last executing test programs: 4m27.19635531s ago: executing program 4 (id=250): getdents64(0xffffffffffffffff, 0xffffffffffffffff, 0x43) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x1, @bearer=@udp='udp:syz0\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x41044) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000180), 0x3, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b090c, 0x7fffffff, '\x00', @value64=0x10000000000000}}) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001600010000000000000000000a0000000000000014000100f90100000000000000000000d8000001170002"], 0x44}}, 0x0) ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f00000001c0)) r4 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000d3feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a00000085000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee23404aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459664124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaf60c9f7a7281d32142f2fdbc3d37e5a072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a37f7fb9a16059ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a9883815654486fe42cf2f676cdbb91f7582ab314be"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffe10, 0x10, &(0x7f0000000040), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x42) ioctl$KVM_GET_SUPPORTED_CPUID(r5, 0xc008ae05, &(0x7f0000000100)) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000380)={0xc, 0x8, 0x144, {&(0x7f0000001140)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500), 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x111, 0x9}}, 0x20) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @rand_addr=0x64010102}, "00186371ae9b1c03"}}}}}, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="014000000200000004012200a4e200000100db1c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000001800"/28], 0x48) 4m26.076226118s ago: executing program 4 (id=254): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 4m25.095743274s ago: executing program 4 (id=260): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r0, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f00000005c0)={0x1, 0x0, [{0x40000084, 0x0, 0x39}]}) 4m25.068525624s ago: executing program 4 (id=262): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r2) pivot_root(&(0x7f0000000280)='./file0/../file0/../file0/../file0\x00', 0x0) 4m24.966635487s ago: executing program 4 (id=263): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x640}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x312, 0x800}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 4m24.551536807s ago: executing program 4 (id=267): r0 = socket$packet(0x11, 0x3, 0x300) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x7, 0x2, 0x87, 0xffffffff, 0x1}) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080)={0xb, 0x2}, 0x8) 4m23.764499138s ago: executing program 32 (id=267): r0 = socket$packet(0x11, 0x3, 0x300) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x7, 0x2, 0x87, 0xffffffff, 0x1}) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080)={0xb, 0x2}, 0x8) 4.760474268s ago: executing program 3 (id=2034): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240)=0x3) sched_setattr(0x0, &(0x7f0000000280)={0xffffffffffffff07, 0x0, 0x1000000c, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x6, 0xfffffffffffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0x50000, 0x4000}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xa, 0x0, 0x0, 0x7995}, 0x8416, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, &(0x7f00000001c0)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="8c45000043000701fefffffffcdbdf25017c000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xbbe21a6a6c0c72fd}, 0xc000) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) 4.455675906s ago: executing program 2 (id=2039): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000002400)={[{0x7, 0xce, 0xfa, 0x5, 0x3, 0x96, 0x9, 0x6, 0x75, 0x0, 0x2, 0x6, 0xffffdfff}, {0x15, 0x1, 0x6, 0xe7, 0x1, 0x6, 0x2, 0x6, 0xb, 0x5, 0x4, 0x9, 0x1}, {0x2, 0x1004, 0x8, 0x52, 0x1, 0x2a, 0x7f, 0x8, 0xb, 0x40, 0xf4, 0x4, 0x200}], 0x9}) 4.29973515s ago: executing program 0 (id=2042): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_usb_connect(0x3, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) read$char_usb(r3, 0x0, 0x0) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000140)={0x1, 0x0, 0x7b}, &(0x7f0000000fc0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mremap(&(0x7f00000d5000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffd000/0x2000)=nil) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x6083, 0x3) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4044042}, 0x200c0055) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r4, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000001080)=[{0x8, '\x00', @buffer={"4a9f14176e2c9d74e7cfe84302932b57de6a2e2dc00a815b09ea42f96957915b", 0x20}, 0x4}, {0x2a, '\x00', @buffer={"156074847d1f3ec92fd15c5a5ab6e8f6a84f2a1ade3e311b88351c3481518fff", 0x20}, 0x8080009}, {0x1a, '\x00', @st={0x4, [{0x2, @svalue=0x3}, {0x1, @uvalue=0xefd}, {0x2, @uvalue=0x800}, {0x2, @svalue=0xc}]}, 0x1000e5}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0x9}}}, 0x24}}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[], 0x20) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8025000041000701fefffffffeffffff017c0000040042800c00018006000600800a00005a250280bc1c1480b61318"], 0x2580}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) 4.269512911s ago: executing program 2 (id=2043): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) shmat(0x0, &(0x7f0000473000/0x3000)=nil, 0x4000) readv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/103, 0x67}], 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000003f0500010006000000050005000200000005000400000000000900020073797a310020000013000300686173683a6e65742c6966616365"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005700)=ANY=[@ANYBLOB="580000000906010200000000000000000200fdff300007800c00018008000140e8000001140017006261746164765f736c6176655f3000000c00028008000140640101010900020073797a31000000000500010007"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0080) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x40}, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.224212842s ago: executing program 2 (id=2044): syz_open_dev$audion(0x0, 0x8, 0x600) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x100000000000000, 0x0, 0x0, 0x98ce}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0xffffbffffffffffe, 0x9, 0x0, 0x0, 0x100000007fffffff}, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x5, 0x1a4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x8}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 3.9028659s ago: executing program 3 (id=2045): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x3f0a, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x6, 0x30}, 0xc) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0x0, 0x5, 0x134, 0x48, 0x2}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e22, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0x80000001, @empty, 0x5}}, 0x10001fc, 0x7, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 3.759458933s ago: executing program 5 (id=2047): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmmsg$inet6(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="cd", 0x1}], 0x1}}], 0x4000000000000ec, 0x8001) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/152, 0x98, 0x1, 0x0}, &(0x7f0000000180)=0x40) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x20008804, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, 0x3b, 0x301, 0x2270bc22, 0x25dfdbfd, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4000000) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x34090000) r3 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x9, 0x0) 3.689917296s ago: executing program 5 (id=2048): syz_usb_connect(0x5, 0xf4, &(0x7f0000000700)=ANY=[@ANYBLOB="120110014c306f10da0b38011230010203010902e20002a60000000904b10403d7b5d25b09210400020122c705090500100004f40804072501832f08000905000040008103ff0905091b08000c078009042201040e010003090509000000030004090502020002f7810671300c458e9532438d4aae3ef0c9bf5c520b1aaab11a8cae9a60c3160adc1dfedebf5a6ead8834c7780c2eb777ef0caf96cd8b3b77f357f4aa1b662ab40651e6ae8cc63dd9f6e2d24afaed81a927ca2e0354281cfeffffffffffffffbf09aac591308e5c0c3c419bb288a21890e1af4af409050303ff030840040705a6c6415a9f09058503"], 0x0) 3.689264896s ago: executing program 1 (id=2049): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, 0x0, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) 3.366667654s ago: executing program 2 (id=2050): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xc53a, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) sendmsg$kcm(r4, 0x0, 0x0) 3.296831295s ago: executing program 2 (id=2051): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="00010000c580"], 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 3.041267882s ago: executing program 3 (id=2052): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000480), 0x200000c, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) r1 = socket$nl_route(0x10, 0x3, 0x0) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0xc, {0x1, 0x8010001, 0x4d0, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r3, r4, 0x3d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r2, {0x7, 0x26, 0x5, 0xffffffff80010000, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004380)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa0, 0x0, 0x7, {{0x1000000000000002, 0x4, 0xfffffffffffffffe, 0x5, 0xfffffff8, 0x8003, {0x1000000002, 0x1, 0x5, 0x40000003, 0xfffffffffffffff7, 0x5, 0xfffffffb, 0x8, 0xfd55, 0x8000, 0x5, r3, 0x0, 0x1, 0xfffffdff}}, {0x0, 0x6}}}, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x60a41, 0xb3836f6d7a15f29) close_range(r0, r1, 0x0) write$binfmt_misc(r5, &(0x7f0000000440)=';', 0x1) 2.997758153s ago: executing program 3 (id=2053): socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0xa042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYBLOB='\a', @ANYRESHEX], 0x0) 2.483704536s ago: executing program 2 (id=2054): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000900)={0x1c, 0x0, 0x0, 0x0}) 2.119532335s ago: executing program 0 (id=2055): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x1, [0x7, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff3e5, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x8, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000000, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed9b, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, 0x0, 0xfffffffe, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x4, 0x5, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x51, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) openat$sndtimer(0xffffffffffffff9c, 0x0, 0xa1001) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004004) gettid() r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) syz_clone(0x1a4100, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) readv(0xffffffffffffffff, 0x0, 0x0) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r6, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r6, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xce21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8c0}, 0x0) 1.870012452s ago: executing program 5 (id=2056): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240)=0x3) sched_setattr(0x0, &(0x7f0000000280)={0xffffffffffffff07, 0x0, 0x1000000c, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x6, 0xfffffffffffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0x50000, 0x4000}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xa, 0x0, 0x0, 0x7995}, 0x8416, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, &(0x7f00000001c0)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="8c45000043000701fefffffffcdbdf25017c000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xbbe21a6a6c0c72fd}, 0xc000) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) 1.381720815s ago: executing program 3 (id=2057): openat(0xffffffffffffff9c, 0x0, 0x8800, 0x2) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x4000, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x10004, 0x0) syz_usb_connect(0x3, 0x24, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff4000/0x9000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x42}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe800000"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 1.263267587s ago: executing program 0 (id=2058): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0x1, 0xb}, {0x4, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_TARGET={0x8, 0x8, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048800}, 0x400c000) sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0x12, 0x4, 0x0, 0x0) 1.078515172s ago: executing program 1 (id=2059): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmmsg$inet6(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="cd", 0x1}], 0x1}}], 0x4000000000000ec, 0x8001) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/152, 0x98, 0x1, 0x0}, &(0x7f0000000180)=0x40) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x20008804, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, 0x3b, 0x301, 0x2270bc22, 0x25dfdbfd, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4000000) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x34090000) r3 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x9, 0x0) 995.749344ms ago: executing program 0 (id=2060): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4004000) 995.418434ms ago: executing program 1 (id=2061): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xc53a, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) sendmsg$kcm(r4, 0x0, 0x0) 959.504475ms ago: executing program 0 (id=2062): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x3f0a, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x6, 0x30}, 0xc) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e22, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0x80000001, @empty, 0x5}}, 0x10001fc, 0x7, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 937.646806ms ago: executing program 5 (id=2063): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e21, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x3e}, 0xfffffffd}}, 0x1001, 0xb}, &(0x7f0000000380)=0x90) 843.798288ms ago: executing program 5 (id=2064): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="00010000c580"], 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 814.181059ms ago: executing program 3 (id=2065): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_usb_connect(0x3, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) read$char_usb(r3, 0x0, 0x0) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000140)={0x1, 0x0, 0x7b}, &(0x7f0000000fc0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mremap(&(0x7f00000d5000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffd000/0x2000)=nil) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x6083, 0x3) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4044042}, 0x200c0055) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r4, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000001080)=[{0x8, '\x00', @buffer={"4a9f14176e2c9d74e7cfe84302932b57de6a2e2dc00a815b09ea42f96957915b", 0x20}, 0x4}, {0x2a, '\x00', @buffer={"156074847d1f3ec92fd15c5a5ab6e8f6a84f2a1ade3e311b88351c3481518fff", 0x20}, 0x8080009}, {0x1a, '\x00', @st={0x4, [{0x2, @svalue=0x3}, {0x1, @uvalue=0xefd}, {0x2, @uvalue=0x800}, {0x2, @svalue=0xc}]}, 0x1000e5}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0x9}}}, 0x24}}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[], 0x20) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8025000041000701fefffffffeffffff017c0000040042800c00018006000600800a00005a250280bc1c1480b61318"], 0x2580}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) 783.21865ms ago: executing program 1 (id=2066): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000480), 0x200000c, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0xc, {0x1, 0x8010001, 0x4d0, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r2, r3, 0x3d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x26, 0x5, 0xffffffff80010000, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004380)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa0, 0x0, 0x7, {{0x1000000000000002, 0x4, 0xfffffffffffffffe, 0x5, 0xfffffff8, 0x8003, {0x1000000002, 0x1, 0x5, 0x40000003, 0xfffffffffffffff7, 0x5, 0xfffffffb, 0x8, 0xfd55, 0x8000, 0x5, r2, 0x0, 0x1, 0xfffffdff}}, {0x0, 0x6}}}, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x60a41, 0xb3836f6d7a15f29) 654.684103ms ago: executing program 1 (id=2067): r0 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0x4112, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 483.627598ms ago: executing program 1 (id=2068): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x1, [0x7, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff3e5, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x8, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000000, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed9b, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, 0x0, 0xfffffffe, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x4, 0x5, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x51, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) openat$sndtimer(0xffffffffffffff9c, 0x0, 0xa1001) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004004) gettid() r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) syz_clone(0x1a4100, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) readv(0xffffffffffffffff, 0x0, 0x0) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r6, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r6, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xce21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8c0}, 0x0) 92.043757ms ago: executing program 0 (id=2069): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x88, 0x2c, 0xf3f, 0x70bd2b, 0x25dfdbbd, {0x0, 0x0, 0x0, r2, {0xffe0, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_EMATCHES={0x54, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x48, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x44, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x6}, {{0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x7fff, 0x7, 0x7, 0xf2ff}, {{0x2, 0x1}, {0x4, 0x1}}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xffff, 0x3, 0xb}, {0x6, 0x2, 0x7, 0x5}}}]}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) 0s ago: executing program 5 (id=2070): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)="dc", 0x1}], 0x1, 0x3) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000080)="b5", 0x1}, {&(0x7f0000000200)="c9", 0x1}, {&(0x7f0000000340)="01", 0x1}, {&(0x7f0000000400)='Q', 0x1}, {&(0x7f0000000500)="d7", 0x1}, {&(0x7f0000000600)='J', 0x1}, {&(0x7f0000000700)=')', 0x1}, {&(0x7f0000000180)='<', 0x1}], 0x8}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000000a40)="db", 0x1}, {&(0x7f0000001a40)="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", 0x5c1}, {&(0x7f0000000840)="e3", 0x1}, {&(0x7f0000000680)="a7", 0x1}, {&(0x7f0000000540)='k', 0x1}, {&(0x7f00000002c0)="c8", 0x1}, {&(0x7f0000002bc0)}], 0x7}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000940)="b2", 0x1}], 0x1}}], 0x3, 0x4008440) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) kernel console output (not intermixed with test programs): bilities [ 257.698169][ T21] usb 6-1: USB disconnect, device number 21 [ 258.157181][ T6621] usb 2-1: device descriptor read/8, error -71 [ 258.227495][ T8789] netlink: 'syz.3.1338': attribute type 1 has an invalid length. [ 258.281323][ T6621] usb usb2-port1: unable to enumerate USB device [ 258.397883][ T8791] bond4: (slave veth5): Enslaving as an active interface with a down link [ 258.441601][ T8754] netlink: 'syz.5.1327': attribute type 1 has an invalid length. [ 258.461862][ T8754] netlink: 'syz.5.1327': attribute type 2 has an invalid length. [ 258.589811][ T8802] device syzkaller0 entered promiscuous mode [ 258.674891][ T8803] netlink: 'syz.3.1342': attribute type 1 has an invalid length. [ 258.782496][ T8803] device bond5 entered promiscuous mode [ 258.789084][ T8803] 8021q: adding VLAN 0 to HW filter on device bond5 [ 258.839905][ T8807] bond5: (slave bridge2): making interface the new active one [ 258.839930][ T8807] device bridge2 entered promiscuous mode [ 258.840707][ T8807] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 258.892071][ T26] audit: type=1326 audit(1785926423.884:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8801 comm="syz.3.1342" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f841d1f1019 code=0x0 [ 258.919508][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 259.771514][ T6621] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 259.845142][ T8837] device syzkaller0 entered promiscuous mode [ 259.982040][ T6621] usb 4-1: device descriptor read/64, error -71 [ 260.271317][ T6621] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 260.441338][ T2302] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 260.471410][ T6621] usb 4-1: device descriptor read/64, error -71 [ 260.591304][ T6621] usb usb4-port1: attempt power cycle [ 260.741135][ T2302] usb 1-1: Using ep0 maxpacket: 16 [ 260.772710][ T8859] netlink: 'syz.1.1361': attribute type 1 has an invalid length. [ 260.800422][ T8859] device bond9 entered promiscuous mode [ 260.813211][ T8859] 8021q: adding VLAN 0 to HW filter on device bond9 [ 260.839489][ T8859] bond9: (slave bridge5): making interface the new active one [ 260.847193][ T8859] device bridge5 entered promiscuous mode [ 260.853722][ T21] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 260.868249][ T8859] bond9: (slave bridge5): Enslaving as an active interface with an up link [ 260.879841][ T2302] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 260.897932][ T2302] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 260.908345][ T4941] IPv6: ADDRCONF(NETDEV_CHANGE): bond9: link becomes ready [ 260.926520][ T26] audit: type=1326 audit(1785926425.914:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8858 comm="syz.1.1361" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f124a489019 code=0x0 [ 261.011135][ T6621] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 261.101347][ T6621] usb 4-1: device descriptor read/8, error -71 [ 261.101411][ T2302] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 261.124240][ T2302] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.132921][ T21] usb 6-1: Using ep0 maxpacket: 8 [ 261.145445][ T2302] usb 1-1: Product: syz [ 261.149717][ T2302] usb 1-1: Manufacturer: syz [ 261.157234][ T2302] usb 1-1: SerialNumber: syz [ 261.271338][ T21] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 261.279584][ T21] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 261.289445][ T21] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 261.289473][ T21] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 261.289494][ T21] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 261.289533][ T21] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 261.289557][ T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.371120][ T6621] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 261.461353][ T6621] usb 4-1: device descriptor read/8, error -71 [ 261.491354][ T2302] usb 1-1: 0:2 : does not exist [ 261.542703][ T21] usb 6-1: usb_control_msg returned -32 [ 261.555034][ T21] usbtmc 6-1:16.0: can't read capabilities [ 261.571273][ T2302] usb 1-1: USB disconnect, device number 19 [ 261.581403][ T6621] usb usb4-port1: unable to enumerate USB device [ 261.734843][ T21] usb 6-1: USB disconnect, device number 22 [ 261.882482][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 262.061635][ T8874] device syzkaller0 entered promiscuous mode [ 262.151567][ T8852] netlink: 'syz.5.1358': attribute type 1 has an invalid length. [ 262.191353][ T8852] netlink: 'syz.5.1358': attribute type 2 has an invalid length. [ 262.652290][ T8898] netlink: 'syz.3.1372': attribute type 1 has an invalid length. [ 262.670986][ T8898] device bond6 entered promiscuous mode [ 262.677661][ T8898] 8021q: adding VLAN 0 to HW filter on device bond6 [ 262.749374][ T8898] bond6: (slave bridge3): making interface the new active one [ 262.777321][ T26] audit: type=1326 audit(1785926427.764:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8897 comm="syz.3.1372" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f841d1f1019 code=0x0 [ 262.815707][ T8898] device bridge3 entered promiscuous mode [ 262.860542][ T8898] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 262.928293][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready [ 263.751036][ T8920] device syzkaller0 entered promiscuous mode [ 264.227855][ T2302] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 264.381152][ T6627] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 264.491235][ T2302] usb 6-1: Using ep0 maxpacket: 16 [ 264.515900][ T8941] netlink: 'syz.3.1385': attribute type 1 has an invalid length. [ 264.530241][ T8941] device bond7 entered promiscuous mode [ 264.537089][ T8941] 8021q: adding VLAN 0 to HW filter on device bond7 [ 264.547378][ T8941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1385'. [ 264.564780][ T8941] bond7: (slave bridge4): making interface the new active one [ 264.572661][ T8941] device bridge4 entered promiscuous mode [ 264.579086][ T8941] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 264.581212][ T6627] usb 1-1: device descriptor read/64, error -71 [ 264.588015][ T4941] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready [ 264.612412][ T26] audit: type=1326 audit(1785926429.604:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8940 comm="syz.3.1385" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f841d1f1019 code=0x0 [ 264.636231][ T6621] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 264.641596][ T2302] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.654918][ T2302] usb 6-1: config 0 interface 0 has no altsetting 0 [ 264.661721][ T2302] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 264.671202][ T2302] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.687959][ T2302] usb 6-1: config 0 descriptor?? [ 264.861820][ T6627] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 264.881342][ T6621] usb 2-1: Using ep0 maxpacket: 16 [ 265.001315][ T6621] usb 2-1: config 166 has an invalid interface number: 177 but max is 1 [ 265.013341][ T6621] usb 2-1: config 166 has an invalid interface number: 34 but max is 1 [ 265.023013][ T6621] usb 2-1: config 166 has no interface number 0 [ 265.029267][ T6621] usb 2-1: config 166 has no interface number 1 [ 265.038087][ T6621] usb 2-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 265.050264][ T6621] usb 2-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 265.067547][ T6627] usb 1-1: device descriptor read/64, error -71 [ 265.074184][ T6621] usb 2-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 265.091639][ T6621] usb 2-1: config 166 interface 34 altsetting 1 has an invalid endpoint with address 0xA6, skipping [ 265.108592][ T6621] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 265.127360][ T6621] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 265.137636][ T6621] usb 2-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 265.157468][ T6621] usb 2-1: config 166 interface 177 has no altsetting 0 [ 265.165109][ T6621] usb 2-1: config 166 interface 34 has no altsetting 0 [ 265.186782][ T2302] hid-generic 0003:1E71:2009.0008: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 265.215363][ T6627] usb usb1-port1: attempt power cycle [ 265.331261][ T6621] usb 2-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 265.352348][ T6621] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.360403][ T6621] usb 2-1: Product: syz [ 265.368516][ T6621] usb 2-1: Manufacturer: syz [ 265.373203][ T6621] usb 2-1: SerialNumber: syz [ 265.631133][ T6627] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 265.671940][ T6621] ums-realtek 2-1:166.177: USB Mass Storage device detected [ 265.682466][ T1108] usb 6-1: USB disconnect, device number 23 [ 265.731294][ T6627] usb 1-1: device descriptor read/8, error -71 [ 265.781670][ T6621] ums-realtek 2-1:166.34: USB Mass Storage device detected [ 265.881218][ T6621] usb 2-1: Found UVC 0.00 device syz (0bda:0138) [ 265.887940][ T6621] usb 2-1: No valid video chain found. [ 265.897695][ T6621] usb 2-1: USB disconnect, device number 22 [ 265.909295][ T4178] udevd[4178]: setting mode of /dev/bus/usb/002/022 to 020664 failed: No such file or directory [ 265.930291][ T4178] udevd[4178]: setting owner of /dev/bus/usb/002/022 to uid=0, gid=0 failed: No such file or directory [ 266.006559][ T6627] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 266.101223][ T6627] usb 1-1: device descriptor read/8, error -71 [ 266.221288][ T6627] usb usb1-port1: unable to enumerate USB device [ 266.391344][ T2302] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 266.771420][ T2302] usb 3-1: not running at top speed; connect to a high speed hub [ 266.881322][ T2302] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.899791][ T2302] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice= 1.00 [ 266.910007][ T2302] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.972554][ T2302] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 267.164453][ T8995] tipc: Enabled bearer , priority 0 [ 267.199177][ T8995] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 267.235252][ T8995] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 267.247070][ T8994] tipc: Disabling bearer [ 267.376155][ T8997] netlink: 'syz.1.1400': attribute type 1 has an invalid length. [ 267.398055][ T8997] device bond10 entered promiscuous mode [ 267.404607][ T8997] 8021q: adding VLAN 0 to HW filter on device bond10 [ 267.450249][ T8997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1400'. [ 267.504291][ T8997] bond10: (slave bridge6): making interface the new active one [ 267.538213][ T26] audit: type=1326 audit(1785926432.524:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8996 comm="syz.1.1400" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f124a489019 code=0x0 [ 267.637583][ T8997] device bridge6 entered promiscuous mode [ 267.728179][ T8997] bond10: (slave bridge6): Enslaving as an active interface with an up link [ 267.806392][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): bond10: link becomes ready [ 268.261189][ T6627] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 268.531121][ T6627] usb 2-1: Using ep0 maxpacket: 16 [ 268.691298][ T6627] usb 2-1: config 166 has an invalid interface number: 177 but max is 1 [ 268.706077][ T6627] usb 2-1: config 166 has an invalid interface number: 34 but max is 1 [ 268.734892][ T6627] usb 2-1: config 166 has no interface number 0 [ 268.759530][ T6627] usb 2-1: config 166 has no interface number 1 [ 268.787774][ T6627] usb 2-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 268.824911][ T6627] usb 2-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 268.854469][ T6627] usb 2-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 268.885568][ T6627] usb 2-1: config 166 interface 34 altsetting 1 has an invalid endpoint with address 0xA6, skipping [ 268.918137][ T6627] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 268.951255][ T6627] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 268.988338][ T6627] usb 2-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 269.026755][ T6627] usb 2-1: config 166 interface 177 has no altsetting 0 [ 269.054180][ T6627] usb 2-1: config 166 interface 34 has no altsetting 0 [ 269.341427][ T6627] usb 2-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 269.351161][ T6627] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.361190][ T6627] usb 2-1: Product: syz [ 269.376106][ T6627] usb 2-1: Manufacturer: syz [ 270.348963][ T6627] usb 2-1: SerialNumber: syz [ 270.379134][ T5697] usb 3-1: USB disconnect, device number 30 [ 270.600584][ T9038] tipc: Enabled bearer , priority 0 [ 270.609075][ T9038] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 270.619496][ T9038] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 270.629474][ T9036] tipc: Disabling bearer [ 270.681935][ T6627] ums-realtek 2-1:166.177: USB Mass Storage device detected [ 270.770231][ T9044] device syzkaller0 entered promiscuous mode [ 270.782082][ T6627] ums-realtek 2-1:166.34: USB Mass Storage device detected [ 270.817372][ T9046] netlink: 'syz.5.1414': attribute type 1 has an invalid length. [ 270.833234][ T9046] device bond11 entered promiscuous mode [ 270.839274][ T9046] 8021q: adding VLAN 0 to HW filter on device bond11 [ 270.850711][ T9046] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1414'. [ 270.890500][ T9046] bond11: (slave bridge8): making interface the new active one [ 270.898292][ T9046] device bridge8 entered promiscuous mode [ 270.905640][ T9046] bond11: (slave bridge8): Enslaving as an active interface with an up link [ 270.914725][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): bond11: link becomes ready [ 270.930170][ T26] audit: type=1326 audit(1785926435.914:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9045 comm="syz.5.1414" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff382ee5019 code=0x0 [ 270.931625][ T6627] usb 2-1: Found UVC 0.00 device syz (0bda:0138) [ 270.961909][ T6627] usb 2-1: No valid video chain found. [ 270.984978][ T6627] usb 2-1: USB disconnect, device number 23 [ 271.666172][ T9069] binder: 9068:9069 ioctl 4018620d 0 returned -22 [ 271.828803][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 271.842144][ T9070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.855822][ T9070] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.989715][ T21] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 272.020730][ T9070] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 272.251633][ T21] usb 2-1: Using ep0 maxpacket: 16 [ 272.333522][ T9079] device syzkaller0 entered promiscuous mode [ 272.343779][ T9079] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 272.354491][ T9079] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 272.371220][ T21] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.386118][ T21] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 272.554888][ T21] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 272.570069][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.580955][ T21] usb 2-1: Product: syz [ 272.586778][ T21] usb 2-1: Manufacturer: syz [ 272.602767][ T21] usb 2-1: SerialNumber: syz [ 272.901299][ T2302] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 272.931556][ T21] usb 2-1: 0:2 : does not exist [ 272.981896][ T21] usb 2-1: USB disconnect, device number 24 [ 273.025139][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 273.441273][ T2302] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 273.450523][ T2302] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.459182][ T2302] usb 6-1: Product: syz [ 273.464040][ T2302] usb 6-1: Manufacturer: syz [ 273.468673][ T2302] usb 6-1: SerialNumber: syz [ 273.721289][ T6627] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 273.911263][ T6627] usb 2-1: device descriptor read/64, error -71 [ 273.941287][ T2302] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 274.001219][ T5697] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 274.191405][ T6627] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 274.371291][ T5697] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.381603][ T6627] usb 2-1: device descriptor read/64, error -71 [ 274.514367][ T6627] usb usb2-port1: attempt power cycle [ 274.549125][ T9098] netlink: 'syz.2.1430': attribute type 1 has an invalid length. [ 274.561627][ T5697] usb 4-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 274.573298][ T9098] device bond9 entered promiscuous mode [ 274.577438][ T5697] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.579474][ T9098] 8021q: adding VLAN 0 to HW filter on device bond9 [ 274.587526][ T5697] usb 4-1: Product: syz [ 274.603567][ T9098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1430'. [ 274.604661][ T5697] usb 4-1: Manufacturer: syz [ 274.618023][ T5697] usb 4-1: SerialNumber: syz [ 274.628999][ T9098] bond9: (slave bridge3): making interface the new active one [ 274.636672][ T9098] device bridge3 entered promiscuous mode [ 274.644129][ T9098] bond9: (slave bridge3): Enslaving as an active interface with an up link [ 274.652976][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): bond9: link becomes ready [ 274.662996][ T5697] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 274.669965][ T26] audit: type=1326 audit(1785926439.654:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9097 comm="syz.2.1430" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4d617af019 code=0x0 [ 274.941140][ T6627] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 275.031326][ T6627] usb 2-1: device descriptor read/8, error -71 [ 275.041363][ T2302] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 275.057165][ T2302] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 275.067211][ T2302] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 275.079810][ T2302] lan78xx: probe of 6-1:1.0 failed with error -71 [ 275.090309][ T2302] usb 6-1: USB disconnect, device number 24 [ 275.301140][ T6627] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 275.391422][ T6627] usb 2-1: device descriptor read/8, error -71 [ 275.516957][ T6627] usb usb2-port1: unable to enumerate USB device [ 275.699224][ T9110] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 275.717619][ T9110] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 276.381863][ T9115] binder: 9112:9115 ioctl 4018620d 0 returned -22 [ 276.531205][ T5697] gspca_mr97310a: reg write [21] error -71 [ 276.544344][ T5697] mr97310a: probe of 4-1:1.0 failed with error -71 [ 276.590410][ T5697] usb 4-1: USB disconnect, device number 26 [ 277.295413][ T9144] netlink: 'syz.2.1442': attribute type 1 has an invalid length. [ 277.394123][ T9144] device bond10 entered promiscuous mode [ 277.433833][ T9144] 8021q: adding VLAN 0 to HW filter on device bond10 [ 277.487822][ T9146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1442'. [ 277.519175][ T26] audit: type=1326 audit(1785926442.504:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9143 comm="syz.2.1442" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4d617af019 code=0x0 [ 277.549053][ T9148] bond10: (slave bridge4): making interface the new active one [ 277.557294][ T9148] device bridge4 entered promiscuous mode [ 277.565108][ T9148] bond10: (slave bridge4): Enslaving as an active interface with an up link [ 277.575058][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): bond10: link becomes ready [ 277.777736][ T9154] device syzkaller0 entered promiscuous mode [ 278.131179][ T6627] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 278.381339][ T6627] usb 2-1: Using ep0 maxpacket: 32 [ 278.501519][ T6627] usb 2-1: config 0 has no interfaces? [ 278.661425][ T6627] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 278.681125][ T6627] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.708037][ T6627] usb 2-1: Product: syz [ 278.735851][ T6627] usb 2-1: Manufacturer: syz [ 278.746918][ T6627] usb 2-1: SerialNumber: syz [ 278.775066][ T6627] usb 2-1: config 0 descriptor?? [ 278.831196][ T2302] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 278.927677][ T9171] binder: 9170:9171 ioctl 4018620d 0 returned -22 [ 279.091194][ T2302] usb 3-1: Using ep0 maxpacket: 32 [ 279.371328][ T2302] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 279.380541][ T2302] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.389357][ T2302] usb 3-1: Product: syz [ 279.393870][ T2302] usb 3-1: Manufacturer: syz [ 279.398665][ T2302] usb 3-1: SerialNumber: syz [ 279.405821][ T2302] usb 3-1: config 0 descriptor?? [ 279.663244][ T2302] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 031 [ 279.901215][ T6637] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 280.118765][ T2302] usb 2-1: USB disconnect, device number 29 [ 280.151019][ T9190] device syzkaller0 entered promiscuous mode [ 280.157369][ T6637] usb 6-1: Using ep0 maxpacket: 16 [ 280.281416][ T6637] usb 6-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.295284][ T6637] usb 6-1: config 0 interface 0 has no altsetting 0 [ 280.305452][ T6637] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 280.315517][ T6637] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.325605][ T6637] usb 6-1: config 0 descriptor?? [ 280.371291][ T9169] i2c i2c-1: failure reading status [ 280.378484][ T6627] usb 3-1: USB disconnect, device number 31 [ 280.804259][ T6637] mcp2221 0003:04D8:00DD.0009: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 281.279894][ T6621] usb 6-1: USB disconnect, device number 25 [ 281.431237][ T6627] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 281.921719][ T6627] usb 3-1: unable to get BOS descriptor or descriptor too short [ 281.971425][ T6627] usb 3-1: not running at top speed; connect to a high speed hub [ 282.061541][ T6627] usb 3-1: config 4 has an invalid interface number: 79 but max is 0 [ 282.075838][ T6627] usb 3-1: config 4 has no interface number 0 [ 282.084154][ T6627] usb 3-1: config 4 interface 79 has no altsetting 0 [ 282.104585][ T6621] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 282.271231][ T6627] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=e3.b7 [ 282.287559][ T6627] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.297994][ T6627] usb 3-1: Product: syz [ 282.309014][ T6627] usb 3-1: Manufacturer: syz [ 282.319320][ T6627] usb 3-1: SerialNumber: syz [ 282.321257][ T6637] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 282.381205][ T6621] usb 6-1: Using ep0 maxpacket: 32 [ 282.521183][ T6637] usb 4-1: device descriptor read/64, error -71 [ 282.561468][ T6621] usb 6-1: unable to get BOS descriptor or descriptor too short [ 282.583878][ T9213] udc-core: couldn't find an available UDC or it's busy [ 282.592558][ T9213] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 282.661348][ T6621] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 282.669685][ T6621] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 282.678631][ T6621] usb 6-1: config 14 has no interface number 0 [ 282.685088][ T6621] usb 6-1: config 14 has no interface number 1 [ 282.691658][ T6621] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 282.702677][ T6621] usb 6-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 282.713960][ T6621] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 282.725432][ T6621] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 282.738654][ T6621] usb 6-1: config 14 interface 57 has no altsetting 0 [ 282.745499][ T6621] usb 6-1: config 14 interface 228 has no altsetting 0 [ 282.801188][ T6637] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 282.911295][ T6621] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 282.920579][ T6621] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.928729][ T6621] usb 6-1: Product: syz [ 282.933027][ T6621] usb 6-1: Manufacturer: syz [ 282.937633][ T6621] usb 6-1: SerialNumber: syz [ 283.011181][ T6637] usb 4-1: device descriptor read/64, error -71 [ 283.131293][ T6637] usb usb4-port1: attempt power cycle [ 283.321336][ T6627] viperboard 3-1:4.79: version 0.00 found at bus 003 address 032 [ 283.351447][ T6627] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 283.360257][ T6627] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 283.377743][ T6627] usb 3-1: USB disconnect, device number 32 [ 283.423095][ T6621] legousbtower 6-1:14.57: interrupt endpoints not found [ 283.561210][ T6637] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 283.632625][ T6621] legousbtower 6-1:14.228: interrupt endpoints not found [ 283.682019][ T6637] usb 4-1: device descriptor read/8, error -71 [ 283.784387][ T9229] fuse: Bad value for 'fd' [ 283.827194][ T9231] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) ! [ 283.837435][ T9231] sch_tbf: burst 8 is lower than device syzkaller0 mtu (313) ! [ 283.951274][ T6637] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 284.061391][ T6637] usb 4-1: device descriptor read/8, error -71 [ 284.192547][ T6637] usb usb4-port1: unable to enumerate USB device [ 284.574370][ T9247] tipc: Resetting bearer [ 285.170205][ T9261] device syzkaller0 entered promiscuous mode [ 285.199433][ T9263] fuse: Bad value for 'fd' [ 285.302506][ T9268] device syzkaller0 entered promiscuous mode [ 285.337006][ T9268] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 285.347012][ T9268] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 285.426721][ T5697] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 285.494737][ T9275] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 285.514196][ T9275] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 285.523492][ T9275] pit: kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 285.532810][ T9275] pit: kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 285.541388][ T9275] pit: kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 285.550055][ T9275] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 285.558813][ T9275] pit: kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 285.567377][ T9275] pit: kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 285.670564][ T9283] binder: BINDER_SET_CONTEXT_MGR already set [ 285.677942][ T9283] binder: 9281:9283 ioctl 4018620d 200000004a80 returned -16 [ 285.679968][ T5697] usb 1-1: Using ep0 maxpacket: 16 [ 285.801356][ T5697] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.811955][ T6627] usb 6-1: USB disconnect, device number 26 [ 285.821150][ T5697] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 285.981367][ T5697] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 285.990466][ T5697] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.999003][ T5697] usb 1-1: Product: syz [ 286.003325][ T5697] usb 1-1: Manufacturer: syz [ 286.007931][ T5697] usb 1-1: SerialNumber: syz [ 286.241259][ T6627] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 286.331288][ T5697] usb 1-1: 0:2 : does not exist [ 286.384936][ T5697] usb 1-1: USB disconnect, device number 24 [ 286.431259][ T6627] usb 6-1: device descriptor read/64, error -71 [ 286.603060][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 286.701238][ T6627] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 286.891291][ T6627] usb 6-1: device descriptor read/64, error -71 [ 287.011318][ T6627] usb usb6-port1: attempt power cycle [ 287.096874][ T9300] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 287.257558][ T9300] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 287.399225][ T9303] tipc: Resetting bearer [ 287.516404][ T9308] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) ! [ 287.533688][ T9308] sch_tbf: burst 8 is lower than device syzkaller0 mtu (313) ! [ 287.707212][ T9319] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 287.766119][ T9324] binder: 9323:9324 ioctl c0306201 0 returned -14 [ 287.891233][ T6627] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 287.991239][ T6627] usb 6-1: device descriptor read/8, error -71 [ 288.261229][ T6627] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 288.351266][ T6627] usb 6-1: device descriptor read/8, error -71 [ 288.481370][ T6627] usb usb6-port1: unable to enumerate USB device [ 288.663598][ T9333] device syzkaller0 entered promiscuous mode [ 288.691478][ T6637] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 288.820921][ T9340] device syzkaller0 entered promiscuous mode [ 288.832300][ T9340] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 288.842448][ T9340] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 288.921298][ T2302] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 288.961335][ T6637] usb 3-1: Using ep0 maxpacket: 16 [ 288.982092][ T9345] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 289.071289][ T5697] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 289.112709][ T6637] usb 3-1: config 166 has an invalid interface number: 177 but max is 1 [ 289.125780][ T6637] usb 3-1: config 166 has an invalid interface number: 34 but max is 1 [ 289.134796][ T6637] usb 3-1: config 166 has no interface number 0 [ 289.142894][ T9351] netlink: 'syz.1.1511': attribute type 1 has an invalid length. [ 289.143457][ T6637] usb 3-1: config 166 has no interface number 1 [ 289.157262][ T6637] usb 3-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 289.166534][ T9351] device bond11 entered promiscuous mode [ 289.171878][ T6637] usb 3-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 289.175296][ T9351] 8021q: adding VLAN 0 to HW filter on device bond11 [ 289.193367][ T6637] usb 3-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 289.210421][ T9351] bond11: (slave bridge7): making interface the new active one [ 289.213209][ T6637] usb 3-1: config 166 interface 34 altsetting 1 has an invalid endpoint with address 0xA6, skipping [ 289.218142][ T9351] device bridge7 entered promiscuous mode [ 289.235848][ T6637] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 289.236273][ T9351] bond11: (slave bridge7): Enslaving as an active interface with an up link [ 289.254081][ T6637] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 289.271255][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): bond11: link becomes ready [ 289.286172][ T6637] usb 3-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 289.286791][ T26] audit: type=1326 audit(1785926454.274:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9350 comm="syz.1.1511" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f124a489019 code=0x0 [ 289.301829][ T6637] usb 3-1: config 166 interface 177 has no altsetting 0 [ 289.324774][ T5697] usb 1-1: Using ep0 maxpacket: 8 [ 289.336960][ T6637] usb 3-1: config 166 interface 34 has no altsetting 0 [ 289.421476][ T2302] usb 4-1: unable to get BOS descriptor or descriptor too short [ 289.441697][ T5697] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 289.450023][ T5697] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 289.460143][ T5697] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 289.470333][ T5697] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 289.480530][ T5697] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 289.481338][ T2302] usb 4-1: not running at top speed; connect to a high speed hub [ 289.493985][ T5697] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 289.494014][ T5697] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.520127][ T6637] usb 3-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 289.529500][ T6637] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.537773][ T6637] usb 3-1: Product: syz [ 289.542256][ T6637] usb 3-1: Manufacturer: syz [ 289.547227][ T6637] usb 3-1: SerialNumber: syz [ 289.611319][ T2302] usb 4-1: config 4 has an invalid interface number: 79 but max is 0 [ 289.624042][ T2302] usb 4-1: config 4 has no interface number 0 [ 289.630414][ T2302] usb 4-1: config 4 interface 79 has no altsetting 0 [ 289.761184][ T5697] usb 1-1: usb_control_msg returned -32 [ 289.767050][ T5697] usbtmc 1-1:16.0: can't read capabilities [ 289.831512][ T2302] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=e3.b7 [ 289.840877][ T2302] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.849152][ T2302] usb 4-1: Product: syz [ 289.854656][ T6637] ums-realtek 3-1:166.177: USB Mass Storage device detected [ 289.863132][ T2302] usb 4-1: Manufacturer: syz [ 289.867973][ T2302] usb 4-1: SerialNumber: syz [ 289.945987][ T6637] ums-realtek 3-1:166.34: USB Mass Storage device detected [ 289.965160][ T4232] usb 1-1: USB disconnect, device number 25 [ 290.023735][ T9367] binder: 9366:9367 ioctl c0306201 0 returned -14 [ 290.081355][ T6637] usb 3-1: Found UVC 0.00 device syz (0bda:0138) [ 290.087981][ T6637] usb 3-1: No valid video chain found. [ 290.097762][ T6637] usb 3-1: USB disconnect, device number 33 [ 290.125072][ T9332] udc-core: couldn't find an available UDC or it's busy [ 290.133061][ T9332] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 290.291685][ T9337] netlink: 'syz.0.1506': attribute type 1 has an invalid length. [ 290.299648][ T9337] netlink: 'syz.0.1506': attribute type 2 has an invalid length. [ 290.631146][ T5697] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 290.871151][ T5697] usb 3-1: Using ep0 maxpacket: 32 [ 290.871313][ T2302] viperboard 4-1:4.79: version 0.00 found at bus 004 address 031 [ 290.941357][ T2302] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 290.968085][ T2302] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 290.988175][ T9378] device syzkaller0 entered promiscuous mode [ 290.991351][ T5697] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 291.003474][ T2302] usb 4-1: USB disconnect, device number 31 [ 291.011785][ T5697] usb 3-1: config 0 has no interface number 0 [ 291.171447][ T5697] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 291.180771][ T5697] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.195948][ T5697] usb 3-1: Product: syz [ 291.200240][ T5697] usb 3-1: Manufacturer: syz [ 291.205266][ T5697] usb 3-1: SerialNumber: syz [ 291.218491][ T5697] usb 3-1: config 0 descriptor?? [ 291.273772][ T5697] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 291.282759][ T5697] usb 3-1: selecting invalid altsetting 1 [ 291.288528][ T5697] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 291.298451][ T5697] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 291.311730][ T5697] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 291.326407][ T5697] usb 3-1: media controller created [ 291.344900][ T5697] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 291.381148][ T6627] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 291.408865][ T9392] netlink: 'syz.3.1523': attribute type 1 has an invalid length. [ 291.426045][ T9392] device bond8 entered promiscuous mode [ 291.436060][ T9392] 8021q: adding VLAN 0 to HW filter on device bond8 [ 291.453143][ T9392] bond8: (slave bridge5): making interface the new active one [ 291.460642][ T9392] device bridge5 entered promiscuous mode [ 291.467582][ T9392] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 291.477035][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): bond8: link becomes ready [ 291.500665][ T26] audit: type=1326 audit(1785926456.484:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9391 comm="syz.3.1523" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f841d1f1019 code=0x0 [ 291.641186][ T6627] usb 1-1: Using ep0 maxpacket: 16 [ 291.761423][ T6627] usb 1-1: config 166 has an invalid interface number: 177 but max is 1 [ 291.769965][ T6627] usb 1-1: config 166 has an invalid descriptor of length 0, skipping remainder of the config [ 291.780320][ T6627] usb 1-1: config 166 has 1 interface, different from the descriptor's value: 2 [ 291.789426][ T6627] usb 1-1: config 166 has no interface number 0 [ 291.796038][ T6627] usb 1-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 291.807146][ T6627] usb 1-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 291.818241][ T6627] usb 1-1: config 166 interface 177 has no altsetting 0 [ 291.959585][ T9403] device syzkaller0 entered promiscuous mode [ 291.981415][ T6627] usb 1-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 291.990688][ T6627] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.006076][ T6627] usb 1-1: Product: syz [ 292.010444][ T6627] usb 1-1: Manufacturer: syz [ 292.016909][ T6627] usb 1-1: SerialNumber: syz [ 292.120941][ T9405] binder: 9404:9405 ioctl c0306201 0 returned -14 [ 292.301932][ T6627] ums-realtek 1-1:166.177: USB Mass Storage device detected [ 292.372210][ T6627] usb 1-1: USB disconnect, device number 26 [ 292.386740][ T9417] device syzkaller0 entered promiscuous mode [ 292.481206][ T5697] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 292.493350][ T5697] zl10353_read_register: readreg error (reg=127, ret==-110) [ 292.542459][ T9372] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 292.578141][ T6637] usb 3-1: USB disconnect, device number 34 [ 292.831228][ T6621] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 293.133673][ T9428] udc-core: couldn't find an available UDC or it's busy [ 293.152463][ T9440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1538'. [ 293.158426][ T9428] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 293.189372][ T26] audit: type=1326 audit(1785926458.174:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9439 comm="syz.1.1538" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f124a489019 code=0x0 [ 293.706540][ T9460] device syzkaller0 entered promiscuous mode [ 293.891279][ T6621] usb 6-1: unable to get BOS descriptor or descriptor too short [ 294.011207][ T6621] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 294.041220][ T6621] usb 6-1: can't read configurations, error -71 [ 294.189439][ T9469] netlink: 'syz.3.1546': attribute type 1 has an invalid length. [ 294.225478][ T9469] bond9: (slave veth7): Enslaving as an active interface with a down link [ 294.236373][ T9469] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1546'. [ 294.571267][ T6627] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 294.741224][ T6621] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 294.831274][ T6627] usb 4-1: Using ep0 maxpacket: 16 [ 294.971251][ T6627] usb 4-1: config 166 has an invalid interface number: 177 but max is 1 [ 294.984500][ T6627] usb 4-1: config 166 has an invalid descriptor of length 0, skipping remainder of the config [ 294.995569][ T6621] usb 6-1: Using ep0 maxpacket: 32 [ 295.007935][ T6627] usb 4-1: config 166 has 1 interface, different from the descriptor's value: 2 [ 295.017701][ T6627] usb 4-1: config 166 has no interface number 0 [ 295.030716][ T6627] usb 4-1: config 166 interface 177 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 295.051528][ T6627] usb 4-1: config 166 interface 177 has no altsetting 0 [ 295.137714][ T6621] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 295.147634][ T9487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1554'. [ 295.147766][ T6621] usb 6-1: config 0 has no interface number 0 [ 295.219293][ T26] audit: type=1326 audit(1785926460.204:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9486 comm="syz.0.1554" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5ea5dbd019 code=0x0 [ 295.281581][ T6627] usb 4-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 295.292244][ T6627] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.300618][ T6627] usb 4-1: Product: syz [ 295.305322][ T6627] usb 4-1: Manufacturer: syz [ 295.310007][ T6627] usb 4-1: SerialNumber: syz [ 295.381272][ T6621] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 295.392349][ T6621] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.400771][ T6621] usb 6-1: Product: syz [ 295.405263][ T6621] usb 6-1: Manufacturer: syz [ 295.409892][ T6621] usb 6-1: SerialNumber: syz [ 295.417053][ T6621] usb 6-1: config 0 descriptor?? [ 295.472721][ T6621] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 295.481822][ T6621] usb 6-1: selecting invalid altsetting 1 [ 295.487601][ T6621] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 295.496510][ T6621] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 295.507121][ T6621] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 295.515642][ T6621] usb 6-1: media controller created [ 295.529782][ T6621] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 295.592231][ T6627] ums-realtek 4-1:166.177: USB Mass Storage device detected [ 295.649595][ T6627] usb 4-1: USB disconnect, device number 32 [ 295.947133][ T9496] device syzkaller0 entered promiscuous mode [ 296.086044][ T9500] netlink: 'syz.3.1557': attribute type 1 has an invalid length. [ 296.113056][ T9500] bond10: (slave veth9): Enslaving as an active interface with a down link [ 296.126391][ T9500] bond10: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 296.224605][ T9504] create_pit_timer: 14 callbacks suppressed [ 296.224621][ T9504] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 296.271205][ T5697] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 296.471160][ T6637] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 296.510243][ T9521] tipc: Resetting bearer [ 296.531139][ T5697] usb 1-1: Using ep0 maxpacket: 16 [ 296.661480][ T6621] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 296.668796][ T6621] zl10353_read_register: readreg error (reg=127, ret==-110) [ 296.681369][ T5697] usb 1-1: config 166 has an invalid interface number: 177 but max is 1 [ 296.693378][ T5697] usb 1-1: config 166 has an invalid interface number: 34 but max is 1 [ 296.708126][ T5697] usb 1-1: config 166 has no interface number 0 [ 296.718764][ T5697] usb 1-1: config 166 has no interface number 1 [ 296.726324][ T9477] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 296.733516][ T5697] usb 1-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 296.747435][ T6621] usb 6-1: USB disconnect, device number 32 [ 296.753667][ T5697] usb 1-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 296.767028][ T5697] usb 1-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 296.784983][ T9505] udc-core: couldn't find an available UDC or it's busy [ 296.798787][ T9505] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 296.806880][ T5697] usb 1-1: config 166 interface 34 altsetting 1 has an invalid endpoint with address 0xA6, skipping [ 296.822538][ T5697] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 296.837372][ T5697] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 296.848825][ T5697] usb 1-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 296.865783][ T5697] usb 1-1: config 166 interface 177 has no altsetting 0 [ 296.873027][ T5697] usb 1-1: config 166 interface 34 has no altsetting 0 [ 296.927160][ T9523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1566'. [ 297.003227][ T26] audit: type=1326 audit(1785926461.994:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.3.1566" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f841d1f1019 code=0x0 [ 297.031532][ T5697] usb 1-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 297.041156][ T5697] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.049188][ T5697] usb 1-1: Product: syz [ 297.053825][ T5697] usb 1-1: Manufacturer: syz [ 297.058437][ T5697] usb 1-1: SerialNumber: syz [ 297.352087][ T5697] ums-realtek 1-1:166.177: USB Mass Storage device detected [ 297.441902][ T5697] ums-realtek 1-1:166.34: USB Mass Storage device detected [ 297.491333][ T6637] usb 2-1: unable to get BOS descriptor or descriptor too short [ 297.561259][ T5697] usb 1-1: Found UVC 0.00 device syz (0bda:0138) [ 297.567812][ T5697] usb 1-1: No valid video chain found. [ 297.577955][ T5697] usb 1-1: USB disconnect, device number 27 [ 297.651245][ T6637] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 297.658847][ T6637] usb 2-1: can't read configurations, error -71 [ 297.719023][ T9552] tipc: Resetting bearer [ 297.872229][ T9561] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 298.041170][ T5697] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 298.281148][ T5697] usb 4-1: Using ep0 maxpacket: 32 [ 298.426372][ T5697] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 298.437872][ T5697] usb 4-1: config 0 has no interface number 0 [ 298.561323][ T4232] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 298.567867][ T9588] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 298.641319][ T5697] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 298.655658][ T9592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1588'. [ 298.657165][ T5697] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.673238][ T5697] usb 4-1: Product: syz [ 298.677430][ T5697] usb 4-1: Manufacturer: syz [ 298.682112][ T5697] usb 4-1: SerialNumber: syz [ 298.688839][ T5697] usb 4-1: config 0 descriptor?? [ 298.726982][ T26] audit: type=1326 audit(1785926463.714:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9591 comm="syz.1.1588" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f124a489019 code=0x0 [ 298.752491][ T5697] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 298.770595][ T5697] usb 4-1: selecting invalid altsetting 1 [ 298.776745][ T5697] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 298.797029][ T5697] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 298.801411][ T4232] usb 3-1: Using ep0 maxpacket: 16 [ 298.807649][ T5697] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 298.818791][ T9596] device syzkaller0 entered promiscuous mode [ 298.825935][ T5697] usb 4-1: media controller created [ 298.830201][ T9596] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 298.842953][ T9596] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 298.849510][ T5697] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 298.951016][ T4232] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.969271][ T4232] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 299.131256][ T4232] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 299.140648][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.149225][ T4232] usb 3-1: Product: syz [ 299.153692][ T4232] usb 3-1: Manufacturer: syz [ 299.158343][ T4232] usb 3-1: SerialNumber: syz [ 299.251186][ T6621] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 299.485935][ T4232] usb 3-1: 0:2 : does not exist [ 299.535152][ T4232] usb 3-1: USB disconnect, device number 35 [ 299.610809][ T9599] udc-core: couldn't find an available UDC or it's busy [ 299.618129][ T9599] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 299.772559][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 300.021396][ T5697] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 300.028566][ T5697] zl10353_read_register: readreg error (reg=127, ret==-110) [ 300.071221][ T9557] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 300.086601][ T5697] usb 4-1: USB disconnect, device number 33 [ 300.218592][ T9624] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 300.269842][ T9629] tipc: Resetting bearer [ 300.286702][ T6621] usb 1-1: unable to get BOS descriptor or descriptor too short [ 300.313687][ T9630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1601'. [ 300.383888][ T26] audit: type=1326 audit(1785926465.374:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9628 comm="syz.1.1601" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f124a489019 code=0x0 [ 300.451220][ T6621] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 300.459308][ T6621] usb 1-1: can't read configurations, error -71 [ 301.386144][ T9665] device syzkaller0 entered promiscuous mode [ 301.395556][ T9665] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 301.410012][ T9665] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 301.432706][ T6637] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 301.551338][ T4232] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 301.681200][ T6637] usb 2-1: Using ep0 maxpacket: 16 [ 301.801255][ T6637] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.811650][ T4232] usb 3-1: Using ep0 maxpacket: 32 [ 301.831325][ T6637] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 301.891428][ T21] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 301.931574][ T4232] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 301.946875][ T4232] usb 3-1: config 0 has no interface number 0 [ 301.992013][ T6637] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 302.008181][ T6637] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.018814][ T6637] usb 2-1: Product: syz [ 302.038654][ T6637] usb 2-1: Manufacturer: syz [ 302.062706][ T6637] usb 2-1: SerialNumber: syz [ 302.121264][ T4232] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 302.130719][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.145888][ T4232] usb 3-1: Product: syz [ 302.150083][ T4232] usb 3-1: Manufacturer: syz [ 302.156475][ T4232] usb 3-1: SerialNumber: syz [ 302.170441][ T4232] usb 3-1: config 0 descriptor?? [ 302.213090][ T4232] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 302.229315][ T4232] usb 3-1: selecting invalid altsetting 1 [ 302.235675][ T4232] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 302.253379][ T4232] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 302.270764][ T4232] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 302.279618][ T4232] usb 3-1: media controller created [ 302.306812][ T21] usb 4-1: unable to get BOS descriptor or descriptor too short [ 302.322710][ T4232] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 302.371315][ T21] usb 4-1: not running at top speed; connect to a high speed hub [ 302.381546][ T6637] usb 2-1: 0:2 : does not exist [ 302.437522][ T6637] usb 2-1: USB disconnect, device number 32 [ 302.451266][ T21] usb 4-1: config 4 has an invalid interface number: 79 but max is 0 [ 302.466166][ T21] usb 4-1: config 4 has no interface number 0 [ 302.497978][ T21] usb 4-1: config 4 interface 79 altsetting 7 endpoint 0x6 has invalid maxpacket 57550, setting to 64 [ 302.509807][ T21] usb 4-1: config 4 interface 79 has no altsetting 0 [ 302.672610][ T21] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=e3.b7 [ 302.687038][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.698214][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 302.721824][ T21] usb 4-1: Product: syz [ 302.727695][ T21] usb 4-1: Manufacturer: syz [ 302.740793][ T21] usb 4-1: SerialNumber: syz [ 302.781489][ T9670] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 302.782769][ T9653] Set syz1 is full, maxelem 65536 reached [ 303.004721][ T9670] udc-core: couldn't find an available UDC or it's busy [ 303.023316][ T9670] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 303.451296][ T4232] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 303.458931][ T4232] zl10353_read_register: readreg error (reg=127, ret==-110) [ 303.511281][ T9663] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 303.523343][ T4232] usb 3-1: USB disconnect, device number 36 [ 303.721191][ T6627] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 303.761215][ T21] viperboard 4-1:4.79: version 0.00 found at bus 004 address 034 [ 303.791228][ T21] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 303.800024][ T21] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 303.815071][ T21] usb 4-1: USB disconnect, device number 34 [ 303.931349][ T6627] usb 2-1: device descriptor read/64, error -71 [ 304.202029][ T6627] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 304.331277][ T21] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 304.403014][ T6627] usb 2-1: device descriptor read/64, error -71 [ 304.531359][ T6627] usb usb2-port1: attempt power cycle [ 304.591205][ T21] usb 3-1: Using ep0 maxpacket: 32 [ 304.611264][ T4232] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 304.721266][ T21] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 304.735112][ T21] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.758441][ T21] usb 3-1: config 0 has no interface number 0 [ 304.770200][ T21] usb 3-1: config 0 interface 89 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 304.783550][ T21] usb 3-1: config 0 interface 89 has no altsetting 0 [ 304.871498][ T4232] usb 4-1: Using ep0 maxpacket: 16 [ 304.941239][ T6627] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 304.971415][ T21] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 304.983219][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.991632][ T4232] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 305.002213][ T21] usb 3-1: Product: syz [ 305.006429][ T21] usb 3-1: Manufacturer: syz [ 305.011367][ T4232] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 305.020681][ T21] usb 3-1: SerialNumber: syz [ 305.027620][ T21] usb 3-1: config 0 descriptor?? [ 305.041543][ T6627] usb 2-1: device descriptor read/8, error -71 [ 305.211226][ T4232] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 305.220450][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.228912][ T4232] usb 4-1: Product: syz [ 305.233619][ T4232] usb 4-1: Manufacturer: syz [ 305.238206][ T4232] usb 4-1: SerialNumber: syz [ 305.311196][ T6627] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 305.321244][ T6637] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 305.401494][ T6627] usb 2-1: device descriptor read/8, error -71 [ 305.481209][ T21] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 305.521620][ T6627] usb usb2-port1: unable to enumerate USB device [ 305.571503][ T4232] usb 4-1: 0:2 : does not exist [ 305.591225][ T6637] usb 1-1: Using ep0 maxpacket: 32 [ 305.628535][ T4232] usb 4-1: USB disconnect, device number 35 [ 305.731254][ T6637] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 305.739363][ T6637] usb 1-1: config 0 has no interface number 0 [ 305.745579][ T21] usb 6-1: Using ep0 maxpacket: 16 [ 305.842325][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 305.861398][ T21] usb 6-1: config 166 has an invalid interface number: 177 but max is 1 [ 305.869823][ T21] usb 6-1: config 166 has an invalid interface number: 34 but max is 1 [ 305.878618][ T21] usb 6-1: config 166 has no interface number 0 [ 305.885814][ T21] usb 6-1: config 166 has no interface number 1 [ 305.892482][ T21] usb 6-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 305.903441][ T21] usb 6-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 305.914390][ T6637] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 305.923569][ T21] usb 6-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 305.934490][ T6637] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.942728][ T21] usb 6-1: config 166 interface 34 altsetting 1 has an invalid endpoint with address 0xA6, skipping [ 305.953719][ T6637] usb 1-1: Product: syz [ 305.957985][ T6637] usb 1-1: Manufacturer: syz [ 305.962661][ T6637] usb 1-1: SerialNumber: syz [ 305.967732][ T21] usb 6-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 305.979913][ T6637] usb 1-1: config 0 descriptor?? [ 305.985212][ T21] usb 6-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 305.995332][ T21] usb 6-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 306.008742][ T21] usb 6-1: config 166 interface 177 has no altsetting 0 [ 306.015878][ T21] usb 6-1: config 166 interface 34 has no altsetting 0 [ 306.024770][ T6637] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 306.035838][ T6637] usb 1-1: selecting invalid altsetting 1 [ 306.042600][ T6637] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 306.063769][ T6637] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 306.074457][ T6637] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 306.082874][ T6637] usb 1-1: media controller created [ 306.096238][ T6637] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 306.191330][ T21] usb 6-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 306.200483][ T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.208542][ T21] usb 6-1: Product: syz [ 306.212818][ T21] usb 6-1: Manufacturer: syz [ 306.217418][ T21] usb 6-1: SerialNumber: syz [ 306.331149][ T6627] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 306.354076][ T6621] usb 3-1: USB disconnect, device number 37 [ 306.503785][ T21] ums-realtek 6-1:166.177: USB Mass Storage device detected [ 306.591965][ T21] ums-realtek 6-1:166.34: USB Mass Storage device detected [ 306.681287][ T21] usb 6-1: Found UVC 0.00 device syz (0bda:0138) [ 306.688084][ T21] usb 6-1: No valid video chain found. [ 306.700095][ T21] usb 6-1: USB disconnect, device number 33 [ 306.781232][ T6627] usb 4-1: unable to get BOS descriptor or descriptor too short [ 306.831357][ T6627] usb 4-1: not running at top speed; connect to a high speed hub [ 306.921358][ T6627] usb 4-1: config 4 has an invalid interface number: 79 but max is 0 [ 306.929480][ T6627] usb 4-1: config 4 has no interface number 0 [ 306.939563][ T6627] usb 4-1: config 4 interface 79 altsetting 7 endpoint 0x6 has invalid maxpacket 57550, setting to 64 [ 306.950809][ T6627] usb 4-1: config 4 interface 79 has no altsetting 0 [ 307.060453][ T9750] fuse: Bad value for 'fd' [ 307.151451][ T6627] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=e3.b7 [ 307.160783][ T6627] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.169055][ T6627] usb 4-1: Product: syz [ 307.173621][ T6627] usb 4-1: Manufacturer: syz [ 307.178284][ T6627] usb 4-1: SerialNumber: syz [ 307.211268][ T6637] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 307.221268][ T6637] zl10353_read_register: readreg error (reg=127, ret==-110) [ 307.221799][ T9731] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 307.261304][ T9725] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 307.310247][ T6637] usb 1-1: USB disconnect, device number 30 [ 307.530815][ T9731] udc-core: couldn't find an available UDC or it's busy [ 307.537951][ T9731] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 307.828145][ T9763] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 308.141317][ T6637] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 308.275833][ T6627] viperboard 4-1:4.79: version 0.00 found at bus 004 address 036 [ 308.304938][ T6627] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 308.313756][ T6627] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 308.333182][ T6627] usb 4-1: USB disconnect, device number 36 [ 308.341216][ T6637] usb 1-1: device descriptor read/64, error -71 [ 308.611177][ T6637] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 308.673474][ T9791] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 308.751973][ T9795] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 308.801326][ T6637] usb 1-1: device descriptor read/64, error -71 [ 308.855831][ T9806] fuse: Bad value for 'fd' [ 308.947736][ T6637] usb usb1-port1: attempt power cycle [ 309.138988][ T9819] tipc: Resetting bearer [ 309.148590][ T9819] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) ! [ 309.161886][ T9819] sch_tbf: burst 8 is lower than device syzkaller0 mtu (313) ! [ 309.237753][ T9825] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 309.335290][ T9829] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 309.361190][ T6637] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 309.451229][ T6637] usb 1-1: device descriptor read/8, error -71 [ 309.471164][ T21] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 309.721182][ T6637] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 309.816196][ T6637] usb 1-1: device descriptor read/8, error -71 [ 309.871311][ T21] usb 3-1: unable to get BOS descriptor or descriptor too short [ 309.878958][ T9850] device syzkaller0 entered promiscuous mode [ 309.888147][ T9850] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 309.903057][ T9850] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 309.921392][ T21] usb 3-1: not running at top speed; connect to a high speed hub [ 309.941469][ T6637] usb usb1-port1: unable to enumerate USB device [ 310.001211][ T21] usb 3-1: config 4 has an invalid interface number: 79 but max is 0 [ 310.018961][ T21] usb 3-1: config 4 has no interface number 0 [ 310.026938][ T21] usb 3-1: config 4 interface 79 altsetting 7 endpoint 0x6 has invalid maxpacket 57550, setting to 64 [ 310.038331][ T21] usb 3-1: config 4 interface 79 has no altsetting 0 [ 310.115742][ T9854] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 310.196268][ T9858] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 310.201413][ T21] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=e3.b7 [ 310.217668][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.226161][ T21] usb 3-1: Product: syz [ 310.230358][ T21] usb 3-1: Manufacturer: syz [ 310.243616][ T21] usb 3-1: SerialNumber: syz [ 310.281444][ T9823] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 310.505274][ T9823] udc-core: couldn't find an available UDC or it's busy [ 310.517535][ T9823] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 310.567321][ T9876] device syzkaller0 entered promiscuous mode [ 310.791286][ T6621] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 310.976033][ T9897] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 310.991238][ T6637] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 311.004021][ T9902] device syzkaller0 entered promiscuous mode [ 311.048220][ T6621] usb 6-1: Using ep0 maxpacket: 16 [ 311.201407][ T6621] usb 6-1: config 166 has an invalid interface number: 177 but max is 1 [ 311.210371][ T6621] usb 6-1: config 166 has an invalid interface number: 34 but max is 1 [ 311.218761][ T6621] usb 6-1: config 166 has no interface number 0 [ 311.225845][ T6621] usb 6-1: config 166 has no interface number 1 [ 311.232400][ T6621] usb 6-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 311.241302][ T21] viperboard 3-1:4.79: version 0.00 found at bus 003 address 038 [ 311.243629][ T6621] usb 6-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 311.251871][ T6637] usb 4-1: Using ep0 maxpacket: 32 [ 311.263845][ T6621] usb 6-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 311.287612][ T6621] usb 6-1: config 166 interface 34 altsetting 1 has an invalid endpoint with address 0xA6, skipping [ 311.291328][ T21] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 311.299862][ T6621] usb 6-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 311.309103][ T21] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 311.326820][ T6621] usb 6-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 311.340763][ T21] usb 3-1: USB disconnect, device number 38 [ 311.347416][ T6621] usb 6-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 311.365110][ T6621] usb 6-1: config 166 interface 177 has no altsetting 0 [ 311.372986][ T6621] usb 6-1: config 166 interface 34 has no altsetting 0 [ 311.381642][ T6637] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 311.390283][ T6637] usb 4-1: config 0 has no interface number 0 [ 311.411131][ T6637] usb 4-1: config 0 interface 89 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 311.427982][ T6637] usb 4-1: config 0 interface 89 has no altsetting 0 [ 311.561461][ T6621] usb 6-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 311.570741][ T6621] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.578780][ T6621] usb 6-1: Product: syz [ 311.583256][ T6621] usb 6-1: Manufacturer: syz [ 311.588565][ T6621] usb 6-1: SerialNumber: syz [ 311.601360][ T6637] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 311.610611][ T6637] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.619017][ T6637] usb 4-1: Product: syz [ 311.623781][ T6637] usb 4-1: Manufacturer: syz [ 311.628411][ T6637] usb 4-1: SerialNumber: syz [ 311.635377][ T6637] usb 4-1: config 0 descriptor?? [ 311.911893][ T6621] ums-realtek 6-1:166.177: USB Mass Storage device detected [ 312.022020][ T6621] ums-realtek 6-1:166.34: USB Mass Storage device detected [ 312.151342][ T6621] usb 6-1: Found UVC 0.00 device syz (0bda:0138) [ 312.157883][ T6621] usb 6-1: No valid video chain found. [ 312.168231][ T6621] usb 6-1: USB disconnect, device number 34 [ 312.371144][ T6637] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 312.561831][ T6637] usb 1-1: device descriptor read/64, error -71 [ 312.638819][ T9943] device syzkaller0 entered promiscuous mode [ 312.851222][ T6637] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 312.985292][ T21] usb 4-1: USB disconnect, device number 37 [ 313.051604][ T6637] usb 1-1: device descriptor read/64, error -71 [ 313.192348][ T6637] usb usb1-port1: attempt power cycle [ 313.318480][ T9977] device syzkaller0 entered promiscuous mode [ 313.601213][ T6637] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 313.701331][ T6637] usb 1-1: device descriptor read/8, error -71 [ 313.971188][ T6637] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 314.061355][ T6637] usb 1-1: device descriptor read/8, error -71 [ 314.181343][ T6637] usb usb1-port1: unable to enumerate USB device [ 314.270711][T10008] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1737'. [ 314.300599][ T26] audit: type=1326 audit(1785926479.284:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10007 comm="syz.5.1737" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff382ee5019 code=0x0 [ 314.915135][T10018] device syzkaller0 entered promiscuous mode [ 315.021236][T10020] fuse: Bad value for 'group_id' [ 315.419894][T10046] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 315.619147][T10051] fuse: Bad value for 'group_id' [ 315.801750][T10054] device syzkaller0 entered promiscuous mode [ 315.875704][T10055] fuse: Bad value for 'fd' [ 316.441272][ T6637] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 316.555798][T10084] tipc: Enabling of bearer rejected, failed to enable media [ 316.596108][T10084] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) ! [ 316.620223][T10084] sch_tbf: burst 8 is lower than device syzkaller0 mtu (313) ! [ 316.811230][ T6637] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 316.824002][ T6637] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 316.991215][ T6637] usb 4-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 317.027713][ T6637] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.043202][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.049586][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.071161][ T6637] usb 4-1: Product: syz [ 317.075705][ T6637] usb 4-1: Manufacturer: syz [ 317.087261][ T6637] usb 4-1: SerialNumber: syz [ 317.234974][T10096] device syzkaller0 entered promiscuous mode [ 317.361727][ T5697] usb 4-1: USB disconnect, device number 38 [ 317.758534][T10111] tipc: Enabling of bearer rejected, failed to enable media [ 317.788332][T10111] device syzkaller0 entered promiscuous mode [ 317.820639][T10111] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 317.855568][T10111] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 318.121231][ T6627] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 318.384611][ T6627] usb 2-1: Using ep0 maxpacket: 16 [ 318.511338][ T6627] usb 2-1: config 166 has an invalid interface number: 177 but max is 1 [ 318.527965][ T6627] usb 2-1: config 166 has an invalid interface number: 34 but max is 1 [ 318.621223][ T6627] usb 2-1: config 166 has no interface number 0 [ 318.632358][ T6627] usb 2-1: config 166 has no interface number 1 [ 318.675233][ T6627] usb 2-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 318.722024][ T6627] usb 2-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 318.765887][ T6627] usb 2-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 318.798788][ T6627] usb 2-1: config 166 interface 34 altsetting 1 has an invalid endpoint with address 0xA6, skipping [ 318.831171][ T6627] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 318.905908][ T6627] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 318.946746][ T6627] usb 2-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 318.980635][ T6627] usb 2-1: config 166 interface 177 has no altsetting 0 [ 319.023414][ T6627] usb 2-1: config 166 interface 34 has no altsetting 0 [ 319.231423][ T6627] usb 2-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 319.250494][ T6627] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.281162][ T6627] usb 2-1: Product: syz [ 319.304315][ T6627] usb 2-1: Manufacturer: syz [ 319.329162][ T6627] usb 2-1: SerialNumber: syz [ 319.438342][T10169] device syzkaller0 entered promiscuous mode [ 319.661877][ T6627] ums-realtek 2-1:166.177: USB Mass Storage device detected [ 319.700484][T10181] fuse: Bad value for 'fd' [ 319.811999][ T6627] ums-realtek 2-1:166.34: USB Mass Storage device detected [ 319.880012][T10190] input: syz0 as /devices/virtual/input/input27 [ 319.881196][ T21] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 319.931527][ T6627] usb 2-1: Found UVC 0.00 device syz (0bda:0138) [ 319.937930][ T6627] usb 2-1: No valid video chain found. [ 319.948913][ T6627] usb 2-1: USB disconnect, device number 37 [ 320.085176][T10203] tipc: Enabling of bearer rejected, failed to enable media [ 320.096486][T10203] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) ! [ 320.116322][T10203] sch_tbf: burst 8 is lower than device syzkaller0 mtu (313) ! [ 320.151208][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 320.272455][ T21] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 320.279589][T10212] device syzkaller0 entered promiscuous mode [ 320.289380][ T21] usb 1-1: config 0 has no interface number 0 [ 320.462065][ T21] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 320.491217][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.509348][ T21] usb 1-1: Product: syz [ 320.528766][ T21] usb 1-1: Manufacturer: syz [ 320.544583][ T21] usb 1-1: SerialNumber: syz [ 320.559700][ T21] usb 1-1: config 0 descriptor?? [ 320.612367][ T21] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 320.625802][ T21] usb 1-1: selecting invalid altsetting 1 [ 320.642354][ T21] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 320.669645][T10224] device syzkaller0 entered promiscuous mode [ 320.686695][ T21] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 320.712636][ T21] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 320.720952][ T21] usb 1-1: media controller created [ 320.758096][ T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 320.930492][T10234] tipc: Enabling of bearer rejected, failed to enable media [ 320.950764][T10234] device syzkaller0 entered promiscuous mode [ 320.983344][T10234] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 321.029009][T10234] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 321.611629][T10263] input: syz0 as /devices/virtual/input/input28 [ 321.630782][T10265] device syzkaller0 entered promiscuous mode [ 321.842509][ T21] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 321.871596][ T21] zl10353_read_register: readreg error (reg=127, ret==-110) [ 321.911246][T10232] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 321.941428][ T21] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 322.024883][ T21] usb 1-1: USB disconnect, device number 39 [ 322.231216][ T5697] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 322.631504][ T5697] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 322.659118][ T5697] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 322.871426][ T5697] usb 6-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 322.931187][ T5697] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.974100][ T5697] usb 6-1: Product: syz [ 322.978342][ T5697] usb 6-1: Manufacturer: syz [ 323.021163][ T5697] usb 6-1: SerialNumber: syz [ 323.313289][ T21] usb 6-1: USB disconnect, device number 35 [ 323.341141][ T6621] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 323.601393][ T6621] usb 4-1: Using ep0 maxpacket: 8 [ 323.761399][ T6621] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 323.775221][ T6621] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 323.801198][ T6621] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 323.825455][ T6621] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 323.847760][ T6621] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 323.899643][ T6621] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 323.940059][ T6621] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.174257][ T21] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 324.251248][ T6621] usb 4-1: usb_control_msg returned -32 [ 324.257085][ T6621] usbtmc 4-1:16.0: can't read capabilities [ 324.426600][ T6621] usb 4-1: USB disconnect, device number 39 [ 324.431190][ T21] usb 6-1: Using ep0 maxpacket: 32 [ 324.551450][ T21] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 324.559509][ T21] usb 6-1: config 0 has no interface number 0 [ 324.727052][ T21] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 324.740861][ T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.767087][ T21] usb 6-1: Product: syz [ 324.783622][ T21] usb 6-1: Manufacturer: syz [ 324.801212][ T21] usb 6-1: SerialNumber: syz [ 324.816667][ T21] usb 6-1: config 0 descriptor?? [ 324.832057][T10296] netlink: 'syz.3.1849': attribute type 1 has an invalid length. [ 324.843195][T10296] netlink: 'syz.3.1849': attribute type 2 has an invalid length. [ 324.863154][ T21] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 324.872452][ T21] usb 6-1: selecting invalid altsetting 1 [ 324.878199][ T21] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 324.905766][ T21] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 324.918753][ T21] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 324.933765][ T21] usb 6-1: media controller created [ 324.957124][ T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 325.301226][ T6637] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 325.661228][ T6637] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 325.681133][ T6637] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 325.781171][ T6621] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 325.851403][ T6637] usb 3-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 325.865503][ T6637] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.882583][ T6637] usb 3-1: Product: syz [ 325.891393][ T6637] usb 3-1: Manufacturer: syz [ 325.906717][ T6637] usb 3-1: SerialNumber: syz [ 325.963210][ T6637] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 325.970776][ T6637] gspca_mr97310a: reg write [21] error -22 [ 325.979084][ T6637] mr97310a: probe of 3-1:1.0 failed with error -22 [ 326.056499][ T6621] usb 4-1: Using ep0 maxpacket: 16 [ 326.091223][ T21] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 326.098583][ T21] zl10353_read_register: readreg error (reg=127, ret==-110) [ 326.135889][T10311] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 326.187697][ T21] usb 6-1: USB disconnect, device number 36 [ 326.207701][ T6621] usb 4-1: config 166 has an invalid interface number: 177 but max is 1 [ 326.216952][ T6637] usb 3-1: USB disconnect, device number 39 [ 326.237601][ T6621] usb 4-1: config 166 has an invalid interface number: 34 but max is 1 [ 326.274690][ T6621] usb 4-1: config 166 has no interface number 0 [ 326.286926][ T6621] usb 4-1: config 166 has no interface number 1 [ 326.306141][ T6621] usb 4-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 326.335354][ T6621] usb 4-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 326.363712][ T6621] usb 4-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 326.394027][ T6621] usb 4-1: config 166 interface 34 altsetting 1 has an invalid endpoint with address 0xA6, skipping [ 326.429072][ T6621] usb 4-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 326.455166][ T6621] usb 4-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 326.476305][ T6621] usb 4-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 326.504480][ T6621] usb 4-1: config 166 interface 177 has no altsetting 0 [ 326.519176][ T6621] usb 4-1: config 166 interface 34 has no altsetting 0 [ 326.691250][ T6621] usb 4-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 326.700329][ T6621] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.765937][ T6621] usb 4-1: Product: syz [ 326.774849][ T6621] usb 4-1: Manufacturer: syz [ 326.779584][ T6621] usb 4-1: SerialNumber: syz [ 326.786839][T10370] device syzkaller0 entered promiscuous mode [ 327.075867][ T6621] ums-realtek 4-1:166.177: USB Mass Storage device detected [ 327.201989][ T6621] ums-realtek 4-1:166.34: USB Mass Storage device detected [ 327.331216][ T6621] usb 4-1: Found UVC 0.00 device syz (0bda:0138) [ 327.337651][ T6621] usb 4-1: No valid video chain found. [ 327.346072][ T6621] usb 4-1: USB disconnect, device number 40 [ 327.391129][ T5697] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 327.631136][ T5697] usb 2-1: Using ep0 maxpacket: 8 [ 327.758611][ T5697] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 327.778279][ T5697] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 327.788337][ T5697] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 327.814139][ T5697] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 327.829849][ T5697] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 327.850141][ T5697] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 327.859605][ T5697] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.100958][T10404] device syzkaller0 entered promiscuous mode [ 328.131268][ T5697] usb 2-1: usb_control_msg returned -32 [ 328.136906][ T5697] usbtmc 2-1:16.0: can't read capabilities [ 328.137746][ T6629] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 328.317413][ T6637] usb 2-1: USB disconnect, device number 38 [ 328.341184][ T6621] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 328.381311][ T6629] usb 3-1: Using ep0 maxpacket: 32 [ 328.501385][ T6629] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 328.509518][ T6629] usb 3-1: config 0 has no interface number 0 [ 328.549616][T10381] netlink: 'syz.1.1877': attribute type 1 has an invalid length. [ 328.561889][T10381] netlink: 'syz.1.1877': attribute type 2 has an invalid length. [ 328.661731][ T6629] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 328.682851][T10411] device syzkaller0 entered promiscuous mode [ 328.688454][ T6629] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.697300][ T6629] usb 3-1: Product: syz [ 328.702718][ T6629] usb 3-1: Manufacturer: syz [ 328.707355][ T6629] usb 3-1: SerialNumber: syz [ 328.718720][ T6621] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 328.745355][ T6629] usb 3-1: config 0 descriptor?? [ 328.750586][ T6621] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 328.783484][ T6629] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 328.798952][ T6629] usb 3-1: selecting invalid altsetting 1 [ 328.811217][ T6629] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 328.827876][ T6629] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 328.839197][ T6629] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 328.848342][ T6629] usb 3-1: media controller created [ 328.864429][ T6629] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 328.921364][ T6621] usb 6-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 328.930534][ T6621] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.945662][ T6621] usb 6-1: Product: syz [ 328.950471][ T6621] usb 6-1: Manufacturer: syz [ 328.956193][ T6621] usb 6-1: SerialNumber: syz [ 329.006239][ T6621] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 329.013017][ T6621] gspca_mr97310a: reg write [21] error -22 [ 329.019149][ T6621] mr97310a: probe of 6-1:1.0 failed with error -22 [ 329.207610][ T6621] usb 6-1: USB disconnect, device number 37 [ 329.221330][ T21] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 329.501209][ T21] usb 1-1: Using ep0 maxpacket: 16 [ 329.641310][ T21] usb 1-1: config 166 has an invalid interface number: 177 but max is 1 [ 329.649963][ T21] usb 1-1: config 166 has an invalid interface number: 34 but max is 1 [ 329.658487][ T21] usb 1-1: config 166 has no interface number 0 [ 329.665368][ T21] usb 1-1: config 166 has no interface number 1 [ 329.672404][ T21] usb 1-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 329.683484][ T21] usb 1-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 329.694512][ T21] usb 1-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 329.705495][ T21] usb 1-1: config 166 interface 34 altsetting 1 has an invalid endpoint with address 0xA6, skipping [ 329.716426][ T21] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 329.727678][ T21] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 329.746149][ T21] usb 1-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 329.763024][ T21] usb 1-1: config 166 interface 177 has no altsetting 0 [ 329.779582][ T21] usb 1-1: config 166 interface 34 has no altsetting 0 [ 329.870785][T10432] device syzkaller0 entered promiscuous mode [ 329.951352][ T21] usb 1-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 329.970285][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.993462][T10436] fuse: Unknown parameter 'group_i00000000000000000000' [ 329.997258][ T21] usb 1-1: Product: syz [ 330.011189][ T6629] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 330.011491][ T21] usb 1-1: Manufacturer: syz [ 330.030179][ T6629] zl10353_read_register: readreg error (reg=127, ret==-110) [ 330.050758][ T21] usb 1-1: SerialNumber: syz [ 330.065740][T10395] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 330.130336][ T6629] usb 3-1: USB disconnect, device number 40 [ 330.203707][T10442] device syzkaller0 entered promiscuous mode [ 330.212084][T10442] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 330.225849][T10442] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 330.357277][T10444] device syzkaller0 entered promiscuous mode [ 330.382206][ T21] ums-realtek 1-1:166.177: USB Mass Storage device detected [ 330.481866][ T21] ums-realtek 1-1:166.34: USB Mass Storage device detected [ 330.591519][ T21] usb 1-1: Found UVC 0.00 device syz (0bda:0138) [ 330.598380][ T21] usb 1-1: No valid video chain found. [ 330.624724][ T21] usb 1-1: USB disconnect, device number 40 [ 330.861506][ T2302] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 331.131128][ T2302] usb 2-1: Using ep0 maxpacket: 8 [ 331.261384][ T2302] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 331.274032][T10471] fuse: Unknown parameter 'group_i00000000000000000000' [ 331.281178][ T2302] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 331.281208][ T2302] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 331.281233][ T2302] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 331.281256][ T2302] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 331.337208][ T2302] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 331.348743][ T2302] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.482953][T10473] device syzkaller0 entered promiscuous mode [ 331.661298][ T2302] usb 2-1: usb_control_msg returned -32 [ 331.667208][ T2302] usbtmc 2-1:16.0: can't read capabilities [ 331.761040][T10481] device syzkaller0 entered promiscuous mode [ 331.861529][ T6637] usb 2-1: USB disconnect, device number 39 [ 331.934942][T10482] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) ! [ 332.101890][T10452] netlink: 'syz.1.1902': attribute type 1 has an invalid length. [ 332.109900][T10452] netlink: 'syz.1.1902': attribute type 2 has an invalid length. [ 332.171163][ T6621] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 332.411117][ T6621] usb 6-1: Using ep0 maxpacket: 32 [ 332.531228][ T6621] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 332.539279][ T6621] usb 6-1: config 0 has no interface number 0 [ 332.701350][ T6621] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 332.714472][ T6621] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.730210][ T6621] usb 6-1: Product: syz [ 332.741841][ T6621] usb 6-1: Manufacturer: syz [ 332.762416][ T6621] usb 6-1: SerialNumber: syz [ 332.786026][ T6621] usb 6-1: config 0 descriptor?? [ 332.792247][T10501] fuse: Unknown parameter 'group_id00000000000000000000' [ 332.821120][ T6637] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 332.833638][ T6621] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 332.855302][ T6621] usb 6-1: selecting invalid altsetting 1 [ 332.873108][ T6621] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 332.907983][ T6621] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 332.942565][ T6621] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 332.965297][T10508] device syzkaller0 entered promiscuous mode [ 332.990461][ T6621] usb 6-1: media controller created [ 333.055054][ T6621] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 333.111290][ T6637] usb 3-1: Using ep0 maxpacket: 16 [ 333.241407][ T6637] usb 3-1: config 166 has an invalid interface number: 177 but max is 1 [ 333.258652][ T6637] usb 3-1: config 166 has an invalid interface number: 34 but max is 1 [ 333.280146][ T6637] usb 3-1: config 166 has no interface number 0 [ 333.290880][ T6637] usb 3-1: config 166 has no interface number 1 [ 333.298299][ T6637] usb 3-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 333.320101][ T6637] usb 3-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 333.347061][ T6637] usb 3-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 333.366040][ T6637] usb 3-1: config 166 interface 34 altsetting 1 has an invalid endpoint with address 0xA6, skipping [ 333.386660][ T6637] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 333.405417][ T6637] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 333.424202][ T6637] usb 3-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 333.446979][ T6637] usb 3-1: config 166 interface 177 has no altsetting 0 [ 333.459906][ T6637] usb 3-1: config 166 interface 34 has no altsetting 0 [ 333.491222][ T6629] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 333.621629][ T6637] usb 3-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 333.636900][ T6637] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.649862][ T6637] usb 3-1: Product: syz [ 333.660615][ T6637] usb 3-1: Manufacturer: syz [ 333.669377][ T6637] usb 3-1: SerialNumber: syz [ 333.741387][ T6629] usb 1-1: Using ep0 maxpacket: 32 [ 333.822876][T10520] device syzkaller0 entered promiscuous mode [ 333.838653][T10520] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 333.858411][T10520] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 333.866784][ T6629] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 333.877893][ T6629] usb 1-1: config 0 has no interface number 0 [ 333.884643][ T6629] usb 1-1: config 0 interface 89 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 333.896901][ T6629] usb 1-1: config 0 interface 89 has no altsetting 0 [ 333.981898][ T6637] ums-realtek 3-1:166.177: USB Mass Storage device detected [ 334.073742][ T6629] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 334.091929][ T6637] ums-realtek 3-1:166.34: USB Mass Storage device detected [ 334.096207][ T6629] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.107998][ T6629] usb 1-1: Product: syz [ 334.112484][ T6629] usb 1-1: Manufacturer: syz [ 334.117288][ T6629] usb 1-1: SerialNumber: syz [ 334.125639][ T6629] usb 1-1: config 0 descriptor?? [ 334.171406][ T6621] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 334.189325][ T6621] zl10353_read_register: readreg error (reg=127, ret==-110) [ 334.225708][T10513] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 334.231349][ T6637] usb 3-1: Found UVC 0.00 device syz (0bda:0138) [ 334.251723][ T6637] usb 3-1: No valid video chain found. [ 334.273656][ T6621] usb 6-1: USB disconnect, device number 38 [ 334.299530][ T6637] usb 3-1: USB disconnect, device number 41 [ 334.728240][T10539] fuse: Unknown parameter 'group_id00000000000000000000' [ 334.809722][T10545] device syzkaller0 entered promiscuous mode [ 334.863100][T10543] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3979591798 (509387750144 ns) > initial count (364801339648 ns). Using initial count to start timer. [ 334.881447][ T6637] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 335.151154][ T6637] usb 3-1: Using ep0 maxpacket: 8 [ 335.221425][ T2302] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 335.301420][ T6637] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 335.313732][ T6637] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 335.324531][ T6637] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 335.337403][ T6637] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 335.348255][ T6637] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 335.361926][ T6637] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 335.371234][ T6637] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.462014][ T6621] usb 1-1: USB disconnect, device number 41 [ 335.601344][ T2302] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 335.615238][ T2302] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 335.628409][ T6637] usb 3-1: usb_control_msg returned -32 [ 335.634419][ T6637] usbtmc 3-1:16.0: can't read capabilities [ 335.791270][ T2302] usb 4-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 335.800559][ T2302] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.808715][ T2302] usb 4-1: Product: syz [ 335.813924][ T2302] usb 4-1: Manufacturer: syz [ 335.818521][ T2302] usb 4-1: SerialNumber: syz [ 335.828888][ T6637] usb 3-1: USB disconnect, device number 42 [ 335.867991][ T2302] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 335.877849][ T2302] gspca_mr97310a: reg write [21] error -22 [ 335.884817][ T2302] mr97310a: probe of 4-1:1.0 failed with error -22 [ 335.901220][ T6621] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 336.052479][T10530] netlink: 'syz.2.1927': attribute type 1 has an invalid length. [ 336.060333][T10530] netlink: 'syz.2.1927': attribute type 2 has an invalid length. [ 336.171243][ T6621] usb 1-1: Using ep0 maxpacket: 16 [ 336.311439][ T6621] usb 1-1: config 0 interface 0 altsetting 239 endpoint 0x81 has an invalid bInterval 248, changing to 11 [ 336.323781][ T6629] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 336.331423][ T6621] usb 1-1: config 0 interface 0 altsetting 239 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 336.344715][ T6621] usb 1-1: config 0 interface 0 has no altsetting 0 [ 336.351568][ T6621] usb 1-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 336.360636][ T6621] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.370703][ T6621] usb 1-1: config 0 descriptor?? [ 336.591133][ T6629] usb 6-1: Using ep0 maxpacket: 16 [ 336.711211][ T6629] usb 6-1: config 166 has an invalid interface number: 177 but max is 1 [ 336.719980][ T6629] usb 6-1: config 166 has an invalid interface number: 34 but max is 1 [ 336.729345][ T6629] usb 6-1: config 166 has no interface number 0 [ 336.735809][ T6629] usb 6-1: config 166 has no interface number 1 [ 336.742284][ T6629] usb 6-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 336.753163][ T6629] usb 6-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 336.764832][ T6629] usb 6-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 336.775686][ T6629] usb 6-1: config 166 interface 34 altsetting 1 has an invalid endpoint with address 0xA6, skipping [ 336.787071][ T6629] usb 6-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 336.798713][ T6629] usb 6-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 336.808824][ T6629] usb 6-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 336.824868][ T6621] lenovo 0003:17EF:60A3.000A: unknown main item tag 0x4 [ 336.833822][ T6629] usb 6-1: config 166 interface 177 has no altsetting 0 [ 336.841776][ T6621] lenovo 0003:17EF:60A3.000A: unknown main item tag 0xd [ 336.849809][ T6629] usb 6-1: config 166 interface 34 has no altsetting 0 [ 336.857173][ T6621] lenovo 0003:17EF:60A3.000A: hidraw0: USB HID v9.42 Device [HID 17ef:60a3] on usb-dummy_hcd.0-1/input0 [ 337.021512][ T6629] usb 6-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 337.036919][ T6629] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.045586][ T6629] usb 6-1: Product: syz [ 337.049759][ T6629] usb 6-1: Manufacturer: syz [ 337.054609][ T6629] usb 6-1: SerialNumber: syz [ 337.161269][T10579] fuse: Unknown parameter 'group_id00000000000000000000' [ 337.331991][ T6629] ums-realtek 6-1:166.177: USB Mass Storage device detected [ 337.422345][ T6629] ums-realtek 6-1:166.34: USB Mass Storage device detected [ 337.501295][ T6637] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 337.521535][ T6629] usb 6-1: Found UVC 0.00 device syz (0bda:0138) [ 337.528022][ T6629] usb 6-1: No valid video chain found. [ 337.536279][ T6629] usb 6-1: USB disconnect, device number 39 [ 337.921325][ T6637] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 337.965962][ T6637] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 338.000990][ T6637] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 338.019903][ T6637] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.055565][ T2302] usb 4-1: USB disconnect, device number 41 [ 338.311302][ T6637] usb 3-1: usb_control_msg returned -32 [ 338.321456][ T6637] usbtmc 3-1:16.0: can't read capabilities [ 338.496557][ T6637] usb 1-1: USB disconnect, device number 42 [ 338.577627][ T2302] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 338.824317][T10616] fuse: Bad value for 'user_id' [ 338.831231][ T2302] usb 4-1: Using ep0 maxpacket: 8 [ 338.893492][T10618] device syzkaller0 entered promiscuous mode [ 338.971293][ T2302] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 338.991218][ T2302] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 339.013541][ T2302] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 339.040200][ T2302] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 339.097359][ T2302] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 339.138103][ T2302] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 339.192309][ T2302] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.220238][T10624] fuse: Bad value for 'group_id' [ 339.245558][T10625] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1956'. [ 339.492444][ T2302] usb 4-1: usb_control_msg returned -32 [ 339.501405][ T2302] usbtmc 4-1:16.0: can't read capabilities [ 339.601161][ T21] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 339.677341][ T2302] usb 4-1: USB disconnect, device number 42 [ 339.861176][ T21] usb 2-1: Using ep0 maxpacket: 16 [ 339.876093][T10602] usbtmc 3-1:16.0: send_request_dev_dep_msg_in returned -90 [ 339.994792][ T21] usb 2-1: config 166 has an invalid interface number: 177 but max is 1 [ 340.007726][ T21] usb 2-1: config 166 has an invalid interface number: 34 but max is 1 [ 340.078726][ T21] usb 2-1: config 166 has no interface number 0 [ 340.098409][ T21] usb 2-1: config 166 has no interface number 1 [ 340.131633][ T21] usb 2-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 340.203831][ T21] usb 2-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 340.256282][ T21] usb 2-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 340.286541][ T21] usb 2-1: config 166 interface 34 altsetting 1 has an invalid endpoint with address 0xA6, skipping [ 340.331156][ T21] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 340.377413][ T21] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 340.389068][ T21] usb 2-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 340.403432][ T21] usb 2-1: config 166 interface 177 has no altsetting 0 [ 340.410569][ T21] usb 2-1: config 166 interface 34 has no altsetting 0 [ 340.420253][ T2302] usb 3-1: USB disconnect, device number 43 [ 340.461554][T10602] netlink: 'syz.3.1949': attribute type 1 has an invalid length. [ 340.473341][T10602] netlink: 'syz.3.1949': attribute type 2 has an invalid length. [ 340.601422][ T21] usb 2-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 340.611263][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.619373][ T21] usb 2-1: Product: syz [ 340.624243][ T21] usb 2-1: Manufacturer: syz [ 340.631453][ T21] usb 2-1: SerialNumber: syz [ 340.690347][T10653] fuse: Bad value for 'group_id' [ 340.941959][ T21] ums-realtek 2-1:166.177: USB Mass Storage device detected [ 340.981317][ T6629] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 341.054682][ T21] ums-realtek 2-1:166.34: USB Mass Storage device detected [ 341.097550][T10663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1971'. [ 341.191263][ T2302] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 341.198948][ T21] usb 2-1: Found UVC 0.00 device syz (0bda:0138) [ 341.214464][ T21] usb 2-1: No valid video chain found. [ 341.228968][ T21] usb 2-1: USB disconnect, device number 40 [ 341.273189][T10669] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3979591798 (509387750144 ns) > initial count (364801339648 ns). Using initial count to start timer. [ 341.392419][ T6629] usb 1-1: unable to get BOS descriptor or descriptor too short [ 341.431435][ T6629] usb 1-1: not running at top speed; connect to a high speed hub [ 341.461136][ T2302] usb 6-1: Using ep0 maxpacket: 32 [ 341.511372][ T6629] usb 1-1: config 4 has an invalid interface number: 79 but max is 0 [ 341.519481][ T6629] usb 1-1: config 4 has no interface number 0 [ 341.557936][ T6629] usb 1-1: config 4 interface 79 altsetting 7 endpoint 0x6 has invalid maxpacket 57550, setting to 64 [ 341.591618][ T2302] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 341.614774][ T6629] usb 1-1: config 4 interface 79 has no altsetting 0 [ 341.628915][ T2302] usb 6-1: config 0 has no interface number 0 [ 341.652189][ T2302] usb 6-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 341.692750][ T2302] usb 6-1: config 0 interface 89 has no altsetting 0 [ 341.791365][ T6629] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=e3.b7 [ 341.827186][ T6629] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.853542][ T6629] usb 1-1: Product: syz [ 341.867087][ T6629] usb 1-1: Manufacturer: syz [ 341.878054][ T6629] usb 1-1: SerialNumber: syz [ 341.891450][ T2302] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 341.901414][T10655] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 342.005864][ T2302] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.027214][ T2302] usb 6-1: Product: syz [ 342.040748][ T2302] usb 6-1: Manufacturer: syz [ 342.054130][ T2302] usb 6-1: SerialNumber: syz [ 342.070509][ T2302] usb 6-1: config 0 descriptor?? [ 342.125746][T10655] udc-core: couldn't find an available UDC or it's busy [ 342.134533][ T2302] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 342.146980][T10655] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 342.158326][ T2302] em28xx 6-1:0.89: Video interface 89 found: [ 342.420603][ T1108] logitech-hidpp-device 0005:046D:B012.000B: Device not connected [ 342.424746][T10700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1985'. [ 342.602550][T10708] device syzkaller0 entered promiscuous mode [ 342.611457][ T1108] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 342.729348][T10710] fuse: Bad value for 'fd' [ 342.785612][ T2302] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 342.871246][ T1108] usb 3-1: Using ep0 maxpacket: 8 [ 342.881425][ T6629] viperboard 1-1:4.79: version 0.00 found at bus 001 address 043 [ 342.912831][ T6629] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 342.929686][ T6629] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 342.969682][ T6629] usb 1-1: USB disconnect, device number 43 [ 342.991399][ T1108] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 343.012402][ T1108] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 343.031640][ T1108] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 343.047419][ T1108] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 343.060725][ T1108] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 343.087486][ T1108] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 343.097973][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.301305][ T2302] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 343.333610][ T2302] em28xx 6-1:0.89: board has no eeprom [ 343.371357][ T1108] usb 3-1: usb_control_msg returned -32 [ 343.377061][ T1108] usbtmc 3-1:16.0: can't read capabilities [ 343.451371][ T2302] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 343.462375][ T2302] em28xx 6-1:0.89: analog set to bulk mode. [ 343.481997][ T21] em28xx 6-1:0.89: Registering V4L2 extension [ 343.494161][ T2302] usb 6-1: USB disconnect, device number 40 [ 343.518245][ T2302] em28xx 6-1:0.89: Disconnecting em28xx [ 343.558832][ T6637] usb 3-1: USB disconnect, device number 44 [ 343.640443][ T21] em28xx 6-1:0.89: Config register raw data: 0xffffffed [ 343.650587][ T21] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 343.668997][ T21] em28xx 6-1:0.89: No AC97 audio processor [ 343.683969][ T21] usb 6-1: Decoder not found [ 343.695268][ T21] em28xx 6-1:0.89: failed to create media graph [ 343.702912][ T21] em28xx 6-1:0.89: V4L2 device video103 deregistered [ 343.716082][ T21] em28xx 6-1:0.89: Registering snapshot button... [ 343.724981][ T21] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input29 [ 343.744292][ T21] em28xx 6-1:0.89: Remote control support is not available for this card. [ 343.757222][ T2302] em28xx 6-1:0.89: Closing input extension [ 343.775150][ T2302] em28xx 6-1:0.89: Deregistering snapshot button [ 343.816074][ T2302] em28xx 6-1:0.89: Freeing device [ 344.331454][T10695] netlink: 'syz.2.1983': attribute type 1 has an invalid length. [ 344.343351][T10695] netlink: 'syz.2.1983': attribute type 2 has an invalid length. [ 344.715103][T10741] device syzkaller0 entered promiscuous mode [ 344.809767][T10743] fuse: Bad value for 'fd' [ 345.218067][T10768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2010'. [ 345.421196][T10772] fuse: Bad value for 'fd' [ 345.431203][ T2302] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 345.513864][T10774] netlink: 'syz.3.2012': attribute type 1 has an invalid length. [ 345.603134][T10774] 8021q: adding VLAN 0 to HW filter on device bond11 [ 345.632967][T10775] bond11: (slave veth11): Enslaving as an active interface with an up link [ 345.642032][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): bond11: link becomes ready [ 345.697150][T10778] device syzkaller0 entered promiscuous mode [ 345.711934][ T2302] usb 2-1: Using ep0 maxpacket: 16 [ 345.891291][ T2302] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 345.899213][ T2302] usb 2-1: can't read configurations, error -61 [ 345.920792][T10793] device syzkaller0 entered promiscuous mode [ 345.932826][T10793] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 345.945767][T10793] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 346.051296][ T2302] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 346.131290][ T4232] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 346.141392][ T6637] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 346.160064][T10802] input: syz0 as /devices/virtual/input/input30 [ 346.301217][ T2302] usb 2-1: Using ep0 maxpacket: 16 [ 346.381306][ T4232] usb 4-1: Using ep0 maxpacket: 8 [ 346.481463][ T2302] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 346.489305][ T2302] usb 2-1: can't read configurations, error -61 [ 346.496016][ T2302] usb usb2-port1: attempt power cycle [ 346.502105][ T4232] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 346.510551][ T4232] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 346.521292][ T4232] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 346.531473][ T4232] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 346.541613][ T4232] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 346.554947][ T6637] usb 6-1: config 0 has no interfaces? [ 346.560536][ T6637] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 346.569935][ T4232] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 346.579067][ T6637] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.587397][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.598244][ T6637] usb 6-1: config 0 descriptor?? [ 346.849684][ T1108] usb 6-1: USB disconnect, device number 41 [ 346.862441][ T4232] usb 4-1: usb_control_msg returned -32 [ 346.868684][ T4232] usbtmc 4-1:16.0: can't read capabilities [ 346.941212][ T2302] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 347.051487][ T2302] usb 2-1: Using ep0 maxpacket: 16 [ 347.053863][ T6629] usb 4-1: USB disconnect, device number 43 [ 347.241188][ T2302] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 347.260790][ T2302] usb 2-1: can't read configurations, error -61 [ 347.427589][ T2302] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 347.485086][T10813] device syzkaller0 entered promiscuous mode [ 347.531256][ T2302] usb 2-1: Using ep0 maxpacket: 16 [ 347.581835][T10786] netlink: 'syz.3.2016': attribute type 1 has an invalid length. [ 347.589699][T10786] netlink: 'syz.3.2016': attribute type 2 has an invalid length. [ 347.711332][ T2302] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 347.718936][ T2302] usb 2-1: can't read configurations, error -61 [ 347.725623][ T2302] usb usb2-port1: unable to enumerate USB device [ 347.922041][T10827] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2030'. [ 348.249860][T10834] device syzkaller0 entered promiscuous mode [ 348.258755][T10834] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 348.272142][T10834] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 348.424479][T10842] kvm [10840]: vcpu2, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010002 data 0x80ffffff [ 348.515915][T10848] device syzkaller0 entered promiscuous mode [ 349.111199][ T1108] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 349.361226][ T1108] usb 1-1: Using ep0 maxpacket: 8 [ 349.491370][ T1108] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 349.500143][ T1108] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 349.511663][ T1108] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 349.523875][ T1108] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 349.534839][ T1108] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 349.549848][ T1108] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 349.559797][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.711141][ T6637] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 349.821325][ T1108] usb 1-1: usb_control_msg returned -32 [ 349.826411][T10889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2051'. [ 349.826969][ T1108] usbtmc 1-1:16.0: can't read capabilities [ 349.961230][ T6637] usb 6-1: Using ep0 maxpacket: 16 [ 350.011319][ T1108] usb 1-1: USB disconnect, device number 44 [ 350.102266][ T6637] usb 6-1: config 166 has an invalid interface number: 177 but max is 1 [ 350.128412][ T6637] usb 6-1: config 166 has an invalid interface number: 34 but max is 1 [ 350.137765][ T6637] usb 6-1: config 166 has no interface number 0 [ 350.146374][ T6637] usb 6-1: config 166 has no interface number 1 [ 350.152748][ T6637] usb 6-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 350.165934][ T6637] usb 6-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 350.177939][ T6637] usb 6-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 350.189066][ T6637] usb 6-1: config 166 interface 34 altsetting 1 has an invalid endpoint with address 0xA6, skipping [ 350.200093][ T6637] usb 6-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 350.213804][ T6637] usb 6-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 350.223890][ T6637] usb 6-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 350.237277][ T6637] usb 6-1: config 166 interface 177 has no altsetting 0 [ 350.244350][ T6637] usb 6-1: config 166 interface 34 has no altsetting 0 [ 350.362401][T10863] netlink: 'syz.0.2042': attribute type 1 has an invalid length. [ 350.370273][T10863] netlink: 'syz.0.2042': attribute type 2 has an invalid length. [ 350.381184][ T6629] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 350.431332][ T6637] usb 6-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 350.444079][ T6637] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.452392][ T6637] usb 6-1: Product: syz [ 350.456576][ T6637] usb 6-1: Manufacturer: syz [ 350.464942][ T6637] usb 6-1: SerialNumber: syz [ 350.625411][ T6629] usb 4-1: Using ep0 maxpacket: 16 [ 350.741344][ T6629] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.751786][ T6629] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 350.752519][ T6637] ums-realtek 6-1:166.177: USB Mass Storage device detected [ 350.852233][ T6637] ums-realtek 6-1:166.34: USB Mass Storage device detected [ 350.921271][ T6629] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 350.926355][ T2302] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 350.930343][ T6629] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.946449][ T6629] usb 4-1: Product: syz [ 350.950694][ T6629] usb 4-1: Manufacturer: syz [ 350.955796][ T6629] usb 4-1: SerialNumber: syz [ 350.961629][ T6637] usb 6-1: Found UVC 0.00 device syz (0bda:0138) [ 350.971486][ T6637] usb 6-1: No valid video chain found. [ 351.002911][ T6637] usb 6-1: USB disconnect, device number 42 [ 351.181453][ T2302] usb 3-1: Using ep0 maxpacket: 32 [ 351.281480][ T6629] usb 4-1: 0:2 : does not exist [ 351.311354][ T2302] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 351.321248][ T2302] usb 3-1: config 0 has no interface number 0 [ 351.327758][ T2302] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 351.338343][ T2302] usb 3-1: config 0 interface 89 has no altsetting 0 [ 351.347718][ T6629] usb 4-1: USB disconnect, device number 44 [ 351.521281][ T2302] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 351.531208][ T2302] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.540808][ T2302] usb 3-1: Product: syz [ 351.551196][ T2302] usb 3-1: Manufacturer: syz [ 351.561580][ T2302] usb 3-1: SerialNumber: syz [ 351.572018][ T2302] usb 3-1: config 0 descriptor?? [ 351.631605][ T2302] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 351.650052][ T2302] em28xx 3-1:0.89: Video interface 89 found: [ 351.757527][T10915] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2057'. [ 351.867991][T10917] device syzkaller0 entered promiscuous mode [ 352.192703][T10926] device syzkaller0 entered promiscuous mode [ 352.271313][ T2302] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 352.362439][T10936] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2064'. [ 352.370971][T10937] fuse: Invalid rootmode [ 352.601472][ T6629] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 352.801302][ T2302] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 352.810885][ T2302] em28xx 3-1:0.89: board has no eeprom [ 352.851202][ T6629] usb 4-1: Using ep0 maxpacket: 8 [ 352.921261][ T2302] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 352.931166][ T2302] em28xx 3-1:0.89: analog set to bulk mode. [ 352.943207][ T6637] em28xx 3-1:0.89: Registering V4L2 extension [ 352.975276][ T2302] usb 3-1: USB disconnect, device number 45 [ 352.991359][ T6629] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 353.017101][ T2302] em28xx 3-1:0.89: Disconnecting em28xx [ 353.018774][ T6629] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 353.041578][ T6637] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 353.041578][ T6629] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 353.041615][ T6629] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 353.048560][ T6637] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 353.048577][ T6637] em28xx 3-1:0.89: No AC97 audio processor [ 353.107824][ T6629] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 353.108775][ T6637] usb 3-1: Decoder not found [ 353.129137][ T6629] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 353.144315][ T6629] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.160112][ T6637] em28xx 3-1:0.89: failed to create media graph [ 353.171171][ T6637] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 353.184007][T10948] ================================================================== [ 353.192712][T10948] BUG: KASAN: use-after-free in v4l2_open+0x32d/0x340 [ 353.199933][T10948] Read of size 4 at addr ffff88807c1349b0 by task v4l_id/10948 [ 353.207829][T10948] [ 353.210229][T10948] CPU: 1 PID: 10948 Comm: v4l_id Not tainted syzkaller #0 [ 353.217695][T10948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 353.227948][T10948] Call Trace: [ 353.231304][T10948] [ 353.234311][T10948] dump_stack_lvl+0x188/0x250 [ 353.239069][T10948] ? show_regs_print_info+0x20/0x20 [ 353.244261][T10948] ? _printk+0xda/0x130 [ 353.248517][T10948] ? load_image+0x410/0x410 [ 353.253062][T10948] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 353.258583][T10948] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 353.264248][T10948] print_address_description+0x60/0x2d0 [ 353.269783][T10948] ? v4l2_open+0x32d/0x340 [ 353.274215][T10948] kasan_report+0xdf/0x130 [ 353.278735][T10948] ? v4l2_open+0x32d/0x340 [ 353.283308][T10948] v4l2_open+0x32d/0x340 [ 353.287574][T10948] chrdev_open+0x585/0x5f0 [ 353.292181][T10948] ? cd_forget+0x160/0x160 [ 353.296688][T10948] ? fsnotify_perm+0x3a7/0x560 [ 353.301609][T10948] ? cd_forget+0x160/0x160 [ 353.306014][T10948] do_dentry_open+0x7f7/0xf90 [ 353.310741][T10948] ? vfs_open+0x2b/0x80 [ 353.314888][T10948] path_openat+0x2718/0x2fb0 [ 353.319562][T10948] ? __kasan_slab_alloc+0xa9/0xc0 [ 353.324572][T10948] ? do_filp_open+0x400/0x400 [ 353.329245][T10948] do_filp_open+0x1df/0x400 [ 353.333735][T10948] ? vfs_tmpfile+0x300/0x300 [ 353.338384][T10948] ? _raw_spin_unlock+0x24/0x40 [ 353.343333][T10948] ? alloc_fd+0x59e/0x650 [ 353.347686][T10948] do_sys_openat2+0x14b/0x500 [ 353.352658][T10948] ? __lock_acquire+0x7b50/0x7b50 [ 353.357754][T10948] ? do_sys_open+0xe0/0xe0 [ 353.362339][T10948] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 353.368482][T10948] ? lock_chain_count+0x20/0x20 [ 353.373345][T10948] __x64_sys_openat+0x135/0x160 [ 353.378201][T10948] do_syscall_64+0x4c/0xa0 [ 353.382651][T10948] ? clear_bhb_loop+0x30/0x80 [ 353.387315][T10948] ? clear_bhb_loop+0x30/0x80 [ 353.391991][T10948] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 353.397878][T10948] RIP: 0033:0x7f8cb0037407 [ 353.402379][T10948] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 353.422455][T10948] RSP: 002b:00007ffe8200ab40 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 353.430946][T10948] RAX: ffffffffffffffda RBX: 00007f8caff49880 RCX: 00007f8cb0037407 [ 353.438908][T10948] RDX: 0000000000000000 RSI: 00007ffe8200bf1c RDI: ffffffffffffff9c [ 353.446876][T10948] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 353.454835][T10948] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 353.462826][T10948] R13: 00007ffe8200ad90 R14: 00007f8cb07c5000 R15: 000055b9d484d4d8 [ 353.470863][T10948] [ 353.473891][T10948] [ 353.476355][T10948] The buggy address belongs to the page: [ 353.482515][T10948] page:ffffea0001f04d00 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c134 [ 353.492772][T10948] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 353.500435][T10948] raw: 00fff00000000000 ffffea000112be08 ffff8880b91409f0 0000000000000000 [ 353.509022][T10948] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 353.517727][T10948] page dumped because: kasan: bad access detected [ 353.524255][T10948] page_owner tracks the page as freed [ 353.529704][T10948] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x140dc0(GFP_USER|__GFP_COMP|__GFP_ZERO), pid 6637, ts 352950251632, free_ts 353183516941 [ 353.545601][T10948] get_page_from_freelist+0x24f6/0x2670 [ 353.551243][T10948] __alloc_pages+0x1ee/0x480 [ 353.555826][T10948] kmalloc_order+0x40/0x150 [ 353.560611][T10948] kmalloc_order_trace+0x14/0xf0 [ 353.565564][T10948] em28xx_v4l2_init+0xd5/0x2cd0 [ 353.570490][T10948] em28xx_init_extension+0x118/0x1c0 [ 353.575760][T10948] process_one_work+0x867/0xff0 [ 353.580687][T10948] worker_thread+0xad7/0x12a0 [ 353.585372][T10948] kthread+0x42e/0x520 [ 353.589431][T10948] ret_from_fork+0x1f/0x30 [ 353.593864][T10948] page last free stack trace: [ 353.598517][T10948] free_unref_page_prepare+0x637/0x6c0 [ 353.604495][T10948] free_unref_page+0x8f/0x2a0 [ 353.609168][T10948] free_nonslab_page+0xde/0x150 [ 353.614010][T10948] em28xx_v4l2_init+0x155a/0x2cd0 [ 353.619332][T10948] em28xx_init_extension+0x118/0x1c0 [ 353.624696][T10948] process_one_work+0x867/0xff0 [ 353.629720][T10948] worker_thread+0xad7/0x12a0 [ 353.634555][T10948] kthread+0x42e/0x520 [ 353.638625][T10948] ret_from_fork+0x1f/0x30 [ 353.643069][T10948] [ 353.645395][T10948] Memory state around the buggy address: [ 353.651169][T10948] ffff88807c134880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 353.659227][T10948] ffff88807c134900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 353.667280][T10948] >ffff88807c134980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 353.675331][T10948] ^ [ 353.680937][T10948] ffff88807c134a00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 353.688977][T10948] ffff88807c134a80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 353.697067][T10948] ================================================================== [ 353.705122][T10948] Disabling lock debugging due to kernel taint [ 353.716472][ T6637] em28xx 3-1:0.89: Registering snapshot button... [ 353.724172][ T6637] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input31 [ 353.744084][ T6637] em28xx 3-1:0.89: Remote control support is not available for this card. [ 353.773711][ T2302] em28xx 3-1:0.89: Closing input extension [ 353.779970][ T2302] em28xx 3-1:0.89: Deregistering snapshot button [ 353.800492][ T2302] em28xx 3-1:0.89: Freeing device [ 353.881157][T10948] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 353.888385][T10948] CPU: 1 PID: 10948 Comm: v4l_id Tainted: G B syzkaller #0 [ 353.897188][T10948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 353.907372][T10948] Call Trace: [ 353.910661][T10948] [ 353.913609][T10948] dump_stack_lvl+0x188/0x250 [ 353.918307][T10948] ? show_regs_print_info+0x20/0x20 [ 353.923523][T10948] ? load_image+0x410/0x410 [ 353.928055][T10948] panic+0x2f8/0x850 [ 353.932054][T10948] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 353.938229][T10948] ? bpf_jit_dump+0xd0/0xd0 [ 353.943092][T10948] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 353.949097][T10948] ? _raw_spin_unlock+0x40/0x40 [ 353.954391][T10948] ? v4l2_open+0x32d/0x340 [ 353.959042][T10948] check_panic_on_warn+0x80/0xa0 [ 353.964177][T10948] ? v4l2_open+0x32d/0x340 [ 353.968612][T10948] end_report+0x6d/0xf0 [ 353.972788][T10948] kasan_report+0x102/0x130 [ 353.977402][T10948] ? v4l2_open+0x32d/0x340 [ 353.981920][T10948] v4l2_open+0x32d/0x340 [ 353.986178][T10948] chrdev_open+0x585/0x5f0 [ 353.990700][T10948] ? cd_forget+0x160/0x160 [ 353.995221][T10948] ? fsnotify_perm+0x3a7/0x560 [ 354.000261][T10948] ? cd_forget+0x160/0x160 [ 354.004807][T10948] do_dentry_open+0x7f7/0xf90 [ 354.009859][T10948] ? vfs_open+0x2b/0x80 [ 354.014036][T10948] path_openat+0x2718/0x2fb0 [ 354.019085][T10948] ? __kasan_slab_alloc+0xa9/0xc0 [ 354.024132][T10948] ? do_filp_open+0x400/0x400 [ 354.028838][T10948] do_filp_open+0x1df/0x400 [ 354.033411][T10948] ? vfs_tmpfile+0x300/0x300 [ 354.038114][T10948] ? _raw_spin_unlock+0x24/0x40 [ 354.042977][T10948] ? alloc_fd+0x59e/0x650 [ 354.047354][T10948] do_sys_openat2+0x14b/0x500 [ 354.052047][T10948] ? __lock_acquire+0x7b50/0x7b50 [ 354.057089][T10948] ? do_sys_open+0xe0/0xe0 [ 354.061523][T10948] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 354.067527][T10948] ? lock_chain_count+0x20/0x20 [ 354.072437][T10948] __x64_sys_openat+0x135/0x160 [ 354.077304][T10948] do_syscall_64+0x4c/0xa0 [ 354.081845][T10948] ? clear_bhb_loop+0x30/0x80 [ 354.086540][T10948] ? clear_bhb_loop+0x30/0x80 [ 354.091275][T10948] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 354.097280][T10948] RIP: 0033:0x7f8cb0037407 [ 354.101798][T10948] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 354.122042][T10948] RSP: 002b:00007ffe8200ab40 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 354.131600][T10948] RAX: ffffffffffffffda RBX: 00007f8caff49880 RCX: 00007f8cb0037407 [ 354.139762][T10948] RDX: 0000000000000000 RSI: 00007ffe8200bf1c RDI: ffffffffffffff9c [ 354.147863][T10948] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 354.155848][T10948] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 354.164004][T10948] R13: 00007ffe8200ad90 R14: 00007f8cb07c5000 R15: 000055b9d484d4d8 [ 354.172034][T10948] [ 354.177918][T10948] Kernel Offset: disabled [ 354.182277][T10948] Rebooting in 86400 seconds..