last executing test programs: 8.251032565s ago: executing program 3 (id=3776): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e23, 0xc2, @ipv4={'\x00', '\xff\xff', @empty}, 0x200}}, 0x0, 0x0, 0x3d, 0x0, "bb1ba3c344ca41d6358e544508474004000b42920e61074e0000c534a632cd6193fcf19b2df3eea18b56c54dc46d8b6d2c0010000000000000000400"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x6, 0x4) r2 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="120110038e3ac6209406010013780102030109024600020e061003090439d8011adaa8080905081020000509800904e40503b956da020905080000040112fc09050b00200007039a0705d15b89f26d0928090340007a0a84"], &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000180), 0x80) syz_usb_control_io$hid(r2, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0003043fd224c1e31d0f"], 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={0x0}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000000)={{0x2, @addr=0x400}, 0x8, 0x6, 0x9}) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) r6 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x10}, 0x4e20, 0x3, 'lblc\x00', 0x1a, 0x40c, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000200)={{0x84, @empty, 0x4e21, 0x3, 'lc\x00', 0xc, 0x9, 0x63}, {@private=0xa010102, 0x4623, 0x4, 0x100000cd, 0x12d5f, 0x3}}, 0x44) sendmmsg$sock(r5, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}, 0x1000000}], 0x1, 0x20000000) listen(r0, 0x800) accept4(r0, 0x0, 0x0, 0x80000) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYRESDEC], 0x78) 7.353464767s ago: executing program 0 (id=3778): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x44, &(0x7f0000000000)={0x4d, 0x0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="001000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/15], 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r4, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8, 0x20}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000340)={{0x1, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) 6.3986443s ago: executing program 0 (id=3782): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = fsopen(&(0x7f0000000000)='jfs\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000240)='resize', 0x0, r0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xd) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r3 = dup(r2) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x52f}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) epoll_pwait(r4, &(0x7f0000000540)=[{}], 0x1, 0x4000a, 0x0, 0x0) r5 = socket(0x2b, 0x80801, 0x1) syz_emit_ethernet(0x76, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500001e31192496d7bcdf68000000002a0190780a010102ac1414aa0304908523b7fceb593abd000000000000117fff00000000e0000002440c0001e00000026e210000442c0001e000000100000003ac14140000000000ac1414aa00000000ac1e000100"/126], 0x0) sendmsg$AUDIT_GET_FEATURE(r5, &(0x7f00000001c0)={0x0, 0x2f, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x20000004) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) write$UHID_INPUT(r3, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.88104735s ago: executing program 3 (id=3787): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) signalfd(r0, &(0x7f0000000200)={[0x1, 0x5]}, 0x8) 4.804276092s ago: executing program 3 (id=3788): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1703}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x3f}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0xf986520fcaace820) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00'}, 0x4e) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r4, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x102b, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) openat$procfs(0xffffff9c, &(0x7f00000000c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000e, 0x66032, 0xffffffffffffffff, 0x40000000) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) 4.573252281s ago: executing program 0 (id=3791): kcmp(0x0, 0x0, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x40800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff004) 4.572918238s ago: executing program 2 (id=3792): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x2f, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}}, 0x14}}, 0x0) sched_setscheduler(r0, 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000000)={0xa0000001}) epoll_pwait(r5, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 4.527130987s ago: executing program 0 (id=3793): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x801) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000100)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x2}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x13) tkill(r2, 0x12) waitid(0x1, r1, 0x0, 0x20000000, &(0x7f00000003c0)) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002380)=ANY=[@ANYBLOB="050000002183371d22f71d4a33d307000000000000000000fc63b69cd2afd028e00a8e391056ca63347cba7db017a909c3572b8a3ace2ae86aa1929f7a25ded4ff88b8b24cc6b8a3c7c9c2c840d8e006", @ANYRES32=0x1, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c3100009a1000000950074000000000031fb0d3a4231020004399d17d34e075fdcda533ab1aa71ab1d764152e6cb25dadc7ded5dbe11b62ac5ea9fca11027d19e93adb604a7d3deb92de3141e8ed7ac5b8902070213cdfdc5d6c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7965a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e603950c4f67581c92ef8a7e8ece17d5f5b169391ef409c39c263895739e3d702c128b35d5fc23469240c61e150e2bae385f9ac9b03c22b0f7050c166b835298c5911f1053a723aee89051c24e1900ab97fa52d2e06dce0248a829ed46a520db4c1432080bbf707ad2f8af8118ee7d434a960ed6be4455ba57cb06459b64689e77ce95823a5533f5b11118906fd2fc29b3697c637d3693d4b4aade6f9202e6cfa6d7507f88af38b6109ad8f82b1d600a5447831df835d7000000218b0222004f98a7a0caddc397d8414be912b4e7536fefd951fe23a56fbf9fc643c6604268b5ccc13b996aaed0a6f6470566c8f534e5d486b2141646b35fd4472be8195fd917446a8abb1c2cd5dc09e2d75ec00ede2841e497d5178cf9445c7bb11f3c5cfdcae8c476d3fb75cac727143f92798a44864b49366b6cf228d9bc1d99ab2104e3c2e17ec46fbce102c158ff3748f1eb90b83d8be0dfcefbeed222009b41ad34d8656daf41e23322e58d91811feffc39ec11b11cc611f6fbfd999c3bef10caa2e8692259d40d69ed3d85ec2813b007b8ce6384a28798f445ad7fc451865fe45a06977f7a785f8e97544aad1f844f2a4799944e0daf6d4c3a7d30b7d89781ca607048c50945c45d5a6f2c5145416176fd64c559e6a272b92c92052a9005aaa25d09613aba2e7d429ae40c249e7996e4bc213c24699889ea320c40f32dcdaa19893e17c57d7e8c51d5f320d99e8c2521c339c33bf6c41fde029061c088"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r5, r4}, 0xc) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') read$FUSE(r6, &(0x7f00000001c0)={0x2020}, 0x2020) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000f7ffffff01000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000f1000000", @ANYRES8=r8], 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000022c0)={'gre0\x00', &(0x7f0000002200)={'gre0\x00', 0x0, 0x8000, 0x10, 0x8, 0x6b193ae0, {{0x26, 0x4, 0x0, 0x2e, 0x98, 0x65, 0x0, 0x2, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x56, 0x2, [{0x5, 0x11, "06b6ec0aae0ccac6875a2954c25e3a"}, {0x1, 0x5, "9f851e"}, {0x3, 0xe, "9dfd1517bbd71022865e7c7e"}, {0x7, 0x2}, {0x0, 0xb, "da0b4c3660377bbbc8"}, {0x5, 0xa, "703f0ff093865cc1"}, {0x5, 0x8, "741c346463dc"}, {0x7, 0xd, "ce04f2109ac52316a9b796"}]}, @timestamp_addr={0x44, 0x2c, 0x93, 0x1, 0x2, [{@loopback, 0x7}, {@broadcast, 0x839}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x4}, {@multicast2, 0x6}]}]}}}}}) wait4(r2, &(0x7f0000000140), 0x2, &(0x7f0000002300)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100f6ffffff2020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd) 4.334007517s ago: executing program 3 (id=3794): kcmp(0x0, 0x0, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff004) 4.176081193s ago: executing program 2 (id=3796): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e23, 0xc2, @ipv4={'\x00', '\xff\xff', @empty}, 0x200}}, 0x0, 0x0, 0x3d, 0x0, "bb1ba3c344ca41d6358e544508474004000b42920e61074e0000c534a632cd6193fcf19b2df3eea18b56c54dc46d8b6d2c0010000000000000000400"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, 0x0, 0x0) r2 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="120110038e3ac6209406010013780102030109024600020e061003090439d8011adaa8080905081020000509800904e40503b956da020905080000040112fc09050b00200007039a0705d15b89f26d0928090340007a0a84"], &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000180), 0x80) syz_usb_control_io$hid(r2, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0003043fd224c1e31d0f"], 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={0x0}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000000)={{0x2, @addr=0x400}, 0x8, 0x6, 0x9}) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) r6 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x10}, 0x4e20, 0x3, 'lblc\x00', 0x1a, 0x40c, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000200)={{0x84, @empty, 0x4e21, 0x3, 'lc\x00', 0xc, 0x9, 0x63}, {@private=0xa010102, 0x4623, 0x4, 0x100000cd, 0x12d5f, 0x3}}, 0x44) sendmmsg$sock(r5, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}, 0x1000000}], 0x1, 0x20000000) listen(r0, 0x800) accept4(r0, 0x0, 0x0, 0x80000) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYRESDEC], 0x78) 4.143329639s ago: executing program 3 (id=3797): r0 = socket(0x10, 0x2, 0x7fffbfff) connect$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x80, 0x2, 0x10, {0x2, 0x8003, @multicast2}}, 0x24) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_GET_EVENT(r2, 0x80286f4e, &(0x7f0000000100)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$FE_GET_EVENT(r2, 0x80286f4e, &(0x7f00000001c0)={0x0, {0x0, 0x0, @qam}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mount$9p_virtio(&(0x7f0000000280), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="4170a2a6c1"]) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) signalfd(r3, &(0x7f0000000200)={[0x1, 0x5]}, 0x8) ftruncate(r3, 0x4a8e) pipe(&(0x7f0000000300)) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r4 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r4, 0x501c4814, &(0x7f00000000c0)={0x2, 0x100, 0x0, 0x400, 0x2, 0x200200}) socket$nl_netfilter(0x10, 0x3, 0xc) 3.980379852s ago: executing program 0 (id=3798): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x3, 0x0, 0x7fff8000}]}) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffe, 0x7, @local}, {0xa, 0x0, 0x7ffffffe, @mcast1, 0xa8a9}, r1, 0x2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x10009}, {0xa, 0x4e20, 0x6, @mcast1, 0x7fffffff}, r1, 0x80d}}, 0x48) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x26c, 0x0, 0x200000000000000}]}) r5 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) fstat64(r2, &(0x7f0000000840)) r6 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='trans=fd,', @ANYRESHEX=r6, @ANYBLOB="66646e6f000000505f8389f5d77d3986a3c3d247c607182f44ffdbe8d303b0086703f31e943bf34b53ba383e99a650be1465374bd5a535cbdd9d33b95501e731b15de310aad27be9f3", @ANYRESHEX=r7, @ANYBLOB=',\x00']) openat$cgroup_procs(r7, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$uac3(r5, 0x0, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') read$FUSE(r9, &(0x7f00000045c0)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_GETENCODER(r9, 0xc01464a6, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PBUF_RING(r9, 0x16, &(0x7f0000000780)={&(0x7f0000001000)={[{&(0x7f0000000340)="27f1c3cc11e9aee54abeef9f49b41098c3e5ef2a197b93438961137d34ba8d1bca308184dc1b420e59870766f251850dad708bd08d83b2a9d64075ce414a8ccd4303e3b6a758c9e5073865cff844c80961d79aa4f2baef11ff86c77e7a8c7d343037174a6466f85847647762e65dc282855b249a543f3067143fd0dcfabdf07b88f7f449f5fbdc549ebcdf789949f84a53229ec358b4007572e62b3c5544da6720596b3726d1", 0xa6, 0x2}, {&(0x7f0000000400)="1787e14799745e24bb19a323c3d196a79a592216fa35abd59998c4a62d9b69dbb1b2ce56b5cfaf5a945971993767a1b2a2423bf286f57675bd4f00a3828d86db339c9efed76cafcef1fbc82443b4ecadb8da91", 0x53}, {&(0x7f0000000480)="eb5b4a1e6851898b9e75cfe49807191e51312d133e84c4e6ea947b93e39169e31aa2ab5fe5073444fd95063ca973853941a8b5de6ee758d364b2cc0252ae8b70a502fe", 0x43}, {&(0x7f0000000500)="8f74d67b7e8374801b015ec7c0987519caf0b6546366809a3c8bb6e33d28c77b5f7b883a695915bbca22371429cdb5a52953b34828c40c1836352e70dd39cf062e1c33b86d44b34639768200884087ca9aa85f2b1c6a4d467de7c3b171a7e314d1f765d38a136b5a57e72c524d7e5cd2bf32d988d54e3767e79ec0ebd1a02bb82fa2be43a2626d1c23b1b9250437d6f161ae", 0x92, 0x2}, {&(0x7f00000005c0)="2597c9a41948ae30964a92f48a1e385294da45c95c039ab52f0798c7dac63e4a0f3f197fd637b86157c5d843302784582ccb2d", 0x33}, {&(0x7f0000000600)="2829c527bbc2f4e8df1910f90e891df86135d4478155233ec21099c7be5ea34bb28b22c1655f4d82b15ca433985907bd18f448eb4c8b6fdc44856f3f64729e9a9694a15121acf24e857ed21e94e7057758cdc53dc52f2e6db10095e7d9e5e5484dd4e1ea694283e774df818c2ca8c2c08efe1377159e9efe73e43d1a44df5739f46594000e0805442726935c538197aae4e01cf9d51e46fa2ebae759e63806ae961794668d4e38cd7d235510cd43815ce27b14898e80a452799b0896c5003075d7b12e97ea621347a6898c41aa", 0xcd, 0x2}, {&(0x7f0000000700)="23bdfd02481e2bda8efe7d5d0dae7d688c2e9a414f8929aec1107214e4a704bfad72a0931209942ef9ffd6deed853dc764e0f585aa6b3626a08e439de614275f44826fba4d", 0x45, 0x2}]}, 0x7, 0x0, 0x1}, 0x1) write$char_usb(r8, &(0x7f0000006800)="10", 0x20) close(r8) socket(0x29, 0x1, 0x1) 2.584031524s ago: executing program 1 (id=3800): openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x2d41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x11) fcntl$lock(r3, 0x26, &(0x7f0000000300)={0x1, 0x1, 0x0, 0x0, r2}) 2.524146516s ago: executing program 1 (id=3801): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x44, &(0x7f0000000000)={0x4d, 0x0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="001000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/12], 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r4, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8, 0x20}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000340)={{0x1, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) readv(r6, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x8}], 0x2) 1.612541245s ago: executing program 1 (id=3802): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1703}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x3f}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0xf986520fcaace820) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00'}, 0x4e) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r4, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x102b, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) openat$procfs(0xffffff9c, &(0x7f00000000c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000e, 0x66032, 0xffffffffffffffff, 0x40000000) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) 1.313993285s ago: executing program 1 (id=3803): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = syz_io_uring_setup(0x4b, &(0x7f0000000300)={0x0, 0xf213, 0x40, 0x2, 0x17, 0x0, r2}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r2, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r5, 0x7}, 0x80, 0x0}, 0x4000011) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) ioctl$VIDIOC_QBUF(r7, 0x5460, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(r3, 0x14, &(0x7f0000008580), 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x54840) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 937.225024ms ago: executing program 3 (id=3804): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, 0x0, &(0x7f0000000080)) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r5 = timerfd_create(0x0, 0x0) timerfd_settime(r5, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) read(r5, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x100000001, 0x2, 0x3, 0x0, 0x3}) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000200)=r2) recvmmsg(r0, &(0x7f0000005600)=[{{&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001800)=[{&(0x7f00000002c0)=""/209, 0xd1}, {&(0x7f0000000480)=""/230, 0xe6}, {&(0x7f0000000580)=""/238, 0xee}, {&(0x7f0000000680)=""/128, 0x80}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/85, 0x55}, {&(0x7f0000001780)}, {&(0x7f00000017c0)=""/64, 0x40}], 0x8, &(0x7f0000001840)=""/207, 0xcf}, 0x7}, {{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000001fc0)}, {&(0x7f0000000140)=""/108, 0x6c}], 0x2, &(0x7f00000020c0)=""/55, 0x37}, 0x9}, {{&(0x7f0000002100)=@tipc=@name, 0x80, &(0x7f0000003240)=[{&(0x7f0000002180)=""/84, 0x54}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/9, 0x9}], 0x3, &(0x7f0000003280)=""/5, 0x5}, 0x8}, {{&(0x7f00000032c0)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f00000044c0)=[{&(0x7f0000003340)=""/40, 0x28}, {&(0x7f0000003380)=""/4096, 0x1000}, {&(0x7f0000004380)=""/37, 0x25}, {&(0x7f00000043c0)=""/40, 0x28}, {&(0x7f0000004400)=""/145, 0x91}], 0x5, &(0x7f0000004500)=""/4096, 0x1000}, 0x1}, {{0x0, 0x0, &(0x7f0000005540)=[{&(0x7f0000005500)}], 0x1, &(0x7f0000005580)=""/100, 0x64}, 0x1}], 0x5, 0x40010002, &(0x7f00000056c0)={0x77359400}) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) 852.798662ms ago: executing program 2 (id=3805): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x2f, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}}, 0x14}}, 0x0) sched_setscheduler(r0, 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, 0x0) epoll_pwait(r5, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 734.208778ms ago: executing program 0 (id=3806): r0 = socket(0x10, 0x2, 0x7fffbfff) connect$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x80, 0x2, 0x10, {0x2, 0x8003, @multicast2}}, 0x24) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_GET_EVENT(r2, 0x80286f4e, &(0x7f0000000100)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$FE_GET_EVENT(r2, 0x80286f4e, &(0x7f00000001c0)={0x0, {0x0, 0x0, @qam}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mount$9p_virtio(&(0x7f0000000280), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="4170a2a6c1"]) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) signalfd(r3, &(0x7f0000000200)={[0x1, 0x5]}, 0x8) ftruncate(r3, 0x4a8e) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r4 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r4, 0x501c4814, &(0x7f00000000c0)={0x2, 0x100, 0x0, 0x400, 0x2, 0x200200}) socket$nl_netfilter(0x10, 0x3, 0xc) 453.763437ms ago: executing program 2 (id=3807): syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f00000003c0)={0x1, 0x0, [{0x401, 0x4, 0x0, 0x0, @sint={0x0, 0x3}}]}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x1}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}, 0x0) 392.549652ms ago: executing program 1 (id=3808): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, 0xffffffffffffffff, 0x2002000}, 0xc) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3d8, 0xe0, 0xe0, 0x1ec, 0x2f8, 0x2f8, 0x2f8, 0x7fffffe, 0x0, {[{{@uncond, 0xbc, 0xe0}, @unspec=@STANDARD={0x24}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0xff, 0xa, 0xb, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x5, 0xb, 0x88a4, 0x5, 0x5, 0x7ff, 'dvmrp0\x00', 'macvlan0\x00', {0xff}, {}, 0x0, 0x2}, 0xbc, 0x10c, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @empty, @loopback, @empty, 0x4}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @multicast2, @private=0xa010100, 0x1, 0x1}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x424) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000002c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0xa, 0x6, 0x8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000440)={&(0x7f0000000300)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x6, 0x0, 0x6}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000080}]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)=[0x0], &(0x7f00000005c0), 0x0, 0x1, 0x0, 0x0, r10}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000000)={0xdd, r11, r10}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000580)={&(0x7f0000000480), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7, 0x8, 0x8}) r13 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x208000, 0x0) r14 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r14, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r14, 0xc06864a1, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r13, 0xc01864b0, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x8001}) prctl$PR_SCHED_CORE(0x53564d41, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000640)={&(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000006c0)={&(0x7f00000005c0)=[r5, 0x0, r10, r12, 0x0, r4], 0x6, 0x0, r15, 0x4762, 0x1, 0x5, 0x80, {0xe, 0x7, 0x1, 0x5, 0x5, 0x354f, 0x8000, 0x4aff, 0x1ff, 0x0, 0x3, 0x9, 0x1, 0x2000006, "1af3b8127f69f9098ad80aaa945445d031a9edd3d52a0311b8a8176ad4c7394b"}}) r16 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r16, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) socket$nl_netfilter(0x10, 0x3, 0xc) 384.460564ms ago: executing program 2 (id=3809): socket$nl_route(0x10, 0x3, 0x0) fadvise64(0xffffffffffffffff, 0x7fffffffffffffff, 0x4, 0x4) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fd, 0x0, 0x3, 0x3}, 0x10) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x9, 0x81fd, 0x2001, 0x1}, 0x1c) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r4 = socket$inet6(0xa, 0x805, 0x0) syz_emit_ethernet(0x7d, &(0x7f0000001180)=ANY=[@ANYBLOB="aaaaaa58aaaaaa0180c2000003bb5ec23fef4c7ad7808e9127ff0004ffbce8e638f3146447875a1b9b938ee1795dbb28179d291110995bb7d90625b9bb9af7b491d47623d7daaf72731303ac545a415c6db63f4dadf0b0d0ba8c716cea6c47eded6ea2a62305a2c5bd9917cf13f29b514f8747f09f09a780c58dcfd3ded96b8adcec0e2760998ec34779"], 0x0) getsockopt$bt_hci(r4, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000340)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) setsockopt$sock_int(r3, 0x1, 0x21, 0x0, 0x0) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, 0x0}}], 0x1, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 17.351085ms ago: executing program 2 (id=3810): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000580)={0x0}, &(0x7f00000005c0)=0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000050000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fcffffff850000007300000018110000", @ANYRES32=r1, @ANYBLOB="dcdce64b8da90000011300007b8afcff00005200bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200"/72], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sched_setscheduler(r0, 0x0, 0x0) unshare(0x62020600) r3 = signalfd(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000600)=0x9) r5 = socket$nl_route(0x10, 0x3, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001400030532bd6fedfddbdf25021e48ff", @ANYRES32=r6, @ANYBLOB="080002007f00000114000300"], 0x34}, 0x1, 0x0, 0x0, 0x4004011}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x14, &(0x7f0000000240)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x1000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f00000003c0)=[@in6={0xa, 0x4e21, 0x2, @empty, 0xf}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0xce22, @multicast2}, @in6={0xa, 0x4e23, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}], 0xa8) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000000)={'wg1\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e22, 0x20000002, @mcast2}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r10, 0x4601, &(0x7f0000000100)={0x400, 0xf0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, {}, {}, {}, {0x0, 0x0, 0x1}, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8, 0x4000, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0xc}) 0s ago: executing program 1 (id=3811): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1703}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x3f}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0xf986520fcaace820) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00'}, 0x4e) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r4, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x102b, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) openat$procfs(0xffffff9c, &(0x7f00000000c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000e, 0x66032, 0xffffffffffffffff, 0x40000000) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) kernel console output (not intermixed with test programs): 28] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 963.539536][T23810] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3343'. [ 963.658331][ T5828] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0 [ 963.663091][ T5828] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0/input277 [ 963.669007][ T5828] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:61> initialized [ 963.688219][ T5094] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 963.838918][ T5094] usb 5-1: Using ep0 maxpacket: 8 [ 963.844460][ T5094] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 963.847343][ T5094] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 963.851439][ T5094] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 963.855566][ T5094] usb 5-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 963.862773][ T5094] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 963.867229][ T5094] usb 5-1: config 168 interface 0 has no altsetting 0 [ 963.875851][ T5094] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 963.879289][ T5094] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 963.882931][ T5094] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 963.886667][ T5094] usb 5-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 963.891319][ T5094] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 963.895841][ T5094] usb 5-1: config 168 interface 0 has no altsetting 0 [ 963.906032][ T5094] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 963.908849][ T5094] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 963.912551][ T5094] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 963.916485][ T5094] usb 5-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 963.921102][ T5094] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 963.925497][ T5094] usb 5-1: config 168 interface 0 has no altsetting 0 [ 963.937024][ T5094] usb 5-1: string descriptor 0 read error: -22 [ 963.939654][ T5094] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 963.942665][ T5094] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.974385][ T5094] adutux 5-1:168.0: interrupt endpoints not found [ 964.037850][ T5848] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 964.187869][ T5848] usb 7-1: Using ep0 maxpacket: 8 [ 964.190771][ T5848] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 964.193974][ T5848] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 964.198020][ T5848] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 964.201531][ T5848] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 964.205960][ T5848] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 964.208947][ T5848] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.245481][T18975] usb 5-1: USB disconnect, device number 58 [ 964.368022][ T24] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 964.418207][ T5848] usb 7-1: usb_control_msg returned -71 [ 964.420051][ T5848] usbtmc 7-1:16.0: can't read capabilities [ 964.517921][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 964.522857][ T24] usb 8-1: unable to get BOS descriptor or descriptor too short [ 964.527318][ T24] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 964.531528][ T24] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 964.535022][ T24] usb 8-1: config 14 has no interface number 0 [ 964.537289][ T24] usb 8-1: config 14 has no interface number 1 [ 964.539588][ T24] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 964.543366][ T24] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 964.547936][ T24] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 964.551446][ T24] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 964.555298][ T24] usb 8-1: config 14 interface 57 has no altsetting 0 [ 964.558012][ T24] usb 8-1: config 14 interface 228 has no altsetting 0 [ 964.562584][ T24] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 964.565625][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.568423][ T24] usb 8-1: Product: syz [ 964.569788][ T24] usb 8-1: Manufacturer: syz [ 964.571340][ T24] usb 8-1: SerialNumber: syz [ 965.593042][T23797] imon:send_packet: task interrupted [ 965.595012][T23797] imon:send_packet: packet tx failed (-512) [ 965.597373][T23797] imon:vfd_write: send packet #0 failed [ 965.599404][T23806] imon:display_open: display port is already open [ 965.613015][ T5848] usb 7-1: USB disconnect, device number 55 [ 965.716276][ T1483] usb 6-1: USB disconnect, device number 61 [ 965.917863][ T5848] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 966.067843][ T5848] usb 7-1: Using ep0 maxpacket: 32 [ 966.071448][ T5848] usb 7-1: unable to get BOS descriptor or descriptor too short [ 966.074842][ T5848] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 966.077414][ T5848] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 966.080039][ T5848] usb 7-1: config 14 has no interface number 0 [ 966.082014][ T5848] usb 7-1: config 14 has no interface number 1 [ 966.084018][ T5848] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 966.087356][ T5848] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 966.091071][ T5848] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 966.094645][ T5848] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 966.098222][ T5848] usb 7-1: config 14 interface 57 has no altsetting 0 [ 966.100354][ T5848] usb 7-1: config 14 interface 228 has no altsetting 0 [ 966.104200][ T5848] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 966.107121][ T5848] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.109730][ T5848] usb 7-1: Product: syz [ 966.111087][ T5848] usb 7-1: Manufacturer: syz [ 966.112582][ T5848] usb 7-1: SerialNumber: syz [ 967.387938][ T24] legousbtower 8-1:14.57: interrupt endpoints not found [ 967.399818][ T24] legousbtower 8-1:14.228: interrupt endpoints not found [ 967.412815][ T24] usb 8-1: USB disconnect, device number 52 [ 967.547404][T23847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3352'. [ 967.549034][T23847] netlink: 'syz.0.3352': attribute type 1 has an invalid length. [ 967.554508][T23847] netlink: 'syz.0.3352': attribute type 2 has an invalid length. [ 967.657865][ T5828] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 967.809129][ T5828] usb 6-1: Using ep0 maxpacket: 32 [ 967.813552][ T5828] usb 6-1: unable to get BOS descriptor or descriptor too short [ 967.818452][ T5828] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 967.822258][ T5828] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 967.825871][ T5828] usb 6-1: config 14 has no interface number 0 [ 967.829183][ T5828] usb 6-1: config 14 has no interface number 1 [ 967.831950][ T5828] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 967.836553][ T5828] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 967.887549][ T5828] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 967.892804][ T5828] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 967.897503][ T5828] usb 6-1: config 14 interface 57 has no altsetting 0 [ 967.901498][ T5828] usb 6-1: config 14 interface 228 has no altsetting 0 [ 967.906621][ T5828] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 967.911380][ T5828] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.914852][ T5828] usb 6-1: Product: syz [ 967.916688][ T5828] usb 6-1: Manufacturer: syz [ 967.918741][ T5828] usb 6-1: SerialNumber: syz [ 967.983018][ T5848] legousbtower 7-1:14.57: interrupt endpoints not found [ 967.988909][ T5848] legousbtower 7-1:14.228: interrupt endpoints not found [ 967.994947][ T5848] usb 7-1: USB disconnect, device number 56 [ 968.172057][T23859] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3355'. [ 968.260667][T23864] siw: device registration error -23 [ 970.375895][T23884] siw: device registration error -23 [ 970.495657][ T5828] legousbtower 6-1:14.57: interrupt endpoints not found [ 970.559675][ T5828] legousbtower 6-1:14.228: interrupt endpoints not found [ 970.610276][ T5828] usb 6-1: USB disconnect, device number 62 [ 970.989577][T23892] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 971.238785][ T5938] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 971.413740][ T5938] usb 8-1: Using ep0 maxpacket: 32 [ 971.571458][ T5938] usb 8-1: unable to get BOS descriptor or descriptor too short [ 971.588165][T23900] siw: device registration error -23 [ 971.590821][ T5938] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 971.593705][ T5938] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 971.614150][ T5938] usb 8-1: config 14 has no interface number 0 [ 971.616512][ T5938] usb 8-1: config 14 has no interface number 1 [ 971.638369][ T5938] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 971.649348][ T5938] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 971.658841][ T5938] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 971.667958][ T5938] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 971.671825][ T5938] usb 8-1: config 14 interface 57 has no altsetting 0 [ 971.674447][ T5938] usb 8-1: config 14 interface 228 has no altsetting 0 [ 971.690441][ T5938] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 971.694239][ T5938] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.697518][ T5938] usb 8-1: Product: syz [ 971.699579][ T5938] usb 8-1: Manufacturer: syz [ 971.701316][ T5938] usb 8-1: SerialNumber: syz [ 971.848160][T23907] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 973.832550][ T5938] legousbtower 8-1:14.57: interrupt endpoints not found [ 973.881071][T23935] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 973.881470][ T5938] legousbtower 8-1:14.228: interrupt endpoints not found [ 973.924565][ T5938] usb 8-1: USB disconnect, device number 53 [ 974.101435][T23946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3376'. [ 974.103351][T23946] netlink: 'syz.2.3376': attribute type 1 has an invalid length. [ 974.103371][T23946] netlink: 'syz.2.3376': attribute type 2 has an invalid length. [ 974.461233][T23959] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 974.761233][T23965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3380'. [ 974.762574][T23965] netlink: 'syz.0.3380': attribute type 1 has an invalid length. [ 974.762592][T23965] netlink: 'syz.0.3380': attribute type 2 has an invalid length. [ 974.872634][T23973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3382'. [ 974.878257][T23973] netlink: 'syz.3.3382': attribute type 1 has an invalid length. [ 974.878272][T23973] netlink: 'syz.3.3382': attribute type 2 has an invalid length. [ 975.787873][ T5828] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 976.027885][ T24] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 976.037865][ T5828] usb 5-1: Using ep0 maxpacket: 32 [ 976.041588][ T5828] usb 5-1: unable to get BOS descriptor or descriptor too short [ 976.045044][ T5828] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 976.047700][ T5828] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 976.050532][ T5828] usb 5-1: config 14 has no interface number 0 [ 976.052573][ T5828] usb 5-1: config 14 has no interface number 1 [ 976.054597][ T5828] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 976.058060][ T5828] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 976.061706][ T5828] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 976.065175][ T5828] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 976.068708][ T5828] usb 5-1: config 14 interface 57 has no altsetting 0 [ 976.070823][ T5828] usb 5-1: config 14 interface 228 has no altsetting 0 [ 976.074500][ T5828] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 976.077414][ T5828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.080270][ T5828] usb 5-1: Product: syz [ 976.081618][ T5828] usb 5-1: Manufacturer: syz [ 976.083137][ T5828] usb 5-1: SerialNumber: syz [ 976.179631][ T24] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 976.180554][T24003] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 976.183172][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 976.192125][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 976.195456][ T24] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 976.200351][ T24] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 976.203379][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.211636][ T24] usb 8-1: config 0 descriptor?? [ 977.249621][T24013] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 977.872590][T24015] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3391'. [ 978.961316][ T24] usbhid 8-1:0.0: can't add hid device: -71 [ 978.963301][ T24] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 978.966741][ T24] usb 8-1: USB disconnect, device number 54 [ 979.237527][ T5828] legousbtower 5-1:14.57: interrupt endpoints not found [ 979.244827][ T5828] legousbtower 5-1:14.228: interrupt endpoints not found [ 979.250594][ T5828] usb 5-1: USB disconnect, device number 59 [ 979.464591][T24029] FAULT_INJECTION: forcing a failure. [ 979.464591][T24029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 979.470455][T24029] CPU: 1 UID: 0 PID: 24029 Comm: syz.3.3395 Tainted: G L syzkaller #0 PREEMPT(full) [ 979.470489][T24029] Tainted: [L]=SOFTLOCKUP [ 979.470495][T24029] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 979.470506][T24029] Call Trace: [ 979.470513][T24029] [ 979.470520][T24029] dump_stack_lvl+0x100/0x190 [ 979.470546][T24029] should_fail_ex.cold+0x5/0xa [ 979.470566][T24029] _copy_to_user+0x32/0xd0 [ 979.470591][T24029] simple_read_from_buffer+0xcb/0x170 [ 979.470624][T24029] proc_fail_nth_read+0x1af/0x230 [ 979.470654][T24029] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 979.470677][T24029] ? rw_verify_area+0xce/0x6d0 [ 979.470700][T24029] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 979.470721][T24029] vfs_read+0x1e4/0xb40 [ 979.470748][T24029] ? __pfx_vfs_read+0x10/0x10 [ 979.470773][T24029] ? find_held_lock+0x2b/0x80 [ 979.470794][T24029] ? __fget_files+0x215/0x3d0 [ 979.470823][T24029] ? __fget_files+0x21f/0x3d0 [ 979.470967][T24029] ksys_read+0x12a/0x250 [ 979.470994][T24029] ? __pfx_ksys_read+0x10/0x10 [ 979.471025][T24029] do_int80_emulation+0x14b/0x720 [ 979.471049][T24029] asm_int80_emulation+0x1a/0x20 [ 979.471067][T24029] RIP: 0023:0xf71572eb [ 979.471085][T24029] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 979.471104][T24029] RSP: 002b:00000000f540d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 979.471122][T24029] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f540d5d0 [ 979.471132][T24029] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 979.471142][T24029] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 979.471152][T24029] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 979.471161][T24029] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 979.471184][T24029] [ 979.671436][T24042] binder: 24041:24042 ioctl c0306201 0 returned -14 [ 980.384801][T24060] siw: device registration error -23 [ 980.616511][T24066] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3405'. [ 982.396240][T24103] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3414'. [ 992.798755][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.801452][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.916363][T24143] futex_wake_op: syz.0.3421 tries to shift op by -65; fix this program [ 994.972939][T24148] FAULT_INJECTION: forcing a failure. [ 994.972939][T24148] name failslab, interval 1, probability 0, space 0, times 0 [ 994.976913][T24148] CPU: 0 UID: 0 PID: 24148 Comm: syz.1.3422 Tainted: G L syzkaller #0 PREEMPT(full) [ 994.976933][T24148] Tainted: [L]=SOFTLOCKUP [ 994.976937][T24148] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 994.976945][T24148] Call Trace: [ 994.976949][T24148] [ 994.976954][T24148] dump_stack_lvl+0x100/0x190 [ 994.976972][T24148] should_fail_ex.cold+0x5/0xa [ 994.976985][T24148] should_failslab+0xc2/0x120 [ 994.977002][T24148] __kmalloc_noprof+0xfc/0x820 [ 994.977015][T24148] ? tomoyo_encode2+0xfb/0x3c0 [ 994.977034][T24148] tomoyo_encode2+0xfb/0x3c0 [ 994.977051][T24148] tomoyo_encode+0x29/0x50 [ 994.977066][T24148] tomoyo_realpath_from_path+0x18c/0x690 [ 994.977085][T24148] tomoyo_path_number_perm+0x23c/0x580 [ 994.977098][T24148] ? tomoyo_path_number_perm+0x22e/0x580 [ 994.977112][T24148] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 994.977126][T24148] ? get_pid_task+0x106/0x250 [ 994.977153][T24148] ? find_held_lock+0x2b/0x80 [ 994.977166][T24148] ? __fget_files+0x215/0x3d0 [ 994.977182][T24148] ? hook_file_ioctl_common+0x140/0x440 [ 994.977196][T24148] ? __fget_files+0x215/0x3d0 [ 994.977215][T24148] ? __fget_files+0x21f/0x3d0 [ 994.977234][T24148] security_file_ioctl_compat+0xd3/0x230 [ 994.977249][T24148] __ia32_compat_sys_ioctl+0xc2/0x360 [ 994.977267][T24148] __do_fast_syscall_32+0xe7/0x970 [ 994.977282][T24148] ? lockdep_hardirqs_on+0x78/0x100 [ 994.977295][T24148] do_fast_syscall_32+0x32/0x70 [ 994.977308][T24148] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 994.977324][T24148] RIP: 0023:0xf6fdefec [ 994.977338][T24148] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 994.977343][T24148] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 994.977354][T24148] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800c5012 [ 994.977361][T24148] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 994.977372][T24148] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 994.977378][T24148] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 994.977385][T24148] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 994.977399][T24148] [ 994.977411][T24148] ERROR: Out of memory at tomoyo_realpath_from_path. [ 995.357873][ T5845] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 995.507802][ T5845] usb 7-1: Using ep0 maxpacket: 32 [ 995.511078][ T5845] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 995.515172][ T5845] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 995.519743][ T5845] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 995.524007][ T5845] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 995.536116][ T5845] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 995.542997][ T5845] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.548359][ T5845] usb 7-1: Product: syz [ 995.549990][ T5845] usb 7-1: Manufacturer: syz [ 995.554172][ T5845] usb 7-1: SerialNumber: syz [ 995.566059][ C1] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 995.570021][ T5845] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/input/input278 [ 995.774314][T24154] 9pnet_fd: Insufficient options for proto=fd [ 995.787819][T14580] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 995.797913][ T5845] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 995.800587][ T5845] (id 0x00) [ 995.857997][ T5845] rc_core: IR keymap rc-imon-pad not found [ 995.860662][ T5845] Registered IR keymap rc-empty [ 995.862272][ T5845] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 995.865627][ T5845] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 995.939979][T14580] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 995.943230][T14580] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 995.947277][T14580] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 995.950407][T14580] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 995.954488][T14580] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 995.957876][T14580] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.962411][T14580] usb 8-1: config 0 descriptor?? [ 996.009238][ T5845] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0 [ 996.016088][ T5845] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0/input279 [ 996.030373][ T5845] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:57> initialized [ 996.477935][T18975] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 997.262965][T24172] lo speed is unknown, defaulting to 1000 [ 997.828443][T24180] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 998.081603][T24154] imon:send_packet: task interrupted [ 998.085714][T24154] imon:send_packet: packet tx failed (-512) [ 998.092273][T24154] imon:vfd_write: send packet #0 failed [ 998.129848][ T5845] usb 7-1: USB disconnect, device number 57 [ 998.700968][T14580] usbhid 8-1:0.0: can't add hid device: -71 [ 998.705500][T14580] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 998.714850][T14580] usb 8-1: USB disconnect, device number 55 [ 998.737106][T24189] siw: device registration error -23 [ 1000.160579][T24204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3435'. [ 1000.164286][T24204] netlink: 'syz.0.3435': attribute type 1 has an invalid length. [ 1000.164386][T24204] netlink: 'syz.0.3435': attribute type 2 has an invalid length. [ 1000.371664][T24211] usb usb1: usbfs: process 24211 (syz.2.3437) did not claim interface 0 before use [ 1000.475320][T24212] comedi comedi0: dt2801: I/O base address not correctly aligned [ 1001.497868][T14580] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1001.604206][T24230] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3440'. [ 1001.662847][T14580] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 1001.671946][T14580] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1001.685005][T14580] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1001.690248][T14580] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1001.695815][T14580] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1001.700034][T14580] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.709397][T14580] usb 5-1: config 0 descriptor?? [ 1003.547148][T24245] siw: device registration error -23 [ 1003.693181][ T5743] Bluetooth: hci0: command 0x0c1a tx timeout [ 1004.407267][T14580] usbhid 5-1:0.0: can't add hid device: -71 [ 1004.410858][T14580] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1004.417120][T14580] usb 5-1: USB disconnect, device number 61 [ 1004.512142][T24251] siw: device registration error -23 [ 1004.969696][T24260] siw: device registration error -23 [ 1005.019383][T24262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3451'. [ 1005.020277][T24262] netlink: 'syz.3.3451': attribute type 1 has an invalid length. [ 1005.020290][T24262] netlink: 'syz.3.3451': attribute type 2 has an invalid length. [ 1005.442710][T24276] lo speed is unknown, defaulting to 1000 [ 1005.565698][T24278] FAULT_INJECTION: forcing a failure. [ 1005.565698][T24278] name failslab, interval 1, probability 0, space 0, times 0 [ 1005.574465][T24278] CPU: 0 UID: 0 PID: 24278 Comm: syz.2.3453 Tainted: G L syzkaller #0 PREEMPT(full) [ 1005.574487][T24278] Tainted: [L]=SOFTLOCKUP [ 1005.574491][T24278] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1005.574498][T24278] Call Trace: [ 1005.574503][T24278] [ 1005.574508][T24278] dump_stack_lvl+0x100/0x190 [ 1005.574527][T24278] should_fail_ex.cold+0x5/0xa [ 1005.574540][T24278] should_failslab+0xc2/0x120 [ 1005.574556][T24278] __kmalloc_noprof+0xfc/0x820 [ 1005.574569][T24278] ? rcu_is_watching+0x12/0xc0 [ 1005.574582][T24278] ? tomoyo_encode2+0xfb/0x3c0 [ 1005.574600][T24278] tomoyo_encode2+0xfb/0x3c0 [ 1005.574618][T24278] tomoyo_encode+0x29/0x50 [ 1005.574633][T24278] tomoyo_realpath_from_path+0x18c/0x690 [ 1005.574652][T24278] tomoyo_path_number_perm+0x23c/0x580 [ 1005.574665][T24278] ? tomoyo_path_number_perm+0x22e/0x580 [ 1005.574680][T24278] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1005.574693][T24278] ? get_pid_task+0x106/0x250 [ 1005.574719][T24278] ? find_held_lock+0x2b/0x80 [ 1005.574732][T24278] ? __fget_files+0x215/0x3d0 [ 1005.574749][T24278] ? hook_file_ioctl_common+0x140/0x440 [ 1005.574764][T24278] ? __fget_files+0x215/0x3d0 [ 1005.574782][T24278] ? __fget_files+0x21f/0x3d0 [ 1005.574802][T24278] security_file_ioctl_compat+0xd3/0x230 [ 1005.574816][T24278] __ia32_compat_sys_ioctl+0xc2/0x360 [ 1005.574834][T24278] __do_fast_syscall_32+0xe7/0x970 [ 1005.574850][T24278] ? lockdep_hardirqs_on+0x78/0x100 [ 1005.574862][T24278] do_fast_syscall_32+0x32/0x70 [ 1005.574875][T24278] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1005.574890][T24278] RIP: 0023:0xf7fc5fec [ 1005.574905][T24278] Code: Unable to access opcode bytes at 0xf7fc5fc2. [ 1005.574910][T24278] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1005.574923][T24278] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000540a [ 1005.574930][T24278] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 1005.574936][T24278] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1005.574943][T24278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1005.574949][T24278] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1005.574963][T24278] [ 1005.575007][T24278] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1006.313643][T24292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3458'. [ 1006.367020][T24293] netlink: 'syz.1.3458': attribute type 1 has an invalid length. [ 1006.367037][T24293] netlink: 'syz.1.3458': attribute type 2 has an invalid length. [ 1007.327820][ T24] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 1007.477856][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 1007.481307][ T24] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1007.485829][ T24] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 1007.488751][ T24] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 1007.491625][ T24] usb 8-1: config 14 has no interface number 0 [ 1007.494007][ T24] usb 8-1: config 14 has no interface number 1 [ 1007.506875][ T24] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1007.510877][ T24] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1007.514411][ T24] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1007.518387][ T24] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1007.525293][ T24] usb 8-1: config 14 interface 57 has no altsetting 0 [ 1007.527679][ T24] usb 8-1: config 14 interface 228 has no altsetting 0 [ 1007.535983][ T24] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1007.539910][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.547321][ T24] usb 8-1: Product: syz [ 1007.551342][ T24] usb 8-1: Manufacturer: syz [ 1007.553000][ T24] usb 8-1: SerialNumber: syz [ 1009.327899][ T29] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1009.512563][ T29] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 1009.515879][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1009.521057][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1009.527074][ T29] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1009.534934][ T29] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1009.538350][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.542106][ T29] usb 5-1: config 0 descriptor?? [ 1010.133369][ T24] legousbtower 8-1:14.57: interrupt endpoints not found [ 1010.352306][T24351] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1010.376408][ T24] legousbtower 8-1:14.228: interrupt endpoints not found [ 1010.401278][ T24] usb 8-1: USB disconnect, device number 56 [ 1011.488639][T24374] siw: device registration error -23 [ 1011.949040][ T29] usbhid 5-1:0.0: can't add hid device: -71 [ 1011.957187][ T29] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1011.970554][ T29] usb 5-1: USB disconnect, device number 62 [ 1012.367835][ T29] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1012.429240][ T24] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1012.528996][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 1012.534316][ T29] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1012.538963][ T29] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 1012.543305][ T29] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 1012.546882][ T29] usb 5-1: config 14 has no interface number 0 [ 1012.548921][ T29] usb 5-1: config 14 has no interface number 1 [ 1012.553927][ T29] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1012.559407][ T29] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1012.565148][ T29] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1012.573603][ T29] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1012.577820][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 1012.579545][ T29] usb 5-1: config 14 interface 57 has no altsetting 0 [ 1012.581224][ T24] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1012.583225][ T29] usb 5-1: config 14 interface 228 has no altsetting 0 [ 1012.585206][ T24] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1012.591483][ T24] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1012.593177][ T29] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1012.595360][ T24] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1012.598400][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.606193][ T24] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1012.610043][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.612983][ T29] usb 5-1: Product: syz [ 1012.613477][ T24] usb 6-1: Product: syz [ 1012.614759][ T29] usb 5-1: Manufacturer: syz [ 1012.616557][ T24] usb 6-1: Manufacturer: syz [ 1012.616573][ T24] usb 6-1: SerialNumber: syz [ 1012.620185][ C2] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1012.625572][ T24] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input280 [ 1012.628849][ T29] usb 5-1: SerialNumber: syz [ 1012.830988][T24385] 9p: Bad value for 'rfdno' [ 1012.857912][ T24] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1012.861039][ T24] (id 0x00) [ 1012.907806][ T24] rc_core: IR keymap rc-imon-pad not found [ 1012.909800][ T24] Registered IR keymap rc-empty [ 1012.911535][ T24] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1012.914851][ T24] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1013.058295][ T24] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0 [ 1013.071205][ T24] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0/input281 [ 1013.079573][ T24] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:63> initialized [ 1013.272520][T24399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3484'. [ 1013.294711][T24399] vlan2: entered allmulticast mode [ 1013.298336][T24399] dummy0: entered allmulticast mode [ 1013.364905][T24402] random: crng reseeded on system resumption [ 1014.099124][T24412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3486'. [ 1014.100175][T24412] netlink: 'syz.2.3486': attribute type 1 has an invalid length. [ 1014.100188][T24412] netlink: 'syz.2.3486': attribute type 2 has an invalid length. [ 1014.617869][ T5828] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 1014.769002][ T5828] usb 8-1: Using ep0 maxpacket: 32 [ 1014.773542][ T5828] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1014.777877][ T5828] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1014.782966][ T5828] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1014.787444][ T5828] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1014.795559][ T5828] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1014.799577][ T5828] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.803056][ T5828] usb 8-1: Product: syz [ 1014.804989][ T5828] usb 8-1: Manufacturer: syz [ 1014.807343][ T5828] usb 8-1: SerialNumber: syz [ 1014.819554][ C0] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1014.825713][ T5828] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input282 [ 1015.023950][T24417] 9p: Bad value for 'rfdno' [ 1015.037871][ T5828] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1015.040660][ T5828] (id 0x00) [ 1015.079154][T24385] imon:send_packet: task interrupted [ 1015.081038][T24385] imon:send_packet: packet tx failed (-512) [ 1015.082976][T24385] imon:vfd_write: send packet #0 failed [ 1015.097815][ T5828] rc_core: IR keymap rc-imon-pad not found [ 1015.099932][ T5828] Registered IR keymap rc-empty [ 1015.102065][ T5828] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1015.105361][ T5828] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1015.109383][ T73] usb 6-1: USB disconnect, device number 63 [ 1015.271025][ T29] legousbtower 5-1:14.57: interrupt endpoints not found [ 1015.283220][ T29] legousbtower 5-1:14.228: interrupt endpoints not found [ 1015.291836][ T5828] rc rc1: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc1 [ 1015.301325][ T29] usb 5-1: USB disconnect, device number 63 [ 1015.328316][ T5828] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc1/input283 [ 1015.341324][ T5828] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:57> initialized [ 1015.737966][ T5828] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1015.887907][ T5828] usb 7-1: Using ep0 maxpacket: 32 [ 1015.893743][ T5828] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1015.902838][ T5828] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1015.908615][ T5828] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1015.913192][ T5828] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1015.922959][ T5828] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1015.926905][ T5828] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.930467][ T5828] usb 7-1: Product: syz [ 1015.932267][ T5828] usb 7-1: Manufacturer: syz [ 1015.934101][ T5828] usb 7-1: SerialNumber: syz [ 1015.942565][ C0] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1015.946896][ T5828] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/input/input284 [ 1016.151304][T24431] 9pnet_fd: Insufficient options for proto=fd [ 1016.178483][ T5828] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1016.181365][ T5828] (id 0x00) [ 1016.237860][ T5828] rc_core: IR keymap rc-imon-pad not found [ 1016.239895][ T5828] Registered IR keymap rc-empty [ 1016.241535][ T5828] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1016.245368][ T5828] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1016.379066][ T5828] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0 [ 1016.384071][ T5828] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0/input285 [ 1016.391367][ T5828] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:58> initialized [ 1016.451669][T24443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3495'. [ 1016.495837][ T29] hid-generic 0000:0000:0000.0006: unknown main item tag 0x3 [ 1016.499974][T24443] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 1016.510610][ T29] hid-generic 0000:0000:0000.0006: unknown main item tag 0x3 [ 1016.547886][ T29] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1016.557305][ T29] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1016.567835][ T29] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1016.578666][ T29] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1016.587958][ T29] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1016.599411][ T29] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1016.605930][ T29] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1016.609561][ T29] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1016.634928][ T29] hid-generic 0000:0000:0000.0006: hidraw1: HID v0.03 Device [syz1] on syz1 [ 1016.694641][T24445] fido_id[24445]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1017.357959][T24417] imon:send_packet: task interrupted [ 1017.360115][T24417] imon:send_packet: packet tx failed (-512) [ 1017.362425][T24417] imon:vfd_write: send packet #0 failed [ 1017.370088][ T73] usb 7-1: USB disconnect, device number 58 [ 1017.427480][ T24] usb 8-1: USB disconnect, device number 57 [ 1018.157941][ T73] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1018.167853][ T24] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1018.322164][ T73] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 1018.325834][ T73] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1018.327821][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 1018.331322][ T73] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1018.334464][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1018.337011][ T73] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1018.343790][ T24] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 1018.345220][ T73] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1018.348200][ T24] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 1018.352702][ T73] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.359689][ T24] usb 6-1: config 14 has no interface number 0 [ 1018.361829][ T73] usb 5-1: config 0 descriptor?? [ 1018.363887][ T24] usb 6-1: config 14 has no interface number 1 [ 1018.365953][ T24] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1018.371653][ T24] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1018.376730][ T24] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1018.382944][ T24] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1018.389880][ T24] usb 6-1: config 14 interface 57 has no altsetting 0 [ 1018.395026][ T24] usb 6-1: config 14 interface 228 has no altsetting 0 [ 1018.404996][ T24] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1018.408362][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.414639][ T24] usb 6-1: Product: syz [ 1018.415985][ T24] usb 6-1: Manufacturer: syz [ 1018.419742][ T24] usb 6-1: SerialNumber: syz [ 1019.658912][T24499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3508'. [ 1020.647927][ T10] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1020.810236][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 1020.813755][ T10] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1020.821105][ T10] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1020.825659][ T10] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1020.829986][ T73] usbhid 5-1:0.0: can't add hid device: -71 [ 1020.832023][ T73] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1020.834918][ T10] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1020.840991][ T73] usb 5-1: USB disconnect, device number 64 [ 1020.847829][ T10] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1020.851968][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.854620][ T10] usb 7-1: Product: syz [ 1020.856178][ T10] usb 7-1: Manufacturer: syz [ 1020.857861][ T10] usb 7-1: SerialNumber: syz [ 1020.869634][ C0] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1020.874742][ T10] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/input/input286 [ 1021.071262][T24511] 9p: Bad value for 'rfdno' [ 1021.087809][ T10] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1021.091038][ T10] (id 0x00) [ 1021.137838][ T10] rc_core: IR keymap rc-imon-pad not found [ 1021.139849][ T10] Registered IR keymap rc-empty [ 1021.141499][ T10] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1021.145460][ T10] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1021.186012][ T24] legousbtower 6-1:14.57: interrupt endpoints not found [ 1021.191779][ T24] legousbtower 6-1:14.228: interrupt endpoints not found [ 1021.198568][ T24] usb 6-1: USB disconnect, device number 64 [ 1021.338293][ T10] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0 [ 1021.346207][ T10] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0/input287 [ 1021.352018][ T10] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:59> initialized [ 1021.454980][T24525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3514'. [ 1021.728354][ T5094] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1021.883447][ T5094] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 1021.886662][ T5094] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1021.893393][ T5094] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1021.898821][ T5094] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1021.903564][ T5094] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1021.906522][ T5094] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.936811][ T5094] usb 6-1: config 0 descriptor?? [ 1033.279448][T24511] imon:send_packet: task interrupted [ 1033.281202][T24511] imon:send_packet: packet tx failed (-110) [ 1033.298465][T24511] imon:vfd_write: send packet #0 failed [ 1033.318397][ T10] usb 7-1: USB disconnect, device number 59 [ 1033.366545][ T5094] usbhid 6-1:0.0: can't add hid device: -71 [ 1033.369035][ T5094] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1033.383285][ T5094] usb 6-1: USB disconnect, device number 65 [ 1033.431777][T24539] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3517'. [ 1033.432841][T24539] netlink: 'syz.3.3517': attribute type 1 has an invalid length. [ 1033.432855][T24539] netlink: 'syz.3.3517': attribute type 2 has an invalid length. [ 1034.784531][T24580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3526'. [ 1034.785304][T24580] netlink: 'syz.2.3526': attribute type 1 has an invalid length. [ 1034.785317][T24580] netlink: 'syz.2.3526': attribute type 2 has an invalid length. [ 1035.576632][T24596] trusted_key: encrypted_key: insufficient parameters specified [ 1035.594154][ T9] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1035.769561][ T9] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 1035.772815][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1035.776295][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1035.779796][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1035.784081][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1035.787123][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.791817][ T9] usb 5-1: config 0 descriptor?? [ 1036.128002][ T10] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1036.567240][T24605] siw: device registration error -23 [ 1037.506140][T24617] siw: device registration error -23 [ 1038.294537][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 1038.299754][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1038.309366][ T9] usb 5-1: USB disconnect, device number 65 [ 1038.427241][T24633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3536'. [ 1038.429466][T24633] netlink: 'syz.2.3536': attribute type 1 has an invalid length. [ 1038.437095][T24633] netlink: 'syz.2.3536': attribute type 2 has an invalid length. [ 1038.655335][T24650] netlink: 'syz.2.3539': attribute type 1 has an invalid length. [ 1038.679409][T24650] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1039.048827][T24650] bond1: (slave veth1): Enslaving as an active interface with a down link [ 1040.108056][T24318] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1040.191692][T24674] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3546'. [ 1040.257833][T24318] usb 7-1: Using ep0 maxpacket: 32 [ 1040.261721][T24318] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1040.266349][T24318] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1040.271881][T24318] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1040.277056][T24318] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1040.290774][T24318] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1040.301382][ T24] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1040.308319][T24318] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.312907][T24318] usb 7-1: Product: syz [ 1040.316932][T24318] usb 7-1: Manufacturer: syz [ 1040.319729][T24318] usb 7-1: SerialNumber: syz [ 1040.330783][ C2] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1040.337079][T24318] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/input/input288 [ 1040.467916][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 1040.474480][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1040.481939][ T24] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 1040.497858][ T24] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 1040.501366][ T24] usb 6-1: config 14 has no interface number 0 [ 1040.504036][ T24] usb 6-1: config 14 has no interface number 1 [ 1040.506672][ T24] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1040.513557][ T24] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1040.521371][ T24] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1040.528031][ T24] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1040.537070][ T24] usb 6-1: config 14 interface 57 has no altsetting 0 [ 1040.539887][ T24] usb 6-1: config 14 interface 228 has no altsetting 0 [ 1040.547693][ T24] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1040.553694][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.559388][ T24] usb 6-1: Product: syz [ 1040.561226][ T24] usb 6-1: Manufacturer: syz [ 1040.567991][ T24] usb 6-1: SerialNumber: syz [ 1040.587679][T24669] 9pnet_fd: Insufficient options for proto=fd [ 1040.607924][T24318] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1040.613908][T24318] (id 0x00) [ 1040.657818][T24318] rc_core: IR keymap rc-imon-pad not found [ 1040.662854][T24318] Registered IR keymap rc-empty [ 1040.665121][T24318] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1040.669012][T24318] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1040.819851][T24318] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0 [ 1040.826245][T24318] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0/input289 [ 1040.835148][T24318] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:61> initialized [ 1041.454799][T24690] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1041.877690][T24695] siw: device registration error -23 [ 1042.285973][T24700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3551'. [ 1042.290097][T24700] netlink: 'syz.0.3551': attribute type 1 has an invalid length. [ 1042.290264][T24700] netlink: 'syz.0.3551': attribute type 2 has an invalid length. [ 1042.794118][T24669] imon:send_packet: task interrupted [ 1042.796900][T24669] imon:send_packet: packet tx failed (-512) [ 1042.800407][T24669] imon:vfd_write: send packet #0 failed [ 1042.859952][ T5938] usb 7-1: USB disconnect, device number 61 [ 1043.255912][ T24] legousbtower 6-1:14.57: interrupt endpoints not found [ 1043.269253][ T24] legousbtower 6-1:14.228: interrupt endpoints not found [ 1043.278016][ T24] usb 6-1: USB disconnect, device number 66 [ 1043.381105][T24716] netlink: 'syz.0.3556': attribute type 1 has an invalid length. [ 1043.396805][T24716] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1043.424338][T24716] bond1: (slave geneve2): making interface the new active one [ 1043.430692][T24716] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1043.748514][ T5938] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1043.968298][ T5938] usb 7-1: Using ep0 maxpacket: 32 [ 1043.980040][ T5938] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1043.986742][ T5938] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 1043.990643][ T5938] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 1043.993921][ T5938] usb 7-1: config 14 has no interface number 0 [ 1043.996113][ T5938] usb 7-1: config 14 has no interface number 1 [ 1043.998472][ T5938] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1044.002078][ T5938] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1044.005947][ T5938] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1044.009914][ T5938] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1044.013645][ T5938] usb 7-1: config 14 interface 57 has no altsetting 0 [ 1044.015977][ T5938] usb 7-1: config 14 interface 228 has no altsetting 0 [ 1044.027052][ T5938] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1044.030196][ T5938] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.032948][ T5938] usb 7-1: Product: syz [ 1044.034420][ T5938] usb 7-1: Manufacturer: syz [ 1044.036030][ T5938] usb 7-1: SerialNumber: syz [ 1044.228381][T24744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3561'. [ 1044.230594][T24744] netlink: 'syz.1.3561': attribute type 1 has an invalid length. [ 1044.230607][T24744] netlink: 'syz.1.3561': attribute type 2 has an invalid length. [ 1045.893679][T24770] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3567'. [ 1045.996064][T24770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3567'. [ 1046.149567][ T5938] legousbtower 7-1:14.57: interrupt endpoints not found [ 1046.178373][ T5938] legousbtower 7-1:14.228: interrupt endpoints not found [ 1046.216739][ T5938] usb 7-1: USB disconnect, device number 62 [ 1046.820855][T24794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3570'. [ 1047.397870][ T24] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1047.547827][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 1047.552082][ T24] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1047.556835][ T24] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1047.562244][ T24] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1047.567321][ T24] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1047.578317][ T24] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1047.582557][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.590273][ T24] usb 6-1: Product: syz [ 1047.592193][ T24] usb 6-1: Manufacturer: syz [ 1047.596694][ T24] usb 6-1: SerialNumber: syz [ 1047.605187][ C2] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1047.609219][ T24] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input290 [ 1047.767888][T14580] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1047.820703][T24800] 9p: Bad value for 'rfdno' [ 1047.839782][ T24] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1047.845575][ T24] (id 0x00) [ 1047.901564][ T24] rc_core: IR keymap rc-imon-pad not found [ 1047.903519][ T24] Registered IR keymap rc-empty [ 1047.907928][ T24] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1047.913514][ T24] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1047.917936][T14580] usb 7-1: Using ep0 maxpacket: 32 [ 1047.930555][T14580] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1047.943572][T14580] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 1047.948174][T14580] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 1047.953847][T14580] usb 7-1: config 14 has no interface number 0 [ 1047.956897][T14580] usb 7-1: config 14 has no interface number 1 [ 1047.961784][T14580] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1047.966570][T14580] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1047.971756][T14580] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1047.976825][T14580] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1047.988267][T14580] usb 7-1: config 14 interface 57 has no altsetting 0 [ 1047.991208][T14580] usb 7-1: config 14 interface 228 has no altsetting 0 [ 1048.009100][T14580] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1048.012886][T14580] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.016146][T14580] usb 7-1: Product: syz [ 1048.018073][T14580] usb 7-1: Manufacturer: syz [ 1048.020004][T14580] usb 7-1: SerialNumber: syz [ 1048.038261][ T24] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0 [ 1048.046023][ T24] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0/input291 [ 1048.060811][T24817] lo speed is unknown, defaulting to 1000 [ 1048.062997][ T24] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:67> initialized [ 1049.735231][T24840] siw: device registration error -23 [ 1049.798326][T24847] FAULT_INJECTION: forcing a failure. [ 1049.798326][T24847] name failslab, interval 1, probability 0, space 0, times 0 [ 1049.803666][T24847] CPU: 0 UID: 0 PID: 24847 Comm: syz.0.3589 Tainted: G L syzkaller #0 PREEMPT(full) [ 1049.803685][T24847] Tainted: [L]=SOFTLOCKUP [ 1049.803690][T24847] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1049.803697][T24847] Call Trace: [ 1049.803702][T24847] [ 1049.803707][T24847] dump_stack_lvl+0x100/0x190 [ 1049.803726][T24847] should_fail_ex.cold+0x5/0xa [ 1049.803740][T24847] should_failslab+0xc2/0x120 [ 1049.803756][T24847] __kmalloc_noprof+0xfc/0x820 [ 1049.803770][T24847] ? io_cache_alloc_new+0x45/0xe0 [ 1049.803788][T24847] io_cache_alloc_new+0x45/0xe0 [ 1049.803801][T24847] __io_prep_rw+0x21d/0xfb0 [ 1049.803818][T24847] ? __pfx___io_prep_rw+0x10/0x10 [ 1049.803834][T24847] ? __io_alloc_req_refill+0x2e1/0x330 [ 1049.803853][T24847] io_prep_rw+0x76/0x2c0 [ 1049.803868][T24847] ? __pfx_io_prep_rw+0x10/0x10 [ 1049.803887][T24847] io_submit_sqes+0xa03/0x2480 [ 1049.803911][T24847] __do_sys_io_uring_enter+0xa88/0x1b10 [ 1049.803931][T24847] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1049.803948][T24847] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 1049.803965][T24847] ? __fget_files+0x21f/0x3d0 [ 1049.803985][T24847] ? fput+0x79/0x100 [ 1049.803997][T24847] ? ksys_write+0x1ac/0x250 [ 1049.804014][T24847] ? __pfx_ksys_write+0x10/0x10 [ 1049.804033][T24847] __do_fast_syscall_32+0xe7/0x970 [ 1049.804046][T24847] ? lockdep_hardirqs_on+0x78/0x100 [ 1049.804059][T24847] do_fast_syscall_32+0x32/0x70 [ 1049.804072][T24847] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1049.804093][T24847] RIP: 0023:0xf702efec [ 1049.804108][T24847] Code: Unable to access opcode bytes at 0xf702efc2. [ 1049.804114][T24847] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 00000000000001aa [ 1049.804125][T24847] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000001 [ 1049.804132][T24847] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000000 [ 1049.804138][T24847] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1049.804145][T24847] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1049.804151][T24847] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1049.804165][T24847] [ 1050.134121][T24800] imon:send_packet: task interrupted [ 1050.135976][T24800] imon:send_packet: packet tx failed (-512) [ 1050.137875][T24800] imon:vfd_write: send packet #0 failed [ 1050.273014][ T9] usb 6-1: USB disconnect, device number 67 [ 1050.635246][T24858] siw: device registration error -23 [ 1051.040962][T14580] legousbtower 7-1:14.57: interrupt endpoints not found [ 1051.285968][T14580] legousbtower 7-1:14.228: interrupt endpoints not found [ 1051.290779][T14580] usb 7-1: USB disconnect, device number 63 [ 1051.678107][ T9] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1051.785444][T24875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3599'. [ 1051.795002][T24875] bond1: (slave veth1): Releasing active interface [ 1051.837897][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1051.839177][ T9] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1051.839202][ T9] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1051.839216][ T9] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1051.839231][ T9] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1051.840975][ T9] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1051.840999][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.841014][ T9] usb 6-1: Product: syz [ 1051.841027][ T9] usb 6-1: Manufacturer: syz [ 1051.841039][ T9] usb 6-1: SerialNumber: syz [ 1051.854328][ C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1051.855151][ T9] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input292 [ 1051.900243][T24879] netlink: 'syz.2.3599': attribute type 1 has an invalid length. [ 1051.900313][T24879] netlink: 'syz.2.3599': attribute type 2 has an invalid length. [ 1052.063919][T24862] 9pnet_fd: Insufficient options for proto=fd [ 1052.089571][ T9] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1052.093363][ T9] (id 0x00) [ 1052.137827][ T9] rc_core: IR keymap rc-imon-pad not found [ 1052.139926][ T9] Registered IR keymap rc-empty [ 1052.141984][ T9] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1052.145704][ T9] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1052.289267][ T9] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0 [ 1052.295677][ T9] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0/input293 [ 1052.303075][ T9] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:68> initialized [ 1052.330170][T14580] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 1052.341300][T24885] lo speed is unknown, defaulting to 1000 [ 1052.487858][T14580] usb 7-1: Using ep0 maxpacket: 32 [ 1052.491240][T14580] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1052.494781][T14580] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1052.498538][T14580] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1052.502303][T14580] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1052.510344][T14580] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1052.514256][T14580] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.517573][T14580] usb 7-1: Product: syz [ 1052.519509][T14580] usb 7-1: Manufacturer: syz [ 1052.521463][T14580] usb 7-1: SerialNumber: syz [ 1052.536128][ C1] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1052.540423][T14580] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/input/input294 [ 1052.747885][T24882] 9pnet_fd: Insufficient options for proto=fd [ 1052.767856][T14580] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1052.772888][T14580] (id 0x00) [ 1052.817941][T14580] rc_core: IR keymap rc-imon-pad not found [ 1052.824171][T14580] Registered IR keymap rc-empty [ 1052.827828][T14580] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1052.834275][T14580] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1052.897847][ T9] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 1052.968721][T14580] rc rc1: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc1 [ 1052.974554][T14580] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc1/input295 [ 1052.981079][T14580] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:64> initialized [ 1053.052041][ T9] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 1053.058814][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1053.066336][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1053.069726][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1053.073893][ T9] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1053.077423][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.086762][ T9] usb 8-1: config 0 descriptor?? [ 1054.279330][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.282157][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 1063.031941][T24862] imon:send_packet: task interrupted [ 1063.033709][T24862] imon:send_packet: packet tx failed (-110) [ 1063.034341][ T9] usbhid 8-1:0.0: can't add hid device: -32 [ 1063.035584][T24862] imon:vfd_write: send packet #0 failed [ 1063.039347][ T9] usbhid 8-1:0.0: probe with driver usbhid failed with error -32 [ 1063.066623][ T56] usb 6-1: USB disconnect, device number 68 [ 1063.111117][ T24] usb 8-1: USB disconnect, device number 58 [ 1063.185729][T14580] usb 7-1: USB disconnect, device number 64 [ 1064.160113][T24928] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3609'. [ 1064.207967][ T24] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1064.359133][ T24] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 1064.361786][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1064.369001][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1064.378072][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1064.390725][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1064.394255][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.403462][ T24] usb 6-1: config 0 descriptor?? [ 1064.639363][T24940] fuse: Bad value for 'fd' [ 1065.578888][T24959] siw: device registration error -23 [ 1066.427873][T24962] siw: device registration error -23 [ 1066.796070][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 1066.800848][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1066.808848][ T24] usb 6-1: USB disconnect, device number 69 [ 1067.173979][T24985] lo speed is unknown, defaulting to 1000 [ 1067.176431][T24987] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1069.120778][T25017] FAULT_INJECTION: forcing a failure. [ 1069.120778][T25017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1069.125181][T25017] CPU: 0 UID: 0 PID: 25017 Comm: syz.2.3630 Tainted: G L syzkaller #0 PREEMPT(full) [ 1069.125200][T25017] Tainted: [L]=SOFTLOCKUP [ 1069.125204][T25017] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1069.125211][T25017] Call Trace: [ 1069.125216][T25017] [ 1069.125232][T25017] dump_stack_lvl+0x100/0x190 [ 1069.125262][T25017] should_fail_ex.cold+0x5/0xa [ 1069.125276][T25017] _copy_to_user+0x32/0xd0 [ 1069.125294][T25017] simple_read_from_buffer+0xcb/0x170 [ 1069.125314][T25017] proc_fail_nth_read+0x1af/0x230 [ 1069.125329][T25017] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1069.125344][T25017] ? rw_verify_area+0xce/0x6d0 [ 1069.125360][T25017] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1069.125374][T25017] vfs_read+0x1e4/0xb40 [ 1069.125393][T25017] ? __pfx_vfs_read+0x10/0x10 [ 1069.125408][T25017] ? find_held_lock+0x2b/0x80 [ 1069.125423][T25017] ? __fget_files+0x215/0x3d0 [ 1069.125443][T25017] ? __fget_files+0x21f/0x3d0 [ 1069.125464][T25017] ksys_read+0x12a/0x250 [ 1069.125481][T25017] ? __pfx_ksys_read+0x10/0x10 [ 1069.125501][T25017] do_int80_emulation+0x14b/0x720 [ 1069.125517][T25017] asm_int80_emulation+0x1a/0x20 [ 1069.125529][T25017] RIP: 0023:0xf71c72eb [ 1069.125539][T25017] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1069.125551][T25017] RSP: 002b:00000000f54654bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1069.125562][T25017] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000f54655d0 [ 1069.125569][T25017] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1069.125575][T25017] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1069.125582][T25017] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1069.125588][T25017] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1069.125602][T25017] [ 1071.448345][ T10] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1071.617817][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1071.621941][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1071.625563][ T10] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 1071.628495][ T10] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 1071.631312][ T10] usb 6-1: config 14 has no interface number 0 [ 1071.633186][ T10] usb 6-1: config 14 has no interface number 1 [ 1071.635115][ T10] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1071.638807][ T10] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1071.642921][ T10] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1071.646459][ T10] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1071.650258][ T10] usb 6-1: config 14 interface 57 has no altsetting 0 [ 1071.652466][ T10] usb 6-1: config 14 interface 228 has no altsetting 0 [ 1071.656454][ T10] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1071.660379][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.663357][ T10] usb 6-1: Product: syz [ 1071.664803][ T10] usb 6-1: Manufacturer: syz [ 1071.666322][ T10] usb 6-1: SerialNumber: syz [ 1072.647960][ T24] usb 7-1: new full-speed USB device number 65 using dummy_hcd [ 1072.774949][T25062] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1072.799607][ T24] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1072.803838][ T24] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 1072.809982][ T24] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 247, setting to 64 [ 1072.814212][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1072.820114][ T24] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1072.823804][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.826890][ T24] usb 7-1: Product: syz [ 1072.828604][ T24] usb 7-1: Manufacturer: syz [ 1072.830544][ T24] usb 7-1: SerialNumber: syz [ 1072.834523][ T24] usb 7-1: config 0 descriptor?? [ 1072.840656][T25059] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1073.058115][T25059] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1073.208062][T25067] siw: device registration error -23 [ 1073.271962][ T24] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input296 [ 1074.206754][ T10] legousbtower 6-1:14.57: interrupt endpoints not found [ 1074.216120][ T10] legousbtower 6-1:14.228: interrupt endpoints not found [ 1074.224261][ T10] usb 6-1: USB disconnect, device number 70 [ 1074.667908][ T10] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1074.851080][ T10] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 1074.857186][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1074.864093][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1074.870324][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1074.875285][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1074.878750][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.883722][ T10] usb 6-1: config 0 descriptor?? [ 1075.011157][T25079] siw: device registration error -23 [ 1075.440707][T14580] usb 7-1: USB disconnect, device number 65 [ 1075.607421][T25096] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1075.746981][T25101] lo speed is unknown, defaulting to 1000 [ 1075.829435][T25103] lo speed is unknown, defaulting to 1000 [ 1076.037927][ T24] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 1076.187868][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 1076.193155][ T24] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 1076.196507][ T24] usb 8-1: config 179 has no interface number 0 [ 1076.199402][ T24] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1076.203817][ T24] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1076.208368][ T24] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1076.212876][ T24] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1076.217393][ T24] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1076.224186][ T24] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1076.228074][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.235274][T25106] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1076.695626][T25106] syzkaller1: entered promiscuous mode [ 1076.698161][T25106] syzkaller1: entered allmulticast mode [ 1076.904190][T25106] lo speed is unknown, defaulting to 1000 [ 1077.301671][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 1077.303652][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1077.314800][ T10] usb 6-1: USB disconnect, device number 71 [ 1077.560234][ T24] usb 8-1: USB disconnect, device number 59 [ 1077.562682][ C2] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1077.562708][ C2] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1077.893128][T25136] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3659'. [ 1077.916965][T25131] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3659'. [ 1078.339556][T25143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3661'. [ 1078.350723][T25143] batadv0: entered promiscuous mode [ 1078.356358][T25143] macsec1: entered promiscuous mode [ 1078.359383][T25143] macsec1: entered allmulticast mode [ 1078.361734][T25143] batadv0: entered allmulticast mode [ 1078.365365][T25143] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1078.369926][T25143] batadv0: left allmulticast mode [ 1078.372367][T25143] batadv0: left promiscuous mode [ 1078.683439][T25150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3662'. [ 1078.928220][T25144] bond2 (unregistering): Released all slaves [ 1080.166540][T25156] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1081.045386][T25168] fuse: Bad value for 'fd' [ 1081.386474][T25176] lo speed is unknown, defaulting to 1000 [ 1082.392356][T25194] siw: device registration error -23 [ 1083.203218][T25198] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1083.470812][T25206] fuse: Bad value for 'fd' [ 1083.724453][T25213] CUSE: unknown device info "" [ 1083.727074][T25213] CUSE: unknown device info "Ö" [ 1083.730282][T25213] CUSE: unknown device info "" [ 1083.732612][T25213] CUSE: unknown device info "" [ 1083.734654][T25213] CUSE: unknown device info "" [ 1083.736798][T25213] CUSE: unknown device info "" [ 1083.739410][T25213] CUSE: unknown device info "ðÿÿÿ" [ 1083.741623][T25213] CUSE: unknown device info "" [ 1083.743951][T25213] CUSE: unknown device info "" [ 1083.745991][T25213] CUSE: unknown device info "" [ 1083.748849][T25213] CUSE: unknown device info "" [ 1083.750983][T25213] CUSE: unknown device info "r" [ 1083.753137][T25213] CUSE: unknown device info "ýÿÿÿÿÿÿÿ#Û" [ 1083.755602][T25213] CUSE: unknown device info "ÿÿÿÿ" [ 1083.761231][T25213] CUSE: unknown device info "" [ 1083.763399][T25213] CUSE: unknown device info "€" [ 1083.765548][T25213] CUSE: DEVNAME unspecified [ 1083.999494][T25223] lo speed is unknown, defaulting to 1000 [ 1084.075439][T25218] batadv_slave_1: entered promiscuous mode [ 1084.100181][T25218] ./bus: Can't lookup blockdev [ 1084.147866][ T10] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1084.220927][T25200] batadv_slave_1: left promiscuous mode [ 1084.268332][T24318] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 1084.311498][ T10] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 1084.316342][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1084.324819][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1084.328717][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1084.335024][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1084.345211][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.358356][ T10] usb 6-1: config 0 descriptor?? [ 1084.417944][T24318] usb 7-1: Using ep0 maxpacket: 32 [ 1084.421273][T24318] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1084.425001][T24318] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1084.429062][T24318] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1084.432676][T24318] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1084.439362][T24318] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1084.441847][T25232] lo speed is unknown, defaulting to 1000 [ 1084.442774][T24318] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.447508][T24318] usb 7-1: Product: syz [ 1084.449249][T24318] usb 7-1: Manufacturer: syz [ 1084.451132][T24318] usb 7-1: SerialNumber: syz [ 1084.459720][ C2] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1084.466543][T24318] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/input/input297 [ 1084.664545][T25225] 9pnet_fd: Insufficient options for proto=fd [ 1084.687863][T24318] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1084.695015][T24318] (id 0x00) [ 1084.817903][T24318] rc_core: IR keymap rc-imon-pad not found [ 1084.820476][T24318] Registered IR keymap rc-empty [ 1084.822622][T24318] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1084.827247][T24318] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1084.889361][T24318] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0 [ 1084.895430][T24318] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0/input298 [ 1084.903426][T24318] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:66> initialized [ 1085.347885][ T24] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 1085.517936][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 1085.521533][ T24] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.525380][ T24] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1085.530287][ T24] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1085.534920][ T24] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1085.543523][ T24] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1085.547486][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.551048][ T24] usb 8-1: Product: syz [ 1085.552930][ T24] usb 8-1: Manufacturer: syz [ 1085.554916][ T24] usb 8-1: SerialNumber: syz [ 1085.567501][ C2] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1085.574063][ T24] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input299 [ 1085.773871][T25244] 9p: Bad value for 'rfdno' [ 1085.787791][ T24] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1085.790983][ T24] (id 0x00) [ 1085.867860][ T24] rc_core: IR keymap rc-imon-pad not found [ 1085.870683][ T24] Registered IR keymap rc-empty [ 1085.873480][ T24] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1085.879204][ T24] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1086.068931][ T24] rc rc1: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc1 [ 1086.073714][ T24] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc1/input300 [ 1086.080061][ T24] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:60> initialized [ 1086.811579][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 1086.815080][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1086.823132][ T10] usb 6-1: USB disconnect, device number 72 [ 1087.000833][T25225] imon:send_packet: task interrupted [ 1087.004574][T25225] imon:send_packet: packet tx failed (-512) [ 1087.007077][T25225] imon:vfd_write: send packet #0 failed [ 1087.010081][T25244] imon:display_open: display port is already open [ 1087.015815][ T24] usb 8-1: USB disconnect, device number 60 [ 1087.084336][ T10] usb 7-1: USB disconnect, device number 66 [ 1087.475565][T25264] FAULT_INJECTION: forcing a failure. [ 1087.475565][T25264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1087.482661][T25264] CPU: 0 UID: 0 PID: 25264 Comm: syz.2.3691 Tainted: G L syzkaller #0 PREEMPT(full) [ 1087.482690][T25264] Tainted: [L]=SOFTLOCKUP [ 1087.482697][T25264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1087.482708][T25264] Call Trace: [ 1087.482715][T25264] [ 1087.482723][T25264] dump_stack_lvl+0x100/0x190 [ 1087.482750][T25264] should_fail_ex.cold+0x5/0xa [ 1087.482772][T25264] copy_fpstate_to_sigframe+0x82d/0xae0 [ 1087.482804][T25264] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 1087.482827][T25264] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 1087.482861][T25264] ? irqentry_exit+0x24d/0xa00 [ 1087.482881][T25264] ? x86_task_fpu+0x5f/0x90 [ 1087.482907][T25264] get_sigframe+0x3fb/0x940 [ 1087.482939][T25264] ? __pfx_get_sigframe+0x10/0x10 [ 1087.482967][T25264] ? _raw_spin_unlock_irq+0x29/0x50 [ 1087.483026][T25264] ? siginfo_layout+0x156/0x290 [ 1087.483059][T25264] ia32_setup_rt_frame+0xe7/0xaf0 [ 1087.483087][T25264] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 1087.483115][T25264] arch_do_signal_or_restart+0x459/0x7a0 [ 1087.483143][T25264] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1087.483177][T25264] ? fput+0x79/0x100 [ 1087.483203][T25264] exit_to_user_mode_loop+0x139/0x6f0 [ 1087.483231][T25264] ? rcu_is_watching+0x12/0xc0 [ 1087.483270][T25264] do_int80_emulation+0x513/0x720 [ 1087.483294][T25264] asm_int80_emulation+0x1a/0x20 [ 1087.483312][T25264] RIP: 0023:0xf71c72eb [ 1087.483327][T25264] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1087.483344][T25264] RSP: 002b:00000000f54864bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 1087.483363][T25264] RAX: 0000000000000001 RBX: 0000000000000008 RCX: 00000000f54865c0 [ 1087.483373][T25264] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1087.483383][T25264] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1087.483393][T25264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1087.483403][T25264] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1087.483427][T25264] [ 1087.676959][T25269] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1088.667855][ T5828] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 1089.397942][ T5828] usb 7-1: Using ep0 maxpacket: 32 [ 1089.402088][ T5828] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1089.405346][ T5828] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 1089.408261][ T5828] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 1089.411026][ T5828] usb 7-1: config 14 has no interface number 0 [ 1089.412954][ T5828] usb 7-1: config 14 has no interface number 1 [ 1089.415104][ T5828] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1089.419331][ T5828] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1089.423131][ T5828] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1089.426618][ T5828] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1089.430671][ T5828] usb 7-1: config 14 interface 57 has no altsetting 0 [ 1089.432943][ T5828] usb 7-1: config 14 interface 228 has no altsetting 0 [ 1089.436802][ T5828] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1089.440170][ T5828] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.442791][ T5828] usb 7-1: Product: syz [ 1089.444110][ T5828] usb 7-1: Manufacturer: syz [ 1089.499545][ T5828] usb 7-1: SerialNumber: syz [ 1089.768337][ T24] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1089.927875][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 1089.930934][ T24] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1089.933598][ T24] usb 6-1: config 179 has no interface number 0 [ 1089.935564][ T24] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1089.938858][ T24] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1089.942396][ T24] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1089.945836][ T24] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1089.949550][ T24] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1089.953904][ T24] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1089.957035][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.961696][T25296] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1090.057896][T24908] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1090.089874][ T10] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 1090.207812][T24908] usb 5-1: Using ep0 maxpacket: 8 [ 1090.211345][T24908] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1090.214541][T24908] usb 5-1: config 179 has no interface number 0 [ 1090.216893][T24908] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1090.220423][T24908] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1090.223906][T24908] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1090.228320][T24908] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1090.232619][T24908] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1090.236709][T24908] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1090.240028][T24908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.245599][ T10] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 1090.248351][T25308] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1090.250577][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1090.254700][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1090.259646][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1090.265086][ T10] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1090.269470][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.280449][ T10] usb 8-1: config 0 descriptor?? [ 1090.418757][T25296] syzkaller1: entered promiscuous mode [ 1090.420793][T25296] syzkaller1: entered allmulticast mode [ 1090.501596][T24908] usb 6-1: USB disconnect, device number 73 [ 1090.501640][ C2] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1090.506716][ C2] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1090.713938][T25308] syzkaller1: entered promiscuous mode [ 1090.715814][T25308] syzkaller1: entered allmulticast mode [ 1090.822325][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1090.822411][ T41] usb 5-1: USB disconnect, device number 66 [ 1090.824978][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1091.090748][T25315] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1091.482176][T25325] siw: device registration error -23 [ 1091.649324][ T5828] legousbtower 7-1:14.57: interrupt endpoints not found [ 1091.672234][ T5828] legousbtower 7-1:14.228: interrupt endpoints not found [ 1091.696565][ T5828] usb 7-1: USB disconnect, device number 67 [ 1092.789310][ T10] usbhid 8-1:0.0: can't add hid device: -71 [ 1092.791757][ T10] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1092.802021][ T10] usb 8-1: USB disconnect, device number 61 [ 1093.502262][T25352] lo speed is unknown, defaulting to 1000 [ 1108.087988][ T10] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1108.248029][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 1108.408243][ T10] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1108.411438][ T10] usb 5-1: config 179 has no interface number 0 [ 1108.413560][ T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1108.417696][ T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1108.427863][ T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1108.433434][ T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1108.437574][ T10] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1108.447901][ T10] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1108.451434][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.468043][T25384] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1108.769668][T25407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3726'. [ 1108.776598][T25407] netlink: 'syz.3.3726': attribute type 1 has an invalid length. [ 1108.776614][T25407] netlink: 'syz.3.3726': attribute type 2 has an invalid length. [ 1108.987862][ T24] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 1109.140050][ T24] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 1109.147942][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1109.151808][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1109.156984][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1109.167675][ T24] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1109.174879][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.185808][ T24] usb 7-1: config 0 descriptor?? [ 1109.674154][T25384] syzkaller1: entered promiscuous mode [ 1109.682922][T25384] syzkaller1: entered allmulticast mode [ 1109.902892][ T5848] usb 5-1: USB disconnect, device number 67 [ 1109.902914][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1109.907741][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1110.000815][T25419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3729'. [ 1110.002805][T25419] netlink: 'syz.1.3729': attribute type 1 has an invalid length. [ 1110.002822][T25419] netlink: 'syz.1.3729': attribute type 2 has an invalid length. [ 1110.187882][ T5845] usb 8-1: new full-speed USB device number 62 using dummy_hcd [ 1110.320645][T25428] lo speed is unknown, defaulting to 1000 [ 1110.339972][ T5845] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1110.344209][ T5845] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 1110.348740][ T5845] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 247, setting to 64 [ 1110.353403][ T5845] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1110.358967][ T5845] usb 8-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1110.362914][ T5845] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.366471][ T5845] usb 8-1: Product: syz [ 1110.368670][ T5845] usb 8-1: Manufacturer: syz [ 1110.370871][ T5845] usb 8-1: SerialNumber: syz [ 1110.376698][ T5845] usb 8-1: config 0 descriptor?? [ 1110.379804][T25424] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1110.588337][T25424] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1110.593721][ T5845] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input301 [ 1110.997883][ T5848] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1111.147813][ T5848] usb 5-1: Using ep0 maxpacket: 8 [ 1111.151407][ T5848] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1111.154127][ T5848] usb 5-1: config 179 has no interface number 0 [ 1111.156358][ T5848] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1111.224180][ T5848] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1111.233996][ T5848] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1111.242402][ T5848] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1111.247991][ T5848] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1111.258038][ T5848] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1111.262919][ T5848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.269972][T25433] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1111.726263][ T24] usbhid 7-1:0.0: can't add hid device: -71 [ 1111.744487][ T24] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1111.777483][ T24] usb 7-1: USB disconnect, device number 69 [ 1111.780680][ T5848] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1111.823175][T25433] syzkaller1: entered promiscuous mode [ 1111.825014][T25433] syzkaller1: entered allmulticast mode [ 1111.877039][T25433] lo speed is unknown, defaulting to 1000 [ 1111.877488][T25440] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1111.891720][T25440] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1112.000794][T25443] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1112.076167][T25445] netlink: 'syz.2.3734': attribute type 10 has an invalid length. [ 1112.261490][ T73] usb 5-1: USB disconnect, device number 68 [ 1112.261503][ C2] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1112.267290][ C2] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 1113.004818][ T5845] usb 8-1: USB disconnect, device number 62 [ 1113.227973][ T5848] usb 6-1: new full-speed USB device number 75 using dummy_hcd [ 1113.379549][ T5848] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1113.383493][ T5848] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 1113.386908][ T5848] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 247, setting to 64 [ 1113.390302][ T5848] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1113.394990][ T5848] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1113.398129][ T5848] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.400677][ T5848] usb 6-1: Product: syz [ 1113.401967][ T5848] usb 6-1: Manufacturer: syz [ 1113.403338][ T5848] usb 6-1: SerialNumber: syz [ 1113.406594][ T5848] usb 6-1: config 0 descriptor?? [ 1113.409186][T25451] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1113.417890][ T24] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 1113.498069][ T5845] usb 8-1: new high-speed USB device number 63 using dummy_hcd [ 1113.648000][ T5845] usb 8-1: Using ep0 maxpacket: 32 [ 1113.652049][ T5845] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1113.655386][ T5845] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 1113.658248][ T5845] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 1113.661679][ T5845] usb 8-1: config 14 has no interface number 0 [ 1113.664251][ T5845] usb 8-1: config 14 has no interface number 1 [ 1113.666691][ T5845] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1113.671423][ T5845] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1113.676195][ T5845] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1113.680923][ T5845] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1113.685491][ T5845] usb 8-1: config 14 interface 57 has no altsetting 0 [ 1113.688799][ T5845] usb 8-1: config 14 interface 228 has no altsetting 0 [ 1113.694115][ T5845] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1113.697802][ T5845] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.700453][ T5845] usb 8-1: Product: syz [ 1113.702123][ T5845] usb 8-1: Manufacturer: syz [ 1113.703744][ T5845] usb 8-1: SerialNumber: syz [ 1113.736620][ T24] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1113.752196][T25451] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1114.282518][ T24] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 1114.367281][ T5848] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input302 [ 1114.371188][ T24] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 247, setting to 64 [ 1114.376303][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1114.384444][ T24] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1114.388687][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.392115][ T24] usb 5-1: Product: syz [ 1114.393825][ T24] usb 5-1: Manufacturer: syz [ 1114.395845][ T24] usb 5-1: SerialNumber: syz [ 1114.400498][ T24] usb 5-1: config 0 descriptor?? [ 1114.406137][T25455] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1114.632451][T25455] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1114.639495][ T24] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input303 [ 1115.469903][T25477] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20002 [ 1115.528889][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.531246][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.720542][T25480] lo speed is unknown, defaulting to 1000 [ 1115.880363][ T56] usb 6-1: USB disconnect, device number 75 [ 1116.315244][ T5845] legousbtower 8-1:14.57: interrupt endpoints not found [ 1116.325538][ T5845] legousbtower 8-1:14.228: interrupt endpoints not found [ 1116.335115][ T5845] usb 8-1: USB disconnect, device number 63 [ 1117.067857][ T24] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1117.220175][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 1117.224806][ T24] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1117.229724][ T24] usb 6-1: config 179 has no interface number 0 [ 1117.232682][ T24] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1117.238216][ T24] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1117.243465][ T5845] usb 5-1: USB disconnect, device number 69 [ 1117.250377][ T24] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1117.255498][ T24] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1117.270717][ T24] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1117.278915][ T24] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1117.286535][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.298449][T25493] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1117.854325][T25493] syzkaller1: entered promiscuous mode [ 1117.873226][T25493] syzkaller1: entered allmulticast mode [ 1118.054251][T25492] lo speed is unknown, defaulting to 1000 [ 1118.567952][ T5845] usb 8-1: new high-speed USB device number 64 using dummy_hcd [ 1118.717926][ T5845] usb 8-1: Using ep0 maxpacket: 8 [ 1118.721792][ T5845] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 1118.725317][ T5845] usb 8-1: config 179 has no interface number 0 [ 1118.729116][ T5845] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1118.734153][ T5845] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1118.738883][ T5845] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1118.743401][ T5845] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1118.748659][ T5845] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1118.753977][ T5845] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1118.754865][ C2] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1118.754928][ T5938] usb 6-1: USB disconnect, device number 76 [ 1118.757550][ T5845] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.760660][ C2] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1118.771815][T25507] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1118.878018][ T73] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 1118.987834][ T24] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1119.027899][ T73] usb 7-1: Using ep0 maxpacket: 8 [ 1119.032966][ T73] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1119.036373][ T73] usb 7-1: config 179 has no interface number 0 [ 1119.039117][ T73] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1119.043957][ T73] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1119.048852][ T73] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1119.054374][ T73] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1119.059497][ T73] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1119.064995][ T73] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1119.068953][ T73] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.075558][T25511] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1119.137847][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 1119.141839][ T24] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1119.145384][ T24] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1119.149063][ T24] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1119.152492][ T24] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1119.158599][ T24] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1119.161434][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.163985][ T24] usb 5-1: Product: syz [ 1119.165746][ T24] usb 5-1: Manufacturer: syz [ 1119.167428][ T24] usb 5-1: SerialNumber: syz [ 1119.174826][ C2] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1119.179606][ T24] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/input/input304 [ 1119.209684][T25506] syzkaller1: entered promiscuous mode [ 1119.212504][T25506] syzkaller1: entered allmulticast mode [ 1119.254234][T25506] lo speed is unknown, defaulting to 1000 [ 1119.374410][T25513] 9p: Bad value for 'rfdno' [ 1119.388029][ T24] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1119.393108][ T24] (id 0x00) [ 1119.447994][ T24] rc_core: IR keymap rc-imon-pad not found [ 1119.449997][ T24] Registered IR keymap rc-empty [ 1119.451681][ T24] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1119.455036][ T24] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1119.588363][ T24] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0 [ 1119.592707][ T24] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0/input305 [ 1119.600253][ T24] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:70> initialized [ 1119.740734][T25517] syzkaller1: entered promiscuous mode [ 1119.743017][T25517] syzkaller1: entered allmulticast mode [ 1119.756046][T25520] lo speed is unknown, defaulting to 1000 [ 1120.021445][ C1] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1120.024107][ C1] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1120.026738][ T5845] usb 8-1: USB disconnect, device number 64 [ 1120.174648][ T24] usb 7-1: USB disconnect, device number 70 [ 1120.174730][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1120.180369][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1120.487975][ T5845] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1120.639238][ T5845] usb 6-1: Using ep0 maxpacket: 32 [ 1120.643227][ T5845] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1120.646942][ T5845] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 1120.653019][ T5845] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 1120.656340][ T5845] usb 6-1: config 14 has no interface number 0 [ 1120.658851][ T5845] usb 6-1: config 14 has no interface number 1 [ 1120.661022][ T5845] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1120.664915][ T5845] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1120.668454][ T5845] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1120.672225][ T5845] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1120.675789][ T5845] usb 6-1: config 14 interface 57 has no altsetting 0 [ 1120.678111][ T5845] usb 6-1: config 14 interface 228 has no altsetting 0 [ 1120.682339][ T5845] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1120.685197][ T5845] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.687567][ T5845] usb 6-1: Product: syz [ 1120.689055][ T5845] usb 6-1: Manufacturer: syz [ 1120.690472][ T5845] usb 6-1: SerialNumber: syz [ 1120.772632][T25530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3753'. [ 1120.775159][T25530] netlink: 'syz.3.3753': attribute type 1 has an invalid length. [ 1120.775172][T25530] netlink: 'syz.3.3753': attribute type 2 has an invalid length. [ 1121.798778][T25513] imon:send_packet: task interrupted [ 1121.801134][T25513] imon:send_packet: packet tx failed (-512) [ 1121.807696][T25513] imon:vfd_write: send packet #0 failed [ 1121.828694][ T24] usb 5-1: USB disconnect, device number 70 [ 1121.962299][T25551] netlink: 'syz.0.3759': attribute type 10 has an invalid length. [ 1121.984225][T25551] team0: Port device dummy0 added [ 1122.025048][T25551] netlink: 'syz.0.3759': attribute type 10 has an invalid length. [ 1122.035300][T25551] team0: Port device dummy0 removed [ 1122.869569][T25572] binder: 25571:25572 ioctl 4008f510 80000080 returned -22 [ 1123.011405][T25572] syz.2.3763 (25572): drop_caches: 2 [ 1123.287095][ T5845] legousbtower 6-1:14.57: interrupt endpoints not found [ 1123.293219][ T5845] legousbtower 6-1:14.228: interrupt endpoints not found [ 1123.300938][ T5845] usb 6-1: USB disconnect, device number 77 [ 1123.303493][T25583] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3766'. [ 1123.371988][T25579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3767'. [ 1123.378635][T25579] netlink: 'syz.2.3767': attribute type 1 has an invalid length. [ 1123.378655][T25579] netlink: 'syz.2.3767': attribute type 2 has an invalid length. [ 1123.543958][T25597] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3769'. [ 1123.671607][T25600] lo speed is unknown, defaulting to 1000 [ 1123.823547][T25606] lo speed is unknown, defaulting to 1000 [ 1124.008814][ T73] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1124.159298][ T73] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1124.162963][ T73] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1124.166561][ T73] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1124.170034][ T73] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1124.175599][ T73] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1124.179171][ T73] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1124.181900][ T73] usb 6-1: Manufacturer: syz [ 1124.184713][ T73] usb 6-1: config 0 descriptor?? [ 1124.606968][ T73] hid_parser_main: 68 callbacks suppressed [ 1124.606986][ T73] appleir 0003:05AC:8243.0007: unknown main item tag 0x0 [ 1124.620026][ T73] appleir 0003:05AC:8243.0007: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 1124.684309][T25623] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3775'. [ 1124.920197][T25628] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3772'. [ 1125.108094][ T73] usb 8-1: new high-speed USB device number 65 using dummy_hcd [ 1125.257960][ T73] usb 8-1: Using ep0 maxpacket: 32 [ 1125.293294][ T73] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1125.304081][ T73] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 1125.318876][ T73] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 1125.321571][ T73] usb 8-1: config 14 has no interface number 0 [ 1125.323836][ T73] usb 8-1: config 14 has no interface number 1 [ 1125.326145][ T73] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1125.332454][ T73] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1125.337353][ T73] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1125.342283][ T73] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1125.354065][ T73] usb 8-1: config 14 interface 57 has no altsetting 0 [ 1125.363242][ T73] usb 8-1: config 14 interface 228 has no altsetting 0 [ 1125.485428][ T73] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1125.530516][ T73] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1125.622767][ T73] usb 8-1: Product: syz [ 1125.624204][ T73] usb 8-1: Manufacturer: syz [ 1125.625696][ T73] usb 8-1: SerialNumber: syz [ 1126.773153][ T10] usb 6-1: USB disconnect, device number 78 [ 1126.798839][T25651] lo speed is unknown, defaulting to 1000 [ 1128.003657][ T73] legousbtower 8-1:14.57: interrupt endpoints not found [ 1128.014730][ T73] legousbtower 8-1:14.228: interrupt endpoints not found [ 1128.022857][ T73] usb 8-1: USB disconnect, device number 65 [ 1128.215575][T25675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3788'. [ 1128.222244][T25675] batadv0: entered promiscuous mode [ 1128.224095][T25675] macsec1: entered promiscuous mode [ 1128.225952][T25675] macsec1: entered allmulticast mode [ 1128.227651][T25675] batadv0: entered allmulticast mode [ 1128.230267][T25675] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1128.385153][T25675] batadv0: left allmulticast mode [ 1128.400447][T25675] batadv0: left promiscuous mode [ 1128.557480][T25690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3790'. [ 1128.558863][T25690] netlink: 'syz.1.3790': attribute type 1 has an invalid length. [ 1128.558882][T25690] netlink: 'syz.1.3790': attribute type 2 has an invalid length. [ 1129.257919][ T56] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1129.277982][ T73] usb 8-1: new high-speed USB device number 66 using dummy_hcd [ 1129.347844][ T24] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1129.407953][ T56] usb 7-1: Using ep0 maxpacket: 32 [ 1129.412474][ T56] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1129.416254][ T56] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 1129.420677][ T56] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 1129.424145][ T56] usb 7-1: config 14 has no interface number 0 [ 1129.427152][ T56] usb 7-1: config 14 has no interface number 1 [ 1129.429450][ T73] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 1129.430608][ T56] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1129.433306][ T73] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1129.437592][ T56] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1129.437619][ T56] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1129.437642][ T56] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1129.443304][ T73] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1129.450626][ T56] usb 7-1: config 14 interface 57 has no altsetting 0 [ 1129.454200][ T73] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1129.458736][ T56] usb 7-1: config 14 interface 228 has no altsetting 0 [ 1129.461159][ T56] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1129.462927][ T73] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1129.465746][ T56] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.471265][ T73] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.477905][ T56] usb 7-1: Product: syz [ 1129.484856][ T73] usb 8-1: config 0 descriptor?? [ 1129.487813][ T56] usb 7-1: Manufacturer: syz [ 1129.495342][ T56] usb 7-1: SerialNumber: syz [ 1129.498065][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 1129.501773][ T24] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1129.505859][ T24] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1129.511723][ T24] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1129.516035][ T24] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1129.523386][ T24] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1129.526917][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.530524][ T24] usb 5-1: Product: syz [ 1129.532337][ T24] usb 5-1: Manufacturer: syz [ 1129.534372][ T24] usb 5-1: SerialNumber: syz [ 1129.545068][ C2] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1129.549858][ T24] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/input/input306 [ 1129.754362][T25709] 9pnet_fd: Insufficient options for proto=fd [ 1129.808564][ T24] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1129.814494][ T24] (id 0x00) [ 1130.047951][ T24] rc_core: IR keymap rc-imon-pad not found [ 1130.050572][ T24] Registered IR keymap rc-empty [ 1130.052656][ T24] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1130.057709][ T24] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1130.079212][ T24] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0 [ 1130.085430][ T24] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0/input307 [ 1130.097463][ T24] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:71> initialized [ 1130.450725][T25721] fuse: Unknown parameter 'grou00000000000000000000' [ 1131.441573][T25728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3802'. [ 1131.449709][T25728] batadv0: entered promiscuous mode [ 1131.455264][T25728] macsec1: entered promiscuous mode [ 1131.460340][T25728] macsec1: entered allmulticast mode [ 1131.462535][T25728] batadv0: entered allmulticast mode [ 1131.465834][T25728] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1131.471053][T25728] batadv0: left allmulticast mode [ 1131.472999][T25728] batadv0: left promiscuous mode [ 1131.910531][ T56] legousbtower 7-1:14.57: interrupt endpoints not found [ 1131.917690][ T56] legousbtower 7-1:14.228: interrupt endpoints not found [ 1131.924760][ T56] usb 7-1: USB disconnect, device number 71 [ 1132.075268][T25709] imon:send_packet: task interrupted [ 1132.077544][ T73] usbhid 8-1:0.0: can't add hid device: -71 [ 1132.083036][T25709] imon:send_packet: packet tx failed (-512) [ 1132.094263][ T73] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1132.098530][T25709] imon:vfd_write: send packet #0 failed [ 1132.107583][ T73] usb 8-1: USB disconnect, device number 66 [ 1132.157478][ T56] usb 5-1: USB disconnect, device number 71 [ 1132.648047][ T56] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1132.800991][ T56] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 1132.804615][ T56] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1132.808892][ T56] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1132.812229][ T56] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1132.818117][ T56] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1132.822386][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.835444][ T56] usb 5-1: config 0 descriptor?? [ 1133.056035][T25754] lo speed is unknown, defaulting to 1000 [ 1133.119845][T25759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3811'. [ 1133.165870][T25759] batadv0: entered promiscuous mode [ 1133.176044][T25759] macsec1: entered promiscuous mode [ 1133.187811][T25759] macsec1: entered allmulticast mode [ 1133.192996][T25759] batadv0: entered allmulticast mode [ 1133.206516][T25759] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1134.351277][T18975] ------------[ cut here ]------------ [ 1134.355109][T18975] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 1134.357972][T18975] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x322/0x590, CPU#2: kworker/2:1/18975 [ 1134.362489][T18975] Modules linked in: [ 1134.365060][T18975] CPU: 2 UID: 0 PID: 18975 Comm: kworker/2:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1134.369316][T18975] Tainted: [L]=SOFTLOCKUP [ 1134.370991][T18975] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1134.374859][T18975] Workqueue: events drm_fb_helper_damage_work [ 1134.377221][T18975] RIP: 0010:drm_crtc_wait_one_vblank+0x328/0x590 [ 1134.379739][T18975] Code: 48 8b 6b 50 48 85 ed 0f 84 dc 01 00 00 e8 a0 09 42 fc 48 89 df e8 08 8a 92 00 48 89 c6 48 8d 3d 6e 11 67 0b 44 89 e9 48 89 ea <67> 48 0f b9 3a 44 89 ee 4c 89 e7 41 be 92 ff ff ff e8 52 f7 ff ff [ 1134.387097][T18975] RSP: 0018:ffffc90003157a60 EFLAGS: 00010293 [ 1134.389183][T18975] RAX: ffffffff8c715e60 RBX: ffff888026305000 RCX: 0000000000000000 [ 1134.391666][T18975] RDX: ffffffff8c6f33e0 RSI: ffffffff8c715e60 RDI: ffffffff912e30a0 [ 1134.394144][T18975] RBP: ffffffff8c6f33e0 R08: 0000000000000005 R09: 0000000000000000 [ 1134.396608][T18975] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888024e9e000 [ 1134.399221][T18975] R13: 0000000000000000 R14: 0000000000000000 R15: 000000000001081d [ 1134.401649][T18975] FS: 0000000000000000(0000) GS:ffff888096dee000(0000) knlGS:0000000000000000 [ 1134.404266][T18975] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1134.406245][T18975] CR2: 00000000f538aff4 CR3: 000000006bf9f000 CR4: 0000000000352ef0 [ 1134.408614][T18975] Call Trace: [ 1134.409639][T18975] [ 1134.410520][T18975] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 1134.412313][T18975] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1134.414234][T18975] ? lockdep_hardirqs_on+0x78/0x100 [ 1134.415762][T18975] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1134.417486][T18975] ? drm_vblank_get+0x14f/0x2d0 [ 1134.418989][T18975] drm_client_modeset_wait_for_vblank+0xef/0x120 [ 1134.420859][T18975] drm_fb_helper_damage_work+0x2e2/0xab0 [ 1134.422493][T18975] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1134.424300][T18975] ? rcu_is_watching+0x12/0xc0 [ 1134.425740][T18975] process_one_work+0xa23/0x1940 [ 1134.427217][T18975] ? __pfx_process_one_work+0x10/0x10 [ 1134.428843][T18975] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1134.430781][T18975] worker_thread+0x5ef/0xe50 [ 1134.432273][T18975] ? __pfx_worker_thread+0x10/0x10 [ 1134.433896][T18975] ? kthread+0x13a/0x450 [ 1134.435254][T18975] ? __pfx_worker_thread+0x10/0x10 [ 1134.436861][T18975] kthread+0x370/0x450 [ 1134.438256][T18975] ? __pfx_kthread+0x10/0x10 [ 1134.439682][T18975] ret_from_fork+0x72b/0xd50 [ 1134.441315][T18975] ? __pfx_ret_from_fork+0x10/0x10 [ 1134.443124][T18975] ? native_load_gs_index+0x1e/0xc0 [ 1134.444752][T18975] ? __switch_to+0x800/0x10f0 [ 1134.446251][T18975] ? __pfx_kthread+0x10/0x10 [ 1134.447715][T18975] ret_from_fork_asm+0x1a/0x30 [ 1134.449420][T18975] [ 1134.450417][T18975] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1134.452703][T18975] CPU: 2 UID: 0 PID: 18975 Comm: kworker/2:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1134.456093][T18975] Tainted: [L]=SOFTLOCKUP [ 1134.457448][T18975] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1134.460553][T18975] Workqueue: events drm_fb_helper_damage_work [ 1134.462489][T18975] Call Trace: [ 1134.463552][T18975] [ 1134.464495][T18975] dump_stack_lvl+0x100/0x190 [ 1134.465983][T18975] vpanic+0x552/0x970 [ 1134.467243][T18975] ? __pfx_vpanic+0x10/0x10 [ 1134.468689][T18975] panic+0xd1/0xe0 [ 1134.469912][T18975] ? __pfx_panic+0x10/0x10 [ 1134.471341][T18975] ? check_panic_on_warn+0x1f/0x90 [ 1134.472949][T18975] check_panic_on_warn.cold+0x19/0x34 [ 1134.474647][T18975] ? drm_crtc_wait_one_vblank+0x322/0x590 [ 1134.476519][T18975] __warn.cold+0x191/0x318 [ 1134.477974][T18975] __report_bug+0x30f/0x440 [ 1134.479404][T18975] ? drm_crtc_wait_one_vblank+0x322/0x590 [ 1134.481199][T18975] ? __pfx___report_bug+0x10/0x10 [ 1134.482765][T18975] ? lockdep_hardirqs_on+0x78/0x100 [ 1134.484367][T18975] report_bug_entry+0xe1/0x290 [ 1134.485808][T18975] ? drm_crtc_wait_one_vblank+0x328/0x590 [ 1134.487591][T18975] handle_bug+0x1cd/0x2a0 [ 1134.488969][T18975] exc_invalid_op+0x17/0x50 [ 1134.490420][T18975] asm_exc_invalid_op+0x1a/0x20 [ 1134.491975][T18975] RIP: 0010:drm_crtc_wait_one_vblank+0x328/0x590 [ 1134.493953][T18975] Code: 48 8b 6b 50 48 85 ed 0f 84 dc 01 00 00 e8 a0 09 42 fc 48 89 df e8 08 8a 92 00 48 89 c6 48 8d 3d 6e 11 67 0b 44 89 e9 48 89 ea <67> 48 0f b9 3a 44 89 ee 4c 89 e7 41 be 92 ff ff ff e8 52 f7 ff ff [ 1134.499880][T18975] RSP: 0018:ffffc90003157a60 EFLAGS: 00010293 [ 1134.501810][T18975] RAX: ffffffff8c715e60 RBX: ffff888026305000 RCX: 0000000000000000 [ 1134.504247][T18975] RDX: ffffffff8c6f33e0 RSI: ffffffff8c715e60 RDI: ffffffff912e30a0 [ 1134.506683][T18975] RBP: ffffffff8c6f33e0 R08: 0000000000000005 R09: 0000000000000000 [ 1134.509134][T18975] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888024e9e000 [ 1134.511616][T18975] R13: 0000000000000000 R14: 0000000000000000 R15: 000000000001081d [ 1134.514112][T18975] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 1134.516011][T18975] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1134.517920][T18975] ? lockdep_hardirqs_on+0x78/0x100 [ 1134.519542][T18975] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1134.521387][T18975] ? drm_vblank_get+0x14f/0x2d0 [ 1134.522929][T18975] drm_client_modeset_wait_for_vblank+0xef/0x120 [ 1134.524920][T18975] drm_fb_helper_damage_work+0x2e2/0xab0 [ 1134.526680][T18975] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1134.528613][T18975] ? rcu_is_watching+0x12/0xc0 [ 1134.530120][T18975] process_one_work+0xa23/0x1940 [ 1134.531688][T18975] ? __pfx_process_one_work+0x10/0x10 [ 1134.533351][T18975] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1134.535167][T18975] worker_thread+0x5ef/0xe50 [ 1134.536622][T18975] ? __pfx_worker_thread+0x10/0x10 [ 1134.538245][T18975] ? kthread+0x13a/0x450 [ 1134.539581][T18975] ? __pfx_worker_thread+0x10/0x10 [ 1134.541199][T18975] kthread+0x370/0x450 [ 1134.542493][T18975] ? __pfx_kthread+0x10/0x10 [ 1134.543949][T18975] ret_from_fork+0x72b/0xd50 [ 1134.545400][T18975] ? __pfx_ret_from_fork+0x10/0x10 [ 1134.547025][T18975] ? native_load_gs_index+0x1e/0xc0 [ 1134.548665][T18975] ? __switch_to+0x800/0x10f0 [ 1134.550149][T18975] ? __pfx_kthread+0x10/0x10 [ 1134.551629][T18975] ret_from_fork_asm+0x1a/0x30 [ 1134.553145][T18975] [ 1135.639235][T18975] Shutting down cpus with NMI [ 1135.641390][T18975] Kernel Offset: disabled [ 1135.642755][T18975] Rebooting in 86400 seconds..