last executing test programs: 10.36840267s ago: executing program 2 (id=2494): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000c00)=ANY=[@ANYBLOB="fa0600007d00400005700300004000000020ffffffff060000000000000000003101000000000c00000000000000000000000f01046e6f645a3dbf6460d2c297442c0237fc6225ffffff8005000000000000ff03ff92e91600050000002c93cb3db6c231d119aaa16f75c58fa6889ff3c8f7abc61b59a1d26f0c4af8e293d3f86ccdc66ff57be90000000000000003d5892d8efebb9e05ac0a6bc529607ac68a3813afe79e85636afd6c5d15b2aebbb7ee3b1eae8a7fbe2e85887314cbecf0a1a512347a8c15b320d1e1c010557aaa77165e51603230385e7c270100ac42330044a9083de5bed8e0bd28682294f638c38e25756ab0b07f65dbd624ee955f7da78ee19649373f30e3f7b964f0a266c3ac9e507753a3c403c87bf14a7687259168b45bbd7a1fd8600ea12e00dbfe4c1afeeaaf9d7bb4a75a1c821893f7f47c3c50718cc399017002007dfa673effeb09b5351f5bde0540000000ca595fcb14034354b9fd9ef196a51cd5157adc8106b494e148ea978baba0fe35b365dc8169ea90b2cdef60103709d4e0d63115704cbac260a7e80e04692844dd5a3e6e7b1edcc7eb4b8946a5219db294e1b67c4a0450e3816358b2715dba60c8ccf0b28d69f114ffffcceb3f6246e3ba44797334f55ff77582a6b704e74860d0ca05592d76c8996dd59b8008262e6b38eda77ab9c600b60a9dd4c7e0976beb90bf10b23d706ee96830cd2ef3725b3f43732bc26caade09ed57469bf2709788014c2521b31c3cf5ffcd3518bd3c6d5bada3851d17ebfa92a3a4e926f4b05efc3a777bf3e027dd6a002cc9e73bdd687a4ca84666e2a5201d729d2589ee4fb90bf121b6d14ab130403d912e7c074ba0a571ec96959ec9c1c7f9aa39cad04aca3af90b7ea57e6961c5b0eada7a6b9b6de1624ce93c8b07bd9f37c882ebb03dc3e321dcd81d6fd1cf24120779462f2da974c4265b564bb27c43f45f00d534efa744e23c822c680eaf108208f97119a69abca49b13883852090962a06567a928ea12b871e730e1b66cea992f3c8a825135970e6f3500cf60372d61daeab8c88641eb93b4ccf6002ab87bfc012796093f6830226558d29b0a9055114c71c95c4d2220837e0108e2e748501c6000e4f669fb716bcf315ecaf385409ac65b9408678c2c3b9e1d52c36cde7ba4a400b4b0b4f174a666a8529a451b3407dbdab2884baf050000000000000047ec21cabff20f9c15be36f4fd1a4cdb80e8d407000000370043ef5a53ca1489eb2d273d75036f6465762f6eb17b2300f9daa5ee23266ecf85fea65e42d9"], 0x6fa) 10.320422367s ago: executing program 2 (id=2495): listen(0xffffffffffffffff, 0xfffffffc) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000200)=[{{&(0x7f0000000c00)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10, 0x0}}], 0x1, 0x2000c0d0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x2000000, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x7f}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r3 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, 0x0, 0x400, 0x60, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x4040) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) r5 = fsopen(&(0x7f0000000340)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 7.368877862s ago: executing program 2 (id=2504): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e"], 0x0) close(0x3) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_io_uring_setup(0x1088, &(0x7f00000003c0)={0x0, 0x7605, 0x100, 0x1, 0x1d3}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x133d, 0x0, 0x8, 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0xffffffffffffffc0, 0x2) syz_usb_control_io$printer(r1, &(0x7f0000000140)={0x14, &(0x7f00000001c0)={0x20, 0x5, 0x2, {0x2, 0x21}}, 0x0}, 0x0) dup3(r5, r0, 0x80000) 5.784190196s ago: executing program 4 (id=2514): listen(0xffffffffffffffff, 0xfffffffc) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000200)=[{{&(0x7f0000000c00)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10, 0x0}}], 0x1, 0x2000c0d0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x2000000, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x7f}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r3 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, 0x0, 0x400, 0x60, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x4040) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) r5 = fsopen(&(0x7f0000000340)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 4.228236556s ago: executing program 2 (id=2522): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) unshare(0x28000600) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) recvmmsg(r1, &(0x7f0000007900)=[{{0x0, 0x0, 0x0}}], 0xd, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r2) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x41) syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r2) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 4.140209483s ago: executing program 3 (id=2523): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000010205000000000000000000020000032c0002800f000180080001"], 0x40}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 3.899821975s ago: executing program 3 (id=2525): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x40, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@typed={0x4, 0x11f}, @nested={0x10, 0x9, 0x0, 0x1, [@typed={0xc, 0x133, 0x0, 0x0, @u64=0x1ff}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, 0x0, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r4, 0x0, 0x14, &(0x7f0000000000)=0x6ab7, 0x1) recvmmsg(r4, &(0x7f0000002780)=[{{0x0, 0xfffffffffffffd10, 0x0, 0x0, &(0x7f0000000140)=""/32, 0xd307dfd740337a02}, 0x2}], 0x1, 0x6001, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)={0x130, r3, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x4}]}, 0x130}, 0x1, 0x0, 0x0, 0x40844}, 0xc0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r5, 0x0, 0xd4, &(0x7f0000000100)=0xf, 0x4) 3.551920548s ago: executing program 3 (id=2526): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) socket$kcm(0x2, 0x200000000000001, 0x106) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$inet6(0xa, 0x3, 0xff) syz_io_uring_submit(0x0, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) r7 = dup2(r6, r6) sendmmsg$unix(r7, &(0x7f0000008380), 0x400000000000174, 0x4008890) lseek(0xffffffffffffffff, 0x851, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x20008041) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) socketpair$unix(0x1, 0x3, 0x0, 0x0) unshare(0x64000600) r9 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r9, 0x0, 0x41, &(0x7f00000002c0)=ANY=[@ANYBLOB='security'], 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000080)="66b9800000c00f326635004000000f3067660fc7360f20d86635200000000f22d80f01c2ba2100ed0fc73b0f3566660f3a0a17530fc7280f0051fe"}], 0xf, 0x11, 0x0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000000c0)) sendmmsg$sock(r0, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="74b17a07", 0x4}], 0x1}}, {{&(0x7f0000000340)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8, 0x4}, 0x80, 0x0}}], 0x2, 0xc4) 3.495256409s ago: executing program 0 (id=2527): openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2adc0, 0x1c1}, 0x18) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x7fff}]) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe1085989482b4a4161514100875397bdf22d0000b420a1a93c5640f45f819e01177d3d058dd499a861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 2.968176636s ago: executing program 0 (id=2528): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'macsec0\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x840) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = eventfd(0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000140), 0x10) r3 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0xbb}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b26bd644", 0x38, 0x2400c0c7, 0x1}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r1) 2.967886205s ago: executing program 2 (id=2529): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r3, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000340)=0x200, 0x4) 2.542710706s ago: executing program 4 (id=2530): bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, @void}, 0x10) 2.461015107s ago: executing program 2 (id=2532): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e"], 0x0) close(0x3) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_io_uring_setup(0x1088, &(0x7f00000003c0)={0x0, 0x7605, 0x100, 0x1, 0x1d3}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x133d, 0x0, 0x8, 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0xffffffffffffffc0, 0x2) syz_usb_control_io$printer(r1, &(0x7f0000000140)={0x14, &(0x7f00000001c0)={0x20, 0x5, 0x2, {0x2, 0x21}}, 0x0}, 0x0) dup3(r5, r0, 0x80000) 2.440835398s ago: executing program 1 (id=2533): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000028c0)={0x2020}, 0x2020) 2.267164367s ago: executing program 4 (id=2534): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d8", 0xe) r1 = accept4$alg(r0, 0x0, 0x0, 0x80000) io_setup(0x42, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000000)='e', 0x12, 0x0, 0x0, 0x2}]) 2.216304854s ago: executing program 0 (id=2535): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './control\x00'}, 0x6e) 2.148156903s ago: executing program 4 (id=2536): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x40, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@typed={0x4, 0x11f}, @nested={0x10, 0x9, 0x0, 0x1, [@typed={0xc, 0x133, 0x0, 0x0, @u64=0x1ff}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, 0x0, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r4, 0x0, 0x14, &(0x7f0000000000)=0x6ab7, 0x1) recvmmsg(r4, &(0x7f0000002780)=[{{0x0, 0xfffffffffffffd10, 0x0, 0x0, &(0x7f0000000140)=""/32, 0xd307dfd740337a02}, 0x2}], 0x1, 0x6001, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)={0x130, r3, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x4}]}, 0x130}, 0x1, 0x0, 0x0, 0x40844}, 0xc0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r5, 0x0, 0xd4, &(0x7f0000000100)=0xf, 0x4) 2.137633446s ago: executing program 3 (id=2537): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0xb0, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x13}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)={0x28, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}, @NL80211_ATTR_REG_RULES={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040001}, 0x2400c000) r4 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x2f00) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r4, 0x6f2d, 0x94) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/164, 0xa4}], 0x1, 0x4, 0x5) syz_usb_connect$uac1(0x6, 0xb5, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x6, 0x0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x7}, [@feature_unit={0x13, 0x24, 0x6, 0x6, 0x5, 0x6, [0x6, 0x5, 0x3, 0x3, 0x4, 0x6], 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x1, 0x2, 0x71, 0x8}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x1, 0x4, 0x1, 0x4b}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x1, 0x7, 0x55, "000000b186d2a6"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x0, 0x1, 0x2, 0xc, "9464229af155d5eb95"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0x24, 0x1, {0x7, 0x25, 0x1, 0x0, 0xe8, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x4f, 0x43, 0xe, {0x7, 0x25, 0x1, 0x80, 0x2, 0x7}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2.064921972s ago: executing program 0 (id=2538): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0xfffffffffffff421) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.964635978s ago: executing program 4 (id=2539): openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2adc0, 0x1c1}, 0x18) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x7fff}]) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe1085989482b4a4161514100875397bdf22d0000b420a1a93c5640f45f819e01177d3d058dd499a861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 1.903345377s ago: executing program 4 (id=2540): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x2b9, &(0x7f0000000740)={0x0, 0xb1e9, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x21}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) splice(r6, 0x0, r5, 0x0, 0x10000008ebc, 0x0) 1.821153277s ago: executing program 0 (id=2541): listen(0xffffffffffffffff, 0xfffffffc) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000200)=[{{&(0x7f0000000c00)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10, 0x0}}], 0x1, 0x2000c0d0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x2000000, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x7f}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r3 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, 0x0, 0x400, 0x60, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x4040) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) r5 = fsopen(&(0x7f0000000340)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 1.819995981s ago: executing program 1 (id=2542): fsopen(&(0x7f0000000580)='overlay\x00', 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x20801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) modify_ldt$write2(0x11, &(0x7f0000000200)={0xd8a, 0x20000800, 0x2000, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, 0x0, 0x110) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r4, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) bind$qrtr(r5, &(0x7f0000000000)={0x2a, 0x1, 0x4000}, 0xc) dup(0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0x2, "810000cc2b000000000000fa25ffff00ffffff"}) r8 = syz_open_pts(r7, 0x141601) fcntl$setstatus(r2, 0x4, 0x102800) write(r8, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000100)=0x19) close_range(r6, 0xffffffffffffffff, 0x0) 496.022484ms ago: executing program 1 (id=2543): getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xb, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000340)=0x200, 0x4) 292.971118ms ago: executing program 1 (id=2544): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x20000800) 246.780213ms ago: executing program 3 (id=2545): bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, @void}, 0x10) 189.960409ms ago: executing program 1 (id=2546): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d8", 0xe) r1 = accept4$alg(r0, 0x0, 0x0, 0x80000) io_setup(0x42, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000000)='e', 0x12, 0x0, 0x0, 0x2}]) 96.431751ms ago: executing program 3 (id=2547): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) socket$kcm(0x2, 0x200000000000001, 0x106) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$inet6(0xa, 0x3, 0xff) syz_io_uring_submit(0x0, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) r7 = dup2(r6, r6) sendmmsg$unix(r7, &(0x7f0000008380), 0x400000000000174, 0x4008890) lseek(0xffffffffffffffff, 0x851, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x20008041) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x64000600) r9 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r9, 0x0, 0x41, &(0x7f00000002c0)=ANY=[@ANYBLOB='security'], 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000080)="66b9800000c00f326635004000000f3067660fc7360f20d86635200000000f22d80f01c2ba2100ed0fc73b0f3566660f3a0a17530fc7280f0051fe"}], 0xf, 0x11, 0x0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000000c0)) sendmmsg$sock(r0, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="74b17a07", 0x4}], 0x1}}, {{&(0x7f0000000340)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8, 0x4}, 0x80, 0x0}}], 0x2, 0xc4) 32.287111ms ago: executing program 1 (id=2548): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000400)=0x9, 0x4) 0s ago: executing program 0 (id=2549): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4048aecb, &(0x7f0000000180)={0x3, 0x0, [{0x0, 0x0, 0x0, 0x2, 0x0, 0x800}, {0x0, 0x6}, {0x5e2796afef1a2f31, 0xffffffff, 0x0, 0x9, 0x1, 0x80000001, 0x8}]}) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000b"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x8800) mknod$loop(0x0, 0xfff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000002100010000001100000000000200000000000002"], 0x24}}, 0x4840) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') r8 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000004c0)={r8, r7, 0x9, 0x0, @val=@netkit={@void, @value=r7}}, 0x1c) setsockopt$packet_int(r8, 0x107, 0x3, 0x0, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) getpid() ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x6, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) r9 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r9, r9, r9}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): [ T9226] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 243.112579][ T9226] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 243.122834][ T9226] vhci_hcd vhci_hcd.0: Device attached [ 243.607169][ T10] usb 42-1: SetAddress Request (2) to port 0 [ 243.613303][ T10] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 243.694697][ T9227] vhci_hcd: connection reset by peer [ 243.705028][ T2936] vhci_hcd vhci_hcd.4: stop threads [ 243.753974][ T9235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1238'. [ 243.828224][ T2936] vhci_hcd vhci_hcd.4: release socket [ 243.838174][ T2936] vhci_hcd vhci_hcd.4: disconnect device [ 243.847915][ T9235] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1238'. [ 243.859764][ T9238] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1239'. [ 244.283320][ T5928] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 244.448125][ T5928] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 244.475335][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.506335][ T5928] usb 4-1: config 0 descriptor?? [ 244.532376][ T5928] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 245.338663][ T5928] gspca_sunplus: reg_w_riv err -71 [ 245.346796][ T5928] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 245.370371][ T5928] usb 4-1: USB disconnect, device number 20 [ 245.953755][ T29] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 246.073444][ T9295] tipc: Enabled bearer , priority 10 [ 246.080725][ T9295] syzkaller0: entered promiscuous mode [ 246.086361][ T9295] syzkaller0: entered allmulticast mode [ 246.161591][ T9295] tipc: Resetting bearer [ 246.172738][ T29] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 246.180972][ T29] usb 1-1: config 0 has no interface number 0 [ 246.199825][ T29] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 246.242012][ T29] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 246.273427][ T9294] tipc: Resetting bearer [ 246.285134][ T29] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 246.314530][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.315021][ T9294] tipc: Disabling bearer [ 246.387785][ T29] usb 1-1: config 0 descriptor?? [ 246.406352][ T9291] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 246.489838][ T29] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 246.976437][ T9311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1263'. [ 247.001480][ T9311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1263'. [ 247.014345][ T9311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1263'. [ 247.035594][ T9311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1263'. [ 247.058462][ T9311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1263'. [ 247.071567][ T9311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1263'. [ 247.090531][ T9311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1263'. [ 247.119082][ T9311] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.126276][ T9311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.134505][ T9311] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.141621][ T9311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.280993][ T9311] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 247.314661][ T9318] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 247.484965][ T5928] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 247.651216][ T5928] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 247.664124][ T5928] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 247.694195][ T5928] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 247.712024][ T5928] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 247.732399][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.790811][ T5928] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 247.828533][ T9332] tipc: Enabled bearer , priority 10 [ 247.846750][ T9332] syzkaller0: entered promiscuous mode [ 247.859315][ T9332] syzkaller0: entered allmulticast mode [ 247.907489][ T9332] tipc: Resetting bearer [ 247.929039][ T9331] tipc: Resetting bearer [ 247.949342][ T5928] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 247.966275][ T9331] tipc: Disabling bearer [ 247.998552][ T9320] tipc: Cannot configure node identity twice [ 248.014090][ T5916] usb 2-1: USB disconnect, device number 23 [ 248.689867][ T10] usb 42-1: device descriptor read/8, error -110 [ 248.794264][ T29] usb 1-1: USB disconnect, device number 21 [ 248.800224][ C1] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 249.124580][ T10] usb usb42-port1: attempt power cycle [ 249.795861][ T10] usb usb42-port1: unable to enumerate USB device [ 249.817202][ T9365] __nla_validate_parse: 13 callbacks suppressed [ 249.817215][ T9365] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1286'. [ 249.912395][ T9365] bond4: Unable to set peer notification delay as MII monitoring is disabled [ 249.924386][ T9365] bond4 (unregistering): Released all slaves [ 249.925795][ T9370] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1286'. [ 249.986489][ T9369] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 250.029925][ T9370] bond4: Unable to set peer notification delay as MII monitoring is disabled [ 250.046822][ T9370] bond4 (unregistering): Released all slaves [ 250.340653][ T9379] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1289'. [ 250.372450][ T9381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1292'. [ 250.410656][ T9379] geneve2: entered promiscuous mode [ 250.439703][ T9381] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1292'. [ 250.722364][ T9397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1298'. [ 250.741525][ T9397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1298'. [ 250.882309][ T9406] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1301'. [ 250.977070][ T9408] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1301'. [ 251.015386][ T9406] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 251.026063][ T5928] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 251.066726][ T9406] bond3 (unregistering): Released all slaves [ 251.230524][ T5928] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 251.252752][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.302187][ T5928] usb 4-1: config 0 descriptor?? [ 251.322372][ T9408] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 251.345689][ T5928] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 251.474489][ T9408] bond3 (unregistering): Released all slaves [ 251.747521][ T9397] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1298'. [ 251.766419][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 251.923272][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 251.934755][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 251.951547][ T10] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 251.960890][ T10] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 251.970927][ T10] usb 3-1: Product: syz [ 251.980722][ T10] usb 3-1: Manufacturer: syz [ 251.985424][ T10] usb 3-1: SerialNumber: syz [ 251.992106][ T10] usb 3-1: config 0 descriptor?? [ 251.998530][ T5928] gspca_sunplus: reg_w_riv err -71 [ 252.006373][ T5928] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 252.015854][ T9416] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 252.027729][ T5928] usb 4-1: USB disconnect, device number 21 [ 253.065096][ T5916] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 253.481165][ T5916] usb 1-1: Using ep0 maxpacket: 32 [ 253.496725][ T5916] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 253.513585][ T5916] usb 1-1: config 0 has no interface number 0 [ 253.526573][ T5916] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 253.549860][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.562657][ T5916] usb 1-1: Product: syz [ 253.569405][ T5916] usb 1-1: Manufacturer: syz [ 253.575285][ T5916] usb 1-1: SerialNumber: syz [ 253.621061][ T5916] usb 1-1: config 0 descriptor?? [ 253.893368][ T5928] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 254.079958][ T5916] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 254.090897][ T5916] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 254.128453][ T5928] usb 2-1: config 0 has no interfaces? [ 254.150332][ T5928] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 254.174060][ T5916] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 254.176315][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.185673][ T5916] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 254.194259][ T5928] usb 2-1: Product: syz [ 254.212881][ T5916] usb 1-1: USB disconnect, device number 22 [ 254.239396][ T5928] usb 2-1: Manufacturer: syz [ 254.261482][ T5928] usb 2-1: SerialNumber: syz [ 254.279058][ T5928] usb 2-1: config 0 descriptor?? [ 254.614157][ T5831] usb 2-1: USB disconnect, device number 24 [ 255.365880][ T5928] usb 3-1: USB disconnect, device number 19 [ 255.569006][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.576649][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.463519][ T10] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 257.686031][ T10] usb 1-1: config 0 has no interfaces? [ 257.710815][ T10] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 257.741375][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.754357][ T10] usb 1-1: Product: syz [ 257.758537][ T10] usb 1-1: Manufacturer: syz [ 257.769876][ T10] usb 1-1: SerialNumber: syz [ 257.778613][ T10] usb 1-1: config 0 descriptor?? [ 258.012831][ T796] usb 1-1: USB disconnect, device number 23 [ 258.129057][ T9525] __nla_validate_parse: 1 callbacks suppressed [ 258.129075][ T9525] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1340'. [ 258.291754][ T9530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1342'. [ 258.577763][ T9538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1346'. [ 258.631292][ T9539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1346'. [ 259.432828][ T9557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1352'. [ 259.490599][ T9557] bridge0: entered promiscuous mode [ 259.561630][ T9559] tipc: Enabled bearer , priority 10 [ 259.576251][ T9559] syzkaller0: entered promiscuous mode [ 259.586117][ T9559] syzkaller0: entered allmulticast mode [ 259.611201][ T9559] tipc: Resetting bearer [ 259.620518][ T9558] tipc: Resetting bearer [ 259.647368][ T9558] tipc: Disabling bearer [ 260.130629][ T796] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 260.520218][ T796] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 260.529745][ T796] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 260.540832][ T796] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 260.565311][ T796] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 261.073311][ T796] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 261.176725][ T796] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 261.184352][ T796] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 261.208715][ T796] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 261.247160][ T796] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 261.313008][ T796] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 261.390172][ T796] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 261.397926][ T796] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 261.425494][ T796] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 261.495895][ T796] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 261.537539][ T796] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 261.592654][ T796] usb 5-1: string descriptor 0 read error: -22 [ 261.603314][ T796] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 261.623045][ T796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.662965][ T796] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 261.785456][ T9597] tipc: Enabled bearer , priority 10 [ 261.796090][ T9597] syzkaller0: entered promiscuous mode [ 261.810094][ T9597] syzkaller0: entered allmulticast mode [ 261.842483][ T9597] tipc: Resetting bearer [ 261.942932][ T9596] tipc: Resetting bearer [ 262.419675][ T796] usb 5-1: USB disconnect, device number 21 [ 262.459146][ T9596] tipc: Disabling bearer [ 263.849940][ T9637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1379'. [ 264.348671][ T5831] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 264.631721][ T9654] vivid-002: disconnect [ 264.654625][ T5831] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 264.665719][ T5831] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 264.678060][ T5831] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 264.697598][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.728731][ T5831] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 264.739487][ T5831] usb 3-1: invalid MIDI out EP 0 [ 264.898643][ T5831] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 264.930822][ T5831] usb 3-1: USB disconnect, device number 20 [ 265.283953][ T9647] vivid-002: reconnect [ 265.327607][ T9684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1387'. [ 265.867641][ T9703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1390'. [ 265.898801][ T9703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1390'. [ 265.902817][ T9707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1391'. [ 265.919166][ T9705] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1389'. [ 265.986169][ T9709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1389'. [ 266.175875][ T9709] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 266.192514][ T9709] bond2 (unregistering): Released all slaves [ 266.374721][ T9705] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 266.388472][ T9705] bond2 (unregistering): Released all slaves [ 266.778139][ T9736] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 267.538760][ T9752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1407'. [ 267.640309][ T9759] vivid-003: disconnect [ 268.428176][ T9753] vivid-003: reconnect [ 268.591429][ T9779] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 268.775663][ T9783] tipc: Enabled bearer , priority 10 [ 268.785154][ T9785] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1419'. [ 268.785736][ T9783] syzkaller0: entered promiscuous mode [ 268.811078][ T9783] syzkaller0: entered allmulticast mode [ 268.867298][ T9783] tipc: Resetting bearer [ 268.880555][ T9780] tipc: Resetting bearer [ 268.911776][ T9780] tipc: Disabling bearer [ 269.544245][ T5831] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 269.824491][ T5831] usb 1-1: Using ep0 maxpacket: 16 [ 269.860193][ T5831] usb 1-1: config 0 has no interfaces? [ 269.890254][ T5831] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 269.918857][ T5831] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 269.959354][ T5831] usb 1-1: Manufacturer: syz [ 270.236978][ T5831] usb 1-1: config 0 descriptor?? [ 270.711156][ T9799] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 270.743699][ T9799] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 270.940968][ T9831] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.948665][ T9831] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.263801][ T5831] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 271.362410][ T9838] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 271.402709][ T9838] team0: Port device batadv1 added [ 271.433266][ T5831] usb 2-1: Using ep0 maxpacket: 8 [ 271.453595][ T5831] usb 2-1: config 127 has an invalid interface number: 171 but max is 1 [ 271.463697][ T5831] usb 2-1: config 127 has an invalid descriptor of length 60, skipping remainder of the config [ 271.474064][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 271.482532][ T5831] usb 2-1: config 127 has no interface number 1 [ 271.492511][ T5831] usb 2-1: config 127 interface 171 has no altsetting 0 [ 271.536077][ T5831] usb 2-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 271.545210][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.553678][ T5831] usb 2-1: Product: syz [ 271.558033][ T5831] usb 2-1: Manufacturer: syz [ 271.562628][ T5831] usb 2-1: SerialNumber: syz [ 271.634222][ T10] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 271.648283][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 271.662593][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 271.704039][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 271.734501][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 271.761252][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 271.812632][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 271.828902][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 271.842636][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 271.859724][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 271.872568][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 271.881734][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 271.899697][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 271.920631][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 271.931000][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 271.950280][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 271.967677][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 271.979054][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 272.000807][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 272.016859][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 272.035728][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 272.102120][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 272.136776][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 272.147001][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 272.188359][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 272.209891][ T10] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 272.236611][ T10] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 272.254384][ T10] usb 5-1: Product: syz [ 272.261398][ T10] usb 5-1: Manufacturer: syz [ 272.275440][ T10] usb 5-1: SerialNumber: syz [ 272.300551][ T10] usb 5-1: config 0 descriptor?? [ 272.328504][ T10] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 272.538465][ T796] usb 5-1: USB disconnect, device number 22 [ 272.550905][ T796] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 272.931874][ T10] usb 1-1: USB disconnect, device number 24 [ 273.126284][ T30] audit: type=1326 audit(1771765771.441:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9861 comm="syz.0.1446" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd7f6c code=0x0 [ 274.467967][ T5831] xr_serial 2-1:127.171: xr_serial converter detected [ 274.494506][ T5831] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 274.500906][ T5831] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 274.557110][ T5831] usb 2-1: USB disconnect, device number 25 [ 274.597395][ T5831] xr_serial 2-1:127.171: device disconnected [ 274.921640][ T9893] tipc: Enabled bearer , priority 10 [ 274.936300][ T9893] syzkaller0: entered promiscuous mode [ 274.941951][ T9893] syzkaller0: entered allmulticast mode [ 274.959242][ T9893] tipc: Resetting bearer [ 275.070255][ T9892] tipc: Resetting bearer [ 275.084410][ T9892] tipc: Disabling bearer [ 276.856448][ T9932] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1472'. [ 276.863518][ T9935] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1471'. [ 277.111785][ T9940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1475'. [ 277.813800][ T9960] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1485'. [ 278.183341][ T5831] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 278.253529][ T796] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 278.366043][ T5831] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 278.406963][ T5831] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 278.423268][ T796] usb 1-1: Using ep0 maxpacket: 8 [ 278.428882][ T5831] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 278.447873][ T5831] usb 5-1: config 0 interface 0 has no altsetting 0 [ 278.456320][ T796] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 278.470799][ T5831] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 278.479920][ T796] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 278.493470][ T5831] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 278.504672][ T796] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 278.514948][ T5831] usb 5-1: config 0 interface 0 has no altsetting 0 [ 278.521633][ T796] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 278.540409][ T796] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 278.583036][ T5831] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 278.595719][ T796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.613239][ T5831] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 278.650702][ T5831] usb 5-1: config 0 interface 0 has no altsetting 0 [ 278.672911][ T5831] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 278.718985][ T5831] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 278.740741][ T5831] usb 5-1: config 0 interface 0 has no altsetting 0 [ 278.769349][ T5831] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 278.787808][ T5831] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 278.813244][ T5831] usb 5-1: config 0 interface 0 has no altsetting 0 [ 278.837416][ T5831] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 278.846913][ T796] usb 1-1: GET_CAPABILITIES returned 0 [ 278.852417][ T796] usbtmc 1-1:16.0: can't read capabilities [ 278.873010][ T5831] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 278.904086][ T5831] usb 5-1: config 0 interface 0 has no altsetting 0 [ 278.918690][ T5831] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 278.944842][ T5831] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 278.973224][ T5831] usb 5-1: config 0 interface 0 has no altsetting 0 [ 278.992103][ T5831] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 279.017421][ T5831] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 279.028805][ T5831] usb 5-1: config 0 interface 0 has no altsetting 0 [ 279.037005][ T5831] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 279.093226][ T5831] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 279.101584][ T5831] usb 5-1: Product: syz [ 279.115513][ T5831] usb 5-1: Manufacturer: syz [ 279.120184][ T5831] usb 5-1: SerialNumber: syz [ 279.133352][ T5831] usb 5-1: config 0 descriptor?? [ 279.145761][ T5831] yurex 5-1:0.0: USB YUREX device now attached to Yurex #1 [ 279.309150][ T9997] netlink: 'syz.2.1500': attribute type 1 has an invalid length. [ 279.322920][ T9997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1500'. [ 279.366851][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 279.399111][ T9969] usbtmc 1-1:16.0: Unable to send data, error -71 [ 279.419725][ T10] usb 5-1: USB disconnect, device number 23 [ 279.428127][ T10] yurex 5-1:0.0: USB YUREX #1 now disconnected [ 281.011035][ T5831] usb 1-1: USB disconnect, device number 25 [ 281.714075][T10035] syzkaller0: entered promiscuous mode [ 281.748673][T10035] syzkaller0: entered allmulticast mode [ 281.793314][T10039] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1515'. [ 281.802409][T10039] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1515'. [ 282.373526][ T796] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 282.421405][T10064] vivid-002: disconnect [ 282.555237][ T796] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 282.566750][ T796] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 282.579120][ T796] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 282.589426][ T796] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 282.714682][ T796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.796206][ T796] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 282.947820][ T796] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 283.012879][ T796] usb 5-1: USB disconnect, device number 24 [ 283.261124][T10058] vivid-002: reconnect [ 283.553151][T10079] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1528'. [ 283.704381][T10078] syzkaller0: entered promiscuous mode [ 283.718706][T10078] syzkaller0: entered allmulticast mode [ 284.445378][T10100] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1534'. [ 284.467706][T10100] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!‚lü1œ*ø$pOcÚÉ”ÎÜr$åG—•µ [ 286.516369][T10124] syzkaller0: entered promiscuous mode [ 286.521924][T10124] syzkaller0: entered allmulticast mode [ 286.608397][T10129] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1544'. [ 286.643356][T10129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1544'. [ 287.090363][ T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 287.443743][ T10] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 287.456914][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 287.514630][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 287.533451][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 287.594341][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 287.606673][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 287.632870][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 287.647592][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 287.669003][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 287.720370][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 287.734285][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 287.761344][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 287.813385][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 287.831634][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 287.852074][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 287.878577][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 287.902907][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 287.926846][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 287.951219][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 288.053264][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 288.062187][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 288.114863][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 288.125204][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 288.134482][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 288.146138][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 288.163619][ T10] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 288.192953][ T10] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 288.204899][ T10] usb 2-1: Product: syz [ 288.209075][ T10] usb 2-1: Manufacturer: syz [ 288.217515][ T10] usb 2-1: SerialNumber: syz [ 288.242982][ T10] usb 2-1: config 0 descriptor?? [ 288.269317][ T10] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 288.362691][T10165] syzkaller0: entered promiscuous mode [ 288.368990][T10165] syzkaller0: entered allmulticast mode [ 288.393265][ T796] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 288.615811][ C0] usb 2-1: yurex_control_callback - control failed: -71 [ 288.617136][ T5831] usb 2-1: USB disconnect, device number 26 [ 288.641949][ T796] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 288.656388][ T796] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 288.666538][ T796] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 288.677771][ T5831] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 288.692088][ T796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.707100][T10157] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 288.720303][ T796] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 288.721940][T10170] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1557'. [ 288.890138][T10170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1557'. [ 289.378438][ T5916] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 289.544110][ T5916] usb 5-1: device descriptor read/64, error -71 [ 289.779017][ T796] usb 4-1: USB disconnect, device number 22 [ 289.913253][ T5916] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 290.075465][ T5916] usb 5-1: device descriptor read/64, error -71 [ 290.217009][ T5916] usb usb5-port1: attempt power cycle [ 290.593705][ T5916] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 290.614086][ T5916] usb 5-1: device descriptor read/8, error -71 [ 291.086611][ T5916] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 291.538596][ T5916] usb 5-1: device descriptor read/8, error -71 [ 291.653541][ T5916] usb usb5-port1: unable to enumerate USB device [ 293.607547][T10250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1584'. [ 293.628407][T10250] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1584'. [ 293.825704][T10252] syzkaller0: entered promiscuous mode [ 293.943360][ T5831] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 293.980312][T10252] syzkaller0: entered allmulticast mode [ 294.114828][ T5831] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 294.130366][ T5831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.156332][ T5831] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 294.172299][ T5831] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 294.184245][ T5831] usb 3-1: Manufacturer: syz [ 294.196519][ T5831] usb 3-1: config 0 descriptor?? [ 294.313260][ T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 294.334227][ T5831] rc_core: IR keymap rc-hauppauge not found [ 294.347164][ T5831] Registered IR keymap rc-empty [ 294.460528][ T5831] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 294.500986][ T5831] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input19 [ 294.513281][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 294.522824][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 294.540549][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 294.560434][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 294.573618][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 294.597246][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 294.608854][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.963574][ T10] usb 4-1: usb_control_msg returned -32 [ 295.070043][ T10] usbtmc 4-1:16.0: can't read capabilities [ 295.184365][ T10] usb 4-1: USB disconnect, device number 23 [ 296.149797][T10286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1595'. [ 296.198802][T10286] veth0: entered promiscuous mode [ 296.245876][T10286] veth0: left promiscuous mode [ 296.324545][T10288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1596'. [ 296.389238][T10288] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1596'. [ 296.403501][ T10] usb 3-1: USB disconnect, device number 21 [ 296.516973][T10293] vivid-002: disconnect [ 296.763956][T10297] syzkaller0: entered promiscuous mode [ 296.769875][T10297] syzkaller0: entered allmulticast mode [ 296.881143][T10301] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1601'. [ 297.317464][T10290] vivid-002: reconnect [ 298.109803][T10326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1609'. [ 298.142291][T10326] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1609'. [ 298.566610][T10341] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1616'. [ 300.388612][T10383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1631'. [ 300.439384][T10385] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1631'. [ 300.610287][T10393] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 300.753686][ T5916] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 300.925256][ T5916] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 300.944625][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.957663][ T5916] usb 1-1: config 0 descriptor?? [ 300.988911][ T5916] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 301.133086][T10406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1640'. [ 301.188445][T10406] erspan0: entered promiscuous mode [ 301.201076][T10406] erspan0: left promiscuous mode [ 301.586301][T10383] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1631'. [ 301.857996][ T5916] gspca_sunplus: reg_w_riv err -71 [ 301.866179][ T5916] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 301.889460][ T5916] usb 1-1: USB disconnect, device number 26 [ 302.009186][T10418] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1644'. [ 302.022332][T10418] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1644'. [ 302.677864][T10443] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1653'. [ 302.829441][T10445] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1656'. [ 302.917625][T10445] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1656'. [ 304.097863][T10470] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1665'. [ 304.156659][T10472] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1666'. [ 304.212733][T10474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1667'. [ 304.229513][T10474] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1667'. [ 304.686062][T10496] tipc: Enabling of bearer rejected, failed to enable media [ 304.704442][T10496] tipc: Enabling of bearer rejected, failed to enable media [ 305.853271][ T5877] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 306.025040][ T5877] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 306.036528][ T5877] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 306.047643][ T5877] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 306.057255][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.070787][T10504] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 306.099716][T10521] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 306.109544][T10521] team0: Port device batadv1 added [ 306.130840][T10521] hub 9-0:1.0: USB hub found [ 306.136250][T10521] hub 9-0:1.0: 1 port detected [ 306.178796][ T5877] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 306.395093][ T5877] usb 4-1: USB disconnect, device number 24 [ 306.849180][T10535] tipc: Enabling of bearer rejected, failed to enable media [ 306.915721][T10535] tipc: Enabling of bearer rejected, failed to enable media [ 307.174000][T10541] __nla_validate_parse: 4 callbacks suppressed [ 307.174013][T10541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1693'. [ 307.238454][T10545] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1694'. [ 307.260163][T10541] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1693'. [ 307.561278][T10550] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1696'. [ 307.595467][T10550] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1696'. [ 307.781990][T10557] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1699'. [ 308.087865][T10570] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1705'. [ 308.367001][T10580] vivid-002: disconnect [ 308.584852][T10581] vivid-000: disconnect [ 309.089572][T10572] vivid-002: reconnect [ 309.261265][T10574] vivid-000: reconnect [ 310.100673][T10609] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1719'. [ 310.110007][T10609] netlink: 'syz.0.1719': attribute type 3 has an invalid length. [ 310.512347][T10613] syzkaller0: entered promiscuous mode [ 310.534759][T10613] syzkaller0: entered allmulticast mode [ 310.789613][T10616] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1722'. [ 310.850504][T10619] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1724'. [ 311.119984][T10628] bond_slave_0: entered promiscuous mode [ 311.125746][T10628] bond_slave_1: entered promiscuous mode [ 311.179239][T10628] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 311.202235][T10628] team0: Port device macvlan2 added [ 311.390311][T10641] vivid-004: disconnect [ 312.227864][T10633] vivid-004: reconnect [ 312.309984][T10657] __nla_validate_parse: 2 callbacks suppressed [ 312.310637][T10657] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1738'. [ 312.460528][T10662] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1740'. [ 312.548382][T10665] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1741'. [ 313.370040][T10681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1746'. [ 313.385734][T10682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1747'. [ 313.417230][T10682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1747'. [ 313.427387][T10685] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1746'. [ 315.093032][T10716] fuse: Unknown parameter 'f' [ 315.142389][T10717] vivid-004: disconnect [ 315.379447][T10721] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1759'. [ 315.760914][T10729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1762'. [ 315.772894][T10708] vivid-004: reconnect [ 315.786141][T10729] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1762'. [ 316.404325][T10746] tipc: Enabling of bearer rejected, failed to enable media [ 316.484374][T10746] tipc: Enabling of bearer rejected, failed to enable media [ 317.011230][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.018045][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.317980][T10769] __nla_validate_parse: 2 callbacks suppressed [ 317.317994][T10769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1777'. [ 317.400815][T10771] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1777'. [ 317.415957][ T796] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 317.665249][ T796] usb 3-1: Using ep0 maxpacket: 8 [ 317.680624][ T796] usb 3-1: config 127 has an invalid interface number: 171 but max is 1 [ 317.732474][ T796] usb 3-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 317.763747][ T796] usb 3-1: config 127 has no interface number 1 [ 317.786173][ T796] usb 3-1: config 127 interface 171 has no altsetting 0 [ 317.854460][ T796] usb 3-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 317.890990][ T796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.912786][ T796] usb 3-1: Product: syz [ 317.923088][ T796] usb 3-1: Manufacturer: syz [ 317.963896][ T796] usb 3-1: SerialNumber: syz [ 318.172807][T10785] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1781'. [ 318.242021][T10785] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1781'. [ 318.735797][ T10] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 318.934532][ T10] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 318.942188][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 319.206093][ T10] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 319.218180][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 319.263676][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 319.358497][ T10] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 319.366056][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 319.376968][ T10] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 319.388685][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 319.403942][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 319.423421][ T10] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 319.437269][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 319.448286][ T10] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 319.482849][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 319.608417][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 319.683444][ T10] usb 4-1: string descriptor 0 read error: -22 [ 319.689760][ T10] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 319.701822][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.115698][ T10] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 320.188094][ T10] usb 4-1: USB disconnect, device number 25 [ 320.433939][ T796] xr_serial 3-1:127.171: xr_serial converter detected [ 320.456467][ T796] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 320.472625][ T796] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 320.613296][ T796] usb 3-1: USB disconnect, device number 22 [ 320.626511][ T796] xr_serial 3-1:127.171: device disconnected [ 321.134141][T10820] syzkaller0: entered promiscuous mode [ 321.139629][T10820] syzkaller0: entered allmulticast mode [ 321.494099][T10826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1793'. [ 321.546005][T10828] tipc: Enabling of bearer rejected, failed to enable media [ 321.608309][T10828] tipc: Enabling of bearer rejected, failed to enable media [ 321.893268][ T5916] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 322.160855][T10845] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 322.167373][T10845] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 322.224530][ T10] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 322.243526][ T5916] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 322.262774][ T5916] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 322.272782][T10845] vhci_hcd vhci_hcd.0: Device attached [ 322.320472][ T5916] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 322.332009][T10846] vhci_hcd: connection closed [ 322.332977][ T1156] vhci_hcd vhci_hcd.1: stop threads [ 322.353057][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.363145][ T1156] vhci_hcd vhci_hcd.1: release socket [ 322.423344][ T1156] vhci_hcd vhci_hcd.1: disconnect device [ 322.439506][T10831] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 322.456234][ T5916] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 322.563256][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 322.736183][ T10] usb 3-1: config 127 has an invalid interface number: 171 but max is 1 [ 322.769395][ T10] usb 3-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 322.819530][ T10] usb 3-1: config 127 has no interface number 1 [ 322.837549][ T10] usb 3-1: config 127 interface 171 has no altsetting 0 [ 322.933697][ T10] usb 3-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 322.946704][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.977375][ T10] usb 3-1: Product: syz [ 322.981628][ T10] usb 3-1: Manufacturer: syz [ 322.991724][ T10] usb 3-1: SerialNumber: syz [ 323.253343][ T5916] usb 4-1: USB disconnect, device number 26 [ 323.637329][ T796] usb 1-1: new low-speed USB device number 27 using dummy_hcd [ 323.647623][T10872] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1810'. [ 323.818204][ T796] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 323.827473][ T796] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 323.839007][T10874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1811'. [ 323.864645][ T796] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 323.897664][ T796] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 323.921366][ T796] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 323.985957][ T796] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 323.993596][ T796] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 324.006331][ T796] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 324.047031][ T796] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 324.073043][ T796] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 324.196802][ T796] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 324.206039][ T796] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 324.223279][ T796] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 324.360970][ T796] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 324.380864][ T796] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 324.432112][ T796] usb 1-1: string descriptor 0 read error: -22 [ 324.440889][ T796] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 324.471422][ T796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.571630][ T796] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 325.033828][ T5831] usb 1-1: USB disconnect, device number 27 [ 325.110226][ T10] xr_serial 3-1:127.171: xr_serial converter detected [ 325.183501][ T10] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 325.228819][ T10] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 325.402126][ T10] usb 3-1: USB disconnect, device number 23 [ 325.431700][ T10] xr_serial 3-1:127.171: device disconnected [ 325.661862][T10872] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1810'. [ 325.740800][T10884] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 326.063240][T10897] vivid-003: disconnect [ 326.683310][ T5831] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 326.833576][ T5831] usb 3-1: Using ep0 maxpacket: 8 [ 326.837652][T10889] vivid-003: reconnect [ 326.890366][T10912] openvswitch: netlink: IP tunnel dst address not specified [ 327.056454][ T5831] usb 3-1: config 127 has an invalid interface number: 171 but max is 1 [ 327.101872][ T5831] usb 3-1: config 127 has an invalid descriptor of length 60, skipping remainder of the config [ 327.146890][ T5831] usb 3-1: config 127 has no interface number 1 [ 327.175157][ T5831] usb 3-1: config 127 interface 171 has no altsetting 0 [ 327.196647][ T5831] usb 3-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 327.205881][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.229243][ T5831] usb 3-1: Product: syz [ 327.239051][ T5831] usb 3-1: Manufacturer: syz [ 327.292516][ T5831] usb 3-1: SerialNumber: syz [ 327.308429][T10919] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1830'. [ 327.321660][T10919] netlink: 'syz.1.1830': attribute type 3 has an invalid length. [ 328.512546][T10939] vivid-001: disconnect [ 329.048698][T10947] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1841'. [ 329.130529][T10950] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1842'. [ 329.155155][T10951] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 329.277896][T10937] vivid-001: reconnect [ 329.303751][T10950] netlink: 'syz.3.1842': attribute type 3 has an invalid length. [ 329.392477][ T5831] xr_serial 3-1:127.171: xr_serial converter detected [ 329.433898][ T5831] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 329.453393][ T5831] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 329.493858][ T5831] usb 3-1: USB disconnect, device number 24 [ 329.527136][ T5831] xr_serial 3-1:127.171: device disconnected [ 329.860060][T10969] syzkaller0: entered promiscuous mode [ 330.023271][T10969] syzkaller0: entered allmulticast mode [ 330.492228][T10983] vivid-002: disconnect [ 331.117590][T10992] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1857'. [ 331.123257][ T5831] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 331.183443][T10992] netlink: 'syz.2.1857': attribute type 3 has an invalid length. [ 331.260973][T10981] vivid-002: reconnect [ 331.283254][ T5831] usb 1-1: Using ep0 maxpacket: 8 [ 331.314377][ T5831] usb 1-1: config 127 has an invalid interface number: 171 but max is 1 [ 331.352397][ T5831] usb 1-1: config 127 has an invalid descriptor of length 60, skipping remainder of the config [ 331.399433][ T5831] usb 1-1: config 127 has no interface number 1 [ 331.409835][ T5831] usb 1-1: config 127 interface 171 has no altsetting 0 [ 331.444800][ T5831] usb 1-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 331.445175][T10998] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1860'. [ 331.454910][ T5831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.454932][ T5831] usb 1-1: Product: syz [ 331.454947][ T5831] usb 1-1: Manufacturer: syz [ 331.454961][ T5831] usb 1-1: SerialNumber: syz [ 331.473602][T11000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1861'. [ 331.677795][T11002] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1862'. [ 331.989452][T11011] syzkaller0: entered promiscuous mode [ 332.000693][T11011] syzkaller0: entered allmulticast mode [ 332.491643][T11019] vivid-003: disconnect [ 333.087100][T11015] vivid-003: reconnect [ 333.295429][T11037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1875'. [ 333.363499][T11039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1874'. [ 333.607886][T11044] ALSA: mixer_oss: invalid OSS volume '' [ 333.728832][ T5831] xr_serial 1-1:127.171: xr_serial converter detected [ 333.779401][ T5831] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 333.800522][ T5831] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 333.885580][ T5831] usb 1-1: USB disconnect, device number 28 [ 333.972559][ T5831] xr_serial 1-1:127.171: device disconnected [ 334.087674][T11058] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 335.056558][T11081] tipc: Enabling of bearer rejected, failed to enable media [ 335.099788][T11083] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1887'. [ 335.179314][T11087] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1888'. [ 335.249614][T11081] tipc: Enabling of bearer rejected, failed to enable media [ 335.659888][T11102] ALSA: mixer_oss: invalid OSS volume '' [ 335.703613][T11100] tipc: Enabling of bearer rejected, failed to enable media [ 336.022643][T11100] syzkaller0: entered promiscuous mode [ 336.028364][T11100] syzkaller0: entered allmulticast mode [ 336.074905][T11111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1895'. [ 336.805692][T11129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1898'. [ 337.005636][ T10] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 337.174577][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 337.211166][ T10] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 337.262841][ T10] usb 3-1: config 0 has no interface number 0 [ 337.297505][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 337.337381][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.366452][ T10] usb 3-1: Product: syz [ 337.378692][ T10] usb 3-1: Manufacturer: syz [ 337.409113][ T10] usb 3-1: SerialNumber: syz [ 337.436583][ T10] usb 3-1: config 0 descriptor?? [ 337.442273][T11154] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 337.921648][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 338.008612][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 338.191017][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 338.231907][ T10] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 338.248290][ T10] usb 3-1: USB disconnect, device number 25 [ 338.293249][ T5928] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 338.463368][ T5928] usb 2-1: Using ep0 maxpacket: 16 [ 338.686668][ T5928] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 338.744080][ T5928] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 338.757269][ T5928] usb 2-1: config 0 interface 0 has no altsetting 0 [ 338.776455][ T5928] usb 2-1: New USB device found, idVendor=0dfc, idProduct=0101, bcdDevice= 0.00 [ 338.789032][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.804781][ T5928] usb 2-1: config 0 descriptor?? [ 338.837184][ T5928] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 339.030388][ T5831] IPVS: starting estimator thread 0... [ 339.060016][T11191] kAFS: unable to lookup cell '(,c¾ûL' [ 339.076927][T11191] kAFS: unable to lookup cell '.,' [ 339.096409][T11195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1916'. [ 339.123400][T11192] IPVS: using max 55 ests per chain, 132000 per kthread [ 339.279597][T11199] loop2: detected capacity change from 0 to 7 [ 339.313467][T11199] Dev loop2: unable to read RDB block 7 [ 339.319259][T11199] loop2: unable to read partition table [ 339.333890][T11199] loop2: partition table beyond EOD, truncated [ 339.351833][T11204] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 339.359661][T11199] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 339.452745][T11210] vivid-002: disconnect [ 339.777613][T11224] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1924'. [ 339.924843][ T5928] usb 5-1: new low-speed USB device number 29 using dummy_hcd [ 340.107168][ T5928] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 340.114770][ T5928] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 340.207332][T11205] vivid-002: reconnect [ 340.238567][ T5928] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 340.370823][ T5928] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 340.533310][ T5928] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 340.590622][ T5928] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 340.621851][ T5928] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 340.639429][ T5928] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 340.662217][ T5928] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 340.686471][ T5928] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 340.850973][T11251] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1929'. [ 340.870354][ T5831] usb 2-1: USB disconnect, device number 27 [ 340.890950][T11251] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1929'. [ 340.929971][ T5928] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 340.981547][ T5928] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 341.007909][ T5928] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 341.058989][ T5928] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 341.130672][ T5928] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 341.151188][T11260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1930'. [ 341.214101][ T5928] usb 5-1: string descriptor 0 read error: -22 [ 341.232204][ T5928] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 341.269779][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.317488][ T5928] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 341.777135][T11271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1936'. [ 341.789337][T11270] tipc: Enabling of bearer rejected, failed to enable media [ 341.808845][T11270] syzkaller0: entered promiscuous mode [ 341.818278][T11270] syzkaller0: entered allmulticast mode [ 341.849629][T11267] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 342.119312][T11281] vivid-002: disconnect [ 342.248640][T11284] ALSA: mixer_oss: invalid OSS volume '' [ 342.768396][T11273] vivid-002: reconnect [ 342.980862][T11294] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1943'. [ 342.995730][T11293] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1944'. [ 343.748994][ T10] usb 5-1: USB disconnect, device number 29 [ 343.814189][T11308] tipc: Enabling of bearer rejected, failed to enable media [ 343.823832][T11308] syzkaller0: entered promiscuous mode [ 343.829397][T11308] syzkaller0: entered allmulticast mode [ 344.590512][T11319] fuse: Bad value for 'fd' [ 344.853664][ T5831] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 344.866985][T11328] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1956'. [ 345.016183][ T5831] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 345.027310][ T5831] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.038811][ T5831] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.049796][ T5831] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 345.065379][ T5831] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 345.076843][ T5831] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 345.085415][ T5831] usb 4-1: Manufacturer: syz [ 345.133960][ T5831] usb 4-1: config 0 descriptor?? [ 346.322325][ T796] usb 3-1: new low-speed USB device number 26 using dummy_hcd [ 346.540397][ T796] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 346.549396][ T796] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 346.561790][ T796] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 346.579726][ T796] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 346.593339][ T796] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 346.703286][ T796] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 346.711975][ T796] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 346.725175][ T796] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 346.740048][ T796] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 346.753705][ T796] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 346.781194][ T796] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 346.807017][ T796] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 346.820801][ T796] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 346.839739][ T796] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 346.903822][ T796] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 346.935035][ T796] usb 3-1: string descriptor 0 read error: -22 [ 346.975141][ T796] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 346.995541][ T796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.107585][T11354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1963'. [ 347.119523][ T796] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 347.527084][ T5831] usbhid 4-1:0.0: can't add hid device: -71 [ 347.533104][ T5831] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 347.631710][ T5831] usb 4-1: USB disconnect, device number 27 [ 347.655935][T11360] tipc: Enabling of bearer rejected, failed to enable media [ 347.667755][T11360] tipc: Enabling of bearer rejected, failed to enable media [ 347.687967][T11359] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1965'. [ 347.900575][T11363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1966'. [ 348.076887][T11367] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1968'. [ 349.116219][ T5831] usb 3-1: USB disconnect, device number 26 [ 349.195717][T11383] vivid-002: disconnect [ 349.847850][T11381] vivid-002: reconnect [ 350.452278][T11407] tipc: Enabling of bearer rejected, failed to enable media [ 350.513871][T11407] tipc: Enabling of bearer rejected, failed to enable media [ 352.054625][T11435] tipc: Enabling of bearer rejected, failed to enable media [ 352.069761][T11435] tipc: Enabling of bearer rejected, failed to enable media [ 352.687830][T11449] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1997'. [ 353.354573][T11464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2004'. [ 353.366445][T11464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2004'. [ 353.368781][T11375] Set syz1 is full, maxelem 65536 reached [ 353.741033][T11480] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2010'. [ 353.959514][T11485] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 353.966057][T11485] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 353.977465][T11485] vhci_hcd vhci_hcd.0: Device attached [ 354.385922][T11488] vhci_hcd: connection closed [ 354.390462][ T7601] vhci_hcd vhci_hcd.2: stop threads [ 354.400489][ T7601] vhci_hcd vhci_hcd.2: release socket [ 354.412609][ T7601] vhci_hcd vhci_hcd.2: disconnect device [ 354.426391][T11498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2013'. [ 354.435527][ T10] usb 38-1: enqueue for inactive port 0 [ 354.446461][T11498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2013'. [ 354.726125][ T5928] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 354.954386][ T10] usb usb38-port1: attempt power cycle [ 355.045067][ T5928] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 355.085544][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.207126][ T5928] usb 1-1: config 0 descriptor?? [ 355.218936][T11511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2019'. [ 355.220010][ T5928] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 355.260429][T11511] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2019'. [ 355.552190][ T10] usb usb38-port1: unable to enumerate USB device [ 355.606096][T11524] fuse: Bad value for 'fd' [ 355.842177][T11498] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2013'. [ 356.067947][ T5928] gspca_sunplus: reg_w_riv err -71 [ 356.073393][ T5928] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 356.113869][ T5928] usb 1-1: USB disconnect, device number 29 [ 356.595143][ T5928] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 356.915400][ T5928] usb 4-1: Using ep0 maxpacket: 32 [ 356.932409][ T5928] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 357.030055][ T30] audit: type=1326 audit(1771765855.261:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11539 comm="syz.1.2030" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16f6c code=0x7ffc0000 [ 357.077112][ T30] audit: type=1326 audit(1771765855.261:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11539 comm="syz.1.2030" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16f6c code=0x7ffc0000 [ 357.114897][ T30] audit: type=1326 audit(1771765855.261:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11539 comm="syz.1.2030" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16f6c code=0x7ffc0000 [ 357.147135][ T5928] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 357.154344][ T30] audit: type=1326 audit(1771765855.261:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11539 comm="syz.1.2030" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16f6c code=0x7ffc0000 [ 357.208645][ T30] audit: type=1326 audit(1771765855.261:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11539 comm="syz.1.2030" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f16f6c code=0x7ffc0000 [ 357.271337][ T30] audit: type=1326 audit(1771765855.261:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11539 comm="syz.1.2030" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16f6c code=0x7ffc0000 [ 357.314914][ T30] audit: type=1326 audit(1771765855.261:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11539 comm="syz.1.2030" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16f6c code=0x7ffc0000 [ 357.383483][ T30] audit: type=1326 audit(1771765855.261:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11539 comm="syz.1.2030" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16f6c code=0x7ffc0000 [ 357.403235][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 357.416394][ T5928] usb 4-1: Product: syz [ 357.440547][ T30] audit: type=1326 audit(1771765855.261:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11539 comm="syz.1.2030" exe="/root/syz-executor" sig=0 arch=40000003 syscall=444 compat=1 ip=0xf7f16f6c code=0x7ffc0000 [ 357.501321][T11553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2033'. [ 357.514468][ T30] audit: type=1326 audit(1771765855.261:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11539 comm="syz.1.2030" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16f6c code=0x7ffc0000 [ 357.523224][ T5928] usb 4-1: Manufacturer: syz [ 357.575627][ T5928] usb 4-1: SerialNumber: syz [ 357.594260][ T5928] usb 4-1: config 0 descriptor?? [ 357.605095][T11529] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 358.429791][ T5928] usb 4-1: USB disconnect, device number 28 [ 358.700341][T11568] __nla_validate_parse: 1 callbacks suppressed [ 358.700360][T11568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2036'. [ 358.860652][T11569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2037'. [ 359.013285][ T5928] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 359.054598][T11571] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2038'. [ 359.073368][T11571] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2038'. [ 359.127323][T11574] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2040'. [ 359.254271][ T5928] usb 5-1: Using ep0 maxpacket: 8 [ 359.265508][ T5928] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 359.293214][ T5928] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 359.315859][ T5928] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 2592, setting to 1024 [ 359.383891][ T5928] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 359.453265][ T5928] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 359.581285][T11585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2044'. [ 359.590386][ T5928] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 359.606132][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.661522][T11585] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2044'. [ 359.856492][T11568] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2036'. [ 360.116219][T11594] vivid-001: disconnect [ 360.130768][T11593] vivid-001: reconnect [ 361.606404][T11616] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2052'. [ 361.617378][T11616] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2052'. [ 361.708441][ T5928] usb 5-1: usb_control_msg returned -71 [ 361.737187][ T5928] usbtmc 5-1:16.0: can't read capabilities [ 361.801582][ T5928] usb 5-1: USB disconnect, device number 30 [ 362.901708][T11644] tipc: Enabling of bearer rejected, failed to enable media [ 362.969076][T11644] tipc: Enabling of bearer rejected, failed to enable media [ 363.633838][ T5928] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 363.784267][ T5928] usb 4-1: device descriptor read/64, error -71 [ 364.038713][T11676] __nla_validate_parse: 2 callbacks suppressed [ 364.038725][T11676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2075'. [ 364.057449][ T5928] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 364.204599][ T5928] usb 4-1: device descriptor read/64, error -71 [ 364.323515][ T5928] usb usb4-port1: attempt power cycle [ 364.663310][ T5928] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 364.684273][ T5928] usb 4-1: device descriptor read/8, error -71 [ 364.923320][ T5928] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 364.953933][ T5928] usb 4-1: device descriptor read/8, error -71 [ 365.071353][T11695] tipc: Enabling of bearer rejected, failed to enable media [ 365.087399][ T5928] usb usb4-port1: unable to enumerate USB device [ 365.105729][T11695] tipc: Enabling of bearer rejected, failed to enable media [ 366.355802][T11715] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 366.598386][T11721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2094'. [ 366.625518][T11721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2094'. [ 366.761087][T11731] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2097'. [ 366.774351][T11731] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2097'. [ 366.903270][ T29] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 367.066483][ T29] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 367.077446][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.106708][ T29] usb 1-1: config 0 descriptor?? [ 367.108699][T11741] tipc: Enabling of bearer rejected, failed to enable media [ 367.137930][ T29] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 367.150209][T11741] tipc: Enabling of bearer rejected, failed to enable media [ 367.166450][T11738] nvme_fabrics: missing parameter 'transport=%s' [ 367.176070][T11738] nvme_fabrics: missing parameter 'nqn=%s' [ 367.653324][ T5928] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 367.743346][T11721] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2094'. [ 367.823529][ T5928] usb 3-1: device descriptor read/64, error -71 [ 367.962944][ T29] gspca_sunplus: reg_w_riv err -71 [ 367.968454][ T29] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 367.989655][ T29] usb 1-1: USB disconnect, device number 30 [ 368.093329][ T5928] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 368.223614][ T5928] usb 3-1: device descriptor read/64, error -71 [ 368.343492][ T5928] usb usb3-port1: attempt power cycle [ 368.707598][ T5928] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 368.733823][ T5928] usb 3-1: device descriptor read/8, error -71 [ 368.889091][T11770] nvme_fabrics: missing parameter 'transport=%s' [ 368.899495][T11770] nvme_fabrics: missing parameter 'nqn=%s' [ 368.983283][ T5928] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 369.026675][ T5928] usb 3-1: device descriptor read/8, error -71 [ 369.039799][T11775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2113'. [ 369.540757][ T5928] usb usb3-port1: unable to enumerate USB device [ 369.579607][T11780] syzkaller0: entered promiscuous mode [ 369.594295][T11780] syzkaller0: entered allmulticast mode [ 371.163802][T11811] syzkaller0: entered promiscuous mode [ 371.169383][T11811] syzkaller0: entered allmulticast mode [ 371.861189][T11830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2133'. [ 371.923757][T11831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2133'. [ 371.943294][ T5831] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 372.103286][ T5831] usb 3-1: device descriptor read/64, error -71 [ 372.343610][ T5831] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 372.503876][ T5831] usb 3-1: device descriptor read/64, error -71 [ 372.634066][ T5831] usb usb3-port1: attempt power cycle [ 373.014922][ T5831] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 373.114089][ T5831] usb 3-1: device descriptor read/8, error -71 [ 373.374014][ T5831] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 373.421906][T11865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2146'. [ 373.464037][ T5831] usb 3-1: device descriptor read/8, error -71 [ 373.811207][ T5831] usb usb3-port1: unable to enumerate USB device [ 375.323376][ T5877] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 375.473243][ T5877] usb 2-1: Using ep0 maxpacket: 16 [ 375.481628][ T5877] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 375.492909][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.501908][ T5877] usb 2-1: Product: syz [ 375.522982][ T5877] usb 2-1: Manufacturer: syz [ 375.527651][ T5877] usb 2-1: SerialNumber: syz [ 375.564155][ T5877] r8152-cfgselector 2-1: Unknown version 0x0000 [ 375.577570][ T5877] r8152-cfgselector 2-1: config 0 descriptor?? [ 375.813305][T11888] program syz.1.2154 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 375.825186][T11888] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 375.864486][T11888] syzkaller1: entered promiscuous mode [ 375.870026][T11888] syzkaller1: entered allmulticast mode [ 376.142246][ T5877] r8152-cfgselector 2-1: Unknown version 0x0000 [ 376.149963][ T5877] r8152-cfgselector 2-1: bad CDC descriptors [ 376.158965][ T5877] r8152-cfgselector 2-1: USB disconnect, device number 28 [ 376.872625][T11918] fuse: Bad value for 'fd' [ 377.543548][T11931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2165'. [ 377.635305][ T29] IPVS: starting estimator thread 0... [ 377.755820][T11933] IPVS: using max 32 ests per chain, 76800 per kthread [ 378.450121][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.457110][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.714581][T12004] syzkaller0: entered promiscuous mode [ 381.720069][T12004] syzkaller0: entered allmulticast mode [ 382.211936][T12014] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 382.634920][ T5928] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 382.943489][ T5928] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 382.978035][ T5928] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 383.033254][ T5928] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 383.044742][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.101695][T12020] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 383.127079][ T5928] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 383.424617][ T5831] usb 4-1: USB disconnect, device number 33 [ 383.731680][T12029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2194'. [ 383.972708][T12034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2196'. [ 383.993117][T12034] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2196'. [ 384.195275][T12040] tipc: Enabling of bearer rejected, failed to enable media [ 384.228746][T12040] tipc: Enabling of bearer rejected, failed to enable media [ 385.553730][T12065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2206'. [ 386.163252][ T29] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 386.317687][T12083] tipc: Enabling of bearer rejected, failed to enable media [ 386.337318][ T29] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 386.353505][ T29] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 386.378899][ T29] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 386.388320][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.451553][T12076] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 386.474462][T12083] tipc: Enabling of bearer rejected, failed to enable media [ 386.509446][ T29] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 386.722066][ T5928] usb 4-1: USB disconnect, device number 34 [ 386.744635][T12091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2215'. [ 386.754371][T12092] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2214'. [ 386.915058][T12098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2217'. [ 386.935621][T12101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2218'. [ 387.033282][T12104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2219'. [ 387.224642][ T29] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 387.397882][ T29] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 387.407656][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.429005][ T29] usb 3-1: config 0 descriptor?? [ 387.452457][ T29] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 388.074921][T12098] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2217'. [ 388.354086][ T29] gspca_sunplus: reg_w_riv err -71 [ 388.361139][ T29] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 388.372865][ T29] usb 3-1: USB disconnect, device number 35 [ 388.851757][T12126] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2227'. [ 389.048460][T12133] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2230'. [ 389.210695][T12139] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2230'. [ 389.350891][T12143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2231'. [ 390.966679][T12183] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2238'. [ 391.408611][T12190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2241'. [ 391.420170][T12190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2241'. [ 391.493254][T12195] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2243'. [ 391.541608][T12197] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2244'. [ 391.753272][ T5928] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 391.916674][ T5928] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 391.930354][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.950175][ T5928] usb 3-1: config 0 descriptor?? [ 391.967643][ T5928] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 392.033338][ T5877] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 392.203636][ T5877] usb 5-1: Using ep0 maxpacket: 8 [ 392.210509][ T5877] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 392.221976][ T5877] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 392.240116][ T5877] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 392.257388][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.285521][ T5877] usbtmc 5-1:16.0: bulk endpoints not found [ 392.573060][T12190] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2241'. [ 392.784798][ T5928] gspca_sunplus: reg_w_riv err -71 [ 392.789994][ T5928] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 392.833378][ T5928] usb 3-1: USB disconnect, device number 36 [ 394.395175][T12252] __nla_validate_parse: 7 callbacks suppressed [ 394.395187][T12252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2264'. [ 394.814596][ T29] usb 5-1: USB disconnect, device number 31 [ 395.017676][T12264] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2269'. [ 395.706409][T12276] tipc: Enabled bearer , priority 10 [ 395.727226][T12276] syzkaller0: entered promiscuous mode [ 395.732715][T12276] syzkaller0: entered allmulticast mode [ 395.805106][T12275] tipc: Resetting bearer [ 396.024077][T12275] tipc: Disabling bearer [ 396.413363][ T5928] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 396.476601][T12296] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2282'. [ 396.506764][ T5877] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 396.576798][ T5928] usb 4-1: Using ep0 maxpacket: 8 [ 396.583634][ T5928] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 396.597809][ T5928] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 396.633292][ T5928] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 396.642346][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.774413][ T5877] usb 1-1: Using ep0 maxpacket: 32 [ 396.829359][ T5928] usbtmc 4-1:16.0: bulk endpoints not found [ 396.837555][ T5877] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 396.875274][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.910243][ T5877] usb 1-1: config 0 descriptor?? [ 397.029728][ T5877] as10x_usb: device has been detected [ 397.038142][ T5877] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 397.064896][ T5877] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 397.326225][ T5877] as10x_usb: error during firmware upload part1 [ 397.344770][ T5877] Registered device nBox DVB-T Dongle [ 397.367255][ T5877] usb 1-1: USB disconnect, device number 31 [ 397.423285][T12312] as102_open: can't find device for minor 0 [ 397.429959][ T5877] Unregistered device nBox DVB-T Dongle [ 397.431146][ T5877] as10x_usb: device has been disconnected [ 398.372012][T12323] tipc: Enabled bearer , priority 10 [ 398.383299][T12323] syzkaller0: entered promiscuous mode [ 398.393860][T12323] syzkaller0: entered allmulticast mode [ 398.498814][T12323] tipc: Resetting bearer [ 398.538958][T12321] tipc: Resetting bearer [ 398.562175][T12321] tipc: Disabling bearer [ 399.159808][ T796] usb 4-1: USB disconnect, device number 35 [ 400.564401][T12346] netlink: 'syz.0.2298': attribute type 16 has an invalid length. [ 400.813804][T12353] loop9: detected capacity change from 0 to 7 [ 400.866388][T12353] Dev loop9: unable to read RDB block 7 [ 400.882120][T12355] vivid-000: disconnect [ 400.943341][T12353] loop9: AHDI p1 p2 p3 [ 400.947593][T12353] loop9: partition table partially beyond EOD, truncated [ 400.955991][T12353] loop9: p1 start 1601398130 is beyond EOD, truncated [ 400.962817][T12353] loop9: p2 start 1702059890 is beyond EOD, truncated [ 401.509202][T12347] vivid-000: reconnect [ 401.603245][ T796] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 401.801281][ T796] usb 4-1: Using ep0 maxpacket: 8 [ 401.834728][ T796] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 401.874485][ T796] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 401.912633][ T796] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 401.929221][ T796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.973944][ T796] usbtmc 4-1:16.0: bulk endpoints not found [ 401.999402][T12365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2304'. [ 402.025938][T12365] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2304'. [ 402.433569][ T5877] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 402.607322][ T5877] usb 2-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 402.617694][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.626071][ T5928] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 402.638615][ T5877] usb 2-1: config 0 descriptor?? [ 402.784948][ T5928] usb 3-1: Using ep0 maxpacket: 16 [ 402.794880][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.822614][ T5928] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 402.869455][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.901009][ T5928] usb 3-1: config 0 descriptor?? [ 403.344384][ T5928] kye 0003:0458:5016.0006: control desc unexpectedly large [ 403.370048][ T5928] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.0006/input/input20 [ 403.473328][ T5928] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.0006/input/input21 [ 403.504505][ T5877] usbhid 2-1:0.0: can't add hid device: -71 [ 403.510657][ T5877] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 403.569471][ T5877] usb 2-1: USB disconnect, device number 29 [ 403.586537][ T5928] kye 0003:0458:5016.0006: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.2-1/input0 [ 403.694744][ T5928] usb 3-1: USB disconnect, device number 37 [ 403.847854][T12395] fido_id[12395]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 404.150539][T12407] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2320'. [ 404.223283][ T796] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 404.336418][ T29] usb 4-1: USB disconnect, device number 36 [ 404.395660][ T796] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 404.478291][ T796] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 404.505292][ T796] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 404.538236][ T796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.579172][T12401] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 404.606806][ T796] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 404.874537][ T5928] usb 2-1: USB disconnect, device number 30 [ 405.169340][T12430] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2328'. [ 405.200379][T12432] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2330'. [ 405.398110][T12439] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2332'. [ 405.929850][T12449] netlink: 'syz.4.2337': attribute type 29 has an invalid length. [ 405.938548][T12449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2337'. [ 405.948241][T12449] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 405.993985][ T5928] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 406.120968][T12455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2339'. [ 406.130353][ T5877] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 406.142206][T12455] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2339'. [ 406.153741][ T5928] usb 2-1: Using ep0 maxpacket: 8 [ 406.160209][ T5928] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 406.172598][ T5928] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 406.195519][ T5928] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 406.228284][ T5928] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 406.264671][ T5928] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 406.273768][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.297100][ T5928] usbtmc 2-1:16.0: bulk endpoints not found [ 406.333396][ T5877] usb 4-1: Using ep0 maxpacket: 16 [ 406.372089][ T5877] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 406.388076][ T5877] usb 4-1: config 1 has no interface number 1 [ 406.401507][ T5877] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 406.426651][ T5877] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 406.477512][ T5877] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 406.491909][ T5877] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 406.534217][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.554939][ T5877] usb 4-1: Product: syz [ 406.563625][ T5877] usb 4-1: Manufacturer: syz [ 406.571750][ T5877] usb 4-1: SerialNumber: syz [ 407.199793][ T5877] usb 4-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 407.529119][T12469] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2342'. [ 408.291054][T12479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.303513][ T796] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 408.315333][T12479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.475444][ T796] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 408.487435][ T796] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 408.503994][ T796] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 408.513481][ T796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.536516][T12480] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 408.728892][ T29] usb 2-1: USB disconnect, device number 31 [ 408.767196][T12480] tipc: Cannot configure node identity twice [ 409.149840][T12499] vivid-004: disconnect [ 409.826429][T12493] vivid-004: reconnect [ 410.154526][T12507] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2354'. [ 410.233994][ T796] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 410.293322][ T5877] usb 4-1: USB disconnect, device number 37 [ 410.525902][ T796] usb 1-1: USB disconnect, device number 32 [ 411.263393][ T796] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 411.503506][ T796] usb 5-1: Using ep0 maxpacket: 8 [ 411.685277][ T796] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 411.700746][ T796] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 411.820188][ T796] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 411.843835][ T796] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 412.263253][ T796] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 412.272491][ T796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.346419][ T796] usbtmc 5-1:16.0: bulk endpoints not found [ 412.999112][T12562] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2370'. [ 414.233301][ T5877] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 414.395280][ T5877] usb 2-1: Using ep0 maxpacket: 32 [ 414.420323][ T5877] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 414.433991][ T5877] usb 2-1: config 0 has no interface number 0 [ 414.478670][ T5928] usb 5-1: USB disconnect, device number 32 [ 414.555204][ T5877] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 414.582383][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.612714][ T5877] usb 2-1: Product: syz [ 414.667476][ T5877] usb 2-1: Manufacturer: syz [ 414.697501][ T5877] usb 2-1: SerialNumber: syz [ 414.767499][ T5877] usb 2-1: config 0 descriptor?? [ 414.814072][T12597] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2377'. [ 415.403711][ T5877] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 415.417831][ T5877] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 416.006336][ T5877] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 416.022340][ T5877] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 416.051541][ T5877] usb 2-1: USB disconnect, device number 32 [ 417.266843][ T796] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 417.503452][ T796] usb 2-1: Using ep0 maxpacket: 8 [ 417.521068][ T796] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 417.599302][ T796] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 417.670370][ T796] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 417.718466][T12636] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2389'. [ 417.728534][ T796] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 417.760774][ T796] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 417.788005][ T796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.850205][ T796] usbtmc 2-1:16.0: bulk endpoints not found [ 418.166817][T12646] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2394'. [ 419.849983][T12677] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2405'. [ 419.893765][ T796] usb 2-1: USB disconnect, device number 33 [ 421.059041][T12700] batadv_slave_0: entered promiscuous mode [ 421.075332][T12700] batadv_slave_0: left promiscuous mode [ 421.405475][T12706] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2418'. [ 421.436881][T12710] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2419'. [ 421.833333][ T796] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 421.983489][ T796] usb 1-1: Using ep0 maxpacket: 8 [ 421.990776][ T796] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 422.006557][ T796] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 422.022218][ T796] usb 1-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 422.035751][ T796] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 422.049579][ T796] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 422.061451][ T796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.089729][ T796] usbtmc 1-1:16.0: bulk endpoints not found [ 422.261539][T12736] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2430'. [ 422.306420][T12736] geneve2: entered promiscuous mode [ 422.515193][T12738] loop5: detected capacity change from 0 to 7 [ 422.541504][ T5947] Dev loop5: unable to read RDB block 7 [ 422.547758][ T5947] loop5: unable to read partition table [ 422.570546][ T5947] loop5: partition table beyond EOD, truncated [ 422.587348][T12738] Dev loop5: unable to read RDB block 7 [ 422.592993][T12738] loop5: unable to read partition table [ 422.602513][T12738] loop5: partition table beyond EOD, truncated [ 422.618927][T12738] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 422.789698][T12744] input: syz1 as /devices/virtual/input/input22 [ 423.477731][T12759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2440'. [ 423.488712][T12759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2440'. [ 423.599095][T12762] vivid-004: disconnect [ 423.751720][T12765] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2441'. [ 424.302743][T12756] vivid-004: reconnect [ 424.616619][ T796] usb 1-1: USB disconnect, device number 33 [ 425.128115][T12784] fuse: Unknown parameter ' [ 425.128115][T12784] TracerPid: 0 [ 425.128115][T12784] Uid: 0 0 0 0 [ 425.128115][T12784] Gid: 0 0 0 0 [ 425.128115][T12784] FDSize: 256 [ 425.128115][T12784] Groups: 0 65534 [ 425.128115][T12784] NStgid: 1274 [ 425.128115][T12784] NSpid: 1275 [ 425.128115][T12784] NSpgid: 1274 [ 425.128115][T12784] NSsid: 0 [ 425.128115][T12784] Kthread: 0 [ 425.128115][T12784] VmPeak: 101996 kB [ 425.128115][T12784] VmSize: 101996 kB [ 425.128115][T12784] VmLck: 0 kB [ 425.128115][T12784] VmPin: 0 kB [ 425.128115][T12784] VmHWM: 24048 kB [ 425.128115][T12784] VmRSS: 24048 kB [ 425.128115][T12784] RssAnon: 1292 kB [ 425.128115][T12784] RssFile: 22756 kB [ 425.128115][T12784] RssShmem: 0 kB [ 425.128115][T12784] VmData: 36492 kB [ 425.128115][T12784] VmStk: 132 kB [ 425.128115][T12784] VmExe: 1776 kB [ 425.128115][T12784] VmLib: 12 kB [ 425.128115][T12784] VmPTE: 108 kB [ 425.128115][T12784] VmSwap: 0 kB [ 425.128115][T12784] HugetlbPages: 0 kB [ 425.128115][T12784] CoreDumping: 0 [ 425.128115][T12784] THP_enabled: 1 [ 425.128115][T12784] untag_mask: 0xffffffffffffffff [ 425.128115][T12784] Threads: 2 [ 425.128115][T12784] SigQ: 0/12993 [ 425.128115][T12784] SigPnd: 0000000000000000 [ 425.128115][T12784] ShdPnd: 0000000000000000 [ 425.128115][T12784] SigBlk: 0000000000000000 [ 425.128115][T12784] SigIgn: fffffffefffaba35 [ 425.128115][T12784] SigCgt: 0000000100010440 [ 425.128115][T12784] CapInh: 0000000000000000 [ 425.128115][T12784] CapPrm: 000001ffff77ffff [ 425.128115][T12784] CapEff: 000001ffff77ffff [ 425.128115][T12784] CapBnd: 000001ffffffffff [ 425.128115][T12784] CapAmb: 0000000000000000 [ 425.128115][T12784] NoNewPrivs: 0 [ 425.128115][T12784] Seccomp: 0 [ 425.128115][T12784] Seccomp_filters: 0 [ 425.128115][T12784] Speculation_Store_Bypass: thread vulnerable [ 425.128115][T12784] SpeculationIndirectBranch: conditional enabled [ 425.380247][T12790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2451'. [ 425.400837][T12790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2451'. [ 425.563158][T12794] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2452'. [ 426.024887][ T796] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 426.072189][T12810] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2456'. [ 426.233244][ T796] usb 5-1: Using ep0 maxpacket: 8 [ 426.240864][ T796] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 426.281060][ T796] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 426.309711][ T796] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 426.347351][ T796] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 426.391730][ T796] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 426.425116][ T796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.531271][ T796] usbtmc 5-1:16.0: bulk endpoints not found [ 426.709724][ T5877] usb 5-1: USB disconnect, device number 33 [ 426.771217][T12822] tipc: Enabled bearer , priority 10 [ 426.805475][T12822] syzkaller0: entered promiscuous mode [ 426.826443][T12822] syzkaller0: entered allmulticast mode [ 426.869775][T12822] tipc: Resetting bearer [ 426.894857][ T5928] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 426.916112][T12821] tipc: Resetting bearer [ 427.016067][T12821] tipc: Disabling bearer [ 427.063709][ T5928] usb 3-1: Using ep0 maxpacket: 32 [ 427.077424][ T5928] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 427.096097][ T5928] usb 3-1: config 0 has no interface number 0 [ 427.142660][ T5928] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 427.153484][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.165326][ T5928] usb 3-1: Product: syz [ 427.175254][ T5928] usb 3-1: Manufacturer: syz [ 427.181490][ T5928] usb 3-1: SerialNumber: syz [ 427.190715][T12829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2464'. [ 427.202244][ T5928] usb 3-1: config 0 descriptor?? [ 427.205844][T12829] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2464'. [ 427.380706][T12832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2463'. [ 427.403538][T12832] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.410678][T12832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.418173][T12832] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.425288][T12832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.539743][T12832] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 427.652644][ T5928] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 427.680561][ T5928] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 427.748473][ T5928] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 427.765044][ T5928] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 427.806687][ T5928] usb 3-1: USB disconnect, device number 38 [ 428.378571][T12850] fuse: Bad value for 'fd' [ 429.553323][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 429.553342][ T30] audit: type=1326 audit(1771765927.781:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12861 comm="syz.2.2474" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 429.649605][T12863] program syz.2.2474 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 429.716607][T12863] __nla_validate_parse: 18 callbacks suppressed [ 429.716619][T12863] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2474'. [ 429.759639][ T30] audit: type=1326 audit(1771765927.821:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12861 comm="syz.2.2474" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 429.798419][ T30] audit: type=1326 audit(1771765927.821:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12861 comm="syz.2.2474" exe="/root/syz-executor" sig=0 arch=40000003 syscall=283 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 429.831171][ T30] audit: type=1326 audit(1771765927.821:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12861 comm="syz.2.2474" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 429.857431][ T30] audit: type=1326 audit(1771765927.841:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12861 comm="syz.2.2474" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 429.893272][ T30] audit: type=1326 audit(1771765927.841:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12861 comm="syz.2.2474" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 429.944408][ T30] audit: type=1326 audit(1771765927.871:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12861 comm="syz.2.2474" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 429.976712][ T30] audit: type=1326 audit(1771765927.871:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12861 comm="syz.2.2474" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 430.008901][ T30] audit: type=1326 audit(1771765927.891:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12861 comm="syz.2.2474" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 430.136706][ T30] audit: type=1326 audit(1771765927.941:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12861 comm="syz.2.2474" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 430.493305][ T5928] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 430.556967][T12880] fuse: Bad value for 'fd' [ 430.657028][ T5928] usb 3-1: Using ep0 maxpacket: 8 [ 430.667928][ T5928] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 430.679954][ T5928] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 430.691039][ T5928] usb 3-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 430.702321][ T5928] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 430.715683][ T5928] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 430.723292][ T29] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 430.725243][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.746302][ T5928] usbtmc 3-1:16.0: bulk endpoints not found [ 430.923488][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 430.936101][ T29] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 430.953231][ T29] usb 5-1: config 0 has no interface number 0 [ 430.968674][ T29] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 430.989009][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.016684][ T29] usb 5-1: Product: syz [ 431.025200][ T29] usb 5-1: Manufacturer: syz [ 431.033528][ T29] usb 5-1: SerialNumber: syz [ 431.047694][ T29] usb 5-1: config 0 descriptor?? [ 431.658432][ T29] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 431.675274][ T29] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 431.685202][ T29] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 431.700573][ T29] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 431.740906][ T29] usb 5-1: USB disconnect, device number 34 [ 432.343445][ T5928] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 432.556159][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.571343][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.583759][ T5928] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 432.597296][ T5928] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 432.874226][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.944975][ T5928] usb 4-1: config 0 descriptor?? [ 432.983368][T12918] fuse: Bad value for 'fd' [ 433.237062][T12920] syzkaller0: entered promiscuous mode [ 433.263538][ T5877] usb 3-1: USB disconnect, device number 39 [ 433.333003][T12920] syzkaller0: entered allmulticast mode [ 433.734838][ T5928] usbhid 4-1:0.0: can't add hid device: -71 [ 433.899849][ T5928] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 433.961970][ T5928] usb 4-1: USB disconnect, device number 38 [ 434.393595][T12934] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 434.400153][T12934] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 434.587862][T12934] vhci_hcd vhci_hcd.0: Device attached [ 434.717755][T12936] vhci_hcd: connection closed [ 434.726391][ T49] vhci_hcd vhci_hcd.2: stop threads [ 434.771039][ T49] vhci_hcd vhci_hcd.2: release socket [ 434.789197][ T49] vhci_hcd vhci_hcd.2: disconnect device [ 434.943375][ T796] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 435.247253][ T796] usb 4-1: Using ep0 maxpacket: 32 [ 435.365512][ T796] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 435.373906][ T796] usb 4-1: config 0 has no interface number 0 [ 435.440658][ T796] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 435.450168][ T796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.484703][ T796] usb 4-1: Product: syz [ 435.497395][ T796] usb 4-1: Manufacturer: syz [ 435.514490][ T796] usb 4-1: SerialNumber: syz [ 435.529530][ T796] usb 4-1: config 0 descriptor?? [ 435.950003][ T796] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 435.965720][ T796] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 435.980235][T12950] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2500'. [ 436.010867][ T796] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 436.025703][ T796] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 436.053318][T12952] netlink: 'syz.0.2501': attribute type 29 has an invalid length. [ 436.079735][ T796] usb 4-1: USB disconnect, device number 39 [ 436.103402][T12952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2501'. [ 436.613617][ T5928] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 436.783284][ T5928] usb 3-1: Using ep0 maxpacket: 8 [ 436.806321][ T5928] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 436.820777][ T5928] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 436.835300][ T5928] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 436.850846][ T5928] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 436.871266][ T5928] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 436.932551][ T5928] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 436.968542][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.001522][ T5928] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22 [ 437.569070][T12979] lo: MTU too low for tipc bearer [ 437.753527][T12979] tipc: Enabling of bearer rejected, failed to enable media [ 438.063745][ T796] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 438.224890][ T796] usb 4-1: Using ep0 maxpacket: 16 [ 438.235778][ T796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.254895][ T796] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 438.284587][ T796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.331255][ T796] usb 4-1: config 0 descriptor?? [ 438.752685][ T796] usbhid 4-1:0.0: can't add hid device: -71 [ 438.758755][ T796] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 438.780112][ T796] usb 4-1: USB disconnect, device number 40 [ 438.873272][ T5928] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 438.896925][T12999] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 438.903453][T12999] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 438.942511][T12999] vhci_hcd vhci_hcd.0: Device attached [ 439.034268][ T5928] usb 1-1: Using ep0 maxpacket: 32 [ 439.041755][ T5928] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 439.050094][ T5928] usb 1-1: config 0 has no interface number 0 [ 439.059970][ T5928] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 439.069284][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.077515][ T5928] usb 1-1: Product: syz [ 439.081667][ T5928] usb 1-1: Manufacturer: syz [ 439.086994][ T5928] usb 1-1: SerialNumber: syz [ 439.114241][ T5928] usb 1-1: config 0 descriptor?? [ 439.214305][ T5877] usb 42-1: SetAddress Request (6) to port 0 [ 439.220356][ T5877] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 439.327700][T13000] vhci_hcd: connection reset by peer [ 439.341338][ T1156] vhci_hcd vhci_hcd.4: stop threads [ 439.349052][ T1156] vhci_hcd vhci_hcd.4: release socket [ 439.355695][ T1156] vhci_hcd vhci_hcd.4: disconnect device [ 439.403797][ T10] usb 3-1: USB disconnect, device number 40 [ 439.541203][ T5928] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 439.583731][ T5928] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 439.603559][ T5928] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 439.662938][ T5928] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 439.664896][T13018] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2523'. [ 439.688321][T13018] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2523'. [ 439.744035][ T5928] usb 1-1: USB disconnect, device number 34 [ 439.888126][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.894538][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.603571][ T796] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 441.783620][ T796] usb 3-1: Using ep0 maxpacket: 8 [ 441.803849][ T796] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 441.833810][ T796] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 441.851353][ T796] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 441.862631][ T796] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 441.891407][ T5831] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 441.931385][ T796] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 441.982516][ T796] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 442.054955][ T796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.063308][ T5831] usb 4-1: Using ep0 maxpacket: 32 [ 442.074404][ T5831] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 442.196670][ T5831] usb 4-1: config 0 has no interface number 0 [ 442.219378][ T796] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22 [ 442.245558][ T5831] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 442.269101][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.309131][ T5831] usb 4-1: Product: syz [ 442.320739][ T5831] usb 4-1: Manufacturer: syz [ 442.334801][ T5831] usb 4-1: SerialNumber: syz [ 442.396803][ T5831] usb 4-1: config 0 descriptor?? [ 442.647669][T13077] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 442.654230][T13077] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 442.676145][T13077] vhci_hcd vhci_hcd.0: Device attached [ 442.890269][ T5831] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 442.901938][ T5831] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 442.902514][T13078] vhci_hcd: connection closed [ 442.944827][ T49] vhci_hcd vhci_hcd.0: stop threads [ 442.958954][ T49] vhci_hcd vhci_hcd.0: release socket [ 442.964614][ T49] vhci_hcd vhci_hcd.0: disconnect device [ 442.979019][ T5831] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 443.013742][ T796] usb 34-1: enqueue for inactive port 0 [ 443.052963][ T5831] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 443.166647][ T5831] usb 4-1: USB disconnect, device number 41 [ 443.514951][ T796] usb usb34-port1: attempt power cycle [ 443.935505][ T13] [ 443.937849][ T13] ============================================ [ 443.943989][ T13] WARNING: possible recursive locking detected [ 443.950139][ T13] syzkaller #0 Tainted: G L [ 443.956091][ T13] -------------------------------------------- [ 443.962226][ T13] kworker/u8:1/13 is trying to acquire lock: [ 443.968179][ T13] ffff88802b853760 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet6_getname+0x15d/0x650 [ 443.977463][ T13] [ 443.977463][ T13] but task is already holding lock: [ 443.984810][ T13] ffff88802b853760 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: rds_tcp_recv_path+0xfe/0x340 [ 443.994351][ T13] [ 443.994351][ T13] other info that might help us debug this: [ 444.002390][ T13] Possible unsafe locking scenario: [ 444.002390][ T13] [ 444.009813][ T13] CPU0 [ 444.013068][ T13] ---- [ 444.016326][ T13] lock(k-sk_lock-AF_INET6); [ 444.020980][ T13] lock(k-sk_lock-AF_INET6); [ 444.025640][ T13] [ 444.025640][ T13] *** DEADLOCK *** [ 444.025640][ T13] [ 444.033762][ T13] May be due to missing lock nesting notation [ 444.033762][ T13] [ 444.042057][ T13] 4 locks held by kworker/u8:1/13: [ 444.047138][ T13] #0: ffff8880593e9148 ((wq_completion)krds_cp_wq#6/0){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 444.058770][ T13] #1: ffffc90000127c40 ((work_completion)(&(&cp->cp_recv_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 444.071524][ T13] #2: ffff88802b853760 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: rds_tcp_recv_path+0xfe/0x340 [ 444.073898][ T796] usb usb34-port1: unable to enumerate USB device [ 444.081504][ T13] #3: ffff88802b853908 (k-clock-AF_INET6){++.-}-{3:3}, at: rds_tcp_data_ready+0x113/0x9a0 [ 444.097889][ T13] [ 444.097889][ T13] stack backtrace: [ 444.103775][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 444.103794][ T13] Tainted: [L]=SOFTLOCKUP [ 444.103798][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 444.103805][ T13] Workqueue: krds_cp_wq#6/0 rds_recv_worker [ 444.103828][ T13] Call Trace: [ 444.103833][ T13] [ 444.103838][ T13] dump_stack_lvl+0xe8/0x150 [ 444.103854][ T13] print_deadlock_bug+0x279/0x290 [ 444.103869][ T13] __lock_acquire+0x253f/0x2cf0 [ 444.103882][ T13] ? __bfs+0x153/0x290 [ 444.103895][ T13] ? check_path+0x21/0x40 [ 444.103908][ T13] ? check_noncircular+0xda/0x150 [ 444.103922][ T13] ? __bfs+0x153/0x290 [ 444.103933][ T13] ? __pfx_usage_match+0x10/0x10 [ 444.103947][ T13] lock_acquire+0xf0/0x2e0 [ 444.103958][ T13] ? inet6_getname+0x15d/0x650 [ 444.103968][ T13] ? check_path+0x21/0x40 [ 444.103981][ T13] ? check_noncircular+0xda/0x150 [ 444.103995][ T13] lock_sock_nested+0x48/0x100 [ 444.104006][ T13] ? inet6_getname+0x15d/0x650 [ 444.104015][ T13] inet6_getname+0x15d/0x650 [ 444.104026][ T13] rds_tcp_conn_slots_available+0x288/0x470 [ 444.104038][ T13] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 444.104051][ T13] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 444.104065][ T13] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 444.104076][ T13] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 444.104087][ T13] ? rds_recv_worker+0xc6/0x310 [ 444.104100][ T13] ? process_scheduled_works+0xb02/0x1830 [ 444.104112][ T13] ? worker_thread+0xa50/0xfc0 [ 444.104126][ T13] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 444.104140][ T13] rds_recv_incoming+0x9f6/0x12d0 [ 444.104153][ T13] ? __pfx_rds_recv_incoming+0x10/0x10 [ 444.104164][ T13] ? skb_copy_bits+0x7e5/0x8f0 [ 444.104178][ T13] rds_tcp_data_recv+0x7f1/0xa40 [ 444.104193][ T13] __tcp_read_sock+0x196/0x970 [ 444.104203][ T13] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 444.104214][ T13] rds_tcp_data_ready+0x369/0x9a0 [ 444.104225][ T13] ? __pfx_sock_def_readable+0x10/0x10 [ 444.104235][ T13] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 444.104247][ T13] tcp_data_queue+0x1e2e/0x5e50 [ 444.104270][ T13] ? tcp_urg+0x106/0x410 [ 444.104284][ T13] ? __pfx_tcp_data_queue+0x10/0x10 [ 444.104298][ T13] ? __pfx_tcp_urg+0x10/0x10 [ 444.104311][ T13] ? ktime_get+0x45/0x200 [ 444.104320][ T13] ? seqcount_lockdep_reader_access+0x40/0x100 [ 444.104335][ T13] ? tcp_ecn_received_counters+0x2b7/0x7f0 [ 444.104351][ T13] tcp_rcv_established+0xf45/0x2740 [ 444.104368][ T13] ? __pfx_tcp_rcv_established+0x10/0x10 [ 444.104381][ T13] ? in6_dev_get+0x290/0x290 [ 444.104393][ T13] ? ip6_dst_check+0xe2/0x7e0 [ 444.104404][ T13] ? ip6_dst_check+0x5e3/0x7e0 [ 444.104414][ T13] ? __pfx_ip6_dst_check+0x10/0x10 [ 444.104425][ T13] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 444.104437][ T13] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 444.104446][ T13] __release_sock+0x1b8/0x3a0 [ 444.104456][ T13] release_sock+0x5f/0x1f0 [ 444.104468][ T13] rds_tcp_recv_path+0x2ee/0x340 [ 444.104479][ T13] ? __pfx_rds_tcp_recv_path+0x10/0x10 [ 444.104491][ T13] rds_recv_worker+0xc6/0x310 [ 444.104504][ T13] ? process_scheduled_works+0xa25/0x1830 [ 444.104516][ T13] process_scheduled_works+0xb02/0x1830 [ 444.104533][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 444.104546][ T13] ? assign_work+0x3d5/0x5e0 [ 444.104559][ T13] worker_thread+0xa50/0xfc0 [ 444.104576][ T13] kthread+0x388/0x470 [ 444.104584][ T13] ? __pfx_worker_thread+0x10/0x10 [ 444.104596][ T13] ? __pfx_kthread+0x10/0x10 [ 444.104605][ T13] ret_from_fork+0x51e/0xb90 [ 444.104618][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 444.104630][ T13] ? __switch_to+0xc7d/0x1450 [ 444.104642][ T13] ? __pfx_kthread+0x10/0x10 [ 444.104650][ T13] ret_from_fork_asm+0x1a/0x30 [ 444.104667][ T13] [ 444.472408][ T13] BUG: sleeping function called from invalid context at net/core/sock.c:3782 [ 444.481159][ T13] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 13, name: kworker/u8:1 [ 444.490160][ T13] preempt_count: 201, expected: 0 [ 444.495163][ T13] RCU nest depth: 0, expected: 0 [ 444.500069][ T13] INFO: lockdep is turned off. [ 444.504808][ T13] Preemption disabled at: [ 444.504813][ T13] [<0000000000000000>] 0x0 [ 444.513536][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 444.513552][ T13] Tainted: [L]=SOFTLOCKUP [ 444.513556][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 444.513563][ T13] Workqueue: krds_cp_wq#6/0 rds_recv_worker [ 444.513581][ T13] Call Trace: [ 444.513586][ T13] [ 444.513590][ T13] dump_stack_lvl+0xe8/0x150 [ 444.513606][ T13] __might_resched+0x378/0x4d0 [ 444.513621][ T13] lock_sock_nested+0x5d/0x100 [ 444.513633][ T13] inet6_getname+0x15d/0x650 [ 444.513645][ T13] rds_tcp_conn_slots_available+0x288/0x470 [ 444.513657][ T13] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 444.513670][ T13] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 444.513684][ T13] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 444.513695][ T13] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 444.513707][ T13] ? rds_recv_worker+0xc6/0x310 [ 444.513719][ T13] ? process_scheduled_works+0xb02/0x1830 [ 444.513731][ T13] ? worker_thread+0xa50/0xfc0 [ 444.513745][ T13] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 444.513759][ T13] rds_recv_incoming+0x9f6/0x12d0 [ 444.513772][ T13] ? __pfx_rds_recv_incoming+0x10/0x10 [ 444.513783][ T13] ? skb_copy_bits+0x7e5/0x8f0 [ 444.513797][ T13] rds_tcp_data_recv+0x7f1/0xa40 [ 444.513811][ T13] __tcp_read_sock+0x196/0x970 [ 444.513821][ T13] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 444.513832][ T13] rds_tcp_data_ready+0x369/0x9a0 [ 444.513843][ T13] ? __pfx_sock_def_readable+0x10/0x10 [ 444.513853][ T13] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 444.513866][ T13] tcp_data_queue+0x1e2e/0x5e50 [ 444.513884][ T13] ? tcp_urg+0x106/0x410 [ 444.513897][ T13] ? __pfx_tcp_data_queue+0x10/0x10 [ 444.513911][ T13] ? __pfx_tcp_urg+0x10/0x10 [ 444.513924][ T13] ? ktime_get+0x45/0x200 [ 444.513933][ T13] ? seqcount_lockdep_reader_access+0x40/0x100 [ 444.513942][ T13] ? tcp_ecn_received_counters+0x2b7/0x7f0 [ 444.513958][ T13] tcp_rcv_established+0xf45/0x2740 [ 444.513974][ T13] ? __pfx_tcp_rcv_established+0x10/0x10 [ 444.513988][ T13] ? in6_dev_get+0x290/0x290 [ 444.514000][ T13] ? ip6_dst_check+0xe2/0x7e0 [ 444.514010][ T13] ? ip6_dst_check+0x5e3/0x7e0 [ 444.514021][ T13] ? __pfx_ip6_dst_check+0x10/0x10 [ 444.514032][ T13] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 444.514043][ T13] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 444.514052][ T13] __release_sock+0x1b8/0x3a0 [ 444.514062][ T13] release_sock+0x5f/0x1f0 [ 444.514074][ T13] rds_tcp_recv_path+0x2ee/0x340 [ 444.514084][ T13] ? __pfx_rds_tcp_recv_path+0x10/0x10 [ 444.514097][ T13] rds_recv_worker+0xc6/0x310 [ 444.514110][ T13] ? process_scheduled_works+0xa25/0x1830 [ 444.514122][ T13] process_scheduled_works+0xb02/0x1830 [ 444.514139][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 444.514152][ T13] ? assign_work+0x3d5/0x5e0 [ 444.514164][ T13] worker_thread+0xa50/0xfc0 [ 444.514181][ T13] kthread+0x388/0x470 [ 444.514191][ T13] ? __pfx_worker_thread+0x10/0x10 [ 444.514203][ T13] ? __pfx_kthread+0x10/0x10 [ 444.514211][ T13] ret_from_fork+0x51e/0xb90 [ 444.514225][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 444.514237][ T13] ? __switch_to+0xc7d/0x1450 [ 444.514248][ T13] ? __pfx_kthread+0x10/0x10 [ 444.514257][ T13] ret_from_fork_asm+0x1a/0x30 [ 444.514289][ T13] [ 444.514296][ T13] BUG: scheduling while atomic: kworker/u8:1/13/0x00000202 [ 444.839181][ T13] INFO: lockdep is turned off. [ 444.843949][ T13] Modules linked in: [ 444.847833][ T13] Preemption disabled at: [ 444.847838][ T13] [<0000000000000000>] 0x0 [ 444.856542][ T13] Kernel panic - not syncing: scheduling while atomic: panic_on_warn set ... [ 444.865278][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G W L syzkaller #0 PREEMPT(full) [ 444.876095][ T13] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 444.881262][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 444.891319][ T13] Workqueue: krds_cp_wq#6/0 rds_recv_worker [ 444.897195][ T13] Call Trace: [ 444.900470][ T13] [ 444.903413][ T13] vpanic+0x56c/0xa60 [ 444.907380][ T13] ? __pfx_vpanic+0x10/0x10 [ 444.911860][ T13] ? rcu_is_watching+0x15/0xb0 [ 444.916601][ T13] panic+0xc5/0xd0 [ 444.920303][ T13] ? __pfx_panic+0x10/0x10 [ 444.924715][ T13] ? __pfx__printk+0x10/0x10 [ 444.929277][ T13] ? vprintk_emit+0x4eb/0x560 [ 444.933931][ T13] ? __pfx_vprintk_emit+0x10/0x10 [ 444.938944][ T13] check_panic_on_warn+0x89/0xb0 [ 444.943861][ T13] __schedule_bug+0xf6/0x150 [ 444.948425][ T13] __schedule+0x16a9/0x5340 [ 444.952942][ T13] ? __wake_up_klogd+0xe6/0x120 [ 444.957795][ T13] ? vprintk_emit+0x4eb/0x560 [ 444.962450][ T13] ? rcu_is_watching+0x15/0xb0 [ 444.967218][ T13] ? __pfx_vprintk_emit+0x10/0x10 [ 444.972233][ T13] ? unwind_next_frame+0xa5/0x23c0 [ 444.977329][ T13] ? do_raw_spin_lock+0x12b/0x2f0 [ 444.982326][ T13] ? __pfx___schedule+0x10/0x10 [ 444.987152][ T13] ? rcu_is_watching+0x15/0xb0 [ 444.991903][ T13] ? rcu_is_watching+0x15/0xb0 [ 444.996657][ T13] ? lock_release+0x4b/0x3d0 [ 445.001227][ T13] ? schedule+0x90/0x360 [ 445.005461][ T13] ? wq_worker_sleeping+0x63/0x250 [ 445.010579][ T13] schedule+0x164/0x360 [ 445.014953][ T13] __lock_sock+0x161/0x2c0 [ 445.019353][ T13] ? __pfx___lock_sock+0x10/0x10 [ 445.024276][ T13] ? do_raw_spin_lock+0x12b/0x2f0 [ 445.029278][ T13] ? __pfx_autoremove_wake_function+0x10/0x10 [ 445.035320][ T13] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 445.040666][ T13] ? lock_acquire+0x57/0x2e0 [ 445.045233][ T13] ? dump_stack_lvl+0x135/0x150 [ 445.050066][ T13] ? lock_sock_nested+0x6a/0x100 [ 445.054978][ T13] lock_sock_nested+0x9f/0x100 [ 445.059718][ T13] inet6_getname+0x15d/0x650 [ 445.064286][ T13] rds_tcp_conn_slots_available+0x288/0x470 [ 445.070156][ T13] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 445.076546][ T13] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 445.082334][ T13] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 445.088725][ T13] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 445.093814][ T13] ? rds_recv_worker+0xc6/0x310 [ 445.098642][ T13] ? process_scheduled_works+0xb02/0x1830 [ 445.104339][ T13] ? worker_thread+0xa50/0xfc0 [ 445.109083][ T13] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 445.114956][ T13] rds_recv_incoming+0x9f6/0x12d0 [ 445.119970][ T13] ? __pfx_rds_recv_incoming+0x10/0x10 [ 445.125412][ T13] ? skb_copy_bits+0x7e5/0x8f0 [ 445.130154][ T13] rds_tcp_data_recv+0x7f1/0xa40 [ 445.135070][ T13] __tcp_read_sock+0x196/0x970 [ 445.139808][ T13] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 445.145270][ T13] rds_tcp_data_ready+0x369/0x9a0 [ 445.150271][ T13] ? __pfx_sock_def_readable+0x10/0x10 [ 445.155704][ T13] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 445.161224][ T13] tcp_data_queue+0x1e2e/0x5e50 [ 445.166063][ T13] ? tcp_urg+0x106/0x410 [ 445.170284][ T13] ? __pfx_tcp_data_queue+0x10/0x10 [ 445.175461][ T13] ? __pfx_tcp_urg+0x10/0x10 [ 445.180028][ T13] ? ktime_get+0x45/0x200 [ 445.184329][ T13] ? seqcount_lockdep_reader_access+0x40/0x100 [ 445.190456][ T13] ? tcp_ecn_received_counters+0x2b7/0x7f0 [ 445.196248][ T13] tcp_rcv_established+0xf45/0x2740 [ 445.201438][ T13] ? __pfx_tcp_rcv_established+0x10/0x10 [ 445.207046][ T13] ? in6_dev_get+0x290/0x290 [ 445.211611][ T13] ? ip6_dst_check+0xe2/0x7e0 [ 445.216276][ T13] ? ip6_dst_check+0x5e3/0x7e0 [ 445.221014][ T13] ? __pfx_ip6_dst_check+0x10/0x10 [ 445.226100][ T13] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 445.230753][ T13] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 445.235834][ T13] __release_sock+0x1b8/0x3a0 [ 445.240488][ T13] release_sock+0x5f/0x1f0 [ 445.244890][ T13] rds_tcp_recv_path+0x2ee/0x340 [ 445.249818][ T13] ? __pfx_rds_tcp_recv_path+0x10/0x10 [ 445.255254][ T13] rds_recv_worker+0xc6/0x310 [ 445.259922][ T13] ? process_scheduled_works+0xa25/0x1830 [ 445.265622][ T13] process_scheduled_works+0xb02/0x1830 [ 445.271152][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 445.277111][ T13] ? assign_work+0x3d5/0x5e0 [ 445.281682][ T13] worker_thread+0xa50/0xfc0 [ 445.286256][ T13] kthread+0x388/0x470 [ 445.290303][ T13] ? __pfx_worker_thread+0x10/0x10 [ 445.295391][ T13] ? __pfx_kthread+0x10/0x10 [ 445.299958][ T13] ret_from_fork+0x51e/0xb90 [ 445.304524][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 445.309630][ T13] ? __switch_to+0xc7d/0x1450 [ 445.314646][ T13] ? __pfx_kthread+0x10/0x10 [ 445.319218][ T13] ret_from_fork_asm+0x1a/0x30 [ 445.323971][ T13] [ 445.327378][ T13] Kernel Offset: disabled [ 445.331703][ T13] Rebooting in 86400 seconds..