last executing test programs: 22.278229535s ago: executing program 0 (id=2312): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000c40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)="fe", 0x1}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0xc0) recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)=""/116, 0x74}], 0x1}, 0x9}], 0x2, 0x10000, 0x0) 21.870661925s ago: executing program 0 (id=2314): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x1, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff, 0x4, 0x2000, 0xa8, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0800002c0007012bbd7000000000e5087c00000c00018006000600843b000009000280040071008c0000000800", @ANYRES32, @ANYBLOB="2d0529800c00f800030000000000000004006080fa003b800400df00c1becb03dbe55b6c782cebd6a7bc78a21d1bc9f3c1"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) 21.245392147s ago: executing program 0 (id=2316): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20.040860874s ago: executing program 0 (id=2323): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0/../file0/../file0/../file0\x00') 19.747024646s ago: executing program 0 (id=2324): unshare(0x22020600) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) close(r0) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') setns(r1, 0x0) 19.192600445s ago: executing program 0 (id=2329): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) select(0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000000000000000, 0x7}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0xb}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(r1, 0x0, 0x0, 0x0, 0x5) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000440), 0x2, 0x1}}, 0x20) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) readv(r3, &(0x7f00000006c0)=[{&(0x7f0000002480)=""/4110, 0x100e}], 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000700)={{0x0, 0x1, 0xffffffff, 0xfffffff8, 'syz0\x00', 0x20}, 0x2, 0x2, 0x5, 0x0, 0x0, 0x9, 'syz0\x00', 0x0}) r4 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x1cba8c72}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x177ffb498171ed1, 0x8040010) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r4, 0x80049363, &(0x7f0000000180)) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x1, 0x2, &(0x7f0000000040)="82"}) syz_open_dev$tty1(0xc, 0x4, 0x4) 18.540820837s ago: executing program 32 (id=2329): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) select(0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000000000000000, 0x7}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0xb}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(r1, 0x0, 0x0, 0x0, 0x5) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000440), 0x2, 0x1}}, 0x20) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) readv(r3, &(0x7f00000006c0)=[{&(0x7f0000002480)=""/4110, 0x100e}], 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000700)={{0x0, 0x1, 0xffffffff, 0xfffffff8, 'syz0\x00', 0x20}, 0x2, 0x2, 0x5, 0x0, 0x0, 0x9, 'syz0\x00', 0x0}) r4 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x1cba8c72}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x177ffb498171ed1, 0x8040010) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r4, 0x80049363, &(0x7f0000000180)) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x1, 0x2, &(0x7f0000000040)="82"}) syz_open_dev$tty1(0xc, 0x4, 0x4) 5.88187454s ago: executing program 3 (id=2401): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863fff5cfe6cb55b5bb9fa6935849e604fe035", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4bb3766b9a21501f94c1568b13756b66f74f46cf8017", 0x86}], 0x2, 0x0, 0x0, 0x4000004}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 5.640553053s ago: executing program 3 (id=2403): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4e5ef4b7a78df6d, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0xd, 0x3, 0x1, 0x0, 0x38}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS, @NFTA_SET_ELEM_FLAGS]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe8}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x13, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) 5.04629901s ago: executing program 2 (id=2407): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0xc0011022, 0x0, 0x80000000}]}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) 4.970607718s ago: executing program 3 (id=2408): r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) io_setup(0x9, &(0x7f0000000240)=0x0) r3 = eventfd2(0x7, 0x0) io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xff45, r1, &(0x7f0000000080)="d1", 0x1, 0x7, 0x0, 0x5, r3}]) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 4.540364811s ago: executing program 3 (id=2411): r0 = socket(0x8000000010, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x2000400c) write(r0, &(0x7f00000002c0)="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", 0xfc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = io_uring_setup(0x1e23, &(0x7f0000000280)={0x0, 0x80000, 0x2, 0x0, 0x345}) socket$inet(0x2, 0x80000, 0x0) r3 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12012000f1048108cd060202d4921f01000109021b1901000000f30904150001da0900000905", @ANYRES32], 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000f40)={'filter\x00', 0x102, 0x4, 0x404, 0x10c, 0x218, 0x10c, 0x324, 0x324, 0x324, 0x4, 0x0, {[{{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @remote, @multicast1}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @multicast2, @empty, 0x9, 0xffffffff}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'batadv_slave_1\x00', 'ipvlan1\x00'}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e9fb760d26c0", @multicast1, @broadcast}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x450) r5 = syz_usb_connect$cdc_ecm(0x4, 0x78, &(0x7f00000003c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x1, 0x1, 0x80, 0xf0, 0x6, "", [{{0x9, 0x4, 0x0, 0x9, 0x3, 0x2, 0x6, 0x0, 0x81, {{0x8, 0x24, 0x6, 0x0, 0x0, "a25b47"}, {0x5, 0x24, 0x0, 0xcc}, {0xd, 0x24, 0xf, 0x1, 0xfffffff9, 0x0, 0x5, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0xba}, @mbim_extended={0x8, 0x24, 0x1c, 0xd4d, 0x5, 0x1}, @acm={0x4, 0x24, 0x2, 0x6}, @country_functional={0xe, 0x24, 0x7, 0x95, 0x6, [0x8, 0x7, 0x6, 0x9]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0xf9, 0xfd, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x7f, 0x16, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x80, 0x8b, 0xf}}}}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x200, 0x50, 0xb, 0xb, 0xff, 0x8}, 0x24, &(0x7f0000000480)={0x5, 0xf, 0x24, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x1a, 0x7f, 0x0, 0xce, 0xf}, @ss_container_id={0x14, 0x10, 0x4, 0x64, "a88b2fc7ee2d2d29b0874eaf8cb2ec1c"}]}, 0x9, [{0xa1, &(0x7f00000004c0)=@string={0xa1, 0x3, "377996beb3fc4dd8a62759a8b210caa453b6f01fd2422134ded2aaa182374644a7cbda52eb030613fc89e300b079dea99b33ddbef58087424d3d2e6c8b2b2c79ad9dfd34ce5ec8f987f46c44ae872712d92775f2a4077eb36919ff807f0f592a7737083809f006203bccb6d0d2de9ef0e783ee5013dc36ccd7521e9bd6390657f44e57319e8a63e395b4d17f5b5cb7fe1ddd659d70a452993987d296a0dfaa"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x404}}, {0xf6, &(0x7f00000005c0)=@string={0xf6, 0x3, "e4fd98e72d2033bc9f63c2383de71981a6a681ffe7c56f1eaf1272bec967fa78f7c1f6d683698bb4ffb040167fac01eeea13c793ae978c32320e56cc276bc25eb8e6d3bda9a9b33be82dd4f363ff3efa2fde49c844296044a0aee059139919c7a259ca31dcb929af72e8f2deabdee697fc3f2114ff94e0630a81936a5253b5f1aa4a0c1458791bd8f31f95cf72391d551f8e2c3f47421a60c2bf5879624bfee4b264287df1e192f399dbc1a15d6226fc286287c2df74ae0d974031a005ff1cd54e796b3d2a4a72b18be640b9445063a171ad88062864bc631bea38afc42929a89258daffed5f0d9b9d7d1b169e935ffbefbb1004"}}, {0x78, &(0x7f0000001780)=ANY=[@ANYBLOB="780372f1859c1d1b00474a6699f3418b5aa14d79fa2aaf8bfc0a35624170d1793927fec883d2980168120c8d56e504481371c717fb78459a4f8fc1ec575dec977d54dec053f40c7871a3cd128a3720be693ecf7c989af9390234145109bf08496cb00700020000000000006457b7ea90ba47ad09006cf8e16d26821966ee0c1838434cf7bc0ed1ede1f093ce936d824d293e720e604c86c2813e613757606beed2cc2a04784e4b5f63d08d6d649a9d8e1c4fa059d115260873203c6195a7a8fc908685ffa6831f57d4d77446776bdc8290c43e2f660d1da0a7fbe22d91b07ea3f314b8bdbde525df20e0920000000000"]}, {0x77, &(0x7f0000000740)=@string={0x77, 0x3, "20d9930ca64b724a9b3add61b695e77a2b8a73822e3db9d441690a26fc2a109153ef8a36d76ca354460fa7b49ed35daa36b76e0f30478eeb70e0c812d8b1d0ceb746b4c6fbca6d2f99749eab3acd23810b3ad3aa1801c3886004e22634fba8f81aed75708e197d65382bbd4a63602a54ad3980060e"}}, {0x44, &(0x7f00000007c0)=@string={0x44, 0x3, "2e304b6b76e6c1c4652a19d8ba399ab2e975678de6f05cffbe8c5c35b946e8e32aa49cce69604ae618039ab6d1d956b2041ab6a637793bca7583fb02585512759b0d"}}, {0xb8, &(0x7f0000000840)=@string={0xb8, 0x3, "2b292d1e0b9f08bf1f489a03a97ee443926cb2b9a3969b31435dc3985e11aa2ba0a92b16cafa6c6f15a7e195497ce632ad3837df3b10fd14ca2c26537f9437af8f633e7c5aae6959206adad4f359c298ba8ea4431fc0a6fcb2611be6de4fa1a8af0dda22ffb4604b0fa069d4cc85b410e34ffd983d72c0997748a90fe6afcdb1a6737ae0cf53d0f66e458379e1d97a0b9a0093ffde766db3600d45528442370c45960bceb30d228256f2b3589718de45b40d72679049"}}, {0x2, &(0x7f0000000900)=@string={0x2}}, {0xbd, &(0x7f0000000980)=@string={0xbd, 0x3, "3e2b168c2ca63d85da36e72e62a46da05397a1d599c2088cb7e07bde98a65c10c493eab6716b48e66a3f576791f701e0d5529549500d34229cfbf627bc91a1c40674678790cb76805599b07523821aaff0177a3bc1739e664fa76e9357821db333e72d988b3e84dce3a99aa3d6019a061aa25751f6ee79b482e3adbda0efbc31095e5d0b9b16017d07da3d6444b89d332b74939fa62ae8b84e9aeaa709192ab137cf098dfdf0c7f7c4c0fdda54c2287099a498a93efcecd67f22dc"}}]}) syz_usb_control_io$cdc_ecm(r5, &(0x7f0000000bc0)={0xc, &(0x7f0000000ac0)={0x40, 0x7, 0x85, {0x85, 0xd, "873854b1f1894b3d2d555a7d6b105ebb1a15fcbafd81f18fc9a7f044ce41b8de826c923cc2f9e897f517ecbcf28530ae8e205da4553065e6dfd737c4ab4fbb4895c99f1224fe0a5309f170e28417ad0207a6f7dd97856d42449f986e5a0d0ec9713caa4bd6904ca96346973809f5f4fcf6cded33937227988b96c8ef9c5af308c6ad1b"}}, &(0x7f0000000b80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000d80)={0x10, &(0x7f0000000c00)={0x40, 0x15, 0xeb, "bd5d5efef792f8ad9984c53ee420bd34473e51829361f40243e0a8362c52d79e4b9548dbb8ba046f21e8e1af30be065158c2d0b8b3604d269b1a6a80c9f7aac2dabe12f209425d3cd6982e94ca5f09d20cbf973dd51bff96641e2932c20fd160a3a09fefd1577dd963010b491df7cceb9aed2655d2f3b03bdbae75c25ffebe74ccce5f80a5966ebf84470ed503283c01cf236f218eca73c9dcdd9caaa9e03bcdd90087b75d60b8aee58af83521b44e899d5f13ec133ed77cda13471047b372920ce77f455f68d64d817a5a0c4589cae4d32e07400dd1affa5db08fc2d86526ae737e9d2516ef6becf109d1"}, &(0x7f0000000d00)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000d40)={0x0, 0x8, 0x1, 0xd}}) syz_usb_control_io$uac1(r3, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x44}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd1e, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_ACT={0x50, 0x3, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x7, 0x8, 0x6, 0x5f3}}]}, {0x60}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8848}, 0x4080) io_uring_enter(r2, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) socket$inet_tcp(0x2, 0x1, 0x0) openat$vmci(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000dc0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0xdc, 0x0, 0x8, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0x6, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8, 0x7, 0x6}}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x80, 0x40, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x9, 0xe}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x1, 0x7, 0x4e}}}}}]}}]}}, &(0x7f0000001700)={0xa, &(0x7f0000000e40)={0xa, 0x6, 0x310, 0x7, 0xc0, 0x0, 0x40, 0x8}, 0x10, &(0x7f0000000e80)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0x4, 0x0, 0x7894, 0x7}]}, 0x6, [{0x89, &(0x7f00000013c0)=@string={0x89, 0x3, "75f2d94e3425a5f93b552a78ffd9479429482c69bb83beeacb5a3e48569edc7aa70a50e9cd82b1a87b788633e83b994c5e48557164e87c04dcaed849ccc5efb4c18ad8536ff6040fc74eb457f249da7986d2e6425bddd5cbe277888355a3d9f9d3bb55c0e33d76f560bee5bf16f22700414d3e31ab4a28c7d894c17ef838ab501798b2ddb7668f"}}, {0xa1, &(0x7f0000001480)=@string={0xa1, 0x3, "9427edc1e8c6342649237683f4f66214763b032fbe8ee22fdbd134fdb3d80f4733985e6c32b191335f211b6872317c0a7fb8810992d8d4e3e018b97641fee30e54ed4f2842482583dfd79626210b4e0156240679463e7e9ffe5c1974b6d4e993a703730450afba54a6677634874d27b1b684c193c8679ef6c65bc90dd1e31d0b7c79cad406c56273fd22d44f9d3bbfb24bd9a011c771c9235a0c6c45b44a8e"}}, {0x41, &(0x7f0000001540)=@string={0x41, 0x3, "1190f79f31ac062b07480c4d6147c0dce57b87545369f6e580d58a6a1a84e9ba8e9812895a237594fed156f2aa8293cb8f5fae3cb7bf28a6b6795cc8a4ec6c"}}, {0x14, &(0x7f00000015c0)=@string={0x14, 0x3, "18560d399a128ff114c60adb22da044ce03e"}}, {0xb3, &(0x7f0000001600)=@string={0xb3, 0x3, "b72d47f4d79481493b97141c367a1ac023074a695efef3405a25fc98b90bf2cdae29d431c51b690c29f615f1b5308543db4142850c841be556c8123a633459052ed6822283083d63bc3ddbfaf7b5b18cb9a453055da80844225e48610bbf3ed7c72ac7d1a25134bb14fd64e15eb99efeaee5549fe6c06910450befb075ed82fb7f8e1f76aa9653cbdd4b3c917fd3e86b1fc0b795bd2796f4fe2d75ce1d3ea0d36fedf5c05eebd00266b886b46b2b1eb58f"}}, {0x4, &(0x7f00000016c0)=@lang_id={0x4, 0x3, 0x80c}}]}) r8 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r8, 0x114, 0xa, &(0x7f0000000000)=0x3, 0x4) 4.520690747s ago: executing program 2 (id=2412): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40440, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000080)={0x1, 0x0, [{0x1, 0x0, 0x7, 0x5, 0xe, 0xffffffff, 0x7}]}) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000001f00)=@vmx={0x0, 0x0, 0x2080, {0x8080000, 0x30000, {}, 0x0, 0x6}, {"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", "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"}}) 4.263900197s ago: executing program 4 (id=2413): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", "05e2e505", "000800003f98afbe"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) 4.057181689s ago: executing program 2 (id=2415): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf51, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0xfaea, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 4.023612907s ago: executing program 4 (id=2416): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000}) 3.705582862s ago: executing program 2 (id=2417): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x40, 0xa, 0x6, "6ef1989edd08"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="20131d00000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000280)={0x20, 0xb, 0x23, "1c63db6928c012280003ca0892675d4bd9de77c02c179cb469712667377c9aa546d5b0"}, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x85, 0x4, 0xd4}, 0x0, 0x0, 0x0}) 3.327671498s ago: executing program 4 (id=2418): symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00') r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 3.072449823s ago: executing program 4 (id=2419): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000000040)) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000001"], 0xc) 2.980624018s ago: executing program 1 (id=2420): syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x20902c, 0x0, 0x0, 0x0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x282, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, 0x0, 0x244) 2.715333025s ago: executing program 1 (id=2422): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) readv(r0, &(0x7f00000024c0)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x20) close_range(r0, r0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x2}, 0x18, 0x0) landlock_restrict_self(r1, 0xe) 1.856643812s ago: executing program 1 (id=2427): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) read$usbmon(r1, 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.796037637s ago: executing program 4 (id=2428): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000880)) 1.787841529s ago: executing program 5 (id=2429): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x170bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0x44, 0x2, [@TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0x0, 0x3, 0x0, 0x8, {0x5, 0x2, 0x0, 0xa, 0xccc}, {0x5, 0x1, 0x0, 0x6, 0x2, 0x4}, 0x1, 0x0, 0x800000}}]}]}}, @TCA_RATE={0x4, 0x5, {0x1}}]}, 0x78}}, 0x0) 1.604141618s ago: executing program 4 (id=2430): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x40, 0x2, 0x3}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@typed={0x5, 0x4, 0x0, 0x0, @str='\x00'}, @generic="3104d072"]}]}, @typed={0x8, 0x2, 0x0, 0x0, @uid}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000002c0)='s\xefurce', &(0x7f0000000300)='\xb0\xfb\xd9\x9a\xbe\r\xcc:\x9b\xd0}\xe8\xff\xff\xff\xff\xff\xff\xff\x7f\xce\xf5\x1a\x01\xd6\a\xfe\xb8\x92~wS\x87\xd9\x9e0y\xc9\x8cw-zu(ht\xa1~\x9a\x8d^+\x9f\xee\x9a(&W\\\xbb\xd5W\xeb\x06\x9dva\x06\xe3\x97\xa1\x88\x83W{\x00\xff\xff\xff\xff\xff\xff\xff\xe9\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00)o\b~\xe3t`\xc9=;o\xe5\xb4T)\x04\xf9k\xfb%t\xa7\x80c\xbb\xeb\x10\xb8\x01', 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120120029ee0a508f00a57d105fe0102030109021b00010700a0020904460991740dcd7bd4b2be52394b5d8701a2471f0209050210ef030e4204584713ed0e5b7a0576e91b6bfb"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5}]}, 0x1c}}, 0x4000080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)={0x40, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {0x8}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0x400}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x3, 0xe, 0xf9}, @void}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r4, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r7, 0x1, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80084}, 0x340488c0) userfaultfd(0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r9, 0x8955, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_ringparam={0x10, 0xa, 0x5, 0xfff, 0xf, 0x8, 0x9, 0x1001, 0x92e}}) syz_open_procfs(0xffffffffffffffff, 0x0) 1.557904016s ago: executing program 1 (id=2431): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)=@x86={0x6, 0x0, 0x8, 0x0, 0x4, 0x8, 0x6, 0xb, 0x83, 0xe, 0x5, 0xa, 0x0, 0x101, 0x2a, 0x0, 0x0, 0x0, 0x0, '\x00', 0xff, 0x100000d}) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f0000000180)) 1.526024819s ago: executing program 5 (id=2432): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="119b030e7deba3ec69da3c0cce0764c6baa1660000000000000000000000b8000000000000000000", 0x28) r1 = accept4(r0, 0x0, 0x0, 0x80000) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/80, 0x50}], 0x1}, 0x100) sendmsg$nl_netfilter(r1, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000003f80)=ANY=[], 0x2624}, 0x1, 0x0, 0x0, 0x24004080}, 0x10) 1.276513873s ago: executing program 3 (id=2433): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) select(0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000000000000000, 0x7}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0xb}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, 0x0, 0x0) fsetxattr$security_capability(r1, 0x0, 0x0, 0x0, 0x5) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000440), 0x2, 0x1}}, 0x20) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x5f85, &(0x7f0000000600)={0x0, 0x7d71, 0x20, 0x0, 0x368}, &(0x7f0000000280), &(0x7f0000000000), &(0x7f0000000000)) readv(r3, &(0x7f00000006c0)=[{&(0x7f0000002480)=""/4110, 0x100e}], 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000700)={{0x0, 0x1, 0xffffffff, 0xfffffff8, 'syz0\x00', 0x20}, 0x2, 0x2, 0x5, 0x0, 0x0, 0x9, 'syz0\x00', 0x0}) r4 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x1cba8c72}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x177ffb498171ed1, 0x8040010) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r4, 0x80049363, &(0x7f0000000180)) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x1, 0x2, &(0x7f0000000040)="82"}) syz_open_dev$tty1(0xc, 0x4, 0x4) 1.206694592s ago: executing program 1 (id=2434): sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 1.112863307s ago: executing program 5 (id=2435): ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x200}], 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 896.766492ms ago: executing program 5 (id=2436): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {0x0, 0x0, 0x4cf5}, 0x3, [0x0, 0x0, 0x2, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x4, 0xfffffffd, 0x0, 0x0, 0x80000000, 0x4, 0x0, 0x1a8, 0x2, 0x10000000, 0x7, 0x0, 0xfffffffe, 0x0, 0xfffffff4, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x296, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004, 0xfffffffc, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x4, 0xffff, 0x8000000, 0x1, 0x0, 0x2, 0x0, 0xfffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7ff, 0x8, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x4, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1fc, 0x3, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xb, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xb7, 0x807ffff, 0x0, 0x0, 0x0, 0x5b7f28b1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xa481, 0x0, 0x2, 0x0, 0xb, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x9d2, 0x0, 0x0, 0x0, 0x0, 0xc4, 0x0, 0x80000001, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x3b6, 0x7, 0x3, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0xffffff45, 0x200], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x7, 0x1000, 0xfffffffd, 0x0, 0x5, 0x54, 0x1, 0x0, 0x0, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r0, 0x5501) 498.637519ms ago: executing program 1 (id=2437): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x56e, 0xfc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x2, 0xff, {0x9, 0x21, 0xff7f, 0x57, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0xe6, 0x64}}}}}]}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000004600)={0x14, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) 486.212029ms ago: executing program 2 (id=2438): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000180)='\x00`', 0x2, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @private=0xa010102}, 0x10) listen(r0, 0xda90) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x2000}) accept4(r0, 0x0, 0x0, 0x0) 468.513309ms ago: executing program 5 (id=2439): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x9000) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x437, 0x3, 0xffffffff, {0x0, 0x0, 0x0, r2, 0x51b0b, 0x1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48830}, 0x0) sendto$packet(r0, &(0x7f00000001c0)="6f3d12caa129b05b937e", 0xa, 0x40008015, &(0x7f0000000180)={0x11, 0x8100, r2, 0x1, 0xe9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 234.422611ms ago: executing program 3 (id=2440): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000080)={{0x4, 0xffffffff, 0xf, 0x9a, 0x3, 0x1, 0xf, 0x4, 0x0, 0xf9, 0x0, 0x7f}, {0xd000, 0x8080000, 0x3, 0x5, 0xc2, 0xc0, 0x9, 0x66, 0xc5, 0x7, 0x30, 0x41}, {0xdddd0000, 0xdddd1000, 0x10, 0x6, 0xb, 0x34, 0xe, 0x6, 0x3, 0xc, 0x2, 0xff}, {0x8000000, 0x30000, 0xc, 0x58, 0x7f, 0x76, 0x2, 0xc, 0x7f, 0xf8, 0x9, 0xf}, {0x504ce1cb89483871, 0x1000, 0xa, 0xe4, 0x80, 0x2, 0x9, 0x3, 0x1, 0x4, 0x4, 0x6}, {0xdddd1000, 0x6005, 0x3, 0x2, 0x3, 0x7, 0x1, 0xb7, 0x2, 0x21, 0xf8, 0xd}, {0xffff1000, 0x100000, 0x10, 0x2, 0x8, 0x3, 0x6, 0x0, 0x9, 0xb, 0x8, 0x87}, {0xeeee0000, 0x5000, 0xc, 0x6, 0xff, 0x0, 0x9, 0x80, 0x9, 0x8f, 0xdb, 0x31}, {0xe000, 0x59}, {0x4, 0x7}, 0x10000, 0x0, 0x1, 0x151, 0x9, 0x1000, 0xdddd1000, [0x8, 0x80000000003, 0x2, 0x3]}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0x6e0, 0x0, 0x400000000000000}]}) 85.34133ms ago: executing program 5 (id=2441): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001) r2 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) fcntl$setsig(r1, 0xa, 0x1c) sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015) 0s ago: executing program 2 (id=2442): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) kernel console output (not intermixed with test programs): p0 maxpacket: 32 [ 385.934468][ T5722] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 385.958940][ T5722] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.997675][ T5722] usb 3-1: config 0 descriptor?? [ 386.112576][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 386.203130][ T5708] usb 4-1: unable to get BOS descriptor or descriptor too short [ 386.225928][ T5708] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 386.249579][ T5722] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 386.250204][ T5708] usb 4-1: can't read configurations, error -71 [ 386.297087][ T5722] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 386.344353][ T5722] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 386.356410][ T5722] usb 3-1: media controller created [ 386.379568][ T5722] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 386.447906][ T5722] az6027: usb out operation failed. (-71) [ 386.457985][ T5722] az6027: usb out operation failed. (-71) [ 386.467326][T11039] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 386.479813][ T5722] stb0899_attach: Driver disabled by Kconfig [ 386.491840][ T5722] az6027: no front-end attached [ 386.491840][ T5722] [ 386.505258][T11039] kAFS: unable to lookup cell 'ÿ' [ 386.521857][ T29] usb 2-1: USB disconnect, device number 92 [ 386.528848][ T5722] az6027: usb out operation failed. (-71) [ 386.549634][ T5722] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 386.593748][ T5722] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input62 [ 386.637508][ T5722] dvb-usb: schedule remote query interval to 400 msecs. [ 386.651644][ T5722] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 386.677396][ T5722] usb 3-1: USB disconnect, device number 85 [ 386.791837][T11043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1861'. [ 386.802164][ T5722] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 386.902627][ T5708] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 387.082473][ T5708] usb 4-1: Using ep0 maxpacket: 8 [ 387.172533][ T5724] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 387.252698][ T5722] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 387.356106][ T5724] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.406553][ T5724] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 387.433789][ T5722] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.465346][ T5724] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.481210][ T5722] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.481257][ T5722] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 387.481277][ T5722] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.492251][ T5722] usb 5-1: config 0 descriptor?? [ 387.518141][ T5724] usb 1-1: config 0 descriptor?? [ 387.730577][ T5724] usbhid 1-1:0.0: can't add hid device: -71 [ 387.747251][ T5724] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 387.779114][ T5724] usb 1-1: USB disconnect, device number 91 [ 387.909799][ T5722] hid_parser_main: 113 callbacks suppressed [ 387.909870][ T5722] cm6533_jd 0003:0D8C:0022.003E: unknown main item tag 0x0 [ 387.946877][ T5722] cm6533_jd 0003:0D8C:0022.003E: unknown main item tag 0x0 [ 388.000248][ T5722] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.003E/input/input63 [ 388.074885][ T5722] cm6533_jd 0003:0D8C:0022.003E: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 388.150317][ T5722] usb 5-1: USB disconnect, device number 84 [ 388.245017][ T29] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 388.279182][T11067] fido_id[11067]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 388.402543][ T29] usb 1-1: Using ep0 maxpacket: 16 [ 388.417312][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.465279][ T29] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.40 [ 388.510308][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.541717][ T29] usb 1-1: config 0 descriptor?? [ 388.577730][ T29] input: USB Pegasus Device 0e20:0101 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input64 [ 388.766182][ C1] usb 1-1: unknown answer from device [ 388.771783][ C1] input input64: Pen battery low [ 388.965621][T11081] snd_dummy snd_dummy.0: control 1:-1:-8:syz0:32 is already present [ 388.973838][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 388.981084][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 388.988374][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 388.995920][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.003088][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.010234][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.017470][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.024659][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.030331][ T4984] usb 1-1: control msg error: -71 [ 389.031855][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.044882][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.052168][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.059487][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.066859][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.074228][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.082068][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.089747][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.097120][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.104837][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.112125][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.119405][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.126689][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.134114][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.141417][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.148692][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.155908][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.156102][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.156311][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.163499][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.163692][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.163860][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.164022][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.171208][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.171430][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.178704][ C1] usb 1-1: pegasus_irq - urb shutting down with status: -2 [ 389.190581][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.190776][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.190979][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.191176][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.263886][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.271707][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.278958][ T4984] usb 1-1: control msg error: -71 [ 389.284094][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.291298][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.298549][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.299720][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.306943][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.314164][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.321321][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.328548][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.335760][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.342933][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.350127][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.357346][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.364566][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.371750][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.378973][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.386368][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.393667][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.400893][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.409237][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.416499][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.423718][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.430903][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.438129][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.445326][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.452532][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.459690][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.466942][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.474187][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.481346][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.488554][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.495745][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.503027][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.511700][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.518943][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.526154][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.533388][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.540587][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.547865][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.555072][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.562275][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.569523][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.576718][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.583922][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.591110][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.598335][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.605537][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.613905][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.621129][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.628398][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.635584][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.642788][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.649972][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.657174][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.664380][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.671555][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.678765][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.685972][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.693157][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.700353][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.707632][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.716019][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.723208][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.730392][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.737587][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.744791][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.751977][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.759152][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.766356][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.773546][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.780725][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.787921][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.795146][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.802328][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.803760][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.810951][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.819343][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.826558][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.833886][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.841037][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.848259][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.855434][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.862771][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.869942][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.877120][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.884345][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.891487][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.898704][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.905901][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.913096][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.928554][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.935775][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.943248][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.950504][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.957710][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.964961][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.972124][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.976528][ T29] usb 1-1: USB disconnect, device number 92 [ 389.979394][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 389.999374][ C0] usb 1-1: pegasus_irq - usb_submit_urb failed with result -19 [ 390.129290][ T5708] usb 4-1: unable to get BOS descriptor or descriptor too short [ 390.178000][ T5708] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 390.188584][ T5708] usb 4-1: can't read configurations, error -71 [ 390.208600][ T5708] usb usb4-port1: attempt power cycle [ 390.473386][T11095] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1874'. [ 390.672698][ T5722] usb 2-1: new low-speed USB device number 93 using dummy_hcd [ 390.856060][ T5722] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 390.873381][ T29] usb 5-1: new full-speed USB device number 85 using dummy_hcd [ 390.907660][ T5722] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 390.961744][ T5722] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 391.000305][ T5722] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 391.000332][ T5722] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.019375][T11093] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 391.024134][ T5722] hub 2-1:1.0: bad descriptor, ignoring hub [ 391.024168][ T5722] hub 2-1:1.0: probe with driver hub failed with error -5 [ 391.026695][ T5722] cdc_wdm 2-1:1.0: skipping garbage [ 391.026707][ T5722] cdc_wdm 2-1:1.0: skipping garbage [ 391.055582][ T5722] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 391.055662][ T5722] cdc_wdm 2-1:1.0: Unknown control protocol [ 391.097210][ T29] usb 5-1: config 0 has no interfaces? [ 391.097246][ T29] usb 5-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 391.097261][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.099093][ T29] usb 5-1: config 0 descriptor?? [ 391.341652][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 391.348262][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 391.354907][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 391.361491][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 391.367996][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 391.368009][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 391.374681][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 391.374693][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 391.374864][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 391.374874][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 391.635172][T11125] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 391.658446][ T5722] usb 2-1: USB disconnect, device number 93 [ 391.699966][T11125] kAFS: unable to lookup cell 'ÿ' [ 391.892460][ T29] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 391.982536][ T5724] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 392.067197][ T29] usb 1-1: Using ep0 maxpacket: 32 [ 392.080922][ T29] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 392.090439][T11130] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 392.101298][T11130] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 392.111541][ T29] usb 1-1: config 0 has no interface number 0 [ 392.119913][ T29] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 392.129744][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.138123][ T5724] usb 3-1: Using ep0 maxpacket: 8 [ 392.141183][ T29] usb 1-1: Product: syz [ 392.147660][ T29] usb 1-1: Manufacturer: syz [ 392.163379][ T29] usb 1-1: SerialNumber: syz [ 392.172070][ T29] usb 1-1: config 0 descriptor?? [ 392.188037][ T29] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 392.414925][ T29] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 392.472041][ T29] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 392.772485][ T24] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 392.856399][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 392.857880][ T5722] usb 1-1: USB disconnect, device number 93 [ 392.877626][ T5722] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 392.909165][ T5722] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 392.937743][ T5722] quatech2 1-1:0.51: device disconnected [ 392.960683][ T24] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 392.970100][T11143] snd_dummy snd_dummy.0: control 1:-1:-8:syz0:32 is already present [ 392.978234][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.993933][ T24] usb 2-1: Product: syz [ 393.002353][ T24] usb 2-1: Manufacturer: syz [ 393.010648][ T24] usb 2-1: SerialNumber: syz [ 393.031250][ T24] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 393.055832][ T29] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 393.321081][ T5722] usb 2-1: USB disconnect, device number 94 [ 393.712845][ T24] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 393.897138][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.934974][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.976505][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 394.007817][ T996] usb 5-1: USB disconnect, device number 85 [ 394.010745][ T24] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 394.051181][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.104618][ T29] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 394.123862][ T29] ath9k_htc: Failed to initialize the device [ 394.134335][ T24] usb 1-1: config 0 descriptor?? [ 394.164573][ T5722] usb 2-1: ath9k_htc: USB layer deinitialized [ 394.338172][T11158] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 394.358286][T11158] kAFS: unable to lookup cell 'ÿ' [ 394.615680][ T5722] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 394.640627][ T24] plantronics 0003:047F:FFFF.003F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 394.714898][ T5724] usb 3-1: unable to get BOS descriptor or descriptor too short [ 394.736680][ T5724] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 394.781391][ T5724] usb 3-1: can't read configurations, error -71 [ 394.812605][ T5722] usb 5-1: Using ep0 maxpacket: 8 [ 394.966392][ T996] usb 1-1: USB disconnect, device number 94 [ 395.086553][T11163] snd_dummy snd_dummy.0: control 1:-1:-8:syz0:32 is already present [ 395.660784][T11178] netlink: 762 bytes leftover after parsing attributes in process `syz.3.1904'. [ 396.039809][T11185] snd_dummy snd_dummy.0: control 1:-1:-8:syz0:32 is already present [ 396.090103][T11183] bridge_slave_0: left allmulticast mode [ 396.095977][T11183] bridge_slave_0: left promiscuous mode [ 396.103665][T11183] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.623234][T11197] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1908'. [ 397.212720][ T29] usb 4-1: new full-speed USB device number 86 using dummy_hcd [ 397.429021][ T29] usb 4-1: config 0 has no interfaces? [ 397.445674][ T29] usb 4-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 397.484017][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.538282][ T29] usb 4-1: config 0 descriptor?? [ 397.740209][ T5722] usb 5-1: unable to get BOS descriptor or descriptor too short [ 397.765205][ T5722] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 397.799721][ T5722] usb 5-1: can't read configurations, error -71 [ 397.955716][T11219] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 397.992575][T11219] kAFS: unable to lookup cell 'ÿ' [ 398.252530][ T5722] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 398.272477][ T29] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 398.433256][ T5722] usb 5-1: Using ep0 maxpacket: 8 [ 398.452948][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 398.471238][ T5722] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 398.514901][ T5722] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.535389][ T5722] usb 5-1: Product: syz [ 398.549809][ T5722] usb 5-1: Manufacturer: syz [ 398.563240][ T5722] usb 5-1: SerialNumber: syz [ 398.588410][ T5722] usb 5-1: config 0 descriptor?? [ 398.620298][ T5722] gspca_main: se401-2.14.0 probing 047d:5003 [ 399.020321][ T5722] gspca_se401: Frame size: 5x0 bayer [ 399.044996][ T5722] gspca_se401: Frame size: 1x0 1/16th janggu [ 399.054095][ T5722] gspca_se401: Frame size: 3x0 1/4th janggu [ 399.061673][ T5722] gspca_se401: Frame size: 81x0 bayer [ 399.069059][ T5722] gspca_se401: Frame size: 1x0 1/16th janggu [ 399.081011][ T5722] gspca_se401: Frame size: 7x0 bayer [ 399.236191][ T5722] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input66 [ 399.289568][ T5722] usb 5-1: USB disconnect, device number 87 [ 399.757620][T11234] snd_dummy snd_dummy.0: control 1:-1:-8:syz0:32 is already present [ 399.923476][ T5722] usb 4-1: USB disconnect, device number 86 [ 400.253926][T11251] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 400.292659][T11251] kAFS: unable to lookup cell 'ÿ' [ 400.309609][T11249] snd_dummy snd_dummy.0: control 1:-1:-8:syz0:32 is already present [ 400.612545][ T5722] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 400.692491][ T5724] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 400.782519][ T5722] usb 2-1: Using ep0 maxpacket: 8 [ 400.872591][ T5724] usb 4-1: Using ep0 maxpacket: 16 [ 400.900284][ T5724] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 400.950071][ T5724] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.989683][ T5724] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 401.024495][ T5724] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 401.068716][ T5724] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 401.104114][ T5724] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 401.126410][ T5724] usb 4-1: SerialNumber: syz [ 401.168706][ T5724] hub 4-1:1.0: bad descriptor, ignoring hub [ 401.197342][ T5724] hub 4-1:1.0: probe with driver hub failed with error -5 [ 401.215505][ T29] usb 3-1: unable to get BOS descriptor or descriptor too short [ 401.251551][ T5724] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 401.273328][ T29] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 401.310727][ T29] usb 3-1: can't read configurations, error -71 [ 401.773796][ T5724] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 401.980292][ T5724] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.995668][ T5724] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.008293][ T5724] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 402.022621][ T5724] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 402.032163][ T5724] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.069700][ T5724] usb 1-1: config 0 descriptor?? [ 402.225637][T11265] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1934'. [ 402.536009][ T5724] plantronics 0003:047F:FFFF.0040: reserved main item tag 0xe [ 402.546874][ T5724] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 402.610509][ T5724] plantronics 0003:047F:FFFF.0040: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 402.864312][ T5700] usb 1-1: USB disconnect, device number 95 [ 402.946369][T11280] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1937'. [ 403.332472][ T809] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 403.372811][ T5724] usb 4-1: USB disconnect, device number 87 [ 403.473031][ T5722] usb 2-1: unable to get BOS descriptor or descriptor too short [ 403.490234][ T5722] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 403.503242][ T5722] usb 2-1: can't read configurations, error -71 [ 403.536922][ T809] usb 3-1: config 0 has no interfaces? [ 403.558615][ T809] usb 3-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 403.588023][ T809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.606027][ T809] usb 3-1: config 0 descriptor?? [ 405.153773][ T5700] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 405.323042][ T5700] usb 5-1: Using ep0 maxpacket: 32 [ 405.336529][ T5700] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.359916][ T5700] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.389403][ T5700] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 405.417868][ T5700] usb 5-1: config 0 interface 0 has no altsetting 0 [ 405.435095][ T5700] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 405.445899][ T5700] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.472595][ T809] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 405.474857][ T5700] usb 5-1: config 0 descriptor?? [ 405.642835][ T809] usb 2-1: Using ep0 maxpacket: 32 [ 405.653417][ T809] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 405.667885][ T809] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 405.686219][ T809] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 405.697716][ T809] usb 2-1: Product: syz [ 405.722346][ T809] usb 2-1: Manufacturer: syz [ 405.731951][ T809] usb 2-1: SerialNumber: syz [ 405.785143][ T809] usb 2-1: config 0 descriptor?? [ 405.807108][T11332] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 405.837723][ T809] hub 2-1:0.0: bad descriptor, ignoring hub [ 405.866924][ T809] hub 2-1:0.0: probe with driver hub failed with error -5 [ 405.923437][ T5700] hid-thrustmaster 0003:044F:B65D.0041: unknown main item tag 0x0 [ 405.958997][ T5700] hid-thrustmaster 0003:044F:B65D.0041: unknown main item tag 0x0 [ 405.960525][T11340] bridge_slave_0: left allmulticast mode [ 405.987281][T11340] bridge_slave_0: left promiscuous mode [ 405.999294][ T5700] hid-thrustmaster 0003:044F:B65D.0041: unknown main item tag 0x0 [ 406.014076][T11340] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.039035][ T5700] hid-thrustmaster 0003:044F:B65D.0041: unknown main item tag 0x0 [ 406.051558][ T5722] usb 3-1: USB disconnect, device number 90 [ 406.065364][ T5700] hid-thrustmaster 0003:044F:B65D.0041: unknown main item tag 0x0 [ 406.099081][ T5700] hid-thrustmaster 0003:044F:B65D.0041: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 406.157115][ T5700] hid-thrustmaster 0003:044F:B65D.0041: Wrong number of endpoints? [ 406.173102][ C0] hid-thrustmaster 0003:044F:B65D.0041: Unknown packet type 0x0, unable to proceed further with wheel init [ 406.549226][ T5700] usb 5-1: USB disconnect, device number 88 [ 406.703306][T11332] usb 2-1: reset high-speed USB device number 97 using dummy_hcd [ 406.927525][T11332] usb 2-1: device firmware changed [ 406.944993][ T809] usb 2-1: USB disconnect, device number 97 [ 407.116996][ T809] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 407.273737][ T809] usb 2-1: Using ep0 maxpacket: 32 [ 407.300625][ T809] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 407.344058][ T809] usb 2-1: string descriptor 0 read error: -22 [ 407.368645][ T809] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 407.380382][T11378] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1972'. [ 407.399237][ T809] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 407.446426][ T809] usb 2-1: config 0 descriptor?? [ 407.467765][T11350] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 407.488459][ T809] hub 2-1:0.0: bad descriptor, ignoring hub [ 407.510251][ T809] hub 2-1:0.0: probe with driver hub failed with error -5 [ 407.902744][ T809] usb 2-1: USB disconnect, device number 98 [ 407.924099][ T29] usb 5-1: new full-speed USB device number 89 using dummy_hcd [ 407.982930][ T24] usb 3-1: new full-speed USB device number 91 using dummy_hcd [ 408.034039][T11386] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 408.042326][T11386] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 408.107691][ T29] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 408.123038][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 408.152242][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 408.189276][ T24] usb 3-1: config 0 has no interfaces? [ 408.207941][ T29] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 408.224536][ T24] usb 3-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 408.250589][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.275863][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.299854][ T29] usb 5-1: Product: syz [ 408.334055][ T29] usb 5-1: Manufacturer: syz [ 408.352088][ T24] usb 3-1: config 0 descriptor?? [ 408.372924][ T29] usb 5-1: SerialNumber: syz [ 408.420561][ T29] usb 5-1: config 0 descriptor?? [ 408.456020][T11384] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 408.644168][ T29] rc_core: IR keymap rc-streamzap not found [ 408.686757][ T29] Registered IR keymap rc-empty [ 408.722237][ T29] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 408.784053][ T29] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input67 [ 408.863743][ T29] usb 5-1: USB disconnect, device number 89 [ 408.924434][T11401] openvswitch: netlink: Flow key attr not present in new flow. [ 409.097884][T11401] kAFS: unable to lookup cell 'ÿ' [ 409.124171][T11407] snd_dummy snd_dummy.0: control 1:-1:-8:syz0:32 is already present [ 409.403606][ T5700] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 409.623188][ T5700] usb 4-1: Using ep0 maxpacket: 8 [ 409.693006][ T996] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 409.892546][ T996] usb 1-1: Using ep0 maxpacket: 16 [ 409.924624][ T996] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 409.958385][ T996] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 409.994984][ T996] usb 1-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 410.023831][ T996] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.068730][ T996] usb 1-1: Product: syz [ 410.088786][T11418] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 410.107221][ T996] usb 1-1: Manufacturer: syz [ 410.132551][ T996] usb 1-1: SerialNumber: syz [ 410.193166][ T996] usb 1-1: unit 3 not found! [ 410.230608][ T996] usb 1-1: unit 7 not found! [ 410.284038][T11418] kAFS: unable to lookup cell 'ÿ' [ 410.602838][ T5722] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 410.624973][ T996] usb 1-1: unit 192 not found! [ 410.679276][ T29] usb 3-1: USB disconnect, device number 91 [ 410.822757][ T5722] usb 5-1: Using ep0 maxpacket: 8 [ 410.998984][ T996] usb 1-1: USB disconnect, device number 96 [ 411.768393][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 411.768521][ T30] audit: type=1326 audit(1780824557.609:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11429 comm="syz.1.1992" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe501c code=0x0 [ 412.389305][ T5700] usb 4-1: unable to get BOS descriptor or descriptor too short [ 412.449872][ T5700] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 412.486817][ T5700] usb 4-1: can't read configurations, error -71 [ 413.106474][T11454] snd_dummy snd_dummy.0: control 1:-1:-8:syz0:32 is already present [ 413.172152][T11456] loop5: detected capacity change from 0 to 7 [ 413.207947][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 413.217330][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 413.243624][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 413.252872][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 413.279089][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 413.288347][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 413.297804][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 413.307018][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 413.327831][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 413.337070][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 413.352835][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 413.362022][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 413.371636][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 413.380807][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 413.389986][T11456] ldm_validate_partition_table(): Disk read failed. [ 413.401156][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 413.410342][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 413.420523][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 413.429694][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 413.437713][T11456] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 413.449557][T11456] Buffer I/O error on dev loop5, logical block 0, async page read [ 413.461132][T11456] Dev loop5: unable to read RDB block 0 [ 413.471999][T11456] loop5: unable to read partition table [ 413.479176][T11456] loop5: partition table beyond EOD, truncated [ 413.499281][T11456] loop_reread_partitions: partition scan of loop5 (úù) failed (rc=-5) [ 413.835698][ T5722] usb 5-1: unable to get BOS descriptor or descriptor too short [ 413.927721][ T5722] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 413.960492][ T5722] usb 5-1: can't read configurations, error -71 [ 414.162589][ T29] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 414.333918][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 414.369718][ T29] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.422843][ T29] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.457155][ T29] usb 3-1: config 0 interface 0 has no altsetting 0 [ 414.486369][ T29] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 414.517198][T11470] syzkaller1: entered promiscuous mode [ 414.525150][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.546160][T11470] syzkaller1: entered allmulticast mode [ 414.561135][ T29] usb 3-1: config 0 descriptor?? [ 415.056286][ T29] nzxt-smart2 0003:1E71:2009.0042: unknown main item tag 0x0 [ 415.105213][ T29] nzxt-smart2 0003:1E71:2009.0042: unknown main item tag 0x0 [ 415.131109][ T29] nzxt-smart2 0003:1E71:2009.0042: unknown main item tag 0x0 [ 415.160989][ T29] nzxt-smart2 0003:1E71:2009.0042: unknown main item tag 0x0 [ 415.179725][ T29] nzxt-smart2 0003:1E71:2009.0042: unknown main item tag 0x0 [ 415.243085][ T29] nzxt-smart2 0003:1E71:2009.0042: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 415.343560][ T5722] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 415.397429][ T29] usb 3-1: USB disconnect, device number 92 [ 415.504712][T11489] fido_id[11489]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 415.565566][ T5722] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.595869][ T5722] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.623574][ T5722] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 415.652486][ T5722] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 415.664315][ T5722] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.678603][ T5722] usb 4-1: config 0 descriptor?? [ 416.107955][ T5722] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 416.131032][ T5722] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 416.153270][ T5722] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 416.172915][ T5722] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 416.183893][ T5722] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 416.223703][ T5722] plantronics 0003:047F:FFFF.0043: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 416.374643][ T29] usb 4-1: USB disconnect, device number 90 [ 417.091676][T11521] snd_dummy snd_dummy.0: control 1:-1:-8:syz0:32 is already present [ 419.366202][ T30] audit: type=1326 audit(1780824565.199:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11550 comm="syz.2.2038" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe401c code=0x0 [ 419.484545][T11556] input: syz1 as /devices/virtual/input/input68 [ 420.162453][ T29] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 420.314754][T11576] snd_dummy snd_dummy.0: control 1:-1:-8:syz0:32 is already present [ 420.316322][ T5700] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 420.353947][ T29] usb 5-1: unable to get BOS descriptor or descriptor too short [ 420.373604][ T29] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 420.405140][ T29] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 420.421014][ T29] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 420.446616][ T29] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 420.485077][ T29] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 420.508640][ T29] usb 5-1: config 1 interface 1 has no altsetting 0 [ 420.516978][ T5700] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 420.541084][ T5700] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.566540][ T29] usb 5-1: string descriptor 0 read error: -22 [ 420.576950][ T29] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 420.602534][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.623799][ T5700] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.639363][ T5700] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 420.654956][ T5700] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 420.667197][ T5700] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.688253][ T5700] usb 2-1: config 0 descriptor?? [ 420.722677][ T5722] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 420.883400][ T5722] usb 3-1: Using ep0 maxpacket: 16 [ 420.910313][ T5722] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.958621][ T5722] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.013066][ T5722] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 421.062277][ T5722] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 421.064974][ T29] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 421.102645][ T5722] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.105444][ T29] usb 5-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 421.153563][ T5700] plantronics 0003:047F:FFFF.0044: reserved main item tag 0xd [ 421.154050][ T29] usb 5-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 421.193042][ T5722] usb 3-1: config 0 descriptor?? [ 421.283513][ T5700] plantronics 0003:047F:FFFF.0044: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 421.620341][ T29] usb 5-1: 2:0: failed to get current value for ch 1 (-71) [ 421.666466][ T5700] usb 2-1: USB disconnect, device number 99 [ 421.723938][ T5722] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0045/input/input70 [ 421.789623][ T29] usb 5-1: USB disconnect, device number 92 [ 421.899712][ T5722] microsoft 0003:045E:07DA.0045: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 422.017001][ T5722] usb 3-1: USB disconnect, device number 93 [ 422.105306][T11585] fido_id[11585]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 422.179942][T11589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2054'. [ 422.632483][ T24] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 422.802662][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 422.829644][ T24] usb 2-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 422.861039][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.888113][ T24] usb 2-1: Product: syz [ 422.906275][ T24] usb 2-1: Manufacturer: syz [ 422.924768][ T24] usb 2-1: SerialNumber: syz [ 422.939704][ T24] usb 2-1: config 0 descriptor?? [ 422.958727][ T24] gspca_main: spca508-2.14.0 probing 041e:4018 [ 423.018257][T11614] snd_dummy snd_dummy.0: control 1:-1:-8:syz0:32 is already present [ 423.192329][ T24] gspca_spca508: reg_read err -32 [ 423.201158][ T24] gspca_spca508: reg_read err -32 [ 423.215455][ T24] gspca_spca508: reg_read err -32 [ 423.299181][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888055e11c00: rx timeout, send abort [ 423.311935][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888055e11c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 423.436923][ T24] gspca_spca508: reg_read err -71 [ 423.448539][ T24] gspca_spca508: reg write: error -71 [ 423.460140][ T24] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 423.499688][ T24] usb 2-1: USB disconnect, device number 100 [ 425.348474][T11654] syzkaller1: entered promiscuous mode [ 425.386678][T11654] syzkaller1: entered allmulticast mode [ 425.528496][T11659] Invalid argument reading file caps for ./file0 [ 426.311089][T11676] snd_dummy snd_dummy.0: control 1:-1:-8:syz0:32 is already present [ 426.326233][ T24] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 426.515072][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 426.529041][ T24] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 426.546480][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 426.570395][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 426.593564][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 426.614758][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 426.648428][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 426.675152][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.683318][ T29] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 426.848009][ T29] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 426.876998][ T29] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.904871][ T29] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 426.936798][ T24] usb 3-1: usb_control_msg returned -32 [ 426.947513][ T29] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 426.964430][ T24] usbtmc 3-1:16.0: can't read capabilities [ 427.023323][ T29] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 427.042511][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.059738][ T29] usb 4-1: Product: syz [ 427.069965][ T29] usb 4-1: Manufacturer: syz [ 427.081858][ T29] usb 4-1: SerialNumber: syz [ 427.320658][T11693] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 427.347199][ T24] usb 3-1: USB disconnect, device number 94 [ 427.423264][ T5722] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 427.615842][ T5722] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.668414][ T5722] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.709006][ T5722] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 427.739864][ T5722] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.780538][ T5722] usb 2-1: config 0 descriptor?? [ 428.161234][ T29] cdc_ncm 4-1:1.0: bind() failure [ 428.215598][ T29] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 428.249717][ T29] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 428.287012][ T29] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 428.297985][T11706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2101'. [ 428.328226][ T29] usb 4-1: USB disconnect, device number 91 [ 428.429335][T11706] team0: Port device team_slave_0 removed [ 428.672718][ T5722] hid-led 0003:27B8:01ED.0046: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.1-1/input0 [ 428.854220][ T29] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 428.911140][ T5722] hid-led 0003:27B8:01ED.0046: ThingM blink(1) initialized [ 428.996810][ T5722] usb 2-1: USB disconnect, device number 101 [ 429.044646][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.080935][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.108484][ T29] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 429.142232][ T29] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 429.178146][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.225574][ T29] usb 5-1: config 0 descriptor?? [ 429.321852][T11722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2105'. [ 429.708651][ T29] plantronics 0003:047F:FFFF.0047: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 429.822842][ T5722] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 430.047416][ T5722] usb 4-1: config 0 has no interfaces? [ 430.068477][ T5722] usb 4-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 430.100581][T11736] snd_dummy snd_dummy.0: control 1:-1:-8:syz0:32 is already present [ 430.148207][ T5722] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.191853][ T5722] usb 4-1: config 0 descriptor?? [ 430.831062][ T5722] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 430.862481][T11747] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 430.916449][T11747] kAFS: unable to lookup cell 'ÿ' [ 430.992495][ T5722] usb 1-1: Using ep0 maxpacket: 32 [ 431.017487][ T5722] usb 1-1: unable to get BOS descriptor or descriptor too short [ 431.047791][ T5722] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 431.088636][ T5722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.122441][ T5722] usb 1-1: Product: syz [ 431.148139][ T5722] usb 1-1: Manufacturer: syz [ 431.187001][ T5722] usb 1-1: SerialNumber: syz [ 431.194580][ T29] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 431.363691][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 431.643444][ T5722] usb 1-1: unit 0 not found! [ 431.856180][ T24] usb 5-1: USB disconnect, device number 93 [ 432.079597][ T5722] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 432.229606][ T5722] usb 1-1: unit 0 not found! [ 432.295668][ T5722] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 432.395878][ T5722] usb 1-1: unit 0 not found! [ 432.720175][T11757] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2119'. [ 433.117762][ T5700] usb 4-1: USB disconnect, device number 92 [ 433.143867][ T5722] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 433.221273][ T5722] usb 1-1: USB disconnect, device number 97 [ 433.257370][T11766] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2123'. [ 433.329954][T11766] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.338091][T11766] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.390843][T11767] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2123'. [ 433.412316][ T5642] udevd[5642]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 433.994884][ T809] usb 2-1: new low-speed USB device number 102 using dummy_hcd [ 434.175463][ T809] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 434.208684][ T809] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 434.242830][ T809] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 434.279928][ T809] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 434.319518][ T809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 434.367219][ T809] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 434.431722][ T809] usb 2-1: string descriptor 0 read error: -22 [ 434.455153][ T809] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 434.489361][ T809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.528259][ T809] usb 2-1: config 0 descriptor?? [ 434.560392][T11775] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 434.588265][ T809] hub 2-1:0.0: bad descriptor, ignoring hub [ 434.605510][ T809] hub 2-1:0.0: probe with driver hub failed with error -5 [ 434.658873][ T809] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input71 [ 435.074631][ T10] usb 2-1: USB disconnect, device number 102 [ 435.199316][ T29] usb 3-1: unable to get BOS descriptor or descriptor too short [ 435.253795][ T29] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 435.302523][ T29] usb 3-1: can't read configurations, error -71 [ 435.838377][ T30] audit: type=1326 audit(1780824581.679:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11818 comm="syz.1.2147" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe501c code=0x7ffc0000 [ 435.878291][ T30] audit: type=1326 audit(1780824581.719:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11818 comm="syz.1.2147" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe501c code=0x7ffc0000 [ 435.961631][ T30] audit: type=1326 audit(1780824581.719:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11818 comm="syz.1.2147" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71e61ab code=0x7ffc0000 [ 436.067999][ T30] audit: type=1326 audit(1780824581.719:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11818 comm="syz.1.2147" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71e61ab code=0x7ffc0000 [ 436.071433][T11828] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 436.115963][T11828] kAFS: unable to lookup cell 'ÿ' [ 436.164103][ T30] audit: type=1326 audit(1780824581.719:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11818 comm="syz.1.2147" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe501c code=0x7ffc0000 [ 436.200658][ T30] audit: type=1326 audit(1780824581.729:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11818 comm="syz.1.2147" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=291 compat=1 ip=0xf7fe501c code=0x7ffc0000 [ 436.285060][ T30] audit: type=1326 audit(1780824581.729:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11818 comm="syz.1.2147" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe501c code=0x7ffc0000 [ 436.344116][ T30] audit: type=1326 audit(1780824581.749:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11818 comm="syz.1.2147" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=292 compat=1 ip=0xf7fe501c code=0x7ffc0000 [ 436.375177][ T5693] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 436.413757][ T30] audit: type=1326 audit(1780824581.749:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11818 comm="syz.1.2147" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe501c code=0x7ffc0000 [ 436.508042][ T30] audit: type=1326 audit(1780824581.749:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11818 comm="syz.1.2147" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=293 compat=1 ip=0xf7fe501c code=0x7ffc0000 [ 436.562616][ T5693] usb 5-1: Using ep0 maxpacket: 8 [ 437.533283][ T29] usb 3-1: new low-speed USB device number 97 using dummy_hcd [ 437.724963][ T29] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 437.749050][ T29] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 437.778317][ T29] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 437.802257][ T29] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 437.841023][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 437.869470][ T29] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 437.916247][ T29] usb 3-1: string descriptor 0 read error: -22 [ 437.925682][ T29] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 437.957524][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.998029][ T29] usb 3-1: config 0 descriptor?? [ 438.020919][ T10] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 438.051179][T11850] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 438.078585][ T29] hub 3-1:0.0: bad descriptor, ignoring hub [ 438.100170][ T29] hub 3-1:0.0: probe with driver hub failed with error -5 [ 438.135691][ T29] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input72 [ 438.228424][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.259771][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.308284][ T10] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 438.333939][ T10] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 438.373861][ T10] usb 2-1: Manufacturer: syz [ 438.437264][ T10] usb 2-1: config 0 descriptor?? [ 438.525987][ T29] usb 3-1: USB disconnect, device number 97 [ 439.087484][ T29] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 439.244174][ T5693] usb 5-1: unable to get BOS descriptor or descriptor too short [ 439.261494][ T5693] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 439.282283][ T29] usb 1-1: unable to get BOS descriptor or descriptor too short [ 439.292662][ T5693] usb 5-1: can't read configurations, error -71 [ 439.306946][ T29] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 439.339659][ T10] input: syz Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0048/input/input73 [ 439.369464][ T29] usb 1-1: string descriptor 0 read error: -22 [ 439.390035][ T29] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 439.404125][T11876] snd_dummy snd_dummy.0: control 1:-1:-8:syz0:32 is already present [ 439.428289][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.449176][T11878] snd_dummy snd_dummy.0: control 1:-1:-8:syz0:32 is already present [ 439.523479][ T10] input: syz Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0048/input/input74 [ 439.606571][ T10] input: syz Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0048/input/input75 [ 439.787331][ T10] input: syz Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0048/input/input76 [ 439.881960][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.890079][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.902281][ T10] uclogic 0003:256C:006D.0048: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.1-1/input0 [ 439.996475][ T10] usb 2-1: USB disconnect, device number 103 [ 440.106893][ T29] usb 1-1: failed to read current rate; disabling the check [ 440.755410][T11887] fido_id[11887]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 441.205840][ T29] usb 1-1: USB disconnect, device number 98 [ 441.713318][ T5686] usb 5-1: new full-speed USB device number 96 using dummy_hcd [ 441.887916][ T5686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 441.900080][ T5686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.917978][ T5686] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 441.934617][T11920] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 441.948504][ T5686] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 441.969621][T11920] kAFS: unable to lookup cell 'ÿ' [ 441.984530][ T5686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.031352][ T5686] usb 5-1: config 0 descriptor?? [ 442.282785][ T29] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 442.453720][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 442.521214][ T5686] hid_parser_main: 10 callbacks suppressed [ 442.521237][ T5686] hid-multitouch 0003:0457:07DA.0049: unknown main item tag 0x0 [ 442.565106][ T5686] hid-multitouch 0003:0457:07DA.0049: unknown main item tag 0x0 [ 442.595322][ T5686] hid-multitouch 0003:0457:07DA.0049: unknown main item tag 0x0 [ 442.636341][ T5686] hid-multitouch 0003:0457:07DA.0049: unknown main item tag 0x0 [ 442.664342][ T5686] hid-multitouch 0003:0457:07DA.0049: unknown main item tag 0x0 [ 442.697316][ T5686] hid-multitouch 0003:0457:07DA.0049: unknown main item tag 0x0 [ 442.729171][ T5686] hid-multitouch 0003:0457:07DA.0049: unknown main item tag 0x0 [ 442.766615][ T5686] hid-multitouch 0003:0457:07DA.0049: unknown main item tag 0x0 [ 442.789855][ T5686] hid-multitouch 0003:0457:07DA.0049: unknown main item tag 0x0 [ 442.818583][ T5686] hid-multitouch 0003:0457:07DA.0049: unknown main item tag 0x0 [ 442.878273][ T5686] hid-multitouch 0003:0457:07DA.0049: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.4-1/input0 [ 442.958030][ T5686] usb 5-1: USB disconnect, device number 96 [ 443.174519][T11934] fido_id[11934]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 443.488303][T11940] syzkaller1: entered promiscuous mode [ 443.510381][T11940] syzkaller1: entered allmulticast mode [ 443.839551][T11947] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 443.882150][T11949] netlink: 766 bytes leftover after parsing attributes in process `syz.3.2194'. [ 443.917949][T11947] kAFS: unable to lookup cell 'ÿ' [ 444.050323][T11950] snd_dummy snd_dummy.0: control 1:-1:-8:syz0:32 is already present [ 444.212573][ T5700] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 444.415338][ T5700] usb 5-1: Using ep0 maxpacket: 8 [ 446.127824][ T29] usb 3-1: unable to get BOS descriptor or descriptor too short [ 446.174341][ T29] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 446.210540][ T29] usb 3-1: can't read configurations, error -71 [ 446.542593][ T5686] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 446.715236][ T5686] usb 4-1: Using ep0 maxpacket: 32 [ 446.734663][ T5686] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 446.759570][ T5686] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.785109][ T5686] usb 4-1: Product: syz [ 446.795043][ T5686] usb 4-1: Manufacturer: syz [ 446.809762][ T5686] usb 4-1: SerialNumber: syz [ 446.822069][T11990] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2209'. [ 446.860536][ T5686] usb 4-1: config 0 descriptor?? [ 446.883098][ T5686] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 446.911406][ T5686] dvb-usb: bulk message failed: -22 (4/0) [ 446.935832][ T5686] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 446.971656][ T5686] dvb-usb: bulk message failed: -22 (5/0) [ 446.985490][ T5686] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 447.031724][ T5686] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 447.072276][ T5686] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 447.108746][T11978] ttusb2: more than 2 i2c messages at a time is not handled yet. TODO. [ 447.121770][ T5686] usb 4-1: media controller created [ 447.150563][T11978] ttusb2: i2c wr len=59 too high [ 447.194060][T11996] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2212'. [ 447.238825][ T5686] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 447.334651][ T5686] usb 4-1: selecting invalid altsetting 3 [ 447.362473][ T5686] ttusb2: set interface to alts=3 failed [ 447.382088][ T5700] usb 5-1: unable to get BOS descriptor or descriptor too short [ 447.435125][ T5700] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 447.468538][ T5700] usb 5-1: can't read configurations, error -71 [ 447.505920][T12007] snd_dummy snd_dummy.0: control 1:-1:-8:syz0:32 is already present [ 447.538580][ T5686] DVB: Unable to find symbol tda10086_attach() [ 447.554415][ T5686] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 447.591161][ T5686] dvb-usb: bulk message failed: -22 (4/0) [ 447.618543][ T5686] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 447.666705][ T5686] dvb-usb: bulk message failed: -22 (5/0) [ 447.683822][ T5686] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 447.709178][ T5686] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 447.746541][ T5686] usb 4-1: USB disconnect, device number 93 [ 447.902047][ T5686] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 447.987249][ T10] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 447.997209][ T5700] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 448.162497][ T29] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 448.162508][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 448.182347][ T5700] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.202632][ T5700] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.221062][ T5700] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 448.231996][ T5700] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.232578][ T5686] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 448.244464][ T5700] usb 5-1: config 0 descriptor?? [ 448.254980][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.282663][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.295074][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 448.316934][ T10] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 448.327848][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.338616][ T29] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 448.344166][ T10] usb 3-1: config 0 descriptor?? [ 448.361940][ T29] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 448.386529][ T29] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 448.402450][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 448.418607][ T29] usb 2-1: SerialNumber: syz [ 448.452516][ T5686] usb 4-1: Using ep0 maxpacket: 32 [ 448.466157][ T5686] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 448.481946][ T5686] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 448.500716][ T5686] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 448.524296][ T5686] usb 4-1: config 1 has no interface number 0 [ 448.545288][ T5686] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 448.569038][ T5686] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 448.604650][ T5686] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 448.625932][ T5686] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.660416][ T5686] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 448.797722][ T29] usb 2-1: USB disconnect, device number 104 [ 448.860960][ T10] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.004B/input/input77 [ 448.862698][ T5686] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 448.888313][ T10] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.004B/input/input78 [ 449.017005][ T10] kye 0003:0458:5011.004B: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 449.022455][ T5693] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 449.121783][ T10] usb 3-1: USB disconnect, device number 100 [ 449.185223][ T5700] hid-led 0003:27B8:01ED.004A: hidraw1: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.4-1/input0 [ 449.232540][ T5693] usb 1-1: Using ep0 maxpacket: 16 [ 449.257487][ T5693] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 449.270874][T12021] fido_id[12021]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 449.282498][ T5693] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.303604][ T5700] hid-led 0003:27B8:01ED.004A: ThingM blink(1) initialized [ 449.335659][ T5693] usb 1-1: Product: syz [ 449.350146][ T5693] usb 1-1: Manufacturer: syz [ 449.364930][ T5693] usb 1-1: SerialNumber: syz [ 449.417209][ T5693] usb 1-1: config 0 descriptor?? [ 449.454314][ T5693] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 449.490773][ T5693] usb 1-1: Detected FT-X [ 449.521111][ T29] usb 4-1: USB disconnect, device number 94 [ 449.581442][ T29] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 449.597959][ T809] usb 5-1: USB disconnect, device number 98 [ 449.859950][T12020] validate_nla: 5 callbacks suppressed [ 449.860076][T12020] netlink: 'syz.0.2221': attribute type 4 has an invalid length. [ 449.877347][T12020] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.2221'. [ 449.904613][ T5693] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 449.919525][ T5693] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 449.929005][ T5693] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 449.946788][ T5693] usb 1-1: USB disconnect, device number 99 [ 449.961507][ T5693] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 449.976819][ T5693] ftdi_sio 1-1:0.0: device disconnected [ 450.005395][ T10] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 450.185190][ T10] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 450.202765][ T10] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 450.242584][ T10] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 450.244389][T12039] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 450.295576][ T809] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 450.325490][T12039] kAFS: unable to lookup cell 'ÿ' [ 450.327601][ T10] usb 2-1: config 220 has no interface number 2 [ 450.356609][ T10] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 450.390303][ T10] usb 2-1: config 220 interface 0 has no altsetting 0 [ 450.452560][ T10] usb 2-1: config 220 interface 76 has no altsetting 0 [ 450.461019][ T10] usb 2-1: config 220 interface 1 has no altsetting 0 [ 450.472684][ T809] usb 3-1: Using ep0 maxpacket: 32 [ 450.496525][ T809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.515493][ T10] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 450.534978][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.547835][ T809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.571089][ T809] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 450.578280][ T10] usb 2-1: Product: syz [ 450.593021][ T5693] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 450.608986][ T809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.636487][ T10] usb 2-1: Manufacturer: syz [ 450.643294][ T809] usb 3-1: config 0 descriptor?? [ 450.665200][ T10] usb 2-1: SerialNumber: syz [ 450.677473][ T809] hub 3-1:0.0: USB hub found [ 450.782964][ T5693] usb 4-1: Using ep0 maxpacket: 8 [ 450.894654][ T809] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 450.977602][ T10] usb 2-1: selecting invalid altsetting 0 [ 451.035884][ T10] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 451.050042][ T10] uvcvideo 2-1:220.0: No valid video chain found. [ 451.059547][T12050] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2232'. [ 451.100788][ T10] usb 2-1: selecting invalid altsetting 0 [ 451.110016][ T10] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 451.135283][ T10] usb 2-1: USB disconnect, device number 105 [ 451.316821][ T809] hid-generic 0003:046D:C31C.004C: item fetching failed at offset 0/1 [ 451.363644][ T809] hid-generic 0003:046D:C31C.004C: probe with driver hid-generic failed with error -22 [ 451.446378][T12054] snd_dummy snd_dummy.0: control 1:-1:-8:syz0:32 is already present [ 451.917150][ T10] usb 3-1: reset high-speed USB device number 101 using dummy_hcd [ 452.377319][ T10] usbhid 3-1:0.0: reset_resume error -71 [ 452.414888][ T10] usb 3-1: USB disconnect, device number 101 [ 452.719439][T12072] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 452.845223][T12072] kAFS: unable to lookup cell 'ÿ' [ 453.193995][ T5700] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 453.385777][ T5700] usb 1-1: Using ep0 maxpacket: 8 [ 453.933609][ T5693] usb 4-1: unable to get BOS descriptor or descriptor too short [ 453.983534][ T5693] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 454.025078][ T5693] usb 4-1: can't read configurations, error -71 [ 454.513399][ T5686] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 454.682562][ T5693] usb 4-1: new full-speed USB device number 96 using dummy_hcd [ 454.691652][ T5686] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 454.714512][ T5686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 454.726053][ T5686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 454.737899][ T5686] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 454.752044][ T5686] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 454.761331][ T5686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.773705][ T5686] usb 5-1: config 0 descriptor?? [ 454.783743][T12091] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 454.878948][T12103] all (unregistering): Released all slaves [ 455.028851][ T5693] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 455.060378][ T5693] usb 4-1: can't read configurations, error -71 [ 455.071910][ T5693] usb usb4-port1: attempt power cycle [ 455.222815][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 455.250626][ T5686] hid_parser_main: 24 callbacks suppressed [ 455.250645][ T5686] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 455.280230][ T5686] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 455.306051][ T5686] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 455.333778][ T5686] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 455.359559][ T5686] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 455.399621][ T5686] plantronics 0003:047F:FFFF.004D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 455.470539][T12115] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2251'. [ 455.951540][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 455.951578][ T30] audit: type=1800 audit(1780824601.789:320): pid=12121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2253" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 456.053583][T12125] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 456.157172][T12125] kAFS: unable to lookup cell 'ÿ' [ 456.472614][ T10] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 456.628223][ T5700] usb 1-1: unable to get BOS descriptor or descriptor too short [ 456.665316][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 456.689581][ T5700] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 456.702019][ T5700] usb 1-1: can't read configurations, error -71 [ 457.265981][ T996] usb 5-1: USB disconnect, device number 99 [ 457.345499][ T5693] usb 3-1: new full-speed USB device number 102 using dummy_hcd [ 457.488041][T12156] syzkaller1: entered promiscuous mode [ 457.500829][T12156] syzkaller1: entered allmulticast mode [ 457.560827][ T5693] usb 3-1: unable to get BOS descriptor or descriptor too short [ 457.581411][T12157] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2258'. [ 457.596330][ T5693] usb 3-1: not running at top speed; connect to a high speed hub [ 457.609786][ T5693] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 457.628421][ T5693] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 457.643238][ T5693] usb 3-1: config 14 has no interface number 0 [ 457.655961][ T5693] usb 3-1: config 14 has no interface number 1 [ 457.665140][ T5693] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 457.680674][ T5693] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 457.726566][ T5693] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 457.766745][ T5693] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 457.864211][ T5693] usb 3-1: config 14 interface 57 has no altsetting 0 [ 457.885989][ T5693] usb 3-1: config 14 interface 228 has no altsetting 0 [ 457.917642][ T5693] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 457.953355][ T5693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.987537][ T5693] usb 3-1: Product: syz [ 458.009248][ T5693] usb 3-1: Manufacturer: syz [ 458.029116][ T5693] usb 3-1: SerialNumber: syz [ 458.332608][ T5700] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 458.428052][T12167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2266'. [ 458.454328][T12167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2266'. [ 458.477765][T12167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2266'. [ 458.492329][ T5693] legousbtower 3-1:14.57: interrupt endpoints not found [ 458.532859][ T5700] usb 1-1: config 0 has no interfaces? [ 458.546235][ T5700] usb 1-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 458.583371][ T5700] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.691748][ T5700] usb 1-1: config 0 descriptor?? [ 458.892260][ T5693] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 458.933339][ T5693] legousbtower 3-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 459.622786][ T5693] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 459.655689][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 459.712059][ T10] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 459.738691][ T10] usb 4-1: can't read configurations, error -71 [ 459.815504][ T5693] usb 5-1: Using ep0 maxpacket: 8 [ 459.831729][ T5693] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 459.850032][ T5693] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 459.865397][ T5693] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.894433][ T5693] usb 5-1: config 0 descriptor?? [ 460.264272][T12145] usb 3-1: LEGO USB Tower reset control request failed [ 460.278649][ T5693] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 460.335258][T12179] usb 3-1: LEGO USB Tower reset control request failed [ 460.353100][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 460.362551][ T5686] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 460.375360][ T5693] usb 3-1: USB disconnect, device number 102 [ 460.478771][ T5693] legousbtower 3-1:14.228: LEGO USB Tower #-160 now disconnected [ 460.552332][ T5686] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.583800][ T5686] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.605257][ T5686] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 460.636089][ T5700] usb 5-1: USB disconnect, device number 100 [ 460.638734][ T5686] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 460.710282][ T5686] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.789770][ T5686] usb 2-1: config 0 descriptor?? [ 460.856349][ T10] usb 1-1: USB disconnect, device number 102 [ 460.989276][T12194] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 461.036853][T12194] kAFS: unable to lookup cell 'ÿ' [ 461.247315][ T5686] plantronics 0003:047F:FFFF.004E: unknown main item tag 0x0 [ 461.268872][ T5686] plantronics 0003:047F:FFFF.004E: unknown main item tag 0x0 [ 461.276913][ T5686] plantronics 0003:047F:FFFF.004E: unknown main item tag 0x0 [ 461.285995][ T5686] plantronics 0003:047F:FFFF.004E: unknown main item tag 0x0 [ 461.294555][ T5686] plantronics 0003:047F:FFFF.004E: unknown main item tag 0x0 [ 461.302052][ T5686] plantronics 0003:047F:FFFF.004E: unknown main item tag 0x0 [ 461.310136][ T5693] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 461.322280][ T5686] plantronics 0003:047F:FFFF.004E: unknown main item tag 0x0 [ 461.324100][ T10] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 461.329916][ T5686] plantronics 0003:047F:FFFF.004E: unknown main item tag 0x0 [ 461.330258][ T5686] plantronics 0003:047F:FFFF.004E: unknown main item tag 0x0 [ 461.387735][ T5686] plantronics 0003:047F:FFFF.004E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 461.482934][ T5693] usb 3-1: Using ep0 maxpacket: 8 [ 461.496677][ T5693] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 461.534616][ T5693] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 461.545436][ T5693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.552627][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 461.560159][ T5693] usb 3-1: Product: syz [ 461.564456][ T5693] usb 3-1: Manufacturer: syz [ 461.571023][ T5693] usb 3-1: SerialNumber: syz [ 461.590492][ T5693] usb 3-1: config 0 descriptor?? [ 461.616029][ T5693] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 461.627375][ T996] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 461.681203][T12211] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 461.700368][T12211] kAFS: unable to lookup cell 'ÿ' [ 461.792826][ T996] usb 1-1: Using ep0 maxpacket: 32 [ 461.808681][ T996] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 461.828372][ T996] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 461.840318][ T996] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 461.850717][ T996] usb 1-1: Product: syz [ 461.856800][ T996] usb 1-1: Manufacturer: syz [ 461.862821][ T996] usb 1-1: SerialNumber: syz [ 461.894768][ T996] usb 1-1: config 0 descriptor?? [ 461.918085][T12206] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 461.930607][ T996] hub 1-1:0.0: bad descriptor, ignoring hub [ 461.943395][ T5700] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 461.952674][ T996] hub 1-1:0.0: probe with driver hub failed with error -5 [ 462.132614][ T5700] usb 5-1: Using ep0 maxpacket: 8 [ 462.259401][T12197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.276456][T12197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.393181][ T9] usb 1-1: USB disconnect, device number 103 [ 462.499289][ T5693] gspca_zc3xx: reg_w_i err -71 [ 463.102528][ T5693] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 463.109054][ T5693] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 463.120931][ T5693] usb 3-1: USB disconnect, device number 103 [ 463.342634][ T9] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 463.502565][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 463.511618][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 463.539798][ T9] usb 1-1: string descriptor 0 read error: -22 [ 463.547977][ T9] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 463.558849][ T9] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 463.571662][ T9] usb 1-1: config 0 descriptor?? [ 463.584287][T12213] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 463.607924][ T9] hub 1-1:0.0: bad descriptor, ignoring hub [ 463.615951][ T9] hub 1-1:0.0: probe with driver hub failed with error -5 [ 463.812663][ T996] usb 2-1: USB disconnect, device number 106 [ 463.939291][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 463.955217][ T10] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 463.970366][ T10] usb 4-1: can't read configurations, error -71 [ 463.994141][ T29] usb 1-1: USB disconnect, device number 104 [ 464.120094][T12228] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2287'. [ 464.510412][T12237] snd_dummy snd_dummy.0: control 1:-1:-8:syz0:32 is already present [ 464.547831][ T5686] usb 2-1: new full-speed USB device number 107 using dummy_hcd [ 464.632062][ T5700] usb 5-1: unable to get BOS descriptor or descriptor too short [ 464.679980][ T5700] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 464.722506][ T5700] usb 5-1: can't read configurations, error -71 [ 464.751374][ T5686] usb 2-1: config 0 has no interfaces? [ 464.771258][ T5686] usb 2-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 464.800553][ T5686] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.832578][ T10] usb 4-1: new full-speed USB device number 101 using dummy_hcd [ 464.856152][ T5686] usb 2-1: config 0 descriptor?? [ 465.005068][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 465.035403][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.078973][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 465.109669][ T10] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 465.124334][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.192530][ T10] usb 4-1: config 0 descriptor?? [ 465.663743][ T5686] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 465.695845][ T10] hid-multitouch 0003:0457:07DA.004F: unknown main item tag 0x0 [ 465.750985][ T10] hid-multitouch 0003:0457:07DA.004F: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.3-1/input0 [ 465.823409][ T5686] usb 3-1: Using ep0 maxpacket: 16 [ 465.845160][T12257] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 465.858501][ T5686] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 465.897472][ T5686] usb 3-1: config 1 has no interface number 0 [ 465.920529][ T5686] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 465.959106][ T5686] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 465.996696][T12257] kAFS: unable to lookup cell 'ÿ' [ 466.001437][ T5686] usb 3-1: config 1 interface 105 has no altsetting 0 [ 466.041631][ T5686] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 466.081855][ T5686] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 466.115532][ T5686] usb 3-1: Product: syz [ 466.127951][ T5686] usb 3-1: Manufacturer: syz [ 466.146559][ T5686] usb 3-1: SerialNumber: syz [ 466.176671][T12251] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 466.192928][T12251] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 466.222696][ T5693] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 466.392633][ T5693] usb 5-1: Using ep0 maxpacket: 8 [ 466.455214][ T5700] usb 4-1: USB disconnect, device number 101 [ 466.622502][ T29] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 466.694455][T12251] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 466.704445][T12251] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 466.815195][ T29] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x52, changing to 0x2 [ 466.845853][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 129, changing to 7 [ 466.876602][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 34091, setting to 1024 [ 466.911304][ T29] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 466.942082][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.968934][ T29] usb 1-1: Product: syz [ 466.981715][ T29] usb 1-1: Manufacturer: syz [ 466.997064][ T29] usb 1-1: SerialNumber: syz [ 467.034847][ T29] usb 1-1: config 0 descriptor?? [ 467.136696][ T5686] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 467.295496][ T29] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 467.337049][ T29] dvb_usb_af9035 1-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 467.368973][ T24] usb 2-1: USB disconnect, device number 107 [ 467.396326][ T5686] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 467.446799][ T29] usb 1-1: USB disconnect, device number 105 [ 467.466540][ T5686] aqc111 3-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, f6:6b:a5:fe:84:23 [ 467.524155][ T5686] usb 3-1: USB disconnect, device number 104 [ 467.567673][ T5686] aqc111 3-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 467.694119][ T5686] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 467.727975][ T5686] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 467.748152][ T5686] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 468.099963][T12279] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 468.140760][T12279] kAFS: unable to lookup cell 'ÿ' [ 468.246611][ T10] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 468.402947][ T5700] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 468.432554][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 468.484230][ T10] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 468.532906][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 468.588337][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 468.613415][ T5700] usb 2-1: Using ep0 maxpacket: 8 [ 468.647840][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 468.680954][T12292] netlink: 'syz.2.2308': attribute type 3 has an invalid length. [ 468.732120][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 468.773012][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 468.792499][T12294] snd_dummy snd_dummy.0: control 1:-1:-8:syz0:32 is already present [ 468.809914][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 468.886726][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.992511][ T5693] usb 5-1: unable to get BOS descriptor or descriptor too short [ 469.036694][ T5693] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 469.081986][ T5693] usb 5-1: can't read configurations, error -71 [ 469.245242][ T10] usb 4-1: usb_control_msg returned -32 [ 469.281918][T12301] tipc: Started in network mode [ 469.311710][ T10] usbtmc 4-1:16.0: can't read capabilities [ 469.337536][T12301] tipc: Node identity 2007ff, cluster identity 4711 [ 469.407797][T12301] tipc: Node number set to 2099199 [ 470.080810][T12313] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 470.284942][ T5693] usb 4-1: USB disconnect, device number 102 [ 470.525188][T12325] loop5: detected capacity change from 0 to 7 [ 470.560054][T12325] Dev loop5: unable to read RDB block 7 [ 470.584596][T12325] loop5: AHDI p1 p2 p3 p4 [ 470.607578][T12325] loop5: partition table partially beyond EOD, truncated [ 470.630862][T12325] loop5: p1 start 49598 is beyond EOD, truncated [ 470.654687][T12325] loop5: p2 start 3956713404 is beyond EOD, truncated [ 470.676741][T12325] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 471.087754][ T5647] udevd[5647]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 471.373242][ T5693] usb 4-1: new full-speed USB device number 103 using dummy_hcd [ 471.557215][ T5693] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 471.582018][ T5693] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 471.602183][ T5693] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 471.631636][T12345] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 471.641989][ T5693] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 190, setting to 64 [ 471.663319][T12345] kAFS: unable to lookup cell 'ÿ' [ 471.679216][ T5700] usb 2-1: unable to get BOS descriptor or descriptor too short [ 471.712353][ T5700] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 471.717085][ T5693] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 471.738968][ T5700] usb 2-1: can't read configurations, error -71 [ 471.755007][ T5693] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 471.773870][ T5693] usb 4-1: Product: syz [ 471.783918][ T5693] usb 4-1: Manufacturer: syz [ 471.794682][ T5693] usb 4-1: SerialNumber: syz [ 471.819763][ T5693] usb 4-1: config 0 descriptor?? [ 471.832268][T12335] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 471.992531][ T5686] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 472.000513][ T5693] rc_core: IR keymap rc-imon-rsc not found [ 472.028016][ T5693] Registered IR keymap rc-empty [ 472.047671][ T5693] rc rc0: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 472.097675][ T5693] input: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input80 [ 472.149337][ T5693] usb 4-1: USB disconnect, device number 103 [ 472.172934][ T5686] usb 3-1: Using ep0 maxpacket: 8 [ 472.893982][ T5700] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 473.066892][ T5700] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 473.126266][ T5700] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 473.146373][ T5700] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 473.176301][ T5700] usb 2-1: SerialNumber: syz [ 473.736632][ T5632] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 473.751619][ T5632] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 473.760502][ T5632] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 473.769287][ T5632] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 473.778720][ T5632] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 474.079901][T12385] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2333'. [ 474.604524][ T5686] usb 3-1: unable to get BOS descriptor or descriptor too short [ 474.638011][ T5686] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 474.672037][ T5686] usb 3-1: can't read configurations, error -71 [ 474.773727][T12382] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.781002][T12382] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.800382][T12382] bridge_slave_0: entered allmulticast mode [ 474.818961][T12382] bridge_slave_0: entered promiscuous mode [ 474.835207][T12382] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.857304][T12382] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.869279][T12382] bridge_slave_1: entered allmulticast mode [ 474.877347][T12382] bridge_slave_1: entered promiscuous mode [ 474.952744][ T5693] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 474.974108][T12382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.985288][T12382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.019642][T12382] team0: Port device team_slave_0 added [ 475.027287][T12382] team0: Port device team_slave_1 added [ 475.052485][ T5686] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 475.072029][T12382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.079199][T12382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.108705][T12382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.120691][T12382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.129183][T12382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.156018][ T5693] usb 5-1: Using ep0 maxpacket: 32 [ 475.161844][T12382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.177530][ T5693] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 475.186393][ T5693] usb 5-1: config 0 has no interface number 0 [ 475.192886][ T5693] usb 5-1: config 0 interface 184 has no altsetting 0 [ 475.203541][ T5693] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 475.222425][ T5693] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.230685][ T5693] usb 5-1: Product: syz [ 475.235099][ T5693] usb 5-1: Manufacturer: syz [ 475.239800][ T5693] usb 5-1: SerialNumber: syz [ 475.248432][ T5693] usb 5-1: config 0 descriptor?? [ 475.253663][ T5686] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 475.259228][T12382] hsr_slave_0: entered promiscuous mode [ 475.266890][ T5686] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 475.274273][T12382] hsr_slave_1: entered promiscuous mode [ 475.290647][ T5686] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 475.292249][T12382] debugfs: 'hsr0' already exists in 'hsr' [ 475.306108][ T5686] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.310285][T12382] Cannot create hsr debugfs directory [ 475.321865][T12406] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 475.337637][ T5686] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 475.604777][ T5724] usb 3-1: USB disconnect, device number 106 [ 475.668787][ T5700] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 475.689062][ T5700] usb 2-1: USB disconnect, device number 110 [ 475.862559][ T5632] Bluetooth: hci2: command tx timeout [ 475.891955][T12382] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 475.910850][T12382] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 475.927585][T12382] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 475.940849][T12382] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 475.954610][T12382] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 475.968204][T12382] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 475.978386][T12382] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 475.994074][T12382] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 476.116221][T12382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.136134][ T5693] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 476.145990][T12382] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.151113][ T5693] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 476.168221][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.175381][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.198267][ T762] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.205460][ T762] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.308449][T12382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.338321][ T5686] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 476.385732][ T5693] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 476.405342][T12382] veth0_vlan: entered promiscuous mode [ 476.416435][ T5693] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 476.438872][ T5693] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 476.449700][T12382] veth1_vlan: entered promiscuous mode [ 476.463071][ T5693] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 476.473826][ T5693] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 476.502891][ T5686] usb 4-1: Using ep0 maxpacket: 8 [ 476.513282][ T5686] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 476.523543][ T5686] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 476.536031][ T5693] usb 5-1: USB disconnect, device number 105 [ 476.544945][T12382] veth0_macvtap: entered promiscuous mode [ 476.548614][ T5686] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 476.570390][T12382] veth1_macvtap: entered promiscuous mode [ 476.577153][ T5686] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 476.577201][ T5686] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 476.577222][ T5686] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.651309][T12382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.681914][T12382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.696990][ T5724] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 476.715112][ T199] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.729410][ T199] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.745142][ T199] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.764247][ T199] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.794791][ T5686] usb 4-1: GET_CAPABILITIES returned 0 [ 476.803752][ T5686] usbtmc 4-1:16.0: can't read capabilities [ 476.877206][ T5724] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 476.892652][ T5724] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 40960, setting to 1024 [ 476.907486][ T5724] usb 3-1: config 0 interface 0 has no altsetting 0 [ 476.946379][ T199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.964438][ T5724] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 476.969564][ T199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.014287][ T5724] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 477.027323][ T5693] usb 4-1: USB disconnect, device number 104 [ 477.046761][ T5724] usb 3-1: Product: syz [ 477.062592][ T5724] usb 3-1: Manufacturer: syz [ 477.064701][T12195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.080394][ T5724] usb 3-1: SerialNumber: syz [ 477.105690][ T5724] usb 3-1: config 0 descriptor?? [ 477.112046][T12195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.147759][ T5724] usb 3-1: selecting invalid altsetting 0 [ 477.415685][ T5700] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 477.439685][ T5693] usb 3-1: USB disconnect, device number 107 [ 477.442543][ C0] usb 3-1: Unable to submit urb #0: -19 at snd_usb_queue_pending_output_urbs [ 477.463262][ C0] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 477.531101][ T5724] hid_parser_main: 33 callbacks suppressed [ 477.531157][ T5724] hid-generic 0000:0000:0000.0050: unknown main item tag 0x0 [ 477.559742][ T5724] hid-generic 0000:0000:0000.0050: hidraw0: HID v0.00 Device [syz1] on syz0 [ 477.604336][ T5700] usb 5-1: Using ep0 maxpacket: 16 [ 477.647214][ T5700] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 477.678260][ T5700] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.725659][ T5700] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.761095][ T5700] usb 5-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 477.804992][ T5700] usb 5-1: config 7 interface 0 has no altsetting 0 [ 477.913759][ T5700] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 477.926567][ T5700] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.952579][ T5632] Bluetooth: hci2: command tx timeout [ 478.246621][T12451] syzkaller1: entered allmulticast mode [ 478.481509][ T5700] hid (null): report_id 0 is invalid [ 478.507901][ T5700] hid (null): unknown global tag 0xd [ 478.526687][ T5700] hid (null): global environment stack underflow [ 478.603609][ T5700] input: HID 0458:5010 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:7.0/0003:0458:5010.0051/input/input81 [ 478.735849][T12467] syzkaller1: entered promiscuous mode [ 478.746400][ T5700] kye 0003:0458:5010.0051: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.4-1/input0 [ 478.794598][T12467] syzkaller1: entered allmulticast mode [ 478.817028][ T5700] usb 5-1: USB disconnect, device number 106 [ 478.952204][T12474] fido_id[12474]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 479.342758][ T5693] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 479.362579][ T5700] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 479.502539][ T5693] usb 4-1: Using ep0 maxpacket: 8 [ 479.510687][ T5693] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 479.521334][ T5693] usb 4-1: config 0 has no interfaces? [ 479.522505][ T5700] usb 3-1: Using ep0 maxpacket: 32 [ 479.528920][ T5693] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 479.538278][ T5700] usb 3-1: config 0 has no interfaces? [ 479.541927][ T5693] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.541949][ T5693] usb 4-1: Product: syz [ 479.541962][ T5693] usb 4-1: Manufacturer: syz [ 479.541976][ T5693] usb 4-1: SerialNumber: syz [ 479.551581][ T5693] usb 4-1: config 0 descriptor?? [ 479.588160][ T5700] usb 3-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 479.599425][ T5700] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.609623][ T5700] usb 3-1: Product: syz [ 479.613806][ T5700] usb 3-1: Manufacturer: syz [ 479.624071][ T5700] usb 3-1: SerialNumber: syz [ 479.635253][ T5700] usb 3-1: config 0 descriptor?? [ 479.692594][ T9] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 479.840170][T12483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2366'. [ 479.849867][T12483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2366'. [ 479.862733][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 479.871081][ T5693] usb 4-1: USB disconnect, device number 105 [ 479.887862][ T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 479.940999][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.986738][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.030049][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 480.048475][ T5632] Bluetooth: hci2: command tx timeout [ 480.067500][ T9] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 480.119153][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.166060][ T9] usb 5-1: config 0 descriptor?? [ 480.186053][T12481] netlink: 'syz.2.2365': attribute type 4 has an invalid length. [ 480.213329][ T29] usb 3-1: USB disconnect, device number 108 [ 480.639218][ T9] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0052/input/input82 [ 480.667588][T12505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2373'. [ 480.749894][ T9] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0052/input/input83 [ 480.873734][T12505] vxlan0: entered promiscuous mode [ 480.920602][ T9] kye 0003:0458:5013.0052: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 481.015874][T12512] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 481.077920][T12512] kAFS: unable to lookup cell 'ÿ' [ 481.131882][ T9] usb 5-1: USB disconnect, device number 107 [ 481.238930][ T1174] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.282614][ T5686] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 481.291316][ T1174] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.337667][T12511] fido_id[12511]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 481.360638][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.412861][ T29] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 481.423336][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.504966][ T5686] usb 3-1: config 0 has no interfaces? [ 481.516769][ T5686] usb 3-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 481.537008][ T5686] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.560636][ T5686] usb 3-1: Product: syz [ 481.582544][ T29] usb 2-1: Using ep0 maxpacket: 8 [ 481.595938][ T5686] usb 3-1: Manufacturer: syz [ 481.618299][ T5686] usb 3-1: SerialNumber: syz [ 481.632550][ T5709] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 481.663501][ T5686] usb 3-1: config 0 descriptor?? [ 481.828454][ T5709] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 481.882518][ T5709] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.898243][T12522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2379'. [ 481.924258][ T5709] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 481.962973][ T5686] usb 3-1: USB disconnect, device number 109 [ 482.001175][ T5709] usb 6-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 482.044019][ T5709] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.063955][ T5709] usb 6-1: config 0 descriptor?? [ 482.102901][ T5632] Bluetooth: hci2: command tx timeout [ 482.354594][T12528] input: syz0 as /devices/virtual/input/input84 [ 482.525868][ T5709] hid-multitouch 0003:0457:07DA.0053: unknown main item tag 0x0 [ 482.561954][ T5709] hid-multitouch 0003:0457:07DA.0053: unknown main item tag 0x0 [ 482.599297][ T5709] hid-multitouch 0003:0457:07DA.0053: unknown main item tag 0x0 [ 482.630250][ T5709] hid-multitouch 0003:0457:07DA.0053: unknown main item tag 0x0 [ 482.632649][ T9] usb 4-1: new full-speed USB device number 106 using dummy_hcd [ 482.638415][ T24] usb 3-1: new full-speed USB device number 110 using dummy_hcd [ 482.690265][ T5709] hid-multitouch 0003:0457:07DA.0053: unknown main item tag 0x0 [ 482.710729][ T5709] hid-multitouch 0003:0457:07DA.0053: unknown main item tag 0x0 [ 482.726124][ T5709] hid-multitouch 0003:0457:07DA.0053: unknown main item tag 0x0 [ 482.757640][ T5709] hid-multitouch 0003:0457:07DA.0053: unknown main item tag 0x0 [ 482.766631][ T5709] hid-multitouch 0003:0457:07DA.0053: unknown main item tag 0x0 [ 482.791849][ T5709] hid-multitouch 0003:0457:07DA.0053: unknown main item tag 0x0 [ 482.806442][ T24] usb 3-1: config 0 has no interfaces? [ 482.818410][ T5709] hid-multitouch 0003:0457:07DA.0053: unknown main item tag 0x0 [ 482.833408][ T24] usb 3-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 482.857887][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.873887][ T5709] hid-multitouch 0003:0457:07DA.0053: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.5-1/input0 [ 482.891155][ T24] usb 3-1: Product: syz [ 482.915834][ T24] usb 3-1: Manufacturer: syz [ 482.930558][ T24] usb 3-1: SerialNumber: syz [ 482.946815][ T5709] usb 6-1: USB disconnect, device number 2 [ 482.953615][ T5686] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 482.970725][ T24] usb 3-1: config 0 descriptor?? [ 482.981721][ T9] usb 4-1: config 0 has no interfaces? [ 483.010821][ T9] usb 4-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 483.089046][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.131018][ T5686] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 483.166666][ T5686] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 483.190002][ T5686] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 483.207449][ T5686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 483.231309][ T9] usb 4-1: config 0 descriptor?? [ 483.249140][ T5686] usb 5-1: SerialNumber: syz [ 483.326526][ T5709] usb 3-1: USB disconnect, device number 110 [ 483.348533][T12531] fido_id[12531]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 483.535821][ T5686] usb 5-1: 0:2 : does not exist [ 483.749500][ T5686] usb 5-1: USB disconnect, device number 108 [ 483.907351][ T5647] udevd[5647]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 484.551918][ T29] usb 2-1: unable to get BOS descriptor or descriptor too short [ 484.593916][ T29] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 484.626426][ T29] usb 2-1: can't read configurations, error -71 [ 485.480811][T12565] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 485.550652][T12565] kAFS: unable to lookup cell 'ÿ' [ 485.749397][ T9] usb 4-1: USB disconnect, device number 106 [ 485.965502][ T10] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 486.098227][T12576] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 486.185452][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 487.711409][T12600] netlink: 'syz.3.2411': attribute type 12 has an invalid length. [ 488.064464][ T5700] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 488.149020][T12615] input: syz1 as /devices/virtual/input/input85 [ 488.252938][ T5700] usb 4-1: Using ep0 maxpacket: 8 [ 488.279627][ T5700] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 488.321073][ T5700] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 488.359744][ T5700] usb 4-1: config 0 has no interface number 0 [ 488.384988][ T5700] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 488.438451][ T5700] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 488.476761][ T5700] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 488.537280][ T5700] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 488.561271][ T5700] usb 4-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 488.590408][ T5700] usb 4-1: Product: syz [ 488.605334][ T5700] usb 4-1: Manufacturer: syz [ 488.653254][ T5700] usb 4-1: config 0 descriptor?? [ 488.668752][T12607] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 488.753281][ T5724] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 488.935536][ T5724] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 488.960496][ T5724] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 489.005821][ T5724] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 489.016924][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 489.032146][ T5724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.049189][ T5724] usb 3-1: Product: syz [ 489.050550][ T10] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 489.068073][ T5724] usb 3-1: Manufacturer: syz [ 489.118347][ T5724] usb 3-1: SerialNumber: syz [ 489.124464][ T10] usb 2-1: can't read configurations, error -71 [ 489.164247][ T5724] usb 3-1: config 0 descriptor?? [ 489.177922][T12619] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 489.189306][T12619] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 489.282079][ T29] hid_parser_main: 11 callbacks suppressed [ 489.282100][ T29] hid-generic 0000:0000:0000.0054: unknown main item tag 0x0 [ 489.324282][ T5700] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.21/input/input86 [ 489.344101][ T29] hid-generic 0000:0000:0000.0054: hidraw0: HID v0.00 Device [syz1] on syz0 [ 489.499427][T12619] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 489.531850][T12619] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 489.636900][T12632] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 489.671655][T12632] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 489.744794][T12632] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 489.765964][T12632] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 489.810263][T12632] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 489.831473][T12632] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 489.859503][T12632] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 489.874493][T12632] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 489.904023][T12632] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 489.917948][T12632] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 489.970515][T12632] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 489.995219][T12636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.071309][T12636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.206497][ T5700] usb 4-1: USB disconnect, device number 107 [ 490.214106][ C0] keyspan_remote 4-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 490.397339][T12649] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2429'. [ 490.638257][ T5724] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 490.667163][ T5724] dm9601 3-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet, 6e:f1:98:9e:dd:08 [ 490.694175][ T5724] usb 3-1: USB disconnect, device number 111 [ 490.710905][ T5724] dm9601 3-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet [ 490.750249][T12660] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 490.798741][T12660] kAFS: unable to lookup cell 'ÿ' [ 491.009887][T12664] syz_tun: left promiscuous mode [ 491.046302][T12664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.162548][ T5700] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 491.167139][T12671] snd_dummy snd_dummy.0: control 1:-1:-8:syz0:32 is already present [ 491.246628][T12664] bond1: left promiscuous mode [ 491.263231][T12664] veth0_to_bond: left promiscuous mode [ 491.301468][T12664] 8021q: adding VLAN 0 to HW filter on device bond1 [ 491.332689][ T5700] usb 5-1: Using ep0 maxpacket: 8 [ 491.339883][T12664] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 491.375460][T12674] input: syz0 as /devices/virtual/input/input87 [ 491.406205][ T762] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.413438][ T762] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.703953][ T5632] Bluetooth: hci0: command 0x0406 tx timeout [ 491.782616][ T5632] Bluetooth: hci1: command 0x0406 tx timeout [ 491.862865][ T5632] Bluetooth: hci4: command 0x0406 tx timeout [ 491.869207][ T5630] Bluetooth: hci3: command 0x0406 tx timeout [ 491.912571][ T29] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 491.942839][ T5630] Bluetooth: hci2: command 0x0c1a tx timeout [ 492.076375][ T29] usb 2-1: config 1 interface 0 has no altsetting 0 [ 492.101251][ T29] usb 2-1: string descriptor 0 read error: -22 [ 492.129848][ T29] usb 2-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.40 [ 492.155027][T12686] [ 492.157385][T12686] ===================================================== [ 492.164391][T12686] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 492.171993][T12686] syzkaller #0 Tainted: G L [ 492.177968][T12686] ----------------------------------------------------- [ 492.184944][T12686] syz.5.2441/12686 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 492.192670][T12686] ffffffff8e60a058 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0x12b/0x420 [ 492.201561][T12686] [ 492.201561][T12686] and this task is already holding: [ 492.208953][T12686] ffff888025d9b120 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 492.217679][T12686] which would create a new lock dependency: [ 492.223563][T12686] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 492.231234][T12686] [ 492.231234][T12686] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 492.240727][T12686] (&dev->event_lock#2){..-.}-{3:3} [ 492.240761][T12686] [ 492.240761][T12686] ... which became SOFTIRQ-irq-safe at: [ 492.253631][T12686] lock_acquire+0x106/0x350 [ 492.258269][T12686] _raw_spin_lock_irqsave+0x40/0x60 [ 492.263660][T12686] input_event+0x71/0xc0 [ 492.268096][T12686] atp_complete_geyser_3_4+0x114e/0x1d90 [ 492.273895][T12686] __usb_hcd_giveback_urb+0x376/0x540 [ 492.279413][T12686] dummy_timer+0xbc0/0x4650 [ 492.284130][T12686] __hrtimer_run_queues+0x3c0/0xa20 [ 492.289431][T12686] hrtimer_run_softirq+0x17a/0x240 [ 492.294641][T12686] handle_softirqs+0x22a/0x840 [ 492.299571][T12686] __irq_exit_rcu+0xca/0x220 [ 492.304256][T12686] irq_exit_rcu+0x9/0x30 [ 492.308586][T12686] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 492.314384][T12686] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 492.320488][T12686] _raw_spin_unlock_irqrestore+0x47/0x80 [ 492.326211][T12686] dummy_urb_enqueue+0x58a/0x780 [ 492.331240][T12686] usb_hcd_submit_urb+0x328/0x1b70 [ 492.336434][T12686] atp_open+0x60/0x90 [ 492.340498][T12686] input_open_device+0x1f8/0x3b0 [ 492.345516][T12686] mousedev_open_device+0xcc/0x150 [ 492.350705][T12686] mousedev_open+0x2ef/0x4a0 [ 492.355385][T12686] chrdev_open+0x4cd/0x5e0 [ 492.359880][T12686] do_dentry_open+0x822/0x13a0 [ 492.364726][T12686] vfs_open+0x3b/0x340 [ 492.368886][T12686] path_openat+0x2e08/0x3860 [ 492.373565][T12686] do_file_open+0x23e/0x4a0 [ 492.378150][T12686] do_sys_openat2+0x113/0x200 [ 492.382906][T12686] __x64_sys_openat+0x138/0x170 [ 492.387838][T12686] do_syscall_64+0x174/0x580 [ 492.392588][T12686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.398564][T12686] [ 492.398564][T12686] to a SOFTIRQ-irq-unsafe lock: [ 492.405632][T12686] (tasklist_lock){.+.+}-{3:3} [ 492.405662][T12686] [ 492.405662][T12686] ... which became SOFTIRQ-irq-unsafe at: [ 492.418274][T12686] ... [ 492.418354][T12686] lock_acquire+0x106/0x350 [ 492.425518][T12686] _raw_read_lock+0x36/0x50 [ 492.430158][T12686] __do_wait+0xde/0x740 [ 492.434402][T12686] do_wait+0x1e7/0x510 [ 492.438556][T12686] kernel_wait+0xd6/0x1c0 [ 492.443058][T12686] call_usermodehelper_exec_work+0xbe/0x230 [ 492.449064][T12686] process_scheduled_works+0xb5d/0x1860 [ 492.454693][T12686] worker_thread+0xa53/0xfc0 [ 492.459366][T12686] kthread+0x389/0x470 [ 492.463516][T12686] ret_from_fork+0x514/0xb70 [ 492.468219][T12686] ret_from_fork_asm+0x1a/0x30 [ 492.473091][T12686] [ 492.473091][T12686] other info that might help us debug this: [ 492.473091][T12686] [ 492.483307][T12686] Chain exists of: [ 492.483307][T12686] &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock [ 492.483307][T12686] [ 492.496353][T12686] Possible interrupt unsafe locking scenario: [ 492.496353][T12686] [ 492.504728][T12686] CPU0 CPU1 [ 492.510084][T12686] ---- ---- [ 492.515513][T12686] lock(tasklist_lock); [ 492.519762][T12686] local_irq_disable(); [ 492.526506][T12686] lock(&dev->event_lock#2); [ 492.533776][T12686] lock(&f_owner->lock); [ 492.540623][T12686] [ 492.544122][T12686] lock(&dev->event_lock#2); [ 492.548991][T12686] [ 492.548991][T12686] *** DEADLOCK *** [ 492.548991][T12686] [ 492.557168][T12686] 2 locks held by syz.5.2441/12686: [ 492.562352][T12686] #0: ffff88807663ecd0 (&u->lock){+.+.}-{3:3}, at: queue_oob+0x1b6/0x4f0 [ 492.570988][T12686] #1: ffff888025d9b120 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 492.580137][T12686] [ 492.580137][T12686] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 492.590531][T12686] -> (&dev->event_lock#2){..-.}-{3:3} { [ 492.596269][T12686] IN-SOFTIRQ-W at: [ 492.600523][T12686] lock_acquire+0x106/0x350 [ 492.607024][T12686] _raw_spin_lock_irqsave+0x40/0x60 [ 492.614222][T12686] input_event+0x71/0xc0 [ 492.620467][T12686] atp_complete_geyser_3_4+0x114e/0x1d90 [ 492.628102][T12686] __usb_hcd_giveback_urb+0x376/0x540 [ 492.635467][T12686] dummy_timer+0xbc0/0x4650 [ 492.641969][T12686] __hrtimer_run_queues+0x3c0/0xa20 [ 492.649159][T12686] hrtimer_run_softirq+0x17a/0x240 [ 492.656263][T12686] handle_softirqs+0x22a/0x840 [ 492.663019][T12686] __irq_exit_rcu+0xca/0x220 [ 492.669602][T12686] irq_exit_rcu+0x9/0x30 [ 492.675834][T12686] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 492.683459][T12686] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 492.691433][T12686] _raw_spin_unlock_irqrestore+0x47/0x80 [ 492.699060][T12686] dummy_urb_enqueue+0x58a/0x780 [ 492.705995][T12686] usb_hcd_submit_urb+0x328/0x1b70 [ 492.713098][T12686] atp_open+0x60/0x90 [ 492.719081][T12686] input_open_device+0x1f8/0x3b0 [ 492.726019][T12686] mousedev_open_device+0xcc/0x150 [ 492.733122][T12686] mousedev_open+0x2ef/0x4a0 [ 492.739710][T12686] chrdev_open+0x4cd/0x5e0 [ 492.746122][T12686] do_dentry_open+0x822/0x13a0 [ 492.752881][T12686] vfs_open+0x3b/0x340 [ 492.758942][T12686] path_openat+0x2e08/0x3860 [ 492.765530][T12686] do_file_open+0x23e/0x4a0 [ 492.772030][T12686] do_sys_openat2+0x113/0x200 [ 492.778698][T12686] __x64_sys_openat+0x138/0x170 [ 492.785536][T12686] do_syscall_64+0x174/0x580 [ 492.792118][T12686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.800002][T12686] INITIAL USE at: [ 492.804067][T12686] lock_acquire+0x106/0x350 [ 492.810473][T12686] _raw_spin_lock_irqsave+0x40/0x60 [ 492.817581][T12686] input_inject_event+0xa4/0x330 [ 492.824430][T12686] kbd_led_trigger_activate+0xbc/0x100 [ 492.831915][T12686] led_trigger_set+0x535/0x960 [ 492.838651][T12686] led_trigger_set_default+0x260/0x2a0 [ 492.846023][T12686] led_classdev_register_ext+0x787/0x9c0 [ 492.853558][T12686] input_leds_connect+0x517/0x790 [ 492.860493][T12686] input_register_device+0xce0/0x1140 [ 492.867780][T12686] atkbd_connect+0x71e/0xa10 [ 492.874277][T12686] serio_driver_probe+0x82/0xb0 [ 492.881031][T12686] really_probe+0x267/0xaf0 [ 492.887547][T12686] __driver_probe_device+0x1ef/0x380 [ 492.894748][T12686] driver_probe_device+0x4f/0x240 [ 492.901680][T12686] __driver_attach+0x34c/0x640 [ 492.908347][T12686] bus_for_each_dev+0x23b/0x2c0 [ 492.915166][T12686] serio_handle_event+0x1af/0xf80 [ 492.922096][T12686] process_scheduled_works+0xb5d/0x1860 [ 492.929555][T12686] worker_thread+0xa53/0xfc0 [ 492.936066][T12686] kthread+0x389/0x470 [ 492.942046][T12686] ret_from_fork+0x514/0xb70 [ 492.948544][T12686] ret_from_fork_asm+0x1a/0x30 [ 492.955223][T12686] } [ 492.957890][T12686] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 492.967274][T12686] -> (&new->fa_lock){...-}-{3:3} { [ 492.972495][T12686] IN-SOFTIRQ-R at: [ 492.976640][T12686] lock_acquire+0x106/0x350 [ 492.982974][T12686] _raw_read_lock_irqsave+0x48/0x60 [ 492.990001][T12686] kill_fasync+0x199/0x4d0 [ 492.996245][T12686] sock_wake_async+0x137/0x160 [ 493.002954][T12686] sock_def_readable+0x3c1/0x550 [ 493.009755][T12686] tcp_child_process+0x4d7/0x960 [ 493.016585][T12686] tcp_v6_rcv+0x1d6c/0x2fa0 [ 493.022966][T12686] ip6_protocol_deliver_rcu+0xd95/0x1740 [ 493.030487][T12686] ip6_input_finish+0x191/0x370 [ 493.037161][T12686] NF_HOOK+0x336/0x3c0 [ 493.043046][T12686] ip6_input+0x16a/0x270 [ 493.049105][T12686] NF_HOOK+0x336/0x3c0 [ 493.054988][T12686] process_backlog+0x7dd/0x1950 [ 493.061757][T12686] __napi_poll+0xae/0x340 [ 493.067914][T12686] net_rx_action+0x627/0xf70 [ 493.074327][T12686] handle_softirqs+0x22a/0x840 [ 493.080909][T12686] do_softirq+0x76/0xd0 [ 493.086877][T12686] __local_bh_enable_ip+0xf8/0x130 [ 493.093806][T12686] __dev_queue_xmit+0x1fe5/0x3950 [ 493.100718][T12686] ip6_output+0x340/0x550 [ 493.106874][T12686] ip6_xmit+0x11e2/0x1af0 [ 493.113024][T12686] inet6_csk_xmit+0x3bd/0x6c0 [ 493.119590][T12686] __tcp_transmit_skb+0x26dd/0x4790 [ 493.126685][T12686] tcp_write_xmit+0x1be0/0x6540 [ 493.133357][T12686] __tcp_push_pending_frames+0x97/0x380 [ 493.140727][T12686] __tcp_close+0x617/0xfe0 [ 493.147131][T12686] tcp_close+0x28/0x110 [ 493.153109][T12686] inet_release+0x143/0x190 [ 493.159497][T12686] sock_close+0xc3/0x240 [ 493.165563][T12686] __fput+0x44f/0xa60 [ 493.171363][T12686] task_work_run+0x1d9/0x270 [ 493.177777][T12686] exit_to_user_mode_loop+0x193/0x680 [ 493.184964][T12686] __do_fast_syscall_32+0x45b/0x6f0 [ 493.191974][T12686] do_fast_syscall_32+0x33/0x70 [ 493.198648][T12686] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 493.206791][T12686] INITIAL USE at: [ 493.210763][T12686] lock_acquire+0x106/0x350 [ 493.216989][T12686] _raw_write_lock_irq+0x3d/0x50 [ 493.223649][T12686] fasync_remove_entry+0xf1/0x1c0 [ 493.230405][T12686] sock_fasync+0x85/0xf0 [ 493.236385][T12686] __fput+0x890/0xa60 [ 493.242097][T12686] task_work_run+0x1d9/0x270 [ 493.248418][T12686] exit_to_user_mode_loop+0x193/0x680 [ 493.255520][T12686] __do_fast_syscall_32+0x45b/0x6f0 [ 493.262447][T12686] do_fast_syscall_32+0x33/0x70 [ 493.269025][T12686] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 493.277080][T12686] INITIAL READ USE at: [ 493.281480][T12686] lock_acquire+0x106/0x350 [ 493.288146][T12686] _raw_read_lock_irqsave+0x48/0x60 [ 493.295512][T12686] kill_fasync+0x199/0x4d0 [ 493.302092][T12686] sock_wake_async+0x137/0x160 [ 493.309016][T12686] sock_def_readable+0x3c1/0x550 [ 493.316114][T12686] tcp_child_process+0x4d7/0x960 [ 493.323217][T12686] tcp_v6_rcv+0x1d6c/0x2fa0 [ 493.329881][T12686] ip6_protocol_deliver_rcu+0xd95/0x1740 [ 493.337676][T12686] ip6_input_finish+0x191/0x370 [ 493.344695][T12686] NF_HOOK+0x336/0x3c0 [ 493.350923][T12686] ip6_input+0x16a/0x270 [ 493.357324][T12686] NF_HOOK+0x336/0x3c0 [ 493.363553][T12686] process_backlog+0x7dd/0x1950 [ 493.370571][T12686] __napi_poll+0xae/0x340 [ 493.377067][T12686] net_rx_action+0x627/0xf70 [ 493.383816][T12686] handle_softirqs+0x22a/0x840 [ 493.390740][T12686] do_softirq+0x76/0xd0 [ 493.397048][T12686] __local_bh_enable_ip+0xf8/0x130 [ 493.404317][T12686] __dev_queue_xmit+0x1fe5/0x3950 [ 493.411501][T12686] ip6_output+0x340/0x550 [ 493.417993][T12686] ip6_xmit+0x11e2/0x1af0 [ 493.424488][T12686] inet6_csk_xmit+0x3bd/0x6c0 [ 493.431327][T12686] __tcp_transmit_skb+0x26dd/0x4790 [ 493.438685][T12686] tcp_write_xmit+0x1be0/0x6540 [ 493.445699][T12686] __tcp_push_pending_frames+0x97/0x380 [ 493.453407][T12686] __tcp_close+0x617/0xfe0 [ 493.459983][T12686] tcp_close+0x28/0x110 [ 493.466299][T12686] inet_release+0x143/0x190 [ 493.472960][T12686] sock_close+0xc3/0x240 [ 493.479364][T12686] __fput+0x44f/0xa60 [ 493.485509][T12686] task_work_run+0x1d9/0x270 [ 493.492263][T12686] exit_to_user_mode_loop+0x193/0x680 [ 493.499791][T12686] __do_fast_syscall_32+0x45b/0x6f0 [ 493.507150][T12686] do_fast_syscall_32+0x33/0x70 [ 493.514157][T12686] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 493.522642][T12686] } [ 493.525213][T12686] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 493.534070][T12686] ... acquired at: [ 493.537946][T12686] _raw_read_lock_irqsave+0x48/0x60 [ 493.543319][T12686] kill_fasync+0x199/0x4d0 [ 493.547901][T12686] mousedev_notify_readers+0x6f1/0xc00 [ 493.553530][T12686] mousedev_event+0x602/0x1320 [ 493.558459][T12686] input_handle_events_default+0xd4/0x1a0 [ 493.564339][T12686] input_pass_values+0x288/0x890 [ 493.569434][T12686] input_event_dispose+0x330/0x6b0 [ 493.574710][T12686] input_inject_event+0x1dc/0x330 [ 493.579900][T12686] evdev_write+0x325/0x4c0 [ 493.584478][T12686] vfs_write+0x29a/0xb90 [ 493.588887][T12686] ksys_write+0x150/0x270 [ 493.593381][T12686] __do_fast_syscall_32+0x23e/0x6f0 [ 493.598739][T12686] do_fast_syscall_32+0x33/0x70 [ 493.603764][T12686] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 493.610266][T12686] [ 493.612577][T12686] -> (&f_owner->lock){....}-{3:3} { [ 493.617794][T12686] INITIAL USE at: [ 493.621673][T12686] lock_acquire+0x106/0x350 [ 493.627726][T12686] _raw_write_lock_irq+0x3d/0x50 [ 493.634210][T12686] __f_setown+0x67/0x370 [ 493.640011][T12686] generic_setlease+0xacf/0xfd0 [ 493.646450][T12686] do_fcntl_add_lease+0x35e/0x470 [ 493.653032][T12686] fcntl_setlease+0x123/0x180 [ 493.659262][T12686] do_fcntl+0x8b3/0x1a20 [ 493.665055][T12686] do_compat_fcntl64+0x51e/0x7e0 [ 493.671547][T12686] __do_fast_syscall_32+0x23e/0x6f0 [ 493.678297][T12686] do_fast_syscall_32+0x33/0x70 [ 493.684698][T12686] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 493.692584][T12686] INITIAL READ USE at: [ 493.696903][T12686] lock_acquire+0x106/0x350 [ 493.703395][T12686] _raw_read_lock_irqsave+0x48/0x60 [ 493.710586][T12686] send_sigio+0x38/0x370 [ 493.716815][T12686] kill_fasync+0x24d/0x4d0 [ 493.723226][T12686] lease_break_callback+0x26/0x30 [ 493.730242][T12686] __break_lease+0x81f/0x1ea0 [ 493.736905][T12686] do_dentry_open+0xf23/0x13a0 [ 493.743660][T12686] vfs_open+0x3b/0x340 [ 493.749715][T12686] path_openat+0x2e08/0x3860 [ 493.756294][T12686] do_file_open+0x23e/0x4a0 [ 493.762783][T12686] do_sys_openat2+0x113/0x200 [ 493.769443][T12686] __ia32_compat_sys_openat+0x131/0x160 [ 493.776974][T12686] __do_fast_syscall_32+0x23e/0x6f0 [ 493.784158][T12686] do_fast_syscall_32+0x33/0x70 [ 493.790990][T12686] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 493.799306][T12686] } [ 493.801787][T12686] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 493.810629][T12686] ... acquired at: [ 493.814418][T12686] _raw_read_lock_irqsave+0x48/0x60 [ 493.819780][T12686] send_sigio+0x38/0x370 [ 493.824184][T12686] kill_fasync+0x24d/0x4d0 [ 493.828767][T12686] lease_break_callback+0x26/0x30 [ 493.833960][T12686] __break_lease+0x81f/0x1ea0 [ 493.838800][T12686] do_dentry_open+0xf23/0x13a0 [ 493.843727][T12686] vfs_open+0x3b/0x340 [ 493.847956][T12686] path_openat+0x2e08/0x3860 [ 493.852714][T12686] do_file_open+0x23e/0x4a0 [ 493.857381][T12686] do_sys_openat2+0x113/0x200 [ 493.862216][T12686] __ia32_compat_sys_openat+0x131/0x160 [ 493.867925][T12686] __do_fast_syscall_32+0x23e/0x6f0 [ 493.873286][T12686] do_fast_syscall_32+0x33/0x70 [ 493.878299][T12686] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 493.884790][T12686] [ 493.887097][T12686] [ 493.887097][T12686] the dependencies between the lock to be acquired [ 493.887106][T12686] and SOFTIRQ-irq-unsafe lock: [ 493.900598][T12686] -> (tasklist_lock){.+.+}-{3:3} { [ 493.905714][T12686] HARDIRQ-ON-R at: [ 493.909684][T12686] lock_acquire+0x106/0x350 [ 493.915825][T12686] _raw_read_lock+0x36/0x50 [ 493.921970][T12686] __do_wait+0xde/0x740 [ 493.927774][T12686] do_wait+0x1e7/0x510 [ 493.933481][T12686] kernel_wait+0xd6/0x1c0 [ 493.939449][T12686] call_usermodehelper_exec_work+0xbe/0x230 [ 493.946988][T12686] process_scheduled_works+0xb5d/0x1860 [ 493.954173][T12686] worker_thread+0xa53/0xfc0 [ 493.960418][T12686] kthread+0x389/0x470 [ 493.966130][T12686] ret_from_fork+0x514/0xb70 [ 493.972359][T12686] ret_from_fork_asm+0x1a/0x30 [ 493.978770][T12686] SOFTIRQ-ON-R at: [ 493.982739][T12686] lock_acquire+0x106/0x350 [ 493.988888][T12686] _raw_read_lock+0x36/0x50 [ 493.995035][T12686] __do_wait+0xde/0x740 [ 494.000831][T12686] do_wait+0x1e7/0x510 [ 494.006544][T12686] kernel_wait+0xd6/0x1c0 [ 494.012519][T12686] call_usermodehelper_exec_work+0xbe/0x230 [ 494.020064][T12686] process_scheduled_works+0xb5d/0x1860 [ 494.027245][T12686] worker_thread+0xa53/0xfc0 [ 494.033475][T12686] kthread+0x389/0x470 [ 494.039183][T12686] ret_from_fork+0x514/0xb70 [ 494.045414][T12686] ret_from_fork_asm+0x1a/0x30 [ 494.051818][T12686] INITIAL USE at: [ 494.055707][T12686] lock_acquire+0x106/0x350 [ 494.061764][T12686] _raw_write_lock_irq+0x3d/0x50 [ 494.068254][T12686] copy_process+0x2b4c/0x4440 [ 494.074483][T12686] kernel_clone+0x2d7/0x940 [ 494.080556][T12686] user_mode_thread+0x110/0x180 [ 494.086974][T12686] rest_init+0x23/0x300 [ 494.092693][T12686] start_kernel+0x38a/0x3e0 [ 494.098874][T12686] x86_64_start_reservations+0x24/0x30 [ 494.105928][T12686] x86_64_start_kernel+0x143/0x1c0 [ 494.112614][T12686] common_startup_64+0x13e/0x147 [ 494.119114][T12686] INITIAL READ USE at: [ 494.123433][T12686] lock_acquire+0x106/0x350 [ 494.129923][T12686] _raw_read_lock+0x36/0x50 [ 494.136433][T12686] __do_wait+0xde/0x740 [ 494.142677][T12686] do_wait+0x1e7/0x510 [ 494.148750][T12686] kernel_wait+0xd6/0x1c0 [ 494.155074][T12686] call_usermodehelper_exec_work+0xbe/0x230 [ 494.162969][T12686] process_scheduled_works+0xb5d/0x1860 [ 494.170512][T12686] worker_thread+0xa53/0xfc0 [ 494.177089][T12686] kthread+0x389/0x470 [ 494.183152][T12686] ret_from_fork+0x514/0xb70 [ 494.189724][T12686] ret_from_fork_asm+0x1a/0x30 [ 494.196476][T12686] } [ 494.198963][T12686] ... key at: [] tasklist_lock+0x18/0x40 [ 494.206796][T12686] ... acquired at: [ 494.210582][T12686] _raw_read_lock+0x36/0x50 [ 494.215258][T12686] send_sigurg+0x12b/0x420 [ 494.219839][T12686] sk_send_sigurg+0x6c/0x2e0 [ 494.224594][T12686] queue_oob+0x42c/0x4f0 [ 494.229001][T12686] unix_stream_sendmsg+0xcb1/0xe80 [ 494.234276][T12686] ____sys_sendmsg+0x972/0x9f0 [ 494.239206][T12686] ___sys_sendmsg+0x2a5/0x360 [ 494.244055][T12686] __sys_sendmmsg+0x2e7/0x4e0 [ 494.248899][T12686] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 494.254712][T12686] __do_fast_syscall_32+0x23e/0x6f0 [ 494.260089][T12686] do_fast_syscall_32+0x33/0x70 [ 494.265109][T12686] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 494.271605][T12686] [ 494.273921][T12686] [ 494.273921][T12686] stack backtrace: [ 494.279811][T12686] CPU: 1 UID: 0 PID: 12686 Comm: syz.5.2441 Tainted: G L syzkaller #0 PREEMPT(full) [ 494.279836][T12686] Tainted: [L]=SOFTLOCKUP [ 494.279842][T12686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 494.279859][T12686] Call Trace: [ 494.279866][T12686] [ 494.279942][T12686] dump_stack_lvl+0xe8/0x150 [ 494.280001][T12686] __lock_acquire+0x2a94/0x2cf0 [ 494.280035][T12686] ? send_sigurg+0x12b/0x420 [ 494.280053][T12686] lock_acquire+0x106/0x350 [ 494.280068][T12686] ? send_sigurg+0x12b/0x420 [ 494.280091][T12686] _raw_read_lock+0x36/0x50 [ 494.280112][T12686] ? send_sigurg+0x12b/0x420 [ 494.280129][T12686] send_sigurg+0x12b/0x420 [ 494.280149][T12686] sk_send_sigurg+0x6c/0x2e0 [ 494.280166][T12686] queue_oob+0x42c/0x4f0 [ 494.280185][T12686] ? __pfx_queue_oob+0x10/0x10 [ 494.280202][T12686] ? __lock_acquire+0x6b5/0x2cf0 [ 494.280218][T12686] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 494.280260][T12686] unix_stream_sendmsg+0xcb1/0xe80 [ 494.280280][T12686] ? rcu_is_watching+0x15/0xb0 [ 494.280295][T12686] ? trace_sched_exit_tp+0x3a/0x130 [ 494.280309][T12686] ? __might_fault+0xaf/0x130 [ 494.280339][T12686] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 494.280359][T12686] ? __import_iovec+0x5d4/0x7e0 [ 494.280418][T12686] ? aa_sock_msg_perm+0xda/0x1b0 [ 494.280505][T12686] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 494.280522][T12686] ____sys_sendmsg+0x972/0x9f0 [ 494.280540][T12686] ? __pfx_____sys_sendmsg+0x10/0x10 [ 494.280556][T12686] ? futex_unqueue+0x22/0x240 [ 494.280583][T12686] ___sys_sendmsg+0x2a5/0x360 [ 494.280595][T12686] ? __lock_acquire+0x6b5/0x2cf0 [ 494.280612][T12686] ? __pfx____sys_sendmsg+0x10/0x10 [ 494.280625][T12686] ? __pfx___futex_wait+0x10/0x10 [ 494.280655][T12686] ? __fget_files+0x2a/0x420 [ 494.280670][T12686] ? __fget_files+0x3a0/0x420 [ 494.280691][T12686] __sys_sendmmsg+0x2e7/0x4e0 [ 494.280705][T12686] ? __pfx___sys_sendmmsg+0x10/0x10 [ 494.280723][T12686] ? __pfx_do_futex+0x10/0x10 [ 494.280736][T12686] ? do_compat_fcntl64+0x77a/0x7e0 [ 494.280761][T12686] ? rcu_is_watching+0x15/0xb0 [ 494.280778][T12686] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 494.280798][T12686] __do_fast_syscall_32+0x23e/0x6f0 [ 494.280813][T12686] ? do_fast_syscall_32+0x33/0x70 [ 494.280827][T12686] ? lockdep_hardirqs_on+0x7a/0x110 [ 494.280841][T12686] ? irqentry_exit+0x10f/0x8b0 [ 494.280853][T12686] ? trace_irq_disable+0x3b/0x140 [ 494.280879][T12686] do_fast_syscall_32+0x33/0x70 [ 494.280892][T12686] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 494.280911][T12686] RIP: 0023:0xf704f01c [ 494.280931][T12686] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 494.280972][T12686] RSP: 002b:00000000f543d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 494.280994][T12686] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080006c40 [ 494.281004][T12686] RDX: 0000000000000001 RSI: 0000000000040015 RDI: 0000000000000000 [ 494.281014][T12686] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 494.281024][T12686] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 494.281032][T12686] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 494.281046][T12686] [ 494.600727][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.747038][ T5632] Bluetooth: hci0: command 0x0406 tx timeout [ 494.747039][ T5630] Bluetooth: hci1: command 0x0406 tx timeout [ 494.747080][ T5630] Bluetooth: hci3: command 0x0406 tx timeout [ 494.747113][ T5630] Bluetooth: hci4: command 0x0406 tx timeout [ 494.747145][ T5630] Bluetooth: hci2: command 0x0c1a tx timeout [ 494.755439][ T29] usbhid 2-1:1.0: can't add hid device: -71 [ 494.784442][ T29] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 494.796063][ T29] usb 2-1: USB disconnect, device number 115 [ 494.805363][ T5700] usb 5-1: unable to get BOS descriptor or descriptor too short [ 494.847470][ T5700] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 494.859711][ T5700] usb 5-1: can't read configurations, error -71 [ 496.832521][ T5630] Bluetooth: hci2: command 0x0c1a tx timeout [ 501.303498][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.309885][ T1317] ieee802154 phy1 wpan1: encryption failed: -22