last executing test programs: 7.353995733s ago: executing program 3 (id=1211): socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3801000010000100fefffffffddbdf25fe889637429010eb0f82000000000001fc010000000000000000000000000001000107144e230005000000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0200000000000000ffffffffffffffff2a000000000000001f00000000000000b80700000000000002000000fcffffffbcfbffff2abd700000000000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x15}, @in=@private=0xa010100, 0x4e1f, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffeffffa}, {}, 0x4, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x4d4, 0x32}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0xb7, 0x9, 0xfffffffe, 0x3}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 6.572586421s ago: executing program 3 (id=1214): r0 = semget(0x1, 0x4, 0x39c) semop(r0, &(0x7f00000002c0), 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x8, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) syz_io_uring_setup(0x186, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_usb_connect(0x2, 0x47, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000a3233910daa658744d2d010203010902350001080010000904df0003080662ff09050c0220000606050710003e8fad67020102"], 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000280)=[{'IMIX', @val={' \'', 'Master Playback Volume'}}], 0x33) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r2, &(0x7f0000001740)=[{{0x0, 0xfd67, &(0x7f0000001400), 0x1}}], 0x4000210, 0x10002, 0x0) semtimedop(r0, &(0x7f00000000c0)=[{0x2, 0x5, 0x1800}, {0x1, 0x7fff}], 0x2, &(0x7f0000000040)) 6.018782673s ago: executing program 4 (id=1215): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_unix(0x0, 0x0, 0x0, 0x1a474dc, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000140)='./file0/file0/..\x00', 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) umount2(&(0x7f0000000000)='./file0/file0/..\x00', 0x4) 5.939375725s ago: executing program 4 (id=1216): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001b40)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000db9d1b08d112e2fa8b70010203010902"], 0x0) ioctl$EVIOCRMFF(r1, 0x83c0550b, &(0x7f0000000400)=0x1) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r5 = dup3(r4, r3, 0x0) fchdir(r5) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x5, @local, 0x797e}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000000)={0x30000008}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x800) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r6, 0x80dc5521, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a0f0000}, 0x4c000) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r7, 0x707, &(0x7f0000000200)={&(0x7f0000000280)=[{0x9, 0x29, 0x0, 0x0}], 0x1}) 5.763749279s ago: executing program 1 (id=1217): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x80, 0x8, 0x8001, 0x4, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x1, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x8, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0xfffffffb, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x1da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x5, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0xffffff1c, 0x5, 0x3, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x7fffffff, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0xa, 0x3, 0xfffffffe, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r10, {0x10}, {}, {0xa, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 5.568865264s ago: executing program 1 (id=1218): syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x50000000}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x81) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r0], 0x1000f) 4.668687754s ago: executing program 1 (id=1221): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000001580)="ce6c286c2018840b1f6dc85445c6899e10f1c40536af7d99509e02dc55087fa1062209100f8e7b6082149e2153b76247ccda57e0de0b0ed16a37fc888d898ac6afcf02f8739c24316d136cbb44f9cecd1bec33a47aab5137891e17044802c15d7b4f2ee03d63e10aba5f8c5d7aad2e06e02b132fea96aa10"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000003880)={0x14, 0x0, &(0x7f0000003680)=[@increfs_done={0x40106309}], 0x0, 0x0, 0x0}) 4.336078152s ago: executing program 2 (id=1222): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x7b95b611, 0x802) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) rt_sigqueueinfo(r3, 0x21, &(0x7f0000000ac0)={0x0, 0x9, 0xfffffffe}) 4.207401314s ago: executing program 3 (id=1223): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x21) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$fuse(0x0, 0x0, 0x300e461, 0x0, 0x2, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) r4 = openat$cgroup_procs(r3, 0x0, 0x2, 0x0) write$cgroup_pid(r4, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) 3.231834607s ago: executing program 1 (id=1224): r0 = semget(0x1, 0x4, 0x39c) semop(r0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_usb_connect(0x2, 0x47, &(0x7f0000000180)=ANY=[], 0x0) 3.230725287s ago: executing program 2 (id=1225): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x7, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff3e5, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x8, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000000, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed9b, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0xfffffffe, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x4, 0x5, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x51, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) openat$sndtimer(0xffffffffffffff9c, 0x0, 0xa1001) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004004) gettid() r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) syz_clone(0x95008100, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) readv(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r6, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r6, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xce21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8c0}, 0x0) 3.133912729s ago: executing program 3 (id=1226): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_unix(0x0, 0x0, 0x0, 0x1a474dc, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000140)='./file0/file0/..\x00', 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) umount2(&(0x7f0000000000)='./file0/file0/..\x00', 0x4) 3.09330848s ago: executing program 3 (id=1227): socket$netlink(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x103002, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x404000, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000011c0), 0x2c05) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000001200)={0x1, 0x1, 0x0, 0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0], 0x2}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x200000) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xbcV\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x5) syz_open_dev$swradio(&(0x7f0000000340), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000440)={0xa66aaa559a879f5d, @vbi={0xd, 0x1, 0x4, 0x30395056, [0x5, 0x5], [0x7fffffff, 0x9], 0x13a}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x0) syz_clone3(&(0x7f00000002c0)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) ftruncate(r3, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x23, 0x3, 0x0) 2.551722382s ago: executing program 0 (id=1230): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 2.369251266s ago: executing program 0 (id=1231): socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3801000010000100fefffffffddbdf25fe889637429010eb0f82000000000001fc010000000000000000000000000001000107144e230005000000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0200000000000000ffffffffffffffff2a000000000000001f00000000000000b80700000000000002000000fcffffffbcfbffff2abd700000000000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x15}, @in=@private=0xa010100, 0x4e1f, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffeffffa}, {}, 0x4, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x4d4, 0x32}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0xb7, 0x9, 0xfffffffe, 0x3}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 2.261359579s ago: executing program 2 (id=1232): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x80000000}, {0x60, 0x8}, {0x1, 0x0, 0x4}, {0x3}, {0x6, 0x0, 0x0, 0x10000000}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x7b}, [], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 2.22675376s ago: executing program 3 (id=1233): r0 = semget(0x1, 0x4, 0x39c) semop(r0, &(0x7f00000002c0), 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x8, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) syz_io_uring_setup(0x186, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_usb_connect(0x2, 0x47, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000a3233910daa658744d2d010203010902350001080010000904df0003080662ff09050c0220000606050710003e8fad67020102"], 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000280)=[{'IMIX', @val={' \'', 'Master Playback Volume'}}], 0x33) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r2, &(0x7f0000001740)=[{{0x0, 0xfd67, &(0x7f0000001400), 0x1}}], 0x4000210, 0x10002, 0x0) semtimedop(r0, &(0x7f00000000c0)=[{0x2, 0x5, 0x1800}, {0x1, 0x7fff}], 0x2, &(0x7f0000000040)) 2.120885992s ago: executing program 2 (id=1234): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.044127424s ago: executing program 2 (id=1235): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x7b95b611, 0x802) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) rt_sigqueueinfo(r3, 0x21, &(0x7f0000000ac0)={0x0, 0x9, 0xfffffffe}) 1.858901088s ago: executing program 4 (id=1236): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000005180)={0x2020}, 0x2020) 1.79085467s ago: executing program 0 (id=1237): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x21) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$fuse(0x0, 0x0, 0x300e461, 0x0, 0x2, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) 810.518902ms ago: executing program 2 (id=1238): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x24}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, 0x0, 0x0) r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r3, &(0x7f0000000580)='7', 0x1) syz_usb_disconnect(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) syz_emit_ethernet(0x4a, &(0x7f00000007c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0400f2", 0x14, 0x2c, 0x1, @remote, @local, {[], {{0x8000, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 757.648363ms ago: executing program 4 (id=1239): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x6, 0x8004, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0x10, 0x2, 0x2, 0x400, 0x1007fc, 0xffff8000, 0x9, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x7, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcf, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0xc, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x6, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4000004, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x402, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x6, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x40002, 0x7, 0x8, 0x40fff, 0x1fe, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0xa, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0x9, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x80, 0x8, 0x8001, 0x4, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x1, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x8, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0xfffffffb, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x1da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x5, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0xffffff1c, 0x5, 0x3, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x7fffffff, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0xa, 0x3, 0xfffffffe, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r10, {0x10}, {}, {0xa, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 755.959793ms ago: executing program 0 (id=1240): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x2841, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7}}]}}]}, 0x48}}, 0x20040084) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000340)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r2, 0xbc}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000300)='s', 0x1}], 0x1}, 0x4011) 587.593767ms ago: executing program 4 (id=1241): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 505.081459ms ago: executing program 4 (id=1242): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x7, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff3e5, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x8, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000000, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed9b, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0xfffffffe, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x4, 0x5, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x51, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) openat$sndtimer(0xffffffffffffff9c, 0x0, 0xa1001) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004004) gettid() r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) syz_clone(0x95008100, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) readv(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r6, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r6, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xce21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8c0}, 0x0) 504.006399ms ago: executing program 0 (id=1243): socket$netlink(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x103002, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x404000, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000011c0), 0x2c05) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000001200)={0x1, 0x1, 0x0, 0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0], 0x2}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x200000) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xbcV\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x5) syz_open_dev$swradio(&(0x7f0000000340), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000440)={0xa66aaa559a879f5d, @vbi={0xd, 0x1, 0x4, 0x30395056, [0x5, 0x5], [0x7fffffff, 0x9], 0x13a}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x0) syz_clone3(&(0x7f00000002c0)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) ftruncate(r3, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x23, 0x3, 0x0) 186.188426ms ago: executing program 1 (id=1244): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000008000000090000000900000040000000", @ANYRES32, @ANYBLOB="071b00ce5f"], 0x50) 121.773347ms ago: executing program 0 (id=1245): recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 0s ago: executing program 1 (id=1246): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0), 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0xfe12) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000080)={0x14, 0x1, 0x2, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8046}}, 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x20000800) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): r0 entered promiscuous mode [ 138.554906][ T4235] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 138.562532][ T4235] gspca_zc3xx: probe of 1-1:0.0 failed with error -71 [ 138.592512][ T4235] usb 1-1: USB disconnect, device number 7 [ 138.852187][ T5304] fuse: Bad value for 'fd' [ 138.897286][ T5304] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 138.961557][ T5304] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 139.005060][ T5304] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 139.034124][ T5304] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 139.055078][ T5304] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 139.090630][ T5304] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 139.114859][ T5304] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 139.246028][ T7] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 139.260556][ T5315] device syzkaller0 entered promiscuous mode [ 139.442303][ T5324] fuse: Bad value for 'fd' [ 139.484785][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 139.521429][ T5324] device syzkaller0 entered promiscuous mode [ 139.605064][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.625728][ T7] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 139.654913][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.674001][ T7] usb 2-1: config 0 descriptor?? [ 139.716287][ T7] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 139.794810][ T4235] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 140.027952][ T5332] netlink: 'syz.0.353': attribute type 1 has an invalid length. [ 140.074026][ T5332] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.094909][ T4235] usb 3-1: Using ep0 maxpacket: 8 [ 140.226358][ T4235] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 140.230852][ T5332] bond1: (slave geneve2): making interface the new active one [ 140.247480][ T5332] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 140.256958][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 140.303317][ T5332] syz.0.353 (5332) used greatest stack depth: 19888 bytes left [ 140.425496][ T4235] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 140.441621][ T4235] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.451858][ T4235] usb 3-1: Product: syz [ 140.463677][ T4235] usb 3-1: Manufacturer: syz [ 140.468762][ T4235] usb 3-1: SerialNumber: syz [ 140.477875][ T4235] usb 3-1: config 0 descriptor?? [ 140.533572][ T5340] kvm [5338]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x100000000 [ 140.538411][ T4235] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 140.544332][ T5340] kvm [5338]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 140.564418][ T5340] kvm [5338]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x80 [ 140.575146][ T5340] kvm [5338]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 140.586465][ T5340] kvm [5338]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x0 [ 140.595697][ T5340] kvm [5338]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 140.613379][ T5340] kvm [5338]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x80 [ 140.630453][ T5340] kvm [5338]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 140.640797][ T5340] kvm [5338]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x0 [ 140.649385][ T5340] kvm [5338]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 140.660940][ T5340] kvm [5338]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x80 [ 140.675216][ T5340] kvm [5338]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x80 [ 140.687594][ T7] gspca_vc032x: reg_w err -71 [ 140.692375][ T7] vc032x: probe of 2-1:0.0 failed with error -71 [ 140.720097][ T7] usb 2-1: USB disconnect, device number 11 [ 141.284967][ T4230] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 141.348339][ T5360] fuse: Bad value for 'fd' [ 141.383980][ T5360] device syzkaller0 entered promiscuous mode [ 141.534888][ T4230] usb 4-1: Using ep0 maxpacket: 16 [ 141.665189][ T4230] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.707534][ T4230] usb 4-1: config 0 interface 0 has no altsetting 0 [ 141.714218][ T4230] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 141.732370][ T4230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.752078][ T4230] usb 4-1: config 0 descriptor?? [ 141.954815][ T1111] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 142.315148][ T1111] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.335265][ T1111] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.351689][ T1111] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 142.371267][ T1111] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 142.380858][ T1111] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.398604][ T1111] usb 1-1: config 0 descriptor?? [ 142.768188][ T5377] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551612) [ 142.782935][ T5377] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 142.852396][ T5380] netlink: 'syz.4.370': attribute type 1 has an invalid length. [ 142.885347][ T5380] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.912455][ T5380] bond1: (slave veth3): Enslaving as an active interface with a down link [ 142.950456][ T5380] bond1: (slave veth0_to_bond): making interface the new active one [ 142.972420][ T5380] device veth0_to_bond entered promiscuous mode [ 142.983976][ T5380] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 142.996941][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 143.093824][ T5386] kvm: pic: non byte write [ 143.351279][ T5388] kvm [5387]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x100000000 [ 143.365044][ T5388] kvm [5387]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 143.411072][ T5388] kvm [5387]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x80 [ 143.422678][ T5388] kvm [5387]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 143.432500][ T5388] kvm [5387]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x0 [ 143.449424][ T5388] kvm [5387]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 143.585000][ T4235] gspca_zc3xx: reg_r err -71 [ 143.595108][ T1111] usbhid 1-1:0.0: can't add hid device: -71 [ 143.607595][ T1111] usbhid: probe of 1-1:0.0 failed with error -71 [ 143.648083][ T1111] usb 1-1: USB disconnect, device number 8 [ 143.844881][ T4230] usbhid 4-1:0.0: can't add hid device: -71 [ 143.859627][ T4230] usbhid: probe of 4-1:0.0 failed with error -71 [ 143.894904][ T4230] usb 4-1: USB disconnect, device number 10 [ 144.214962][ T4235] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 144.235319][ T4235] gspca_zc3xx: probe of 3-1:0.0 failed with error -71 [ 144.290831][ T4235] usb 3-1: USB disconnect, device number 10 [ 144.324809][ T4230] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 144.600844][ T5414] fuse: Bad value for 'fd' [ 144.619798][ T5414] device syzkaller0 entered promiscuous mode [ 144.634828][ T4230] usb 4-1: Using ep0 maxpacket: 16 [ 144.756333][ T4230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.794043][ T4230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.853501][ T4230] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 144.946888][ T4230] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 145.002570][ T4230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.149929][ T4230] usb 4-1: config 0 descriptor?? [ 145.679078][ T4230] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 145.732284][ T4230] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 145.772282][ T5425] kvm_set_msr_common: 6 callbacks suppressed [ 145.772296][ T5425] kvm [5424]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x100000000 [ 145.788313][ T4259] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 145.810410][ T4230] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 145.828256][ T4230] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 145.842502][ T5425] kvm [5424]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 145.860444][ T4230] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 145.868664][ T5425] kvm [5424]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x80 [ 145.903287][ T4230] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 145.921198][ T5425] kvm [5424]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 145.959585][ T4230] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 145.967391][ T5425] kvm [5424]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x0 [ 145.976338][ T4230] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 145.991987][ T4230] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 146.003842][ T5425] kvm [5424]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 146.034877][ T4259] usb 3-1: Using ep0 maxpacket: 8 [ 146.062166][ T4230] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0007/input/input10 [ 146.064922][ T5425] kvm [5424]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x80 [ 146.119063][ T5425] kvm [5424]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 146.155085][ T4259] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 146.171661][ T5425] kvm [5424]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x0 [ 146.209158][ T5425] kvm [5424]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 146.249212][ T4230] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 146.256732][ T5425] kvm [5424]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x80 [ 146.301889][ T5425] kvm [5424]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x80 [ 146.324980][ T4259] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 146.356581][ T4259] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.406111][ T4230] usb 4-1: USB disconnect, device number 11 [ 146.416111][ T4259] usb 3-1: Product: syz [ 146.420322][ T4259] usb 3-1: Manufacturer: syz [ 146.474818][ T4259] usb 3-1: SerialNumber: syz [ 146.491061][ T4259] usb 3-1: config 0 descriptor?? [ 146.530648][ T5436] fido_id[5436]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 146.587179][ T4259] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 146.760210][ T5446] fuse: Bad value for 'fd' [ 146.792985][ T5446] device syzkaller0 entered promiscuous mode [ 146.954855][ T1111] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 147.022716][ T5448] netlink: 24 bytes leftover after parsing attributes in process `syz.3.394'. [ 147.109034][ T5450] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 147.140619][ T5450] tipc: Enabling of bearer rejected, already enabled [ 147.205118][ T1111] usb 5-1: Using ep0 maxpacket: 32 [ 147.221229][ T5457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.398'. [ 147.286881][ T5460] binder: 5459:5460 ioctl c0306201 0 returned -14 [ 147.324965][ T1111] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 147.342976][ T1111] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 147.401513][ T1111] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 147.414291][ T5464] binder: 5459:5464 ioctl c0306201 0 returned -14 [ 147.457368][ T1111] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 147.490633][ T1111] usb 5-1: config 0 interface 0 has no altsetting 0 [ 147.655127][ T1111] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 147.675368][ T1111] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 147.688235][ T1111] usb 5-1: Product: syz [ 147.693340][ T1111] usb 5-1: Manufacturer: syz [ 147.715770][ T1111] usb 5-1: SerialNumber: syz [ 147.725690][ T5469] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 147.749514][ T1111] usb 5-1: config 0 descriptor?? [ 147.806447][ T1111] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 147.838882][ T1111] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 147.970296][ T5474] device syzkaller0 entered promiscuous mode [ 147.986529][ T5474] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 148.120213][ T4235] usb 5-1: USB disconnect, device number 11 [ 148.125082][ C0] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 148.132602][ T5442] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 148.140510][ T5475] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 148.171140][ T4235] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 148.190908][ T5480] fuse: Bad value for 'fd' [ 148.230152][ T5480] device syzkaller0 entered promiscuous mode [ 148.303089][ T5482] netlink: 'syz.1.405': attribute type 10 has an invalid length. [ 148.348645][ T5482] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 148.380124][ T5482] netlink: 'syz.1.405': attribute type 11 has an invalid length. [ 148.518360][ T5485] netlink: 24 bytes leftover after parsing attributes in process `syz.0.406'. [ 148.749167][ T5492] loop9: detected capacity change from 0 to 7 [ 148.789995][ T4380] Dev loop9: unable to read RDB block 7 [ 148.844909][ T5494] loop_set_status: loop9 (úù) has still dirty pages (nrpages=1) [ 148.884549][ T4380] loop9: unable to read partition table [ 148.892559][ T4380] loop9: partition table beyond EOD, truncated [ 148.940062][ T5492] Dev loop9: unable to read RDB block 7 [ 148.964674][ T5492] loop9: unable to read partition table [ 148.989348][ T5492] loop9: partition table beyond EOD, truncated [ 149.035087][ T5492] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 149.124893][ T4191] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 149.158778][ T5498] device syzkaller0 entered promiscuous mode [ 149.455044][ T4191] usb 1-1: not running at top speed; connect to a high speed hub [ 149.477428][ T7] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 149.545098][ T4191] usb 1-1: config 1 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 149.578138][ T4191] usb 1-1: config 1 interface 0 has no altsetting 0 [ 149.645026][ T4259] gspca_zc3xx: reg_r err -71 [ 149.755038][ T4191] usb 1-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.40 [ 149.767804][ T4191] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.776497][ T4191] usb 1-1: Product: syz [ 149.781260][ T4191] usb 1-1: Manufacturer: syz [ 149.788918][ T4191] usb 1-1: SerialNumber: syz [ 149.854952][ T7] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 149.863871][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.874176][ T7] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 66 [ 149.995085][ T7] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 150.004442][ T7] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 150.012585][ T7] usb 4-1: Product: syz [ 150.017018][ T7] usb 4-1: Manufacturer: syz [ 150.220696][ T5505] program syz.2.413 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 150.234198][ T5505] netlink: 'syz.2.413': attribute type 13 has an invalid length. [ 150.247590][ T5505] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 150.255212][ T4191] usbhid 1-1:1.0: can't add hid device: -71 [ 150.264828][ T4259] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 150.271123][ T4259] gspca_zc3xx: probe of 3-1:0.0 failed with error -71 [ 150.288934][ T4191] usbhid: probe of 1-1:1.0 failed with error -71 [ 150.299698][ T5505] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 150.315057][ T4191] usb 1-1: USB disconnect, device number 9 [ 150.321515][ T4259] usb 3-1: USB disconnect, device number 11 [ 150.365375][ T7] usb 4-1: USB disconnect, device number 12 [ 150.373180][ T5505] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 150.384195][ T5505] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 150.428546][ T5505] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 150.445277][ T5505] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 150.453195][ T5505] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 150.470484][ T5505] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 150.482314][ T5505] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 150.492457][ T5505] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 150.527230][ T5512] device syzkaller0 entered promiscuous mode [ 150.537083][ T5512] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 150.760968][ T5519] netlink: 24 bytes leftover after parsing attributes in process `syz.4.418'. [ 151.014855][ T5534] netlink: 20 bytes leftover after parsing attributes in process `syz.0.417'. [ 151.058780][ T5534] netlink: 240 bytes leftover after parsing attributes in process `syz.0.417'. [ 151.184991][ T1108] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 151.314771][ T7] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 151.434918][ T1108] usb 5-1: Using ep0 maxpacket: 8 [ 151.564853][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 151.685801][ T7] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 151.765348][ T1108] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 151.804974][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.824795][ T1108] usb 5-1: Product: syz [ 151.844880][ T1108] usb 5-1: Manufacturer: syz [ 151.849594][ T1108] usb 5-1: SerialNumber: syz [ 151.865138][ T7] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 151.875849][ T1108] usb 5-1: config 0 descriptor?? [ 151.894626][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.936444][ T7] usb 4-1: Product: syz [ 151.940677][ T7] usb 4-1: Manufacturer: syz [ 151.953551][ T5552] device syzkaller0 entered promiscuous mode [ 151.964473][ T5552] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 151.964822][ T7] usb 4-1: SerialNumber: syz [ 152.007308][ T7] usb 4-1: config 0 descriptor?? [ 152.047065][ T7] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 152.158396][ T5557] netlink: 24 bytes leftover after parsing attributes in process `syz.1.430'. [ 152.167771][ T1108] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 152.176233][ T2302] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 152.178888][ T5557] binder: BINDER_SET_CONTEXT_MGR already set [ 152.191423][ T5557] binder: 5556:5557 ioctl 4018620d 200000004a80 returned -16 [ 152.457899][ T2302] usb 3-1: Using ep0 maxpacket: 8 [ 152.596075][ T5568] device syzkaller0 entered promiscuous mode [ 152.722141][ T5570] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 152.785159][ T2302] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 152.804745][ T2302] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.823369][ T2302] usb 3-1: Product: syz [ 152.828204][ T2302] usb 3-1: Manufacturer: syz [ 152.832889][ T2302] usb 3-1: SerialNumber: syz [ 152.833810][ T5575] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 152.849927][ T2302] usb 3-1: config 0 descriptor?? [ 152.866985][ T5575] tipc: Started in network mode [ 152.871935][ T5575] tipc: Node identity ac1414aa, cluster identity 4711 [ 152.879344][ T5575] tipc: Enabled bearer , priority 10 [ 152.920901][ T2302] gspca_main: se401-2.14.0 probing 047d:5003 [ 152.951265][ T5577] device syzkaller0 entered promiscuous mode [ 152.960129][ T5577] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 153.033680][ T5579] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 153.063280][ T5581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.441'. [ 153.312139][ T5593] device syzkaller0 entered promiscuous mode [ 153.363202][ T5594] netlink: 'syz.0.447': attribute type 1 has an invalid length. [ 153.389264][ T5594] 8021q: adding VLAN 0 to HW filter on device bond2 [ 153.431756][ T5596] 8021q: adding VLAN 0 to HW filter on device bond2 [ 153.462489][ T5596] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 153.476042][ T5596] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 153.518316][ T5594] device wlan1 entered promiscuous mode [ 153.542226][ T5594] bond2: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 153.583409][ T5602] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 153.747060][ T1108] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 153.768739][ T1108] usb 5-1: USB disconnect, device number 12 [ 153.819182][ T5607] device syzkaller0 entered promiscuous mode [ 153.842869][ T5607] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 153.994973][ T4234] tipc: Node number set to 2886997162 [ 154.266442][ T9] device veth0_to_bond left promiscuous mode [ 154.445604][ T2302] gspca_se401: read req failed req 0x06 error -19 [ 154.483132][ T2302] usb 3-1: USB disconnect, device number 12 [ 154.597168][ T5622] device syzkaller0 entered promiscuous mode [ 154.644910][ T4259] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 154.655811][ T5622] tipc: Enabling of bearer rejected, failed to enable media [ 155.775071][ T7] gspca_zc3xx: reg_r err -71 [ 156.015015][ T4259] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 156.024113][ T4259] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 156.071739][ T4259] usb 5-1: Product: syz [ 156.084758][ T4259] usb 5-1: SerialNumber: syz [ 156.091712][ T4259] usb 5-1: config 0 descriptor?? [ 156.359103][ T5658] device syzkaller0 entered promiscuous mode [ 156.371076][ T4259] hso 5-1:0.0: Failed to find BULK IN ep [ 156.394786][ T7] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 156.396058][ T5658] tipc: Enabling of bearer rejected, failed to enable media [ 156.418225][ T7] gspca_zc3xx: probe of 4-1:0.0 failed with error -71 [ 156.491561][ T7] usb 4-1: USB disconnect, device number 13 [ 156.570525][ T2302] usb 5-1: USB disconnect, device number 13 [ 157.396274][ T21] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 157.512505][ T5692] device syzkaller0 entered promiscuous mode [ 157.572972][ T5692] tipc: Enabling of bearer rejected, failed to enable media [ 157.654799][ T21] usb 4-1: Using ep0 maxpacket: 8 [ 157.805089][ T21] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 158.025016][ T21] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 158.036831][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.048557][ T21] usb 4-1: Product: syz [ 158.062002][ T21] usb 4-1: Manufacturer: syz [ 158.108900][ T21] usb 4-1: SerialNumber: syz [ 158.148030][ T21] usb 4-1: config 0 descriptor?? [ 158.239197][ T21] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 158.717327][ T5728] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 158.772037][ T5729] device syzkaller0 entered promiscuous mode [ 158.874368][ T5729] tipc: Enabling of bearer rejected, failed to enable media [ 159.012972][ T5733] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 159.041481][ T5735] raw_sendmsg: syz.2.498 forgot to set AF_INET. Fix it! [ 159.054864][ T5733] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 159.076968][ T5733] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 159.124115][ T5733] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 159.174511][ T5733] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 159.222495][ T5733] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 159.266437][ T5733] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 159.327690][ T5733] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 159.367829][ T5733] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 159.416151][ T5733] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 159.724785][ T4234] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 159.855004][ T2302] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 159.980627][ T4234] usb 1-1: Using ep0 maxpacket: 16 [ 160.105092][ T4234] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.124817][ T2302] usb 3-1: Using ep0 maxpacket: 8 [ 160.124788][ T4234] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 160.124852][ T4234] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 160.178536][ T4234] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 160.190147][ T4234] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 160.288586][ T4234] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 160.302760][ T4234] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 160.318854][ T4234] usb 1-1: Manufacturer: syz [ 160.329013][ T4234] usb 1-1: config 0 descriptor?? [ 160.445321][ T2302] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 160.459475][ T2302] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.478857][ T2302] usb 3-1: Product: syz [ 160.489405][ T2302] usb 3-1: Manufacturer: syz [ 160.498440][ T2302] usb 3-1: SerialNumber: syz [ 160.515496][ T2302] usb 3-1: config 0 descriptor?? [ 160.567826][ T2302] gspca_main: se401-2.14.0 probing 047d:5003 [ 160.707213][ T4234] rc_core: IR keymap rc-hauppauge not found [ 160.714502][ T4234] Registered IR keymap rc-empty [ 160.744414][ T4234] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 160.795123][ T4234] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 160.835594][ T4234] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 160.875530][ T4234] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input11 [ 160.960950][ T4234] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 161.014893][ T4234] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 161.055159][ T4234] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 161.084912][ T4234] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 161.124852][ T4234] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 161.170821][ T4234] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 161.214951][ T4234] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 161.229541][ T5767] device syzkaller0 entered promiscuous mode [ 161.245154][ T4234] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 161.278893][ T5767] tipc: Enabling of bearer rejected, failed to enable media [ 161.284822][ T4234] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 161.324961][ T4234] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 161.334878][ T21] gspca_zc3xx: reg_r err -71 [ 161.376091][ T4234] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 161.386879][ T4234] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 161.403588][ T4234] usb 1-1: USB disconnect, device number 10 [ 161.605008][ T5773] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 161.618776][ T5773] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 161.954952][ T21] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 161.968035][ T21] gspca_zc3xx: probe of 4-1:0.0 failed with error -71 [ 162.007981][ T21] usb 4-1: USB disconnect, device number 14 [ 162.205550][ T2302] gspca_se401: read req failed req 0x06 error -19 [ 162.217700][ T2302] usb 3-1: USB disconnect, device number 13 [ 162.375601][ T4235] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 162.412827][ T5802] fuse: Bad value for 'fd' [ 162.472534][ T5802] device syzkaller0 entered promiscuous mode [ 162.614787][ T4235] usb 1-1: Using ep0 maxpacket: 8 [ 162.735167][ T4235] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 162.767236][ T4235] usb 1-1: config 0 interface 0 has no altsetting 0 [ 162.947064][ T4235] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 162.956301][ T1108] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 162.976556][ T4235] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.005615][ T4235] usb 1-1: Product: syz [ 163.015739][ T4235] usb 1-1: Manufacturer: syz [ 163.043785][ T4235] usb 1-1: SerialNumber: syz [ 163.081648][ T4235] usb 1-1: config 0 descriptor?? [ 163.125003][ T4259] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 163.176977][ T4235] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 163.197970][ T4235] usb 1-1: setting power ON [ 163.203263][ T4235] dvb-usb: bulk message failed: -22 (2/0) [ 163.234781][ T1108] usb 4-1: Using ep0 maxpacket: 8 [ 163.251892][ T4235] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 163.315023][ T4235] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 163.336674][ T4235] usb 1-1: media controller created [ 163.374876][ T4259] usb 3-1: Using ep0 maxpacket: 8 [ 163.380428][ T5782] dvb-usb: bulk message failed: -22 (3/0) [ 163.386574][ T1108] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 163.418342][ T5782] dvb-usb: bulk message failed: -22 (4/0) [ 163.463860][ T4235] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 163.562956][ T4235] usb 1-1: selecting invalid altsetting 6 [ 163.593076][ T4235] usb 1-1: digital interface selection failed (-22) [ 163.613350][ T4235] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 163.625009][ T1108] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 163.635071][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.643100][ T1108] usb 4-1: Product: syz [ 163.665343][ T4259] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 163.670280][ T1108] usb 4-1: Manufacturer: syz [ 163.689488][ T1108] usb 4-1: SerialNumber: syz [ 163.691888][ T4259] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.704884][ T4235] usb 1-1: setting power OFF [ 163.713942][ T4235] dvb-usb: bulk message failed: -22 (2/0) [ 163.719543][ T5845] fuse: Bad value for 'fd' [ 163.722261][ T1108] usb 4-1: config 0 descriptor?? [ 163.729250][ T4259] usb 3-1: Product: syz [ 163.733442][ T4259] usb 3-1: Manufacturer: syz [ 163.736552][ T4235] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 163.744823][ T4259] usb 3-1: SerialNumber: syz [ 163.754184][ T5845] device syzkaller0 entered promiscuous mode [ 163.764756][ T4235] (NULL device *): no alternate interface [ 163.772578][ T4259] usb 3-1: config 0 descriptor?? [ 163.805329][ T1108] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 163.827387][ T4259] gspca_main: se401-2.14.0 probing 047d:5003 [ 163.872639][ T4235] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 163.903188][ T4235] usb 1-1: USB disconnect, device number 11 [ 164.273132][ T5856] netlink: 36 bytes leftover after parsing attributes in process `syz.1.542'. [ 164.922357][ T5878] fuse: Bad value for 'fd' [ 164.967103][ T5880] tipc: Enabled bearer , priority 0 [ 165.000380][ T5878] device syzkaller0 entered promiscuous mode [ 165.013866][ T5880] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 165.077208][ T5879] tipc: Disabling bearer [ 165.407001][ T5887] device syzkaller0 entered promiscuous mode [ 165.423580][ T5889] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 165.596861][ T4259] gspca_se401: read req failed req 0x06 error -19 [ 165.641668][ T4259] usb 3-1: USB disconnect, device number 14 [ 166.390319][ T5918] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 4, id = 0 [ 166.400090][ T5916] IPVS: stopping backup sync thread 5918 ... [ 166.654809][ T4259] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 166.724881][ T4235] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 166.736016][ T5926] hub 8-0:1.0: USB hub found [ 166.773433][ T5926] hub 8-0:1.0: 1 port detected [ 166.855701][ T1108] gspca_zc3xx: reg_r err -71 [ 166.905520][ T4259] usb 2-1: Using ep0 maxpacket: 8 [ 166.974849][ T4235] usb 3-1: Using ep0 maxpacket: 16 [ 167.174990][ T4235] usb 3-1: unable to get BOS descriptor or descriptor too short [ 167.185029][ T4259] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 167.203413][ T4259] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.224805][ T4259] usb 2-1: Product: syz [ 167.229197][ T4259] usb 2-1: Manufacturer: syz [ 167.254236][ T4259] usb 2-1: SerialNumber: syz [ 167.268148][ T4259] usb 2-1: config 0 descriptor?? [ 167.295061][ T4235] usb 3-1: config 174 has an invalid interface number: 197 but max is 0 [ 167.306918][ T4259] gspca_main: se401-2.14.0 probing 047d:5003 [ 167.316934][ T4235] usb 3-1: config 174 has no interface number 0 [ 167.324819][ T4235] usb 3-1: config 174 interface 197 has no altsetting 0 [ 167.485260][ T1108] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 167.518553][ T1108] gspca_zc3xx: probe of 4-1:0.0 failed with error -71 [ 167.529859][ T4235] usb 3-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=bd.a1 [ 167.554801][ T4235] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.584978][ T1108] usb 4-1: USB disconnect, device number 15 [ 167.607945][ T4235] usb 3-1: Product: syz [ 167.612184][ T4235] usb 3-1: Manufacturer: syz [ 167.617787][ T5933] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 167.641573][ T4235] usb 3-1: SerialNumber: syz [ 167.759111][ T5933] tipc: Enabling of bearer rejected, already enabled [ 168.166605][ T2302] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 168.264905][ T4235] peak_usb 3-1:174.197 can0: unable to request usb[type=0 value=1] err=-71 [ 168.300485][ T4235] peak_usb 3-1:174.197: unable to read PCAN-Chip USB firmware info (err -71) [ 168.455335][ T4235] peak_usb: probe of 3-1:174.197 failed with error -71 [ 168.466419][ T4235] usb 3-1: USB disconnect, device number 15 [ 168.556391][ T2302] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 168.577939][ T2302] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 168.614115][ T2302] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 168.835751][ T2302] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 168.854449][ T2302] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.863064][ T2302] usb 1-1: Product: syz [ 168.867588][ T2302] usb 1-1: Manufacturer: syz [ 168.872351][ T2302] usb 1-1: SerialNumber: syz [ 168.889206][ T2302] usb 1-1: config 0 descriptor?? [ 168.894824][ T4235] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 169.121811][ T1108] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 169.201622][ T4234] usb 1-1: USB disconnect, device number 12 [ 169.225633][ T4259] gspca_se401: read req failed req 0x06 error -19 [ 169.236557][ T4259] usb 2-1: USB disconnect, device number 12 [ 169.324956][ T4235] usb 3-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 169.368714][ T4235] usb 3-1: config 0 interface 0 has no altsetting 0 [ 169.376209][ T4235] usb 3-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 169.391867][ T4235] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.405639][ T5969] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 169.446660][ T4235] usb 3-1: config 0 descriptor?? [ 169.469423][ T5969] tipc: Enabling of bearer rejected, already enabled [ 169.536516][ T1108] usb 4-1: config 0 has no interfaces? [ 169.733146][ T1108] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 169.748034][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.775888][ T1108] usb 4-1: Product: syz [ 169.790355][ T1108] usb 4-1: Manufacturer: syz [ 169.817060][ T1108] usb 4-1: SerialNumber: syz [ 169.868596][ T1108] usb 4-1: config 0 descriptor?? [ 170.034910][ T4230] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 170.047571][ T4235] waltop 0003:172F:0037.0008: ignoring exceeding usage max [ 170.076451][ T4235] waltop 0003:172F:0037.0008: hidraw0: USB HID v0.04 Device [HID 172f:0037] on usb-dummy_hcd.2-1/input0 [ 170.179710][ T5963] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.244892][ T4234] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 170.313429][ T1108] usb 3-1: USB disconnect, device number 16 [ 170.335229][ T4230] usb 2-1: too many configurations: 151, using maximum allowed: 8 [ 170.369150][ T4235] usb 4-1: USB disconnect, device number 16 [ 170.422360][ T5983] hub 8-0:1.0: USB hub found [ 170.428446][ T5983] hub 8-0:1.0: 1 port detected [ 170.494845][ T4234] usb 5-1: Using ep0 maxpacket: 16 [ 170.775012][ T4234] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 170.804640][ T4234] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.813041][ T4234] usb 5-1: Product: syz [ 170.824819][ T4234] usb 5-1: Manufacturer: syz [ 170.834241][ T4234] usb 5-1: SerialNumber: syz [ 171.117039][ T4234] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 171.143595][ T4234] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 171.176786][ T4234] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 171.216694][ T4234] usb 5-1: media controller created [ 171.251246][ T4230] usb 2-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 171.251817][ T4234] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 171.279553][ T4230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 171.314782][ T4230] usb 2-1: Product: syz [ 171.325104][ T4230] usb 2-1: Manufacturer: syz [ 171.334993][ T4230] usb 2-1: SerialNumber: syz [ 171.359409][ T4230] usb 2-1: config 0 descriptor?? [ 171.427116][ T4230] ims_pcu 2-1:0.0: Zero length descriptor [ 171.432926][ T4230] ims_pcu: probe of 2-1:0.0 failed with error -22 [ 171.573243][ T6008] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 171.584346][ T4234] zl10353_read_register: readreg error (reg=127, ret==-71) [ 171.621369][ T6008] tipc: Enabling of bearer rejected, already enabled [ 171.632849][ T4234] dvb_usb_gl861: probe of 5-1:157.0 failed with error -5 [ 171.655242][ T4234] usb 5-1: USB disconnect, device number 14 [ 171.742999][ T5974] netlink: 'syz.1.586': attribute type 12 has an invalid length. [ 171.772884][ T7] usb 2-1: USB disconnect, device number 13 [ 172.307146][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 172.307162][ T26] audit: type=1326 audit(1784698364.411:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.4.601" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d674c8e99 code=0x7ffc0000 [ 172.486548][ T26] audit: type=1326 audit(1784698364.411:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.4.601" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d674c8e99 code=0x7ffc0000 [ 172.511841][ T26] audit: type=1326 audit(1784698364.441:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.4.601" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d674c8e99 code=0x7ffc0000 [ 172.537802][ T26] audit: type=1326 audit(1784698364.441:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.4.601" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d674c8e99 code=0x7ffc0000 [ 172.660495][ T26] audit: type=1326 audit(1784698364.441:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.4.601" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7d674c8e99 code=0x7ffc0000 [ 172.734875][ T26] audit: type=1326 audit(1784698364.441:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.4.601" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d674c8e99 code=0x7ffc0000 [ 172.806392][ T26] audit: type=1326 audit(1784698364.441:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.4.601" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d674c8e99 code=0x7ffc0000 [ 172.934826][ T26] audit: type=1326 audit(1784698364.451:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.4.601" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d674c8e99 code=0x7ffc0000 [ 173.000492][ T26] audit: type=1326 audit(1784698364.451:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.4.601" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d674c8e99 code=0x7ffc0000 [ 173.054822][ T26] audit: type=1326 audit(1784698364.451:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.4.601" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7d674c8e99 code=0x7ffc0000 [ 173.194898][ T4230] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 173.441943][ T6052] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 173.475000][ T4230] usb 1-1: Using ep0 maxpacket: 16 [ 173.561424][ T6052] tipc: Enabling of bearer rejected, already enabled [ 173.595340][ T4230] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.623341][ T4230] usb 1-1: config 0 has no interfaces? [ 173.800936][ T4230] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 173.819099][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.925113][ T4230] usb 1-1: Product: syz [ 173.953040][ T4230] usb 1-1: Manufacturer: syz [ 173.984398][ T4230] usb 1-1: SerialNumber: syz [ 174.044843][ T4230] usb 1-1: config 0 descriptor?? [ 174.175142][ T6079] device syzkaller0 entered promiscuous mode [ 174.568211][ T6037] udc-core: couldn't find an available UDC or it's busy [ 174.584868][ T6037] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 174.696407][ T4234] usb 1-1: USB disconnect, device number 13 [ 175.902443][ T6120] kvm: pic: non byte write [ 175.985017][ T7] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 176.385075][ T7] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 176.418625][ T7] usb 4-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 176.481969][ T7] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 176.532084][ T6130] device syzkaller0 entered promiscuous mode [ 176.544828][ T7] usb 4-1: config 8 has no interface number 0 [ 176.558358][ T7] usb 4-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 176.775133][ T7] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 176.815232][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.844784][ T7] usb 4-1: Product: syz [ 176.859802][ T7] usb 4-1: Manufacturer: syz [ 176.869929][ T7] usb 4-1: SerialNumber: syz [ 177.184897][ T4259] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 177.672910][ T4259] usb 2-1: Using ep0 maxpacket: 16 [ 177.746545][ T6149] tipc: Enabling of bearer rejected, failed to enable media [ 177.955082][ T4259] usb 2-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 177.980800][ T4259] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.045029][ T4259] usb 2-1: Product: syz [ 178.088000][ T4259] usb 2-1: Manufacturer: syz [ 178.113364][ T4259] usb 2-1: SerialNumber: syz [ 178.146194][ T4259] usb 2-1: config 0 descriptor?? [ 178.227516][ T4259] gspca_main: spca508-2.14.0 probing 041e:4018 [ 178.435065][ T4259] gspca_spca508: reg_read err -32 [ 178.474926][ T4259] gspca_spca508: reg_read err -32 [ 178.522927][ T7] usb 4-1: USB disconnect, device number 17 [ 178.534845][ T4259] gspca_spca508: reg_read err -32 [ 178.585165][ T4259] gspca_spca508: reg_read err -32 [ 178.625136][ T4259] gspca_spca508: reg_read err -32 [ 178.764873][ T4191] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 179.185731][ T4259] gspca_spca508: reg write: error -110 [ 179.191613][ T4259] spca508: probe of 2-1:0.0 failed with error -110 [ 179.209452][ T6170] device syzkaller0 entered promiscuous mode [ 179.515783][ T4191] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 179.538809][ T4191] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.577550][ T4191] usb 5-1: Product: syz [ 179.599302][ T4191] usb 5-1: Manufacturer: syz [ 179.623906][ T4191] usb 5-1: SerialNumber: syz [ 180.258791][ T21] usb 2-1: USB disconnect, device number 14 [ 180.476963][ T6186] tipc: Enabling of bearer rejected, failed to enable media [ 180.525148][ T4191] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 181.269863][ T6200] usb usb7: usbfs: process 6200 (syz.1.642) did not claim interface 0 before use [ 181.924328][ T6208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.645'. [ 181.954880][ T4191] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 182.024850][ T4191] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -32 [ 182.094868][ T4191] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -32 [ 182.511270][ T6212] device syzkaller0 entered promiscuous mode [ 183.295047][ T26] kauditd_printk_skb: 112 callbacks suppressed [ 183.295062][ T26] audit: type=1326 audit(1784698375.401:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.1.649" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7de153e99 code=0x7ffc0000 [ 183.342724][ T26] audit: type=1326 audit(1784698375.431:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.1.649" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7de153e99 code=0x7ffc0000 [ 183.394215][ T26] audit: type=1326 audit(1784698375.431:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.1.649" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7de153e99 code=0x7ffc0000 [ 183.473503][ T4191] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 183.534243][ T6229] tipc: Enabling of bearer rejected, failed to enable media [ 183.545316][ T4191] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 183.553779][ T26] audit: type=1326 audit(1784698375.431:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.1.649" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd7de153e99 code=0x7ffc0000 [ 183.624947][ T4191] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -71 [ 183.677517][ T26] audit: type=1326 audit(1784698375.431:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.1.649" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7de153e99 code=0x7ffc0000 [ 183.684970][ T4191] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 183.781003][ T26] audit: type=1326 audit(1784698375.431:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.1.649" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7de153e99 code=0x7ffc0000 [ 183.879866][ T4191] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 183.908026][ T26] audit: type=1326 audit(1784698375.431:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.1.649" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7de153e99 code=0x7ffc0000 [ 183.977366][ T4191] lan78xx: probe of 5-1:1.0 failed with error -71 [ 183.993398][ T26] audit: type=1326 audit(1784698375.431:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.1.649" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd7de153e99 code=0x7ffc0000 [ 184.046615][ T26] audit: type=1326 audit(1784698375.431:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.1.649" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7de153e99 code=0x7ffc0000 [ 184.048341][ T4191] usb 5-1: USB disconnect, device number 15 [ 184.140118][ T26] audit: type=1326 audit(1784698375.431:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.1.649" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7de153e99 code=0x7ffc0000 [ 184.383226][ T6255] netlink: 16 bytes leftover after parsing attributes in process `syz.1.657'. [ 184.634940][ T4191] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 185.814941][ T4191] usb 5-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 185.831978][ T4191] usb 5-1: config 1 interface 0 has no altsetting 0 [ 186.075031][ T4191] usb 5-1: string descriptor 0 read error: -22 [ 186.081308][ T1111] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 186.099517][ T4191] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 186.165729][ T4191] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.224918][ T4259] Bluetooth: hci0: command 0x0406 tx timeout [ 186.224991][ T21] Bluetooth: hci2: command 0x0406 tx timeout [ 186.243807][ T4259] Bluetooth: hci1: command 0x0406 tx timeout [ 186.276310][ T6287] device syzkaller0 entered promiscuous mode [ 186.294805][ T4259] Bluetooth: hci4: command 0x0406 tx timeout [ 186.347493][ T4259] Bluetooth: hci3: command 0x0406 tx timeout [ 186.364919][ T1111] usb 1-1: Using ep0 maxpacket: 16 [ 186.584964][ T1111] usb 1-1: unable to get BOS descriptor or descriptor too short [ 186.668364][ T1111] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 186.689443][ T1111] usb 1-1: can't read configurations, error -71 [ 186.734769][ T21] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 186.826297][ T4191] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 186.840667][ T4191] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:0926:3333.0009/input/input12 [ 186.921084][ T4191] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 186.935092][ T2302] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 186.985057][ T21] usb 4-1: Using ep0 maxpacket: 32 [ 187.032155][ T4191] usb 5-1: USB disconnect, device number 16 [ 187.125052][ T21] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 187.151799][ T6311] fido_id[6311]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 187.176438][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.194987][ T2302] usb 3-1: Using ep0 maxpacket: 8 [ 187.211541][ T21] usb 4-1: config 0 descriptor?? [ 187.324977][ T2302] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.338541][ T2302] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 187.495110][ T21] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 187.513522][ T21] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 187.555262][ T21] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 187.574972][ T2302] usb 3-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 187.606010][ T21] usb 4-1: media controller created [ 187.616073][ T2302] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.624162][ T2302] usb 3-1: Product: syz [ 187.660450][ T2302] usb 3-1: Manufacturer: syz [ 187.699910][ T6296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.671'. [ 187.712196][ T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 187.733850][ T2302] usb 3-1: SerialNumber: syz [ 187.815355][ T21] az6027: usb out operation failed. (-71) [ 187.824802][ T1111] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 187.876115][ T21] az6027: usb out operation failed. (-71) [ 187.881941][ T21] stb0899_attach: Driver disabled by Kconfig [ 187.915939][ T21] az6027: no front-end attached [ 187.915939][ T21] [ 187.950788][ T21] az6027: usb out operation failed. (-71) [ 187.956941][ T21] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 187.982817][ T21] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input13 [ 188.008528][ T21] dvb-usb: schedule remote query interval to 400 msecs. [ 188.023057][ T21] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 188.040632][ T21] usb 4-1: USB disconnect, device number 18 [ 188.161626][ T21] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 188.205011][ T1111] usb 1-1: config 0 has no interfaces? [ 188.365537][ T1111] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 188.382486][ T1111] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.392719][ T1111] usb 1-1: Product: syz [ 188.399168][ T1111] usb 1-1: Manufacturer: syz [ 188.404048][ T1111] usb 1-1: SerialNumber: syz [ 188.457720][ T1111] usb 1-1: config 0 descriptor?? [ 188.735003][ T1111] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 188.781877][ T21] usb 1-1: USB disconnect, device number 15 [ 188.925153][ T1111] usb 5-1: device descriptor read/64, error -71 [ 188.972782][ T6371] netlink: 24 bytes leftover after parsing attributes in process `syz.1.689'. [ 189.194803][ T1111] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 189.385088][ T1111] usb 5-1: device descriptor read/64, error -71 [ 189.503485][ T6380] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 189.505213][ T1111] usb usb5-port1: attempt power cycle [ 189.534388][ T6380] tipc: Enabling of bearer rejected, already enabled [ 190.320466][ T2302] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 190.515420][ T2302] usb 3-1: USB disconnect, device number 17 [ 190.530561][ T6388] device syzkaller0 entered promiscuous mode [ 190.584829][ T1111] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 190.695008][ T1111] usb 5-1: device descriptor read/8, error -71 [ 190.704557][ T6398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.698'. [ 190.783159][ T4380] udevd[4380]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.951014][ T4231] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 190.964747][ T1111] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 191.077668][ T1111] usb 5-1: device descriptor read/8, error -71 [ 191.195270][ T1111] usb usb5-port1: unable to enumerate USB device [ 191.216720][ T6416] tipc: Enabling of bearer rejected, failed to enable media [ 191.484847][ T4231] usb 1-1: config 8 has an invalid interface number: 223 but max is 0 [ 191.493081][ T4231] usb 1-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 191.534725][ T4231] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 191.545730][ T4231] usb 1-1: config 8 has no interface number 0 [ 191.546773][ T6427] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 191.551856][ T4231] usb 1-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 191.597119][ T6427] tipc: Started in network mode [ 191.602050][ T6427] tipc: Node identity ac1414aa, cluster identity 4711 [ 191.626256][ T6427] tipc: Enabled bearer , priority 10 [ 191.745003][ T4231] usb 1-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 191.754254][ T4231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.783234][ T6435] netlink: 24 bytes leftover after parsing attributes in process `syz.4.707'. [ 191.792300][ T4231] usb 1-1: Product: syz [ 191.802424][ T4231] usb 1-1: Manufacturer: syz [ 191.812602][ T4231] usb 1-1: SerialNumber: syz [ 192.218031][ T4231] usb 1-1: USB disconnect, device number 16 [ 192.794348][ T4735] tipc: Node number set to 2886997162 [ 192.902293][ T6447] device syzkaller0 entered promiscuous mode [ 193.170437][ T6462] fuse: Bad value for 'fd' [ 193.176357][ T6459] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 193.214241][ T6461] tipc: Enabling of bearer rejected, failed to enable media [ 193.256798][ T6459] tipc: Enabling of bearer rejected, already enabled [ 194.397006][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.527604][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.837892][ T6488] netlink: 24 bytes leftover after parsing attributes in process `syz.1.721'. [ 194.913915][ T6494] device syzkaller0 entered promiscuous mode [ 195.014237][ T6499] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 195.082035][ T6499] tipc: Enabling of bearer rejected, already enabled [ 195.161970][ T6504] fuse: Bad value for 'fd' [ 195.164754][ T4235] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 195.225972][ T7] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 195.444957][ T4235] usb 4-1: Using ep0 maxpacket: 8 [ 195.479357][ T6513] tipc: Enabling of bearer rejected, failed to enable media [ 195.611195][ T7] usb 3-1: config 8 has an invalid interface number: 223 but max is 0 [ 195.623169][ T7] usb 3-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 195.650140][ T7] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 195.691087][ T7] usb 3-1: config 8 has no interface number 0 [ 195.697596][ T7] usb 3-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 195.717465][ T4735] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 195.881581][ T7] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 195.939009][ T4235] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 195.942083][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.948897][ T4235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.967368][ T4235] usb 4-1: Product: syz [ 195.971591][ T4235] usb 4-1: Manufacturer: syz [ 195.980467][ T4235] usb 4-1: SerialNumber: syz [ 195.987784][ T7] usb 3-1: Product: syz [ 195.988927][ T4235] usb 4-1: config 0 descriptor?? [ 196.001490][ T7] usb 3-1: Manufacturer: syz [ 196.007496][ T7] usb 3-1: SerialNumber: syz [ 196.307054][ T4235] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 196.326353][ T4735] usb 5-1: config index 0 descriptor too short (expected 65403, got 72) [ 196.516106][ T4735] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 196.518915][ T7] usb 3-1: USB disconnect, device number 18 [ 196.558622][ T4735] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.602782][ T4735] usb 5-1: Product: syz [ 196.997516][ T4735] usb 5-1: Manufacturer: syz [ 197.002929][ T4735] usb 5-1: SerialNumber: syz [ 197.067590][ T4735] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 197.099738][ T6536] device syzkaller0 entered promiscuous mode [ 197.190164][ T6538] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 197.214346][ T6538] tipc: Enabling of bearer rejected, already enabled [ 197.334994][ T2302] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 197.363483][ T6545] fuse: Bad value for 'fd' [ 197.594802][ T2302] usb 1-1: Using ep0 maxpacket: 32 [ 197.714870][ T4735] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 197.724794][ T2302] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 197.733360][ T2302] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 197.776682][ T2302] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 197.809077][ T2302] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 197.853266][ T2302] usb 1-1: config 0 interface 0 has no altsetting 0 [ 197.900458][ T6559] netlink: 24 bytes leftover after parsing attributes in process `syz.2.743'. [ 197.937565][ T1108] usb 5-1: USB disconnect, device number 21 [ 198.044223][ T6562] tipc: Enabled bearer , priority 0 [ 198.059374][ T6562] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 198.064980][ T2302] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 198.085535][ T6561] tipc: Disabling bearer [ 198.095819][ T2302] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 198.139371][ T2302] usb 1-1: Product: syz [ 198.143603][ T2302] usb 1-1: Manufacturer: syz [ 198.151616][ T2302] usb 1-1: SerialNumber: syz [ 198.162694][ T2302] usb 1-1: config 0 descriptor?? [ 198.206404][ T2302] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 198.228635][ T2302] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 198.445019][ T4231] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 198.684996][ T4235] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 198.744936][ T6533] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 198.771453][ T4235] dvbdev: DVB: registering new adapter (Terratec H7) [ 198.779962][ T6567] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 198.787511][ T4735] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 198.802183][ T4735] ath9k_htc: Failed to initialize the device [ 198.809444][ T4231] usb 3-1: not running at top speed; connect to a high speed hub [ 198.850254][ T4235] usb 4-1: media controller created [ 198.863924][ T1108] usb 5-1: ath9k_htc: USB layer deinitialized [ 198.926523][ T4231] usb 3-1: config 1 interface 0 altsetting 49 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 199.146071][ T4235] usb 4-1: dvb_usb_v2: MAC address: de:c4:d5:d6:00:00 [ 199.197857][ T4231] usb 3-1: config 1 interface 0 has no altsetting 0 [ 199.249349][ T4235] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 199.401193][ T2302] usb 1-1: USB disconnect, device number 17 [ 199.435669][ T2302] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 199.468845][ T4235] DVB: Unable to find symbol drxk_attach() [ 199.504218][ T4235] dvb_usb_az6007: probe of 4-1:0.0 failed with error -22 [ 199.519489][ T6577] device syzkaller0 entered promiscuous mode [ 199.520348][ T4231] usb 3-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 199.536978][ T4231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.564320][ T4235] usb 4-1: USB disconnect, device number 19 [ 199.573120][ T4231] usb 3-1: Product: syz [ 199.577982][ T4231] usb 3-1: Manufacturer: syz [ 199.592081][ T4231] usb 3-1: SerialNumber: syz [ 199.661703][ T6579] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 199.692484][ T6579] tipc: Enabling of bearer rejected, already enabled [ 199.980407][ T6590] netlink: 24 bytes leftover after parsing attributes in process `syz.0.754'. [ 200.035388][ T6592] tipc: Enabled bearer , priority 0 [ 200.043290][ T6592] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 200.059139][ T6591] tipc: Disabling bearer [ 200.104882][ T4231] usbhid 3-1:1.0: can't add hid device: -71 [ 200.195550][ T4235] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 200.216024][ T4231] usbhid: probe of 3-1:1.0 failed with error -71 [ 200.226939][ T4231] usb 3-1: USB disconnect, device number 19 [ 200.254250][ T6594] kvm: apic: phys broadcast and lowest prio [ 200.605154][ T4235] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 201.275127][ T4235] usb 4-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 201.313044][ T4235] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 201.357575][ T4235] usb 4-1: config 8 has no interface number 0 [ 201.394281][ T4235] usb 4-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 201.645021][ T4235] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 201.666841][ T4235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.692851][ T4235] usb 4-1: Product: syz [ 201.720970][ T4235] usb 4-1: Manufacturer: syz [ 201.769892][ T4235] usb 4-1: SerialNumber: syz [ 202.081269][ T4235] usb 4-1: USB disconnect, device number 20 [ 205.325608][ T6662] hub 8-0:1.0: USB hub found [ 205.343601][ T6662] hub 8-0:1.0: 1 port detected [ 206.065923][ T6673] fuse: Bad value for 'fd' [ 209.524202][ T6714] fuse: Bad value for 'fd' [ 216.927713][ T6821] hub 8-0:1.0: USB hub found [ 216.950063][ T6821] hub 8-0:1.0: 1 port detected [ 220.377055][ T6869] device syzkaller0 entered promiscuous mode [ 220.679996][ T6877] hub 8-0:1.0: USB hub found [ 220.687337][ T6877] hub 8-0:1.0: 1 port detected [ 220.752339][ T6879] device syzkaller0 entered promiscuous mode [ 221.743888][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 221.743905][ T26] audit: type=1326 audit(1784698413.841:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6897 comm="syz.1.849" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7de153e99 code=0x7ffc0000 [ 222.090104][ T26] audit: type=1326 audit(1784698413.891:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6897 comm="syz.1.849" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7de153e99 code=0x7ffc0000 [ 222.246571][ T26] audit: type=1326 audit(1784698413.891:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6897 comm="syz.1.849" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7de153e99 code=0x7ffc0000 [ 222.273378][ T26] audit: type=1326 audit(1784698413.891:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6897 comm="syz.1.849" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7de153e99 code=0x7ffc0000 [ 222.301067][ T26] audit: type=1326 audit(1784698413.891:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6897 comm="syz.1.849" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd7de153e99 code=0x7ffc0000 [ 222.325676][ T26] audit: type=1326 audit(1784698413.911:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6897 comm="syz.1.849" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7de153e99 code=0x7ffc0000 [ 222.356415][ T26] audit: type=1326 audit(1784698413.911:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6897 comm="syz.1.849" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7de153e99 code=0x7ffc0000 [ 222.381148][ T26] audit: type=1326 audit(1784698413.911:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6897 comm="syz.1.849" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7de153e99 code=0x7ffc0000 [ 222.396740][ T6914] device syzkaller0 entered promiscuous mode [ 222.405739][ T26] audit: type=1326 audit(1784698413.911:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6897 comm="syz.1.849" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7de153e99 code=0x7ffc0000 [ 222.435806][ T26] audit: type=1326 audit(1784698413.911:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6897 comm="syz.1.849" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd7de153e99 code=0x7ffc0000 [ 222.568728][ T6919] device syzkaller0 entered promiscuous mode [ 223.386575][ T6945] hub 8-0:1.0: USB hub found [ 223.408641][ T6945] hub 8-0:1.0: 1 port detected [ 224.284967][ T6955] device syzkaller0 entered promiscuous mode [ 224.341030][ T6960] tipc: Enabling of bearer rejected, already enabled [ 224.672432][ T6963] device syzkaller0 entered promiscuous mode [ 224.829057][ T6969] device syzkaller0 entered promiscuous mode [ 224.838970][ T6969] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 225.872867][ T6987] tipc: Enabling of bearer rejected, already enabled [ 226.153126][ T6989] device syzkaller0 entered promiscuous mode [ 226.569733][ T6997] device syzkaller0 entered promiscuous mode [ 226.804288][ T7001] device syzkaller0 entered promiscuous mode [ 226.838539][ T7001] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 226.926632][ T7002] hub 8-0:1.0: USB hub found [ 226.959820][ T7002] hub 8-0:1.0: 1 port detected [ 228.180280][ T7020] tipc: Enabled bearer , priority 10 [ 228.374201][ T7022] device syzkaller0 entered promiscuous mode [ 229.014870][ T4234] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 229.117916][ T7043] device syzkaller0 entered promiscuous mode [ 229.294843][ T4230] tipc: Node number set to 2032109744 [ 229.329990][ T7046] tipc: Enabling of bearer rejected, already enabled [ 229.417049][ T4234] usb 1-1: config 8 has an invalid interface number: 223 but max is 0 [ 229.433394][ T4234] usb 1-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 229.481716][ T4234] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 229.492534][ T4234] usb 1-1: config 8 has no interface number 0 [ 229.502828][ T4234] usb 1-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 229.577876][ T7048] device syzkaller0 entered promiscuous mode [ 229.715034][ T4234] usb 1-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 229.753283][ T4234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.797800][ T4234] usb 1-1: Product: syz [ 229.802159][ T4234] usb 1-1: Manufacturer: syz [ 229.824792][ T4234] usb 1-1: SerialNumber: syz [ 230.123503][ T4234] usb 1-1: USB disconnect, device number 18 [ 230.629114][ T7074] device syzkaller0 entered promiscuous mode [ 230.769059][ T7077] tipc: Enabling of bearer rejected, already enabled [ 231.091825][ T7083] device syzkaller0 entered promiscuous mode [ 232.241587][ T7110] device syzkaller0 entered promiscuous mode [ 232.283125][ T7112] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 232.324549][ T7112] tipc: Enabling of bearer rejected, already enabled [ 232.537101][ T7116] device syzkaller0 entered promiscuous mode [ 232.885012][ T7129] device syzkaller0 entered promiscuous mode [ 233.560562][ T7145] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 233.643572][ T7149] tipc: Enabling of bearer rejected, already enabled [ 234.067727][ T7156] device syzkaller0 entered promiscuous mode [ 234.346278][ T7165] device syzkaller0 entered promiscuous mode [ 234.957312][ T7176] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 235.016191][ T7176] tipc: Enabling of bearer rejected, already enabled [ 235.448414][ T7188] device syzkaller0 entered promiscuous mode [ 235.475210][ T7191] device syzkaller0 entered promiscuous mode [ 236.024890][ T4234] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 236.109748][ T26] kauditd_printk_skb: 114 callbacks suppressed [ 236.109764][ T26] audit: type=1326 audit(1784698428.211:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7196 comm="syz.4.959" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d674c8e99 code=0x7ffc0000 [ 236.140045][ C0] vkms_vblank_simulate: vblank timer overrun [ 236.274808][ T4234] usb 4-1: Using ep0 maxpacket: 32 [ 236.284290][ T26] audit: type=1326 audit(1784698428.221:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7196 comm="syz.4.959" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d674c8e99 code=0x7ffc0000 [ 236.359373][ T26] audit: type=1326 audit(1784698428.221:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7196 comm="syz.4.959" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d674c8e99 code=0x7ffc0000 [ 236.395025][ T4234] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 236.403260][ T4234] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 236.427170][ T26] audit: type=1326 audit(1784698428.251:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7196 comm="syz.4.959" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7d674c8e99 code=0x7ffc0000 [ 236.489722][ T4234] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 236.534786][ T4234] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 236.539505][ T26] audit: type=1326 audit(1784698428.251:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7196 comm="syz.4.959" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d674c8e99 code=0x7ffc0000 [ 236.560933][ T4234] usb 4-1: config 0 interface 0 has no altsetting 0 [ 236.615290][ T7206] tipc: Enabling of bearer rejected, already enabled [ 236.684418][ T26] audit: type=1326 audit(1784698428.251:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7196 comm="syz.4.959" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d674c8e99 code=0x7ffc0000 [ 236.737024][ T26] audit: type=1326 audit(1784698428.251:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7196 comm="syz.4.959" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d674c8e99 code=0x7ffc0000 [ 236.785644][ T4234] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 236.811395][ T4234] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 236.814861][ T26] audit: type=1326 audit(1784698428.251:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7196 comm="syz.4.959" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d674c8e99 code=0x7ffc0000 [ 236.830206][ T4234] usb 4-1: Product: syz [ 236.859299][ T26] audit: type=1326 audit(1784698428.251:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7196 comm="syz.4.959" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7d674c8e99 code=0x7ffc0000 [ 236.868374][ T4234] usb 4-1: Manufacturer: syz [ 236.892378][ T26] audit: type=1326 audit(1784698428.251:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7196 comm="syz.4.959" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d674c8e99 code=0x7ffc0000 [ 236.912098][ T4234] usb 4-1: SerialNumber: syz [ 236.961323][ T4234] usb 4-1: config 0 descriptor?? [ 237.026451][ T4234] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 237.092539][ T4234] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 237.268008][ T7218] device syzkaller0 entered promiscuous mode [ 237.384288][ T7220] device syzkaller0 entered promiscuous mode [ 237.422028][ T4234] usb 4-1: USB disconnect, device number 21 [ 237.424742][ C1] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 237.434297][ T7194] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 237.441931][ T7226] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 237.492488][ T4234] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 237.771700][ T7235] device syzkaller0 entered promiscuous mode [ 239.107355][ T7258] device syzkaller0 entered promiscuous mode [ 239.335543][ T7262] device syzkaller0 entered promiscuous mode [ 239.550290][ T7265] device syzkaller0 entered promiscuous mode [ 240.424851][ T7] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 240.668352][ T7291] device syzkaller0 entered promiscuous mode [ 240.706137][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 240.846083][ T7] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 240.869167][ T7] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 240.932714][ T7] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 240.981684][ T7] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 240.992738][ T7298] device syzkaller0 entered promiscuous mode [ 241.025161][ T7] usb 3-1: config 0 interface 0 has no altsetting 0 [ 241.143044][ T26] kauditd_printk_skb: 392 callbacks suppressed [ 241.143057][ T26] audit: type=1326 audit(1784698433.241:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7295 comm="syz.1.994" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd7de153e99 code=0x7ffc0000 [ 241.217856][ T7] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 241.235083][ T7] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 241.259909][ T26] audit: type=1326 audit(1784698433.281:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7301 comm="syz.1.994" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fd7de153e99 code=0x7ffc0000 [ 241.322483][ T7303] device syzkaller0 entered promiscuous mode [ 241.323441][ T7] usb 3-1: Product: syz [ 241.347314][ T7] usb 3-1: Manufacturer: syz [ 241.351977][ T7] usb 3-1: SerialNumber: syz [ 241.358108][ T26] audit: type=1326 audit(1784698433.311:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7295 comm="syz.1.994" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd7de153e99 code=0x7ffc0000 [ 241.372200][ T7] usb 3-1: config 0 descriptor?? [ 241.446737][ T7] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 241.474252][ T7] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 241.792659][ T1111] usb 3-1: USB disconnect, device number 20 [ 241.805132][ T7282] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 241.816294][ T7316] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 241.834847][ T1111] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 241.954808][ T7] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 242.365032][ T7] usb 1-1: config 8 has an invalid interface number: 223 but max is 0 [ 242.390403][ T7] usb 1-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 242.435103][ T7] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 242.456320][ T7] usb 1-1: config 8 has no interface number 0 [ 242.463104][ T7] usb 1-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 242.725104][ T7] usb 1-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 242.752536][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.772836][ T7] usb 1-1: Product: syz [ 242.778808][ T7] usb 1-1: Manufacturer: syz [ 242.783791][ T7] usb 1-1: SerialNumber: syz [ 243.070512][ T7] usb 1-1: USB disconnect, device number 19 [ 243.301576][ T26] audit: type=1326 audit(1784698435.401:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz.1.1007" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7de153e99 code=0x7ffc0000 [ 243.325804][ C0] vkms_vblank_simulate: vblank timer overrun [ 243.441350][ T26] audit: type=1326 audit(1784698435.401:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz.1.1007" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7de153e99 code=0x7ffc0000 [ 243.516953][ T26] audit: type=1326 audit(1784698435.431:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz.1.1007" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7de153e99 code=0x7ffc0000 [ 243.541051][ C0] vkms_vblank_simulate: vblank timer overrun [ 243.679238][ T26] audit: type=1326 audit(1784698435.431:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz.1.1007" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7de153e99 code=0x7ffc0000 [ 243.703599][ C0] vkms_vblank_simulate: vblank timer overrun [ 243.721520][ T26] audit: type=1326 audit(1784698435.431:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz.1.1007" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd7de153e99 code=0x7ffc0000 [ 243.785234][ T7338] device syzkaller0 entered promiscuous mode [ 243.807237][ T26] audit: type=1326 audit(1784698435.441:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz.1.1007" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7de153e99 code=0x7ffc0000 [ 243.851211][ T26] audit: type=1326 audit(1784698435.441:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz.1.1007" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7de153e99 code=0x7ffc0000 [ 243.875468][ C0] vkms_vblank_simulate: vblank timer overrun [ 244.070465][ T7346] device syzkaller0 entered promiscuous mode [ 244.764934][ T7] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 245.025078][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 245.060566][ T7371] binder: 7370:7371 ioctl 4018620d 0 returned -22 [ 245.145104][ T7] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 245.162688][ T7] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 245.197462][ T7] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 245.209284][ T7] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 245.223813][ T7] usb 4-1: config 0 interface 0 has no altsetting 0 [ 245.395086][ T7] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 245.419507][ T7] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 245.453063][ T7380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1021'. [ 245.476174][ T7] usb 4-1: Product: syz [ 245.490714][ T7] usb 4-1: Manufacturer: syz [ 245.525927][ T7] usb 4-1: SerialNumber: syz [ 245.566930][ T7] usb 4-1: config 0 descriptor?? [ 245.636414][ T7] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 245.661374][ T7] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 245.855988][ T7384] device syzkaller0 entered promiscuous mode [ 245.964805][ T4230] usb 4-1: USB disconnect, device number 22 [ 245.984836][ T7364] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 246.003729][ T7388] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 246.011757][ T4230] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 247.446090][ T26] kauditd_printk_skb: 315 callbacks suppressed [ 247.446107][ T26] audit: type=1326 audit(1784698439.551:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.1.1033" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7de153e99 code=0x7ffc0000 [ 247.542673][ T7430] binder: 7429:7430 ioctl 4018620d 0 returned -22 [ 247.719682][ T26] audit: type=1326 audit(1784698439.581:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.1.1033" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7de153e99 code=0x7ffc0000 [ 247.839873][ T26] audit: type=1326 audit(1784698439.581:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.1.1033" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7de153e99 code=0x7ffc0000 [ 247.875201][ T26] audit: type=1326 audit(1784698439.581:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.1.1033" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd7de153e99 code=0x7ffc0000 [ 247.904967][ T26] audit: type=1326 audit(1784698439.581:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.1.1033" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7de153e99 code=0x7ffc0000 [ 247.934300][ T26] audit: type=1326 audit(1784698439.581:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.1.1033" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7de153e99 code=0x7ffc0000 [ 247.977267][ T26] audit: type=1326 audit(1784698439.581:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.1.1033" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7de153e99 code=0x7ffc0000 [ 248.007908][ T26] audit: type=1326 audit(1784698439.581:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.1.1033" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7de153e99 code=0x7ffc0000 [ 248.032950][ T26] audit: type=1326 audit(1784698439.581:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.1.1033" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd7de153e99 code=0x7ffc0000 [ 248.057284][ C0] vkms_vblank_simulate: vblank timer overrun [ 248.129823][ T26] audit: type=1326 audit(1784698439.581:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.1.1033" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7de153e99 code=0x7ffc0000 [ 248.154085][ C0] vkms_vblank_simulate: vblank timer overrun [ 248.418040][ T7436] device syzkaller0 entered promiscuous mode [ 248.689136][ T7449] device syzkaller0 entered promiscuous mode [ 248.699073][ T7449] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 248.894914][ T1111] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 248.906463][ T7458] device syzkaller0 entered promiscuous mode [ 248.952290][ T7458] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 249.134930][ T1111] usb 3-1: Using ep0 maxpacket: 32 [ 249.254892][ T1111] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 249.278143][ T1111] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 249.353081][ T1111] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 249.396137][ T1111] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 249.508074][ T1111] usb 3-1: config 0 interface 0 has no altsetting 0 [ 249.705112][ T1111] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 249.741227][ T1111] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 249.767070][ T1111] usb 3-1: Product: syz [ 249.771560][ T1111] usb 3-1: Manufacturer: syz [ 249.780320][ T1111] usb 3-1: SerialNumber: syz [ 249.821246][ T1111] usb 3-1: config 0 descriptor?? [ 249.945807][ T1111] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 249.996427][ T1111] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 250.272396][ T7] usb 3-1: USB disconnect, device number 21 [ 250.284800][ C0] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 250.291628][ T7446] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 250.298908][ T7468] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 250.328975][ T7] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 250.531541][ T7474] binder: BINDER_SET_CONTEXT_MGR already set [ 250.541298][ T7474] binder: 7473:7474 ioctl 4018620d 200000004a80 returned -16 [ 252.786730][ T7497] device syzkaller0 entered promiscuous mode [ 252.824124][ T7497] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 254.699686][ T7518] binder: BINDER_SET_CONTEXT_MGR already set [ 254.723905][ T7518] binder: 7517:7518 ioctl 4018620d 200000004a80 returned -16 [ 255.604858][ T4735] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 255.827835][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.834292][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.907115][ T7535] device syzkaller0 entered promiscuous mode [ 255.926866][ T7535] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 256.018634][ T4735] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 256.055608][ T4735] usb 4-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 256.105038][ T4735] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 256.143940][ T4735] usb 4-1: config 8 has no interface number 0 [ 256.158073][ T4735] usb 4-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 256.405186][ T4735] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 256.434020][ T4735] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.454965][ T4231] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 256.499354][ T4735] usb 4-1: Product: syz [ 256.519549][ T4735] usb 4-1: Manufacturer: syz [ 256.553089][ T4735] usb 4-1: SerialNumber: syz [ 256.744895][ T4231] usb 5-1: Using ep0 maxpacket: 16 [ 256.894920][ T4231] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.918323][ T4231] usb 5-1: config 0 has no interfaces? [ 257.145150][ T4231] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 257.164251][ T4231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.197763][ T4231] usb 5-1: Product: syz [ 257.216186][ T4231] usb 5-1: Manufacturer: syz [ 257.233178][ T4231] usb 5-1: SerialNumber: syz [ 257.300132][ T4231] usb 5-1: config 0 descriptor?? [ 257.616133][ T2302] usb 5-1: USB disconnect, device number 22 [ 257.827919][ T4231] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 258.074750][ T4231] usb 3-1: Using ep0 maxpacket: 32 [ 258.194965][ T4231] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 258.211152][ T4231] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 258.247899][ T4231] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 258.259392][ T4231] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 258.284078][ T7557] binder: BINDER_SET_CONTEXT_MGR already set [ 258.291402][ T4231] usb 3-1: config 0 interface 0 has no altsetting 0 [ 258.305378][ T7557] binder: 7556:7557 ioctl 4018620d 200000004a80 returned -16 [ 258.355451][ T4735] usb 4-1: USB disconnect, device number 23 [ 258.485045][ T4231] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 258.507735][ T4231] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 258.544815][ T4231] usb 3-1: Product: syz [ 258.562039][ T4231] usb 3-1: Manufacturer: syz [ 258.584131][ T4231] usb 3-1: SerialNumber: syz [ 258.644140][ T4231] usb 3-1: config 0 descriptor?? [ 258.683413][ T7568] device syzkaller0 entered promiscuous mode [ 258.700072][ T7568] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 258.706260][ T4231] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 258.758749][ T4231] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 259.023764][ T4234] usb 3-1: USB disconnect, device number 22 [ 259.034723][ C1] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 259.040969][ T7548] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 259.049157][ T7571] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 259.070420][ T4234] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 259.534900][ T4231] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 259.814949][ T4231] usb 5-1: Using ep0 maxpacket: 32 [ 259.945138][ T4231] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 259.969712][ T4231] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 260.031726][ T4231] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 260.265073][ T4231] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 260.284722][ T4231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.316783][ T4231] usb 5-1: Product: syz [ 260.323327][ T4231] usb 5-1: Manufacturer: syz [ 260.340090][ T4231] usb 5-1: SerialNumber: syz [ 260.401044][ T4231] usb 5-1: config 0 descriptor?? [ 261.014732][ T1111] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 261.384928][ T1111] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 261.397605][ T1111] usb 4-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 261.417589][ T1111] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 261.438281][ T1111] usb 4-1: config 8 has no interface number 0 [ 261.444447][ T1111] usb 4-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 262.505038][ T1111] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 262.519896][ T1111] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.557212][ T1111] usb 4-1: Product: syz [ 262.597540][ T1111] usb 4-1: Manufacturer: syz [ 262.609660][ T1111] usb 4-1: SerialNumber: syz [ 262.632127][ T4234] usb 5-1: USB disconnect, device number 23 [ 262.670510][ T7601] device syzkaller0 entered promiscuous mode [ 262.697802][ T7601] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 262.804785][ T7603] device syzkaller0 entered promiscuous mode [ 264.048460][ T1111] usb 4-1: USB disconnect, device number 24 [ 266.009258][ T7640] tipc: Enabling of bearer rejected, failed to enable media [ 266.050025][ T7640] device syzkaller0 entered promiscuous mode [ 266.079653][ T7640] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 266.283275][ T7642] device syzkaller0 entered promiscuous mode [ 268.475512][ T7670] tipc: Enabling of bearer rejected, failed to enable media [ 268.525503][ T7670] device syzkaller0 entered promiscuous mode [ 268.549685][ T7670] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 268.649320][ T7674] device syzkaller0 entered promiscuous mode [ 269.524819][ T4234] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 269.655062][ T1111] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 269.894780][ T1111] usb 3-1: Using ep0 maxpacket: 32 [ 269.923106][ T7702] device syzkaller0 entered promiscuous mode [ 269.935517][ T4234] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 269.945780][ T4234] usb 4-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 269.954754][ T4234] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 269.965530][ T4234] usb 4-1: config 8 has no interface number 0 [ 269.971750][ T4234] usb 4-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 270.027194][ T1111] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 270.053417][ T1111] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 270.100484][ T1111] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 270.119178][ T1111] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 270.160929][ T1111] usb 3-1: config 0 interface 0 has no altsetting 0 [ 270.175049][ T4234] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 270.190275][ T4234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.202808][ T4234] usb 4-1: Product: syz [ 270.211471][ T4234] usb 4-1: Manufacturer: syz [ 270.219392][ T4234] usb 4-1: SerialNumber: syz [ 270.375199][ T1111] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 270.384293][ T1111] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 270.404093][ T1111] usb 3-1: Product: syz [ 270.409027][ T1111] usb 3-1: Manufacturer: syz [ 270.413725][ T1111] usb 3-1: SerialNumber: syz [ 270.428282][ T1111] usb 3-1: config 0 descriptor?? [ 270.486427][ T1111] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 270.509983][ T1111] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 271.066007][ T7723] tipc: Enabling of bearer rejected, failed to enable media [ 271.075604][ T7723] device syzkaller0 entered promiscuous mode [ 271.094099][ T7723] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 271.224410][ T4234] usb 4-1: USB disconnect, device number 25 [ 271.313679][ T7727] device syzkaller0 entered promiscuous mode [ 271.331004][ T7726] device syzkaller0 entered promiscuous mode [ 272.024007][ T7737] device syzkaller0 entered promiscuous mode [ 272.795061][ T4234] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 273.064892][ T4234] usb 2-1: Using ep0 maxpacket: 32 [ 273.195201][ T4234] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 273.227511][ T4234] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 273.262686][ T4234] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 273.495816][ T4234] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 273.547798][ T4234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.576107][ T4234] usb 2-1: Product: syz [ 273.593377][ T4234] usb 2-1: Manufacturer: syz [ 273.608315][ T7758] device syzkaller0 entered promiscuous mode [ 273.615440][ T4234] usb 2-1: SerialNumber: syz [ 273.642652][ T4234] usb 2-1: config 0 descriptor?? [ 274.054725][ T4234] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 274.154767][ T4231] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 274.334921][ T4234] usb 5-1: Using ep0 maxpacket: 32 [ 274.474980][ T4234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.486023][ T4234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.495967][ T4234] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 274.505095][ T4234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.515200][ T4234] usb 5-1: config 0 descriptor?? [ 274.517075][ T4231] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 274.528628][ T4231] usb 4-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 274.537381][ T4231] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 274.547916][ T4231] usb 4-1: config 8 has no interface number 0 [ 274.554011][ T4231] usb 4-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 274.729473][ T4231] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 274.745824][ T4231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.754094][ T4231] usb 4-1: Product: syz [ 274.764396][ T4231] usb 4-1: Manufacturer: syz [ 274.770573][ T4231] usb 4-1: SerialNumber: syz [ 274.872800][ T7773] device syzkaller0 entered promiscuous mode [ 275.003896][ T4234] ft260 0003:0403:6030.000A: unknown main item tag 0x0 [ 275.011106][ T4234] ft260 0003:0403:6030.000A: unknown main item tag 0x0 [ 275.037005][ T4234] ft260 0003:0403:6030.000A: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 275.074471][ T4231] usb 4-1: USB disconnect, device number 26 [ 275.204957][ T4234] ft260 0003:0403:6030.000A: failed to retrieve chip version [ 275.217929][ T4234] ft260: probe of 0003:0403:6030.000A failed with error -5 [ 275.499690][ T4234] usb 2-1: USB disconnect, device number 15 [ 275.618797][ T7761] udc-core: couldn't find an available UDC or it's busy [ 275.629438][ T7761] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 275.765016][ T7694] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 275.839215][ T4735] usb 3-1: USB disconnect, device number 23 [ 275.881025][ T4735] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 276.284749][ T4259] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 276.544948][ T4259] usb 4-1: Using ep0 maxpacket: 16 [ 276.835035][ T4259] usb 4-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 276.868665][ T4259] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.903461][ T4259] usb 4-1: Product: syz [ 276.932046][ T4259] usb 4-1: Manufacturer: syz [ 276.958840][ T4259] usb 4-1: SerialNumber: syz [ 277.002406][ T4259] usb 4-1: config 0 descriptor?? [ 277.042140][ T2302] usb 5-1: USB disconnect, device number 24 [ 277.058999][ T4259] gspca_main: spca508-2.14.0 probing 041e:4018 [ 277.089186][ T7799] device syzkaller0 entered promiscuous mode [ 277.275115][ T4259] gspca_spca508: reg_read err -32 [ 277.314843][ T4259] gspca_spca508: reg_read err -32 [ 277.369561][ T4259] gspca_spca508: reg_read err -32 [ 277.414900][ T4259] gspca_spca508: reg_read err -32 [ 277.455075][ T4259] gspca_spca508: reg_read err -32 [ 278.014829][ T4259] gspca_spca508: reg write: error -110 [ 278.020631][ T4259] spca508: probe of 4-1:0.0 failed with error -110 [ 278.322035][ T4259] usb 4-1: USB disconnect, device number 27 [ 278.714785][ T7] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 278.907645][ T7827] device syzkaller0 entered promiscuous mode [ 278.968533][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 279.095019][ T7] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 279.109791][ T7] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 279.121546][ T7] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 279.139457][ T7] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 279.160545][ T7] usb 2-1: config 0 interface 0 has no altsetting 0 [ 279.314868][ T4234] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 279.324940][ T7] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 279.340249][ T7] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 279.350011][ T7] usb 2-1: Product: syz [ 279.354209][ T7] usb 2-1: Manufacturer: syz [ 279.366481][ T7] usb 2-1: SerialNumber: syz [ 279.417504][ T7834] device syzkaller0 entered promiscuous mode [ 279.426667][ T7] usb 2-1: config 0 descriptor?? [ 279.498311][ T7] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 279.528931][ T7] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 279.565095][ T4234] usb 4-1: Using ep0 maxpacket: 32 [ 279.684927][ T4234] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.735268][ T4234] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.801339][ T4234] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 279.861644][ T4234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.921852][ T4234] usb 4-1: config 0 descriptor?? [ 280.417673][ T4234] ft260 0003:0403:6030.000B: unknown main item tag 0x0 [ 280.441921][ T4234] ft260 0003:0403:6030.000B: unknown main item tag 0x0 [ 280.476990][ T4234] ft260 0003:0403:6030.000B: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 280.624953][ T4234] ft260 0003:0403:6030.000B: failed to retrieve chip version [ 280.653091][ T4234] ft260: probe of 0003:0403:6030.000B failed with error -5 [ 281.034782][ T4259] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 281.043007][ T7830] udc-core: couldn't find an available UDC or it's busy [ 281.052835][ T7830] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 281.294768][ T4259] usb 1-1: Using ep0 maxpacket: 16 [ 281.575043][ T4259] usb 1-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 281.601059][ T4259] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.631213][ T4259] usb 1-1: Product: syz [ 281.644757][ T4259] usb 1-1: Manufacturer: syz [ 281.649405][ T4259] usb 1-1: SerialNumber: syz [ 281.671734][ T4259] usb 1-1: config 0 descriptor?? [ 281.719992][ T4259] gspca_main: spca508-2.14.0 probing 041e:4018 [ 281.934937][ T4259] gspca_spca508: reg_read err -32 [ 281.974864][ T4259] gspca_spca508: reg_read err -32 [ 282.014904][ T4259] gspca_spca508: reg_read err -32 [ 282.054856][ T4259] gspca_spca508: reg_read err -32 [ 282.094870][ T4259] gspca_spca508: reg_read err -32 [ 282.309889][ T4234] usb 4-1: USB disconnect, device number 28 [ 282.486511][ T7879] tipc: Enabling of bearer rejected, failed to enable media [ 282.497611][ T7879] device syzkaller0 entered promiscuous mode [ 282.507880][ T7879] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 282.654945][ T4259] gspca_spca508: reg write: error -110 [ 282.660507][ T4259] spca508: probe of 1-1:0.0 failed with error -110 [ 282.794815][ T4234] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 282.954017][ T4259] usb 1-1: USB disconnect, device number 20 [ 283.115001][ T4234] usb 4-1: not running at top speed; connect to a high speed hub [ 283.204943][ T4234] usb 4-1: config 1 interface 0 altsetting 49 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 283.255399][ T4234] usb 4-1: config 1 interface 0 has no altsetting 0 [ 283.415106][ T4234] usb 4-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 283.430705][ T4234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.461437][ T4234] usb 4-1: Product: syz [ 283.489787][ T4234] usb 4-1: Manufacturer: syz [ 283.494443][ T4234] usb 4-1: SerialNumber: syz [ 283.987397][ T4234] usbhid 4-1:1.0: can't add hid device: -71 [ 283.993456][ T4234] usbhid: probe of 4-1:1.0 failed with error -71 [ 284.045646][ T4234] usb 4-1: USB disconnect, device number 29 [ 284.074427][ T7899] input: syz0 as /devices/virtual/input/input14 [ 284.724839][ T7823] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 284.744795][ T4234] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 284.786128][ T7] usb 2-1: USB disconnect, device number 16 [ 284.806293][ T7] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 284.854885][ T26] kauditd_printk_skb: 98 callbacks suppressed [ 284.854937][ T26] audit: type=1326 audit(1784698476.951:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7913 comm="syz.1.1193" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7de153e99 code=0x7ffc0000 [ 284.942860][ T26] audit: type=1326 audit(1784698476.991:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7913 comm="syz.1.1193" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7de153e99 code=0x7ffc0000 [ 285.004766][ T4234] usb 4-1: Using ep0 maxpacket: 32 [ 285.041025][ T26] audit: type=1326 audit(1784698476.991:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7913 comm="syz.1.1193" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7de153e99 code=0x7ffc0000 [ 285.097229][ T26] audit: type=1326 audit(1784698476.991:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7913 comm="syz.1.1193" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd7de153e99 code=0x7ffc0000 [ 285.121471][ C1] vkms_vblank_simulate: vblank timer overrun [ 285.124899][ T4234] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.147407][ T4234] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.150750][ T26] audit: type=1326 audit(1784698476.991:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7913 comm="syz.1.1193" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7de153e99 code=0x7ffc0000 [ 285.167576][ T4234] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 285.188120][ T26] audit: type=1326 audit(1784698476.991:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7913 comm="syz.1.1193" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7de153e99 code=0x7ffc0000 [ 285.221409][ T4234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.243320][ T4234] usb 4-1: config 0 descriptor?? [ 285.269618][ T26] audit: type=1326 audit(1784698476.991:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7913 comm="syz.1.1193" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7de153e99 code=0x7ffc0000 [ 285.303158][ T26] audit: type=1326 audit(1784698476.991:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7913 comm="syz.1.1193" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd7de153e99 code=0x7ffc0000 [ 285.337387][ T26] audit: type=1326 audit(1784698476.991:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7913 comm="syz.1.1193" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7de153e99 code=0x7ffc0000 [ 285.369976][ T26] audit: type=1326 audit(1784698476.991:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7913 comm="syz.1.1193" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7de153e99 code=0x7ffc0000 [ 285.735177][ T4234] ft260 0003:0403:6030.000C: unknown main item tag 0x0 [ 285.742112][ T4234] ft260 0003:0403:6030.000C: unknown main item tag 0x0 [ 285.760830][ T4735] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 285.797837][ T4234] ft260 0003:0403:6030.000C: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 285.954838][ T4234] ft260 0003:0403:6030.000C: failed to retrieve chip version [ 285.967829][ T4234] ft260: probe of 0003:0403:6030.000C failed with error -5 [ 286.014921][ T4735] usb 5-1: Using ep0 maxpacket: 16 [ 286.325042][ T4735] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 286.341472][ T4735] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.365420][ T4735] usb 5-1: Product: syz [ 286.379584][ T4735] usb 5-1: Manufacturer: syz [ 286.385188][ T7906] udc-core: couldn't find an available UDC or it's busy [ 286.396418][ T7906] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 286.401648][ T4735] usb 5-1: SerialNumber: syz [ 286.433513][ T4735] r8152-cfgselector 5-1: config 0 descriptor?? [ 286.804818][ T4234] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 286.945148][ T4735] r8152-cfgselector 5-1: Unknown version 0x0000 [ 286.953836][ T4735] r8152-cfgselector 5-1: USB disconnect, device number 25 [ 287.135026][ T4234] usb 2-1: not running at top speed; connect to a high speed hub [ 287.174786][ T4259] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 287.225181][ T4234] usb 2-1: config 1 interface 0 altsetting 49 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 287.244533][ T4234] usb 2-1: config 1 interface 0 has no altsetting 0 [ 287.404939][ T4234] usb 2-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 287.420849][ T4259] usb 1-1: Using ep0 maxpacket: 32 [ 287.445120][ T4234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.501234][ T4234] usb 2-1: Product: syz [ 287.533574][ T4234] usb 2-1: Manufacturer: syz [ 287.543691][ T4234] usb 2-1: SerialNumber: syz [ 287.567329][ T4259] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 287.578823][ T4259] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 287.619611][ T4259] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 287.633602][ T4259] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 287.647622][ T4259] usb 1-1: config 0 interface 0 has no altsetting 0 [ 287.699633][ T13] usb 4-1: USB disconnect, device number 30 [ 287.719684][ T7957] device syzkaller0 entered promiscuous mode [ 287.815142][ T4259] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 287.836804][ T4259] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 287.853767][ T4259] usb 1-1: Product: syz [ 287.860160][ T4259] usb 1-1: Manufacturer: syz [ 287.872420][ T4259] usb 1-1: SerialNumber: syz [ 287.882379][ T4259] usb 1-1: config 0 descriptor?? [ 287.936598][ T4259] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 287.955682][ T4259] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 288.014962][ T4234] usbhid 2-1:1.0: can't add hid device: -71 [ 288.021325][ T4234] usbhid: probe of 2-1:1.0 failed with error -71 [ 288.057342][ T4234] usb 2-1: USB disconnect, device number 17 [ 288.550061][ T7971] binder: 7970:7971 ioctl 4018620d 0 returned -22 [ 290.524752][ T4259] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 290.894951][ T4259] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 290.913480][ T4259] usb 4-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 290.953981][ T4259] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 290.994701][ T4259] usb 4-1: config 8 has no interface number 0 [ 291.004999][ T4259] usb 4-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 291.070978][ T7994] device syzkaller0 entered promiscuous mode [ 291.214939][ T4735] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 291.214939][ T4259] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 291.214971][ T4259] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.284051][ T4259] usb 4-1: Product: syz [ 291.303186][ T4259] usb 4-1: Manufacturer: syz [ 291.321926][ T4259] usb 4-1: SerialNumber: syz [ 291.477791][ T4735] usb 5-1: Using ep0 maxpacket: 32 [ 291.616680][ T4735] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.638855][ T4735] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.676211][ T4735] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 291.719773][ T4735] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.760663][ T4735] usb 5-1: config 0 descriptor?? [ 292.066583][ T4259] usb 4-1: USB disconnect, device number 31 [ 292.134525][ T8007] binder: 8006:8007 ioctl 4018620d 0 returned -22 [ 292.257809][ T4735] ft260 0003:0403:6030.000D: unknown main item tag 0x0 [ 292.264894][ T4735] ft260 0003:0403:6030.000D: unknown main item tag 0x0 [ 292.275205][ T4735] ft260 0003:0403:6030.000D: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 292.475379][ T4735] ft260 0003:0403:6030.000D: failed to retrieve chip version [ 292.486086][ T4735] ft260: probe of 0003:0403:6030.000D failed with error -5 [ 293.515635][ T7947] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 293.632286][ T4259] usb 1-1: USB disconnect, device number 21 [ 293.678260][ T4259] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 293.712662][ T7991] udc-core: couldn't find an available UDC or it's busy [ 293.724749][ T7991] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 293.777825][ T26] kauditd_printk_skb: 99 callbacks suppressed [ 293.777842][ T26] audit: type=1326 audit(1784698485.881:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8027 comm="syz.3.1227" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e95026e99 code=0x7ffc0000 [ 293.814416][ T26] audit: type=1326 audit(1784698485.911:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8027 comm="syz.3.1227" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e95026e99 code=0x7ffc0000 [ 293.845023][ T4735] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 293.984943][ T26] audit: type=1326 audit(1784698485.911:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8027 comm="syz.3.1227" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e95026e99 code=0x7ffc0000 [ 294.028952][ T8036] device syzkaller0 entered promiscuous mode [ 294.059149][ T26] audit: type=1326 audit(1784698485.911:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8027 comm="syz.3.1227" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e95026e99 code=0x7ffc0000 [ 294.091614][ T26] audit: type=1326 audit(1784698485.911:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8027 comm="syz.3.1227" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6e95026e99 code=0x7ffc0000 [ 294.096230][ T4735] usb 2-1: device descriptor read/64, error -71 [ 294.136173][ T26] audit: type=1326 audit(1784698485.911:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8027 comm="syz.3.1227" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e95026e99 code=0x7ffc0000 [ 294.168816][ T26] audit: type=1326 audit(1784698485.911:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8027 comm="syz.3.1227" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e95026e99 code=0x7ffc0000 [ 294.270698][ T26] audit: type=1326 audit(1784698485.911:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8027 comm="syz.3.1227" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e95026e99 code=0x7ffc0000 [ 294.340735][ T26] audit: type=1326 audit(1784698485.961:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8027 comm="syz.3.1227" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6e95026e99 code=0x7ffc0000 [ 294.369134][ T26] audit: type=1326 audit(1784698485.961:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8027 comm="syz.3.1227" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e95026e99 code=0x7ffc0000 [ 294.595163][ T4735] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 294.804824][ T4735] usb 2-1: device descriptor read/64, error -71 [ 294.855177][ T2302] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 294.899247][ T13] usb 5-1: USB disconnect, device number 26 [ 294.925508][ T4735] usb usb2-port1: attempt power cycle [ 294.936056][ T8057] binder: 8056:8057 ioctl 4018620d 0 returned -22 [ 295.955263][ T4735] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 296.036111][ T2302] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 296.059391][ T2302] usb 4-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 296.070394][ T2302] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 296.076401][ T8071] device syzkaller0 entered promiscuous mode [ 296.083246][ T2302] usb 4-1: config 8 has no interface number 0 [ 296.092945][ T2302] usb 4-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 296.106991][ T4735] usb 2-1: device descriptor read/8, error -71 [ 296.192817][ T8073] syz.4.1241[8073] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 296.192943][ T8073] syz.4.1241[8073] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 296.305008][ T2302] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 296.334518][ T2302] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.343383][ T2302] usb 4-1: Product: syz [ 296.351896][ T2302] usb 4-1: Manufacturer: syz [ 296.378974][ T2302] usb 4-1: SerialNumber: syz [ 296.394900][ T4735] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 296.402568][ T4235] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 296.525145][ T4735] usb 2-1: device descriptor read/8, error -71 [ 296.648617][ T4735] usb usb2-port1: unable to enumerate USB device [ 296.674756][ T4235] usb 3-1: Using ep0 maxpacket: 32 [ 296.754419][ T8086] [ 296.771607][ T8086] ============================= [ 296.803982][ T8086] WARNING: suspicious RCU usage [ 296.811411][ T8086] syzkaller #0 Not tainted [ 296.816599][ T4235] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 296.829235][ T4235] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 296.865665][ T8086] ----------------------------- [ 296.890173][ T8086] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 296.916506][ T4235] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 296.931296][ T8086] [ 296.931296][ T8086] other info that might help us debug this: [ 296.931296][ T8086] [ 296.967783][ T4235] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 296.982009][ T8086] [ 296.982009][ T8086] rcu_scheduler_active = 2, debug_locks = 1 [ 296.991493][ T8086] 1 lock held by syz.0.1245/8086: [ 296.997570][ T4235] usb 3-1: config 0 interface 0 has no altsetting 0 [ 297.004549][ T8086] #0: ffffffff8c31f0a0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_lock_acquire+0x9/0x30 [ 297.021860][ T8086] [ 297.021860][ T8086] stack backtrace: [ 297.050927][ T8086] CPU: 1 PID: 8086 Comm: syz.0.1245 Not tainted syzkaller #0 [ 297.058366][ T8086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 297.070294][ T8086] Call Trace: [ 297.073604][ T8086] [ 297.076560][ T8086] dump_stack_lvl+0x188/0x250 [ 297.081287][ T8086] ? load_image+0x410/0x410 [ 297.085864][ T8086] ? show_regs_print_info+0x20/0x20 [ 297.091109][ T8086] ? print_tainted+0x148/0x170 [ 297.095915][ T8086] ? lockdep_rcu_suspicious+0x110/0x180 [ 297.101491][ T8086] get_callchain_entry+0x2a5/0x3b0 [ 297.106629][ T8086] get_perf_callchain+0xab/0x460 [ 297.111592][ T8086] ? put_callchain_entry+0xb0/0xb0 [ 297.116724][ T8086] ? mark_lock+0x94/0x320 [ 297.121064][ T8086] __bpf_get_stack+0x2db/0x530 [ 297.125842][ T8086] ? stack_map_get_build_id_offset+0x860/0x860 [ 297.132015][ T8086] ? __cant_sleep+0x220/0x220 [ 297.136697][ T8086] ? bpf_prog_14d9fb3786f83342+0x3d/0x98 [ 297.142334][ T8086] bpf_get_stack_raw_tp+0x189/0x1c0 [ 297.147539][ T8086] bpf_prog_14d9fb3786f83342+0x3d/0x98 [ 297.153005][ T8086] bpf_prog_run_pin_on_cpu+0x63/0x140 [ 297.158380][ T8086] bpf_prog_test_run_syscall+0x361/0x500 [ 297.164029][ T8086] ? sock_gen_cookie+0x60/0x60 [ 297.168804][ T8086] ? sock_gen_cookie+0x60/0x60 [ 297.173570][ T8086] bpf_prog_test_run+0x31c/0x390 [ 297.178519][ T8086] __sys_bpf+0x5a5/0x6f0 [ 297.182768][ T8086] ? bpf_link_show_fdinfo+0x380/0x380 [ 297.188161][ T8086] __x64_sys_bpf+0x78/0x90 [ 297.192697][ T8086] do_syscall_64+0x4c/0xa0 [ 297.197134][ T8086] ? clear_bhb_loop+0x30/0x80 [ 297.201826][ T8086] ? clear_bhb_loop+0x30/0x80 [ 297.206517][ T8086] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 297.212425][ T8086] RIP: 0033:0x7ff650734e99 [ 297.216847][ T8086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.236460][ T8086] RSP: 002b:00007ff64e98d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 297.244879][ T8086] RAX: ffffffffffffffda RBX: 00007ff6509bcfa0 RCX: 00007ff650734e99 [ 297.252862][ T8086] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 297.260838][ T8086] RBP: 00007ff6507caeaf R08: 0000000000000000 R09: 0000000000000000 [ 297.268809][ T8086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.276784][ T8086] R13: 00007ff6509bd038 R14: 00007ff6509bcfa0 R15: 00007fff6ce504c8 [ 297.284770][ T8086] [ 297.417793][ T4235] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 297.437179][ T2302] usb 4-1: USB disconnect, device number 32 [ 297.467385][ T4235] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 297.484543][ T4235] usb 3-1: Product: syz [ 297.489776][ T4235] usb 3-1: Manufacturer: syz [ 297.494484][ T4235] usb 3-1: SerialNumber: syz [ 297.505138][ T8086] [ 297.508542][ T4235] usb 3-1: config 0 descriptor?? [ 297.514361][ T8086] ============================= [ 297.522379][ T8086] WARNING: suspicious RCU usage [ 297.528522][ T8086] syzkaller #0 Not tainted [ 297.533102][ T8086] ----------------------------- [ 297.538404][ T8086] include/linux/perf_event.h:1274 suspicious rcu_dereference_check() usage! [ 297.549850][ T4235] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 297.562100][ T8086] [ 297.562100][ T8086] other info that might help us debug this: [ 297.562100][ T8086] [ 297.574999][ T8086] [ 297.574999][ T8086] rcu_scheduler_active = 2, debug_locks = 1 [ 297.583384][ T4235] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 297.608576][ T8086] 1 lock held by syz.0.1245/8086: [ 297.622832][ T8086] #0: ffffffff8c31f0a0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_lock_acquire+0x9/0x30 [ 297.634918][ T8086] [ 297.634918][ T8086] stack backtrace: [ 297.640987][ T8086] CPU: 1 PID: 8086 Comm: syz.0.1245 Not tainted syzkaller #0 [ 297.648388][ T8086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 297.658474][ T8086] Call Trace: [ 297.661759][ T8086] [ 297.664691][ T8086] dump_stack_lvl+0x188/0x250 [ 297.669387][ T8086] ? load_image+0x410/0x410 [ 297.673884][ T8086] ? show_regs_print_info+0x20/0x20 [ 297.679082][ T8086] ? lockdep_rcu_suspicious+0x110/0x180 [ 297.684631][ T8086] perf_callchain_kernel+0x625/0x760 [ 297.689948][ T8086] ? load_image+0x410/0x410 [ 297.694446][ T8086] ? show_regs_print_info+0x20/0x20 [ 297.699635][ T8086] ? print_tainted+0x148/0x170 [ 297.704393][ T8086] ? arch_perf_update_userpage+0x3c0/0x3c0 [ 297.710199][ T8086] ? get_callchain_entry+0x181/0x3b0 [ 297.715488][ T8086] get_perf_callchain+0x356/0x460 [ 297.720531][ T8086] ? put_callchain_entry+0xb0/0xb0 [ 297.725654][ T8086] ? mark_lock+0x94/0x320 [ 297.730036][ T8086] __bpf_get_stack+0x2db/0x530 [ 297.734838][ T8086] ? stack_map_get_build_id_offset+0x860/0x860 [ 297.741123][ T8086] ? __cant_sleep+0x220/0x220 [ 297.745920][ T8086] ? bpf_prog_14d9fb3786f83342+0x3d/0x98 [ 297.751585][ T8086] bpf_get_stack_raw_tp+0x189/0x1c0 [ 297.756828][ T8086] bpf_prog_14d9fb3786f83342+0x3d/0x98 [ 297.762405][ T8086] bpf_prog_run_pin_on_cpu+0x63/0x140 [ 297.767799][ T8086] bpf_prog_test_run_syscall+0x361/0x500 [ 297.773576][ T8086] ? sock_gen_cookie+0x60/0x60 [ 297.778353][ T8086] ? sock_gen_cookie+0x60/0x60 [ 297.783129][ T8086] bpf_prog_test_run+0x31c/0x390 [ 297.788109][ T8086] __sys_bpf+0x5a5/0x6f0 [ 297.792351][ T8086] ? bpf_link_show_fdinfo+0x380/0x380 [ 297.797728][ T8086] __x64_sys_bpf+0x78/0x90 [ 297.802143][ T8086] do_syscall_64+0x4c/0xa0 [ 297.803891][ T13] usb 3-1: USB disconnect, device number 24 [ 297.806565][ T8086] ? clear_bhb_loop+0x30/0x80 [ 297.806606][ T8086] ? clear_bhb_loop+0x30/0x80 [ 297.806628][ T8086] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 297.806646][ T8086] RIP: 0033:0x7ff650734e99 [ 297.806667][ T8086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.806684][ T8086] RSP: 002b:00007ff64e98d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 297.806709][ T8086] RAX: ffffffffffffffda RBX: 00007ff6509bcfa0 RCX: 00007ff650734e99 [ 297.806724][ T8086] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 297.806738][ T8086] RBP: 00007ff6507caeaf R08: 0000000000000000 R09: 0000000000000000 [ 297.806736][ C0] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 297.806753][ T8086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.806766][ T8086] R13: 00007ff6509bd038 R14: 00007ff6509bcfa0 R15: 00007fff6ce504c8 [ 297.806798][ T8086] [ 297.834767][ T8069] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 297.920330][ T13] ldusb 3-1:0.0: LD USB Device #0 now disconnected