc0000 [ 1885.495731][ T30] audit: type=1326 audit(1770489669.043:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6716 comm="syz.6.4770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfe559aeb9 code=0x7ffc0000 [ 1885.520049][T16658] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 1885.531434][T16658] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1885.541941][T16658] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1885.551409][T16658] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1885.566595][T16658] usb 2-1: Product: syz [ 1885.570778][T16658] usb 2-1: Manufacturer: syz [ 1885.579981][T16658] usb 2-1: SerialNumber: syz [ 1885.606866][T16658] usb 2-1: config 0 descriptor?? [ 1885.615233][T16658] usb 2-1: selecting invalid altsetting 0 [ 1885.801535][ T6729] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4770'. [ 1886.088505][ T6750] xt_HMARK: proto mask must be zero with L3 mode [ 1886.247471][ T5893] usb 42-1: device descriptor read/8, error -110 [ 1886.737970][ T5893] usb usb42-port1: attempt power cycle [ 1887.298720][ T5893] usb usb42-port1: unable to enumerate USB device [ 1887.528461][ T6795] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1887.947912][ T6798] input: syz1 as /devices/virtual/input/input73 [ 1888.545976][ T5893] usb 2-1: USB disconnect, device number 25 [ 1888.732548][ T6866] QAT: failed to copy from user cfg_data. [ 1890.376724][ T5908] usb 44-1: device descriptor read/8, error -110 [ 1890.456087][ T6888] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1890.525393][ T6888] overlayfs: missing 'lowerdir' [ 1890.767593][ T5908] usb usb44-port1: attempt power cycle [ 1890.846651][ T5893] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 1891.008732][ T5893] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 199, changing to 4 [ 1891.042955][ T5893] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 18452, setting to 1023 [ 1891.090439][ T5893] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1891.110708][ T5893] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1891.146858][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1891.175669][ T5893] usb 4-1: Product: syz [ 1891.225950][ T5893] usb 4-1: Manufacturer: syz [ 1891.236670][ T5893] usb 4-1: SerialNumber: syz [ 1891.251062][ T5893] usb 4-1: config 0 descriptor?? [ 1891.262633][ T5893] usb 4-1: selecting invalid altsetting 0 [ 1891.337583][ T5908] usb usb44-port1: unable to enumerate USB device [ 1891.777362][ T6921] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1891.783897][ T6921] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1891.874025][ T6921] vhci_hcd vhci_hcd.0: Device attached [ 1892.136811][ T5893] usb 44-1: SetAddress Request (19) to port 0 [ 1892.146227][ T5893] usb 44-1: new SuperSpeed USB device number 19 using vhci_hcd [ 1892.158450][ T6922] vhci_hcd: connection closed [ 1892.158820][ T2960] vhci_hcd vhci_hcd.5: stop threads [ 1892.169299][ T2960] vhci_hcd vhci_hcd.5: release socket [ 1892.174907][ T2960] vhci_hcd vhci_hcd.5: disconnect device [ 1892.346359][ T6936] x_tables: ip_tables: ipcomp match: only valid for protocol 108 [ 1893.741219][T29212] usb 4-1: USB disconnect, device number 4 [ 1894.853674][ T5908] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1895.061737][ T5908] usb 7-1: config 0 has no interfaces? [ 1895.088217][ T5908] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1895.127390][ T5908] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1895.176089][ T5908] usb 7-1: Product: syz [ 1895.191181][ T5908] usb 7-1: Manufacturer: syz [ 1895.217250][ T5908] usb 7-1: SerialNumber: syz [ 1895.243924][ T5908] usb 7-1: config 0 descriptor?? [ 1897.175115][ T7050] IPv6: NLM_F_CREATE should be specified when creating new route [ 1897.187313][ T5893] usb 44-1: device descriptor read/8, error -110 [ 1897.599115][ T7060] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1897.647556][ T5893] usb usb44-port1: attempt power cycle [ 1897.888716][ T7066] overlayfs: missing 'lowerdir' [ 1897.982361][T29212] usb 7-1: USB disconnect, device number 25 [ 1898.227576][ T5893] usb usb44-port1: unable to enumerate USB device [ 1898.447455][ T5893] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 1898.619145][ T5893] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 199, changing to 4 [ 1898.685672][ T5893] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 18452, setting to 1023 [ 1898.736474][ T5893] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1898.769965][ T5893] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1898.819242][ T5893] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1898.856505][ T5893] usb 7-1: Product: syz [ 1898.888004][ T5893] usb 7-1: Manufacturer: syz [ 1898.917664][ T5893] usb 7-1: SerialNumber: syz [ 1898.959824][ T5893] usb 7-1: config 0 descriptor?? [ 1898.992129][ T5893] usb 7-1: selecting invalid altsetting 0 [ 1901.155632][ T7130] vlan0: entered promiscuous mode [ 1901.166981][ T7130] bridge0: entered promiscuous mode [ 1901.639321][ T7144] xt_TCPMSS: Only works on TCP SYN packets [ 1901.968260][ T7144] sit3: entered allmulticast mode [ 1902.104642][ T5893] usb 7-1: USB disconnect, device number 26 [ 1902.876133][ T7174] netlink: 'syz.6.4810': attribute type 21 has an invalid length. [ 1902.887489][ T7174] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4810'. [ 1902.935511][ T7174] netlink: 'syz.6.4810': attribute type 5 has an invalid length. [ 1902.947347][ T7174] netlink: 3 bytes leftover after parsing attributes in process `syz.6.4810'. [ 1903.899186][ T7197] tipc: Resetting bearer [ 1904.200727][ T7197] ipip0: left promiscuous mode [ 1904.485689][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 1904.526448][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 1904.592762][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 1905.030171][ T7225] netlink: 'syz.4.4815': attribute type 1 has an invalid length. [ 1905.554944][ T7256] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4816'. [ 1905.912547][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 1905.912564][ T30] audit: type=1326 audit(1770489689.833:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7271 comm="syz.1.4818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511139aeb9 code=0x7ffc0000 [ 1906.107819][ T30] audit: type=1326 audit(1770489689.873:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7271 comm="syz.1.4818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511139aeb9 code=0x7ffc0000 [ 1906.233075][ T30] audit: type=1326 audit(1770489689.873:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7271 comm="syz.1.4818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f511139aeb9 code=0x7ffc0000 [ 1906.369792][ T30] audit: type=1326 audit(1770489689.873:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7271 comm="syz.1.4818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511139aeb9 code=0x7ffc0000 [ 1906.521220][ T30] audit: type=1326 audit(1770489689.873:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7271 comm="syz.1.4818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511139aeb9 code=0x7ffc0000 [ 1906.638123][ T30] audit: type=1326 audit(1770489689.883:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7271 comm="syz.1.4818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f511139aeb9 code=0x7ffc0000 [ 1906.778920][ T7228] macvlan2: entered promiscuous mode [ 1906.784393][ T7228] macvlan2: entered allmulticast mode [ 1906.798250][ T30] audit: type=1326 audit(1770489689.883:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7271 comm="syz.1.4818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511139aeb9 code=0x7ffc0000 [ 1906.807772][ T7228] bond6: entered promiscuous mode [ 1906.988374][ T30] audit: type=1326 audit(1770489689.883:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7271 comm="syz.1.4818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511139aeb9 code=0x7ffc0000 [ 1907.077648][ T7228] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1907.124232][ T30] audit: type=1326 audit(1770489689.883:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7271 comm="syz.1.4818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f511139aeb9 code=0x7ffc0000 [ 1907.205135][ T7228] bond6: left promiscuous mode [ 1907.276817][ T30] audit: type=1326 audit(1770489689.883:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7271 comm="syz.1.4818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511139aeb9 code=0x7ffc0000 [ 1907.876155][ T7318] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4820'. [ 1908.866659][ T7324] vlan0: entered promiscuous mode [ 1908.871747][ T7324] bridge0: entered promiscuous mode [ 1909.375478][ T7343] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 1909.900765][ T7349] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4825'. [ 1911.122166][ T7372] IPVS: set_ctl: invalid protocol: 92 224.0.0.1:20004 [ 1911.165063][ T7372] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1911.201967][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1911.254689][ T7372] program syz.5.4829 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1911.357697][ T7376] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4830'. [ 1912.851644][ T7392] netlink: 'syz.1.4832': attribute type 10 has an invalid length. [ 1912.863256][ T7401] netlink: 'syz.1.4832': attribute type 10 has an invalid length. [ 1912.981109][ T7392] team0: Port device dummy0 added [ 1913.051273][ T7401] team0: Port device dummy0 removed [ 1913.103630][ T7401] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1913.145245][ T7415] vlan0: entered promiscuous mode [ 1913.173889][ T7415] bridge0: entered promiscuous mode [ 1914.317461][T29212] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 1914.548551][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.549394][T29212] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 199, changing to 4 [ 1914.554935][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.615307][T29212] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 18452, setting to 1023 [ 1914.707680][T29212] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1914.728239][T29212] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1914.756500][T29212] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1914.815457][T29212] usb 7-1: Product: syz [ 1914.831247][T29212] usb 7-1: Manufacturer: syz [ 1914.848948][T29212] usb 7-1: SerialNumber: syz [ 1914.874689][T29212] usb 7-1: config 0 descriptor?? [ 1914.902961][T29212] usb 7-1: selecting invalid altsetting 0 [ 1915.170211][ T7464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1915.220901][ T7464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1916.156982][T29212] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1916.338698][T29212] usb 4-1: Using ep0 maxpacket: 16 [ 1916.356572][T29212] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1916.387038][T29212] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1916.433778][T29212] usb 4-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice= 0.00 [ 1916.467635][T29212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1916.498304][T29212] usb 4-1: config 0 descriptor?? [ 1916.607338][ T7484] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1916.613891][ T7484] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1916.626987][ T7484] vhci_hcd vhci_hcd.0: Device attached [ 1916.896641][ T5908] usb 36-1: SetAddress Request (22) to port 0 [ 1916.908801][ T7485] vhci_hcd: connection closed [ 1916.909388][ T2960] vhci_hcd vhci_hcd.1: stop threads [ 1916.913008][ T5908] usb 36-1: new SuperSpeed USB device number 22 using vhci_hcd [ 1916.966683][ T2960] vhci_hcd vhci_hcd.1: release socket [ 1916.979861][ T2960] vhci_hcd vhci_hcd.1: disconnect device [ 1917.273614][T16658] usb 7-1: USB disconnect, device number 27 [ 1917.939395][ T7516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1918.022918][ T7516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1919.116959][T16658] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1919.340811][T16658] usb 7-1: config 0 has an invalid interface number: 16 but max is 0 [ 1919.381387][T16658] usb 7-1: config 0 has no interface number 0 [ 1919.452311][T16658] usb 7-1: too many endpoints for config 0 interface 16 altsetting 144: 127, using maximum allowed: 30 [ 1919.507770][T16658] usb 7-1: config 0 interface 16 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1919.619158][T16658] usb 7-1: config 0 interface 16 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1919.649223][T16658] usb 7-1: config 0 interface 16 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 1919.704204][T16658] usb 7-1: config 0 interface 16 has no altsetting 0 [ 1919.761442][T16658] usb 7-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 1919.857601][T16658] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1919.935835][T16658] usb 7-1: config 0 descriptor?? [ 1920.940641][T16658] uclogic 0003:5543:004D.002A: interface is invalid, ignoring [ 1921.586121][T29212] usb 4-1: string descriptor 0 read error: -32 [ 1921.627360][T29212] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1921.987644][ T5908] usb 36-1: device descriptor read/8, error -110 [ 1922.349552][T16658] usb 7-1: USB disconnect, device number 28 [ 1922.402499][ T5908] usb usb36-port1: attempt power cycle [ 1922.828514][T16658] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 1922.840849][ T7602] fuse: Unknown parameter 'grˆ Rp_çSiid' [ 1923.009678][T16658] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 199, changing to 4 [ 1923.040421][T16658] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 18452, setting to 1023 [ 1923.081276][T16658] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1923.105347][T16658] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1923.127577][ T5908] usb usb36-port1: unable to enumerate USB device [ 1923.154456][T16658] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1923.187732][T16658] usb 7-1: Product: syz [ 1923.191905][T16658] usb 7-1: Manufacturer: syz [ 1923.228871][T16658] usb 7-1: SerialNumber: syz [ 1923.256810][T16658] usb 7-1: config 0 descriptor?? [ 1923.299808][T16658] usb 7-1: selecting invalid altsetting 0 [ 1924.112982][ T7630] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4853'. [ 1925.201014][ T7666] binder: BINDER_SET_CONTEXT_MGR already set [ 1925.207346][ T7666] binder: 7623:7666 ioctl 4018620d 2000000000c0 returned -16 [ 1925.281603][ T7671] binder: BINDER_SET_CONTEXT_MGR already set [ 1925.296881][ T7671] binder: 7623:7671 ioctl 4018620d 200000000040 returned -16 [ 1925.324597][ T7671] binder: 7623:7671 ioctl c0306201 200000000300 returned -11 [ 1925.831579][ T5893] usb 7-1: USB disconnect, device number 29 [ 1926.098977][ T7691] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1926.108972][ T7691] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1926.146293][ T7691] netlink: 'syz.6.4858': attribute type 2 has an invalid length. [ 1926.922297][ T7711] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1926.928848][ T7711] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1926.963020][ T7711] vhci_hcd vhci_hcd.0: Device attached [ 1927.197320][ T7712] vhci_hcd: connection closed [ 1927.201746][ T6902] vhci_hcd vhci_hcd.1: stop threads [ 1927.240764][ T6902] vhci_hcd vhci_hcd.1: release socket [ 1927.246694][T16658] usb 36-1: SetAddress Request (26) to port 0 [ 1927.246758][T16658] usb 36-1: new SuperSpeed USB device number 26 using vhci_hcd [ 1927.350131][ T6902] vhci_hcd vhci_hcd.1: disconnect device [ 1927.623762][ T7710] fuse: Unknown parameter 'L€Ð„µgroup_id' [ 1928.065478][ T7732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1928.131920][ T7732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1929.276654][ T5893] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1929.446683][ T5893] usb 2-1: Using ep0 maxpacket: 8 [ 1929.464502][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1929.518334][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1929.575181][ T5893] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1929.622460][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 1929.676892][ T5893] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1929.729307][ T5893] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1929.775281][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1929.837580][ T5893] usb 2-1: config 0 descriptor?? [ 1929.885531][ T7761] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1931.113857][ T7804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4868'. [ 1931.243869][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 1931.243910][ T30] audit: type=1400 audit(1770489715.163:1923): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="s" pid=7798 comm="syz.3.4868" [ 1932.056685][T23457] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1932.099995][T25627] usb 2-1: USB disconnect, device number 26 [ 1932.297386][T16658] usb 36-1: device descriptor read/8, error -110 [ 1932.662275][ T7832] netlink: 'syz.1.4870': attribute type 1 has an invalid length. [ 1932.737586][T16658] usb usb36-port1: attempt power cycle [ 1933.381423][ T7843] macvlan2: entered promiscuous mode [ 1933.394052][T16658] usb usb36-port1: unable to enumerate USB device [ 1933.411814][ T7843] macvlan2: entered allmulticast mode [ 1933.455101][ T7843] bond6: entered promiscuous mode [ 1933.496264][ T7843] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1933.546868][ T7843] bond6: left promiscuous mode [ 1935.984243][ T7842] Cannot find set identified by id 0 to match [ 1936.458593][ T7952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4877'. [ 1936.506473][ T7952] create_pit_timer: 1 callbacks suppressed [ 1936.506491][ T7952] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1936.543921][ T7957] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1936.552474][ T7957] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1936.575617][ T7952] ipvlan1: left allmulticast mode [ 1936.621670][ T7957] vhci_hcd vhci_hcd.0: Device attached [ 1936.717281][ T30] audit: type=1326 audit(1770489720.643:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7939 comm="syz.4.4877" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f94ed99aeb9 code=0x0 [ 1936.827382][ T7958] vhci_hcd: connection closed [ 1936.827665][ T7702] vhci_hcd vhci_hcd.1: stop threads [ 1936.845874][ T7702] vhci_hcd vhci_hcd.1: release socket [ 1936.867117][ T7702] vhci_hcd vhci_hcd.1: disconnect device [ 1936.916840][ T1799] usb 36-1: enqueue for inactive port 0 [ 1937.427034][ T1799] usb usb36-port1: attempt power cycle [ 1938.038034][ T1799] usb usb36-port1: unable to enumerate USB device [ 1938.137232][ T5893] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 1938.246646][ T7999] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4883'. [ 1938.310887][ T5893] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1938.340706][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1938.371864][ T5893] usb 2-1: Product: syz [ 1938.389169][ T5893] usb 2-1: Manufacturer: syz [ 1938.408616][ T5893] usb 2-1: SerialNumber: syz [ 1938.439728][ T5893] usb 2-1: config 0 descriptor?? [ 1938.464261][ T5893] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1939.353298][ T8007] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4880'. [ 1939.397266][ T8007] hsr_slave_0: left promiscuous mode [ 1939.444998][ T8007] hsr_slave_1: left promiscuous mode [ 1939.529180][ T8012] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4884'. [ 1939.646986][ T5893] gspca_stk1135: reg_w 0x3 err -110 [ 1939.669299][ T5893] gspca_stk1135: serial bus timeout: status=0x00 [ 1939.762047][ T5893] gspca_stk1135: Sensor write failed [ 1939.786843][ T5893] gspca_stk1135: serial bus timeout: status=0x00 [ 1939.863449][ T5893] gspca_stk1135: Sensor write failed [ 1939.896818][ T1799] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1940.006955][ T5893] gspca_stk1135: serial bus timeout: status=0x00 [ 1940.028209][ T5893] gspca_stk1135: Sensor read failed [ 1940.076947][ T1799] usb 7-1: Using ep0 maxpacket: 16 [ 1940.108915][ T5893] gspca_stk1135: serial bus timeout: status=0x00 [ 1940.111497][ T1799] usb 7-1: config 8 has an invalid interface number: 159 but max is 0 [ 1940.124783][ T1799] usb 7-1: config 8 has no interface number 0 [ 1940.132616][ T1799] usb 7-1: config 8 interface 159 has no altsetting 0 [ 1940.147919][ T1799] usb 7-1: New USB device found, idVendor=0c45, idProduct=612a, bcdDevice=29.9c [ 1940.160687][ T5893] gspca_stk1135: Sensor read failed [ 1940.166003][ T5893] gspca_stk1135: Detected sensor type unknown (0x0) [ 1940.178458][ T8034] fuse: Bad value for 'fd' [ 1940.195651][ T1799] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1940.214181][ T8035] veth1_to_bond: entered allmulticast mode [ 1940.226059][ T5893] gspca_stk1135: serial bus timeout: status=0x00 [ 1940.255413][ T5893] gspca_stk1135: Sensor read failed [ 1940.281016][ T5893] gspca_stk1135: serial bus timeout: status=0x00 [ 1940.304950][ T1799] usb 7-1: Product: syz [ 1940.309184][ T5893] gspca_stk1135: Sensor read failed [ 1940.309212][ T5893] gspca_stk1135: serial bus timeout: status=0x00 [ 1940.309223][ T5893] gspca_stk1135: Sensor write failed [ 1940.309243][ T5893] gspca_stk1135: serial bus timeout: status=0x00 [ 1940.396823][ T1799] usb 7-1: Manufacturer: syz [ 1940.404514][ T8038] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4885'. [ 1940.417913][ T1799] usb 7-1: SerialNumber: syz [ 1940.431518][ T5893] gspca_stk1135: Sensor write failed [ 1940.462890][ T5893] stk1135 2-1:0.0: probe with driver stk1135 failed with error -110 [ 1940.507828][ T8035] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4887'. [ 1941.623606][ T5893] usb 2-1: USB disconnect, device number 27 [ 1941.951382][ T8055] vlan0: entered promiscuous mode [ 1941.989662][ T8055] hsr_slave_1: entered promiscuous mode [ 1941.995719][ T8055] vlan0: entered allmulticast mode [ 1942.045259][ T8055] hsr_slave_1: entered allmulticast mode [ 1942.067228][ T8059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4888'. [ 1942.129000][ T8055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4888'. [ 1942.162500][ T8059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4888'. [ 1943.066368][ T8080] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1943.072939][ T8080] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1943.140899][ T8080] vhci_hcd vhci_hcd.0: Device attached [ 1943.208584][ T1799] gspca_main: sonixj-2.14.0 probing 0c45:612a [ 1943.269285][ T1799] gspca_sonixj: reg_w1 err -71 [ 1943.296831][ T1799] sonixj 7-1:8.159: probe with driver sonixj failed with error -71 [ 1943.417278][ T1799] usb 7-1: USB disconnect, device number 30 [ 1943.446788][ T5893] usb 42-1: SetAddress Request (23) to port 0 [ 1943.468792][ T5893] usb 42-1: new SuperSpeed USB device number 23 using vhci_hcd [ 1943.490098][ T8081] vhci_hcd: connection closed [ 1943.490411][ T7702] vhci_hcd vhci_hcd.4: stop threads [ 1943.554415][ T7702] vhci_hcd vhci_hcd.4: release socket [ 1943.584006][ T8096] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4891'. [ 1943.596703][ T7702] vhci_hcd vhci_hcd.4: disconnect device [ 1943.632366][ T8096] openvswitch: netlink: Flow actions attr not present in new flow. [ 1943.755914][ T8096] bridge1: entered promiscuous mode [ 1943.789914][ T8033] veth1_to_bond: left allmulticast mode [ 1943.823796][ T8097] netlink: 'syz.6.4891': attribute type 2 has an invalid length. [ 1943.897469][ T8096] netlink: 'syz.6.4891': attribute type 12 has an invalid length. [ 1945.589909][ T8124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1945.602335][ T8124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1946.860887][ T8151] fuse: Bad value for 'fd' [ 1946.882933][ T8151] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4899'. [ 1947.085200][ T8152] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4900'. [ 1947.535211][ T8174] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1948.618137][ T5893] usb 42-1: device descriptor read/8, error -110 [ 1948.786711][T25627] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1948.968963][T25627] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1949.028390][ T5893] usb usb42-port1: attempt power cycle [ 1949.037499][T25627] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1949.098700][T25627] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1949.173888][T25627] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1949.237166][ T8199] netlink: 'syz.5.4903': attribute type 1 has an invalid length. [ 1949.253989][ T8199] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4903'. [ 1949.263402][T25627] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1949.293161][T25627] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1949.350929][T25627] usb 7-1: config 0 descriptor?? [ 1949.407535][ T8222] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1949.414098][ T8222] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1949.487007][ T8222] vhci_hcd vhci_hcd.0: Device attached [ 1949.647734][ T5893] usb usb42-port1: unable to enumerate USB device [ 1949.735114][ T8223] vhci_hcd: connection closed [ 1949.737152][ T6906] vhci_hcd vhci_hcd.1: stop threads [ 1949.747399][T29212] usb 36-1: SetAddress Request (34) to port 0 [ 1949.753507][T29212] usb 36-1: new SuperSpeed USB device number 34 using vhci_hcd [ 1949.779367][ T6906] vhci_hcd vhci_hcd.1: release socket [ 1949.799134][ T6906] vhci_hcd vhci_hcd.1: disconnect device [ 1949.961880][T25627] plantronics 0003:047F:FFFF.002B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1950.518563][ T8245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1950.587790][ T8245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1950.699806][ T8245] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1950.806719][ T8252] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1951.437543][T25627] usb 7-1: reset high-speed USB device number 31 using dummy_hcd [ 1952.267608][ T5893] usb 7-1: USB disconnect, device number 31 [ 1953.642260][ T8331] fuse: Bad value for 'fd' [ 1953.693733][ T8331] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4913'. [ 1954.350024][ T8359] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1954.660416][ T8369] netlink: 'syz.3.4915': attribute type 4 has an invalid length. [ 1954.856805][T29212] usb 36-1: device descriptor read/8, error -110 [ 1954.927780][ T8374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1954.957822][ T8374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1955.267930][T29212] usb usb36-port1: attempt power cycle [ 1955.867969][T29212] usb usb36-port1: unable to enumerate USB device [ 1955.892114][ T8409] ptrace attach of "./syz-executor exec"[5843] was attempted by "./syz-executor exec"[8409] [ 1955.968686][ T8409] random: crng reseeded on system resumption [ 1957.295303][ T8429] netlink: 'syz.5.4920': attribute type 7 has an invalid length. [ 1957.657925][ T8434] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 1957.664469][ T8434] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1957.722086][ T8434] vhci_hcd vhci_hcd.0: Device attached [ 1957.859396][ T8436] vhci_hcd: connection closed [ 1957.862459][ T6902] vhci_hcd vhci_hcd.6: stop threads [ 1957.924035][ T6902] vhci_hcd vhci_hcd.6: release socket [ 1957.954554][ T6902] vhci_hcd vhci_hcd.6: disconnect device [ 1957.986686][T29212] usb 46-1: SetAddress Request (15) to port 0 [ 1957.999060][T29212] usb 46-1: new SuperSpeed USB device number 15 using vhci_hcd [ 1958.057513][T29212] usb 46-1: enqueue for inactive port 0 [ 1958.477554][T29212] usb usb46-port1: attempt power cycle [ 1959.076916][T29212] usb usb46-port1: unable to enumerate USB device [ 1959.316445][ T30] audit: type=1326 audit(1770489743.233:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8449 comm="syz.3.4923" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f92f8f9aeb9 code=0x0 [ 1959.418655][ T8459] bond7: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 1959.555167][ T8459] bond7 (unregistering): Released all slaves [ 1959.827960][ T1799] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1960.007577][ T8481] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4924'. [ 1960.057422][ T1799] usb 7-1: Using ep0 maxpacket: 8 [ 1960.081495][ T1799] usb 7-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1960.120829][ T1799] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1960.158022][ T8554] fuse: Bad value for 'fd' [ 1960.194446][ T1799] usb 7-1: Product: syz [ 1960.234526][ T1799] usb 7-1: Manufacturer: syz [ 1960.245988][ T1799] usb 7-1: SerialNumber: syz [ 1960.259608][ T1799] usb 7-1: config 0 descriptor?? [ 1960.342240][ T1799] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1960.351184][ T1799] pctv452e: pctv452e_power_ctrl: 1 [ 1960.351184][ T1799] [ 1960.366748][ T1799] usb 7-1: selecting invalid altsetting 3 [ 1960.372581][ T1799] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1960.372581][ T1799] [ 1960.397332][ T1799] dvb-usb: bulk message failed: -22 (5/0) [ 1960.404262][ T8554] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4926'. [ 1960.414832][ T1799] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1960.426276][ T8507] debugfs: '1ùà^!‚lü1Ü*ø$pOcÚÉ”ÎÜr$åG—•µt:‹u' already exists in 'ieee80211' [ 1960.437129][ T1799] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1960.447561][ T1799] usb 7-1: media controller created [ 1960.453524][ T1799] dvb-usb: bulk message failed: -22 (8/0) [ 1960.471222][ T1799] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 1960.490475][ T1799] dvb-usb: MAC address reading failed. [ 1960.510160][ T1799] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1960.704913][ T1799] DVB: Unable to find symbol stb0899_attach() [ 1960.711419][ T1799] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 1960.788049][ T1799] rc_core: IR keymap rc-tt-1500 not found [ 1960.798096][ T1799] Registered IR keymap rc-empty [ 1960.814402][ T1799] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 1960.859958][ T1799] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input76 [ 1960.874565][ T1799] dvb-usb: schedule remote query interval to 100 msecs. [ 1960.884670][ T1799] pctv452e: pctv452e_power_ctrl: 0 [ 1960.884670][ T1799] [ 1960.895269][ T1799] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 1960.991826][ T5908] dvb-usb: bulk message failed: -22 (4/0) [ 1961.015556][ T5908] dvb-usb: error -22 while querying for an remote control event. [ 1961.166840][ T5908] dvb-usb: bulk message failed: -22 (4/0) [ 1961.179902][ T5908] dvb-usb: error -22 while querying for an remote control event. [ 1961.320469][ T8589] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4929'. [ 1961.327779][ T5908] dvb-usb: bulk message failed: -22 (4/0) [ 1961.352037][ T5908] dvb-usb: error -22 while querying for an remote control event. [ 1961.506683][ T5908] dvb-usb: bulk message failed: -22 (4/0) [ 1961.514979][ T5908] dvb-usb: error -22 while querying for an remote control event. [ 1961.646981][ T5908] dvb-usb: bulk message failed: -22 (4/0) [ 1961.673960][ T5908] dvb-usb: error -22 while querying for an remote control event. [ 1961.725959][ T8597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1961.757894][ T8597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1961.825742][ T8597] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4930'. [ 1961.846680][ T5908] dvb-usb: bulk message failed: -22 (4/0) [ 1961.869225][ T5908] dvb-usb: error -22 while querying for an remote control event. [ 1961.998379][T16658] dvb-usb: bulk message failed: -22 (4/0) [ 1962.050387][T16658] dvb-usb: error -22 while querying for an remote control event. [ 1962.196692][ T5908] dvb-usb: bulk message failed: -22 (4/0) [ 1962.210798][ T5908] dvb-usb: error -22 while querying for an remote control event. [ 1962.377067][ T5908] dvb-usb: bulk message failed: -22 (4/0) [ 1962.406215][ T5908] dvb-usb: error -22 while querying for an remote control event. [ 1962.463473][ T8597] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1962.557146][T16658] dvb-usb: bulk message failed: -22 (4/0) [ 1962.598348][T16658] dvb-usb: error -22 while querying for an remote control event. [ 1962.705314][ T5908] usb 7-1: USB disconnect, device number 32 [ 1962.988603][ T8634] xt_hashlimit: max too large, truncated to 1048576 [ 1963.108771][ T5908] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1963.313119][ T8641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1963.335394][ T8641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1963.566617][ T5908] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1963.856721][ T5908] usb 7-1: Using ep0 maxpacket: 8 [ 1963.942715][ T5908] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1964.017748][ T5908] usb 7-1: config 4 interface 0 has no altsetting 0 [ 1964.101199][ T5908] usb 7-1: string descriptor 0 read error: -22 [ 1964.116860][ T5908] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1964.221131][ T5908] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1964.343756][ T5908] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1964.395222][ T5908] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1964.455471][ T5908] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1964.513298][ T5908] usb 7-1: media controller created [ 1964.583557][ T5908] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1964.784316][ T8677] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1964.847454][ T8677] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1964.896649][T29212] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1965.085658][T29212] usb 2-1: Using ep0 maxpacket: 16 [ 1965.117590][T29212] usb 2-1: config 0 has no interfaces? [ 1965.150707][T29212] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1965.216405][T29212] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1965.256331][T29212] usb 2-1: Manufacturer: syz [ 1965.293728][ T8745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1965.328839][T29212] usb 2-1: config 0 descriptor?? [ 1965.362571][ T8745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1966.264877][ T5908] usb 7-1: USB disconnect, device number 33 [ 1966.581342][ T8784] fuse: Bad value for 'fd' [ 1966.662456][ T8789] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4938'. [ 1967.308035][ T8790] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4939'. [ 1967.338753][ T8228] usb 2-1: USB disconnect, device number 28 [ 1967.969028][ T8228] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1968.111616][ T8835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1968.130113][ T8228] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1968.140887][ T8835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1968.150033][ T8228] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1968.169695][ T8228] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1968.187968][ T8228] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1968.207239][ T8228] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1968.252144][ T8228] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1968.268035][ T8228] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1968.280425][ T8228] usb 7-1: Product: syz [ 1968.284933][ T8228] usb 7-1: Manufacturer: syz [ 1968.302900][ T8228] cdc_wdm 7-1:1.0: skipping garbage [ 1968.310795][ T8228] cdc_wdm 7-1:1.0: skipping garbage [ 1968.323791][ T8228] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1968.332228][ T8228] cdc_wdm 7-1:1.0: Unknown control protocol [ 1968.427659][ T8846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1968.437892][ T8846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1968.575517][ C1] wdm_int_callback: 1225 callbacks suppressed [ 1968.575543][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1968.588196][ C1] wdm_int_callback: 1225 callbacks suppressed [ 1968.588232][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1968.601216][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1968.607823][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1968.614101][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1968.620687][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1968.627859][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1968.634486][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1968.641027][T16658] usb 7-1: USB disconnect, device number 34 [ 1968.647105][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1968.647120][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1968.647130][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1968.885398][ T8863] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1968.944927][ T8863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1968.987056][ T8863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1969.390849][ T8878] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4947'. [ 1969.420135][ T8878] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4947'. [ 1969.940487][ T8893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1969.981683][ T8893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1970.176608][ T5908] usb 5-1: reset high-speed USB device number 75 using dummy_hcd [ 1970.864678][ T8904] fuse: Bad value for 'fd' [ 1971.036452][ T8910] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4952'. [ 1971.048706][ T8911] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4953'. [ 1971.128875][ T8900] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4950'. [ 1971.211928][ T8900] bond0: entered promiscuous mode [ 1971.226440][ T8900] bond_slave_0: entered promiscuous mode [ 1971.251015][ T8900] bond_slave_1: entered promiscuous mode [ 1971.280064][ T8900] geneve0: entered promiscuous mode [ 1971.291943][ T8900] hsr1: entered promiscuous mode [ 1971.558033][ T8922] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1971.958759][ T8909] IPVS: length: 149 != 17667290688 [ 1972.160482][ T8929] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 1972.359257][ T8228] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1972.385522][ T8943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1972.459749][ T8944] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1972.486868][ T8943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1972.495822][ T8952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1972.520042][ T8952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1972.528584][ T8228] usb 2-1: Using ep0 maxpacket: 8 [ 1972.554524][ T8228] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1972.616440][ T8228] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1972.634345][ T8228] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1972.647868][ T8228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1972.676752][ T8228] usb 2-1: Product: syz [ 1972.691440][ T8228] usb 2-1: Manufacturer: syz [ 1972.696060][ T8228] usb 2-1: SerialNumber: syz [ 1972.903757][ T8967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1972.912485][T29212] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1972.929747][ T8228] usb 2-1: 0:2 : does not exist [ 1972.935241][ T8967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1972.963296][ T8228] usb 2-1: USB disconnect, device number 29 [ 1972.999015][ T7311] udevd[7311]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1973.097368][T29212] usb 7-1: Using ep0 maxpacket: 16 [ 1973.099415][T29212] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1973.100359][T29212] usb 7-1: config 13 has an invalid interface number: 50 but max is 0 [ 1973.100383][T29212] usb 7-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 1973.100401][T29212] usb 7-1: config 13 has no interface number 0 [ 1973.100438][T29212] usb 7-1: config 13 interface 50 altsetting 167 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1973.100458][T29212] usb 7-1: config 13 interface 50 altsetting 167 bulk endpoint 0x7 has invalid maxpacket 0 [ 1973.100479][T29212] usb 7-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1973.100503][T29212] usb 7-1: config 13 interface 50 has no altsetting 0 [ 1973.118765][T29212] usb 7-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 1973.118792][T29212] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1973.118802][T29212] usb 7-1: Product: syz [ 1973.118809][T29212] usb 7-1: Manufacturer: syz [ 1973.118816][T29212] usb 7-1: SerialNumber: syz [ 1973.188624][ T8994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1973.188988][ T8994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1973.397557][T29212] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1973.397600][T29212] usb 7-1: MIDIStreaming interface descriptor not found [ 1973.467739][T29212] usb 7-1: USB disconnect, device number 35 [ 1973.867166][ T8620] udevd[8620]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1973.889224][ T8228] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1973.965188][ T9039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1974.009119][ T9039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1974.069095][ T8228] usb 2-1: config 0 has an invalid interface number: 190 but max is 0 [ 1974.088374][ T8228] usb 2-1: config 0 has no interface number 0 [ 1974.109433][ T8228] usb 2-1: New USB device found, idVendor=05ac, idProduct=0253, bcdDevice=71.eb [ 1974.155287][ T8228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1974.184607][ T8228] usb 2-1: Product: syz [ 1974.210141][ T8228] usb 2-1: Manufacturer: syz [ 1974.242509][ T8228] usb 2-1: SerialNumber: syz [ 1974.258805][ T8228] usb 2-1: config 0 descriptor?? [ 1974.313049][ T8228] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.190/input/input77 [ 1974.494104][ T5181] bcm5974 2-1:0.190: could not read from device [ 1974.526111][ T8228] usb 2-1: USB disconnect, device number 30 [ 1974.535528][ T5181] bcm5974 2-1:0.190: could not read from device [ 1974.576166][ T5181] bcm5974 2-1:0.190: could not read from device [ 1974.692347][ T5841] udevd[5841]: Error opening device "/dev/input/event4": No such file or directory [ 1974.751886][ T5841] udevd[5841]: Unable to EVIOCGABS device "/dev/input/event4" [ 1974.769566][ T5841] udevd[5841]: Unable to EVIOCGABS device "/dev/input/event4" [ 1974.799203][ T5841] udevd[5841]: Unable to EVIOCGABS device "/dev/input/event4" [ 1974.834422][ T5841] udevd[5841]: Unable to EVIOCGABS device "/dev/input/event4" [ 1974.974780][ T9072] netlink: 'syz.5.4970': attribute type 1 has an invalid length. [ 1975.274281][ T9075] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1975.310647][ T9075] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 1975.473653][ T5908] usb 5-1: device descriptor read/64, error -110 [ 1975.672638][ T9075] bond4: (slave gretap3): making interface the new active one [ 1975.707552][ T9075] bond4: (slave gretap3): Enslaving as an active interface with an up link [ 1975.774295][ T9111] macvlan0: entered promiscuous mode [ 1975.787170][ T9111] macvlan0: entered allmulticast mode [ 1975.798047][ T9111] bond4: entered promiscuous mode [ 1975.807279][ T5908] usb 5-1: reset high-speed USB device number 75 using dummy_hcd [ 1975.826328][ T9111] gretap3: entered promiscuous mode [ 1975.843625][ T9133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1975.864481][ T9111] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1975.888958][ T9133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1975.921435][ T9111] bond4: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap3 [ 1975.962343][ T9111] bond4: left promiscuous mode [ 1975.973051][ T9111] gretap3: left promiscuous mode [ 1975.976960][ T5908] usb 5-1: device descriptor read/64, error -32 [ 1976.000595][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.007262][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.296632][ T5908] usb 5-1: reset high-speed USB device number 75 using dummy_hcd [ 1976.316896][ T5908] usb 5-1: device descriptor read/8, error -32 [ 1976.576009][ T5908] usb 5-1: reset high-speed USB device number 75 using dummy_hcd [ 1976.656147][ T5908] usb 5-1: device descriptor read/8, error -32 [ 1976.741036][ T9155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1976.783134][ T9155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1976.827094][ T5908] raw-gadget.3 gadget.4: failed to queue suspend event [ 1976.857410][T16658] usb 5-1: USB disconnect, device number 75 [ 1976.901289][T16658] raw-gadget.3 gadget.4: failed to queue reset event [ 1977.017406][T16658] raw-gadget.3 gadget.4: failed to queue resume event [ 1977.070534][ T9153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1977.151045][T16658] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1977.178923][ T9153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1977.196962][ C1] raw-gadget.3 gadget.4: ignoring, device is not running [ 1977.204201][T16658] raw-gadget.3 gadget.4: failed to queue reset event [ 1977.288169][T16658] raw-gadget.3 gadget.4: failed to queue resume event [ 1977.386901][T16658] usb 5-1: device descriptor read/64, error -32 [ 1977.507312][T16658] raw-gadget.3 gadget.4: failed to queue suspend event [ 1977.540984][T16658] raw-gadget.3 gadget.4: failed to queue reset event [ 1977.656857][T16658] raw-gadget.3 gadget.4: failed to queue resume event [ 1977.749202][T16658] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1977.784218][ C1] raw-gadget.3 gadget.4: ignoring, device is not running [ 1977.802992][T16658] raw-gadget.3 gadget.4: failed to queue reset event [ 1977.879489][T16658] raw-gadget.3 gadget.4: failed to queue resume event [ 1977.936785][T16658] usb 5-1: device descriptor read/64, error -32 [ 1978.060569][T16658] raw-gadget.3 gadget.4: failed to queue suspend event [ 1978.060726][T16658] usb usb5-port1: attempt power cycle [ 1978.060815][T16658] raw-gadget.3 gadget.4: failed to queue disconnect event [ 1978.066936][T16658] raw-gadget.3 gadget.4: failed to queue reset event [ 1978.138354][T16658] raw-gadget.3 gadget.4: failed to queue resume event [ 1978.138801][T16658] raw-gadget.3 gadget.4: failed to queue reset event [ 1978.346880][T16658] raw-gadget.3 gadget.4: failed to queue resume event [ 1978.416881][T16658] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1978.468117][ C1] raw-gadget.3 gadget.4: ignoring, device is not running [ 1978.475756][T16658] usb 5-1: device descriptor read/8, error -32 [ 1978.534739][ T9200] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4981'. [ 1978.586664][T29212] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1978.599335][T16658] raw-gadget.3 gadget.4: failed to queue suspend event [ 1978.629641][T16658] raw-gadget.3 gadget.4: failed to queue reset event [ 1978.716972][T16658] raw-gadget.3 gadget.4: failed to queue resume event [ 1978.787657][T16658] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1978.808043][T29212] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1978.846961][ C1] raw-gadget.3 gadget.4: ignoring, device is not running [ 1978.854137][T16658] usb 5-1: device descriptor read/8, error -32 [ 1978.876706][T29212] usb 2-1: config 63 has an invalid interface number: 66 but max is 0 [ 1978.897931][T29212] usb 2-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1978.938608][T29212] usb 2-1: config 63 has no interface number 0 [ 1978.972248][T29212] usb 2-1: config 63 interface 66 has no altsetting 0 [ 1978.976634][T16658] raw-gadget.3 gadget.4: failed to queue suspend event [ 1979.008092][T16658] usb usb5-port1: unable to enumerate USB device [ 1979.032823][T29212] usb 2-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4 [ 1979.060429][T29212] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1979.102246][T29212] usb 2-1: Product: syz [ 1979.126634][T29212] usb 2-1: Manufacturer: syz [ 1979.157010][T29212] usb 2-1: SerialNumber: syz [ 1979.423875][T29212] uvcvideo 2-1:63.66: probe with driver uvcvideo failed with error -22 [ 1979.474173][T29212] usb 2-1: USB disconnect, device number 31 [ 1979.796765][T16658] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1979.969026][T16658] usb 7-1: Using ep0 maxpacket: 32 [ 1979.999752][T16658] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 1980.030980][ T9230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1980.064152][ T9230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1980.166679][T16658] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1980.214727][T16658] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1980.270484][T16658] usb 7-1: Product: syz [ 1980.283295][T16658] usb 7-1: Manufacturer: syz [ 1980.315368][T16658] usb 7-1: SerialNumber: syz [ 1980.338123][ T9243] snd_aloop snd_aloop.0: control 2:-2:3:syz1:2 is already present [ 1980.396174][T16658] usb 7-1: config 0 descriptor?? [ 1980.428952][ T9203] raw-gadget.5 gadget.6: fail, usb_ep_enable returned -22 [ 1980.848872][ T9253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1980.885899][ T9253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1981.611454][ T9263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1981.677299][ T9263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1981.702266][ T9269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1981.787417][ T9269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1982.472199][ T9287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1982.502270][ T9287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1982.643975][T29212] usb 7-1: USB disconnect, device number 36 [ 1982.681543][ T9292] netlink: 'syz.1.4992': attribute type 1 has an invalid length. [ 1983.114114][T29212] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1983.215104][ T9305] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1983.270095][ T9305] bond8: (slave vxcan1): Error -95 calling set_mac_address [ 1983.346797][T29212] usb 7-1: Using ep0 maxpacket: 8 [ 1983.361199][T29212] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1983.422094][T29212] usb 7-1: config 59 has an invalid interface number: 141 but max is 0 [ 1983.482277][T29212] usb 7-1: config 59 has no interface number 0 [ 1983.535486][T29212] usb 7-1: config 59 interface 141 altsetting 6 endpoint 0xC has an invalid bInterval 160, changing to 11 [ 1983.592021][T29212] usb 7-1: config 59 interface 141 has no altsetting 0 [ 1983.644914][ T9314] macvlan2: entered promiscuous mode [ 1983.650774][T29212] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.72 [ 1983.668601][ T9314] macvlan2: entered allmulticast mode [ 1983.682359][ T9314] bond8: entered promiscuous mode [ 1983.700094][ T9314] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1983.714167][T29212] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1983.758471][T29212] usb 7-1: Product: syz [ 1983.780087][ T9314] bond8: left promiscuous mode [ 1983.785143][T29212] usb 7-1: Manufacturer: syz [ 1983.792619][T29212] usb 7-1: SerialNumber: syz [ 1983.932366][ T9362] gre1: entered promiscuous mode [ 1983.950150][ T9362] gre1: entered allmulticast mode [ 1984.220318][T29212] usbtest 7-1:59.141: couldn't get endpoints, -71 [ 1984.234858][T29212] usbtest 7-1:59.141: probe with driver usbtest failed with error -71 [ 1984.395511][T29212] usb 7-1: USB disconnect, device number 37 [ 1984.997669][ T9410] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5001'. [ 1985.279470][ T9421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1985.289811][ T9421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1986.966760][T29212] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1987.157003][T29212] usb 7-1: Using ep0 maxpacket: 16 [ 1987.181174][T29212] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1987.241256][T29212] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1987.294256][T29212] usb 7-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1987.327422][T29212] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1987.413933][T29212] usb 7-1: config 0 descriptor?? [ 1987.436260][T29212] usbhid 7-1:0.0: fixing wrong optional hid class descriptors count [ 1987.486647][T29212] usbhid 7-1:0.0: can't add hid device: -22 [ 1987.508850][T29212] usbhid 7-1:0.0: probe with driver usbhid failed with error -22 [ 1987.678956][T16658] usb 7-1: USB disconnect, device number 38 [ 1987.792007][ T9479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1987.826966][ T9479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1988.172984][ T9499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1988.206020][ T9499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1988.214671][T29212] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 1988.388624][T29212] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 199, changing to 4 [ 1988.418252][T29212] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 18452, setting to 1023 [ 1988.446638][T29212] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1988.464819][T29212] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1988.495074][T29212] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1988.513831][T29212] usb 2-1: Product: syz [ 1988.525049][T29212] usb 2-1: Manufacturer: syz [ 1988.534871][T29212] usb 2-1: SerialNumber: syz [ 1988.556358][T29212] usb 2-1: config 0 descriptor?? [ 1988.585037][T29212] usb 2-1: selecting invalid altsetting 0 [ 1988.666126][ T9530] lo: Caught tx_queue_len zero misconfig [ 1988.897786][ T9542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1988.976179][ T9542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1989.133055][ T9542] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5025'. [ 1989.199890][ T9530] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1990.689461][ T9587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1990.743572][ T9587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1991.835441][T29212] usb 2-1: USB disconnect, device number 32 [ 1992.140835][ T9629] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1992.298467][ T9638] netlink: zone id is out of range [ 1992.313544][ T9638] netlink: zone id is out of range [ 1992.324171][ T9638] netlink: zone id is out of range [ 1992.334058][ T9638] netlink: zone id is out of range [ 1992.342503][ T9638] netlink: zone id is out of range [ 1992.350337][ T9638] netlink: zone id is out of range [ 1992.355568][ T9638] netlink: zone id is out of range [ 1992.363039][ T9638] netlink: zone id is out of range [ 1992.375004][ T9638] netlink: zone id is out of range [ 1992.403269][ T9643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1992.419166][ T9643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1993.009506][ T9681] netlink: 'syz.1.5047': attribute type 1 has an invalid length. [ 1993.446935][T16658] usb 7-1: new full-speed USB device number 39 using dummy_hcd [ 1993.600122][T16658] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 199, changing to 4 [ 1993.650029][T16658] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 18452, setting to 1023 [ 1993.708707][T16658] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1993.756408][T16658] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1993.787464][T16658] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1993.826300][T16658] usb 7-1: Product: syz [ 1993.846428][T16658] usb 7-1: Manufacturer: syz [ 1993.868137][T16658] usb 7-1: SerialNumber: syz [ 1993.909055][T16658] usb 7-1: config 0 descriptor?? [ 1993.950439][T16658] usb 7-1: selecting invalid altsetting 0 [ 1995.328118][ T9760] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5055'. [ 1995.359930][ T9760] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5055'. [ 1995.391589][ T9760] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5055'. [ 1996.135062][ T9780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1996.151727][ T9780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1996.192596][ T9781] vlan0: entered promiscuous mode [ 1996.198414][ T9781] bridge0: entered promiscuous mode [ 1996.620486][T29212] usb 7-1: USB disconnect, device number 39 [ 1997.091526][ T9833] netlink: 'syz.4.5064': attribute type 1 has an invalid length. [ 1997.112601][ T9831] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1997.599581][ T9849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1997.627471][ T9849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1997.692872][ T9856] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5073'. [ 1997.703418][ T9856] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5073'. [ 1997.799420][ T9865] net_ratelimit: 372 callbacks suppressed [ 1997.799438][ T9865] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1998.103226][ T9840] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1998.125958][ T9840] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 1998.437500][ T9922] vlan0: entered promiscuous mode [ 1998.764966][ T9951] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5087'. [ 1998.784225][ T9951] veth0_to_bond: entered allmulticast mode [ 1998.792323][ T9951] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5087'. [ 1998.917700][ T9955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1998.960199][ T9955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1999.484243][ T9964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1999.520522][ T9964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1999.879709][ T9973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1999.893164][ T9973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2000.031404][ T9981] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2000.134317][ T9985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2000.163540][ T9985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2000.817140][T10038] vlan0: entered promiscuous mode [ 2000.887329][ T8228] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 2001.056592][ T8228] usb 2-1: Using ep0 maxpacket: 32 [ 2001.079702][ T8228] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2001.104135][ T8228] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2001.209396][ T8228] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2001.239395][ T8228] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 2001.267524][ T8228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2001.322540][ T8228] usb 2-1: config 0 descriptor?? [ 2001.803896][ T8228] corsair-cpro 0003:1B1C:0C10.002C: item fetching failed at offset 2/5 [ 2001.850942][ T8228] corsair-cpro 0003:1B1C:0C10.002C: probe with driver corsair-cpro failed with error -22 [ 2002.023425][ T5908] usb 2-1: USB disconnect, device number 33 [ 2002.377692][T10087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2002.398306][T10087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2002.476819][ T5908] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 2002.668772][ T5908] usb 7-1: Using ep0 maxpacket: 16 [ 2002.734586][ T5908] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2002.773735][ T5908] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2002.787106][ T5908] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2002.810744][ T5908] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2002.850742][ T5908] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2002.888404][ T5908] usb 7-1: config 0 descriptor?? [ 2003.239583][T10112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2003.251542][T10112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2003.321445][ T5908] microsoft 0003:045E:07DA.002D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 2003.337691][ T8228] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 2003.346100][ T5908] microsoft 0003:045E:07DA.002D: no inputs found [ 2003.353206][ T5908] microsoft 0003:045E:07DA.002D: could not initialize ff, continuing anyway [ 2003.514259][ T5908] usb 7-1: USB disconnect, device number 40 [ 2003.529113][ T8228] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 2003.543046][ T8228] usb 2-1: config 0 has no interface number 0 [ 2003.550524][ T8228] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2003.562438][ T8228] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2003.573068][ T8228] usb 2-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 2003.586135][ T8228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2003.616440][ T8228] usb 2-1: config 0 descriptor?? [ 2004.046427][ T8228] uclogic 0003:28BD:0905.002E: Interface probing failed: -22 [ 2004.056791][T10143] fuse: Bad value for 'fd' [ 2004.062182][ T8228] uclogic 0003:28BD:0905.002E: interface is invalid, ignoring [ 2004.306102][T10148] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5120'. [ 2004.315216][ T5908] usb 2-1: USB disconnect, device number 34 [ 2004.536592][ T8228] usb 7-1: new full-speed USB device number 41 using dummy_hcd [ 2004.721862][ T8228] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 199, changing to 4 [ 2004.760390][ T8228] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 18452, setting to 1023 [ 2004.804518][ T8228] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2004.838637][ T8228] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2004.897570][ T8228] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2004.940654][ T8228] usb 7-1: Product: syz [ 2004.965928][ T8228] usb 7-1: Manufacturer: syz [ 2004.994271][ T8228] usb 7-1: SerialNumber: syz [ 2005.047173][ T8228] usb 7-1: config 0 descriptor?? [ 2005.078918][ T8228] usb 7-1: selecting invalid altsetting 0 [ 2005.605043][ T30] audit: type=1326 audit(1770489789.523:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10191 comm="syz.3.5127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f8f9aeb9 code=0x7ffc0000 [ 2005.632112][ T30] audit: type=1326 audit(1770489789.553:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10191 comm="syz.3.5127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f8f9aeb9 code=0x7ffc0000 [ 2005.648774][ T8228] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 2005.759230][ T30] audit: type=1326 audit(1770489789.553:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10191 comm="syz.3.5127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f92f8f9aeb9 code=0x7ffc0000 [ 2005.791401][ T30] audit: type=1326 audit(1770489789.553:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10191 comm="syz.3.5127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f8f9aeb9 code=0x7ffc0000 [ 2005.818721][ T30] audit: type=1326 audit(1770489789.553:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10191 comm="syz.3.5127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f8f9aeb9 code=0x7ffc0000 [ 2005.849624][ T30] audit: type=1326 audit(1770489789.583:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10191 comm="syz.3.5127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f92f8f9aeb9 code=0x7ffc0000 [ 2005.882249][ T30] audit: type=1326 audit(1770489789.593:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10191 comm="syz.3.5127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f8f9aeb9 code=0x7ffc0000 [ 2005.925933][ T30] audit: type=1326 audit(1770489789.593:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10191 comm="syz.3.5127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f8f9aeb9 code=0x7ffc0000 [ 2005.938426][ T8228] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2006.002600][ T8228] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2006.033601][ T8228] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2006.065768][ T8228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2006.099985][ T8228] usb 2-1: config 0 descriptor?? [ 2006.107943][ T8228] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 2006.115343][ T8228] dvb-usb: bulk message failed: -22 (3/0) [ 2006.127081][ T8228] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 2006.140457][ T8228] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 2006.148218][ T8228] usb 2-1: media controller created [ 2006.155389][ T8228] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2006.185001][ T8228] dvb-usb: bulk message failed: -22 (6/0) [ 2006.201682][ T8228] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 2006.232000][ T8228] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input79 [ 2006.245429][ T8228] dvb-usb: schedule remote query interval to 150 msecs. [ 2006.252789][ T8228] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 2006.406971][ T8228] dvb-usb: bulk message failed: -22 (1/0) [ 2006.416712][ T8228] dvb-usb: error while querying for an remote control event. [ 2006.420681][ T5908] usb 2-1: USB disconnect, device number 35 [ 2006.484527][ T5908] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 2007.122363][T10247] usb usb8: usbfs: process 10247 (syz.3.5134) did not claim interface 0 before use [ 2007.246744][ T5908] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 2007.410712][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2007.445073][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 2007.474201][ T5908] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 2007.495323][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2007.518664][ T5908] usb 2-1: config 0 descriptor?? [ 2007.529117][T10242] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2008.013297][ T5908] creative-sb0540 0003:041E:3100.002F: item fetching failed at offset 1/5 [ 2008.026725][T10285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2008.039255][ T8228] usb 7-1: USB disconnect, device number 41 [ 2008.059102][ T5908] creative-sb0540 0003:041E:3100.002F: parse failed [ 2008.066098][T10285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2008.066839][T10292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2008.078981][ T5908] creative-sb0540 0003:041E:3100.002F: probe with driver creative-sb0540 failed with error -22 [ 2008.136921][T10292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2008.248734][ T5908] usb 2-1: USB disconnect, device number 36 [ 2008.285022][T10315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2008.319927][T10315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2008.596939][ T8228] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 2008.703656][T10337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2008.716130][T10337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2008.766649][ T8228] usb 7-1: Using ep0 maxpacket: 16 [ 2008.794484][ T8228] usb 7-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 2008.827444][ T8228] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2008.848133][ T8228] usb 7-1: Product: syz [ 2008.852366][ T8228] usb 7-1: Manufacturer: syz [ 2008.866355][ T30] audit: type=1326 audit(1770489792.783:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10343 comm="syz.1.5153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511139aeb9 code=0x7ffc0000 [ 2008.868878][ T8228] usb 7-1: SerialNumber: syz [ 2008.947660][ T30] audit: type=1326 audit(1770489792.783:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10343 comm="syz.1.5153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511139aeb9 code=0x7ffc0000 [ 2008.988066][ T8228] usb 7-1: config 0 descriptor?? [ 2009.021060][ T8228] ums-onetouch 7-1:0.0: USB Mass Storage device detected [ 2009.466080][T29212] usb 7-1: USB disconnect, device number 42 [ 2009.605951][T10385] netlink: 'syz.1.5170': attribute type 4 has an invalid length. [ 2009.634426][T10386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2009.656058][T10386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2009.982272][T10391] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2010.036626][ T5908] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 2010.094380][T10391] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2010.137392][T10405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2010.186194][T10405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2010.246691][ T5908] usb 2-1: Using ep0 maxpacket: 16 [ 2010.318691][ T5908] usb 2-1: config 0 has no interfaces? [ 2010.362465][ T5908] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2010.574625][ T5908] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2010.620894][ T5908] usb 2-1: Manufacturer: syz [ 2010.704438][ T5908] usb 2-1: config 0 descriptor?? [ 2011.448164][T10499] geneve3: entered promiscuous mode [ 2011.652416][T10516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2011.698423][T10516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2011.745426][T29403] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2011.792964][T29403] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2011.832157][T29403] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2011.847848][ T8228] usb 7-1: new full-speed USB device number 43 using dummy_hcd [ 2012.018873][ T8228] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2012.061439][ T8228] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2012.101856][ T8228] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2012.140787][ T8228] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2012.174891][ T8228] usb 7-1: Product: syz [ 2012.193793][ T8228] usb 7-1: Manufacturer: syz [ 2012.212901][ T8228] usb 7-1: SerialNumber: syz [ 2012.456299][ T8228] usb 7-1: 0:2 : does not exist [ 2012.505539][ T8228] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 2012.582339][T10539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2012.598300][ T8228] usb 7-1: USB disconnect, device number 43 [ 2012.635720][T10539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2012.714645][ T7311] udevd[7311]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2013.219523][T10564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2013.228636][T10564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2013.318486][T10570] program syz.5.5178 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2013.403114][T10578] xt_hashlimit: size too large, truncated to 1048576 [ 2014.021417][T10604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2014.042723][T10604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2014.080260][ T5908] usb 2-1: USB disconnect, device number 37 [ 2014.806839][ T5908] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 2014.885175][T10644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2014.931178][T10644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2015.011727][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2015.037143][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2015.060549][ T5908] usb 2-1: New USB device found, idVendor=056a, idProduct=0303, bcdDevice= 0.00 [ 2015.078963][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2015.129085][ T5908] usb 2-1: config 0 descriptor?? [ 2015.229337][T10644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2015.249122][T10644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2015.583982][ T5908] wacom 0003:056A:0303.0030: unbalanced collection at end of report description [ 2015.604384][ T5908] wacom 0003:056A:0303.0030: parse failed [ 2015.618145][ T5908] wacom 0003:056A:0303.0030: probe with driver wacom failed with error -22 [ 2015.827759][ T8228] usb 2-1: USB disconnect, device number 38 [ 2015.975796][T10673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2016.013464][T10673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2016.940018][T29212] usb 7-1: new full-speed USB device number 44 using dummy_hcd [ 2017.047173][ T8228] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 2017.139121][T29212] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 2017.167300][T29212] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2017.196903][T29212] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2017.209890][T29212] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2017.221739][T29212] usb 7-1: Product: syz [ 2017.225917][T29212] usb 7-1: Manufacturer: syz [ 2017.231421][T29212] usb 7-1: SerialNumber: syz [ 2017.242387][ T8228] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2017.255743][T29212] usb 7-1: config 0 descriptor?? [ 2017.274552][T29212] usb 7-1: selecting invalid altsetting 0 [ 2017.326201][T10729] netlink: 264 bytes leftover after parsing attributes in process `syz.3.5216'. [ 2017.345580][ T8228] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2017.358581][ T8228] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2017.383411][ T8228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2017.515965][ T8228] usb 2-1: config 0 descriptor?? [ 2017.545948][ T8228] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 2017.559056][T10747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2017.562098][ T8228] dvb-usb: bulk message failed: -22 (3/0) [ 2017.584587][T10747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2017.615504][ T8228] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 2017.661144][ T8228] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 2017.689498][ T8228] usb 2-1: media controller created [ 2017.704520][ T8228] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2017.742177][ T8228] dvb-usb: bulk message failed: -22 (6/0) [ 2017.760877][ T8228] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 2017.785494][ T8228] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input80 [ 2017.825676][ T8228] dvb-usb: schedule remote query interval to 150 msecs. [ 2017.842109][ T8228] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 2017.883014][ T8228] usb 2-1: USB disconnect, device number 39 [ 2017.946341][ T8228] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 2018.365368][T10783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2018.383661][T10783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2018.626841][ T5908] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 2018.771325][T10805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2018.796109][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2018.808907][T10805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2018.840564][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2018.863625][ T5908] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2018.891128][ T5908] usb 2-1: New USB device found, idVendor=056e, idProduct=019b, bcdDevice= 0.00 [ 2018.922356][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2018.968150][ T5908] usb 2-1: config 0 descriptor?? [ 2019.173143][T10818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2019.192369][T10818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2019.425875][ T5908] elecom 0003:056E:019B.0031: unknown main item tag 0x0 [ 2019.454479][ T5908] elecom 0003:056E:019B.0031: unknown main item tag 0x0 [ 2019.485158][ T5908] elecom 0003:056E:019B.0031: unknown main item tag 0x0 [ 2019.506364][ T5908] elecom 0003:056E:019B.0031: unknown main item tag 0x0 [ 2019.522563][ T5908] elecom 0003:056E:019B.0031: unknown main item tag 0x0 [ 2019.561994][ T5908] elecom 0003:056E:019B.0031: hidraw0: USB HID v0.00 Device [HID 056e:019b] on usb-dummy_hcd.1-1/input0 [ 2019.671739][ T5908] usb 2-1: USB disconnect, device number 40 [ 2020.083336][ T5908] usb 7-1: USB disconnect, device number 44 [ 2020.404704][T10876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2020.440730][T10876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2020.666809][ T5908] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 2020.836567][ T5908] usb 7-1: Using ep0 maxpacket: 32 [ 2020.855784][ T5908] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 2020.871621][ T5908] usb 7-1: config 0 has no interface number 0 [ 2020.897182][ T5908] usb 7-1: config 0 interface 184 has no altsetting 0 [ 2020.915382][ T5908] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2020.938585][ T5908] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2020.956263][ T5908] usb 7-1: Product: syz [ 2020.966189][ T5908] usb 7-1: Manufacturer: syz [ 2020.977341][ T5908] usb 7-1: SerialNumber: syz [ 2021.000802][ T5908] usb 7-1: config 0 descriptor?? [ 2021.057187][ T5908] smsc75xx v1.0.0 [ 2021.132276][T10899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2021.147305][T10899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2021.166656][ T8228] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 2021.288353][T10905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2021.298999][T10905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2021.337371][ T8228] usb 2-1: Using ep0 maxpacket: 16 [ 2021.344469][ T8228] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2021.355893][ T8228] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2021.366047][ T8228] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 2021.376283][ T8228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2021.390151][ T8228] usb 2-1: config 0 descriptor?? [ 2021.633148][ T5908] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 2021.662514][ T5908] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 2021.689510][ T5908] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 2021.713437][ T5908] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 2021.743300][ T5908] usb 7-1: USB disconnect, device number 45 [ 2021.810763][ T8228] lua 0003:1E7D:2C2E.0032: unbalanced collection at end of report description [ 2021.823685][ T8228] lua 0003:1E7D:2C2E.0032: parse failed [ 2021.830119][ T8228] lua 0003:1E7D:2C2E.0032: probe with driver lua failed with error -22 [ 2022.028541][ T8228] usb 2-1: USB disconnect, device number 41 [ 2022.575860][T10944] sch_tbf: burst 1447 is lower than device macvtap0 mtu (1514) ! [ 2022.909962][T10958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2022.933998][T10958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2023.309621][T10962] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5253'. [ 2023.319531][T10962] macvlan0: entered promiscuous mode [ 2023.325212][T10962] netlink: 'syz.6.5253': attribute type 1 has an invalid length. [ 2023.333763][T10962] netlink: 'syz.6.5253': attribute type 2 has an invalid length. [ 2023.342313][T10962] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5253'. [ 2023.582566][T10973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2023.591504][T10973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2023.636607][ T8228] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 2023.806562][ T8228] usb 7-1: Using ep0 maxpacket: 32 [ 2023.815291][ T8228] usb 7-1: config 0 has an invalid interface number: 188 but max is 0 [ 2023.824133][ T8228] usb 7-1: config 0 has no interface number 0 [ 2023.832791][ T8228] usb 7-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 2023.846225][ T8228] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 2023.855734][ T8228] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2023.864108][ T8228] usb 7-1: Product: syz [ 2023.868650][ T8228] usb 7-1: Manufacturer: syz [ 2023.873387][ T8228] usb 7-1: SerialNumber: syz [ 2023.882918][ T8228] usb 7-1: config 0 descriptor?? [ 2023.898124][T10964] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2024.111841][T10964] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2024.276932][ T5908] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 2024.288065][T10999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2024.321708][T10999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2024.439244][ T5908] usb 2-1: Using ep0 maxpacket: 8 [ 2024.449077][ T5908] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 2024.458486][ T5908] usb 2-1: config 0 has no interface number 0 [ 2024.464614][ T5908] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 2024.478527][ T5908] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2024.492628][ T5908] usb 2-1: New USB device found, idVendor=07c0, idProduct=1500, bcdDevice=b8.c5 [ 2024.504791][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2024.513164][ T5908] usb 2-1: Product: syz [ 2024.518411][ T5908] usb 2-1: Manufacturer: syz [ 2024.523022][ T5908] usb 2-1: SerialNumber: syz [ 2024.531958][ T5908] usb 2-1: config 0 descriptor?? [ 2024.539666][ T8228] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2024.556667][T11002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2024.568315][ T8228] asix 7-1:0.188: probe with driver asix failed with error -71 [ 2024.577883][T11002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2024.610712][ T8228] usb 7-1: USB disconnect, device number 46 [ 2024.778086][ T5908] iowarrior 2-1:0.186: IOWarrior product=0x1500, serial=42424242 interface=186 now attached to iowarrior0 [ 2025.014357][ T5908] usb 2-1: USB disconnect, device number 42 [ 2025.287164][T11068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2025.350151][T11068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2025.393786][T11073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2025.436898][T11073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2026.086996][ T5908] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 2026.130404][T11092] netlink: 'syz.5.5270': attribute type 12 has an invalid length. [ 2026.267094][ T5908] usb 2-1: Using ep0 maxpacket: 8 [ 2026.275995][ T5908] usb 2-1: config 0 has no interfaces? [ 2026.291114][ T5908] usb 2-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 2026.316856][T16658] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 2026.324696][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2026.338380][ T5908] usb 2-1: Product: syz [ 2026.342593][ T5908] usb 2-1: Manufacturer: syz [ 2026.357082][ T5908] usb 2-1: SerialNumber: syz [ 2026.418838][ T5908] usb 2-1: config 0 descriptor?? [ 2026.478476][T16658] usb 7-1: Using ep0 maxpacket: 16 [ 2026.491244][T16658] usb 7-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 2026.510569][T16658] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2026.522555][T16658] usb 7-1: config 0 descriptor?? [ 2026.645744][ T5908] usb 2-1: USB disconnect, device number 43 [ 2026.957714][T16658] saitek 0003:06A3:0CCD.0033: unknown main item tag 0x0 [ 2026.966233][T16658] saitek 0003:06A3:0CCD.0033: unknown main item tag 0x0 [ 2026.974149][T16658] saitek 0003:06A3:0CCD.0033: unknown main item tag 0x0 [ 2026.982142][T16658] saitek 0003:06A3:0CCD.0033: unknown main item tag 0x0 [ 2026.989667][T16658] saitek 0003:06A3:0CCD.0033: unknown main item tag 0x0 [ 2027.009129][T16658] saitek 0003:06A3:0CCD.0033: hidraw0: USB HID v0.83 Device [HID 06a3:0ccd] on usb-dummy_hcd.6-1/input0 [ 2027.161024][ T8228] usb 7-1: USB disconnect, device number 47 [ 2027.981519][T11168] gre2: entered promiscuous mode [ 2027.987536][T11168] gre2: entered allmulticast mode [ 2028.006817][T16658] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 2028.081165][T11173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2028.094514][T11173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2028.153765][ T8228] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 2028.196936][T16658] usb 7-1: Using ep0 maxpacket: 32 [ 2028.203773][T16658] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 2028.212766][T16658] usb 7-1: config 0 has no interface number 0 [ 2028.222207][T16658] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2028.231859][T16658] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2028.245825][T16658] usb 7-1: Product: syz [ 2028.250355][T16658] usb 7-1: Manufacturer: syz [ 2028.255049][T16658] usb 7-1: SerialNumber: syz [ 2028.264454][T11181] fuse: Bad value for 'fd' [ 2028.269915][T16658] usb 7-1: config 0 descriptor?? [ 2028.280311][T16658] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2028.308115][T11181] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5286'. [ 2028.317166][ T8228] usb 2-1: Using ep0 maxpacket: 16 [ 2028.325436][ T8228] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2028.344831][ T8228] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2028.367924][ T8228] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2028.394488][ T8228] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2028.414865][ T8228] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2028.460008][ T8228] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2028.477843][ T8228] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2028.503448][T16658] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2028.514104][ T8228] usb 2-1: Manufacturer: syz [ 2028.535771][ T8228] usb 2-1: config 0 descriptor?? [ 2028.549617][T16658] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2028.866565][ T8228] rc_core: IR keymap rc-hauppauge not found [ 2028.880973][ T8228] Registered IR keymap rc-empty [ 2028.891964][ T8228] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2028.927411][ T8228] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2028.960775][ T8228] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 2028.988314][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2028.996833][T29212] usb 7-1: USB disconnect, device number 48 [ 2029.016388][ T8228] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input81 [ 2029.056410][T29212] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2029.079056][ T8228] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2029.086770][T11207] xt_hashlimit: max too large, truncated to 1048576 [ 2029.106106][T11207] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 2029.118227][ T8228] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2029.131186][T29212] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2029.154528][ T8228] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2029.165671][T29212] quatech2 7-1:0.51: device disconnected [ 2029.186690][ T8228] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2029.217394][ T8228] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2029.239472][ T8228] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2029.276894][ T8228] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2029.326783][ T8228] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2029.349847][ T8228] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2029.390034][ T8228] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2029.422533][ T8228] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 2029.450851][ T8228] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2029.484953][ T8228] usb 2-1: USB disconnect, device number 44 [ 2029.648830][T11246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2029.671115][T11246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2029.769239][T11256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2029.782415][T11256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2030.049998][ T8228] usb 7-1: new full-speed USB device number 49 using dummy_hcd [ 2030.251609][ T8228] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 2030.262991][ T8228] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2030.278453][ T8228] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2030.278560][T16658] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 2030.315076][ T8228] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2030.326644][ T8228] usb 7-1: Product: syz [ 2030.331834][ T8228] usb 7-1: Manufacturer: syz [ 2030.338642][ T8228] usb 7-1: SerialNumber: syz [ 2030.343490][T11276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2030.369734][ T8228] usb 7-1: config 0 descriptor?? [ 2030.386263][ T8228] usb 7-1: selecting invalid altsetting 0 [ 2030.400182][T11276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2030.537812][T11289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2030.582263][T11289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2030.646986][T16658] usb 2-1: config 0 has an invalid interface number: 16 but max is 0 [ 2030.665633][T16658] usb 2-1: config 0 has no interface number 0 [ 2030.729621][T16658] usb 2-1: too many endpoints for config 0 interface 16 altsetting 144: 127, using maximum allowed: 30 [ 2030.782975][T16658] usb 2-1: config 0 interface 16 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2030.833475][T16658] usb 2-1: config 0 interface 16 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2030.901900][T16658] usb 2-1: config 0 interface 16 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 2030.966421][T16658] usb 2-1: config 0 interface 16 has no altsetting 0 [ 2030.982829][T16658] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 2031.015858][T16658] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2031.062589][T16658] usb 2-1: config 0 descriptor?? [ 2031.161004][T11306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2031.186005][T11306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2031.470749][T11315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2031.491860][T11315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2032.445758][T11329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2032.491771][T11329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2032.899441][T16658] uclogic 0003:5543:004D.0034: interface is invalid, ignoring [ 2033.341738][ T8228] usb 7-1: USB disconnect, device number 49 [ 2033.948921][ T8228] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 2034.140617][ T8228] usb 7-1: config 1 has an invalid descriptor of length 119, skipping remainder of the config [ 2034.188215][ T8228] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2034.215781][ T8228] usb 7-1: config 1 has no interface number 0 [ 2034.238725][ T8228] usb 7-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2034.288795][ T8228] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2034.321206][ T8228] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2034.349235][ T8228] usb 7-1: Product: syz [ 2034.365974][ T8228] usb 7-1: Manufacturer: syz [ 2034.381160][ T8228] usb 7-1: SerialNumber: syz [ 2034.413913][ T8228] cdc_ncm 7-1:1.1: skipping garbage [ 2034.445104][ T8228] usb 7-1: selecting invalid altsetting 1 [ 2035.027706][ T8228] cdc_ncm 7-1:1.1: SET_CRC_MODE failed [ 2035.039790][ T8228] cdc_ncm 7-1:1.1: SET_NTB_FORMAT failed [ 2035.066226][ T8228] usb 7-1: selecting invalid altsetting 1 [ 2035.083773][ T8228] cdc_ncm 7-1:1.1: bind() failure [ 2035.127160][ T8228] usb 7-1: USB disconnect, device number 50 [ 2035.488011][T11399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2035.519883][T11399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2035.584519][T11399] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5309'. [ 2035.703582][T11424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2035.713777][T11424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2035.821576][T16658] usb 2-1: USB disconnect, device number 45 [ 2035.913948][T11427] vlan0: entered promiscuous mode [ 2036.208230][T16658] usb 7-1: new full-speed USB device number 51 using dummy_hcd [ 2036.381824][T16658] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 199, changing to 4 [ 2036.407342][T16658] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 18452, setting to 1023 [ 2036.445028][T16658] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2036.485648][T16658] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2036.505277][T16658] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2036.523767][T16658] usb 7-1: Product: syz [ 2036.529102][T16658] usb 7-1: Manufacturer: syz [ 2036.533700][T16658] usb 7-1: SerialNumber: syz [ 2036.564286][T16658] usb 7-1: config 0 descriptor?? [ 2036.581060][T11458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2036.600320][T16658] usb 7-1: selecting invalid altsetting 0 [ 2036.615855][T11458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2037.318752][ T5893] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 2037.422451][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.429968][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.508307][ T5893] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 199, changing to 4 [ 2037.556839][ T5893] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 18452, setting to 1023 [ 2037.618083][ T5893] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2037.653000][ T5893] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2037.682655][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2037.707764][ T5893] usb 2-1: Product: syz [ 2037.713096][ T5893] usb 2-1: Manufacturer: syz [ 2037.736078][ T5893] usb 2-1: SerialNumber: syz [ 2037.750424][ T5893] usb 2-1: config 0 descriptor?? [ 2037.770342][ T5893] usb 2-1: selecting invalid altsetting 0 [ 2037.827874][T11520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2037.899726][T11534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2037.909909][T11520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2037.920663][T11534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2038.843261][T11577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2038.882737][T11577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2038.960359][T11577] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 2039.104352][T16658] usb 7-1: USB disconnect, device number 51 [ 2040.248181][ T5893] usb 2-1: USB disconnect, device number 46 [ 2040.426580][T16658] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 2040.598645][T16658] usb 7-1: config 0 has an invalid interface number: 255 but max is 0 [ 2040.618666][T16658] usb 7-1: config 0 has no interface number 0 [ 2040.627954][T16658] usb 7-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 2040.643575][T16658] usb 7-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 2040.694849][T16658] usb 7-1: config 0 interface 255 has no altsetting 0 [ 2040.734256][T16658] usb 7-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 2040.750391][T16658] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2040.789265][T16658] usb 7-1: config 0 descriptor?? [ 2040.827258][T16658] ums-realtek 7-1:0.255: USB Mass Storage device detected [ 2040.926630][ T5893] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 2040.996399][T11665] fuse: Bad value for 'fd' [ 2041.046210][T11669] debugfs: 'netdev:nicvf0' already exists in 'phy10' [ 2041.059462][T16658] usb 7-1: USB disconnect, device number 52 [ 2041.078350][T11665] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5350'. [ 2041.157856][ T5893] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2041.180542][ T5893] usb 2-1: config 0 has no interface number 0 [ 2041.199073][ T5893] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2041.208611][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2041.217102][ T5893] usb 2-1: Product: syz [ 2041.221515][ T5893] usb 2-1: Manufacturer: syz [ 2041.227506][ T5893] usb 2-1: SerialNumber: syz [ 2041.248527][ T5893] usb 2-1: config 0 descriptor?? [ 2041.491172][ T5893] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 2041.516941][ T5893] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2041.545206][ T5893] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 2041.554268][ T5893] usb 2-1: media controller created [ 2041.601331][ T5893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2041.708413][ T5893] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 2041.806359][ T5893] usb 2-1: USB disconnect, device number 47 [ 2041.926617][ T8228] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 2042.096809][ T8228] usb 7-1: Using ep0 maxpacket: 8 [ 2042.143540][ T8228] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2042.193457][ T8228] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2042.234922][ T8228] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2042.267357][ T8228] pvrusb2: ********** [ 2042.271379][ T8228] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2042.316183][ T8228] pvrusb2: Important functionality might not be entirely working. [ 2042.346910][ T8228] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2042.384236][ T8228] pvrusb2: ********** [ 2042.459441][ T2345] pvrusb2: Invalid write control endpoint [ 2042.660583][T11746] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5360'. [ 2042.676524][ T8228] usb 7-1: USB disconnect, device number 53 [ 2042.947009][T11750] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5358'. [ 2042.977644][ T2345] pvrusb2: Invalid write control endpoint [ 2043.033006][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2043.074092][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2043.139066][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2043.204109][T11764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2043.219236][T11764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2043.227124][ T2345] pvrusb2: Device being rendered inoperable [ 2043.247223][T11768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2043.260891][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 2043.262190][T11768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2043.319811][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 2043.334033][ T2345] pvrusb2: Attached sub-driver cx25840 [ 2043.348381][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2043.368651][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2043.415808][ T5908] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 2043.468516][ T5908] hid-generic 0000:0000:0000.0035: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2044.006605][ T8228] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 2044.069931][T11807] raw_sendmsg: syz.4.5370 forgot to set AF_INET. Fix it! [ 2044.134285][T11808] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 2044.140837][T11808] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2044.159604][T11808] vhci_hcd vhci_hcd.0: Device attached [ 2044.179577][ T8228] usb 7-1: Using ep0 maxpacket: 32 [ 2044.200626][ T8228] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 2044.229690][ T8228] usb 7-1: config 0 has no interface number 0 [ 2044.239825][ T8228] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2044.254084][ T8228] usb 7-1: config 0 interface 85 has no altsetting 0 [ 2044.273948][ T8228] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 2044.291384][ T8228] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2044.308061][ T8228] usb 7-1: Product: syz [ 2044.312558][ T8228] usb 7-1: Manufacturer: syz [ 2044.320065][ T8228] usb 7-1: SerialNumber: syz [ 2044.344399][ T8228] usb 7-1: config 0 descriptor?? [ 2044.424467][T11809] vhci_hcd: connection closed [ 2044.424841][T17661] vhci_hcd vhci_hcd.3: stop threads [ 2044.435606][ T5893] usb 40-1: SetAddress Request (10) to port 0 [ 2044.447042][ T5893] usb 40-1: new SuperSpeed USB device number 10 using vhci_hcd [ 2044.461923][T17661] vhci_hcd vhci_hcd.3: release socket [ 2044.484084][T17661] vhci_hcd vhci_hcd.3: disconnect device [ 2044.608095][T11825] netlink: 'syz.4.5372': attribute type 4 has an invalid length. [ 2044.870456][T11828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2044.913478][T11828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2045.197985][ T8228] appletouch 7-1:0.85: Geyser mode initialized. [ 2045.253991][ T8228] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input82 [ 2045.289741][ C0] appletouch 7-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 2045.494082][ T5908] usb 7-1: USB disconnect, device number 54 [ 2045.521960][ T5908] appletouch 7-1:0.85: input: appletouch disconnected [ 2046.728371][T11905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2046.761710][T11905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2047.106846][ T8228] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 2047.279879][ T8228] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2047.314179][ T8228] usb 2-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 2047.356864][ T8228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2047.388766][ T8228] usb 2-1: config 0 descriptor?? [ 2047.393869][T11926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2047.434170][T11926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2047.576849][T29212] usb 7-1: new full-speed USB device number 55 using dummy_hcd [ 2047.691919][T11926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2047.798077][T11926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2047.799919][T29212] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 199, changing to 4 [ 2047.877431][T29212] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 18452, setting to 1023 [ 2047.922206][T29212] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2047.959317][T29212] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2047.981916][T29212] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2048.007176][T29212] usb 7-1: Product: syz [ 2048.018439][T29212] usb 7-1: Manufacturer: syz [ 2048.033575][T29212] usb 7-1: SerialNumber: syz [ 2048.057336][T29212] usb 7-1: config 0 descriptor?? [ 2048.101361][ T8228] razer 0003:1532:010E.0036: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.1-1/input0 [ 2048.116933][T29212] usb 7-1: selecting invalid altsetting 0 [ 2048.292451][T11958] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 2048.299016][T11958] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2048.329489][T11958] vhci_hcd vhci_hcd.0: Device attached [ 2048.343672][T29212] usb 2-1: USB disconnect, device number 48 [ 2048.377688][T11949] fido_id[11949]: Failed to read report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:1532:010E.0036/report_descriptor': No such device [ 2048.608245][ T8228] usb 44-1: SetAddress Request (23) to port 0 [ 2048.614571][ T8228] usb 44-1: new SuperSpeed USB device number 23 using vhci_hcd [ 2048.814755][T11962] vhci_hcd: connection reset by peer [ 2048.826743][ T2960] vhci_hcd vhci_hcd.5: stop threads [ 2048.836064][ T2960] vhci_hcd vhci_hcd.5: release socket [ 2048.848805][ T2960] vhci_hcd vhci_hcd.5: disconnect device [ 2048.971678][T11993] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5392'. [ 2049.472120][T12012] vlan0: entered promiscuous mode [ 2049.496666][ T5893] usb 40-1: device descriptor read/8, error -110 [ 2049.576645][T12022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2049.626622][T12022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2049.912686][ T5893] usb usb40-port1: attempt power cycle [ 2050.223409][T12048] netlink: 188 bytes leftover after parsing attributes in process `syz.5.5403'. [ 2050.288820][T12051] netlink: 232 bytes leftover after parsing attributes in process `syz.4.5404'. [ 2050.488309][ T5893] usb usb40-port1: unable to enumerate USB device [ 2050.513154][T12065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2050.525588][T12065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2050.539404][T12070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2050.548149][T12070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2050.696880][ T5908] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 2050.743114][T12083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2050.752636][T12083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2050.856916][ T5908] usb 2-1: Using ep0 maxpacket: 32 [ 2050.864025][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2050.875557][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2050.885482][ T5908] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2050.894645][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2050.905358][ T5908] usb 2-1: config 0 descriptor?? [ 2051.355977][ T5908] ft260 0003:0403:6030.0037: unknown main item tag 0x0 [ 2051.358368][ T5893] usb 7-1: USB disconnect, device number 55 [ 2051.386580][ T5908] ft260 0003:0403:6030.0037: unknown main item tag 0x0 [ 2051.568276][ T5908] ft260 0003:0403:6030.0037: chip code: 6424 8183 [ 2051.863092][T12150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2051.903933][T12150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2052.015385][ T5893] usb 2-1: USB disconnect, device number 49 [ 2052.109372][ T5908] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 2052.154243][ T5908] hid-generic 0000:0000:0000.0038: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2053.737165][ T8228] usb 44-1: device descriptor read/8, error -110 [ 2054.141326][ T8228] usb usb44-port1: attempt power cycle [ 2054.236824][ T5908] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 2054.276843][ T5893] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 2054.412979][ T5908] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2054.446521][ T5908] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2054.470330][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2054.510144][ T5908] usb 2-1: config 0 descriptor?? [ 2054.539330][ T5908] pwc: Askey VC010 type 2 USB webcam detected. [ 2054.728041][ T8228] usb usb44-port1: unable to enumerate USB device [ 2055.018870][T12222] syzkaller1: entered promiscuous mode [ 2055.032702][T12222] syzkaller1: entered allmulticast mode [ 2055.048711][T12228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2055.072964][T12228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2055.216683][ T5908] pwc: recv_control_msg error -32 req 02 val 2700 [ 2055.250086][ T5908] pwc: recv_control_msg error -71 req 02 val 2c00 [ 2055.288127][ T5908] pwc: recv_control_msg error -71 req 04 val 1000 [ 2055.297163][ T5908] pwc: recv_control_msg error -71 req 04 val 1300 [ 2055.325333][ T5908] pwc: recv_control_msg error -71 req 04 val 1400 [ 2055.340320][ T5908] pwc: recv_control_msg error -71 req 02 val 2000 [ 2055.347904][ T5908] pwc: recv_control_msg error -71 req 02 val 2100 [ 2055.348173][T12243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2055.355647][ T5908] pwc: recv_control_msg error -71 req 04 val 1500 [ 2055.397154][T12243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2055.405888][ T5893] usb 7-1: config 0 has an invalid interface number: 16 but max is 0 [ 2055.415012][ T5893] usb 7-1: config 0 has no interface number 0 [ 2055.422877][ T5893] usb 7-1: too many endpoints for config 0 interface 16 altsetting 144: 127, using maximum allowed: 30 [ 2055.434119][ T5893] usb 7-1: config 0 interface 16 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2055.445799][ T5893] usb 7-1: config 0 interface 16 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2055.463249][ T5908] pwc: recv_control_msg error -71 req 02 val 2500 [ 2055.470534][ T5893] usb 7-1: config 0 interface 16 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 2055.504232][ T5908] pwc: recv_control_msg error -71 req 02 val 2400 [ 2055.513021][ T5893] usb 7-1: config 0 interface 16 has no altsetting 0 [ 2055.514986][ T5908] pwc: recv_control_msg error -71 req 02 val 2600 [ 2055.530803][ T5908] pwc: recv_control_msg error -71 req 02 val 2900 [ 2055.538191][ T5908] pwc: recv_control_msg error -71 req 02 val 2800 [ 2055.545517][ T5893] usb 7-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 2055.545981][ T5908] pwc: recv_control_msg error -71 req 04 val 1100 [ 2055.563412][ T5908] pwc: recv_control_msg error -71 req 04 val 1200 [ 2055.579147][ T5908] pwc: Registered as video103. [ 2055.591265][ T5908] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input83 [ 2055.621106][ T5893] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2055.629372][ T5908] usb 2-1: USB disconnect, device number 50 [ 2055.769407][ T5893] usb 7-1: config 0 descriptor?? [ 2055.826025][T12271] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5443'. [ 2057.097026][ T5908] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 2057.280514][ T5908] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 199, changing to 4 [ 2057.341896][ T5908] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 18452, setting to 1023 [ 2057.406562][ T5908] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2057.469380][ T5908] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2057.498216][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2057.550073][ T5908] usb 2-1: Product: syz [ 2057.568326][ T5908] usb 2-1: Manufacturer: syz [ 2057.589788][ T5908] usb 2-1: SerialNumber: syz [ 2057.627491][ T5908] usb 2-1: config 0 descriptor?? [ 2057.678348][ T5908] usb 2-1: selecting invalid altsetting 0 [ 2058.466855][T12335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2058.497460][T12335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2058.951749][T12351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2058.975782][T12351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2059.375591][T12354] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 2059.382136][T12354] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2059.409994][T12354] vhci_hcd vhci_hcd.0: Device attached [ 2059.574389][T12355] vhci_hcd: connection closed [ 2059.574772][T29403] vhci_hcd vhci_hcd.5: stop threads [ 2059.609372][T29403] vhci_hcd vhci_hcd.5: release socket [ 2059.624603][T29403] vhci_hcd vhci_hcd.5: disconnect device [ 2059.988842][ T5908] usb 2-1: USB disconnect, device number 51 [ 2060.470439][T12386] loop8: detected capacity change from 0 to 7 [ 2060.543110][T12386] Dev loop8: unable to read RDB block 7 [ 2060.581560][T12386] loop8: unable to read partition table [ 2060.590928][T12386] loop8: partition table beyond EOD, truncated [ 2060.597888][T12389] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5461'. [ 2060.612634][T12386] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 2060.662935][ T5893] usbhid 7-1:0.16: can't add hid device: -71 [ 2060.690327][ T5893] usbhid 7-1:0.16: probe with driver usbhid failed with error -71 [ 2060.785697][ T5893] usb 7-1: USB disconnect, device number 56 [ 2061.517012][ T5908] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 2061.703895][ T5908] usb 7-1: config 0 has an invalid interface number: 16 but max is 0 [ 2061.721945][ T5908] usb 7-1: config 0 has no interface number 0 [ 2061.742446][ T5908] usb 7-1: too many endpoints for config 0 interface 16 altsetting 144: 127, using maximum allowed: 30 [ 2061.773469][ T5908] usb 7-1: config 0 interface 16 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2061.816231][ T5908] usb 7-1: config 0 interface 16 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2061.868652][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 2061.868670][ T30] audit: type=1326 audit(1770489845.773:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12410 comm="syz.5.5466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06939aeb9 code=0x7fc00000 [ 2061.897863][ T5908] usb 7-1: config 0 interface 16 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 2061.937179][ T5908] usb 7-1: config 0 interface 16 has no altsetting 0 [ 2061.944145][ T5908] usb 7-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 2061.991502][ T5908] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2062.054027][T12430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2062.054565][ T5908] usb 7-1: config 0 descriptor?? [ 2062.113582][T12430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2062.249896][T12441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2062.275715][T12441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2062.630640][T12449] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 2062.637194][T12449] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2062.657903][T12449] vhci_hcd vhci_hcd.0: Device attached [ 2062.784707][ T5908] uclogic 0003:5543:004D.0039: interface is invalid, ignoring [ 2062.803989][T12462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2062.823888][T12462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2062.957418][ T5908] usb 40-1: SetAddress Request (14) to port 0 [ 2062.963901][ T5908] usb 40-1: new SuperSpeed USB device number 14 using vhci_hcd [ 2062.983521][ T5893] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 2063.131459][T12450] vhci_hcd: connection reset by peer [ 2063.145354][ T2960] vhci_hcd vhci_hcd.3: stop threads [ 2063.199451][ T2960] vhci_hcd vhci_hcd.3: release socket [ 2063.218877][ T5893] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 199, changing to 4 [ 2063.236201][ T2960] vhci_hcd vhci_hcd.3: disconnect device [ 2063.255913][T12473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2063.288598][ T5893] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 18452, setting to 1023 [ 2063.307541][T12473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2063.348597][ T5893] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2063.397834][ T5893] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2063.443160][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2063.508713][ T5893] usb 2-1: Product: syz [ 2063.523542][ T5893] usb 2-1: Manufacturer: syz [ 2063.540214][ T5893] usb 2-1: SerialNumber: syz [ 2063.569401][ T5893] usb 2-1: config 0 descriptor?? [ 2063.607420][ T5893] usb 2-1: selecting invalid altsetting 0 [ 2064.239301][ T5893] usb 7-1: USB disconnect, device number 57 [ 2064.405275][T12511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2064.436890][T12511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2064.614837][T12520] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5479'. [ 2064.774222][ C1] [ 2064.774233][ C1] ======================================================== [ 2064.774238][ C1] WARNING: possible irq lock inversion dependency detected [ 2064.774253][ C1] syzkaller #0 Tainted: G L [ 2064.774260][ C1] -------------------------------------------------------- [ 2064.774265][ C1] kworker/1:1/16658 just changed the state of lock: [ 2064.774272][ C1] ffff8880297e9230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 2064.774308][ C1] but this lock took another, SOFTIRQ-READ-unsafe lock in the past: [ 2064.774314][ C1] (tasklist_lock){.+.+}-{3:3} [ 2064.774323][ C1] [ 2064.774323][ C1] [ 2064.774323][ C1] and interrupts could create inverse lock ordering between them. [ 2064.774323][ C1] [ 2064.774328][ C1] [ 2064.774328][ C1] other info that might help us debug this: [ 2064.774332][ C1] Chain exists of: [ 2064.774332][ C1] &dev->event_lock#2 --> kbd_event_lock --> tasklist_lock [ 2064.774332][ C1] [ 2064.774352][ C1] Possible interrupt unsafe locking scenario: [ 2064.774352][ C1] [ 2064.774355][ C1] CPU0 CPU1 [ 2064.774359][ C1] ---- ---- [ 2064.774362][ C1] lock(tasklist_lock); [ 2064.774370][ C1] local_irq_disable(); [ 2064.774374][ C1] lock(&dev->event_lock#2); [ 2064.774384][ C1] lock(kbd_event_lock); [ 2064.774394][ C1] [ 2064.774398][ C1] lock(&dev->event_lock#2); [ 2064.774407][ C1] [ 2064.774407][ C1] *** DEADLOCK *** [ 2064.774407][ C1] [ 2064.774411][ C1] 10 locks held by kworker/1:1/16658: [ 2064.774417][ C1] #0: ffff88813fe55948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 2064.774447][ C1] #1: ffffc9000f427bc0 (console_work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 2064.774474][ C1] #2: ffffffff8e54c760 (console_lock){+.+.}-{0:0}, at: console_callback+0x69/0x450 [ 2064.774506][ C1] #3: ffff888022b68a80 (&helper->lock){+.+.}-{4:4}, at: drm_fb_helper_blank+0xeb/0x140 [ 2064.774531][ C1] #4: ffff888022b70128 (&dev->master_mutex){+.+.}-{4:4}, at: drm_master_internal_acquire+0x20/0x80 [ 2064.774560][ C1] #5: ffff888022b68898 (&client->modeset_mutex){+.+.}-{4:4}, at: drm_client_modeset_dpms+0xe8/0x950 [ 2064.774587][ C1] #6: ffffc9000f427390 (crtc_ww_class_acquire){+.+.}-{0:0}, at: drm_client_modeset_commit_atomic+0x11a/0x7e0 [ 2064.774613][ C1] #7: ffffc9000f4273b8 (crtc_ww_class_mutex){+.+.}-{4:4}, at: drm_client_modeset_commit_atomic+0x11a/0x7e0 [ 2064.774639][ C1] #8: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa5/0x23c0 [ 2064.774663][ C1] #9: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: led_trigger_event+0x4b/0x210 [ 2064.774691][ C1] [ 2064.774691][ C1] the shortest dependencies between 2nd lock and 1st lock: [ 2064.774704][ C1] -> (tasklist_lock){.+.+}-{3:3} { [ 2064.774718][ C1] HARDIRQ-ON-R at: [ 2064.774724][ C1] lock_acquire+0x106/0x330 [ 2064.774737][ C1] _raw_read_lock+0x36/0x50 [ 2064.774747][ C1] __do_wait+0xde/0x740 [ 2064.774759][ C1] do_wait+0x1e7/0x4f0 [ 2064.774770][ C1] kernel_wait+0xd6/0x1c0 [ 2064.774781][ C1] call_usermodehelper_exec_work+0xbe/0x230 [ 2064.774796][ C1] process_scheduled_works+0xaec/0x17a0 [ 2064.774809][ C1] worker_thread+0xda6/0x1360 [ 2064.774822][ C1] kthread+0x726/0x8b0 [ 2064.774832][ C1] ret_from_fork+0x51b/0xa40 [ 2064.774840][ C1] ret_from_fork_asm+0x1a/0x30 [ 2064.774853][ C1] SOFTIRQ-ON-R at: [ 2064.774859][ C1] lock_acquire+0x106/0x330 [ 2064.774871][ C1] _raw_read_lock+0x36/0x50 [ 2064.774879][ C1] __do_wait+0xde/0x740 [ 2064.774890][ C1] do_wait+0x1e7/0x4f0 [ 2064.774901][ C1] kernel_wait+0xd6/0x1c0 [ 2064.774912][ C1] call_usermodehelper_exec_work+0xbe/0x230 [ 2064.774925][ C1] process_scheduled_works+0xaec/0x17a0 [ 2064.774938][ C1] worker_thread+0xda6/0x1360 [ 2064.774951][ C1] kthread+0x726/0x8b0 [ 2064.774961][ C1] ret_from_fork+0x51b/0xa40 [ 2064.774969][ C1] ret_from_fork_asm+0x1a/0x30 [ 2064.774980][ C1] INITIAL USE at: [ 2064.774986][ C1] lock_acquire+0x106/0x330 [ 2064.774998][ C1] _raw_write_lock_irq+0x3d/0x50 [ 2064.775007][ C1] copy_process+0x2199/0x3980 [ 2064.775017][ C1] kernel_clone+0x248/0x870 [ 2064.775026][ C1] user_mode_thread+0x110/0x180 [ 2064.775036][ C1] rest_init+0x23/0x300 [ 2064.775047][ C1] start_kernel+0x380/0x3d0 [ 2064.775061][ C1] x86_64_start_reservations+0x24/0x30 [ 2064.775071][ C1] x86_64_start_kernel+0x143/0x1c0 [ 2064.775081][ C1] common_startup_64+0x13e/0x147 [ 2064.775093][ C1] INITIAL READ USE at: [ 2064.775098][ C1] lock_acquire+0x106/0x330 [ 2064.775110][ C1] _raw_read_lock+0x36/0x50 [ 2064.775119][ C1] __do_wait+0xde/0x740 [ 2064.775133][ C1] do_wait+0x1e7/0x4f0 [ 2064.775144][ C1] kernel_wait+0xd6/0x1c0 [ 2064.775156][ C1] call_usermodehelper_exec_work+0xbe/0x230 [ 2064.775169][ C1] process_scheduled_works+0xaec/0x17a0 [ 2064.775182][ C1] worker_thread+0xda6/0x1360 [ 2064.775195][ C1] kthread+0x726/0x8b0 [ 2064.775204][ C1] ret_from_fork+0x51b/0xa40 [ 2064.775212][ C1] ret_from_fork_asm+0x1a/0x30 [ 2064.775224][ C1] } [ 2064.775227][ C1] ... key at: [] tasklist_lock+0x18/0x40 [ 2064.775322][ C1] ... acquired at: [ 2064.775326][ C1] _raw_read_lock+0x36/0x50 [ 2064.775333][ C1] send_sigurg+0x12b/0x420 [ 2064.775345][ C1] sk_send_sigurg+0x6c/0x2e0 [ 2064.775354][ C1] queue_oob+0x42c/0x4f0 [ 2064.775364][ C1] unix_stream_sendmsg+0xcb1/0xe80 [ 2064.775373][ C1] ____sys_sendmsg+0xa68/0xad0 [ 2064.775385][ C1] ___sys_sendmsg+0x2a5/0x360 [ 2064.775396][ C1] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2064.775407][ C1] do_syscall_64+0xe2/0xf80 [ 2064.775418][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2064.775427][ C1] [ 2064.775429][ C1] -> (&f_owner->lock){....}-{3:3} { [ 2064.775444][ C1] INITIAL USE at: [ 2064.775450][ C1] lock_acquire+0x106/0x330 [ 2064.775461][ C1] _raw_write_lock_irq+0x3d/0x50 [ 2064.775470][ C1] __f_setown+0x67/0x370 [ 2064.775487][ C1] generic_setlease+0xba2/0xed0 [ 2064.775496][ C1] do_fcntl_add_lease+0x35e/0x470 [ 2064.775505][ C1] fcntl_setlease+0x123/0x180 [ 2064.775513][ C1] do_fcntl+0x8b3/0x1a20 [ 2064.775525][ C1] __se_sys_fcntl+0xc8/0x150 [ 2064.775536][ C1] do_syscall_64+0xe2/0xf80 [ 2064.775545][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2064.775555][ C1] INITIAL READ USE at: [ 2064.775561][ C1] lock_acquire+0x106/0x330 [ 2064.775573][ C1] _raw_read_lock_irqsave+0x48/0x60 [ 2064.775582][ C1] send_sigio+0x38/0x370 [ 2064.775593][ C1] kill_fasync+0x24d/0x4d0 [ 2064.775605][ C1] lease_break_callback+0x26/0x30 [ 2064.775615][ C1] __break_lease+0x741/0x1b80 [ 2064.775628][ C1] do_dentry_open+0x73a/0x1420 [ 2064.775639][ C1] vfs_open+0x3b/0x340 [ 2064.775649][ C1] path_openat+0x3486/0x3e20 [ 2064.775662][ C1] do_filp_open+0x22d/0x490 [ 2064.775673][ C1] do_sys_openat2+0x12f/0x220 [ 2064.775684][ C1] __x64_sys_openat+0x138/0x170 [ 2064.775695][ C1] do_syscall_64+0xe2/0xf80 [ 2064.775705][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2064.775714][ C1] } [ 2064.775717][ C1] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 2064.775730][ C1] ... acquired at: [ 2064.775734][ C1] _raw_read_lock_irqsave+0x48/0x60 [ 2064.775742][ C1] send_sigio+0x38/0x370 [ 2064.775753][ C1] kill_fasync+0x24d/0x4d0 [ 2064.775764][ C1] lease_break_callback+0x26/0x30 [ 2064.775773][ C1] __break_lease+0x741/0x1b80 [ 2064.775786][ C1] do_dentry_open+0x73a/0x1420 [ 2064.775795][ C1] vfs_open+0x3b/0x340 [ 2064.775804][ C1] path_openat+0x3486/0x3e20 [ 2064.775816][ C1] do_filp_open+0x22d/0x490 [ 2064.775828][ C1] do_sys_openat2+0x12f/0x220 [ 2064.775838][ C1] __x64_sys_openat+0x138/0x170 [ 2064.775849][ C1] do_syscall_64+0xe2/0xf80 [ 2064.775858][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2064.775867][ C1] [ 2064.775869][ C1] -> (&new->fa_lock){....}-{3:3} { [ 2064.775883][ C1] INITIAL USE at: [ 2064.775889][ C1] lock_acquire+0x106/0x330 [ 2064.775900][ C1] _raw_write_lock_irq+0x3d/0x50 [ 2064.775910][ C1] fasync_remove_entry+0xf1/0x1c0 [ 2064.775921][ C1] lease_modify+0x4f7/0x6c0 [ 2064.775934][ C1] locks_remove_file+0x554/0xee0 [ 2064.775943][ C1] __fput+0x3ae/0xa70 [ 2064.775953][ C1] task_work_run+0x1d9/0x270 [ 2064.775964][ C1] do_exit+0x69b/0x2310 [ 2064.775975][ C1] do_group_exit+0x21b/0x2d0 [ 2064.775986][ C1] get_signal+0x1284/0x1330 [ 2064.775998][ C1] arch_do_signal_or_restart+0xbc/0x830 [ 2064.776011][ C1] exit_to_user_mode_loop+0x86/0x480 [ 2064.776024][ C1] do_syscall_64+0x2b7/0xf80 [ 2064.776033][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2064.776042][ C1] INITIAL READ USE at: [ 2064.776048][ C1] lock_acquire+0x106/0x330 [ 2064.776060][ C1] _raw_read_lock_irqsave+0x48/0x60 [ 2064.776069][ C1] kill_fasync+0x199/0x4d0 [ 2064.776080][ C1] lease_break_callback+0x26/0x30 [ 2064.776090][ C1] __break_lease+0x741/0x1b80 [ 2064.776103][ C1] do_dentry_open+0x73a/0x1420 [ 2064.776114][ C1] vfs_open+0x3b/0x340 [ 2064.776123][ C1] path_openat+0x3486/0x3e20 [ 2064.776136][ C1] do_filp_open+0x22d/0x490 [ 2064.776148][ C1] do_sys_openat2+0x12f/0x220 [ 2064.776158][ C1] __x64_sys_openat+0x138/0x170 [ 2064.776169][ C1] do_syscall_64+0xe2/0xf80 [ 2064.776178][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2064.776187][ C1] } [ 2064.776190][ C1] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 2064.776202][ C1] ... acquired at: [ 2064.776206][ C1] _raw_read_lock_irqsave+0x48/0x60 [ 2064.776214][ C1] kill_fasync+0x199/0x4d0 [ 2064.776225][ C1] __start_tty+0x18c/0x220 [ 2064.776234][ C1] start_tty+0x2b/0x70 [ 2064.776242][ C1] n_tty_set_termios+0xa7c/0x10c0 [ 2064.776254][ C1] tty_set_termios+0xdb3/0x1800 [ 2064.776263][ C1] set_termios+0x566/0x710 [ 2064.776271][ C1] tty_mode_ioctl+0x4a6/0x7d0 [ 2064.776279][ C1] tty_ioctl+0x9c5/0xde0 [ 2064.776289][ C1] __se_sys_ioctl+0xfc/0x170 [ 2064.776300][ C1] do_syscall_64+0xe2/0xf80 [ 2064.776310][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2064.776319][ C1] [ 2064.776321][ C1] -> (&tty->flow.lock){....}-{3:3} { [ 2064.776335][ C1] INITIAL USE at: [ 2064.776340][ C1] lock_acquire+0x106/0x330 [ 2064.776352][ C1] _raw_spin_lock_irqsave+0x40/0x60 [ 2064.776360][ C1] start_tty+0x20/0x70 [ 2064.776369][ C1] n_tty_set_termios+0xa7c/0x10c0 [ 2064.776381][ C1] tty_set_termios+0xdb3/0x1800 [ 2064.776390][ C1] set_termios+0x566/0x710 [ 2064.776398][ C1] tty_mode_ioctl+0x4a6/0x7d0 [ 2064.776407][ C1] tty_ioctl+0x9c5/0xde0 [ 2064.776416][ C1] __se_sys_ioctl+0xfc/0x170 [ 2064.776428][ C1] do_syscall_64+0xe2/0xf80 [ 2064.776438][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2064.776449][ C1] } [ 2064.776454][ C1] ... key at: [] alloc_tty_struct.__key.35+0x0/0x20 [ 2064.776473][ C1] ... acquired at: [ 2064.776485][ C1] _raw_spin_lock_irqsave+0x40/0x60 [ 2064.776498][ C1] stop_tty+0x2f/0x150 [ 2064.776511][ C1] kbd_event+0x2ec1/0x40d0 [ 2064.776527][ C1] input_handle_events_default+0xd4/0x1a0 [ 2064.776541][ C1] input_pass_values+0x288/0x890 [ 2064.776560][ C1] input_event_dispose+0x330/0x6b0 [ 2064.776576][ C1] input_inject_event+0x1dd/0x340 [ 2064.776592][ C1] evdev_write+0x325/0x4c0 [ 2064.776613][ C1] vfs_write+0x29a/0xb90 [ 2064.776632][ C1] ksys_write+0x150/0x270 [ 2064.776644][ C1] do_syscall_64+0xe2/0xf80 [ 2064.776653][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2064.776662][ C1] [ 2064.776665][ C1] -> (kbd_event_lock){....}-{3:3} { [ 2064.776679][ C1] INITIAL USE at: [ 2064.776685][ C1] lock_acquire+0x106/0x330 [ 2064.776697][ C1] _raw_spin_lock_irqsave+0x40/0x60 [ 2064.776705][ C1] vt_reset_unicode+0x2b/0x1a0 [ 2064.776715][ C1] reset_vc+0x68/0x1b0 [ 2064.776723][ C1] vc_init+0x70/0x4a0 [ 2064.776731][ C1] con_init+0x377/0x6a0 [ 2064.776741][ C1] console_init+0xfc/0x3e0 [ 2064.776750][ C1] start_kernel+0x226/0x3d0 [ 2064.776763][ C1] x86_64_start_reservations+0x24/0x30 [ 2064.776773][ C1] x86_64_start_kernel+0x143/0x1c0 [ 2064.776782][ C1] common_startup_64+0x13e/0x147 [ 2064.776793][ C1] } [ 2064.776796][ C1] ... key at: [] kbd_event_lock+0x18/0xa0 [ 2064.776851][ C1] ... acquired at: [ 2064.776854][ C1] _raw_spin_lock+0x2e/0x40 [ 2064.776868][ C1] kbd_event+0xd6/0x40d0 [ 2064.776877][ C1] input_handle_events_default+0xd4/0x1a0 [ 2064.776886][ C1] input_pass_values+0x288/0x890 [ 2064.776897][ C1] input_event_dispose+0x330/0x6b0 [ 2064.776907][ C1] input_event+0x89/0xe0 [ 2064.776917][ C1] rc_keydown+0x62/0x1e0 [ 2064.776928][ C1] su3000_rc_query+0x18b/0x210 [ 2064.776940][ C1] dvb_usb_read_remote_control+0xb4/0x1a0 [ 2064.776950][ C1] process_scheduled_works+0xaec/0x17a0 [ 2064.776964][ C1] worker_thread+0xda6/0x1360 [ 2064.776976][ C1] kthread+0x726/0x8b0 [ 2064.776985][ C1] ret_from_fork+0x51b/0xa40 [ 2064.776993][ C1] ret_from_fork_asm+0x1a/0x30 [ 2064.777005][ C1] [ 2064.777007][ C1] -> (&dev->event_lock#2){..-.}-{3:3} { [ 2064.777024][ C1] IN-SOFTIRQ-W at: [ 2064.777029][ C1] lock_acquire+0x106/0x330 [ 2064.777041][ C1] _raw_spin_lock_irqsave+0x40/0x60 [ 2064.777049][ C1] input_inject_event+0xa5/0x340 [ 2064.777059][ C1] led_trigger_event+0x138/0x210 [ 2064.777073][ C1] kbd_bh+0x1f3/0x300 [ 2064.777084][ C1] tasklet_action_common+0x2da/0x4b0 [ 2064.777094][ C1] handle_softirqs+0x22a/0x7c0 [ 2064.777102][ C1] __irq_exit_rcu+0x5f/0x150 [ 2064.777110][ C1] irq_exit_rcu+0x9/0x30 [ 2064.777118][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2064.777128][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2064.777138][ C1] lock_acquire+0x221/0x330 [ 2064.777149][ C1] unwind_next_frame+0xc2/0x23c0 [ 2064.777159][ C1] arch_stack_walk+0x11b/0x150 [ 2064.777169][ C1] stack_trace_save+0xa9/0x100 [ 2064.777181][ C1] kasan_save_track+0x3e/0x80 [ 2064.777190][ C1] __kasan_kmalloc+0x93/0xb0 [ 2064.777199][ C1] __kmalloc_noprof+0x40c/0x7e0 [ 2064.777208][ C1] drm_atomic_state_init+0x106/0x3e0 [ 2064.777218][ C1] drm_atomic_state_alloc+0xbc/0x100 [ 2064.777228][ C1] drm_client_modeset_commit_atomic+0x122/0x7e0 [ 2064.777241][ C1] drm_client_modeset_dpms+0x198/0x950 [ 2064.777253][ C1] drm_fb_helper_blank+0xf5/0x140 [ 2064.777273][ C1] fb_blank+0xd0/0x220 [ 2064.777286][ C1] fbcon_blank+0x616/0xc00 [ 2064.777298][ C1] do_unblank_screen+0x327/0x8c0 [ 2064.777307][ C1] console_callback+0x1c8/0x450 [ 2064.777317][ C1] process_scheduled_works+0xaec/0x17a0 [ 2064.777330][ C1] worker_thread+0xda6/0x1360 [ 2064.777342][ C1] kthread+0x726/0x8b0 [ 2064.777352][ C1] ret_from_fork+0x51b/0xa40 [ 2064.777360][ C1] ret_from_fork_asm+0x1a/0x30 [ 2064.777372][ C1] INITIAL USE at: [ 2064.777378][ C1] lock_acquire+0x106/0x330 [ 2064.777390][ C1] _raw_spin_lock_irqsave+0x40/0x60 [ 2064.777398][ C1] input_inject_event+0xa5/0x340 [ 2064.777409][ C1] kbd_led_trigger_activate+0xbc/0x100 [ 2064.777421][ C1] led_trigger_set+0x535/0x960 [ 2064.777434][ C1] led_trigger_set_default+0x260/0x2a0 [ 2064.777447][ C1] led_classdev_register_ext+0x787/0x9c0 [ 2064.777459][ C1] input_leds_connect+0x517/0x790 [ 2064.777471][ C1] input_register_device+0xd00/0x1160 [ 2064.777488][ C1] atkbd_connect+0x731/0xa50 [ 2064.777496][ C1] serio_driver_probe+0x82/0xd0 [ 2064.777509][ C1] really_probe+0x267/0xaf0 [ 2064.777519][ C1] __driver_probe_device+0x18c/0x320 [ 2064.777529][ C1] driver_probe_device+0x4f/0x240 [ 2064.777538][ C1] __driver_attach+0x349/0x640 [ 2064.777547][ C1] bus_for_each_dev+0x23b/0x2c0 [ 2064.777559][ C1] serio_handle_event+0x232/0x10d0 [ 2064.777572][ C1] process_scheduled_works+0xaec/0x17a0 [ 2064.777584][ C1] worker_thread+0xda6/0x1360 [ 2064.777597][ C1] kthread+0x726/0x8b0 [ 2064.777607][ C1] ret_from_fork+0x51b/0xa40 [ 2064.777615][ C1] ret_from_fork_asm+0x1a/0x30 [ 2064.777626][ C1] } [ 2064.777629][ C1] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 2064.777644][ C1] ... acquired at: [ 2064.777647][ C1] mark_lock+0x115/0x190 [ 2064.777659][ C1] __lock_acquire+0x689/0x2cf0 [ 2064.777671][ C1] lock_acquire+0x106/0x330 [ 2064.777682][ C1] _raw_spin_lock_irqsave+0x40/0x60 [ 2064.777690][ C1] input_inject_event+0xa5/0x340 [ 2064.777700][ C1] led_trigger_event+0x138/0x210 [ 2064.777712][ C1] kbd_bh+0x1f3/0x300 [ 2064.777724][ C1] tasklet_action_common+0x2da/0x4b0 [ 2064.777733][ C1] handle_softirqs+0x22a/0x7c0 [ 2064.777741][ C1] __irq_exit_rcu+0x5f/0x150 [ 2064.777749][ C1] irq_exit_rcu+0x9/0x30 [ 2064.777756][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2064.777765][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2064.777775][ C1] lock_acquire+0x221/0x330 [ 2064.777786][ C1] unwind_next_frame+0xc2/0x23c0 [ 2064.777795][ C1] arch_stack_walk+0x11b/0x150 [ 2064.777804][ C1] stack_trace_save+0xa9/0x100 [ 2064.777814][ C1] kasan_save_track+0x3e/0x80 [ 2064.777823][ C1] __kasan_kmalloc+0x93/0xb0 [ 2064.777831][ C1] __kmalloc_noprof+0x40c/0x7e0 [ 2064.777839][ C1] drm_atomic_state_init+0x106/0x3e0 [ 2064.777849][ C1] drm_atomic_state_alloc+0xbc/0x100 [ 2064.777859][ C1] drm_client_modeset_commit_atomic+0x122/0x7e0 [ 2064.777871][ C1] drm_client_modeset_dpms+0x198/0x950 [ 2064.777882][ C1] drm_fb_helper_blank+0xf5/0x140 [ 2064.777891][ C1] fb_blank+0xd0/0x220 [ 2064.777902][ C1] fbcon_blank+0x616/0xc00 [ 2064.777914][ C1] do_unblank_screen+0x327/0x8c0 [ 2064.777923][ C1] console_callback+0x1c8/0x450 [ 2064.777932][ C1] process_scheduled_works+0xaec/0x17a0 [ 2064.777945][ C1] worker_thread+0xda6/0x1360 [ 2064.777957][ C1] kthread+0x726/0x8b0 [ 2064.777967][ C1] ret_from_fork+0x51b/0xa40 [ 2064.777974][ C1] ret_from_fork_asm+0x1a/0x30 [ 2064.777985][ C1] [ 2064.777988][ C1] [ 2064.777988][ C1] stack backtrace: [ 2064.777998][ C1] CPU: 1 UID: 0 PID: 16658 Comm: kworker/1:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 2064.778012][ C1] Tainted: [L]=SOFTLOCKUP [ 2064.778015][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2064.778023][ C1] Workqueue: events console_callback [ 2064.778036][ C1] Call Trace: [ 2064.778041][ C1] [ 2064.778047][ C1] dump_stack_lvl+0xe8/0x150 [ 2064.778059][ C1] print_irq_inversion_bug+0x1d2/0x1e0 [ 2064.778069][ C1] mark_lock_irq+0x3d2/0x420 [ 2064.778084][ C1] mark_lock+0x115/0x190 [ 2064.778097][ C1] __lock_acquire+0x689/0x2cf0 [ 2064.778111][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 2064.778125][ C1] ? input_inject_event+0xa5/0x340 [ 2064.778136][ C1] lock_acquire+0x106/0x330 [ 2064.778147][ C1] ? input_inject_event+0xa5/0x340 [ 2064.778159][ C1] ? led_trigger_event+0x4b/0x210 [ 2064.778173][ C1] _raw_spin_lock_irqsave+0x40/0x60 [ 2064.778181][ C1] ? input_inject_event+0xa5/0x340 [ 2064.778192][ C1] input_inject_event+0xa5/0x340 [ 2064.778202][ C1] ? led_trigger_event+0x4b/0x210 [ 2064.778216][ C1] led_trigger_event+0x138/0x210 [ 2064.778229][ C1] kbd_bh+0x1f3/0x300 [ 2064.778242][ C1] tasklet_action_common+0x2da/0x4b0 [ 2064.778254][ C1] handle_softirqs+0x22a/0x7c0 [ 2064.778263][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 2064.778273][ C1] __irq_exit_rcu+0x5f/0x150 [ 2064.778281][ C1] irq_exit_rcu+0x9/0x30 [ 2064.778289][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2064.778299][ C1] [ 2064.778303][ C1] [ 2064.778306][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2064.778317][ C1] RIP: 0010:lock_acquire+0x221/0x330 [ 2064.778330][ C1] Code: ff ff ff e8 41 d0 f6 09 f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 2b 81 52 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 50 b4 f9 09 cc 48 8d 3d 58 1a 52 [ 2064.778339][ C1] RSP: 0018:ffffc9000f426d38 EFLAGS: 00000282 [ 2064.778347][ C1] RAX: d832c535a5419000 RBX: 0000000000000000 RCX: 0000000000000046 [ 2064.778354][ C1] RDX: 000000006293c096 RSI: ffffffff8df350bb RDI: ffffffff8c073b00 [ 2064.778362][ C1] RBP: ffffffff81759195 R08: ffffffff81759195 R09: ffffffff8e55a360 [ 2064.778369][ C1] R10: ffffc9000f426e98 R11: ffffffff81afb440 R12: 0000000000000002 [ 2064.778376][ C1] R13: ffffffff8e55a360 R14: 0000000000000000 R15: 0000000000000246 [ 2064.778383][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 2064.778394][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2064.778405][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 2064.778417][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 2064.778437][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 2064.778447][ C1] unwind_next_frame+0xc2/0x23c0 [ 2064.778457][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 2064.778468][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 2064.778483][ C1] ? ret_from_fork+0x51b/0xa40 [ 2064.778491][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 2064.778503][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2064.778515][ C1] arch_stack_walk+0x11b/0x150 [ 2064.778526][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 2064.778539][ C1] stack_trace_save+0xa9/0x100 [ 2064.778550][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 2064.778561][ C1] ? stack_depot_save_flags+0x33/0x810 [ 2064.778574][ C1] kasan_save_track+0x3e/0x80 [ 2064.778583][ C1] ? kasan_save_track+0x3e/0x80 [ 2064.778591][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 2064.778600][ C1] ? __kmalloc_noprof+0x40c/0x7e0 [ 2064.778608][ C1] ? drm_atomic_state_init+0x106/0x3e0 [ 2064.778618][ C1] ? drm_atomic_state_alloc+0xbc/0x100 [ 2064.778629][ C1] ? drm_client_modeset_commit_atomic+0x122/0x7e0 [ 2064.778641][ C1] ? drm_client_modeset_dpms+0x198/0x950 [ 2064.778652][ C1] ? drm_fb_helper_blank+0xf5/0x140 [ 2064.778661][ C1] ? fb_blank+0xd0/0x220 [ 2064.778673][ C1] ? fbcon_blank+0x616/0xc00 [ 2064.778685][ C1] ? do_unblank_screen+0x327/0x8c0 [ 2064.778695][ C1] ? console_callback+0x1c8/0x450 [ 2064.778704][ C1] ? process_scheduled_works+0xaec/0x17a0 [ 2064.778717][ C1] ? worker_thread+0xda6/0x1360 [ 2064.778730][ C1] ? kthread+0x726/0x8b0 [ 2064.778739][ C1] ? ret_from_fork+0x51b/0xa40 [ 2064.778747][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 2064.778765][ C1] __kasan_kmalloc+0x93/0xb0 [ 2064.778775][ C1] __kmalloc_noprof+0x40c/0x7e0 [ 2064.778783][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 2064.778792][ C1] ? drm_atomic_state_init+0x106/0x3e0 [ 2064.778803][ C1] drm_atomic_state_init+0x106/0x3e0 [ 2064.778815][ C1] drm_atomic_state_alloc+0xbc/0x100 [ 2064.778826][ C1] drm_client_modeset_commit_atomic+0x122/0x7e0 [ 2064.778838][ C1] ? trace_contention_end+0x39/0x100 [ 2064.778849][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 2064.778861][ C1] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 2064.778873][ C1] ? __queue_work+0x1a1/0xf90 [ 2064.778885][ C1] ? __mutex_trylock_common+0x158/0x260 [ 2064.778897][ C1] drm_client_modeset_dpms+0x198/0x950 [ 2064.778909][ C1] ? trace_contention_end+0x39/0x100 [ 2064.778918][ C1] ? __mutex_lock+0x319/0x1300 [ 2064.778929][ C1] ? bit_cursor+0x16e3/0x1f10 [ 2064.778938][ C1] ? __pfx_drm_client_modeset_dpms+0x10/0x10 [ 2064.778950][ C1] ? drm_fb_helper_blank+0xeb/0x140 [ 2064.778960][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 2064.778971][ C1] ? __pfx_bit_cursor+0x10/0x10 [ 2064.778982][ C1] drm_fb_helper_blank+0xf5/0x140 [ 2064.778992][ C1] fb_blank+0xd0/0x220 [ 2064.779005][ C1] fbcon_blank+0x616/0xc00 [ 2064.779019][ C1] ? __pfx_fbcon_blank+0x10/0x10 [ 2064.779033][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 2064.779046][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 2064.779055][ C1] ? do_unblank_screen+0xa7/0x8c0 [ 2064.779064][ C1] ? __pfx_fbcon_blank+0x10/0x10 [ 2064.779077][ C1] do_unblank_screen+0x327/0x8c0 [ 2064.779088][ C1] ? __pfx_do_unblank_screen+0x10/0x10 [ 2064.779097][ C1] ? timer_delete+0x245/0x340 [ 2064.779111][ C1] console_callback+0x1c8/0x450 [ 2064.779121][ C1] ? __pfx_console_callback+0x10/0x10 [ 2064.779131][ C1] ? process_scheduled_works+0xa0f/0x17a0 [ 2064.779144][ C1] ? process_scheduled_works+0xa0f/0x17a0 [ 2064.779157][ C1] process_scheduled_works+0xaec/0x17a0 [ 2064.779175][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 2064.779187][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 2064.779198][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2064.779208][ C1] ? schedule+0x90/0x360 [ 2064.779218][ C1] worker_thread+0xda6/0x1360 [ 2064.779235][ C1] kthread+0x726/0x8b0 [ 2064.779246][ C1] ? __pfx_worker_thread+0x10/0x10 [ 2064.779259][ C1] ? __pfx_kthread+0x10/0x10 [ 2064.779269][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 2064.779277][ C1] ? __pfx_kthread+0x10/0x10 [ 2064.779287][ C1] ret_from_fork+0x51b/0xa40 [ 2064.779297][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 2064.779304][ C1] ? __switch_to+0xc82/0x1410 [ 2064.779317][ C1] ? __pfx_kthread+0x10/0x10 [ 2064.779327][ C1] ret_from_fork_asm+0x1a/0x30 [ 2064.779342][ C1] [ 2065.878805][ T1799] usb 2-1: USB disconnect, device number 52 [ 2068.059364][ T5908] usb 40-1: device descriptor read/8, error -110 [ 2068.447640][ T5908] usb usb40-port1: attempt power cycle [ 2069.018232][ T5908] usb usb40-port1: unable to enumerate USB device