last executing test programs: 19m9.582086078s ago: executing program 32 (id=75): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x0, 0xf, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548cfee54414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3079cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x700) 18m51.473638364s ago: executing program 33 (id=121): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$unix(0x1, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x8001, 0x0, 0xb3, 0x4, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x3}, &(0x7f00000005c0)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636682cfdeaadb60000693d547de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e46", 0x66, 0xfffffffffffffffe) r5 = add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000008000000000000000080000000000000", @ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x48) socketpair(0x2b, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x141, &(0x7f0000000300)=ANY=[], 0x0) r6 = syz_open_dev$sndctrl(&(0x7f00000012c0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc2c45512, &(0x7f0000000a00)={{0x5, 0x2, 0x0, 0x8, 'syz1\x00'}, 0x0, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffff70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800]}) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x20000328) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0xc010) close_range(r0, 0xffffffffffffffff, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000240)={0x10}, 0x10) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000180)=0x6, 0x4) 16m50.516400962s ago: executing program 3 (id=282): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000540)=ANY=[@ANYBLOB="0b0000001e1a0000b40000062300000000000000fa159042610bcd5ffd8eb075b54c8725f37433b8f709b436e904ee0c0cec19e3946dbaad8aa6ad328c863011ef864ad285382510e47ff3f81ff75ab7f83db2efeef002d34756bb800be7a84c57db9028833bee0624d12fa99b5a0d072f411e34fbde4bc007bdffc052e099c39c4e91adde5887617b5e953acb4cd9273979c52b095c5dc767ef8b2fd24421d5a63c9ef8f660a95bf2b686642094ad9bc0040e6fd335b57f3b834b6ed8368409d554f69bd5de7dc1", @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00'/11], 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', 0x0, &(0x7f0000000300)="22cf", 0x2, 0x1) setxattr$incfs_metadata(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) gettid() r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x90800000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=@gettaction={0x14, 0x32, 0x100, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x10091) readv(r0, &(0x7f0000000380)=[{0x0}], 0x1) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}}, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x200) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505330, &(0x7f0000000bc0)={{0x0, 0x1}, {0xe}, 0x2, 0x6, 0x2e}) 16m49.534354726s ago: executing program 3 (id=286): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280), 0x44000, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) getsockopt$inet_buf(r0, 0x118, 0x0, 0x0, 0x0) 16m43.654467963s ago: executing program 3 (id=300): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000054000001b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c309000001000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xd}, 0x94) 16m42.833030446s ago: executing program 3 (id=303): socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x118}}, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r3, r3, 0x0, 0x200000) cachestat(r3, &(0x7f0000000000)={0x9}, &(0x7f0000000040), 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, r4, 0x80000}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') preadv(r7, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000d00)="27050200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9d9bf1174bbf47ef74d55a99ad39d207cb572bb63dfc8f6098e3251eb181ebb55a0e82b5aa114e78f51a1e0eec04a10c2897204a66afab94dd8de001923467692f87653809bdac2ecd596160bec5c8869a08ecc5bf1561bb7ebf3468a2a212c7107d3c03418321ff77586b723dbfb3f03212aaf9150914bb989ef324957cea1707943a287afd6aa", 0xbf}, {&(0x7f0000001240)}], 0x2}, 0x9cdc2384056b48b8) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001180)=ANY=[@ANYBLOB="28000000010701010000000000000000010000091400078008000140010000060800024000000001be92248ac6a07cbc848f0890016169a6090181ac6f34afa5b9cfc702fd8e7ba7978773d82ac6453049a541ecd0b05cfc4e88dbe0d80f139c45cdefc5f95a26d557452c466822017e90fa93221f575cc05156a2"], 0x28}, 0x1, 0x0, 0x0, 0x804c}, 0xc080) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) 16m28.424814948s ago: executing program 3 (id=330): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x0, 0x0, 0x0) open$dir(0x0, 0x8000, 0x65) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r2) close(0xffffffffffffffff) syz_open_dev$dri(0x0, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') preadv(r3, &(0x7f0000000600)=[{&(0x7f0000000380)=""/116, 0x74}], 0x1, 0x82000001, 0xff) 16m17.196667783s ago: executing program 3 (id=352): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x140a, 0x73b, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x7}]}, 0x18}}, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1004000, 0x0, 0xb49, 0x0, 0x6, 0x1, 0x3}, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009880)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000240)={0x14, r7, 0x301, 0x0, 0x0, {0x17}}, 0x14}, 0x1, 0x0, 0x0, 0x34000804}, 0x0) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000014c0)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0xffff, 0x14}, @mpls={[], @ipv4=@igmp={{0x5, 0x4, 0x3, 0x22, 0x1c, 0x68, 0x0, 0x7, 0x2, 0x0, @rand_addr=0x64010102, @remote}, {0x11, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, 0x2a) 16m3.897384694s ago: executing program 34 (id=347): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc044560f, &(0x7f0000000fc0)=@multiplanar_fd={0x0, 0x9, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1769732f"}, 0x0, 0x4, {&(0x7f0000000380)}, 0x8}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$unix(r1, 0x0, 0x0, 0x123, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) migrate_pages(0x0, 0x2f, &(0x7f0000000140)=0x9, &(0x7f0000000240)=0x1) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r3 = fcntl$dupfd(r2, 0x406, r2) write$cgroup_pid(r3, &(0x7f0000000240), 0xfdef) read$FUSE(r3, &(0x7f0000002540)={0x2020}, 0xfdef) 16m1.592465008s ago: executing program 35 (id=352): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x140a, 0x73b, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x7}]}, 0x18}}, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1004000, 0x0, 0xb49, 0x0, 0x6, 0x1, 0x3}, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009880)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000240)={0x14, r7, 0x301, 0x0, 0x0, {0x17}}, 0x14}, 0x1, 0x0, 0x0, 0x34000804}, 0x0) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000014c0)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0xffff, 0x14}, @mpls={[], @ipv4=@igmp={{0x5, 0x4, 0x3, 0x22, 0x1c, 0x68, 0x0, 0x7, 0x2, 0x0, @rand_addr=0x64010102, @remote}, {0x11, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, 0x2a) 15m1.379724291s ago: executing program 0 (id=477): r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = epoll_create1(0x0) read$FUSE(r0, &(0x7f0000003280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000000240)={0x78, 0xffffffffffffffda, r2, {0x2000000007, 0xfffffffc, 0x0, {0x0, 0x5, 0x436ef031, 0x4, 0x0, 0xfffffffffffffffc, 0x2, 0x0, 0x1ff, 0xc000, 0xa0000000, 0x0, r3, 0xfffffffe, 0x0, 0x1000000}}}, 0x78) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x20000000}) 15m0.736976905s ago: executing program 0 (id=479): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x3e, 0x0, 0x0) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={r2, 0xffffffffffffffff, 0xcc0, 0x0, @val=@iter={&(0x7f0000000000)=@map_fd=r0, 0x10}}, 0x20) 14m58.618868482s ago: executing program 0 (id=482): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 14m57.308513098s ago: executing program 0 (id=487): syz_emit_ethernet(0x4e, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x18, 0x3c, 0x0, @local, @local, {[@dstopts={0x0, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x3, 0x1}}]}]}}}}}, 0x0) 14m56.535605006s ago: executing program 0 (id=489): r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = epoll_create1(0x0) read$FUSE(r0, &(0x7f0000003280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000000240)={0x78, 0xffffffffffffffda, r2, {0x2000000007, 0xfffffffc, 0x0, {0x0, 0x5, 0x436ef031, 0x4, 0x0, 0xfffffffffffffffc, 0x2, 0x0, 0x1ff, 0xc000, 0xa0000000, 0x0, r3, 0xfffffffe, 0x0, 0x1000000}}}, 0x78) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x20000000}) 14m55.816685084s ago: executing program 0 (id=491): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x2410, 0x4) sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x28008a}], 0x4000054, 0x40000022, 0x0) 14m40.837530033s ago: executing program 5 (id=540): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x30, r1, 0x1, 0x70bd69, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xc}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x24000040) 14m40.550031921s ago: executing program 36 (id=491): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x2410, 0x4) sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x28008a}], 0x4000054, 0x40000022, 0x0) 14m40.145662072s ago: executing program 5 (id=544): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x25, 0x101, 0x70bd25, 0xfefffffb, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x404c9d3}, 0x28040) 14m39.521104257s ago: executing program 5 (id=546): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8881, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$tun(r0, &(0x7f00000022c0)={@void, @val={0x2, 0x4, 0xea, 0x6, 0x8, 0x1}, @ipv4=@gre={{0x5, 0x4, 0x0, 0x2c, 0xea, 0x67, 0x0, 0xb, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x2]}, {0x1}, {0x8, 0x88be, 0x2, {{0x1, 0x1, 0x4, 0x3, 0x1, 0x0, 0x6, 0x1c}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x2, {{0x0, 0x2, 0x6, 0x1, 0x1, 0x2, 0x1, 0x6}, 0x2, {0x401, 0x7fff, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1}}}, {0x8, 0x6558, 0x2, "cd1d5112e586302464e0a0901e1d1aa5be2b5708285aed5af6d46cddfda801ede94f0e5630df0e71750de39236563e01761d50ff75a54c3769cef2ddae286f2d347041ecd12abecc809aad9cd843f635efcd976b0c975bd3b9080e33f3780bab750ad3ad275e1e150097efe1126c36414e30613594da2f32571ccd15206326f9f3e93212ae4688a876c1d137e40f02ef"}}}}, 0xf4) 14m37.212987224s ago: executing program 5 (id=550): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0xf5c, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x1000009, 0x7, 0x0, 0x2, 0xfffffffffffffffe, 0x40008000000002, 0xfffffffffffffffd, 0x59, 0x0, 0xfffffffffffffffc, 0x0, 0x2, 0x6, 0x1, 0x7], 0x8000000, 0x8340}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = eventfd2(0xe5c, 0x80000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r3, 0x7, 0x2, r2}) 14m35.954537967s ago: executing program 5 (id=554): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0xae4521f7, @mcast1, 0x7}, 0x1c) sendmmsg$inet(r0, &(0x7f0000002f80)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10, 0x0}}], 0x1, 0x80) 14m35.187679708s ago: executing program 5 (id=557): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0xce22, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x28008a}], 0x4000054, 0x40000022, 0x0) 14m19.529509534s ago: executing program 37 (id=557): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0xce22, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x28008a}], 0x4000054, 0x40000022, 0x0) 10m42.483457493s ago: executing program 6 (id=967): msgctl$IPC_STAT(0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x100}}, 0x0) 10m38.771674269s ago: executing program 6 (id=976): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c000000020601fa0000000000000000000000001400078008001140000000ba05001500f90000000500010006000000050005000a00000005000400000000000900020073797a300000000010000300686173683a69702c6d616300"], 0x5c}}, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x23e, 0x0, &(0x7f0000000180), &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) 10m37.72502882s ago: executing program 6 (id=979): r0 = eventfd2(0x0, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000000)="f67804e83b4e", 0x6}, {0x0}], 0x2) 10m36.736095253s ago: executing program 6 (id=982): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f00000028c0)={0x0, 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$vim2m(0x0, 0x7, 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x2b, 0x3, 0x1) connect$unix(r2, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap$KVM_VCPU(&(0x7f00007c2000/0x3000)=nil, 0x0, 0x3000002, 0x40010, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000200), 0x0, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) ioctl$DRM_IOCTL_MODE_GETENCODER(r5, 0xc01464a6, &(0x7f0000000180)={r6}) 10m24.653888308s ago: executing program 6 (id=1003): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001280004000000a60c6eec00be00442ffffe8000000000000000000000000000aaff02000000000000000000000000000104206558"], 0xfdef) 10m23.483770034s ago: executing program 6 (id=1005): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x7000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_auto}]}) r3 = syz_open_procfs(0x0, &(0x7f00000006c0)='net/ip_tables_matches\x00') preadv(r3, &(0x7f0000000340)=[{&(0x7f00000008c0)=""/201, 0xc9}], 0x1, 0x2, 0x0) 10m8.127431441s ago: executing program 38 (id=1005): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x7000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_auto}]}) r3 = syz_open_procfs(0x0, &(0x7f00000006c0)='net/ip_tables_matches\x00') preadv(r3, &(0x7f0000000340)=[{&(0x7f00000008c0)=""/201, 0xc9}], 0x1, 0x2, 0x0) 1m6.755043551s ago: executing program 9 (id=2476): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000001340)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB='\r'], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) 1m5.667583388s ago: executing program 9 (id=2480): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x810, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x8, 0x3, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(r4, &(0x7f0000000000)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m4.802688985s ago: executing program 9 (id=2484): r0 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\x04\x00\x00\x00\x00\x00\x00\x00\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\xdf$2dUU\x18\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\xb2W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\x14\x16\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11\xb2', 0x3) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r0, 0x310f000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) writev(r1, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bde1a60c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc865a92e9539f3513af3a1e6f78608890f912f087214dac06387a94d5e1b31c35be117ee540dc4560aa500269b81a0bbc", 0xf0}, {&(0x7f0000000180)="88e584aac45d6d83e6c2c8857149eb55d2c259a747dbdfc05b7e87150dcc7e40953e657417f2c201284dd4714eb14ce94fb9be03e73d06a982f5502b3ae3a800c03902057e1ec6c9a195d347386118cbfbb67848d7783900dd047aeed9e789b9ea73ca850c5f9dbf67c044564934db01395590d790b885e517196ffa5c6b", 0x7e}, {&(0x7f0000000400)="83c0b58e5bcffe6c14ab199d81f63d9e77512d040c3f3a7b41a3a1ed6cf40450443e4e377139b523eb3dd725f87a1ed946e28c6b19e1fc6ea21fe2eef736ec85289f34830b89c7169369862871b9608f2e976924a41f64f236a395563ddb3b994b4d9cf9f465dea2adad06013851713e9d30f195383be99db35611dd11a69721e423fcf5904c2af8ca4b1774bc6438d1c6218a2ada56c8b5b289274c2d116ecd4aafbd01536f931c84ec7f95ce8c6d118d1dec3bfa645c3e72018e9c154a80fd84b6e0233520ee1dc56ec62472820000000000000000", 0xd6}, {&(0x7f0000004480)="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", 0xda2}, {&(0x7f0000000500)="f4f6ec3f1f6e4804195e1668ee6a8b", 0xf}, {&(0x7f0000001040)="c97a88346df6", 0x6}], 0x6) 1m4.289363192s ago: executing program 9 (id=2486): msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000080)=""/28) syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x4}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf8}}, 0x0) 1m3.418878822s ago: executing program 9 (id=2490): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000280)='timerslack_ns\x00') write$binfmt_format(r2, &(0x7f0000000180)='1\x00', 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 1m3.219669759s ago: executing program 9 (id=2491): r0 = syz_usb_connect(0x5, 0x36, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x6c, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x4}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000800)=@ethtool_per_queue_op={0x4b, 0xf, [0x6, 0x5, 0x8001, 0x8001, 0x119e9c16, 0x5834a348, 0x3, 0x9f0d, 0x5, 0x9, 0x401, 0xffffffff, 0x10000, 0x3, 0x80, 0xb5c, 0x4, 0xae, 0xe, 0x5c6a, 0x1525, 0x3, 0x5, 0x8080, 0x2, 0x1, 0x10001, 0x9, 0xffffffff, 0x0, 0x400, 0x2, 0x6, 0x5, 0x5c9, 0xbcd, 0x13, 0x7, 0x22f0edfa, 0x1, 0x4, 0xde, 0x147, 0x0, 0xe, 0xe, 0x5, 0x1, 0xc, 0x8000, 0xffffffff, 0x8, 0x2, 0xff, 0xfffff331, 0x6, 0x401, 0x10000, 0x7fff, 0x0, 0x2, 0x3, 0x1fb, 0xffffffff, 0x613b, 0x7fff, 0x9, 0x1, 0x2, 0x1, 0x40, 0x8, 0xfff, 0x7, 0x3, 0x1, 0x6, 0x948, 0x2c, 0xfffffff7, 0x7, 0x8, 0x5, 0xffff, 0x80, 0xad1b, 0x6, 0x2, 0xf166, 0x8, 0xefd6, 0x6, 0x9, 0x5, 0x5, 0x2, 0x7f, 0x4, 0x6, 0xd, 0x4, 0x100, 0x7, 0x20000009, 0x5, 0xfffffff7, 0x8, 0x8, 0xf1, 0x7, 0x5, 0x40, 0x2, 0x6, 0xfffffff0, 0xc4, 0x1, 0x8, 0x6, 0x38, 0x7fffffff, 0x3, 0x7, 0x5, 0x9, 0xff, 0x0, 0x2]}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x118, 0x29, 0x0, 0x0) 47.98459318s ago: executing program 39 (id=2491): r0 = syz_usb_connect(0x5, 0x36, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x6c, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x4}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000800)=@ethtool_per_queue_op={0x4b, 0xf, [0x6, 0x5, 0x8001, 0x8001, 0x119e9c16, 0x5834a348, 0x3, 0x9f0d, 0x5, 0x9, 0x401, 0xffffffff, 0x10000, 0x3, 0x80, 0xb5c, 0x4, 0xae, 0xe, 0x5c6a, 0x1525, 0x3, 0x5, 0x8080, 0x2, 0x1, 0x10001, 0x9, 0xffffffff, 0x0, 0x400, 0x2, 0x6, 0x5, 0x5c9, 0xbcd, 0x13, 0x7, 0x22f0edfa, 0x1, 0x4, 0xde, 0x147, 0x0, 0xe, 0xe, 0x5, 0x1, 0xc, 0x8000, 0xffffffff, 0x8, 0x2, 0xff, 0xfffff331, 0x6, 0x401, 0x10000, 0x7fff, 0x0, 0x2, 0x3, 0x1fb, 0xffffffff, 0x613b, 0x7fff, 0x9, 0x1, 0x2, 0x1, 0x40, 0x8, 0xfff, 0x7, 0x3, 0x1, 0x6, 0x948, 0x2c, 0xfffffff7, 0x7, 0x8, 0x5, 0xffff, 0x80, 0xad1b, 0x6, 0x2, 0xf166, 0x8, 0xefd6, 0x6, 0x9, 0x5, 0x5, 0x2, 0x7f, 0x4, 0x6, 0xd, 0x4, 0x100, 0x7, 0x20000009, 0x5, 0xfffffff7, 0x8, 0x8, 0xf1, 0x7, 0x5, 0x40, 0x2, 0x6, 0xfffffff0, 0xc4, 0x1, 0x8, 0x6, 0x38, 0x7fffffff, 0x3, 0x7, 0x5, 0x9, 0xff, 0x0, 0x2]}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x118, 0x29, 0x0, 0x0) 19.838055981s ago: executing program 2 (id=2577): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001380)={0x84, &(0x7f0000000f40)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x99, &(0x7f0000000340)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000380)={0x20, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16.240262989s ago: executing program 2 (id=2583): prlimit64(0x0, 0x4, 0x0, 0x0) setresuid(0xee01, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff000, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x5) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x9c, 0x10, 0x403, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88adfda5, 0x2000}, [@IFLA_LINKINFO={0x7c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x6c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0xc00}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xcc9, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0xfe65}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8001, 0x5}}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}]}, 0x9c}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x120}}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) syz_usb_connect(0x0, 0x24, 0x0, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000200)={0x1, 0x6, 0x3, &(0x7f00000000c0)={0x11, "cc9efc7ddb01702fa900"}}) openat$nvram(0xffffff9c, &(0x7f0000000000), 0xc0400, 0x0) 11.678363408s ago: executing program 2 (id=2589): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x100) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 10.293804572s ago: executing program 1 (id=2594): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0x8, "9e3ce079"}]}}, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x2ec37000) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000240)='\x00') read$hiddev(r2, &(0x7f0000000280)=""/52, 0x34) 8.419827933s ago: executing program 2 (id=2596): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x2c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0x8}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x8}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x64}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, &(0x7f0000000440)="18", 0x1, 0x200000c1, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0x3}, 0x14) 8.308541745s ago: executing program 7 (id=2597): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}, {0x0, 0x4, 0x1, 0x4, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x400000002, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x3}, {{@in6=@loopback, 0x4, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0xb7, 0x2, 0x401}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 7.988032296s ago: executing program 4 (id=2598): msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000080)=""/28) syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf4}}, 0x0) 7.48773314s ago: executing program 2 (id=2599): prlimit64(0x0, 0x4, 0x0, 0x0) setresuid(0xee01, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff000, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x5) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x120}}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) syz_usb_connect(0x0, 0x24, 0x0, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000200)={0x1, 0x6, 0x3, &(0x7f00000000c0)={0x11, "cc9efc7ddb01702fa900"}}) openat$nvram(0xffffff9c, &(0x7f0000000000), 0xc0400, 0x0) 6.302196204s ago: executing program 7 (id=2601): bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000400), 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x12, 0x10}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x0, 0x1}, 0x7fffffff, 0x80, &(0x7f0000000ec0)={0x4b5a9da54893e123, 0x3, 0x11, 0xffff}, 0x8, 0x2, 0x4, 0x0, 0x0, 0x5, 0x0}) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) 6.008750946s ago: executing program 1 (id=2602): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000140)={0x17, 0x0, &(0x7f0000000080)}) 5.483950114s ago: executing program 7 (id=2603): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount$9p_virtio(0x0, &(0x7f0000002780)='./file0\x00', 0x0, 0x4024, &(0x7f0000002900)=ANY=[@ANYBLOB='trans=virtio,dfltu', @ANYBLOB]) 5.401007731s ago: executing program 4 (id=2604): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(0xffffffffffffffff, 0xc0285840, 0x0) r0 = syz_open_dev$evdev(0x0, 0xfffffffffffff8cc, 0x20002) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r1 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000300)={0x2c, &(0x7f0000000140)={0x20, 0xe, 0x6, "acfa34715595"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000ec0)={0x44, &(0x7f0000000c40)={0x40, 0xe, 0x4, "696bf1bb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)={0x20, 0x85, 0x3, "bea3a3"}}) 5.203550363s ago: executing program 1 (id=2605): r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x63a7, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) 4.944997379s ago: executing program 7 (id=2606): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000000)=0xc, 0x4) 4.536588584s ago: executing program 1 (id=2607): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa05, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x4, 0x4]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.536207603s ago: executing program 7 (id=2608): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="a1ab2cbd70000d0000f80400000008008d68056455f42d76e09a51b50900000000000000c9f9"], 0x1c}}, 0x0) r2 = add_key$user(&(0x7f0000000040), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)="a3e96e5771523ba101f3d9bd08e803bf1791f7b11505d9b30a38fe43e70c48712f051c5fd05fffe63839893d55de3c7bb0e4f52d1fe488092c4b4d31308259977de53788c3a268f604b9330feb5695feb334c0a564fac79711891c593bb589e91e1fc2f284f067539fff5bf394932cbae5c176349ae01187bec4ddc03c20", 0x7e, 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2c01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x202, 0x46) copy_file_range(r4, 0x0, r4, &(0x7f0000000040)=0x400, 0x100, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, 0x0) write$tun(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="0a0000f80180c2000002527bcee565f486dd6d000000009311fffc010000000000000000000000000000ff0200000000000000000000000000014e204e"], 0xcd) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000200)={r2, 0x3d, 0xb9}, &(0x7f0000000740)=ANY=[@ANYBLOB="656e633d706b63733120686173683d63726333322d70634c6d756c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000004c87098d791d3204fb2bf169636c5a8692d143de798aee78b1f5794792089adbd2a28a6eef6c93e2977780d21721c7afb3c94ddf4b7c82b5a4e60baa9c9c5e70"], &(0x7f00000002c0)="b154f4a9591cdb3392d904ac007fe8117cbf1c4dfc057209d2e0837f0c7aab27a72bbc7f926c5004a9854226af171bc223adb10db3cff00bf1e00ccc51", &(0x7f0000000480)="c207ffac7bf32587f14a32b6c59211e1983228bfbe7964f9d38f6c05f15ba2c65503df1bfa59827b5c66a8171d635dc3ea2cf2479260e16d4c665bd04bdad48b3f146b5f702d639b9f44694987e63f4ad025c1843ebe626da51be7c26afcb54f611207c31d4ac164afe3056a35bf5727f68106e53812f86d9f8cd692bff8003559657d48e2de9335414893ffb14c4d5df6ba28ae036bd0395e218e50126793f18774c72ed9b6da483f6c61d9af7b0554749bc2206d73dbbd0e") ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r8 = socket$inet6(0xa, 0x2, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000680)=[@text32={0x20, &(0x7f0000000080)="b8050000009a00780000d000490000320f01d9660ff7e31bf7e4ec05000000b90000c0fe0fae41d90100b9800000c0c4e27d3095fbffffff09083667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x5e}], 0x1, 0x16, 0x0, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r10, 0x0, &(0x7f0000000540)='mand\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) ioctl$sock_proto_private(r8, 0x89e9, &(0x7f0000000240)="08dba2d16910f0558377958fcae9be93c16d3d02891eee2b3dd53e6f17af895ac2cd470dcad84ef182832c423044a1d516b9bba84f60ce261d9705455e9278e7c8f606b4c5f4ef0f955de5a0bf5d57b8fd1dc7a7152d97") fsmount(r10, 0x0, 0x1) sendmsg$NFT_MSG_GETFLOWTABLE(r6, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) 3.083208784s ago: executing program 1 (id=2609): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0x8}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x64}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, &(0x7f0000000440)="18", 0x1, 0x200000c1, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0x3}, 0x14) 3.082469229s ago: executing program 7 (id=2610): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001380)={0x84, &(0x7f0000000f40)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x99, &(0x7f0000000340)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000380)={0x20, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.912810665s ago: executing program 8 (id=2611): bpf$MAP_CREATE(0x0, 0x0, 0xc6) 2.398644649s ago: executing program 8 (id=2612): socket$netlink(0x10, 0x3, 0x14) madvise(&(0x7f00002ad000/0x4000)=nil, 0x4000, 0xa) 2.258724086s ago: executing program 4 (id=2613): syz_clone(0x904280, 0x0, 0x0, 0x0, 0x0, 0x0) 1.986280401s ago: executing program 2 (id=2614): msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000080)=""/28) syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf4}}, 0x0) 1.836408844s ago: executing program 1 (id=2615): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x1f00, 0x12) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x39) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c7900, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) preadv(r1, &(0x7f0000000740)=[{0x0}], 0x1, 0x80000001, 0x3f7a) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) syz_usb_connect(0x3, 0x4f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e45aa5205b109917e9360102030109023d0001000000000904ef0404ff010100090502020800d0000909050800ff030700060705a902e86f4c"], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1.76141465s ago: executing program 8 (id=2616): socket(0x2, 0xd4f32b84c37e2a85, 0x6) 1.403424636s ago: executing program 4 (id=2617): syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @empty, @val, {@ipv6}}, 0x0) 1.183210281s ago: executing program 8 (id=2618): socket(0x1, 0x806, 0x1) 902.227811ms ago: executing program 4 (id=2619): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x1}], 0x1}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x20000000, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x8, 0x2, 0x2, '\x00', 0x2}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x800000000009, 0x7, 0x1, 0x839, 0xce, 0x5, 0xfffffffffffff235, 0x2000000001, 0x4000000000008, 0x8, 0xed05, 0x5, 0xcd7, 0x5, 0x5], 0x70000, 0x222}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 636.410178ms ago: executing program 8 (id=2620): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x31, 0x4}, 0x20) 191.448502ms ago: executing program 4 (id=2621): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff15, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) 0s ago: executing program 8 (id=2622): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008001f", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): 1][ T8748] usb 9-1: config 4 interface 0 has no altsetting 0 [ 1179.010109][ T8748] usb 9-1: string descriptor 0 read error: -22 [ 1179.044920][ T8748] usb 9-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1179.052306][ T8028] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1179.065848][ T8748] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1179.130354][ T8028] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1179.179543][ T8748] usb 9-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1179.202818][ T8028] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1179.272482][ T8748] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1179.307990][ T8028] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 1179.330680][ T8748] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1179.366594][ T8748] usb 9-1: media controller created [ 1179.503064][ T8028] usb 10-1: USB disconnect, device number 27 [ 1179.580402][ T8748] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1179.842967][ T8748] zl10353_read_register: readreg error (reg=127, ret==0) [ 1180.509265][ T8748] usb 9-1: USB disconnect, device number 29 [ 1180.896894][T13613] IPv6: addrconf: prefix option has invalid lifetime [ 1182.544218][T13622] syzkaller0: entered promiscuous mode [ 1182.549884][T13622] syzkaller0: entered allmulticast mode [ 1183.870433][T13647] syzkaller0: entered promiscuous mode [ 1183.897636][T13647] syzkaller0: entered allmulticast mode [ 1185.661100][T13665] netlink: 'syz.9.1971': attribute type 4 has an invalid length. [ 1186.799965][T13676] syzkaller0: entered promiscuous mode [ 1186.806471][T13676] syzkaller0: entered allmulticast mode [ 1186.982762][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1186.989394][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1187.212050][ T8748] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 1187.441972][ T8748] usb 3-1: config 0 has no interfaces? [ 1187.447708][ T8748] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1187.481857][ T8748] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.525160][ T8748] usb 3-1: config 0 descriptor?? [ 1187.756990][T13692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1187.868655][T13692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1187.938015][ T8028] usb 3-1: USB disconnect, device number 23 [ 1188.080746][T13700] syzkaller0: entered promiscuous mode [ 1188.183110][T13700] syzkaller0: entered allmulticast mode [ 1189.002078][ T8748] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1189.213597][ T8748] usb 3-1: Using ep0 maxpacket: 16 [ 1189.296435][ T8748] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1189.353391][ T8748] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1189.400198][ T8748] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1189.443663][ T8748] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1189.491342][ T8748] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1189.515929][ T8748] usb 3-1: config 0 descriptor?? [ 1189.648672][T13716] netlink: 'syz.1.1987': attribute type 4 has an invalid length. [ 1189.774083][T13692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1189.823610][T13692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1190.114738][ T8748] usbhid 3-1:0.0: can't add hid device: -71 [ 1190.158354][ T8748] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1190.215037][ T8748] usb 3-1: USB disconnect, device number 24 [ 1190.718691][T13718] vxcan1 speed is unknown, defaulting to 1000 [ 1192.385148][T13736] syzkaller0: entered promiscuous mode [ 1192.392163][T13736] syzkaller0: entered allmulticast mode [ 1193.138348][T13734] vxcan1 speed is unknown, defaulting to 1000 [ 1194.034974][T13754] syzkaller0: entered promiscuous mode [ 1194.040932][T13754] syzkaller0: entered allmulticast mode [ 1195.260840][T13757] netlink: 'syz.1.2000': attribute type 4 has an invalid length. [ 1196.755598][T13778] sch_tbf: burst 256 is lower than device syzkaller0 mtu (1500) ! [ 1196.805845][T13778] syzkaller0: entered promiscuous mode [ 1196.850373][T13778] syzkaller0: entered allmulticast mode [ 1198.564542][T13794] syzkaller0: entered promiscuous mode [ 1198.597801][T13794] syzkaller0: entered allmulticast mode [ 1199.852743][T13807] netlink: 'syz.9.2014': attribute type 4 has an invalid length. [ 1202.119115][T13826] syzkaller0: entered promiscuous mode [ 1202.212054][T13826] syzkaller0: entered allmulticast mode [ 1202.475962][ T5830] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1202.681974][ T5830] usb 9-1: Using ep0 maxpacket: 8 [ 1202.720854][ T5830] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1202.765185][ T5830] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1202.780040][T13842] netlink: 'syz.2.2028': attribute type 4 has an invalid length. [ 1202.809571][ T5830] usb 9-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 1202.844699][T13844] fuse: Bad value for 'fd' [ 1202.851975][ T5830] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1202.891560][ T5830] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1203.184382][ T8167] usb 9-1: USB disconnect, device number 30 [ 1205.044676][T13867] netlink: 'syz.1.2042': attribute type 4 has an invalid length. [ 1205.093076][T13870] fuse: Bad value for 'fd' [ 1205.272565][ T5830] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1205.482070][ T5830] usb 3-1: Using ep0 maxpacket: 16 [ 1205.533368][ T5830] usb 3-1: config 128 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1205.560846][ T5830] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1205.629152][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.746345][ T5830] usbhid 3-1:128.0: couldn't find an input interrupt endpoint [ 1205.902247][ T8167] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1206.112001][ T8167] usb 10-1: Using ep0 maxpacket: 8 [ 1206.172310][ T8167] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1206.206853][ T8167] usb 10-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1206.228375][ T8167] usb 10-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 1206.272774][ T8167] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1206.291018][ T8167] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1206.582607][ T8167] usb 10-1: USB disconnect, device number 28 [ 1207.580385][T13901] fuse: Bad value for 'fd' [ 1207.625247][T13897] netlink: 'syz.1.2053': attribute type 4 has an invalid length. [ 1208.345812][ T8748] usb 3-1: USB disconnect, device number 25 [ 1209.492322][ T8167] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1209.661944][ T8167] usb 10-1: device descriptor read/64, error -71 [ 1209.961901][ T8167] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1210.133597][ T8167] usb 10-1: device descriptor read/64, error -71 [ 1210.245123][ T8167] usb usb10-port1: attempt power cycle [ 1210.299852][T13935] netlink: 'syz.2.2069': attribute type 4 has an invalid length. [ 1210.642189][ T8167] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1210.694575][ T8167] usb 10-1: device descriptor read/8, error -71 [ 1210.831990][ T8028] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1210.932232][ T8167] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1211.015967][ T8167] usb 10-1: device descriptor read/8, error -71 [ 1211.022843][ T8028] usb 8-1: Using ep0 maxpacket: 16 [ 1211.049935][ T8028] usb 8-1: config 128 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1211.089523][ T8028] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1211.109338][ T8028] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.152159][ T8167] usb usb10-port1: unable to enumerate USB device [ 1211.169675][ T8028] usbhid 8-1:128.0: couldn't find an input interrupt endpoint [ 1211.851944][ T8748] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 1212.024425][ T8748] usb 3-1: config 0 has no interfaces? [ 1212.051519][ T8748] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1212.061002][ T8748] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.122634][ T8748] usb 3-1: config 0 descriptor?? [ 1212.381280][T13954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1212.428684][T13954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1212.478514][ T8028] usb 3-1: USB disconnect, device number 26 [ 1213.021967][ T8028] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1213.203718][T13973] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1213.253522][ T8028] usb 3-1: Using ep0 maxpacket: 16 [ 1213.282236][ T8028] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1213.339670][ T8028] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1213.384990][ T8028] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1213.460085][ T8028] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1213.485154][ T8028] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.548897][ T8028] usb 3-1: config 0 descriptor?? [ 1213.691904][ T8748] usb 8-1: USB disconnect, device number 31 [ 1214.028792][ T8028] hid_parser_main: 16 callbacks suppressed [ 1214.028895][ T8028] hid-picolcd 0003:04D8:F002.0006: unknown main item tag 0x0 [ 1214.109384][ T8028] hid-picolcd 0003:04D8:F002.0006: unknown main item tag 0x0 [ 1214.138756][ T8028] hid-picolcd 0003:04D8:F002.0006: unknown main item tag 0x0 [ 1214.150430][T13980] syzkaller0: entered promiscuous mode [ 1214.160605][ T8028] hid-picolcd 0003:04D8:F002.0006: unknown main item tag 0x0 [ 1214.198691][T13980] syzkaller0: entered allmulticast mode [ 1214.219969][ T8028] hid-picolcd 0003:04D8:F002.0006: unknown main item tag 0x0 [ 1214.276989][ T8028] hid-picolcd 0003:04D8:F002.0006: unknown main item tag 0x0 [ 1214.316909][ T8028] hid-picolcd 0003:04D8:F002.0006: unknown main item tag 0x0 [ 1214.340897][ T8028] hid-picolcd 0003:04D8:F002.0006: unknown main item tag 0x0 [ 1214.377879][ T8028] hid-picolcd 0003:04D8:F002.0006: unknown main item tag 0x0 [ 1214.428839][ T8028] hid-picolcd 0003:04D8:F002.0006: unknown main item tag 0x0 [ 1214.583332][ T8028] hid-picolcd 0003:04D8:F002.0006: No report with id 0xf3 found [ 1214.591211][ T8028] hid-picolcd 0003:04D8:F002.0006: No report with id 0xf4 found [ 1214.698296][ T8028] usb 3-1: USB disconnect, device number 27 [ 1215.502947][ T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1215.702055][ T10] usb 3-1: device descriptor read/64, error -71 [ 1215.991981][ T10] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1216.164059][ T10] usb 3-1: device descriptor read/64, error -71 [ 1216.202582][ T8028] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1216.296014][ T10] usb usb3-port1: attempt power cycle [ 1216.382402][ T8028] usb 9-1: Using ep0 maxpacket: 16 [ 1216.420429][ T8028] usb 9-1: config 128 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1216.532454][ T8028] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1216.552860][ T8028] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.635830][ T8028] usbhid 9-1:128.0: couldn't find an input interrupt endpoint [ 1216.678582][ T10] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1216.724217][ T10] usb 3-1: device descriptor read/8, error -71 [ 1216.972153][ T10] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1217.046925][ T10] usb 3-1: device descriptor read/8, error -71 [ 1217.074844][T14013] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1217.173589][ T10] usb usb3-port1: unable to enumerate USB device [ 1218.389528][T14022] syzkaller0: entered promiscuous mode [ 1218.428825][T14022] syzkaller0: entered allmulticast mode [ 1219.131861][ T10] usb 9-1: USB disconnect, device number 31 [ 1220.532920][T14048] fuse: Unknown parameter '0x0000000000000003' [ 1221.282478][ T10] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1221.462071][ T10] usb 8-1: device descriptor read/64, error -71 [ 1221.722358][ T10] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1221.843613][T14055] syzkaller0: entered promiscuous mode [ 1221.871100][T14055] syzkaller0: entered allmulticast mode [ 1221.902154][ T10] usb 8-1: device descriptor read/64, error -71 [ 1222.035294][ T10] usb usb8-port1: attempt power cycle [ 1222.432678][ T10] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1222.473765][ T8028] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1222.525315][ T10] usb 8-1: device descriptor read/8, error -71 [ 1222.661884][ T8028] usb 2-1: Using ep0 maxpacket: 16 [ 1222.686825][ T8028] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1222.718307][ T8028] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1222.759855][ T8028] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.805940][ T10] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1222.852861][ T8028] usbhid 2-1:128.0: couldn't find an input interrupt endpoint [ 1222.883860][ T10] usb 8-1: device descriptor read/8, error -71 [ 1223.029041][ T10] usb usb8-port1: unable to enumerate USB device [ 1223.089656][T14074] syzkaller0: entered promiscuous mode [ 1223.096420][T14074] syzkaller0: entered allmulticast mode [ 1223.256344][T14080] netlink: 'syz.2.2122': attribute type 10 has an invalid length. [ 1224.610296][T14101] fuse: Unknown parameter 'fd0x0000000000000003' [ 1224.734120][ T10] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1224.934487][ T10] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1224.944684][ T10] usb 9-1: config 0 has no interface number 0 [ 1224.977161][ T10] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1224.988508][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1225.023034][ T10] usb 9-1: Product: syz [ 1225.038933][ T10] usb 9-1: Manufacturer: syz [ 1225.059109][ T10] usb 9-1: SerialNumber: syz [ 1225.115219][ T10] usb 9-1: config 0 descriptor?? [ 1225.225219][ T8028] usb 2-1: USB disconnect, device number 38 [ 1225.404911][ T10] usb 9-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1225.451446][ T10] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1225.512838][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1225.574582][ T10] usb 9-1: media controller created [ 1225.856016][T14110] syzkaller0: entered promiscuous mode [ 1225.862177][T14110] syzkaller0: entered allmulticast mode [ 1226.004100][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1226.462363][ T10] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1227.166525][ T10] usb 9-1: USB disconnect, device number 32 [ 1227.259711][T14129] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2135'. [ 1228.422419][ T5830] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1228.625371][ T5830] usb 2-1: device descriptor read/64, error -71 [ 1228.882794][ T5830] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1228.982942][ T10] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 1229.092358][ T5830] usb 2-1: device descriptor read/64, error -71 [ 1229.192665][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 1229.222860][ T5830] usb usb2-port1: attempt power cycle [ 1229.253434][ T10] usb 8-1: config 0 has an invalid interface number: 239 but max is 0 [ 1229.292219][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1229.332163][ T10] usb 8-1: config 0 has no interface number 0 [ 1229.367143][ T10] usb 8-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 1229.406241][ T10] usb 8-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1229.421918][ T8028] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1229.449438][ T10] usb 8-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 1229.501986][ T10] usb 8-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 1229.542094][ T10] usb 8-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 1229.575383][ T10] usb 8-1: config 0 interface 239 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1229.611989][ T5830] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1229.632118][ T8028] usb 10-1: Using ep0 maxpacket: 16 [ 1229.660629][ T8028] usb 10-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1229.682123][ T10] usb 8-1: config 0 interface 239 has no altsetting 0 [ 1229.712017][ T8028] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1229.717550][ T5830] usb 2-1: device descriptor read/8, error -71 [ 1229.732409][ T10] usb 8-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 1229.761942][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.770238][ T10] usb 8-1: Product: syz [ 1229.775386][ T8028] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.802668][ T10] usb 8-1: Manufacturer: syz [ 1229.807468][ T10] usb 8-1: SerialNumber: syz [ 1229.864275][ T10] usb 8-1: config 0 descriptor?? [ 1229.910742][T14147] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1229.927008][ T8028] usbhid 10-1:128.0: couldn't find an input interrupt endpoint [ 1229.951036][T14147] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1229.993392][ T5830] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1230.064575][ T5830] usb 2-1: device descriptor read/8, error -71 [ 1230.188762][T14158] fuse: Unknown parameter 'fd0x0000000000000003' [ 1230.198531][ T10] usb 8-1: USB disconnect, device number 36 [ 1230.217893][ T5830] usb usb2-port1: unable to enumerate USB device [ 1232.218842][ T8028] usb 10-1: USB disconnect, device number 33 [ 1232.350847][T14168] syzkaller0: entered promiscuous mode [ 1232.362474][T14168] syzkaller0: entered allmulticast mode [ 1233.505713][T14178] syzkaller0: entered promiscuous mode [ 1233.553232][T14178] syzkaller0: entered allmulticast mode [ 1233.997178][T14195] fuse: Unknown parameter 'fd0x0000000000000003' [ 1234.493193][ T10] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1234.567049][T14203] syzkaller0: entered allmulticast mode [ 1234.722084][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 1234.737324][ T10] usb 10-1: config 0 has an invalid interface number: 239 but max is 0 [ 1234.782450][ T10] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1234.806723][ T10] usb 10-1: config 0 has no interface number 0 [ 1234.831995][ T10] usb 10-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 1234.874309][ T10] usb 10-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1234.912537][ T8028] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1234.930848][ T10] usb 10-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 1234.962450][ T10] usb 10-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 1235.027852][ T10] usb 10-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 1235.068898][ T10] usb 10-1: config 0 interface 239 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1235.090295][ T10] usb 10-1: config 0 interface 239 has no altsetting 0 [ 1235.103414][ T8028] usb 9-1: Using ep0 maxpacket: 16 [ 1235.153670][ T8028] usb 9-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1235.168849][ T10] usb 10-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 1235.202043][ T8028] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1235.221978][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1235.230380][ T10] usb 10-1: Product: syz [ 1235.237627][ T8028] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.282335][ T10] usb 10-1: Manufacturer: syz [ 1235.287239][ T10] usb 10-1: SerialNumber: syz [ 1235.362643][ T10] usb 10-1: config 0 descriptor?? [ 1235.373410][T14199] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1235.375467][ T8028] usbhid 9-1:128.0: couldn't find an input interrupt endpoint [ 1235.404335][T14199] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1235.705258][ T8028] usb 10-1: USB disconnect, device number 34 [ 1237.021132][T14225] syzkaller0: entered promiscuous mode [ 1237.027226][T14225] syzkaller0: entered allmulticast mode [ 1237.924721][ T8028] usb 9-1: USB disconnect, device number 33 [ 1238.616009][T14240] syzkaller0: entered promiscuous mode [ 1238.622212][T14240] syzkaller0: entered allmulticast mode [ 1240.243943][ T10] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1240.420439][T14276] syzkaller0: entered promiscuous mode [ 1240.436109][T14276] syzkaller0: entered allmulticast mode [ 1240.442573][ T10] usb 10-1: Using ep0 maxpacket: 8 [ 1240.467038][ T10] usb 10-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 1240.487374][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.515156][ T10] usb 10-1: config 0 descriptor?? [ 1240.567590][ T10] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 1240.772162][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1240.796708][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1240.845311][ T10] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 1240.886490][ T10] usb 10-1: media controller created [ 1240.990323][T14270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1241.049702][T14270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1241.064816][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1241.101321][T14270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1241.153813][T14270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1241.223044][T14270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1241.277494][T14270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1241.608649][ T10] DVB: Unable to find symbol lgdt330x_attach() [ 1241.651596][ T10] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 1241.708508][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1241.722441][ T10] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 1241.808198][ T10] usb 10-1: USB disconnect, device number 35 [ 1242.088335][T14293] netlink: 'syz.2.2189': attribute type 4 has an invalid length. [ 1242.115033][T14296] syzkaller0: entered promiscuous mode [ 1242.126951][T14296] syzkaller0: entered allmulticast mode [ 1242.385586][ T10] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 1243.068002][T14307] binder: 14306:14307 ioctl 4018620d 0 returned -22 [ 1243.151422][T14307] binder: 14306:14307 ioctl c0306201 200000001440 returned -11 [ 1244.670982][T14329] netlink: 'syz.2.2202': attribute type 4 has an invalid length. [ 1244.752054][ T8028] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1244.830122][T14318] syzkaller0: entered promiscuous mode [ 1244.880721][T14318] syzkaller0: entered allmulticast mode [ 1244.952124][ T8028] usb 2-1: Using ep0 maxpacket: 8 [ 1244.976534][ T8028] usb 2-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 1244.989965][ T8028] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.005758][ T8028] usb 2-1: config 0 descriptor?? [ 1245.089737][ T8028] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 1245.280149][ T8028] dvb-usb: bulk message failed: -22 (1/0) [ 1245.352495][ T8028] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1245.476567][ T8028] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 1245.495026][T14327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1245.514047][ T8028] usb 2-1: media controller created [ 1245.550631][T14327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1245.696091][T14327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1245.731514][T14327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1245.790969][T14338] syzkaller0: entered promiscuous mode [ 1245.806716][ T8028] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1245.873503][T14338] syzkaller0: entered allmulticast mode [ 1246.510306][ T8028] DVB: Unable to find symbol lgdt330x_attach() [ 1246.555138][ T8028] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 1246.596131][ T8028] dvb-usb: bulk message failed: -22 (1/0) [ 1247.110723][ T8028] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 1247.182438][ T8028] usb 2-1: USB disconnect, device number 43 [ 1247.456620][ T8028] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 1247.651315][T14356] binder: 14355:14356 ioctl 4018620d 0 returned -22 [ 1247.744937][T14356] binder: 14355:14356 ioctl c0306201 200000001440 returned -11 [ 1248.426648][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1248.433847][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1250.604159][T14376] netlink: 'syz.1.2215': attribute type 4 has an invalid length. [ 1251.228576][T14378] syzkaller0: entered promiscuous mode [ 1251.282490][T14378] syzkaller0: entered allmulticast mode [ 1251.762129][ T10] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1251.931933][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 1252.030724][ T10] usb 2-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 1252.060627][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.124600][ T10] usb 2-1: config 0 descriptor?? [ 1252.190891][ T10] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 1252.441166][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1252.474175][T14383] syzkaller0: entered promiscuous mode [ 1252.475975][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1252.543418][ T10] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 1252.562774][T14383] syzkaller0: entered allmulticast mode [ 1252.616575][ T10] usb 2-1: media controller created [ 1252.625574][T14381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1252.676571][T14381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1252.732357][T14381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1252.756293][T14381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1252.986403][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1253.683687][ T10] DVB: Unable to find symbol lgdt330x_attach() [ 1253.690157][ T10] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 1253.944418][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1253.950327][ T10] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 1254.008804][ T10] usb 2-1: USB disconnect, device number 44 [ 1254.249687][T14392] binder: 14391:14392 ioctl 4018620d 0 returned -22 [ 1254.334327][T14392] binder: 14391:14392 ioctl c0306201 200000001440 returned -11 [ 1254.579220][ T10] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 1255.283949][T14404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2225'. [ 1255.823152][T14408] netlink: 'syz.8.2227': attribute type 4 has an invalid length. [ 1256.149128][T14410] syzkaller0: entered promiscuous mode [ 1256.155031][T14410] syzkaller0: entered allmulticast mode [ 1257.006744][T14423] syzkaller0: entered promiscuous mode [ 1257.013493][T14423] syzkaller0: entered allmulticast mode [ 1258.036848][T14436] binder: BINDER_SET_CONTEXT_MGR already set [ 1258.072726][T14436] binder: 14435:14436 ioctl 4018620d 200000000040 returned -16 [ 1258.128199][T14436] binder: 14435:14436 ioctl c0306201 200000001440 returned -11 [ 1259.799401][T14451] netlink: 'syz.7.2241': attribute type 4 has an invalid length. [ 1259.848000][T14447] syzkaller0: entered promiscuous mode [ 1259.876154][T14447] syzkaller0: entered allmulticast mode [ 1260.116610][T14452] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2240'. [ 1261.480950][T14463] syzkaller0: entered promiscuous mode [ 1261.505626][T14463] syzkaller0: entered allmulticast mode [ 1261.956297][T14480] binder: BINDER_SET_CONTEXT_MGR already set [ 1261.999011][T14480] binder: 14479:14480 ioctl 4018620d 200000000040 returned -16 [ 1262.054199][T14480] binder: 14479:14480 ioctl c0306201 200000001440 returned -11 [ 1262.786137][T14466] syzkaller0: entered promiscuous mode [ 1262.829061][T14466] syzkaller0: entered allmulticast mode [ 1264.710965][T14510] netlink: 'syz.1.2253': attribute type 4 has an invalid length. [ 1265.043030][T14516] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2256'. [ 1265.333658][T14523] binder: BINDER_SET_CONTEXT_MGR already set [ 1265.364476][T14523] binder: 14522:14523 ioctl 4018620d 200000000040 returned -16 [ 1265.465166][T14523] binder: 14522:14523 ioctl c0306201 200000001440 returned -11 [ 1265.507942][T14525] syzkaller0: entered promiscuous mode [ 1265.557192][T14525] syzkaller0: entered allmulticast mode [ 1266.390063][T14533] syzkaller0: entered promiscuous mode [ 1266.435823][T14533] syzkaller0: entered allmulticast mode [ 1267.613298][T14547] syzkaller0: entered promiscuous mode [ 1267.619335][T14547] syzkaller0: entered allmulticast mode [ 1268.654227][T14567] vxcan1 speed is unknown, defaulting to 1000 [ 1268.760420][T14571] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2272'. [ 1269.465894][T14582] binder: 14581:14582 ioctl c0306201 0 returned -14 [ 1269.554148][T14582] binder: 14581:14582 ioctl c0306201 200000001440 returned -11 [ 1270.365252][T14589] syzkaller0: entered promiscuous mode [ 1270.404014][T14589] syzkaller0: entered allmulticast mode [ 1271.835510][T14607] syzkaller0: entered promiscuous mode [ 1271.909827][T14607] syzkaller0: entered allmulticast mode [ 1272.162115][ T8028] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1272.356448][ T8028] usb 10-1: Using ep0 maxpacket: 16 [ 1272.417793][ T8028] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1272.498649][ T8028] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1272.571934][ T8028] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1272.666270][ T8028] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1272.702002][ T8028] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1272.710312][ T8028] usb 10-1: Manufacturer: syz [ 1272.743798][ T8028] usb 10-1: config 0 descriptor?? [ 1272.779832][T14611] syzkaller0: entered promiscuous mode [ 1272.812785][T14611] syzkaller0: entered allmulticast mode [ 1273.093010][T14609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1273.133337][T14609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1273.172588][T14614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2285'. [ 1274.656941][T14629] syzkaller0: entered promiscuous mode [ 1274.687200][T14629] syzkaller0: entered allmulticast mode [ 1275.028138][ T8028] usb 10-1: USB disconnect, device number 36 [ 1275.102487][ T5830] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1275.317603][ T5830] usb 3-1: device descriptor read/64, error -71 [ 1275.458165][T14638] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 1275.511033][T14638] syzkaller0: entered promiscuous mode [ 1275.538461][T14638] syzkaller0: entered allmulticast mode [ 1275.586696][ T5830] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1275.613351][T14642] syzkaller0: entered promiscuous mode [ 1275.621006][T14642] syzkaller0: entered allmulticast mode [ 1275.667431][ T8028] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 1275.764652][ T5830] usb 3-1: device descriptor read/64, error -71 [ 1275.844909][ T8028] usb 9-1: Using ep0 maxpacket: 8 [ 1275.863662][ T8028] usb 9-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 1275.881939][ T8028] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1275.883423][ T5830] usb usb3-port1: attempt power cycle [ 1275.905751][ T8028] usb 9-1: config 0 descriptor?? [ 1275.999860][ T8028] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 1276.190050][ T8028] dvb-usb: bulk message failed: -22 (1/0) [ 1276.225898][ T8028] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1276.257952][ T8028] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 1276.295244][ T5830] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1276.304643][ T8028] usb 9-1: media controller created [ 1276.364510][ T5830] usb 3-1: device descriptor read/8, error -71 [ 1276.403708][T14644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1276.435006][T14644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1276.508725][ T8028] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1276.542417][T14644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1276.583824][T14644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1276.632109][ T5830] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1276.647901][T14644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1276.693149][T14644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1276.711063][ T5830] usb 3-1: device descriptor read/8, error -71 [ 1276.836204][ T5830] usb usb3-port1: unable to enumerate USB device [ 1276.992651][ T8028] DVB: Unable to find symbol lgdt330x_attach() [ 1277.051850][ T8028] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 1277.092181][ T8028] dvb-usb: bulk message failed: -22 (1/0) [ 1277.119368][ T8028] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 1277.158927][ T8028] usb 9-1: USB disconnect, device number 34 [ 1277.604365][ T8028] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 1278.281196][T14672] syzkaller0: entered promiscuous mode [ 1278.287399][T14672] syzkaller0: entered allmulticast mode [ 1280.253263][T14687] syzkaller0: entered promiscuous mode [ 1280.258918][T14687] syzkaller0: entered allmulticast mode [ 1281.242584][T14713] syz.9.2317 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1282.939348][T14730] syzkaller0: entered promiscuous mode [ 1282.960145][T14730] syzkaller0: entered allmulticast mode [ 1283.973084][T14740] syzkaller0: entered promiscuous mode [ 1283.978742][T14740] syzkaller0: entered allmulticast mode [ 1284.595241][T14749] binder: 14748:14749 ioctl c0306201 200000001440 returned -11 [ 1285.929080][T14767] syzkaller0: entered promiscuous mode [ 1285.958096][T14767] syzkaller0: entered allmulticast mode [ 1286.742955][T14786] binder: 14784:14786 ioctl c0306201 200000001440 returned -11 [ 1286.978777][T14789] ýA: renamed from team_slave_1 (while UP) [ 1287.558061][T14793] syzkaller0: entered promiscuous mode [ 1287.612038][T14793] syzkaller0: entered allmulticast mode [ 1289.665302][T14816] syzkaller0: entered promiscuous mode [ 1289.712177][T14816] syzkaller0: entered allmulticast mode [ 1289.816680][T14826] binder: 14824:14826 ioctl c0306201 200000001440 returned -11 [ 1290.142631][ T5830] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1290.387280][ T5830] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1290.442594][ T5830] usb 3-1: config 1 has an invalid descriptor of length 227, skipping remainder of the config [ 1290.463470][ T5830] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1290.497746][ T5830] usb 3-1: config 1 has no interface number 0 [ 1290.525387][ T5830] usb 3-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 1290.592965][ T5830] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1290.649765][ T5830] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1290.684781][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.728361][ T5830] usb 3-1: Product: syz [ 1290.756107][ T5830] usb 3-1: Manufacturer: syz [ 1290.795690][ T5830] usb 3-1: SerialNumber: syz [ 1290.851301][ T5830] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1290.912038][ T5830] cdc_ncm 3-1:1.1: bind() failure [ 1291.004079][T14836] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1291.073320][T14836] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 1291.102231][ T8028] usb 3-1: USB disconnect, device number 36 [ 1291.176899][T14836] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 1291.217935][T14836] overlayfs: failed to get uuid (/file0, err=-95); falling back to uuid=null. [ 1291.372263][ T5830] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1291.527861][T14840] syzkaller0: entered promiscuous mode [ 1291.542040][T14840] syzkaller0: entered allmulticast mode [ 1291.592124][ T5830] usb 2-1: Using ep0 maxpacket: 16 [ 1291.652002][ T5830] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1291.688325][ T5830] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1291.743361][ T5830] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1291.802325][ T5830] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1291.836241][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1291.887577][ T5830] usb 2-1: config 0 descriptor?? [ 1292.032000][ T8028] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 1292.232572][ T8028] usb 9-1: Using ep0 maxpacket: 16 [ 1292.280983][ T8028] usb 9-1: config index 0 descriptor too short (expected 36, got 26) [ 1292.311516][ T8028] usb 9-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 1292.351886][ T8028] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1292.408981][ T8028] usb 9-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1292.429225][ T5830] hid_parser_main: 28 callbacks suppressed [ 1292.429318][ T5830] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 1292.439763][ T8028] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.503712][ T5830] microsoft 0003:045E:07DA.0007: ignoring exceeding usage max [ 1292.534971][ T8028] usb 9-1: config 0 descriptor?? [ 1292.615562][ T8028] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1292.628930][ T5830] microsoft 0003:045E:07DA.0007: report_id 1388010132 is invalid [ 1292.679617][ T5830] microsoft 0003:045E:07DA.0007: item 0 4 1 8 parsing failed [ 1292.845681][ T5830] microsoft 0003:045E:07DA.0007: parse failed [ 1292.882942][ T5830] microsoft 0003:045E:07DA.0007: probe with driver microsoft failed with error -22 [ 1292.945809][ T5830] usb 2-1: USB disconnect, device number 45 [ 1293.048019][T14843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1293.083556][T14843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1293.193000][T14843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1293.267180][T14843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1293.303088][ T8028] usb 9-1: USB disconnect, device number 35 [ 1293.692674][T14854] binder: 14853:14854 ioctl c0306201 200000001440 returned -11 [ 1293.914604][T14858] syzkaller0: entered promiscuous mode [ 1293.973803][T14858] syzkaller0: entered allmulticast mode [ 1294.978363][T14874] syzkaller0: entered promiscuous mode [ 1295.010101][T14874] syzkaller0: entered allmulticast mode [ 1295.026955][ T8028] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1295.253461][ T8028] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1295.291308][ T8028] usb 2-1: config 4 has an invalid interface number: 25 but max is 0 [ 1295.329385][ T8028] usb 2-1: config 4 has no interface number 0 [ 1295.371951][ T8028] usb 2-1: config 4 interface 25 altsetting 5 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1295.433892][ T8028] usb 2-1: config 4 interface 25 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 64 [ 1295.478165][ T8028] usb 2-1: config 4 interface 25 has no altsetting 0 [ 1295.525606][ T8028] usb 2-1: New USB device found, idVendor=19d2, idProduct=1102, bcdDevice=f5.5b [ 1295.552134][ T8028] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.563038][ T8028] usb 2-1: Product: syz [ 1295.567379][ T8028] usb 2-1: Manufacturer: syz [ 1295.612089][ T8028] usb 2-1: SerialNumber: syz [ 1295.692798][T14868] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1296.008834][ T8028] usbhid 2-1:4.25: couldn't find an input interrupt endpoint [ 1296.074578][ T8028] usb 2-1: USB disconnect, device number 46 [ 1296.122568][T14887] binder: 14886:14887 ioctl c0306201 200000001440 returned -11 [ 1296.691930][ T5830] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1296.914102][ T5830] usb 3-1: Using ep0 maxpacket: 16 [ 1296.964376][ T5830] usb 3-1: config index 0 descriptor too short (expected 36, got 26) [ 1296.998818][ T5830] usb 3-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 1297.021361][ T5830] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1297.053156][ T5830] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1297.070049][T14898] syzkaller0: entered promiscuous mode [ 1297.084515][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1297.102074][T14898] syzkaller0: entered allmulticast mode [ 1297.183457][ T5830] usb 3-1: config 0 descriptor?? [ 1297.267287][ T5830] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1297.686449][T14889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1297.703969][T14889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1297.734538][T14889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1297.773647][T14889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1297.851978][ T8028] usb 3-1: USB disconnect, device number 37 [ 1298.203827][T14909] syzkaller0: entered promiscuous mode [ 1298.209559][T14909] syzkaller0: entered allmulticast mode [ 1298.415839][T14914] input: syz1 as /devices/virtual/input/input23 [ 1299.612690][ T5830] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1299.798524][ T5830] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 1299.818077][ T5830] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1299.884384][ T5830] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1299.912252][ T8028] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 1299.942247][ T5830] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1300.012095][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1300.082164][ T5830] usb 3-1: Product: syz [ 1300.096146][ T5830] usb 3-1: Manufacturer: syz [ 1300.113553][ T5830] usb 3-1: SerialNumber: syz [ 1300.122210][ T8028] usb 8-1: Using ep0 maxpacket: 32 [ 1300.135517][ T5830] usb 3-1: config 0 descriptor?? [ 1300.152284][ T8028] usb 8-1: config 0 has an invalid interface number: 188 but max is 0 [ 1300.179682][ T5830] hub 3-1:0.0: bad descriptor, ignoring hub [ 1300.182898][ T8028] usb 8-1: config 0 has no interface number 0 [ 1300.198183][ T8028] usb 8-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1300.222609][ T5830] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1300.225703][ T8028] usb 8-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1300.256556][ T8028] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.278159][ T5830] usb 3-1: selecting invalid altsetting 0 [ 1300.296878][ T8028] usb 8-1: Product: syz [ 1300.311259][ T8028] usb 8-1: Manufacturer: syz [ 1300.342331][ T8028] usb 8-1: SerialNumber: syz [ 1300.400597][ T8028] usb 8-1: config 0 descriptor?? [ 1300.444943][T14936] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1300.707010][ T5830] usb 3-1: USB disconnect, device number 38 [ 1300.740697][T14936] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1301.061970][ T9399] udevd[9399]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1301.842140][ T5834] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1302.021931][ T5834] usb 3-1: Using ep0 maxpacket: 16 [ 1302.062956][ T5834] usb 3-1: config index 0 descriptor too short (expected 36, got 26) [ 1302.092580][ T5834] usb 3-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 1302.141989][ T5834] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1302.172597][ T5834] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1302.218921][ T5834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.476458][ T5834] usb 3-1: config 0 descriptor?? [ 1302.499101][ T5834] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1302.521947][ T8167] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 1302.689362][ T8167] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1302.704394][ T8167] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1302.715426][ T8167] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1302.727733][ T8167] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.741519][ T8167] usb 2-1: config 0 descriptor?? [ 1302.773536][ T8167] hub 2-1:0.0: USB hub found [ 1302.862021][ T5834] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 1302.920318][T14950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1302.945997][T14950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1302.958266][T14950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1302.987800][ T8167] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 1302.988334][T14950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1303.008674][ T5830] usb 3-1: USB disconnect, device number 39 [ 1303.035917][ T8028] asix 8-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 1303.046950][ T5834] usb 9-1: Using ep0 maxpacket: 32 [ 1303.067041][ T5834] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1303.082148][ T8028] asix 8-1:0.188: probe with driver asix failed with error -71 [ 1303.092399][ T5834] usb 9-1: config 0 has no interfaces? [ 1303.126725][ T5834] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1303.150862][ T8028] usb 8-1: USB disconnect, device number 37 [ 1303.177827][ T5834] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1303.189016][ T5834] usb 9-1: Product: syz [ 1303.211523][ T5834] usb 9-1: Manufacturer: syz [ 1303.221606][ T5834] usb 9-1: SerialNumber: syz [ 1303.260526][ T5834] usb 9-1: config 0 descriptor?? [ 1303.316623][ T8167] hid-generic 0003:046D:C31C.0008: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 1303.547393][ T8028] usb 2-1: USB disconnect, device number 47 [ 1303.630015][T14958] fido_id[14958]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1304.478022][T14972] GUP no longer grows the stack in syz.2.2417 (14972): 200000005000-200000008000 (200000004000) [ 1304.517766][T14972] CPU: 0 UID: 0 PID: 14972 Comm: syz.2.2417 Tainted: G L syzkaller #0 PREEMPT(full) [ 1304.517941][T14972] Tainted: [L]=SOFTLOCKUP [ 1304.517993][T14972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1304.518083][T14972] Call Trace: [ 1304.518144][T14972] [ 1304.518190][T14972] __dump_stack+0x26/0x30 [ 1304.518424][T14972] dump_stack_lvl+0x14c/0x1c0 [ 1304.518586][T14972] dump_stack+0x1e/0x25 [ 1304.518722][T14972] fixup_user_fault+0xcc0/0xde0 [ 1304.518978][T14972] fault_in_user_writeable+0x99/0x1a0 [ 1304.519217][T14972] futex_lock_pi+0x5a8/0x1530 [ 1304.519386][T14972] ? futex_unqueue+0x22d/0x2c0 [ 1304.519538][T14972] ? kmsan_get_metadata+0xf1/0x160 [ 1304.519771][T14972] ? __se_sys_futex+0x5b8/0x740 [ 1304.519936][T14972] ? __msan_warning+0x1b/0x30 [ 1304.520100][T14972] ? __pfx_futex_wake_mark+0x10/0x10 [ 1304.520335][T14972] do_futex+0x2e1/0x480 [ 1304.520503][T14972] __se_sys_futex+0x5b8/0x740 [ 1304.520658][T14972] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1304.520844][T14972] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1304.521035][T14972] __x64_sys_futex+0x114/0x1a0 [ 1304.521220][T14972] x64_sys_call+0x2c48/0x3ea0 [ 1304.521391][T14972] do_syscall_64+0x134/0xf80 [ 1304.521591][T14972] ? clear_bhb_loop+0x50/0xa0 [ 1304.521728][T14972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1304.521879][T14972] RIP: 0033:0x7f51f9d9c799 [ 1304.521994][T14972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1304.522116][T14972] RSP: 002b:00007f51fac00028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1304.522242][T14972] RAX: ffffffffffffffda RBX: 00007f51fa015fa0 RCX: 00007f51f9d9c799 [ 1304.522337][T14972] RDX: 0000000000000080 RSI: 000000000000008d RDI: 0000200000004000 [ 1304.522422][T14972] RBP: 00007f51f9e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1304.522508][T14972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1304.522588][T14972] R13: 00007f51fa016038 R14: 00007f51fa015fa0 R15: 00007fff45f37b38 [ 1304.522719][T14972] [ 1305.072069][ T5830] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1305.238808][ T5830] usb 10-1: Using ep0 maxpacket: 16 [ 1305.258696][ T5830] usb 10-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1305.289104][ T5830] usb 10-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1305.322442][ T5830] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1305.335174][ T5830] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1305.518524][ T8748] usb 9-1: USB disconnect, device number 36 [ 1305.584286][ T10] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1305.663679][ T1210] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1305.778575][ T10] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 1305.812812][ T10] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1305.855872][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1305.864884][ T1210] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 1305.878891][ T5830] mcp2221 0003:04D8:00DD.0009: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.9-1/input0 [ 1305.890449][ T1210] usb 2-1: config 0 has no interface number 0 [ 1305.913058][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1305.960984][ T1210] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 1305.971160][ T10] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1305.985300][ T1210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.993857][ T10] usb 3-1: Product: syz [ 1305.998190][ T10] usb 3-1: Manufacturer: syz [ 1306.003783][ T1210] usb 2-1: Product: syz [ 1306.008119][ T1210] usb 2-1: Manufacturer: syz [ 1306.013583][ T10] usb 3-1: SerialNumber: syz [ 1306.046308][ T1210] usb 2-1: SerialNumber: syz [ 1306.056724][ T10] usb 3-1: config 0 descriptor?? [ 1306.089728][ T10] hub 3-1:0.0: bad descriptor, ignoring hub [ 1306.098926][ T1210] usb 2-1: config 0 descriptor?? [ 1306.107142][ T5830] usb 10-1: USB disconnect, device number 37 [ 1306.120400][ T10] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1306.199996][ T10] usb 3-1: selecting invalid altsetting 0 [ 1306.424528][ T1210] uvcvideo 2-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 1306.449944][ T1210] uvcvideo 2-1:0.64: No valid video chain found. [ 1306.503902][ T8028] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 1306.522251][ T1210] usb 2-1: USB disconnect, device number 48 [ 1306.682005][ T8028] usb 9-1: Using ep0 maxpacket: 16 [ 1306.707680][ T8028] usb 9-1: config index 0 descriptor too short (expected 36, got 26) [ 1306.730929][ T8028] usb 9-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 1306.743636][ T8028] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1306.794572][ T10] usb 3-1: USB disconnect, device number 40 [ 1306.803147][ T8028] usb 9-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1306.840202][ T8028] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1306.929199][ T8028] usb 9-1: config 0 descriptor?? [ 1306.960966][T14993] syz.7.2425: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1306.991092][ T8028] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1307.028882][T14993] CPU: 0 UID: 0 PID: 14993 Comm: syz.7.2425 Tainted: G L syzkaller #0 PREEMPT(full) [ 1307.029045][T14993] Tainted: [L]=SOFTLOCKUP [ 1307.029095][T14993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1307.029189][T14993] Call Trace: [ 1307.029237][T14993] [ 1307.029279][T14993] __dump_stack+0x26/0x30 [ 1307.029434][T14993] dump_stack_lvl+0x14c/0x1c0 [ 1307.029584][T14993] dump_stack+0x1e/0x25 [ 1307.029724][T14993] warn_alloc+0x46f/0x6a0 [ 1307.029978][T14993] ? kmsan_get_metadata+0xf1/0x160 [ 1307.030171][T14993] __vmalloc_node_range_noprof+0x142/0x2d80 [ 1307.030383][T14993] ? should_fail_ex+0x45/0x8c0 [ 1307.030569][T14993] ? kmsan_get_metadata+0xf1/0x160 [ 1307.030743][T14993] ? kmsan_get_metadata+0xf1/0x160 [ 1307.030916][T14993] ? kmsan_get_metadata+0xf1/0x160 [ 1307.031090][T14993] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1307.031278][T14993] ? __kmalloc_cache_noprof+0x3b0/0x1260 [ 1307.031473][T14993] ? kmsan_get_metadata+0xf1/0x160 [ 1307.031661][T14993] vmalloc_user_noprof+0xce/0x140 [ 1307.031806][T14993] ? xskq_create+0x11d/0x290 [ 1307.032023][T14993] xskq_create+0x11d/0x290 [ 1307.032167][T14993] xsk_init_queue+0xce/0x180 [ 1307.032307][T14993] xsk_setsockopt+0x7f6/0xfe0 [ 1307.032450][T14993] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1307.032575][T14993] __sys_setsockopt+0x43e/0x580 [ 1307.032869][T14993] __x64_sys_setsockopt+0xf4/0x1a0 [ 1307.033066][T14993] x64_sys_call+0x2a65/0x3ea0 [ 1307.033242][T14993] do_syscall_64+0x134/0xf80 [ 1307.033369][T14993] ? clear_bhb_loop+0x50/0xa0 [ 1307.033507][T14993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1307.033644][T14993] RIP: 0033:0x7f512139c799 [ 1307.033739][T14993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1307.033848][T14993] RSP: 002b:00007f512217c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1307.033970][T14993] RAX: ffffffffffffffda RBX: 00007f5121615fa0 RCX: 00007f512139c799 [ 1307.034065][T14993] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 1307.034144][T14993] RBP: 00007f5121432c99 R08: 0000000000007e00 R09: 0000000000000000 [ 1307.034236][T14993] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1307.034320][T14993] R13: 00007f5121616038 R14: 00007f5121615fa0 R15: 00007ffd352d2328 [ 1307.034449][T14993] [ 1307.133021][ T9399] udevd[9399]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1307.344145][T14993] Mem-Info: [ 1307.347448][T14993] active_anon:8556 inactive_anon:0 isolated_anon:0 [ 1307.347448][T14993] active_file:3721 inactive_file:40404 isolated_file:0 [ 1307.347448][T14993] unevictable:768 dirty:118 writeback:0 [ 1307.347448][T14993] slab_reclaimable:4276 slab_unreclaimable:25487 [ 1307.347448][T14993] mapped:30445 shmem:1380 pagetables:2418 [ 1307.347448][T14993] sec_pagetables:0 bounce:0 [ 1307.347448][T14993] kernel_misc_reclaimable:0 [ 1307.347448][T14993] free:354732 free_pcp:12277 free_cma:0 [ 1307.482516][T14993] Node 0 active_anon:34292kB inactive_anon:0kB active_file:14884kB inactive_file:161412kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121848kB dirty:472kB writeback:0kB shmem:3984kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5856kB pagetables:9016kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1307.538718][T14993] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16kB pagetables:384kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1307.586218][T14990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1307.633928][T14990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1307.670766][T14995] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 1307.672968][ T53] Bluetooth: hci3: Frame reassembly failed (-84) [ 1307.690532][T14993] Node 0 DMA free:4096kB boost:0kB min:164kB low:204kB high:244kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1307.819837][T14990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1307.843857][T15005] fuse: Invalid rootmode [ 1307.858836][T14993] lowmem_reserve[]: 0 927 1240 1240 1240 [ 1307.883510][T14990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1308.037003][ T1210] usb 9-1: USB disconnect, device number 37 [ 1308.132730][T14993] Node 0 DMA32 free:493624kB boost:0kB min:36808kB low:46008kB high:55208kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6740kB inactive_anon:0kB active_file:10500kB inactive_file:82084kB unevictable:0kB writepending:244kB zspages:0kB present:3129332kB managed:949816kB mlocked:0kB bounce:0kB free_pcp:36860kB local_pcp:19988kB free_cma:0kB [ 1308.276976][T14993] lowmem_reserve[]: 0 0 313 313 313 [ 1308.313486][T14993] Node 0 Normal free:16668kB boost:0kB min:13044kB low:16304kB high:19564kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28728kB inactive_anon:0kB active_file:4384kB inactive_file:79328kB unevictable:1536kB writepending:232kB zspages:0kB present:1048580kB managed:320836kB mlocked:0kB bounce:0kB free_pcp:10368kB local_pcp:3824kB free_cma:0kB [ 1308.402892][T14993] lowmem_reserve[]: 0 0 0 0 0 [ 1308.408079][T14993] Node 1 Normal free:904028kB boost:0kB min:40088kB low:50108kB high:60128kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:986032kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1308.485184][T14993] lowmem_reserve[]: 0 0 0 0 0 [ 1308.490366][T14993] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1308.503755][T14993] Node 0 DMA32: 2452*4kB (UME) 1371*8kB (UME) 851*16kB (UME) 461*32kB (UME) 341*64kB (UME) 292*128kB (UME) 187*256kB (UM) 107*512kB (UM) 38*1024kB (UM) 29*2048kB (UE) 45*4096kB (UM) = 493624kB [ 1308.524524][T14993] Node 0 Normal: 407*4kB (UME) 358*8kB (UME) 150*16kB (UE) 88*32kB (UME) 26*64kB (UME) 9*128kB (UME) 6*256kB (UME) 1*512kB (E) 2*1024kB (E) 0*2048kB 0*4096kB = 16620kB [ 1308.556316][T14993] Node 1 Normal: 7*4kB (UM) 10*8kB (UM) 7*16kB (UM) 6*32kB (UM) 11*64kB (UM) 6*128kB (UM) 4*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 2*2048kB (UM) 218*4096kB (UM) = 904028kB [ 1308.731027][T14993] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1308.859326][T14993] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1308.972088][T14993] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1309.062344][T14993] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1309.154725][T14993] 46072 total pagecache pages [ 1309.194860][T14993] 0 pages in swap cache [ 1309.199708][T14993] Free swap = 124996kB [ 1309.210070][T14993] Total swap = 124996kB [ 1309.347163][T14993] 2097051 pages RAM [ 1309.351147][T14993] 0 pages HighMem/MovableOnly [ 1309.362229][ T5790] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1309.470155][T14993] 1531856 pages reserved [ 1309.478760][T14993] 0 pages cma reserved [ 1309.870392][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1309.894028][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1310.242157][ T1210] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 1310.402284][ T1210] usb 9-1: Using ep0 maxpacket: 8 [ 1310.424645][ T1210] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 1310.424773][ T1210] usb 9-1: config 179 has no interface number 0 [ 1310.424888][ T1210] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1310.425033][ T1210] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1310.425178][ T1210] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1310.425323][ T1210] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1310.425472][ T1210] usb 9-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1310.425617][ T1210] usb 9-1: config 179 interface 65 has no altsetting 0 [ 1310.425772][ T1210] usb 9-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1310.425899][ T1210] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1310.565656][ T1210] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input25 [ 1310.611327][ T5116] input input25: unable to receive magic message: -110 [ 1310.706203][ T5116] input input25: unable to receive magic message: -32 [ 1310.804389][ T5116] input input25: unable to receive magic message: -32 [ 1310.865168][ C0] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 1310.878082][ T1210] usb 9-1: USB disconnect, device number 38 [ 1310.878297][ C0] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1311.433821][ T10] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 1311.632027][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 1311.645117][ T8028] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1311.682959][ T10] usb 8-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1311.722034][ T10] usb 8-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1311.802516][ T10] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1311.844934][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1312.777251][ T8028] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 1312.882750][ T8028] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1312.895295][ T5834] usb 9-1: new full-speed USB device number 39 using dummy_hcd [ 1312.993594][ T8028] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1313.073898][ T8028] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1313.122157][ T5834] usb 9-1: device descriptor read/64, error -71 [ 1313.135150][ T8028] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1313.189322][ T8028] usb 3-1: Product: syz [ 1313.207685][ T8028] usb 3-1: Manufacturer: syz [ 1313.232882][ T8028] usb 3-1: SerialNumber: syz [ 1313.311316][ T10] mcp2221 0003:04D8:00DD.000A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 1313.322355][ T8028] usb 3-1: config 0 descriptor?? [ 1313.404310][ T8028] hub 3-1:0.0: bad descriptor, ignoring hub [ 1313.432164][ T5834] usb 9-1: new full-speed USB device number 40 using dummy_hcd [ 1313.473994][ T8028] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1313.600587][ T8028] usb 3-1: selecting invalid altsetting 0 [ 1313.654200][ T5834] usb 9-1: device descriptor read/64, error -71 [ 1313.762756][ T5834] usb usb9-port1: attempt power cycle [ 1314.244282][ T5834] usb 9-1: new full-speed USB device number 41 using dummy_hcd [ 1314.335814][ T5834] usb 9-1: device descriptor read/8, error -71 [ 1314.365561][ T10] usb 8-1: USB disconnect, device number 38 [ 1314.622190][ T5834] usb 9-1: new full-speed USB device number 42 using dummy_hcd [ 1314.671960][ T8028] usb 3-1: USB disconnect, device number 41 [ 1314.698095][ T5834] usb 9-1: device descriptor read/8, error -71 [ 1314.839035][ T5834] usb usb9-port1: unable to enumerate USB device [ 1315.048953][ T9622] udevd[9622]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1315.543409][T15064] fuse: Invalid rootmode [ 1315.582408][ T10] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 1315.790495][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1315.832164][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1315.844331][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1315.858075][ T10] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1315.867664][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1315.892815][ T5834] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1316.006396][ T10] usb 9-1: config 0 descriptor?? [ 1316.094564][ T5834] usb 8-1: Using ep0 maxpacket: 16 [ 1316.153110][ T5834] usb 8-1: config index 0 descriptor too short (expected 51443, got 18) [ 1316.283572][ T5834] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1316.339617][ T5834] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.430193][ T5834] usb 8-1: Product: syz [ 1316.437170][ T10] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 1316.445638][ T10] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 1316.445983][ T5834] usb 8-1: Manufacturer: syz [ 1316.458204][ T10] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 1316.458372][ T10] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 1316.482353][ T10] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 1316.490504][ T10] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 1316.498392][ T10] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 1316.506250][ T10] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 1316.514660][ T10] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 1316.525323][ T5834] usb 8-1: SerialNumber: syz [ 1316.546134][ T8028] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1316.548749][ T10] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 1316.602931][ T10] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1316.609253][ T5834] r8152-cfgselector 8-1: Unknown version 0x0000 [ 1316.700954][ T5834] r8152-cfgselector 8-1: config 0 descriptor?? [ 1316.747882][ T8167] usb 9-1: USB disconnect, device number 43 [ 1316.763797][ T8028] usb 3-1: Using ep0 maxpacket: 32 [ 1316.837743][ T8028] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 1316.868108][ T8028] usb 3-1: config 0 has no interface number 0 [ 1316.887962][ T8028] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1316.940562][ T8028] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1316.961914][ T8028] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.970253][ T8028] usb 3-1: Product: syz [ 1317.031940][ T8028] usb 3-1: Manufacturer: syz [ 1317.036745][ T8028] usb 3-1: SerialNumber: syz [ 1317.092890][ T8028] usb 3-1: config 0 descriptor?? [ 1317.099611][T15073] fido_id[15073]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1317.116287][T15070] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1317.237132][ T10] r8152-cfgselector 8-1: USB disconnect, device number 39 [ 1317.378000][T15070] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1318.672017][ T10] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 1318.885189][ T10] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 1318.922142][ T10] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1318.962178][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1319.038999][ T10] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1319.074353][ T10] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1319.104300][ T8028] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1319.125427][ T8028] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1319.156232][ T8028] asix 3-1:0.188: probe with driver asix failed with error -71 [ 1319.157184][ T10] usb 8-1: Product: syz [ 1319.196595][ T8028] usb 3-1: USB disconnect, device number 42 [ 1319.271867][ T10] usb 8-1: Manufacturer: syz [ 1319.276666][ T10] usb 8-1: SerialNumber: syz [ 1319.325188][ T10] usb 8-1: config 0 descriptor?? [ 1319.388383][ T10] hub 8-1:0.0: bad descriptor, ignoring hub [ 1319.421068][ T10] hub 8-1:0.0: probe with driver hub failed with error -5 [ 1319.483715][ T10] usb 8-1: selecting invalid altsetting 0 [ 1319.782033][ T8028] usb 9-1: new full-speed USB device number 44 using dummy_hcd [ 1319.963761][ T10] usb 8-1: USB disconnect, device number 40 [ 1320.198092][T11534] udevd[11534]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1320.281867][ T8028] usb 9-1: device descriptor read/64, error -71 [ 1320.543571][ T8028] usb 9-1: new full-speed USB device number 45 using dummy_hcd [ 1320.606995][ T5834] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1320.722638][ T8028] usb 9-1: device descriptor read/64, error -71 [ 1320.780884][ T5834] usb 3-1: device descriptor read/64, error -71 [ 1320.832539][ T8028] usb usb9-port1: attempt power cycle [ 1321.032023][ T5834] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1321.202135][ T8028] usb 9-1: new full-speed USB device number 46 using dummy_hcd [ 1321.227675][ T5834] usb 3-1: device descriptor read/64, error -71 [ 1321.264546][ T8028] usb 9-1: device descriptor read/8, error -71 [ 1321.357255][ T5834] usb usb3-port1: attempt power cycle [ 1321.474859][T15112] binder: 15111:15112 ioctl c00c6211 0 returned -14 [ 1321.522416][ T8028] usb 9-1: new full-speed USB device number 47 using dummy_hcd [ 1321.569600][ T8028] usb 9-1: device descriptor read/8, error -71 [ 1321.704550][ T8028] usb usb9-port1: unable to enumerate USB device [ 1321.732306][ T5834] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1321.783575][ T5834] usb 3-1: device descriptor read/8, error -71 [ 1321.864749][T15118] fuse: Invalid rootmode [ 1322.046764][ T5834] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1322.110503][ T5834] usb 3-1: device descriptor read/8, error -71 [ 1322.248576][ T5834] usb usb3-port1: unable to enumerate USB device [ 1324.458500][ T10] usb 9-1: new full-speed USB device number 48 using dummy_hcd [ 1324.660595][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 3840, setting to 64 [ 1324.686742][ T10] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1324.707179][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.731290][ T10] usb 9-1: config 0 descriptor?? [ 1324.760185][T15140] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1324.786456][ T10] hub 9-1:0.0: USB hub found [ 1325.012835][ T10] hub 9-1:0.0: 1 port detected [ 1325.726377][ T5834] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 1325.859873][ T10] hub 9-1:0.0: hub_ext_port_status failed (err = -71) [ 1325.859997][ T8028] usb 9-1: USB disconnect, device number 48 [ 1325.902718][ T5834] usb 2-1: device descriptor read/64, error -71 [ 1326.191939][ T5834] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 1326.223525][ T10] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1326.342199][ T5834] usb 2-1: device descriptor read/64, error -71 [ 1326.362305][ T10] usb 3-1: device descriptor read/64, error -71 [ 1326.463357][ T5834] usb usb2-port1: attempt power cycle [ 1326.602068][ T10] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1326.762942][ T10] usb 3-1: device descriptor read/64, error -71 [ 1326.832545][ T5834] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 1326.885309][ T5834] usb 2-1: device descriptor read/8, error -71 [ 1326.895745][ T10] usb usb3-port1: attempt power cycle [ 1327.142757][ T5834] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 1327.184659][ T5834] usb 2-1: device descriptor read/8, error -71 [ 1327.262512][ T10] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1327.307802][ T10] usb 3-1: device descriptor read/8, error -71 [ 1327.315180][ T5834] usb usb2-port1: unable to enumerate USB device [ 1327.472211][ T8028] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 1327.541927][ T1210] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 1327.572363][ T10] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1327.605563][ T10] usb 3-1: device descriptor read/8, error -71 [ 1327.641918][ T8028] usb 9-1: Using ep0 maxpacket: 32 [ 1327.656569][ T8028] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1327.670088][ T8028] usb 9-1: config 128 has an invalid interface number: 127 but max is 3 [ 1327.688975][ T8028] usb 9-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1327.700784][ T8028] usb 9-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1327.701912][ T1210] usb 8-1: Using ep0 maxpacket: 16 [ 1327.716179][ T8028] usb 9-1: config 128 has no interface number 0 [ 1327.723461][ T10] usb usb3-port1: unable to enumerate USB device [ 1327.746651][ T1210] usb 8-1: config 0 has an invalid interface number: 34 but max is 0 [ 1327.746720][ T8028] usb 9-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1327.757430][ T1210] usb 8-1: config 0 has no interface number 0 [ 1327.773159][ T8028] usb 9-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1327.786927][ T8028] usb 9-1: config 128 interface 127 has no altsetting 0 [ 1327.796538][ T1210] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1327.818568][ T1210] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1327.827037][ T8028] usb 9-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1327.838946][ T1210] usb 8-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1327.847091][ T8028] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.851862][ T1210] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.875920][ T1210] usb 8-1: Product: syz [ 1327.879430][ T8028] usb 9-1: Product: syz [ 1327.880245][ T1210] usb 8-1: Manufacturer: syz [ 1327.880337][ T1210] usb 8-1: SerialNumber: syz [ 1327.884815][ T8028] usb 9-1: Manufacturer: syz [ 1327.899322][ T8028] usb 9-1: SerialNumber: syz [ 1327.921486][ T1210] usb 8-1: config 0 descriptor?? [ 1327.951640][T15172] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 1327.964562][T15172] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 1328.207726][T15172] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 1328.232752][T15172] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 1328.445310][ T8028] usb 9-1: USB disconnect, device number 49 [ 1328.655032][ T1210] asix 8-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1328.686626][ T1210] asix 8-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1328.731069][ T9896] udevd[9896]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1328.755578][ T1210] asix 8-1:0.34: probe with driver asix failed with error -71 [ 1328.842827][ T1210] usb 8-1: USB disconnect, device number 41 [ 1328.891320][T15175] fuse: Bad value for 'rootmode' [ 1330.695229][ T1210] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 1330.915941][ T1210] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 1330.982937][ T1210] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1331.051970][ T1210] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1331.095375][ T1210] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1331.107943][ T1210] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1331.121000][ T1210] usb 9-1: Product: syz [ 1331.129757][ T1210] usb 9-1: Manufacturer: syz [ 1331.139402][ T1210] usb 9-1: SerialNumber: syz [ 1331.177193][ T1210] usb 9-1: config 0 descriptor?? [ 1331.271286][ T1210] hub 9-1:0.0: bad descriptor, ignoring hub [ 1331.302068][ T1210] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1331.330170][ T1210] usb 9-1: selecting invalid altsetting 0 [ 1331.775821][ T1210] usb 9-1: USB disconnect, device number 50 [ 1332.011217][ T9622] udevd[9622]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1334.310408][T15210] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1335.238395][ T1210] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1335.462990][ T1210] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1335.506213][ T1210] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1335.529307][ T1210] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1335.562979][ T1210] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1335.581945][ T1210] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.636510][ T1210] usb 2-1: config 0 descriptor?? [ 1335.742017][ T10] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 1335.943643][ T10] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 1335.973928][ T10] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1336.015390][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1336.045611][ T10] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1336.068507][ T10] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1336.102261][ T10] usb 9-1: Product: syz [ 1336.107331][ T10] usb 9-1: Manufacturer: syz [ 1336.129582][ T10] usb 9-1: SerialNumber: syz [ 1336.164640][ T10] usb 9-1: config 0 descriptor?? [ 1336.210663][ T10] hub 9-1:0.0: bad descriptor, ignoring hub [ 1336.223554][ T1210] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1336.255885][ T10] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1336.316530][ T10] usb 9-1: selecting invalid altsetting 0 [ 1336.707343][ T8028] usb 2-1: USB disconnect, device number 53 [ 1337.013799][ T10] usb 9-1: USB disconnect, device number 51 [ 1337.040311][T15229] fido_id[15229]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1337.246055][T11534] udevd[11534]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1337.807317][ T8028] usb 9-1: new full-speed USB device number 52 using dummy_hcd [ 1338.009709][ T8028] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 1338.051982][ T8028] usb 9-1: config 0 has no interface number 0 [ 1338.093736][ T8028] usb 9-1: config 0 interface 41 has no altsetting 0 [ 1338.164224][ T8028] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1338.192906][ T8028] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1338.201615][ T8028] usb 9-1: Product: syz [ 1338.208773][ T8028] usb 9-1: Manufacturer: syz [ 1338.214908][ T8028] usb 9-1: SerialNumber: syz [ 1338.226751][ T8028] usb 9-1: config 0 descriptor?? [ 1338.421018][T15245] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1339.092360][ T8028] CoreChips 9-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 1339.148381][ T8028] CoreChips 9-1:0.41: probe with driver CoreChips failed with error -71 [ 1339.217170][ T8028] usb 9-1: USB disconnect, device number 52 [ 1342.202058][ T8028] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1342.397191][ T8028] usb 2-1: Using ep0 maxpacket: 32 [ 1342.435188][ T8028] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 1342.484012][ T8028] usb 2-1: config 0 has no interface number 0 [ 1342.490329][ T8028] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1342.592750][ T8028] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1342.626110][ T8028] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1342.651910][ T8028] usb 2-1: Product: syz [ 1342.656280][ T8028] usb 2-1: Manufacturer: syz [ 1342.661049][ T8028] usb 2-1: SerialNumber: syz [ 1342.714242][ T8028] usb 2-1: config 0 descriptor?? [ 1342.743692][T15269] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1342.868230][T14998] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1342.895810][T14998] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1342.901113][T15274] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1342.933653][T14998] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1342.960376][T14998] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1342.976490][T14998] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1343.053150][ T5790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1343.080064][T15269] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1343.093111][ T5790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1343.116952][ T5790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1343.133347][ T5790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1343.169004][ T5790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1343.530997][T15284] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2534'. [ 1343.757311][T15276] vxcan1 speed is unknown, defaulting to 1000 [ 1344.386969][ T8028] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1344.410493][ T8028] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 1344.444855][ T8028] asix 2-1:0.188: probe with driver asix failed with error -71 [ 1344.510962][ T8028] usb 2-1: USB disconnect, device number 54 [ 1344.543148][ T10] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1344.741901][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 1344.770064][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1344.824437][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1344.852012][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1344.867141][ T10] usb 3-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 1344.877062][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1344.895001][ T10] usb 3-1: config 0 descriptor?? [ 1344.922001][ T8028] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 1345.162775][ T8028] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 1345.172520][ T8028] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1345.185456][ T8028] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1345.226024][ T8028] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1345.260232][ T8028] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1345.284300][ T5790] Bluetooth: hci3: command tx timeout [ 1345.400603][ T10] elecom 0003:056E:010C.000D: report_id 0 is invalid [ 1345.407699][ T8028] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1345.429092][ T10] elecom 0003:056E:010C.000D: item 0 0 1 8 parsing failed [ 1345.440092][ T8028] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1345.482715][ T10] elecom 0003:056E:010C.000D: probe with driver elecom failed with error -22 [ 1345.545586][ T8028] usb 9-1: config 0 descriptor?? [ 1345.620820][ T10] usb 3-1: USB disconnect, device number 51 [ 1346.014219][ T8028] hid_parser_main: 5 callbacks suppressed [ 1346.014317][ T8028] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1346.062323][ T8028] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1346.091339][ T8028] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1346.112845][ T8028] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1346.120526][ T8028] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1346.168317][ T8028] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1346.197621][ T8028] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1346.303959][ T8028] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1346.343161][ T8028] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1346.379147][ T8028] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1346.501986][ T8028] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1346.578602][ T8028] usb 9-1: USB disconnect, device number 53 [ 1346.836899][ T1138] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.931955][ T8167] usb 3-1: new low-speed USB device number 52 using dummy_hcd [ 1347.140811][ T1138] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1347.143808][ T8167] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1347.187350][T15304] fido_id[15304]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1347.220277][ T8167] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 1347.252000][ T8167] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1347.292903][ T8167] usb 3-1: New USB device found, idVendor=046d, idProduct=c081, bcdDevice= 0.00 [ 1347.311237][ T8167] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.330614][ T8167] usb 3-1: config 0 descriptor?? [ 1347.338597][T15303] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1347.364632][ T5790] Bluetooth: hci3: command tx timeout [ 1347.518492][ T1138] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1347.831419][ T1138] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1347.860207][ T8167] logitech-hidpp-device 0003:046D:C081.000F: ignoring exceeding usage max [ 1347.987526][ T8167] logitech-hidpp-device 0003:046D:C081.000F: item fetching failed at offset 24/40 [ 1348.029712][ T8167] logitech-hidpp-device 0003:046D:C081.000F: hidpp_probe:parse failed [ 1348.081105][T15276] chnl_net:caif_netlink_parms(): no params data found [ 1348.089978][ T8167] logitech-hidpp-device 0003:046D:C081.000F: probe with driver logitech-hidpp-device failed with error -22 [ 1348.152836][ T8167] usb 3-1: USB disconnect, device number 52 [ 1348.778068][ T1138] bridge_slave_1: left allmulticast mode [ 1348.792392][ T1138] bridge_slave_1: left promiscuous mode [ 1348.866381][ T1138] bridge0: port 2(bridge_slave_1) entered disabled state [ 1348.982646][ T1138] bridge_slave_0: left allmulticast mode [ 1348.988491][ T1138] bridge_slave_0: left promiscuous mode [ 1349.050701][ T1138] bridge0: port 1(bridge_slave_0) entered disabled state [ 1349.442366][ T5790] Bluetooth: hci3: command tx timeout [ 1349.970707][ T1138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1350.043974][ T1138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1350.087590][ T1138] bond0 (unregistering): Released all slaves [ 1351.072975][T15276] bridge0: port 1(bridge_slave_0) entered blocking state [ 1351.112336][T15276] bridge0: port 1(bridge_slave_0) entered disabled state [ 1351.120007][T15276] bridge_slave_0: entered allmulticast mode [ 1351.177321][T15276] bridge_slave_0: entered promiscuous mode [ 1351.274905][T15276] bridge0: port 2(bridge_slave_1) entered blocking state [ 1351.294580][T15342] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2546'. [ 1351.307442][T15276] bridge0: port 2(bridge_slave_1) entered disabled state [ 1351.332481][T15276] bridge_slave_1: entered allmulticast mode [ 1351.365273][T15276] bridge_slave_1: entered promiscuous mode [ 1351.533551][ T5790] Bluetooth: hci3: command tx timeout [ 1352.047128][ T1210] hid_parser_main: 1 callbacks suppressed [ 1352.047193][ T1210] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1352.132009][ T10] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 1352.148931][ T1210] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1352.240924][T15276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1352.286541][T15352] hid-generic 0000:0000:0000.0010: pid 15352 passed too short report [ 1352.322456][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 1352.382050][ T10] usb 9-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1352.425774][T15276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1352.491907][ T10] usb 9-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1352.578217][ T10] usb 9-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 1352.693627][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1352.700507][ T10] usb 9-1: New USB device found, idVendor=056a, idProduct=00c7, bcdDevice= 0.00 [ 1352.769656][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1353.066720][ T10] usb 9-1: config 0 descriptor?? [ 1353.529775][ T1138] hsr_slave_0: left promiscuous mode [ 1353.595446][ T10] wacom 0003:056A:00C7.0011: unknown main item tag 0x0 [ 1353.609224][ T1138] hsr_slave_1: left promiscuous mode [ 1353.635533][ T10] wacom 0003:056A:00C7.0011: unknown main item tag 0x0 [ 1353.649603][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1353.666630][ T10] wacom 0003:056A:00C7.0011: unknown main item tag 0x0 [ 1353.675034][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1353.682945][ T10] wacom 0003:056A:00C7.0011: unknown main item tag 0x0 [ 1353.708509][ T10] wacom 0003:056A:00C7.0011: unknown main item tag 0x0 [ 1353.726665][ T10] wacom 0003:056A:00C7.0011: unknown main item tag 0x0 [ 1353.737430][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1353.759301][ T10] wacom 0003:056A:00C7.0011: unknown main item tag 0x0 [ 1353.782603][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1353.803668][ T10] wacom 0003:056A:00C7.0011: unknown main item tag 0x0 [ 1353.848784][ T10] wacom 0003:056A:00C7.0011: unknown main item tag 0x0 [ 1353.943010][ T10] usb 9-1: USB disconnect, device number 54 [ 1354.005363][ T1138] veth1_macvtap: left promiscuous mode [ 1354.029846][ T1138] veth0_macvtap: left promiscuous mode [ 1354.057268][ T1138] veth1_vlan: left promiscuous mode [ 1354.082503][ T1138] veth0_vlan: left promiscuous mode [ 1355.666441][ T1138] team0 (unregistering): Port device team_slave_1 removed [ 1355.900553][ T1138] team0 (unregistering): Port device team_slave_0 removed [ 1356.145044][ T10] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1356.352018][ T10] usb 3-1: device descriptor read/64, error -71 [ 1356.467635][T15276] team0: Port device team_slave_0 added [ 1356.537867][T15276] team0: Port device team_slave_1 added [ 1356.622029][ T10] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1356.794943][ T10] usb 3-1: device descriptor read/64, error -71 [ 1356.844383][T15276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1356.862984][T15276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1356.903289][ T10] usb usb3-port1: attempt power cycle [ 1356.903995][T15276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1356.943481][T15276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1356.950586][T15276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1356.997943][T15276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1357.261485][ T10] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1357.320261][T15276] hsr_slave_0: entered promiscuous mode [ 1357.324853][ T10] usb 3-1: device descriptor read/8, error -71 [ 1357.336387][T15276] hsr_slave_1: entered promiscuous mode [ 1357.352324][T15276] debugfs: 'hsr0' already exists in 'hsr' [ 1357.360836][T15276] Cannot create hsr debugfs directory [ 1357.590636][ T10] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1357.643893][ T10] usb 3-1: device descriptor read/8, error -71 [ 1357.787266][ T10] usb usb3-port1: unable to enumerate USB device [ 1357.902064][ T1210] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 1358.093566][ T1210] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1358.118026][ T1210] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1358.162175][ T1210] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1358.206988][ T1210] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1358.237795][ T1210] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1358.275553][ T1210] usb 8-1: config 0 descriptor?? [ 1358.750509][ T1210] hid_parser_main: 29 callbacks suppressed [ 1358.750612][ T1210] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1358.780829][ T1210] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1358.816106][ T1210] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1358.862203][ T1210] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1358.869883][ T1210] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1358.955799][ T1210] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1359.023675][ T1210] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1359.057888][ T1210] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1359.104753][ T1210] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1359.149802][ T1210] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1359.300359][ T1210] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1359.412813][ T1210] usb 8-1: USB disconnect, device number 42 [ 1359.888377][T15413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2561'. [ 1360.038811][T15276] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1360.238045][T15276] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1360.342801][T15407] fido_id[15407]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1360.442183][ T8167] usb 8-1: new full-speed USB device number 43 using dummy_hcd [ 1360.567193][T15276] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1360.654461][ T8167] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 1360.691174][T15276] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1360.716334][ T8167] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1360.734888][ T8167] usb 8-1: config 0 has no interface number 0 [ 1360.771863][ T8167] usb 8-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1360.792682][ T1210] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1360.811569][ T8167] usb 8-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1360.887809][ T8167] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1360.908204][ T8167] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.947263][ T8167] usb 8-1: Product: syz [ 1360.972142][ T8167] usb 8-1: Manufacturer: syz [ 1360.992341][ T8167] usb 8-1: SerialNumber: syz [ 1361.040940][ T8167] usb 8-1: config 0 descriptor?? [ 1361.057802][ T1210] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1361.084641][ T1210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1361.096875][ T8167] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1361.109360][ T1210] usb 2-1: Product: syz [ 1361.133071][ T1210] usb 2-1: Manufacturer: syz [ 1361.137944][ T1210] usb 2-1: SerialNumber: syz [ 1361.166886][ T8167] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -22 [ 1361.563213][ T5830] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1361.753247][ T5830] usb 3-1: Using ep0 maxpacket: 32 [ 1361.777151][ T5830] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1361.811927][ T5830] usb 3-1: config 0 has no interface number 0 [ 1361.843358][ T5830] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1361.871145][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1361.901105][ T5830] usb 3-1: Product: syz [ 1361.911378][ T5830] usb 3-1: Manufacturer: syz [ 1361.944254][T15276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1361.951877][ T5830] usb 3-1: SerialNumber: syz [ 1361.993334][ T5830] usb 3-1: config 0 descriptor?? [ 1362.126921][T15276] 8021q: adding VLAN 0 to HW filter on device team0 [ 1362.259391][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 1362.267020][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1362.361033][ T6025] bridge0: port 2(bridge_slave_1) entered blocking state [ 1362.368643][ T6025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1362.437933][ T5830] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1362.457137][ T5830] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1363.104385][ T1210] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1363.151587][ T1210] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1363.200869][ T1210] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1363.272537][ T1210] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1363.366794][ T1210] usb 2-1: USB disconnect, device number 55 [ 1363.533866][ T5830] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1363.588036][ T5830] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 1363.643695][ T5830] usb 3-1: USB disconnect, device number 57 [ 1363.943955][ T8028] usb 8-1: USB disconnect, device number 43 [ 1365.042102][ T8028] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1365.079069][T15276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1365.272318][ T8028] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1365.281185][ T8028] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1365.342078][ T8028] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1365.351276][ T8028] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1365.396095][ T8028] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1365.410149][ T8028] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1365.431993][ T8028] usb 3-1: Product: syz [ 1365.436349][ T8028] usb 3-1: Manufacturer: syz [ 1365.462830][ T8167] usb 8-1: new full-speed USB device number 44 using dummy_hcd [ 1365.499025][ T8028] cdc_wdm 3-1:1.0: skipping garbage [ 1365.507638][ T8028] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1365.637787][ T8167] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1365.670671][ T8167] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1365.713320][ T8028] usb 3-1: USB disconnect, device number 58 [ 1365.720867][ T8167] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1365.772961][ T8167] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1365.816026][ T8167] usb 8-1: config 0 descriptor?? [ 1365.863957][ T8167] hub 8-1:0.0: USB hub found [ 1366.058612][ T8167] hub 8-1:0.0: config failed, can't read hub descriptor (err -22) [ 1366.272108][ T8028] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1366.365446][ T8167] hid-generic 0003:046D:C31C.0013: item fetching failed at offset 0/1 [ 1366.409946][ T8167] hid-generic 0003:046D:C31C.0013: probe with driver hid-generic failed with error -22 [ 1366.486779][ T8028] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1366.506539][ T8028] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1366.537847][ T8028] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1366.600754][ T8028] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1366.639099][ T8028] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1366.660438][ T8028] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1366.676867][ T1210] usb 8-1: USB disconnect, device number 44 [ 1366.688719][ T8028] usb 3-1: Product: syz [ 1366.700780][ T8028] usb 3-1: Manufacturer: syz [ 1366.817663][ T8028] cdc_wdm 3-1:1.0: skipping garbage [ 1366.840627][ T8028] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1367.458624][T15276] veth0_vlan: entered promiscuous mode [ 1367.575098][T15276] veth1_vlan: entered promiscuous mode [ 1368.067061][T15276] veth0_macvtap: entered promiscuous mode [ 1368.088295][T15485] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2573'. [ 1368.193807][T15276] veth1_macvtap: entered promiscuous mode [ 1368.496559][T15276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1368.608015][T15276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1368.783349][ T8028] usb 3-1: USB disconnect, device number 59 [ 1368.836115][ T53] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.878501][ T53] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.968200][ T53] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1369.003673][ T53] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.292189][ T5830] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1370.493737][ T5830] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1370.535066][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.563954][ T1210] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 1370.596577][ T5830] usb 3-1: Product: syz [ 1370.600947][ T5830] usb 3-1: Manufacturer: syz [ 1370.640107][ T5830] usb 3-1: SerialNumber: syz [ 1370.763105][ T1210] usb 9-1: Using ep0 maxpacket: 8 [ 1370.816077][ T1210] usb 9-1: config 135 has an invalid interface number: 230 but max is 0 [ 1370.837677][ T1210] usb 9-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 1370.858349][ T1210] usb 9-1: config 135 has no interface number 0 [ 1370.881560][ T1210] usb 9-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 1370.900486][ T1210] usb 9-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 1370.915697][ T5830] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1370.931270][ T1210] usb 9-1: config 135 interface 230 has no altsetting 0 [ 1370.951601][ T5830] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 1371.004540][ T5830] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1371.018124][ T1210] usb 9-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 1371.031313][ T1210] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1371.044499][ T1210] usb 9-1: Product: syz [ 1371.048876][ T1210] usb 9-1: Manufacturer: syz [ 1371.066447][ T1210] usb 9-1: SerialNumber: syz [ 1371.086326][ T5830] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 1371.190051][ T1210] uvcvideo 9-1:135.230: Found UVC 0.00 device syz (18ec:3288) [ 1371.218780][ T1210] uvcvideo 9-1:135.230: No valid video chain found. [ 1371.299909][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1371.310305][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1371.337559][ T8028] usb 9-1: USB disconnect, device number 55 [ 1372.671886][ T1210] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 1372.842034][ T1210] usb 9-1: Using ep0 maxpacket: 32 [ 1372.894182][ T1210] usb 9-1: config 0 has an invalid interface number: 188 but max is 0 [ 1372.928199][ T1210] usb 9-1: config 0 has no interface number 0 [ 1372.959668][ T1210] usb 9-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1373.021134][ T1210] usb 9-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1373.062013][ T1210] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.091406][ T1210] usb 9-1: Product: syz [ 1373.101819][ T1210] usb 9-1: Manufacturer: syz [ 1373.106623][ T1210] usb 9-1: SerialNumber: syz [ 1373.162405][ T1210] usb 9-1: config 0 descriptor?? [ 1373.184273][T15536] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1373.345562][ T8028] usb 3-1: USB disconnect, device number 60 [ 1373.494793][T15536] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1374.788551][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1374.850856][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1375.074280][ T6024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1375.161778][ T6024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1375.388551][ T1210] asix 9-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1375.434230][ T1210] asix 9-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1375.473018][ T1210] asix 9-1:0.188: probe with driver asix failed with error -71 [ 1375.501897][T14982] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 1375.568041][ T1210] usb 9-1: USB disconnect, device number 56 [ 1375.697599][T14982] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1375.722407][T14982] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 86, changing to 7 [ 1375.775851][T14982] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 9231, setting to 1024 [ 1375.825199][T14982] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1375.862693][T14982] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1375.882141][T14982] usb 8-1: Product: syz [ 1375.892086][T14982] usb 8-1: Manufacturer: syz [ 1375.898493][T14982] usb 8-1: SerialNumber: syz [ 1375.920706][T14982] usb 8-1: config 0 descriptor?? [ 1375.985186][T14982] usb 8-1: 0:0 : invalid sync pipe. bmAttributes 41, bLength 9, bSynchAddress c3 [ 1376.002637][ T8028] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1376.213726][ T8028] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 1376.241179][ T8028] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1376.348340][ T8028] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1376.391747][ T8028] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1376.462794][ T8028] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1376.471209][ T8028] usb 5-1: Product: syz [ 1376.521260][ T8028] usb 5-1: Manufacturer: syz [ 1376.546114][ T8028] usb 5-1: SerialNumber: syz [ 1376.602881][ T8028] usb 5-1: config 0 descriptor?? [ 1376.650193][ T8028] hub 5-1:0.0: bad descriptor, ignoring hub [ 1376.676631][ T8028] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1376.738131][T15574] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2585'. [ 1376.755142][ T8028] usb 5-1: selecting invalid altsetting 0 [ 1376.786437][T14982] usb 8-1: USB disconnect, device number 45 [ 1377.770118][ T8028] usb 5-1: USB disconnect, device number 9 [ 1378.499380][ T9622] udevd[9622]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1378.601969][T14982] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 1378.625238][T14983] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1378.833575][T14982] usb 8-1: Using ep0 maxpacket: 16 [ 1378.854778][T14982] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1378.864254][T14983] usb 3-1: Using ep0 maxpacket: 8 [ 1378.897980][T14983] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 1378.911309][T14982] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1378.933895][T14983] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 1378.996225][T14982] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1379.012790][T14983] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1379.069894][T14982] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1379.079603][T14983] usb 3-1: config 250 has no interface number 0 [ 1379.148017][T14983] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1379.170744][T14982] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.207067][T14982] usb 8-1: Product: syz [ 1379.211493][T14982] usb 8-1: Manufacturer: syz [ 1379.212089][ T8028] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 1379.216753][T14983] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1379.262279][T14982] usb 8-1: SerialNumber: syz [ 1379.309554][T14983] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1379.423402][T14983] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1379.462653][T14983] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1379.547393][ T8028] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1379.579094][T14983] usb 3-1: config 250 interface 228 has no altsetting 0 [ 1379.598292][ T8028] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.642024][ T8028] usb 9-1: Product: syz [ 1379.648288][T14983] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1379.651915][ T8028] usb 9-1: Manufacturer: syz [ 1379.682831][T14983] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1379.722261][ T8028] usb 9-1: SerialNumber: syz [ 1379.747217][T14983] usb 3-1: Product: syz [ 1379.760779][T14982] usb 8-1: 0:2 : does not exist [ 1379.793852][T14983] usb 3-1: SerialNumber: syz [ 1379.923042][T14983] hub 3-1:250.228: bad descriptor, ignoring hub [ 1379.949139][T14983] hub 3-1:250.228: probe with driver hub failed with error -5 [ 1379.979246][ T8028] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1380.027057][ T8167] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1380.042097][ T8028] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 1380.101944][ T8028] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1380.137625][T14983] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 61 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1380.202256][ T8028] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -32 [ 1380.259995][ T8167] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1380.275193][ T8167] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1380.290596][ T8167] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1380.392318][ T8167] usb 2-1: config 0 descriptor?? [ 1380.487995][ T8028] usb 3-1: USB disconnect, device number 61 [ 1380.599668][ T8028] usblp0: removed [ 1380.703757][ T8167] usbhid 2-1:0.0: can't add hid device: -71 [ 1380.710338][ T8167] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1380.759000][ T8167] usb 2-1: USB disconnect, device number 56 [ 1380.953531][T14982] usb 8-1: USB disconnect, device number 46 [ 1381.136359][ T9895] udevd[9895]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1381.272347][ T8167] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1381.441023][ T8167] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1381.497145][ T8167] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1381.531239][T15620] syzkaller0: entered promiscuous mode [ 1381.556690][T15620] syzkaller0: entered allmulticast mode [ 1381.572627][ T8167] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1381.612602][ T8167] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1381.670523][ T8167] usb 2-1: config 0 descriptor?? [ 1382.278457][ T8167] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1382.304894][T14982] usb 9-1: USB disconnect, device number 57 [ 1382.332810][ T30] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1382.388463][ C1] plantronics 0003:047F:FFFF.0014: hid_field_extract() called with n (132) > 32! (kworker/1:3) [ 1382.592898][ T30] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 1382.627108][ T30] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1382.701503][ T8167] usb 2-1: USB disconnect, device number 57 [ 1382.712257][ T30] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1382.743070][ T30] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1382.772957][ T30] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1382.821893][ T30] usb 5-1: Product: syz [ 1382.856500][ T30] usb 5-1: Manufacturer: syz [ 1382.892964][ T30] usb 5-1: SerialNumber: syz [ 1382.915067][ T30] usb 5-1: config 0 descriptor?? [ 1382.940133][ T30] hub 5-1:0.0: bad descriptor, ignoring hub [ 1382.946680][ T30] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1382.967136][ T30] usb 5-1: selecting invalid altsetting 0 [ 1383.052214][ T8028] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 1383.229290][T15630] fido_id[15630]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1383.254087][ T8028] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1383.308673][ T8028] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1383.372215][ T8028] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1383.415346][ T8028] usb 9-1: config 0 descriptor?? [ 1383.530897][ T30] usb 5-1: USB disconnect, device number 10 [ 1383.742363][ T8028] usbhid 9-1:0.0: can't add hid device: -71 [ 1383.793765][ T8028] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1383.872339][ T8028] usb 9-1: USB disconnect, device number 58 [ 1383.947613][ T9378] udevd[9378]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1384.339499][ T8028] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 1384.570006][ T8028] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1384.618525][ T8028] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1384.700838][ T8028] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1384.737141][ T8028] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1384.778880][ T8028] usb 9-1: config 0 descriptor?? [ 1384.878575][ T8167] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 1385.099656][ T8167] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 1385.114256][ T8167] usb 5-1: config 0 has no interface number 0 [ 1385.122790][ T8167] usb 5-1: config 0 interface 41 has no altsetting 0 [ 1385.208787][ T8167] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1385.246440][ T8167] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1385.302042][ T8167] usb 5-1: Product: syz [ 1385.306462][ T8167] usb 5-1: Manufacturer: syz [ 1385.311239][ T8167] usb 5-1: SerialNumber: syz [ 1385.361099][ T8028] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1385.409885][ T8167] usb 5-1: config 0 descriptor?? [ 1385.624062][T15662] ======================================================= [ 1385.624062][T15662] WARNING: The mand mount option has been deprecated and [ 1385.624062][T15662] and is ignored by this kernel. Remove the mand [ 1385.624062][T15662] option from the mount to silence this warning. [ 1385.624062][T15662] ======================================================= [ 1385.802146][T14982] usb 9-1: USB disconnect, device number 59 [ 1386.475087][T15666] fido_id[15666]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1386.537308][ T8167] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 1386.674098][ T8167] usb 5-1: USB disconnect, device number 11 [ 1386.972811][T15672] syzkaller0: entered promiscuous mode [ 1387.010599][T15672] syzkaller0: entered allmulticast mode [ 1387.161960][T14982] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 1387.434875][T14982] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1387.482384][T14982] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.491478][T14982] usb 8-1: Product: syz [ 1387.551903][T14982] usb 8-1: Manufacturer: syz [ 1387.556719][T14982] usb 8-1: SerialNumber: syz [ 1387.892834][T14982] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1387.933308][T14982] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 1388.012197][T14982] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1388.099599][T14982] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -32 [ 1388.382498][ T8028] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1388.552157][ T8167] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1388.615156][ T8028] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 1388.640130][ T8028] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1388.674193][ T8028] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1388.697232][ T8028] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1388.731911][ T8028] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1388.740367][ T8028] usb 3-1: Product: syz [ 1388.772038][ T8167] usb 2-1: Using ep0 maxpacket: 32 [ 1388.783654][ T8028] usb 3-1: Manufacturer: syz [ 1388.802049][ T8028] usb 3-1: SerialNumber: syz [ 1388.812271][ T8167] usb 2-1: config 0 has an invalid interface number: 239 but max is 0 [ 1388.846517][ T8028] usb 3-1: config 0 descriptor?? [ 1388.855946][ T8167] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1388.903003][ T8028] hub 3-1:0.0: bad descriptor, ignoring hub [ 1388.916819][ T8167] usb 2-1: config 0 has no interface number 0 [ 1388.932912][ T8028] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1388.942692][ T8167] usb 2-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 1388.981994][ T8167] usb 2-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1388.994861][ T8028] usb 3-1: selecting invalid altsetting 0 [ 1389.021247][ T8167] usb 2-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 1389.081535][ T8167] usb 2-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 1389.131979][ T8167] usb 2-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 1389.177099][ T8167] usb 2-1: config 0 interface 239 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1389.241943][ T8167] usb 2-1: config 0 interface 239 has no altsetting 0 [ 1389.314231][ T8167] usb 2-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 1389.354381][ T8167] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.381960][ T8167] usb 2-1: Product: syz [ 1389.396879][ T8167] usb 2-1: Manufacturer: syz [ 1389.422106][ T8167] usb 2-1: SerialNumber: syz [ 1389.460809][ T8167] usb 2-1: config 0 descriptor?? [ 1389.493786][T15690] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1389.544323][T15690] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1389.593482][ T8028] usb 3-1: USB disconnect, device number 62 [ 1389.828797][T15714] ===================================================== [ 1389.836303][T15714] BUG: KMSAN: uninit-value in batadv_get_vid+0x2ce/0x3b0 [ 1389.843725][T15714] batadv_get_vid+0x2ce/0x3b0 [ 1389.848593][T15714] batadv_interface_tx+0x2e8/0x1dd0 [ 1389.854086][T15714] dev_hard_start_xmit+0x24e/0xad0 [ 1389.859564][T15714] __dev_queue_xmit+0x3412/0x5980 [ 1389.864858][T15714] __bpf_redirect+0x162e/0x1760 [ 1389.869914][T15714] bpf_clone_redirect+0x4a6/0x6c0 [ 1389.875365][T15714] ___bpf_prog_run+0x12af/0xeb60 [ 1389.880578][T15714] __bpf_prog_run512+0xc5/0x100 [ 1389.885751][T15714] bpf_test_run+0x493/0xdf0 [ 1389.890449][T15714] bpf_prog_test_run_skb+0x22a5/0x3050 [ 1389.896294][T15714] bpf_prog_test_run+0x5bb/0x9f0 [ 1389.901429][T15714] __sys_bpf+0x925/0xee0 [ 1389.905902][T15714] __x64_sys_bpf+0xa4/0xf0 [ 1389.910459][T15714] x64_sys_call+0x13d0/0x3ea0 [ 1389.915454][T15714] do_syscall_64+0x134/0xf80 [ 1389.920188][T15714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1389.926419][T15714] [ 1389.928811][T15714] Uninit was created at: [ 1389.933434][T15714] kmem_cache_alloc_node_noprof+0x3cd/0x12d0 [ 1389.939566][T15714] pskb_expand_head+0x2ef/0x1fb0 [ 1389.944854][T15714] skb_ensure_writable+0x44e/0x510 [ 1389.950154][T15714] bpf_clone_redirect+0x301/0x6c0 [ 1389.955470][T15714] ___bpf_prog_run+0x12af/0xeb60 [ 1389.960561][T15714] __bpf_prog_run512+0xc5/0x100 [ 1389.965703][T15714] bpf_test_run+0x493/0xdf0 [ 1389.970342][T15714] bpf_prog_test_run_skb+0x22a5/0x3050 [ 1389.976159][T15714] bpf_prog_test_run+0x5bb/0x9f0 [ 1389.981251][T15714] __sys_bpf+0x925/0xee0 [ 1389.985784][T15714] __x64_sys_bpf+0xa4/0xf0 [ 1389.990332][T15714] x64_sys_call+0x13d0/0x3ea0 [ 1389.995319][T15714] do_syscall_64+0x134/0xf80 [ 1390.000054][T15714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.006260][T15714] [ 1390.008684][T15714] CPU: 0 UID: 0 PID: 15714 Comm: syz.8.2622 Tainted: G L syzkaller #0 PREEMPT(full) [ 1390.020003][T15714] Tainted: [L]=SOFTLOCKUP [ 1390.024499][T15714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1390.034804][T15714] ===================================================== [ 1390.041901][T15714] Disabling lock debugging due to kernel taint [ 1390.048212][T15714] Kernel panic - not syncing: kmsan.panic set ... [ 1390.054749][T15714] CPU: 0 UID: 0 PID: 15714 Comm: syz.8.2622 Tainted: G B L syzkaller #0 PREEMPT(full) [ 1390.065883][T15714] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 1390.071509][T15714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1390.081667][T15714] Call Trace: [ 1390.085021][T15714] [ 1390.088025][T15714] __dump_stack+0x26/0x30 [ 1390.092509][T15714] dump_stack_lvl+0x50/0x1c0 [ 1390.097281][T15714] ? dump_stack+0x12/0x25 [ 1390.101753][T15714] dump_stack+0x1e/0x25 [ 1390.106050][T15714] vpanic+0x7b4/0x1430 [ 1390.110299][T15714] panic+0x15d/0x160 [ 1390.114403][T15714] kmsan_report+0x31a/0x320 [ 1390.119083][T15714] ? __msan_warning+0x1b/0x30 [ 1390.123915][T15714] ? batadv_get_vid+0x2ce/0x3b0 [ 1390.128932][T15714] ? batadv_interface_tx+0x2e8/0x1dd0 [ 1390.134481][T15714] ? dev_hard_start_xmit+0x24e/0xad0 [ 1390.139961][T15714] ? __dev_queue_xmit+0x3412/0x5980 [ 1390.145333][T15714] ? __bpf_redirect+0x162e/0x1760 [ 1390.150477][T15714] ? bpf_clone_redirect+0x4a6/0x6c0 [ 1390.155849][T15714] ? ___bpf_prog_run+0x12af/0xeb60 [ 1390.161107][T15714] ? __bpf_prog_run512+0xc5/0x100 [ 1390.166270][T15714] ? bpf_test_run+0x493/0xdf0 [ 1390.171063][T15714] ? bpf_prog_test_run_skb+0x22a5/0x3050 [ 1390.176900][T15714] ? bpf_prog_test_run+0x5bb/0x9f0 [ 1390.182154][T15714] ? __sys_bpf+0x925/0xee0 [ 1390.186699][T15714] ? __x64_sys_bpf+0xa4/0xf0 [ 1390.191399][T15714] ? x64_sys_call+0x13d0/0x3ea0 [ 1390.196429][T15714] ? do_syscall_64+0x134/0xf80 [ 1390.201334][T15714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.207544][T15714] ? kernel_text_address+0x10e/0x1a0 [ 1390.213103][T15714] ? kmsan_get_metadata+0xf1/0x160 [ 1390.218394][T15714] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1390.224383][T15714] ? kmsan_get_metadata+0xf1/0x160 [ 1390.229847][T15714] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1390.235925][T15714] ? batadv_interface_tx+0x21/0x1dd0 [ 1390.241391][T15714] ? filter_irq_stacks+0x49/0x190 [ 1390.246662][T15714] ? kmsan_get_metadata+0xf1/0x160 [ 1390.251967][T15714] __msan_warning+0x1b/0x30 [ 1390.256638][T15714] batadv_get_vid+0x2ce/0x3b0 [ 1390.261488][T15714] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1390.267516][T15714] batadv_interface_tx+0x2e8/0x1dd0 [ 1390.272917][T15714] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1390.279446][T15714] ? __pfx_batadv_interface_tx+0x10/0x10 [ 1390.285451][T15714] dev_hard_start_xmit+0x24e/0xad0 [ 1390.290783][T15714] __dev_queue_xmit+0x3412/0x5980 [ 1390.295988][T15714] ? skb_release_data+0x107c/0x11b0 [ 1390.301438][T15714] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 1390.307894][T15714] ? kmsan_get_metadata+0xf1/0x160 [ 1390.313275][T15714] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1390.319268][T15714] ? __dev_queue_xmit+0x27a/0x5980 [ 1390.324557][T15714] ? pskb_expand_head+0x1c0e/0x1fb0 [ 1390.329888][T15714] ? kmsan_get_metadata+0xf1/0x160 [ 1390.335204][T15714] __bpf_redirect+0x162e/0x1760 [ 1390.340275][T15714] ? kmsan_get_metadata+0xf1/0x160 [ 1390.345582][T15714] bpf_clone_redirect+0x4a6/0x6c0 [ 1390.350820][T15714] ___bpf_prog_run+0x12af/0xeb60 [ 1390.355935][T15714] __bpf_prog_run512+0xc5/0x100 [ 1390.360951][T15714] ? kmsan_internal_poison_memory+0x78/0x90 [ 1390.367021][T15714] ? kmsan_internal_poison_memory+0x4a/0x90 [ 1390.373085][T15714] ? kmsan_slab_alloc+0xdc/0x160 [ 1390.378211][T15714] ? kmem_cache_alloc_noprof+0x37b/0x1270 [ 1390.384072][T15714] ? slab_build_skb+0x5c/0x5b0 [ 1390.389030][T15714] ? bpf_prog_test_run_skb+0x74d/0x3050 [ 1390.394769][T15714] ? bpf_prog_test_run+0x5bb/0x9f0 [ 1390.400022][T15714] ? __sys_bpf+0x925/0xee0 [ 1390.404577][T15714] ? kmsan_get_metadata+0xf1/0x160 [ 1390.409869][T15714] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1390.415886][T15714] ? bpf_test_run+0xe1/0xdf0 [ 1390.420599][T15714] ? filter_irq_stacks+0x49/0x190 [ 1390.425810][T15714] ? kmsan_get_metadata+0xf1/0x160 [ 1390.431093][T15714] ? kmsan_get_metadata+0xf1/0x160 [ 1390.436388][T15714] ? kmsan_get_metadata+0xf1/0x160 [ 1390.441670][T15714] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1390.448174][T15714] ? kmsan_get_metadata+0x146/0x160 [ 1390.453573][T15714] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1390.459563][T15714] ? __pfx___bpf_prog_run512+0x10/0x10 [ 1390.465184][T15714] ? __pfx___bpf_prog_run512+0x10/0x10 [ 1390.470816][T15714] bpf_test_run+0x493/0xdf0 [ 1390.475442][T15714] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1390.481429][T15714] ? kmsan_get_metadata+0xf1/0x160 [ 1390.486733][T15714] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1390.492778][T15714] ? bpf_test_run+0x2f4/0xdf0 [ 1390.497609][T15714] ? kmsan_get_metadata+0xf1/0x160 [ 1390.502924][T15714] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1390.509274][T15714] bpf_prog_test_run_skb+0x22a5/0x3050 [ 1390.514925][T15714] ? kmsan_get_metadata+0xf1/0x160 [ 1390.520279][T15714] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1390.526271][T15714] bpf_prog_test_run+0x5bb/0x9f0 [ 1390.531377][T15714] __sys_bpf+0x925/0xee0 [ 1390.535799][T15714] __x64_sys_bpf+0xa4/0xf0 [ 1390.540347][T15714] x64_sys_call+0x13d0/0x3ea0 [ 1390.545188][T15714] do_syscall_64+0x134/0xf80 [ 1390.549917][T15714] ? clear_bhb_loop+0x50/0xa0 [ 1390.554747][T15714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.560791][T15714] RIP: 0033:0x7f57f859c799 [ 1390.565307][T15714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1390.585058][T15714] RSP: 002b:00007f57f939b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1390.593612][T15714] RAX: ffffffffffffffda RBX: 00007f57f8815fa0 RCX: 00007f57f859c799 [ 1390.601699][T15714] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1390.609770][T15714] RBP: 00007f57f8632c99 R08: 0000000000000000 R09: 0000000000000000 [ 1390.617835][T15714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1390.625901][T15714] R13: 00007f57f8816038 R14: 00007f57f8815fa0 R15: 00007ffdc54aa5e8 [ 1390.634007][T15714] [ 1390.637375][T15714] Kernel Offset: disabled [ 1390.641797][T15714] Rebooting in 86400 seconds..