last executing test programs: 42m41.315453123s ago: executing program 0 (id=1677): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000100)=0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) epoll_create(0x6) r2 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x10000004}) sendto$inet(r1, 0x0, 0x0, 0x54, &(0x7f0000000340)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0xac, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x80, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}, {0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newnexthop={0x2c, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0x14, 0x2, [{0x1, 0x5}, {0x2, 0xfe}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c00188008000140a080000008000240000000020800034000000002240001801400018008000100e000000108000200e00000010c0002800500010000000000040016404400108008000140fffff800080002400000000108000140ffff1fc5080001400000068708000140000000"], 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x70}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1b8, 0x19, 0x1, 0x70bd2b, 0x1, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @in=@dev={0xac, 0x14, 0x14, 0x36}, 0xfffc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x2}, {0x0, 0x4}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x104, 0x5, [{{@in6=@mcast2, 0x0, 0xff}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0f}, {{@in6=@empty, 0x0, 0x6c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x34}, 0x3507}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x9}, {{@in=@remote, 0x4d3, 0x32}, 0x0, @in=@local, 0x3d01, 0x5, 0x2, 0x0, 0x0, 0x9}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_open_dev$video(0x0, 0x6, 0x400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001800ffff00000000000000000a000000fe00c8070000562c", @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x2048800}, 0x0) syz_clone(0xc0000, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0) r7 = openat$vimc2(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0xffffffffffffff36, 0x5, 0x2b, 0x6, 0x800, 0xb45, 0x9, 0x8, 0x2, 0x3}, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x89882) ioctl$FIBMAP(r8, 0x1, &(0x7f0000000040)=0x85) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f00000000c0)={0x5, 0x1, 0x2}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 42m39.983829688s ago: executing program 0 (id=1680): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000007100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) read$FUSE(r0, &(0x7f000000cdc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r3}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000004940)="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", 0x2000, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002780)="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", 0x2000, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)={0x20, 0x0, 0x9, {0x7, 0x0, 0x3, 0xfff}}, 0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002340)=@updpolicy={0x1f8, 0x19, 0x1, 0x0, 0x10, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, @in=@local, 0x4e21, 0x0, 0xffff, 0x800, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff}, {0x1, 0x0, 0x80}}, [@tmpl={0x144, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x4d3, 0x6c}, 0xa, @in=@private=0xa010102, 0x3502, 0x2, 0x0, 0xf9, 0xd, 0x7, 0xed7}, {{@in6=@mcast1, 0x4d3, 0x32}, 0xa, @in=@local, 0x0, 0x0, 0x0, 0x8, 0x5, 0x10000, 0x48a81209}, {{@in6=@private2, 0x4d2, 0x2b}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3500, 0x4, 0x0, 0x8, 0x7, 0xfffffffb, 0x1000}, {{@in=@multicast1, 0x4d4, 0x2b}, 0x2, @in=@empty, 0x3503, 0x2, 0x1, 0xf, 0x1ff, 0x5, 0x489e}, {{@in=@private=0xa010101, 0x4d3, 0x33}, 0xa, @in=@remote, 0x34ff, 0x1, 0x1, 0x17, 0x80, 0x1, 0x514}]}]}, 0x1f8}}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "00009200000000000000000000000058b200"}) r6 = syz_open_pts(r5, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, 0x0, 0x0) ioctl$TCGETA(r6, 0x5405, &(0x7f00000001c0)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000340)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x0, 0x3, 0xc, 0xfff, 0x2}, 0x20) ioctl$FS_IOC_RESVSP(r1, 0x40086602, &(0x7f0000002740)={0x0, 0xdaff}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2f16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="2a010002000000105804155000000000f2f018bdc427ccef0009040032b35b0064af11a437d5816a438109030000000921810000000032"], 0x0) syz_usb_connect$uac3(0x0, 0xe5, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd3, 0x3, 0x1, 0xa, 0x0, 0x8, {0x8, 0xb, 0x2, 0x2, 0x1, 0x26, 0x30, 0xf0}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x2c, 0x4}, [@extension_unit={0x9, 0x24, 0xa, 0x5, 0x5, [0x2]}, @input_terminal={0x14, 0x24, 0x2, 0x2, 0x1ff, 0x6, 0x5, 0x8, 0xa12, 0xd, 0x9, 0xfff8}, @selector_unit={0x5, 0x24, 0xc, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x10, 0x91, 0x9, {0xa, 0x25, 0x25, 0xb706, 0x4, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x7, 0x9, 0x3, "ea"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x0, 0x7d, 0x5}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x2, 0x1, 0x8, 0x1, "", "dc74"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7fff, 0x0, 0x0, 0x40}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x4, 0x4, 0x1, "7a331bcc"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x3, 0x9, 0x7, "d254e4b224"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x80, 0x6, 0x0, {0xa, 0x25, 0x25, 0x0, 0x2, 0x400}}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x250, 0x8, 0x7, 0x2, 0x40, 0x9}, 0xd9, &(0x7f0000000500)={0x5, 0xf, 0xd9, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x62, "a3bb9f8532fb0bc0dbca44acf5f3651c"}, @generic={0x38, 0x10, 0x8, "b71215071e96447638acf738381144049c48dcc966b5effa265d05be85fda870b8318d4fb6f9e011f40c451da72d2e915028560e88"}, @generic={0x88, 0x10, 0xd1fc370b9d4d180c, "48755e4e689d21acb1bb85d430db0ab685dc5804e7c783562420fe8eb0414234bede3c4a0d61a20e026284f69a60ae256726a3b68ccfe1b9864aacabc60c1af5294b216bbff6f184bf4978275223d6b484afa0e5f67d1215a8872c7a515a33750b06b7a5364ac36b1676ec3ecea885381ecee2730de6a1d3eb893bb6e3defb79165703b8b3"}]}, 0x3, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xc09}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0xf0ff}}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r10 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000004, 0x12, r11, 0x0) ioctl$USBDEVFS_SETINTERFACE(r10, 0x80045510, &(0x7f0000000140)={0x0, 0x7}) syz_usb_control_io$hid(r9, 0x0, 0x0) 42m36.573573452s ago: executing program 0 (id=1687): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x7, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x6000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x2, @empty, 0x8ac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e24, @multicast1}, 0x10) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x3c, @dev={0xac, 0x14, 0x14, 0x15}, 0x4e1e, 0x2, 'lblc\x00', 0x1a, 0x401, 0x27}, 0x2c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @local}}, [0xf, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x40, 0xfffffffffffffffc, 0x1]}, &(0x7f0000000000)=0x100) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="cb17cf", 0x3}], 0x1}}], 0x1, 0x40) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x9, 0x0, 0x3, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0xa, 0x0, 0x10000000000000], 0x10000, 0x286}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000200)={{0x84, @empty, 0x4e21, 0x3, 'lc\x00', 0xc, 0x9, 0x63}, {@private=0xa010102, 0x4623, 0x4, 0x100000cd, 0x12d5f, 0x3}}, 0x44) 42m32.592404921s ago: executing program 0 (id=1692): syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r3, 0x2000000000000153, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x20, 0x1, 0x0, r2, 0x0, 0xfe00}]) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') write$binfmt_format(r4, &(0x7f0000000300)='1\x00', 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdir(0x0, 0x1fc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) fsopen(&(0x7f0000000740)='autofs\x00', 0x0) r5 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 42m28.869482296s ago: executing program 0 (id=1698): r0 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000340)={0x30a32c0, 0x1, @ofdm={0x1, 0x13, 0x15, 0x4, 0x4, 0x2, 0x4}}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = syz_io_uring_setup(0x208e, &(0x7f0000000200)={0x0, 0xcb14, 0x10, 0x3, 0x4001bf}, &(0x7f0000000040), &(0x7f0000000000), 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket(0x2b, 0x80801, 0x1) r3 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x30, 0x1, "", [{{0x9, 0x4, 0x0, 0x58, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x10, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x87, 0x0, 0x1}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000000c0), 0x4) socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$vbi(0x0, 0x0, 0x2) syz_io_uring_setup(0x110, 0x0, 0x0, &(0x7f0000000100), 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e22}, 0x6e) bind$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ptrace(0x10, r4) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="20242e0000002e068307b530f0184b4f32f2d180569a374066cf8a507c201accebfae0b96488538fb103d392c712478f4607b7063ab7db2fdc96fa"], 0x0, 0x0, 0x0, 0x0}, 0x0) 42m26.608900074s ago: executing program 0 (id=1703): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfff3}, {0xfff1, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x2c}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0xa100) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000000)={0x4, 0x0, 0x2, 0x11}) read(r4, &(0x7f0000000100)=""/125, 0x7d) preadv(r4, &(0x7f0000001d80)=[{0x0}, {&(0x7f0000000180)=""/119, 0x77}], 0x2, 0x2, 0xd) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x100}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) write(r1, &(0x7f0000000400)="50db8848", 0x4) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) fchdir(0xffffffffffffffff) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000006d0200000300000022bf00"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r6, 0x0, 0xa002a0}, 0x38) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x0}) 42m25.901530003s ago: executing program 32 (id=1703): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfff3}, {0xfff1, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x2c}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0xa100) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000000)={0x4, 0x0, 0x2, 0x11}) read(r4, &(0x7f0000000100)=""/125, 0x7d) preadv(r4, &(0x7f0000001d80)=[{0x0}, {&(0x7f0000000180)=""/119, 0x77}], 0x2, 0x2, 0xd) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x100}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) write(r1, &(0x7f0000000400)="50db8848", 0x4) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) fchdir(0xffffffffffffffff) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000006d0200000300000022bf00"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r6, 0x0, 0xa002a0}, 0x38) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x0}) 5.298338823s ago: executing program 5 (id=12852): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xb0fc5260caceb9fa, 0x4000010, 0xffffffffffffffff, 0x13e67000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) 4.158757239s ago: executing program 3 (id=12856): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000640)=0xc) setsockopt$inet6_int(r0, 0x29, 0x1, 0x0, 0x0) 4.126959035s ago: executing program 3 (id=12857): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00002c5000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000bff000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1978, &(0x7f0000000040)={0x0, 0xca72, 0x1cc90, 0x0, 0x20002fb}) r1 = socket$inet(0x2, 0x80001, 0x84) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x3, {0x1, 0x0, 0x0, '\x00', {0x9ca7a16b958dcf33, 0x8001, 0xffffffffffffffff, 0xfffffff3, 0x0, 0x0, 0x2000, '\x00', 0xfffffffffffffffe, 0x0, 0xffffffffffffc2f3, 0x0, {0xfffffffffffffffd}, {0x5}, {0x0, 0x4}, {0x5}, 0x61, 0x0, 0x7fff}}}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.046851031s ago: executing program 3 (id=12859): socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) syz_usb_disconnect(0xffffffffffffffff) r0 = socket(0x2, 0x3, 0xff) sendto$inet(r0, 0x0, 0x14, 0xc0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x8}}, 0x10) alarm(0x9) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='vegas', 0x5) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff080000080000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(r1, &(0x7f0000000240)="c9", 0x1, 0x4044880, 0x0, 0x0) 3.863573161s ago: executing program 5 (id=12862): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000a80)=""/188, 0xba) syz_usb_disconnect(r1) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)) 3.161017796s ago: executing program 2 (id=12864): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x102100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188f7b62aa73f72cc9f0ba1f8483700000000010000000000000e000a00", 0x24}], 0x1}, 0x4800) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x20004894}, 0x20000080) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0x6e0, 0x0, 0x400000000000000}]}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r5, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r5], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x24004050) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 2.654523301s ago: executing program 3 (id=12868): socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0xff) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) socket(0xa, 0x3, 0xff) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x4080000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x8a001, 0x0, 0x32}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', 0x2200, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.bfq.dequeue\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYBLOB='\a'], 0x0) 2.632438504s ago: executing program 4 (id=12869): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x21, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) epoll_create1(0x80000) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYRES16=r1], 0x3c}, 0x1, 0x8000a0ffffffff, 0x0, 0x8086}, 0x0) 2.561898632s ago: executing program 4 (id=12870): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) io_setup(0x4, &(0x7f00000014c0)=0x0) r1 = syz_open_procfs(0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r1, 0x0}]) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x2008800, &(0x7f00000010c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 2.43739774s ago: executing program 4 (id=12871): socket(0x10, 0x803, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182) sendfile(r0, r0, 0x0, 0x24002de8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xec37, 0x40024}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10005}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x24004004) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) r2 = socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x1000, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000000)) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r2, r4, 0x0) write(r0, &(0x7f0000000ac0)="262100002cea7cb00c020100020880038005000000000000000000000000000000000000000000000000000000000000000000fa764b3f5788b7ccd3c92a6a728e47082074ce8a70e6ead96bf8c1728d6287ac97b60d4f55ce0f6e18852c625200e891aafd09f855f38299ef26ba6604aa0f19bf71cc0ff62d912a23e6f87bc45c68972e59845432e800000000000000000004cf41327a91f9b9d16b7ea05262aa3d650a9646f51ecb08caae8b682ba38ef3f20aa36d4df9f5bc432361806bf8440a5702b1aed52e48acee5cb28e", 0xce) 2.223384571s ago: executing program 4 (id=12872): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b7060000000000012e400300000000006506020001cd00007118bf1400000000c3640000000000006b0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e6191a12bebf9f9804ea033388cd15b65877ad4b200000000000000000beca090f32050e436fe275daf51efd601b6bf01c8e8b1abe4fef3bef7074815ae98743d1ace4c46631256dd19aed0d600c0b6199fe3ff3128e599b0eaebbdbd7359a48f5b0afc3996792043a6787bac46aa7aa400000000000069669622208266f896ba2c9e73c2efeec2dc565fbafb2cb63f5fef9ab79ff8abaa8a08f54a062107e9bb3e980fff675c8d3e91df6648a7a6aebcb63e0867b75690152af27711f0cbb9c06018d21bf3f87b8eb65323b4267a526d53442db8e48dbc5ce47d67d07441a7975d5e41b14fd0154a8246249952a8b61633ce068220defe09d3b1136af6d03e9cf996c13d1bfcdc54567a9ca80dec2e943fe4ae7c617cc071f7add70cfbd48f8f6b50fe6a8297d88efa73e7e601040000b4a685969f28902bdecf66ef39755de79ed2c711477febc96231a53984d00877301d0ec62427a8e38618fdd1ce9aaed569ebc5f2e58d6028e66139a737cc7146a131d47dcebb32ed67021d76e983223c998aec22242ae54e87f438d26982876b58f9134366952f7399a733f07138a736924f3709000000e97f0c117ec439c6b7b965752bbc06eced08d97a32ae4b1ad4d11c5b6f68ee841975233e4cea13f3ef04b2cab9cc256d4539dbafd888c7097c1169e0bebcc81ca3da40bf34b6c9c1da2d6ed8acaf2a8091820ff4cf6be74ddca8bf2eed0e11b2139e8c3ec95436af5269d5792decda7d8b5dcf8640b504ba23c6d0a7f67cdfd27328100ebf9319a56f0f9cee17deecf747f3493f1dc39551f4c9a40b3e93fa80b8234ccbf39a9ef09bd97321f0dc20956f44ba2c5ec2e7569b05cf4690ddc189f174046a8b214acf23f42fb51ed4819e6b4cb5a8bf2b559d0c198fe0315483b8beb9801d06c58b22dd713fe3b7ef18e21081aacfd091b754125a488cea18255f79bebcb3051f622f8a1d9af1908e88a58774a24f35a4ccdbedea6212286c23dd89c2b4b90647f17231472af8dda7f3ab20f093aad3ce875f7458039ee6d0a50deb7bc8eb393f056a5e7725531c5485278e0362338e2e2710fe00465e0d182a322091022cf5b814eeb9b3cab21196581e4d92d0b6fe5525285eea359274f1f21d69233bbe94941f10ba292100000000000000000000000000000000c18e93a0c5231779f2ee201e9fe7e63e84b57b5f05ecd278919bad330ffcb594b8255b3085b352ca9533d6c31c1a30158c30352f8a126a65cb6582e58aa641007418611df53a601c3a8fb8d2286e86abf98136f345446730f68f5d6d1817a9e1b09e5650d2599fbe719a45337d29eb3fef5f7f565457660dec6fe903a1c2ea4f40a8ea1c179892afa219fc69a44163f0d731de418e9fd82a8c4661caea674b19242d1840d047882f640ea248457288c5ffb63e857da03ff5c0475c3cfff41c4806f1dc750eb1c45ec3a2a0b064834010604d6f88a29e8e9bda2bc9c18d1b53a08f25d62ccaa46bc0235c830a7b3fe64bc6031b431bcad6b698a1ba6027870ea9e55fafbbf140c5f82a33ee4ac793b989c12a5827a7957f4d8136cf918b7cbf5bc5fc64c8001992536584586edded6f65bdd371ac84fd5cc60ab79b84e9e85a1c54d5666a5d133e95eff121621dff14b9de7a188b8c5387f9da63c2cce405bc44079e34e2db2b275bfbb54841d647338cad74be91144b780cf381a6860f641446ef73bd11d45f5e4df8f3c6440d8425fd7382225cf8c2cada01bf3cd5cbc6a403173e0c89a491c75efc3c21b7825a521c6011945eef94abc3000000000000000000000000000000d71b794e9b4c145caf050429937eef4364d9e1cbe9150bccd9b2e73757f1f5e8ac50736cd3cbc029ede2869642841371bb4b9c1aaa8826889a909e6716b60e4b568b6761f8ccc7d35b0e66357746b10fc481b47e67f1e14408c1ef3e018a5e647e3f607654f3bf82bcfb42be038a272d82f8362944f608b3810000000019fda0b1b607f1ab34194ed954973f7a5accc0938d3364ab07574d0b32fc30f3ab73d012b63ee905e98ab6989ec2c840cd216eb18fedfb3b204e94e170bae930660368d3799c9b1bf7556ac57164966791626f06ad2e332341965f72141ec140b80efd7720ccdaa890b79bc4523386bd66553121543c9a35b7adcf2f6b257fefef1d6e1da2ee94d3f822bf45aad21e5b5a3788ab584090664065af39b0f43968dcd7c5f8e5a8dc6298691423fbf7e8e012260bc62f9422434a547ef7ca37953d435098d9b71edd1a03e46d0ade465d0c0db0a51f9e29cac05e5a04f94e"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r0, 0xffffffffffffffff, 0x18}, 0x14) 2.186991636s ago: executing program 4 (id=12873): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="600e0f000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.967726011s ago: executing program 5 (id=12874): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="040028bd7000ffdbdf252000", @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x44850) syz_emit_ethernet(0x56, &(0x7f00000004c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0xff, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x8, 0x11, 0x1000, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x1, 0x5}]}}}}}}}}, 0x0) 1.907566875s ago: executing program 5 (id=12875): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x5b) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000100), &(0x7f00000001c0)=0x8) read$watch_queue(r0, &(0x7f00000002c0)=""/1, 0x1) keyctl$revoke(0x3, r4) ioctl$OCFS2_IOC_GROUP_EXTEND(r5, 0x40046f01, &(0x7f0000000200)=0x1) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fsopen(&(0x7f0000000000)='nfs4\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[]) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000d80)) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$vhost_msg_v2(r6, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/116, 0x74, 0x0, 0x1, 0x2}}, 0x48) write(r0, &(0x7f0000000180)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=n', 0x31) 1.641791645s ago: executing program 1 (id=12876): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x22080, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0xffff, 0x0, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2}, 0x50) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0], 0x1, 0x800}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000032073797a6b616c6c65723000001800128008000100767266000c000280080001"], 0x48}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 1.584236764s ago: executing program 1 (id=12877): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff5656d, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0x1, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x5, [0x5, 0xb, 0x0, 0x5, 0xe, 0x9, 0xf, 0xc, 0xf, 0xd, 0x10, 0x0, 0xf, 0x4, 0xe, 0x9], 0x1, [0x557, 0x1, 0xb10, 0xd1, 0x4, 0xfff8, 0xc, 0x0, 0x1, 0x40, 0x8, 0xcf7, 0x4, 0x7, 0x8de, 0xa], [0x1, 0x5, 0x6, 0x4, 0x5, 0xc969, 0x5, 0x0, 0x0, 0xef2, 0x7fff, 0x1, 0xfff, 0x7, 0x3eb, 0xc]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4040}, 0x44890) 1.461904064s ago: executing program 1 (id=12878): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000040)={0x18, 0x1, 0x0, {0x8}}, 0x18) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000000c0)=0x2001) r2 = socket$inet6(0xa, 0x3, 0x2c) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x0, 0x150, 0x150, 0x258, 0xf8010000, 0x338, 0x238, 0x238, 0x338, 0x238, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x258, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [0x4e22], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], 0x0, [], 0x0, 0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00', {}, {}, 0x29}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x6}, {0x1, 0x3, 0x3}, {0x2, 0x3, 0x2}, 0x9, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) memfd_create(&(0x7f0000000480)='[tP\vx\'\xa5)\x1a\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\x01\x00\x1c\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb:(\xb5\xe1jW\xd6\x91\x82\t%\x80|\xa0\x8ez\xadT\xc0\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\x16\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x99\x83\xcd\b\xd1\x02B\xae\x80z8Z\xd2}\xf5\xe4\x9f5\x9b7\xaf\xb7o\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd', 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f"], 0x7c}, 0x1, 0x0, 0x0, 0x4c094}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a010400000000000000000200ffff600004803c0001800e000100696d6d6564696174650000002800028008000140000000001c000280180002800900020073797a320000000008000180fffffffd20000180070001007274000014000280080002400000000408000140000000030900010073797a30000000"], 0xc8}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) openat$cgroup_procs(r4, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xb3, 0x0, &(0x7f0000000600)="e3ef7f090000ec6783b4241544940000000000000000000000000033a42c9550f50ac311e0f0544b00aab05450dc23d998e6f578af3a439e1432fa00228f11b0f472aeeb58d909c56270d30b5b85617a3c907c8ea9f1a44b2bc30ed6239eb52ee012b4c3e1932680b192d2d613e4301940d6312a6faff570879d2f1b517251ee5473a94bfd82980a9a880700d5f059a6b7bb7b6a9787136a408914de373597695c519462765a1138c2e8b63a83b661cfff41ed", 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7}, 0x50) syz_open_dev$sg(&(0x7f0000000240), 0x9, 0x408002) open$dir(&(0x7f0000000000)='./file0\x00', 0x101000, 0x110) 1.393850499s ago: executing program 1 (id=12879): socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) syz_usb_disconnect(0xffffffffffffffff) r0 = socket(0x2, 0x3, 0xff) sendto$inet(r0, 0x0, 0x14, 0xc0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x8}}, 0x10) alarm(0x9) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='vegas', 0x5) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff080000080000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(r1, &(0x7f0000000240)="c9", 0x1, 0x4044880, 0x0, 0x0) 1.314959978s ago: executing program 2 (id=12880): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000640)=0xc) setsockopt$inet6_int(r0, 0x29, 0x1, 0x0, 0x0) 1.286472326s ago: executing program 2 (id=12881): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) 1.246535661s ago: executing program 3 (id=12882): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000180), 0x2, 0x862b01) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f00000003c0)={0x0, 0x0, 0x7ff, {0xffff, 0x1}, {0x45, 0xfbfe}, @ramp={0x6, 0x6, {0x7b, 0x0, 0x5, 0x7}}}) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4a) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r3, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x0, 0x91, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110", 0x2}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000800}, 0x40000010) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000000406010100000000000000000300000505000100070000000900020077797a31000000000900020073797a3200"], 0x34}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000084) r5 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r5, 0x41, 0x1ff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r6, &(0x7f0000004280)={0x2020}, 0x2020) syz_fuse_handle_req(r6, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r6, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20842, 0x110) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000020, 0x11, r7, 0xa64c000) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r8, 0x0, 0x21, &(0x7f0000000000)=0xffffffff, 0x4) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x3, 0x2) 1.207654876s ago: executing program 2 (id=12883): r0 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x78}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r2, &(0x7f00000001c0)={0x11, 0x0, r4, 0x1, 0x2, 0x6, @broadcast}, 0x14) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f0000000280000012", 0x2d}], 0x1}, 0x0) 1.079302637s ago: executing program 2 (id=12884): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x8, 0x4bd, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 973.319952ms ago: executing program 5 (id=12885): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="040028bd7000ffdbdf252000", @ANYBLOB="7311e738489f0c0099002b0a0000267e720042087ec9bfecfe7bcfadb0aaf9a5293c1f6dad441e05ecc439c3769bb05db34ed36cf41b32511b8c501abd020c5869c48d85f5d5805c8361166ae2e85ac3fe4d2c73397a244fa44d313439c40a8071405df84991cc18ce246ed6c5d2651a675c60c216ffe278d4f733e10608c971c8f1565a4ff6dabfda2469d8f578cddd7e78170017ff942e5c76161d13727bfd72b4c6430786ace86e1ca8adb5fcfb789f66266afcbf1b8b8ff3e069afbc5318d4049cdc27a0f764f8f0d17d1e85bcda2be5b1931b5a543ada40551d9859b749b76ada4cb4214d7564fad0eaeb6d77068cc48ffba0173d3aed0f2f5054"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x44850) syz_emit_ethernet(0x56, &(0x7f00000004c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0xff, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x8, 0x11, 0x1000, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x1, 0x5}]}}}}}}}}, 0x0) 903.740339ms ago: executing program 5 (id=12886): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x8, "", [{{0x9, 0x4, 0x0, 0xfc, 0xdf, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x81, 0x3f, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0xc1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="20082b0000002b21c263138526792c3cbdeace918d0fb74237cc6e446c4e88e7"], 0x0, 0x0, 0x0, 0x0}, 0x0) 851.853025ms ago: executing program 2 (id=12887): syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000440)="90e7", 0x2}, {0x0}, {&(0x7f00000002c0)="d6a5a87479c1f4b466100d1c655210006555e3e974fdb971b60fe5960bcd802fe3f7da93acf4e6414158438095dc8ca02f5134d635bfc8e5c5704af7e46dd4506719ff2fc92cc098786865efc9ab3fd66cee", 0x52}], 0x3) 622.752273ms ago: executing program 1 (id=12888): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121301, 0x0) r0 = gettid() r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x3a2, 0x0) preadv(r2, &(0x7f0000000580)=[{&(0x7f0000000000)=""/42, 0x2a}], 0x1, 0x7, 0x800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_gettime(r3, &(0x7f0000000000)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000000d0a010800000000000000000100fffe0900020073797a31000000000900010073797a30000000001d9c00dbde95d6cf8db7625a9b348db686d6a264629b5e48c53fecf3dd677c3b90c99ea605edff29c220bc30a7cdef04c99fca8216f53e40a77e3ce47f3e836725e0d4c5e378e828"], 0x2c}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00004c2000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000150000/0x1000)=nil, &(0x7f0000b21000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00004c2000/0x1000)=nil, &(0x7f000069c000/0x2000)=nil, &(0x7f0000184000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) unshare(0x40400) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r4, &(0x7f00000000c0)='2\x00', 0x2) 250.741763ms ago: executing program 3 (id=12889): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f0000000240)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') close_range(r0, 0xffffffffffffffff, 0x0) 48.599212ms ago: executing program 4 (id=12890): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_NH4={0x8, 0x4, @loopback}}, @NHA_FDB={0x4}]}, 0x28}}, 0x4004) 0s ago: executing program 1 (id=12891): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x102100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188f7b62aa73f72cc9f0ba1f8483700000000010000000000000e000a00", 0x24}], 0x1}, 0x4800) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x20004894}, 0x20000080) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0x6e0, 0x0, 0x400000000000000}]}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r5, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r5], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x24004050) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) kernel console output (not intermixed with test programs): 4] usb 5-1: USB disconnect, device number 44 [ 3280.404315][T10917] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3280.423044][T10917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3280.432578][T10917] usb 3-1: Product: syz [ 3280.440616][T10917] usb 3-1: Manufacturer: syz [ 3280.448268][T10917] usb 3-1: SerialNumber: syz [ 3280.467573][ T5982] Bluetooth: hci2: command 0x2016 tx timeout [ 3280.478851][T24895] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 3280.506334][T10917] usb 3-1: 0:2 : does not exist [ 3280.635476][T24895] usb 6-1: device descriptor read/64, error -71 [ 3280.707218][T10917] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 3280.756706][T24895] usb usb6-port1: attempt power cycle [ 3280.774433][T10917] usb 3-1: USB disconnect, device number 30 [ 3280.845230][ T8811] udevd[8811]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3281.115721][T24895] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 3281.146016][T24895] usb 6-1: device descriptor read/8, error -71 [ 3281.300611][T18235] __nla_validate_parse: 5 callbacks suppressed [ 3281.300630][T18235] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12251'. [ 3281.307427][T10917] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 3281.337301][T18235] veth11: entered promiscuous mode [ 3281.378353][T18238] veth10: entered allmulticast mode [ 3281.385378][T24895] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 3281.408520][T24895] usb 6-1: device descriptor read/8, error -71 [ 3281.486518][T10917] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 3281.498076][T10917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3281.510052][T10917] usb 5-1: config 0 descriptor?? [ 3281.526239][T24895] usb usb6-port1: unable to enumerate USB device [ 3281.537041][T10917] cp210x 5-1:0.0: cp210x converter detected [ 3281.655664][ T6048] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 3281.785637][T10922] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 3281.805488][ T6048] usb 4-1: Using ep0 maxpacket: 32 [ 3281.811620][ T6048] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 3281.840356][ T6048] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 3281.848649][ T6048] usb 4-1: config 0 has no interface number 0 [ 3281.867260][ T6048] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3281.885431][ T6048] usb 4-1: Product: syz [ 3281.889644][ T6048] usb 4-1: Manufacturer: syz [ 3281.894246][ T6048] usb 4-1: SerialNumber: syz [ 3281.909492][ T6048] usb 4-1: config 0 descriptor?? [ 3281.927835][ T6048] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 3281.939049][T10917] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 3281.950634][T10917] cp210x 5-1:0.0: failed to get vendor val 0x370c size 73: -32 [ 3281.961380][T10917] cp210x 5-1:0.0: GPIO initialisation failed: -32 [ 3281.965582][T10922] usb 3-1: Using ep0 maxpacket: 16 [ 3281.973948][T10917] usb 5-1: cp210x converter now attached to ttyUSB0 [ 3281.982382][T10922] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 3281.986957][T10917] usb 5-1: USB disconnect, device number 45 [ 3282.002605][T10917] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 3282.008536][T10922] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3282.013033][T10917] cp210x 5-1:0.0: device disconnected [ 3282.026391][T10922] usb 3-1: config 0 has no interfaces? [ 3282.037716][T10922] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 3282.046116][T10922] usb 3-1: Product: syz [ 3282.050337][T10922] usb 3-1: Manufacturer: syz [ 3282.054980][T10922] usb 3-1: SerialNumber: syz [ 3282.062518][T10922] usb 3-1: config 0 descriptor?? [ 3282.130459][ T6048] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 3282.142661][ T6048] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 3282.278522][T10917] usb 3-1: USB disconnect, device number 31 [ 3282.331635][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 3282.339911][ T6048] usb 4-1: USB disconnect, device number 37 [ 3282.349399][ T6048] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 3282.364775][ T6048] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 3282.378637][ T6048] quatech2 4-1:0.51: device disconnected [ 3282.652618][T18250] loop5: detected capacity change from 0 to 7 [ 3282.659768][T18250] Dev loop5: unable to read RDB block 7 [ 3282.665537][T18250] loop5: unable to read partition table [ 3282.671354][T18250] loop5: partition table beyond EOD, truncated [ 3282.678454][T18250] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 3283.102456][T18269] netlink: 'syz.5.12267': attribute type 10 has an invalid length. [ 3283.122747][T18269] 8021q: adding VLAN 0 to HW filter on device team0 [ 3283.133998][T18269] bond0: (slave team0): Enslaving as an active interface with an up link [ 3283.135860][ T6048] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 3283.295388][ T6048] usb 3-1: Using ep0 maxpacket: 8 [ 3283.301198][ T6048] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3283.311996][ T6048] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 3283.323355][ T6048] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 3283.333526][ T6048] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3283.343524][ T6048] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3283.356879][ T6048] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3283.435429][T24895] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 3283.435485][T10922] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 3283.495404][T10917] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 3283.571293][ T6048] usb 3-1: GET_CAPABILITIES returned 0 [ 3283.577106][ T6048] usbtmc 3-1:16.0: can't read capabilities [ 3283.595914][T24895] usb 4-1: Using ep0 maxpacket: 32 [ 3283.604776][T24895] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 3283.615024][T10922] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 3283.616040][T24895] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3283.634773][T24895] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3283.635799][T10922] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3283.646589][T24895] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3283.664235][T10917] usb 5-1: Using ep0 maxpacket: 8 [ 3283.666136][T10922] usb 6-1: config 0 descriptor?? [ 3283.669805][T24895] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 3283.687714][T24895] usb 4-1: config 0 interface 0 has no altsetting 0 [ 3283.690010][T10922] cp210x 6-1:0.0: cp210x converter detected [ 3283.694402][T24895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3283.708814][T10917] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 3283.722616][T24895] usb 4-1: config 0 descriptor?? [ 3283.728129][T10917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3283.736356][T10917] usb 5-1: Product: syz [ 3283.740597][T10917] usb 5-1: Manufacturer: syz [ 3283.748677][T10917] usb 5-1: SerialNumber: syz [ 3283.761350][T10917] usb 5-1: config 0 descriptor?? [ 3283.781776][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 3283.791124][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 3283.800454][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 3283.817305][ T6048] usb 3-1: USB disconnect, device number 32 [ 3283.971879][T10917] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 3284.090322][T10922] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 3284.098571][T10922] cp210x 6-1:0.0: failed to get vendor val 0x370c size 73: -32 [ 3284.106473][T10922] cp210x 6-1:0.0: GPIO initialisation failed: -32 [ 3284.120662][T10922] usb 6-1: cp210x converter now attached to ttyUSB0 [ 3284.132739][T10922] usb 6-1: USB disconnect, device number 18 [ 3284.142479][T10922] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 3284.151547][T10922] cp210x 6-1:0.0: device disconnected [ 3284.362292][T24895] usbhid 4-1:0.0: can't add hid device: -71 [ 3284.371245][T24895] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 3284.383462][T24895] usb 4-1: USB disconnect, device number 38 [ 3284.580929][T10917] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 3284.595200][T10917] usb 5-1: USB disconnect, device number 46 [ 3284.595467][T10922] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 3284.680956][T18279] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12272'. [ 3284.708165][T18281] loop5: detected capacity change from 0 to 7 [ 3284.716443][T18281] Dev loop5: unable to read RDB block 7 [ 3284.726869][T18281] loop5: unable to read partition table [ 3284.733135][T18281] loop5: partition table beyond EOD, truncated [ 3284.733491][T18279] veth17: entered promiscuous mode [ 3284.740288][T10922] usb 3-1: device descriptor read/64, error -71 [ 3284.751962][T18281] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 3284.823254][T18282] veth16: entered allmulticast mode [ 3284.995808][T10922] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 3285.085117][T18298] syzkaller0: entered promiscuous mode [ 3285.091059][T18298] syzkaller0: entered allmulticast mode [ 3285.135486][T10922] usb 3-1: device descriptor read/64, error -71 [ 3285.198166][T18304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12282'. [ 3285.210816][T18304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12282'. [ 3285.256276][T10922] usb usb3-port1: attempt power cycle [ 3285.505831][T10917] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 3285.605518][T10922] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 3285.646092][T10922] usb 3-1: device descriptor read/8, error -71 [ 3285.676390][T10917] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 3285.688597][T10917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3285.699894][T10917] usb 5-1: config 0 descriptor?? [ 3285.713175][T10917] cp210x 5-1:0.0: cp210x converter detected [ 3285.820906][T18312] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12285'. [ 3285.847775][T18312] ip6erspan0: entered allmulticast mode [ 3285.885693][T10922] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 3285.906907][T10922] usb 3-1: device descriptor read/8, error -71 [ 3286.025676][T10922] usb usb3-port1: unable to enumerate USB device [ 3286.121117][T10917] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 3286.129630][T10917] cp210x 5-1:0.0: failed to get vendor val 0x370c size 73: -32 [ 3286.143365][T10917] cp210x 5-1:0.0: GPIO initialisation failed: -32 [ 3286.160569][T10917] usb 5-1: cp210x converter now attached to ttyUSB0 [ 3286.182417][T10917] usb 5-1: USB disconnect, device number 47 [ 3286.203796][T10917] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 3286.224736][T10917] cp210x 5-1:0.0: device disconnected [ 3286.283406][T18319] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12288'. [ 3286.334432][T18319] veth17: entered promiscuous mode [ 3286.365799][T18319] veth16: entered allmulticast mode [ 3286.556687][T18329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12291'. [ 3286.581329][T18329] bond4 (unregistering): Released all slaves [ 3286.633667][T18331] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 3286.646417][T18331] bond4 (unregistering): Released all slaves [ 3286.786427][T18336] syzkaller0: entered promiscuous mode [ 3286.791919][T18336] syzkaller0: entered allmulticast mode [ 3286.914995][T18334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12293'. [ 3286.977663][T18340] loop5: detected capacity change from 0 to 7 [ 3286.986264][T18340] Dev loop5: unable to read RDB block 7 [ 3286.992129][T18340] loop5: unable to read partition table [ 3286.998205][T18340] loop5: partition table beyond EOD, truncated [ 3287.004411][T18340] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 3287.064646][T18342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12297'. [ 3287.077391][T18342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12297'. [ 3287.113748][T18344] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12298'. [ 3287.149498][T18346] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12299'. [ 3287.192015][T18346] veth15: entered promiscuous mode [ 3287.224983][T18346] veth14: entered allmulticast mode [ 3287.443168][T18357] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12303'. [ 3287.558317][T18362] syzkaller0: entered promiscuous mode [ 3287.564189][T18362] syzkaller0: entered allmulticast mode [ 3287.570843][T18364] loop5: detected capacity change from 0 to 7 [ 3287.579356][T18364] Dev loop5: unable to read RDB block 7 [ 3287.585029][T18364] loop5: unable to read partition table [ 3287.591470][T18364] loop5: partition table beyond EOD, truncated [ 3287.598306][T18364] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 3287.701688][T18366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12309'. [ 3287.714278][T18366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12309'. [ 3287.792862][T18374] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12312'. [ 3287.833974][T18374] veth11: entered promiscuous mode [ 3287.880281][T18376] veth10: entered allmulticast mode [ 3287.933143][T18378] netlink: 'syz.1.12313': attribute type 10 has an invalid length. [ 3287.944519][T18378] 8021q: adding VLAN 0 to HW filter on device team0 [ 3287.955004][T18378] bond0: (slave team0): Enslaving as an active interface with an up link [ 3287.956596][T10917] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 3288.126091][T10917] usb 6-1: Using ep0 maxpacket: 16 [ 3288.135747][T10917] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 3288.160368][T10917] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3288.171721][T10917] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3288.181627][T10917] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 3288.196246][T10917] usb 6-1: config 0 interface 0 has no altsetting 0 [ 3288.206375][T10917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3288.230405][T10917] usb 6-1: config 0 descriptor?? [ 3288.256557][T24895] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 3288.405634][T24895] usb 3-1: device descriptor read/64, error -71 [ 3288.583442][T18396] loop5: detected capacity change from 0 to 7 [ 3288.626442][T18396] Dev loop5: unable to read RDB block 7 [ 3288.636065][T18396] loop5: unable to read partition table [ 3288.652020][T18396] loop5: partition table beyond EOD, truncated [ 3288.665527][T24895] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 3288.665540][T18396] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 3288.810109][T18398] syzkaller0: entered promiscuous mode [ 3288.823112][T18398] syzkaller0: entered allmulticast mode [ 3288.863410][T24895] usb 3-1: device descriptor read/64, error -71 [ 3288.886560][T10674] usb 6-1: USB disconnect, device number 19 [ 3288.975764][T24895] usb usb3-port1: attempt power cycle [ 3289.325468][T24895] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 3289.356203][T24895] usb 3-1: device descriptor read/8, error -71 [ 3289.605895][T24895] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 3289.636162][T24895] usb 3-1: device descriptor read/8, error -71 [ 3289.757722][T24895] usb usb3-port1: unable to enumerate USB device [ 3289.773067][T18413] veth17: entered promiscuous mode [ 3289.788242][T18415] netlink: 'syz.3.12326': attribute type 10 has an invalid length. [ 3289.808591][T18413] bond5: (slave veth17): Enslaving as an active interface with an up link [ 3289.849169][T18411] veth18: entered allmulticast mode [ 3289.900267][T18411] bond5: (slave veth19): Enslaving as an active interface with an up link [ 3289.937430][T18415] 8021q: adding VLAN 0 to HW filter on device team0 [ 3289.952969][T18415] bond0: (slave team0): Enslaving as an active interface with an up link [ 3289.983218][T18413] bond5: entered promiscuous mode [ 3290.005584][T18413] veth19: entered promiscuous mode [ 3290.018583][T18413] bond5: entered allmulticast mode [ 3290.035532][T18413] veth17: entered allmulticast mode [ 3290.050821][T18413] veth19: entered allmulticast mode [ 3290.071063][T18413] 8021q: adding VLAN 0 to HW filter on device bond5 [ 3290.335109][T18423] bond4 (unregistering): Released all slaves [ 3290.365393][T24895] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 3290.407653][T18425] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 3290.426534][T18425] bond4 (unregistering): Released all slaves [ 3290.556125][T24895] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 3290.573091][T24895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3290.586842][T24895] usb 4-1: config 0 descriptor?? [ 3290.604568][T24895] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 3291.089357][T18433] loop5: detected capacity change from 0 to 7 [ 3291.097589][T18433] Dev loop5: unable to read RDB block 7 [ 3291.103278][T18433] loop5: unable to read partition table [ 3291.117863][T18433] loop5: partition table beyond EOD, truncated [ 3291.125606][T10917] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 3291.126140][T18433] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 3291.144575][T18435] syzkaller0: entered promiscuous mode [ 3291.150443][T18435] syzkaller0: entered allmulticast mode [ 3291.224197][T24895] usb 4-1: USB disconnect, device number 39 [ 3291.297861][T10917] usb 6-1: Using ep0 maxpacket: 16 [ 3291.310511][T10917] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3291.331446][T10917] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3291.342210][T10917] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3291.353735][T10917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3291.362312][T10917] usb 6-1: Product: syz [ 3291.366853][T10917] usb 6-1: Manufacturer: syz [ 3291.371477][T10917] usb 6-1: SerialNumber: syz [ 3291.390424][T10917] usb 6-1: 0:2 : does not exist [ 3291.596185][T10917] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 3291.658062][T10917] usb 6-1: USB disconnect, device number 20 [ 3291.703912][ T8811] udevd[8811]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3291.833211][T18449] __nla_validate_parse: 1 callbacks suppressed [ 3291.833233][T18449] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12338'. [ 3292.394552][T18463] netlink: 48 bytes leftover after parsing attributes in process `syz.4.12344'. [ 3292.450390][T18465] loop5: detected capacity change from 0 to 7 [ 3292.457989][T18465] Dev loop5: unable to read RDB block 7 [ 3292.463624][T18465] loop5: unable to read partition table [ 3292.473542][T18465] loop5: partition table beyond EOD, truncated [ 3292.480187][T18465] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 3292.495443][T10917] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 3292.505681][T10922] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 3292.655994][T10922] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 3292.665672][T10922] usb 3-1: no configurations [ 3292.670394][T10922] usb 3-1: can't read configurations, error -22 [ 3292.675323][T10917] usb 6-1: Using ep0 maxpacket: 32 [ 3292.696712][T10917] usb 6-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 3292.707859][T10917] usb 6-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 3292.719695][T10917] usb 6-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 3292.732999][T10917] usb 6-1: config 0 interface 0 has no altsetting 0 [ 3292.740863][T10917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3292.752803][T10917] usb 6-1: config 0 descriptor?? [ 3292.806665][T10922] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 3292.976753][T10922] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 3292.986699][T10922] usb 3-1: no configurations [ 3292.991328][T10922] usb 3-1: can't read configurations, error -22 [ 3292.998266][T10922] usb usb3-port1: attempt power cycle [ 3293.043127][T18475] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12349'. [ 3293.187952][T10917] usbhid 6-1:0.0: can't add hid device: -71 [ 3293.194753][T10917] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 3293.205993][T10917] usb 6-1: USB disconnect, device number 21 [ 3293.325393][T24895] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 3293.345495][T10922] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 3293.366615][T10922] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 3293.375902][T10922] usb 3-1: no configurations [ 3293.380506][T10922] usb 3-1: can't read configurations, error -22 [ 3293.476252][T24895] usb 4-1: Using ep0 maxpacket: 16 [ 3293.484867][T24895] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 3293.496825][T24895] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3293.507330][T24895] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 3293.515505][T10922] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 3293.519756][T24895] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 3293.532092][T24895] usb 4-1: Product: syz [ 3293.536435][T24895] usb 4-1: Manufacturer: syz [ 3293.541216][T24895] usb 4-1: SerialNumber: syz [ 3293.547017][T10922] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 3293.556474][T10922] usb 3-1: no configurations [ 3293.560845][T24895] usb 4-1: config 0 descriptor?? [ 3293.561099][T10922] usb 3-1: can't read configurations, error -22 [ 3293.574822][T10922] usb usb3-port1: unable to enumerate USB device [ 3293.781970][ T6258] usb 4-1: USB disconnect, device number 40 [ 3293.925393][T24895] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 3293.985939][T10917] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 3294.085424][T24895] usb 5-1: Using ep0 maxpacket: 16 [ 3294.091154][T24895] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3294.101442][T24895] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3294.111578][T24895] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3294.122433][T24895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3294.130812][T24895] usb 5-1: Product: syz [ 3294.135109][T24895] usb 5-1: Manufacturer: syz [ 3294.139814][T24895] usb 5-1: SerialNumber: syz [ 3294.152514][T24895] usb 5-1: 0:2 : does not exist [ 3294.159446][T10917] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 3294.169828][T10917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3294.180079][T10917] usb 6-1: config 0 descriptor?? [ 3294.188015][T10917] cp210x 6-1:0.0: cp210x converter detected [ 3294.361116][T24895] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 3294.447248][T24895] usb 5-1: USB disconnect, device number 48 [ 3294.506544][T18490] netlink: 48 bytes leftover after parsing attributes in process `syz.3.12356'. [ 3294.508239][ T8811] udevd[8811]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3294.604720][T18494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12358'. [ 3294.618894][T10917] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 3294.624962][T18494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12358'. [ 3294.631296][T10917] cp210x 6-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 3294.644370][T10917] cp210x 6-1:0.0: GPIO initialisation failed: -121 [ 3294.646127][T18494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12358'. [ 3294.669467][T10917] usb 6-1: cp210x converter now attached to ttyUSB0 [ 3294.827290][T10922] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 3294.852747][T10917] usb 6-1: USB disconnect, device number 22 [ 3294.869950][T10917] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 3294.878482][T10917] cp210x 6-1:0.0: device disconnected [ 3294.920593][T18502] netlink: 'syz.1.12362': attribute type 10 has an invalid length. [ 3294.992789][T10922] usb 4-1: unable to get BOS descriptor or descriptor too short [ 3295.012282][T10922] usb 4-1: New USB device found, idVendor=0421, idProduct=046e, bcdDevice=4c.b7 [ 3295.023603][T18504] bridge0: port 3(vxlan0) entered blocking state [ 3295.031411][T18504] bridge0: port 3(vxlan0) entered disabled state [ 3295.038838][T10922] usb 4-1: config 110 has an invalid interface number: 99 but max is 0 [ 3295.047580][T18504] vxlan0: entered allmulticast mode [ 3295.053288][T10922] usb 4-1: config 110 has no interface number 0 [ 3295.059931][T10922] usb 4-1: config 110 interface 99 altsetting 232 bulk endpoint 0x3 has invalid maxpacket 1023 [ 3295.063561][T18504] vxlan0: entered promiscuous mode [ 3295.082004][T10922] usb 4-1: config 110 interface 99 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 3295.100886][T10922] usb 4-1: config 110 interface 99 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 3295.113499][T10922] usb 4-1: config 110 interface 99 altsetting 232 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 3295.133899][T10922] usb 4-1: config 110 interface 99 has no altsetting 0 [ 3295.143498][T10922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3295.151912][T10922] usb 4-1: Product: syz [ 3295.157195][T10922] usb 4-1: Manufacturer: syz [ 3295.161824][T10922] usb 4-1: SerialNumber: syz [ 3295.171433][T18492] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 3295.179543][T18492] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 3295.365574][T10674] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 3295.400895][T18492] netlink: 'syz.3.12357': attribute type 13 has an invalid length. [ 3295.440149][T10922] rndis_host 4-1:110.99: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 3295.453628][T10922] cdc_acm 4-1:110.99: Zero length descriptor references [ 3295.461347][T10922] cdc_acm 4-1:110.99: probe with driver cdc_acm failed with error -22 [ 3295.473504][T10922] usb 4-1: USB disconnect, device number 41 [ 3295.526905][T10674] usb 5-1: Using ep0 maxpacket: 8 [ 3295.532985][T10674] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 3295.546561][T10674] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3295.569635][T10674] usb 5-1: Product: syz [ 3295.572250][T18519] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12370'. [ 3295.577443][T10674] usb 5-1: Manufacturer: syz [ 3295.588555][T10674] usb 5-1: SerialNumber: syz [ 3295.597241][T10674] usb 5-1: config 0 descriptor?? [ 3295.676207][ T6048] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 3295.806337][T10674] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 3295.845497][ T6048] usb 3-1: Using ep0 maxpacket: 8 [ 3295.851417][ T6048] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 3295.862389][ T6048] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 3295.870672][ T6048] usb 3-1: config 0 has no interface number 0 [ 3295.877128][ T6048] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3295.887988][ T6048] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 3295.900078][ T6048] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3295.911355][ T6048] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 3295.924627][ T6048] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3295.935601][ T6048] usb 3-1: config 0 descriptor?? [ 3295.946126][ T6048] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 3296.153772][T10917] usb 3-1: USB disconnect, device number 45 [ 3296.172036][T10917] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 3296.235461][ T6990] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 3296.386082][ T6990] usb 4-1: Using ep0 maxpacket: 8 [ 3296.395434][ T6990] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 3296.406512][ T6990] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 3296.414734][ T6990] usb 4-1: config 0 has no interface number 0 [ 3296.416885][T10674] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 3296.425135][ T6990] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3296.436656][T10674] usb 5-1: USB disconnect, device number 49 [ 3296.455951][ T6990] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 3296.469441][ T6990] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3296.481339][ T6990] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 3296.495449][ T6990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3296.505255][ T6990] usb 4-1: config 0 descriptor?? [ 3296.517492][ T6990] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 3296.621231][ T5609] Bluetooth: hci5: unexpected event for opcode 0x1408 [ 3296.719892][ T6990] usb 4-1: USB disconnect, device number 42 [ 3296.732847][ T6990] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 3297.024487][T18537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12377'. [ 3297.245567][ T6990] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 3297.407492][ T6990] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 3297.416713][ T6990] usb 5-1: no configurations [ 3297.421375][ T6990] usb 5-1: can't read configurations, error -22 [ 3297.454100][T18547] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12382'. [ 3297.575426][ T6990] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 3297.746317][ T6990] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 3297.755620][T10917] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 3297.763216][ T6990] usb 5-1: no configurations [ 3297.767923][ T6990] usb 5-1: can't read configurations, error -22 [ 3297.774683][ T6990] usb usb5-port1: attempt power cycle [ 3297.915958][T10917] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 3297.928193][T10917] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 3297.936388][T10917] usb 6-1: Product: syz [ 3297.940792][T10917] usb 6-1: Manufacturer: syz [ 3297.945698][T10917] usb 6-1: SerialNumber: syz [ 3297.952157][T10917] usb 6-1: config 0 descriptor?? [ 3298.115442][ T6990] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 3298.136344][ T6990] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 3298.146001][ T6990] usb 5-1: no configurations [ 3298.150624][ T6990] usb 5-1: can't read configurations, error -22 [ 3298.167482][T10917] usb 6-1: USB disconnect, device number 23 [ 3298.214734][T18554] netlink: 48 bytes leftover after parsing attributes in process `syz.2.12385'. [ 3298.285574][ T6990] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 3298.317160][ T6990] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 3298.329549][ T6990] usb 5-1: no configurations [ 3298.334942][ T6990] usb 5-1: can't read configurations, error -22 [ 3298.344143][ T6990] usb usb5-port1: unable to enumerate USB device [ 3298.625605][T10917] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 3298.676418][T18568] netlink: 'syz.3.12391': attribute type 10 has an invalid length. [ 3298.785644][T10917] usb 3-1: Using ep0 maxpacket: 16 [ 3298.791683][T10917] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 3298.802363][T10917] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 3298.813497][T10917] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 3298.821979][T10917] usb 3-1: Product: syz [ 3298.826232][T10917] usb 3-1: Manufacturer: syz [ 3298.830833][T10917] usb 3-1: SerialNumber: syz [ 3298.840541][T10917] usb 3-1: config 0 descriptor?? [ 3298.894032][T18574] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12394'. [ 3298.962685][T18578] syzkaller0: entered promiscuous mode [ 3298.970720][T18578] syzkaller0: entered allmulticast mode [ 3299.022772][T18580] netlink: 48 bytes leftover after parsing attributes in process `syz.5.12397'. [ 3299.074773][T10917] usb 3-1: USB disconnect, device number 46 [ 3299.385407][T24895] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 3299.538939][T24895] usb 4-1: unable to get BOS descriptor or descriptor too short [ 3299.546774][T24895] usb 4-1: New USB device found, idVendor=0421, idProduct=046e, bcdDevice=4c.b7 [ 3299.557176][T24895] usb 4-1: config 110 has an invalid interface number: 99 but max is 0 [ 3299.565580][T24895] usb 4-1: config 110 has no interface number 0 [ 3299.571925][T24895] usb 4-1: config 110 interface 99 altsetting 232 bulk endpoint 0x3 has invalid maxpacket 1023 [ 3299.582726][T24895] usb 4-1: config 110 interface 99 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 3299.594974][T24895] usb 4-1: config 110 interface 99 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 3299.605499][T24895] usb 4-1: config 110 interface 99 altsetting 232 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 3299.619617][T24895] usb 4-1: config 110 interface 99 has no altsetting 0 [ 3299.629141][T24895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3299.637450][T24895] usb 4-1: Product: syz [ 3299.641655][T24895] usb 4-1: Manufacturer: syz [ 3299.647080][T24895] usb 4-1: SerialNumber: syz [ 3299.660498][T18584] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 3299.667949][T18584] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 3299.881807][T18584] netlink: 'syz.3.12399': attribute type 13 has an invalid length. [ 3299.894768][ T6048] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 3299.914013][T18584] binder_alloc: 18583: binder_alloc_buf, no vma [ 3299.929621][T24895] rndis_host 4-1:110.99: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 3299.940123][T24895] cdc_acm 4-1:110.99: Zero length descriptor references [ 3299.949627][T24895] cdc_acm 4-1:110.99: probe with driver cdc_acm failed with error -22 [ 3299.963702][T24895] usb 4-1: USB disconnect, device number 43 [ 3300.047055][ T6048] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 3300.078415][ T6048] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 3300.086903][ T6048] usb 3-1: Product: syz [ 3300.091394][ T6048] usb 3-1: Manufacturer: syz [ 3300.096716][ T6048] usb 3-1: SerialNumber: syz [ 3300.103234][ T6048] usb 3-1: config 0 descriptor?? [ 3300.241365][T18605] syz_tun: entered allmulticast mode [ 3300.248260][T18604] syz_tun: left allmulticast mode [ 3300.314917][T10932] usb 3-1: USB disconnect, device number 47 [ 3300.525388][ T6048] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 3300.675695][ T6048] usb 5-1: Using ep0 maxpacket: 32 [ 3300.688921][ T6048] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 3300.699930][ T6048] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3300.711295][ T6048] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3300.722728][ T6048] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3300.733273][ T6048] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 3300.747201][ T6048] usb 5-1: config 0 interface 0 has no altsetting 0 [ 3300.753856][ T6048] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3300.767859][ T6048] usb 5-1: config 0 descriptor?? [ 3301.203923][ T6048] hid-thrustmaster 0003:044F:B65D.004A: unknown main item tag 0x0 [ 3301.222179][ T6048] hid-thrustmaster 0003:044F:B65D.004A: unknown main item tag 0x0 [ 3301.234139][ T6048] hid-thrustmaster 0003:044F:B65D.004A: unknown main item tag 0x0 [ 3301.246291][ T6048] hid-thrustmaster 0003:044F:B65D.004A: unknown main item tag 0x0 [ 3301.254186][ T6048] hid-thrustmaster 0003:044F:B65D.004A: unknown main item tag 0x0 [ 3301.265828][ T6990] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 3301.266304][ T6048] hid-thrustmaster 0003:044F:B65D.004A: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 3301.314124][ T6048] hid-thrustmaster 0003:044F:B65D.004A: Wrong number of endpoints? [ 3301.415645][ C1] hid-thrustmaster 0003:044F:B65D.004A: URB to get model id failed with error -32 [ 3301.426388][ T6048] usb 5-1: USB disconnect, device number 54 [ 3301.437788][ T6990] usb 3-1: Using ep0 maxpacket: 8 [ 3301.450816][ T6990] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3301.471387][ T6990] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 3301.495905][ T6990] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 3301.508330][ T6990] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3301.524026][ T6990] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3301.537385][ T6990] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3301.753435][ T6990] usb 3-1: GET_CAPABILITIES returned 0 [ 3301.759195][ T6990] usbtmc 3-1:16.0: can't read capabilities [ 3301.785533][T10932] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 3301.935868][T10932] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 3301.945048][T10932] usb 4-1: no configurations [ 3301.950419][T10932] usb 4-1: can't read configurations, error -22 [ 3301.967721][ T6990] usb 3-1: USB disconnect, device number 48 [ 3302.018631][T18631] bridge0: port 3(vxlan0) entered blocking state [ 3302.025487][T18631] bridge0: port 3(vxlan0) entered disabled state [ 3302.032548][T18631] vxlan0: entered allmulticast mode [ 3302.041082][T18631] vxlan0: entered promiscuous mode [ 3302.086517][T10932] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 3302.143036][ T5609] Bluetooth: hci4: unexpected event for opcode 0x1408 [ 3302.220740][T18637] netlink: 'syz.5.12419': attribute type 1 has an invalid length. [ 3302.247072][T10932] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 3302.277856][T10932] usb 4-1: no configurations [ 3302.283883][T10932] usb 4-1: can't read configurations, error -22 [ 3302.328077][T10932] usb usb4-port1: attempt power cycle [ 3302.516945][T10674] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 3302.586135][T18649] syzkaller0: entered promiscuous mode [ 3302.591850][T18649] syzkaller0: entered allmulticast mode [ 3302.606463][T18651] loop5: detected capacity change from 0 to 7 [ 3302.613999][T18651] Dev loop5: unable to read RDB block 7 [ 3302.623472][T18651] loop5: unable to read partition table [ 3302.629456][ T6990] usb 6-1: new low-speed USB device number 24 using dummy_hcd [ 3302.630453][T18651] loop5: partition table beyond EOD, truncated [ 3302.663411][T18651] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 3302.681431][T10674] usb 5-1: unable to get BOS descriptor or descriptor too short [ 3302.689328][T10932] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 3302.697720][T10674] usb 5-1: New USB device found, idVendor=0421, idProduct=046e, bcdDevice=4c.b7 [ 3302.709058][T10674] usb 5-1: config 110 has an invalid interface number: 99 but max is 0 [ 3302.725736][T10932] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 3302.745196][T10674] usb 5-1: config 110 has no interface number 0 [ 3302.751753][T10932] usb 4-1: no configurations [ 3302.757127][T10932] usb 4-1: can't read configurations, error -22 [ 3302.763481][T10674] usb 5-1: config 110 interface 99 altsetting 232 bulk endpoint 0x3 has invalid maxpacket 1023 [ 3302.775208][T10674] usb 5-1: config 110 interface 99 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 3302.790916][T10674] usb 5-1: config 110 interface 99 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 3302.804839][T10674] usb 5-1: config 110 interface 99 altsetting 232 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 3302.818524][T10674] usb 5-1: config 110 interface 99 has no altsetting 0 [ 3302.828023][T10674] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3302.828153][ T6990] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 3302.837101][T10674] usb 5-1: Product: syz [ 3302.850420][T10674] usb 5-1: Manufacturer: syz [ 3302.855754][T10674] usb 5-1: SerialNumber: syz [ 3302.860319][ T6990] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 3302.871775][T18639] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 3302.879127][ T6990] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3302.880032][T18639] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 3302.896638][T10932] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 3302.897534][ T6990] usb 6-1: config 0 has no interface number 0 [ 3302.911794][ T6990] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3302.917235][T10932] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 3302.923491][ T6990] usb 6-1: config 0 descriptor?? [ 3302.939460][ T6990] ldusb 6-1:0.55: Interrupt in endpoint not found [ 3302.951542][T10932] usb 4-1: no configurations [ 3302.964448][T10932] usb 4-1: can't read configurations, error -22 [ 3302.973181][T10932] usb usb4-port1: unable to enumerate USB device [ 3303.120654][T18639] netlink: 'syz.4.12420': attribute type 13 has an invalid length. [ 3303.134222][T18639] binder_alloc: 18638: binder_alloc_buf, no vma [ 3303.156308][T10674] rndis_host 5-1:110.99: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 3303.181208][T10674] cdc_acm 5-1:110.99: Zero length descriptor references [ 3303.186834][ T6990] usb 6-1: USB disconnect, device number 24 [ 3303.189509][T10674] cdc_acm 5-1:110.99: probe with driver cdc_acm failed with error -22 [ 3303.222900][T10674] usb 5-1: USB disconnect, device number 55 [ 3303.955426][ T6990] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 3304.125461][ T6990] usb 5-1: Using ep0 maxpacket: 16 [ 3304.136111][ T6990] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 3304.149026][ T6990] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 3304.157526][ T6990] usb 5-1: Product: syz [ 3304.161730][ T6990] usb 5-1: Manufacturer: syz [ 3304.167653][ T6990] usb 5-1: SerialNumber: syz [ 3304.174036][ T6990] usb 5-1: config 0 descriptor?? [ 3304.385745][T10674] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 3304.386706][ T6990] usb 5-1: USB disconnect, device number 56 [ 3304.535513][T10674] usb 3-1: Using ep0 maxpacket: 8 [ 3304.547272][T10674] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3304.578286][T10674] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 3304.590632][T10674] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 3304.601908][T10674] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3304.612501][T10674] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3304.627790][T10674] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3304.854086][T10674] usb 3-1: GET_CAPABILITIES returned 0 [ 3304.859953][T10674] usbtmc 3-1:16.0: can't read capabilities [ 3304.935641][T18682] syzkaller0: entered promiscuous mode [ 3304.941270][T18682] syzkaller0: entered allmulticast mode [ 3305.072457][T10674] usb 3-1: USB disconnect, device number 49 [ 3305.655359][T10674] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 3305.827207][T10674] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 3305.853659][T10674] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3305.880851][T10674] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 3305.902795][T10674] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3305.916629][T10674] usb 6-1: Product: syz [ 3305.924241][T10674] usb 6-1: Manufacturer: syz [ 3305.935240][T10674] usb 6-1: SerialNumber: syz [ 3305.948945][T10674] usb 6-1: config 0 descriptor?? [ 3306.207679][T18716] syz_tun: entered allmulticast mode [ 3306.255382][T18715] syz_tun: left allmulticast mode [ 3306.555389][T10932] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 3306.749780][T10932] usb 5-1: Using ep0 maxpacket: 16 [ 3306.797703][T10932] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 3306.809100][T10932] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3306.845890][T10932] usb 5-1: config 0 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 28 [ 3306.885358][T10932] usb 5-1: config 0 interface 0 has no altsetting 0 [ 3306.892052][T10932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3306.918206][T10932] usb 5-1: config 0 descriptor?? [ 3306.929565][T10932] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 3306.995567][T18724] i2c i2c-0: DVB: adapter 0 frontend 0 symbol rate 3 out of range (1000000..45000000) [ 3307.775657][T10932] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 3307.935365][T10932] usb 4-1: Using ep0 maxpacket: 8 [ 3307.941187][T10932] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3307.951511][T10932] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 3307.962933][T10932] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 3307.973212][T10932] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3307.983580][T10932] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3307.996997][T10932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3308.223615][T10932] usb 4-1: GET_CAPABILITIES returned 0 [ 3308.230060][T10932] usbtmc 4-1:16.0: can't read capabilities [ 3308.420652][T10917] usb 6-1: USB disconnect, device number 25 [ 3308.453269][T10932] usb 4-1: USB disconnect, device number 48 [ 3308.619978][T18749] netlink: 'syz.5.12464': attribute type 1 has an invalid length. [ 3308.647252][T18748] syz_tun: entered allmulticast mode [ 3308.659191][T18746] syz_tun: left allmulticast mode [ 3309.167326][T18768] syzkaller0: entered promiscuous mode [ 3309.173194][T18768] syzkaller0: entered allmulticast mode [ 3309.349235][T10674] usb 5-1: USB disconnect, device number 57 [ 3309.385770][T18770] netlink: 'syz.1.12471': attribute type 10 has an invalid length. [ 3309.479437][T18774] syzkaller0: entered promiscuous mode [ 3309.485084][T18774] syzkaller0: entered allmulticast mode [ 3309.774268][T18780] netlink: 'syz.5.12476': attribute type 1 has an invalid length. [ 3309.855386][T10674] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 3310.015347][T10674] usb 5-1: Using ep0 maxpacket: 8 [ 3310.027397][T10674] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 3310.048987][T10674] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3310.065485][T10674] usb 5-1: Product: syz [ 3310.071253][T10674] usb 5-1: Manufacturer: syz [ 3310.085499][T10674] usb 5-1: SerialNumber: syz [ 3310.092010][T10674] usb 5-1: config 0 descriptor?? [ 3310.235441][T10932] usb 6-1: new low-speed USB device number 26 using dummy_hcd [ 3310.313242][T10674] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 3310.417488][T10932] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 3310.438682][T10932] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 3310.457017][T10932] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3310.470590][T10932] usb 6-1: config 0 has no interface number 0 [ 3310.477853][T10932] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3310.489049][T10932] usb 6-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3310.502047][T10932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3310.515108][T10932] usb 6-1: config 0 descriptor?? [ 3310.544351][T10932] ldusb 6-1:0.55: Interrupt in endpoint not found [ 3310.751575][ T6990] usb 6-1: USB disconnect, device number 26 [ 3310.917683][T10674] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 3310.931772][T10674] usb 5-1: USB disconnect, device number 58 [ 3311.165236][T18793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12481'. [ 3311.457853][ T6990] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 3311.637402][ T6990] usb 3-1: Using ep0 maxpacket: 16 [ 3311.650393][ T6990] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3311.673187][ T6990] usb 3-1: config 1 has an invalid descriptor of length 240, skipping remainder of the config [ 3311.698660][ T6990] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3311.713916][ T6990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3311.722448][ T6990] usb 3-1: Product: syz [ 3311.726882][ T6990] usb 3-1: Manufacturer: syz [ 3311.731506][ T6990] usb 3-1: SerialNumber: syz [ 3311.747067][ T6990] usb 3-1: 0:2 : does not exist [ 3311.885443][T10917] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 3311.961952][ T6990] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 3312.042384][ T6990] usb 3-1: USB disconnect, device number 50 [ 3312.048629][T10917] usb 5-1: Using ep0 maxpacket: 16 [ 3312.067176][T10917] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3312.095979][T10917] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3312.112420][T10917] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3312.118929][ T8811] udevd[8811]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3312.131623][T10917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3312.155378][T10917] usb 5-1: Product: syz [ 3312.161424][T10917] usb 5-1: Manufacturer: syz [ 3312.175584][T10917] usb 5-1: SerialNumber: syz [ 3312.201591][T10917] usb 5-1: 0:2 : does not exist [ 3312.409769][T10917] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 3312.468265][T10917] usb 5-1: USB disconnect, device number 59 [ 3312.493196][ T8811] udevd[8811]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3312.598723][T18815] loop5: detected capacity change from 0 to 7 [ 3312.617394][T18815] Dev loop5: unable to read RDB block 7 [ 3312.633370][T18815] loop5: AHDI p1 p2 p3 [ 3312.637732][T18815] loop5: partition table partially beyond EOD, truncated [ 3312.645000][T18815] loop5: p3 start 335544320 is beyond EOD, truncated [ 3312.675418][T10932] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 3312.835390][T10932] usb 6-1: Using ep0 maxpacket: 32 [ 3312.861218][T10932] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 3312.878501][T10932] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 3312.893765][T10932] usb 6-1: config 0 has no interface number 0 [ 3312.903899][T10932] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3312.925410][T10932] usb 6-1: Product: syz [ 3312.929598][T10932] usb 6-1: Manufacturer: syz [ 3312.934170][T10932] usb 6-1: SerialNumber: syz [ 3312.956104][T10932] usb 6-1: config 0 descriptor?? [ 3312.964008][T10932] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 3313.053226][T10917] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 3313.176045][T10932] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 3313.201287][T10932] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 3313.217061][T10917] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 3313.237417][T10917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3313.274832][T10917] usb 4-1: config 0 descriptor?? [ 3313.290669][T10917] cp210x 4-1:0.0: cp210x converter detected [ 3313.584281][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 3313.597220][T10932] usb 6-1: USB disconnect, device number 27 [ 3313.644718][T10932] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 3313.673801][T10932] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 3313.692842][T10917] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 3313.694915][T10932] quatech2 6-1:0.51: device disconnected [ 3313.710851][T10917] cp210x 4-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 3313.729426][T10917] cp210x 4-1:0.0: GPIO initialisation failed: -121 [ 3313.748091][T10917] usb 4-1: cp210x converter now attached to ttyUSB0 [ 3313.915511][T24895] usb 4-1: USB disconnect, device number 49 [ 3313.936584][T24895] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 3313.946513][T24895] cp210x 4-1:0.0: device disconnected [ 3314.095396][T10917] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 3314.247012][T10917] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 3314.268285][T10917] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3314.297983][T10917] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3314.316684][T10917] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 3314.334045][T10917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3314.343046][T10917] usb 5-1: Product: syz [ 3314.347578][T10917] usb 5-1: Manufacturer: syz [ 3314.352209][T10917] usb 5-1: SerialNumber: syz [ 3314.801748][T10917] usb 5-1: cannot create comm data receiver. [ 3314.808764][T10917] snd-usb-6fire 5-1:1.0: probe with driver snd-usb-6fire failed with error -8 [ 3314.997287][T24895] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 3315.026447][ T6990] usb 5-1: USB disconnect, device number 60 [ 3315.156168][T24895] usb 4-1: Using ep0 maxpacket: 32 [ 3315.167844][T24895] usb 4-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 3315.186980][T24895] usb 4-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 3315.211648][T24895] usb 4-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 3315.226558][T24895] usb 4-1: config 0 interface 0 has no altsetting 0 [ 3315.233243][T24895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3315.255760][T24895] usb 4-1: config 0 descriptor?? [ 3315.293217][T18857] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12504'. [ 3315.498412][T18864] veth11: entered promiscuous mode [ 3315.536677][T18867] veth10: entered allmulticast mode [ 3315.899034][T24895] usbhid 4-1:0.0: can't add hid device: -71 [ 3315.920477][T24895] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 3315.962809][T24895] usb 4-1: USB disconnect, device number 50 [ 3316.192622][T18874] could not allocate digest TFM handle nhpoly1305-generic [ 3316.397877][T18885] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12515'. [ 3316.650714][T18893] syzkaller0: entered promiscuous mode [ 3316.657431][T18893] syzkaller0: entered allmulticast mode [ 3316.885600][T10917] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 3316.918591][T18900] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 3316.935561][T24895] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 3316.956053][ T44] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 3316.974457][ T44] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 3316.999382][ T44] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 3317.015929][ T44] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 3317.049026][T10917] usb 5-1: unable to get BOS descriptor or descriptor too short [ 3317.065433][T10917] usb 5-1: New USB device found, idVendor=0421, idProduct=046e, bcdDevice=4c.b7 [ 3317.077262][T10917] usb 5-1: config 110 has an invalid interface number: 99 but max is 0 [ 3317.086013][T10917] usb 5-1: config 110 has no interface number 0 [ 3317.097529][T10917] usb 5-1: config 110 interface 99 altsetting 232 bulk endpoint 0x3 has invalid maxpacket 1023 [ 3317.108313][T24895] usb 4-1: Using ep0 maxpacket: 16 [ 3317.116393][T24895] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3317.126232][T10917] usb 5-1: config 110 interface 99 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 3317.142742][T10917] usb 5-1: config 110 interface 99 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 3317.153547][T24895] usb 4-1: config 1 has an invalid descriptor of length 240, skipping remainder of the config [ 3317.164973][T24895] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3317.174646][T10917] usb 5-1: config 110 interface 99 altsetting 232 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 3317.188783][T10917] usb 5-1: config 110 interface 99 has no altsetting 0 [ 3317.201056][T24895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3317.209480][T24895] usb 4-1: Product: syz [ 3317.217786][T24895] usb 4-1: Manufacturer: syz [ 3317.225724][T24895] usb 4-1: SerialNumber: syz [ 3317.230978][T10917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3317.241715][T10917] usb 5-1: Product: syz [ 3317.249953][T10917] usb 5-1: Manufacturer: syz [ 3317.254718][T10917] usb 5-1: SerialNumber: syz [ 3317.264918][T24895] usb 4-1: 0:2 : does not exist [ 3317.285104][T18895] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 3317.295070][T18895] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 3317.458994][T24895] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 3317.465459][T10932] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 3317.518444][T18895] netlink: 'syz.4.12520': attribute type 13 has an invalid length. [ 3317.572048][T10917] rndis_host 5-1:110.99: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 3317.599297][T24895] usb 4-1: USB disconnect, device number 51 [ 3317.606918][T10917] cdc_acm 5-1:110.99: Zero length descriptor references [ 3317.630542][T10917] cdc_acm 5-1:110.99: probe with driver cdc_acm failed with error -22 [ 3317.635663][T10932] usb 6-1: Using ep0 maxpacket: 8 [ 3317.664502][T10932] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3317.670012][T10917] usb 5-1: USB disconnect, device number 61 [ 3317.677308][ T8811] udevd[8811]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3317.714709][T10932] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 3317.735736][T10932] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 3317.755401][T10932] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3317.775811][T10932] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3317.805860][T10932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3318.045970][T10932] usb 6-1: GET_CAPABILITIES returned 0 [ 3318.051547][T10932] usbtmc 6-1:16.0: can't read capabilities [ 3318.242054][T18917] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12527'. [ 3318.270143][T24895] usb 6-1: USB disconnect, device number 28 [ 3318.437700][T18921] veth11: entered promiscuous mode [ 3318.496261][T18924] veth10: entered allmulticast mode [ 3318.617112][T10932] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 3318.725995][T18930] syzkaller0: entered promiscuous mode [ 3318.736732][T18930] syzkaller0: entered allmulticast mode [ 3318.793496][ T5609] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 3318.801428][T10932] usb 4-1: Using ep0 maxpacket: 32 [ 3318.809404][T10932] usb 4-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 3318.837312][T10932] usb 4-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 3318.860802][T10932] usb 4-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 3318.890418][T10932] usb 4-1: config 0 interface 0 has no altsetting 0 [ 3318.908420][T10932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3318.921035][T10932] usb 4-1: config 0 descriptor?? [ 3318.980153][T18936] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12535'. [ 3319.007057][T18936] ipvlan2: entered allmulticast mode [ 3319.012606][T18936] syz_tun: entered allmulticast mode [ 3319.195542][ T6048] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 3319.369978][ T6048] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 3319.381220][ T6048] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3319.401500][ T6048] usb 6-1: config 0 descriptor?? [ 3319.412915][ T6048] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 3319.455697][T24895] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 3319.555175][T10932] usbhid 4-1:0.0: can't add hid device: -71 [ 3319.562821][T10932] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 3319.593806][T10932] usb 4-1: USB disconnect, device number 52 [ 3319.636115][T24895] usb 5-1: Using ep0 maxpacket: 8 [ 3319.645969][T24895] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 3319.672783][T24895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3319.695397][T24895] usb 5-1: Product: syz [ 3319.699597][T24895] usb 5-1: Manufacturer: syz [ 3319.704194][T24895] usb 5-1: SerialNumber: syz [ 3319.717930][T24895] usb 5-1: config 0 descriptor?? [ 3319.940054][T24895] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 3320.034123][ T6048] usb 6-1: USB disconnect, device number 29 [ 3320.055201][T24895] gspca_sonixj: reg_w1 err -71 [ 3320.065788][T24895] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 3320.094486][T24895] usb 5-1: USB disconnect, device number 62 [ 3320.196791][ T6990] hid-generic 0000:0000:0000.004B: unknown main item tag 0x0 [ 3320.240002][ T6990] hid-generic 0000:0000:0000.004B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3320.439807][T18952] syz_tun: entered allmulticast mode [ 3320.460950][T18951] syz_tun: left allmulticast mode [ 3320.595540][T10932] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 3320.747243][T18959] veth13: entered promiscuous mode [ 3320.765342][T10932] usb 4-1: Using ep0 maxpacket: 8 [ 3320.778195][T10932] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 3320.808648][T10932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3320.818881][T18961] veth12: entered allmulticast mode [ 3320.836856][T10932] usb 4-1: Product: syz [ 3320.845107][T10932] usb 4-1: Manufacturer: syz [ 3320.855635][T10932] usb 4-1: SerialNumber: syz [ 3320.879681][T10932] usb 4-1: config 0 descriptor?? [ 3321.101344][T10932] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 3321.185498][T24895] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 3321.366140][T24895] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 3321.376974][T24895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3321.398896][T24895] usb 6-1: config 0 descriptor?? [ 3321.410044][T24895] cp210x 6-1:0.0: cp210x converter detected [ 3321.475214][T18983] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 3321.482040][T18983] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 3321.495503][T18983] vhci_hcd vhci_hcd.0: Device attached [ 3321.503777][T18984] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 3321.512176][T15418] vhci_hcd vhci_hcd.2: stop threads [ 3321.518051][T15418] vhci_hcd vhci_hcd.2: release socket [ 3321.523586][T15418] vhci_hcd vhci_hcd.2: disconnect device [ 3321.704504][T10932] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 3321.719751][T10932] usb 4-1: USB disconnect, device number 53 [ 3321.813041][T24895] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 3322.025773][T24895] cp210x 6-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 3322.034000][T24895] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 3322.044379][T24895] usb 6-1: cp210x converter now attached to ttyUSB0 [ 3322.056749][T24895] usb 6-1: USB disconnect, device number 30 [ 3322.072849][T24895] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 3322.082845][T24895] cp210x 6-1:0.0: device disconnected [ 3322.207205][T18990] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 3322.226214][ T44] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 3322.253589][ T44] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 3322.274571][ T44] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 3322.284125][ T44] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 3322.325172][T18994] netlink: 'syz.2.12555': attribute type 1 has an invalid length. [ 3322.378154][T19001] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12555'. [ 3322.615576][ T6048] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 3322.695510][T10922] usb 3-1: new low-speed USB device number 51 using dummy_hcd [ 3322.788704][ T6048] usb 5-1: unable to get BOS descriptor or descriptor too short [ 3322.797169][ T6048] usb 5-1: New USB device found, idVendor=0421, idProduct=046e, bcdDevice=4c.b7 [ 3322.808570][ T6048] usb 5-1: config 110 has an invalid interface number: 99 but max is 0 [ 3322.817499][ T6048] usb 5-1: config 110 has no interface number 0 [ 3322.824256][ T6048] usb 5-1: config 110 interface 99 altsetting 232 bulk endpoint 0x3 has invalid maxpacket 1023 [ 3322.835927][ T6048] usb 5-1: config 110 interface 99 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 3322.853418][ T6048] usb 5-1: config 110 interface 99 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 3322.864877][T10922] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 3322.874497][ T6048] usb 5-1: config 110 interface 99 altsetting 232 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 3322.889296][ T6048] usb 5-1: config 110 interface 99 has no altsetting 0 [ 3322.896604][T10922] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 3322.905479][T10922] usb 3-1: config 0 has no interface number 0 [ 3322.911971][T10922] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3322.924621][ T6048] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3322.933128][T10932] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 3322.941261][ T6048] usb 5-1: Product: syz [ 3322.946123][ T6048] usb 5-1: Manufacturer: syz [ 3322.950972][T10922] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 3322.962492][ T6048] usb 5-1: SerialNumber: syz [ 3322.969249][T10922] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 3322.985918][T18999] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 3323.005799][T18999] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 3323.009131][T10922] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 3323.025228][T10922] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 3323.037899][T10922] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 3323.064592][T10922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3323.082589][T10922] usb 3-1: config 0 descriptor?? [ 3323.090752][T19021] syzkaller0: entered promiscuous mode [ 3323.096943][T19004] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 3323.104287][T19004] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 3323.105785][T10932] usb 4-1: Using ep0 maxpacket: 16 [ 3323.112222][T19021] syzkaller0: entered allmulticast mode [ 3323.120109][T10932] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 3323.135048][T10922] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 3323.148600][T10932] usb 4-1: config 0 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 28 [ 3323.162125][T10932] usb 4-1: config 0 interface 0 has no altsetting 0 [ 3323.172465][T10932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3323.193979][T10932] usb 4-1: config 0 descriptor?? [ 3323.207130][T10932] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 3323.227846][T18999] netlink: 'syz.4.12558': attribute type 13 has an invalid length. [ 3323.241368][T18999] binder: BINDER_SET_CONTEXT_MGR already set [ 3323.248227][T18999] binder: 18996:18999 ioctl 4018620d 80000040 returned -16 [ 3323.269483][ T6048] rndis_host 5-1:110.99: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 3323.286139][ T6048] cdc_acm 5-1:110.99: Zero length descriptor references [ 3323.300085][ T6048] cdc_acm 5-1:110.99: probe with driver cdc_acm failed with error -22 [ 3323.317168][ T6048] usb 5-1: USB disconnect, device number 63 [ 3323.355656][T24895] usb 3-1: USB disconnect, device number 51 [ 3323.361652][ C0] ldusb 3-1:0.55: usb_submit_urb failed (-19) [ 3323.394916][T24895] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 3323.434696][T19025] syzkaller0: entered promiscuous mode [ 3323.440664][T19025] syzkaller0: entered allmulticast mode [ 3323.543358][T19027] netlink: 'syz.5.12570': attribute type 1 has an invalid length. [ 3323.570574][T19027] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12570'. [ 3323.845655][T10932] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 3323.995413][T10932] usb 6-1: Using ep0 maxpacket: 8 [ 3324.003892][T10932] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3324.014197][T10932] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 3324.025778][T10932] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 3324.036810][T10932] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3324.047294][T10932] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3324.055567][T24895] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 3324.060742][T10932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3324.226487][T24895] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 3324.237607][T24895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3324.253491][T24895] usb 5-1: config 0 descriptor?? [ 3324.270467][T24895] cp210x 5-1:0.0: cp210x converter detected [ 3324.286428][T10932] usb 6-1: GET_CAPABILITIES returned 0 [ 3324.305755][T10932] usbtmc 6-1:16.0: can't read capabilities [ 3324.509205][ T6990] usb 6-1: USB disconnect, device number 31 [ 3324.674287][T24895] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 3324.888485][T24895] cp210x 5-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 3324.900191][T24895] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 3324.928904][T24895] usb 5-1: cp210x converter now attached to ttyUSB0 [ 3324.953451][T24895] usb 5-1: USB disconnect, device number 64 [ 3324.964065][T19051] syzkaller0: entered promiscuous mode [ 3324.973969][T19051] syzkaller0: entered allmulticast mode [ 3324.978052][T24895] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 3325.001600][T24895] cp210x 5-1:0.0: device disconnected [ 3325.204216][T19055] syzkaller0: entered promiscuous mode [ 3325.214229][T19055] syzkaller0: entered allmulticast mode [ 3325.268412][T19057] netlink: 'syz.5.12582': attribute type 1 has an invalid length. [ 3325.323732][T19059] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12582'. [ 3325.724254][ T6048] usb 4-1: USB disconnect, device number 54 [ 3325.825964][T10932] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 3325.986343][T10932] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 3326.003805][T10932] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3326.019261][T10932] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3326.030801][T10932] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 3326.047507][T10932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3326.065710][T10932] usb 5-1: Product: syz [ 3326.075376][T10932] usb 5-1: Manufacturer: syz [ 3326.081665][T10932] usb 5-1: SerialNumber: syz [ 3326.275635][T24895] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 3326.465778][T24895] usb 3-1: Using ep0 maxpacket: 8 [ 3326.474856][T24895] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3326.486232][T24895] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 3326.506387][T24895] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 3326.508474][T10932] snd-usb-6fire 5-1:1.0: can't set first interface. [ 3326.517955][T24895] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3326.534123][T24895] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3326.538780][T10932] snd-usb-6fire 5-1:1.0: probe with driver snd-usb-6fire failed with error -5 [ 3326.553728][T19092] netlink: 48 bytes leftover after parsing attributes in process `syz.5.12595'. [ 3326.560319][T10932] usb 5-1: USB disconnect, device number 65 [ 3326.569759][T24895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3326.796824][T24895] usb 3-1: GET_CAPABILITIES returned 0 [ 3326.802349][T24895] usbtmc 3-1:16.0: can't read capabilities [ 3326.905489][T10917] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 3327.005448][ T6990] usb 3-1: USB disconnect, device number 52 [ 3327.035708][T10917] usb 6-1: device descriptor read/64, error -71 [ 3327.275455][T10917] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 3327.335653][T19107] fuse: Bad value for 'fd' [ 3327.415391][T10917] usb 6-1: device descriptor read/64, error -71 [ 3327.536667][T10917] usb usb6-port1: attempt power cycle [ 3327.562433][T19114] input: syz0 as /devices/virtual/input/input83 [ 3327.569113][T19116] netlink: 48 bytes leftover after parsing attributes in process `syz.2.12606'. [ 3327.657291][T19123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12608'. [ 3327.746870][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 3327.753853][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 3327.895451][T10917] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 3327.926198][T10917] usb 6-1: device descriptor read/8, error -71 [ 3327.945515][ T6048] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 3328.095460][ T6048] usb 5-1: Using ep0 maxpacket: 32 [ 3328.106088][ T6048] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 3328.126388][ T6048] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 3328.138059][ T6048] usb 5-1: config 0 has no interface number 0 [ 3328.159781][ T6048] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3328.169689][ T6048] usb 5-1: Product: syz [ 3328.175730][T10917] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 3328.185675][ T6048] usb 5-1: Manufacturer: syz [ 3328.195090][ T6048] usb 5-1: SerialNumber: syz [ 3328.205789][ T6048] usb 5-1: config 0 descriptor?? [ 3328.206033][T10917] usb 6-1: device descriptor read/8, error -71 [ 3328.221950][ T6048] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 3328.335748][T10917] usb usb6-port1: unable to enumerate USB device [ 3328.426143][ T6048] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 3328.443277][ T6048] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 3328.851774][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 3328.860288][T10674] usb 5-1: USB disconnect, device number 66 [ 3328.871739][T19145] fuse: Bad value for 'fd' [ 3328.884865][T10674] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 3328.904000][T10674] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 3328.924940][T10674] quatech2 5-1:0.51: device disconnected [ 3328.981956][T19148] netlink: 48 bytes leftover after parsing attributes in process `syz.1.12617'. [ 3329.045773][ T6048] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 3329.121054][T19155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12620'. [ 3329.215864][ T6048] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 3329.226437][ T6048] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3329.237070][ T6048] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3329.247207][ T6048] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 3329.262291][ T6048] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3329.270649][ T6048] usb 4-1: Product: syz [ 3329.275042][ T6048] usb 4-1: Manufacturer: syz [ 3329.279688][ T6048] usb 4-1: SerialNumber: syz [ 3329.694642][ T6048] snd-usb-6fire 4-1:1.0: can't set first interface. [ 3329.709293][ T6048] snd-usb-6fire 4-1:1.0: probe with driver snd-usb-6fire failed with error -5 [ 3329.730658][ T6048] usb 4-1: USB disconnect, device number 55 [ 3330.228243][T19180] netlink: 48 bytes leftover after parsing attributes in process `syz.5.12629'. [ 3330.379589][T19184] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12631'. [ 3330.787424][T19195] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12636'. [ 3330.840703][T19195] veth21: entered promiscuous mode [ 3330.888911][T19196] veth20: entered allmulticast mode [ 3330.927839][T19198] syzkaller0: entered promiscuous mode [ 3330.933416][T19198] syzkaller0: entered allmulticast mode [ 3331.315493][ T6990] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 3331.386192][T10917] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 3331.465354][ T6990] usb 4-1: Using ep0 maxpacket: 16 [ 3331.471014][ T6990] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 3331.481364][ T6990] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3331.492606][ T6990] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3331.502644][ T6990] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 3331.515755][ T6990] usb 4-1: config 0 interface 0 has no altsetting 0 [ 3331.522468][ T6990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3331.532706][ T6990] usb 4-1: config 0 descriptor?? [ 3331.546080][T10917] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 3331.556693][T10917] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3331.566972][T10917] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3331.576957][T10917] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 3331.592601][T10917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3331.601105][T10917] usb 6-1: Product: syz [ 3331.605381][T10917] usb 6-1: Manufacturer: syz [ 3331.610008][T10917] usb 6-1: SerialNumber: syz [ 3331.821885][T10917] snd-usb-6fire 6-1:1.0: unable to receive device firmware state. [ 3331.830081][T10917] snd-usb-6fire 6-1:1.0: probe with driver snd-usb-6fire failed with error -32 [ 3331.843636][T10917] usb 6-1: USB disconnect, device number 36 [ 3331.948421][ T6990] usbhid 4-1:0.0: can't add hid device: -71 [ 3331.955777][ T6990] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 3331.969713][ T6990] usb 4-1: USB disconnect, device number 56 [ 3331.999418][T19209] netlink: 48 bytes leftover after parsing attributes in process `syz.4.12642'. [ 3332.042957][T10932] hid-generic 0000:0000:0000.004C: unknown main item tag 0x0 [ 3332.060208][T10932] hid-generic 0000:0000:0000.004C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3332.508305][T19225] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12648'. [ 3332.538597][T19225] veth15: entered promiscuous mode [ 3332.586385][T19226] veth14: entered allmulticast mode [ 3332.605385][T10932] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 3332.765377][T10932] usb 6-1: Using ep0 maxpacket: 8 [ 3332.772554][T10932] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3332.784954][T10932] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 3332.797642][T10932] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 3332.815692][T10932] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3332.827657][T10932] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3332.849421][T10932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3333.081790][T10932] usb 6-1: GET_CAPABILITIES returned 0 [ 3333.087790][T10932] usbtmc 6-1:16.0: can't read capabilities [ 3333.087822][T19231] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 3333.100096][T19231] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 3333.138739][T19231] vhci_hcd vhci_hcd.0: Device attached [ 3333.300787][T10932] usb 6-1: USB disconnect, device number 37 [ 3333.315458][T10917] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 3333.346276][T19237] syzkaller0: entered promiscuous mode [ 3333.366003][T19237] syzkaller0: entered allmulticast mode [ 3333.375826][T10917] usb 41-1: new full-speed USB device number 3 using vhci_hcd [ 3333.550916][T19242] syzkaller0: entered promiscuous mode [ 3333.556760][T19242] syzkaller0: entered allmulticast mode [ 3333.778295][T19252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12657'. [ 3333.975415][T10674] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 3334.020397][T19232] vhci_hcd: connection reset by peer [ 3334.031131][ T9737] vhci_hcd vhci_hcd.4: stop threads [ 3334.054262][ T9737] vhci_hcd vhci_hcd.4: release socket [ 3334.083198][ T9737] vhci_hcd vhci_hcd.4: disconnect device [ 3334.137818][T10674] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 3334.164957][T10674] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3334.188369][T10674] usb 3-1: config 0 descriptor?? [ 3334.212639][T10674] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 3334.276416][T19269] syzkaller0: entered promiscuous mode [ 3334.282195][T19269] syzkaller0: entered allmulticast mode [ 3334.355423][ T6990] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 3334.526440][ T6990] usb 4-1: Using ep0 maxpacket: 32 [ 3334.546063][ T6990] usb 4-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 3334.557261][ T6990] usb 4-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 3334.568579][ T6990] usb 4-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 3334.582736][ T6990] usb 4-1: config 0 interface 0 has no altsetting 0 [ 3334.590870][ T6990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3334.608322][ T6990] usb 4-1: config 0 descriptor?? [ 3334.827147][T10674] usb 3-1: USB disconnect, device number 53 [ 3334.955586][ T5609] Bluetooth: hci2: command 0x2016 tx timeout [ 3335.041345][ T6990] wacom 0003:056A:00C5.004D: ignoring exceeding usage max [ 3335.050477][ T6990] wacom 0003:056A:00C5.004D: unknown main item tag 0x0 [ 3335.057530][ T6990] wacom 0003:056A:00C5.004D: unknown main item tag 0x0 [ 3335.064649][ T6990] wacom 0003:056A:00C5.004D: unknown main item tag 0x0 [ 3335.071855][ T6990] wacom 0003:056A:00C5.004D: unknown main item tag 0x0 [ 3335.079087][ T6990] wacom 0003:056A:00C5.004D: unknown main item tag 0x0 [ 3335.086264][ T6990] wacom 0003:056A:00C5.004D: unknown main item tag 0x0 [ 3335.093504][ T6990] wacom 0003:056A:00C5.004D: unknown main item tag 0x0 [ 3335.100564][ T6990] wacom 0003:056A:00C5.004D: unknown main item tag 0x0 [ 3335.107771][ T6990] wacom 0003:056A:00C5.004D: unknown main item tag 0x0 [ 3335.261425][ T6990] usb 4-1: USB disconnect, device number 57 [ 3335.798352][T19299] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12672'. [ 3335.835658][T19299] ipvlan2: entered allmulticast mode [ 3336.152610][T19312] syzkaller0: entered promiscuous mode [ 3336.193551][T19312] syzkaller0: entered allmulticast mode [ 3336.206685][T19317] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12679'. [ 3336.288212][T19317] veth21: entered promiscuous mode [ 3336.320669][T19321] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12680'. [ 3336.329105][T19319] veth20: entered allmulticast mode [ 3336.641221][T19337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12687'. [ 3336.661420][T19337] ipvlan2: entered allmulticast mode [ 3337.055909][T19356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12694'. [ 3337.080253][T19356] veth11: entered promiscuous mode [ 3337.128290][T19356] veth10: entered allmulticast mode [ 3337.497159][ T5982] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 3337.781476][T19386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12706'. [ 3337.821910][T19386] veth15: entered promiscuous mode [ 3337.909351][T19390] veth14: entered allmulticast mode [ 3338.146510][T10674] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 3338.285692][T10674] usb 6-1: device descriptor read/64, error -71 [ 3338.535485][T10917] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 3338.546014][T10674] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 3338.605665][ T5982] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 3338.685488][T10674] usb 6-1: device descriptor read/64, error -71 [ 3338.755816][ T6048] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 3338.805876][T10674] usb usb6-port1: attempt power cycle [ 3338.894716][ T5982] Bluetooth: hci3: command 0x0406 tx timeout [ 3338.928945][ T6048] usb 4-1: unable to get BOS descriptor or descriptor too short [ 3338.937216][ T6048] usb 4-1: New USB device found, idVendor=0421, idProduct=046e, bcdDevice=4c.b7 [ 3338.948502][ T6048] usb 4-1: config 110 has an invalid interface number: 99 but max is 0 [ 3338.963562][ T6048] usb 4-1: config 110 has no interface number 0 [ 3338.975382][T10932] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 3338.984783][ T6048] usb 4-1: config 110 interface 99 altsetting 232 bulk endpoint 0x3 has invalid maxpacket 1023 [ 3339.005756][ T6048] usb 4-1: config 110 interface 99 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 3339.019662][ T6048] usb 4-1: config 110 interface 99 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 3339.031260][ T6048] usb 4-1: config 110 interface 99 altsetting 232 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 3339.045053][ T6048] usb 4-1: config 110 interface 99 has no altsetting 0 [ 3339.056153][ T6048] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3339.064362][ T6048] usb 4-1: Product: syz [ 3339.068861][ T6048] usb 4-1: Manufacturer: syz [ 3339.073867][ T6048] usb 4-1: SerialNumber: syz [ 3339.084789][T19404] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 3339.093142][T19404] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 3339.146286][T10674] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 3339.155739][T10932] usb 5-1: Using ep0 maxpacket: 32 [ 3339.164203][T10932] usb 5-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 3339.186371][T10932] usb 5-1: config 0 interface 0 altsetting 26 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3339.201243][T10674] usb 6-1: device descriptor read/8, error -71 [ 3339.202853][T19413] netlink: 'syz.2.12717': attribute type 1 has an invalid length. [ 3339.208148][T10932] usb 5-1: config 0 interface 0 has no altsetting 0 [ 3339.208189][T10932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3339.236338][T10932] usb 5-1: config 0 descriptor?? [ 3339.255623][T19415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12717'. [ 3339.270941][T19415] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12717'. [ 3339.311581][T19404] netlink: 'syz.3.12714': attribute type 13 has an invalid length. [ 3339.337348][T19404] binder: BINDER_SET_CONTEXT_MGR already set [ 3339.367674][T19404] binder: 19403:19404 ioctl 4018620d 80000040 returned -16 [ 3339.383234][T19420] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12720'. [ 3339.407354][ T6048] rndis_host 4-1:110.99: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 3339.427519][ T6048] cdc_acm 4-1:110.99: Zero length descriptor references [ 3339.438736][ T6048] cdc_acm 4-1:110.99: probe with driver cdc_acm failed with error -22 [ 3339.449234][T10674] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 3339.471392][ T6048] usb 4-1: USB disconnect, device number 58 [ 3339.478205][T10674] usb 6-1: device descriptor read/8, error -71 [ 3339.585845][T10674] usb usb6-port1: unable to enumerate USB device [ 3339.673824][T10932] hid_parser_main: 11 callbacks suppressed [ 3339.673848][T10932] lenovo 0003:17EF:60A3.004E: unknown main item tag 0x0 [ 3339.687137][T10932] lenovo 0003:17EF:60A3.004E: unknown main item tag 0x0 [ 3339.694109][T10932] lenovo 0003:17EF:60A3.004E: unknown main item tag 0x0 [ 3339.695426][T10917] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 3339.708836][T10932] lenovo 0003:17EF:60A3.004E: unknown main item tag 0x0 [ 3339.716425][T10932] lenovo 0003:17EF:60A3.004E: unknown main item tag 0x0 [ 3339.723677][T10932] lenovo 0003:17EF:60A3.004E: unknown main item tag 0x0 [ 3339.730949][T10932] lenovo 0003:17EF:60A3.004E: unknown main item tag 0x0 [ 3339.738330][T10932] lenovo 0003:17EF:60A3.004E: unknown main item tag 0x0 [ 3339.745677][T10932] lenovo 0003:17EF:60A3.004E: unknown main item tag 0x0 [ 3339.752655][T10932] lenovo 0003:17EF:60A3.004E: unknown main item tag 0x0 [ 3339.764219][T10932] lenovo 0003:17EF:60A3.004E: hidraw0: USB HID v0.7a Device [HID 17ef:60a3] on usb-dummy_hcd.4-1/input0 [ 3339.855629][T10917] usb 3-1: device descriptor read/64, error -71 [ 3339.889234][T10932] usb 5-1: USB disconnect, device number 67 [ 3340.098103][T10917] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 3340.245442][T10917] usb 3-1: device descriptor read/64, error -71 [ 3340.355680][T10917] usb usb3-port1: attempt power cycle [ 3340.695441][T10917] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 3340.726400][T10917] usb 3-1: device descriptor read/8, error -71 [ 3340.945852][T14694] Bluetooth: hci3: command 0x0406 tx timeout [ 3340.975494][T10917] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 3340.997135][T10917] usb 3-1: device descriptor read/8, error -71 [ 3341.065411][T10932] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 3341.107397][T10917] usb usb3-port1: unable to enumerate USB device [ 3341.215531][T10932] usb 6-1: Using ep0 maxpacket: 16 [ 3341.221256][T10932] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 3341.231579][T10932] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3341.242881][T10932] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3341.252784][T10932] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 3341.266527][T10932] usb 6-1: config 0 interface 0 has no altsetting 0 [ 3341.273167][T10932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3341.283340][T10932] usb 6-1: config 0 descriptor?? [ 3341.449808][T19455] overlayfs: missing 'lowerdir' [ 3341.505836][T14694] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 3341.518230][T14694] Bluetooth: hci5: Injecting HCI hardware error event [ 3341.588318][ T5609] Bluetooth: hci5: hardware error 0x00 [ 3341.694274][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 3341.702385][T10932] usbhid 6-1:0.0: can't add hid device: -71 [ 3341.708484][T10932] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 3341.719100][T10932] usb 6-1: USB disconnect, device number 42 [ 3342.535931][T19475] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12740'. [ 3342.559336][T19475] veth15: entered promiscuous mode [ 3342.600243][T19475] veth14: entered allmulticast mode [ 3342.625488][T14694] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 3342.636368][T14694] Bluetooth: hci4: Injecting HCI hardware error event [ 3342.708757][T14692] Bluetooth: hci4: hardware error 0x00 [ 3342.805437][ T6990] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 3342.886655][T10917] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 3342.955374][ T6990] usb 6-1: device descriptor read/64, error -71 [ 3343.056304][T10917] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 3343.075401][T10917] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3343.086154][T10917] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3343.109487][T10917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 3343.123379][T10917] usb 3-1: Product: syz [ 3343.155849][T10917] usb 3-1: Manufacturer: syz [ 3343.164744][T10917] usb 3-1: SerialNumber: syz [ 3343.181335][T10917] usb 3-1: config 0 descriptor?? [ 3343.195469][ T6990] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 3343.210269][T10917] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 3343.226280][T10917] pctv452e: pctv452e_power_ctrl: 1 [ 3343.226280][T10917] [ 3343.357535][ T6990] usb 6-1: device descriptor read/64, error -71 [ 3343.450195][ T44] IPVS: starting estimator thread 0... [ 3343.469912][ T6990] usb usb6-port1: attempt power cycle [ 3343.547538][T10917] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -71 [ 3343.547538][T10917] [ 3343.558900][T19483] IPVS: using max 28 ests per chain, 67200 per kthread [ 3343.580482][T10917] dvb-usb: bulk message failed: -22 (5/0) [ 3343.607908][T10917] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 3343.649430][T10917] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 3343.665518][T10917] usb 3-1: USB disconnect, device number 58 [ 3343.670994][ T5609] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 3343.845568][ T6990] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 3343.866159][ T6990] usb 6-1: device descriptor read/8, error -71 [ 3344.105377][ T6990] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 3344.125976][ T6990] usb 6-1: device descriptor read/8, error -71 [ 3344.226612][ T5609] Bluetooth: hci3: unexpected event for opcode 0x0008 [ 3344.236303][ T6990] usb usb6-port1: unable to enumerate USB device [ 3344.279371][T19497] netlink: 'syz.2.12746': attribute type 1 has an invalid length. [ 3344.319721][T19497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12746'. [ 3344.765409][ T6990] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 3344.785521][T14692] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 3344.926351][ T6990] usb 3-1: Using ep0 maxpacket: 8 [ 3344.939882][ T6990] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 3344.966469][ T6990] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 3344.986838][ T6990] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3345.024151][ T6990] usb 3-1: config 0 has no interface number 0 [ 3345.047803][ T6990] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3345.069598][ T6990] usb 3-1: config 0 descriptor?? [ 3345.087591][ T6990] ldusb 3-1:0.55: Interrupt in endpoint not found [ 3345.321782][T19537] syzkaller0: entered promiscuous mode [ 3345.324062][T10932] usb 3-1: USB disconnect, device number 59 [ 3345.327546][T19537] syzkaller0: entered allmulticast mode [ 3345.924651][T19551] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12762'. [ 3345.952419][T19551] ipvlan2: entered allmulticast mode [ 3346.075515][T10932] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 3346.170930][T19560] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12761'. [ 3346.237491][T10932] usb 6-1: unable to get BOS descriptor or descriptor too short [ 3346.250175][T10932] usb 6-1: New USB device found, idVendor=0421, idProduct=046e, bcdDevice=4c.b7 [ 3346.267089][T10932] usb 6-1: config 110 has an invalid interface number: 99 but max is 0 [ 3346.279150][T10932] usb 6-1: config 110 has no interface number 0 [ 3346.297123][T10932] usb 6-1: config 110 interface 99 altsetting 232 bulk endpoint 0x3 has invalid maxpacket 1023 [ 3346.308525][T14694] Bluetooth: hci3: command 0x0406 tx timeout [ 3346.315894][T10932] usb 6-1: config 110 interface 99 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 3346.335372][T10932] usb 6-1: config 110 interface 99 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 3346.349540][T10932] usb 6-1: config 110 interface 99 altsetting 232 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 3346.374025][T10932] usb 6-1: config 110 interface 99 has no altsetting 0 [ 3346.386414][T10917] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 3346.388108][T10932] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3346.407001][T10932] usb 6-1: Product: syz [ 3346.415398][T10932] usb 6-1: Manufacturer: syz [ 3346.421523][T10932] usb 6-1: SerialNumber: syz [ 3346.440282][T19547] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3346.447766][T19547] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3346.536049][T10917] usb 3-1: New USB device found, idVendor=04dd, idProduct=8005, bcdDevice= 0.00 [ 3346.546969][T10917] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3346.557938][T10917] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 3346.573884][T10917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3346.589401][T10917] usb 3-1: Product: syz [ 3346.596728][T10917] usb 3-1: Manufacturer: syz [ 3346.601418][T10917] usb 3-1: SerialNumber: syz [ 3346.616107][T10917] usb 3-1: unsupported MDLM descriptors [ 3346.670356][T19547] netlink: 'syz.5.12760': attribute type 13 has an invalid length. [ 3346.693348][T19547] binder: BINDER_SET_CONTEXT_MGR already set [ 3346.699827][T19547] binder: 19546:19547 ioctl 4018620d 80000040 returned -16 [ 3346.732359][T10932] rndis_host 6-1:110.99: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 3346.751181][T10932] cdc_acm 6-1:110.99: Zero length descriptor references [ 3346.758293][T10932] cdc_acm 6-1:110.99: probe with driver cdc_acm failed with error -22 [ 3346.775707][T10932] usb 6-1: USB disconnect, device number 47 [ 3346.836552][ T6990] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 3346.861779][T10917] usb 3-1: USB disconnect, device number 60 [ 3346.934594][T19570] syzkaller0: entered promiscuous mode [ 3346.941206][T19570] syzkaller0: entered allmulticast mode [ 3346.946866][ T5609] Bluetooth: hci2: failed to read key size for handle 0 [ 3346.954287][ T5609] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 3347.000117][ T6990] usb 5-1: device descriptor read/64, error -71 [ 3347.261241][T19581] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12773'. [ 3347.265633][ T6990] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 3347.354100][T19585] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12775'. [ 3347.374147][T19585] ipvlan2: entered allmulticast mode [ 3347.405456][ T6990] usb 5-1: device descriptor read/64, error -71 [ 3347.516499][ T6990] usb usb5-port1: attempt power cycle [ 3347.735594][T10918] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 3347.856048][ T6990] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 3347.876313][ T6990] usb 5-1: device descriptor read/8, error -71 [ 3347.906670][T10918] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 3347.919473][T10918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3347.927795][T10918] usb 6-1: Product: syz [ 3347.932014][T10918] usb 6-1: Manufacturer: syz [ 3347.936756][T10918] usb 6-1: SerialNumber: syz [ 3347.943450][T10918] usb 6-1: config 0 descriptor?? [ 3348.115497][ T6990] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 3348.136063][ T6990] usb 5-1: device descriptor read/8, error -71 [ 3348.245745][ T6990] usb usb5-port1: unable to enumerate USB device [ 3348.385539][ T5609] Bluetooth: hci3: command 0x0406 tx timeout [ 3348.461436][T19598] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 3348.474551][T19598] block device autoloading is deprecated and will be removed. [ 3348.569789][T19602] syzkaller0: entered promiscuous mode [ 3348.575430][T19602] syzkaller0: entered allmulticast mode [ 3349.005627][T10918] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 3349.167914][T10918] usb 3-1: unable to get BOS descriptor or descriptor too short [ 3349.175908][T10918] usb 3-1: New USB device found, idVendor=0421, idProduct=046e, bcdDevice=4c.b7 [ 3349.186269][T10918] usb 3-1: config 110 has an invalid interface number: 99 but max is 0 [ 3349.194584][T10918] usb 3-1: config 110 has no interface number 0 [ 3349.201202][T10918] usb 3-1: config 110 interface 99 altsetting 232 bulk endpoint 0x3 has invalid maxpacket 1023 [ 3349.211832][T10918] usb 3-1: config 110 interface 99 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 3349.223925][T10918] usb 3-1: config 110 interface 99 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 3349.234472][T10918] usb 3-1: config 110 interface 99 altsetting 232 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 3349.248114][T10918] usb 3-1: config 110 interface 99 has no altsetting 0 [ 3349.256933][T10918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3349.265047][T10918] usb 3-1: Product: syz [ 3349.269425][T10918] usb 3-1: Manufacturer: syz [ 3349.274052][T10918] usb 3-1: SerialNumber: syz [ 3349.281902][T19613] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 3349.289371][T19613] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 3349.453858][T19620] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12788'. [ 3349.470475][T19620] ipvlan2: entered allmulticast mode [ 3349.500442][T19613] netlink: 'syz.2.12786': attribute type 13 has an invalid length. [ 3349.531216][T10918] rndis_host 3-1:110.99: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 3349.542653][T10918] cdc_acm 3-1:110.99: Zero length descriptor references [ 3349.556834][T10918] cdc_acm 3-1:110.99: probe with driver cdc_acm failed with error -22 [ 3349.579183][T10918] usb 3-1: USB disconnect, device number 61 [ 3349.609997][T19623] program syz.3.12789 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3349.621555][T19623] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 3349.899985][T19627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12791'. [ 3350.422689][T19646] netlink: 'syz.1.12800': attribute type 1 has an invalid length. [ 3350.512536][ T6048] usb 6-1: USB disconnect, device number 48 [ 3350.643455][T10674] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 3350.775621][T10674] usb 3-1: device descriptor read/64, error -71 [ 3350.865632][T10932] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 3350.884720][ T30] audit: type=1800 audit(1787642803.231:1948): pid=19660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.12805" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=2131 res=0 errno=0 [ 3350.991852][T10918] hid_parser_main: 31 callbacks suppressed [ 3350.992029][T10918] hid-generic 0000:0000:0000.004F: unknown main item tag 0x0 [ 3351.007847][T10932] usb 5-1: device descriptor read/64, error -71 [ 3351.009211][T10918] hid-generic 0000:0000:0000.004F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3351.027037][T14694] Bluetooth: hci2: command 0x2016 tx timeout [ 3351.055838][T10674] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 3351.197457][T10674] usb 3-1: device descriptor read/64, error -71 [ 3351.265558][T10932] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 3351.306666][T10674] usb usb3-port1: attempt power cycle [ 3351.396006][T10932] usb 5-1: device descriptor read/64, error -71 [ 3351.409246][T10918] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 3351.505798][T10932] usb usb5-port1: attempt power cycle [ 3351.556847][T19676] netlink: 'syz.5.12812': attribute type 1 has an invalid length. [ 3351.565486][T10918] usb 4-1: Using ep0 maxpacket: 8 [ 3351.572173][T10918] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 3351.585078][T10918] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 3351.594146][T10918] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3351.606159][T10918] usb 4-1: config 0 has no interface number 0 [ 3351.612342][T10918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3351.624456][T10918] usb 4-1: config 0 descriptor?? [ 3351.641488][T10918] ldusb 4-1:0.55: Interrupt in endpoint not found [ 3351.646655][T10674] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 3351.686140][T10674] usb 3-1: device descriptor read/8, error -71 [ 3351.843778][T10918] usb 4-1: USB disconnect, device number 59 [ 3351.846662][T10932] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 3351.876326][T10932] usb 5-1: device descriptor read/8, error -71 [ 3351.925460][T10674] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 3351.945880][T10674] usb 3-1: device descriptor read/8, error -71 [ 3352.056036][T10674] usb usb3-port1: unable to enumerate USB device [ 3352.115538][T10932] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 3352.136236][T10932] usb 5-1: device descriptor read/8, error -71 [ 3352.245765][T10932] usb usb5-port1: unable to enumerate USB device [ 3352.738678][T19690] nvme nvme0: failed to connect socket: -101 [ 3353.639404][T19699] syzkaller0: entered promiscuous mode [ 3353.647967][T19699] syzkaller0: entered allmulticast mode [ 3354.786072][T10674] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 3354.947147][T10674] usb 6-1: Using ep0 maxpacket: 16 [ 3354.954554][T10674] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 3354.964896][T10674] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3354.977138][T10674] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3354.987369][T10674] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 3355.000741][T10674] usb 6-1: config 0 interface 0 has no altsetting 0 [ 3355.007515][T10674] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3355.010094][T10918] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 3355.026414][T10674] usb 6-1: config 0 descriptor?? [ 3355.074262][T19743] syzkaller0: entered promiscuous mode [ 3355.080502][T19743] syzkaller0: entered allmulticast mode [ 3355.160094][T19741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12838'. [ 3355.175423][T10918] usb 5-1: device descriptor read/64, error -71 [ 3355.344695][T19747] netlink: 83 bytes leftover after parsing attributes in process `syz.2.12841'. [ 3355.415684][T10918] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 3355.449478][T10674] usbhid 6-1:0.0: can't add hid device: -71 [ 3355.458084][T10674] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 3355.472739][T10674] usb 6-1: USB disconnect, device number 49 [ 3355.545439][T10918] usb 5-1: device descriptor read/64, error -71 [ 3355.595577][ T6048] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 3355.656306][T10918] usb usb5-port1: attempt power cycle [ 3355.746383][ T6048] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 3355.756859][ T6048] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3355.767294][ T6048] usb 3-1: config 0 descriptor?? [ 3355.776029][ T6048] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 3356.006515][T10918] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 3356.037449][T10918] usb 5-1: device descriptor read/8, error -71 [ 3356.275553][T10918] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 3356.297209][T10918] usb 5-1: device descriptor read/8, error -71 [ 3356.390416][ T6048] usb 3-1: USB disconnect, device number 66 [ 3356.407996][T10918] usb usb5-port1: unable to enumerate USB device [ 3356.525775][T19770] netlink: 136 bytes leftover after parsing attributes in process `syz.5.12851'. [ 3356.535021][T19770] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 3356.715470][T10674] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 3356.825494][T10918] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 3356.865465][T10674] usb 4-1: Using ep0 maxpacket: 16 [ 3356.871431][T10674] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3356.881723][T10674] usb 4-1: config 1 has an invalid descriptor of length 240, skipping remainder of the config [ 3356.892223][T10674] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3356.903101][T10674] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3356.911384][T10674] usb 4-1: Product: syz [ 3356.915670][T10674] usb 4-1: Manufacturer: syz [ 3356.920404][T10674] usb 4-1: SerialNumber: syz [ 3356.933055][T10674] usb 4-1: 0:2 : does not exist [ 3356.976098][T10918] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 3356.988316][T10918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3356.996731][T10918] usb 6-1: Product: syz [ 3357.000931][T10918] usb 6-1: Manufacturer: syz [ 3357.006441][T10918] usb 6-1: SerialNumber: syz [ 3357.014588][T10918] usb 6-1: config 0 descriptor?? [ 3357.139191][T10674] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 3357.184772][T10674] usb 4-1: USB disconnect, device number 60 [ 3357.221071][ T8811] udevd[8811]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3357.240056][T10917] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 3357.415502][T10917] usb 3-1: Using ep0 maxpacket: 16 [ 3357.421412][T10917] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 3357.431816][T10917] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3357.443447][T10917] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3357.453629][T10917] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 3357.466738][T10917] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3357.473538][T10918] usb 6-1: Firmware version (0.0) predates our first public release. [ 3357.481827][T10917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3357.490075][T10918] usb 6-1: Please update to version 0.2 or newer [ 3357.498861][T10917] usb 3-1: config 0 descriptor?? [ 3357.548977][T10918] usb 6-1: USB disconnect, device number 50 [ 3357.902954][T19792] syzkaller0: entered promiscuous mode [ 3357.909074][T19792] syzkaller0: entered allmulticast mode [ 3358.058402][T19788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12859'. [ 3358.118247][T10917] usbhid 3-1:0.0: can't add hid device: -71 [ 3358.131719][T10917] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 3358.154077][T10917] usb 3-1: USB disconnect, device number 67 [ 3358.285546][ T6048] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 3358.435385][ T6048] usb 6-1: Using ep0 maxpacket: 8 [ 3358.441597][ T6048] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 3358.452855][ T6048] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 3358.461434][ T6048] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 3358.476758][ T6048] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 3358.488933][ T6048] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3358.501403][ T6048] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3358.513601][ T6048] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 3358.525971][ T6048] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 3358.539893][ T6048] usb 6-1: config 168 interface 0 has no altsetting 0 [ 3358.549474][ T6048] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 3358.557981][ T6048] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 3358.570254][ T6048] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 3358.582141][ T6048] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3358.594961][ T6048] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3358.607400][ T6048] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 3358.619426][ T6048] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 3358.633562][ T6048] usb 6-1: config 168 interface 0 has no altsetting 0 [ 3358.644013][ T6048] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 3358.656939][ T6048] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 3358.676960][ T6048] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 3358.691228][ T6048] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3358.704987][ T6048] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3358.717194][ T6048] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 3358.729029][ T6048] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 3358.744877][ T6048] usb 6-1: config 168 interface 0 has no altsetting 0 [ 3358.755974][ T6048] usb 6-1: string descriptor 0 read error: -22 [ 3358.765996][ T6048] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3358.774766][T19800] netlink: 'syz.2.12864': attribute type 10 has an invalid length. [ 3358.783899][T19800] netlink: 67 bytes leftover after parsing attributes in process `syz.2.12864'. [ 3358.799840][ T6048] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 3358.990099][T19802] netlink: 'syz.4.12865': attribute type 1 has an invalid length. [ 3359.045681][T19802] veth12: entered allmulticast mode [ 3359.067414][T19802] bond4: (slave veth13): Enslaving as an active interface with a down link [ 3359.075355][T10917] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 3359.101545][ T6990] usb 6-1: USB disconnect, device number 51 [ 3359.109760][T19802] bond4: entered promiscuous mode [ 3359.126714][T19802] bond4: entered allmulticast mode [ 3359.138756][T19802] 8021q: adding VLAN 0 to HW filter on device bond4 [ 3359.237439][T10917] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 3359.251851][T10917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3359.266880][T19812] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12869'. [ 3359.271323][T10917] usb 3-1: config 0 descriptor?? [ 3359.301141][T10917] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 3359.575521][ T6990] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 3359.736478][ T6990] usb 4-1: Using ep0 maxpacket: 16 [ 3359.742303][ T6990] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3359.752967][ T6990] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3359.763227][ T6990] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3359.775716][ T6990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3359.783746][ T6990] usb 4-1: Product: syz [ 3359.788028][ T6990] usb 4-1: Manufacturer: syz [ 3359.793102][ T6990] usb 4-1: SerialNumber: syz [ 3359.807494][ T6990] usb 4-1: 0:2 : does not exist [ 3359.924435][T10917] usb 3-1: USB disconnect, device number 68 [ 3359.932778][T10918] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 3360.014378][ T6990] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 3360.050059][ T6990] usb 4-1: USB disconnect, device number 61 [ 3360.103038][ T8811] udevd[8811]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3360.133885][T10918] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 3360.154632][T10918] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 3360.176083][T10918] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 3360.196416][T10918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3360.232265][T10918] usb 5-1: probing VID:PID(0424:012C) [ 3360.250255][T10918] usb 5-1: vub300 testing BULK IN EndPoint(0) 81 [ 3360.259291][T10918] usb 5-1: vub300 testing BULK OUT EndPoint(1) 02 [ 3360.263509][T19828] nvme nvme0: failed to connect socket: -101 [ 3360.272155][T10918] usb 5-1: vub300 testing BULK IN EndPoint(2) 83 [ 3360.288965][T10918] usb 5-1: vub300 testing BULK OUT EndPoint(3) 04 [ 3360.300773][T10918] usb 5-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 3360.427882][T19835] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12878'. [ 3360.438614][T19835] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12878'. [ 3360.627711][T10918] usb 5-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 3360.703614][T19837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12879'. [ 3360.814147][T19848] syzkaller0: entered promiscuous mode [ 3360.823163][T19848] syzkaller0: entered allmulticast mode [ 3360.837174][T10918] usb 5-1: USB vub300 remote SDIO host controller[0]connected with no SD/SDIO card inserted [ 3361.225545][T10674] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 3361.265996][ T6048] hid-generic 0000:0000:0000.0050: unknown main item tag 0x0 [ 3361.273585][T10932] usb 3-1: new low-speed USB device number 69 using dummy_hcd [ 3361.299511][ T6048] hid-generic 0000:0000:0000.0050: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3361.385469][T10674] usb 6-1: Using ep0 maxpacket: 32 [ 3361.391677][T10674] usb 6-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 3361.403092][T10674] usb 6-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 3361.416664][T10674] usb 6-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 3361.432123][T10674] usb 6-1: config 0 interface 0 has no altsetting 0 [ 3361.440580][T10674] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3361.449393][T10932] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 3361.460414][T10932] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 3361.469989][T10932] usb 3-1: config 0 has no interface number 0 [ 3361.477124][T10674] usb 6-1: config 0 descriptor?? [ 3361.482570][T10932] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3361.494311][T10932] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 3361.509783][T10932] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 3361.522256][T10932] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 3361.534858][T10932] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 3361.546335][T10932] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 3361.559905][T10932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3361.574899][T10932] usb 3-1: config 0 descriptor?? [ 3361.581210][T19856] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 3361.589220][T19856] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 3361.602660][T10932] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 3361.679529][T10918] usb 5-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 3361.735420][T10918] usb 5-1: USB disconnect, device number 80 [ 3361.752567][ T6990] usb 5-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 3361.866081][T19856] ldusb 3-1:0.55: Write buffer overflow, 2 bytes dropped [ 3361.866261][T10918] USB vub300 remote SDIO host controller[0] now disconnected [ 3361.893964][T10932] usb 3-1: USB disconnect, device number 69 [ 3361.914784][T10674] wacom 0003:056A:00C5.0051: ignoring exceeding usage max [ 3361.916041][ C0] ------------[ cut here ]------------ [ 3361.931192][ C0] do not call blocking ops when !TASK_RUNNING; state=2 set at [] wait_for_completion_timeout+0x265/0x610 [ 3361.933092][T10674] wacom 0003:056A:00C5.0051: unknown main item tag 0x0 [ 3361.944125][ C0] WARNING: kernel/sched/core.c:9161 at __might_sleep+0x92/0xf0, CPU#0: kworker/0:11/10918 [ 3361.944179][ C0] Modules linked in: [ 3361.944267][ C0] CPU: 0 UID: 0 PID: 10918 Comm: kworker/0:11 Tainted: G L syzkaller #0 PREEMPT(full) [ 3361.944303][ C0] Tainted: [L]=SOFTLOCKUP [ 3361.944313][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3361.944330][ C0] Workqueue: usb_hub_wq hub_event [ 3361.944359][ C0] RIP: 0010:__might_sleep+0xac/0xf0 [ 3361.944387][ C0] Code: 00 00 48 89 3c 24 41 89 f5 4c 8d 35 de b5 e6 0e 43 80 3c 3c 00 74 08 48 89 df e8 ff e6 a0 00 48 8b 0b 4c 89 f7 89 ee 48 89 ca <67> 48 0f b9 3a 44 89 ee 48 8b 3c 24 eb b5 44 89 f1 80 e1 07 80 c1 [ 3361.944408][ C0] RSP: 0000:ffffc90000007c08 EFLAGS: 00010246 [ 3361.944429][ C0] RAX: 0000000000000000 RBX: ffff888029a87660 RCX: ffffffff8be1b175 [ 3361.944448][ C0] RDX: ffffffff8be1b175 RSI: 0000000000000002 RDI: ffffffff907cbfc0 [ 3361.944465][ C0] RBP: 0000000000000002 R08: 0000000000000100 R09: 1ffffffff20f38e7 [ 3361.944479][ C0] R10: dffffc0000000000 R11: fffffbfff20f38e8 R12: 1ffff11005350ecc [ 3361.954504][T10932] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 3361.961279][ C0] R13: 00000000000011c8 R14: ffffffff907cbfc0 R15: dffffc0000000000 [ 3361.961307][ C0] FS: 0000000000000000(0000) GS:ffff888124cf1000(0000) knlGS:0000000000000000 [ 3361.970759][T10674] wacom 0003:056A:00C5.0051: unknown main item tag 0x0 [ 3361.976340][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3361.976361][ C0] CR2: 00000000f7f055c0 CR3: 000000004cf78000 CR4: 00000000003526f0 [ 3361.976381][ C0] DR0: ffffffffffffffff DR1: 08000000000001f8 DR2: 0000000000000000 [ 3361.976397][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 3361.976412][ C0] Call Trace: [ 3361.976424][ C0] [ 3361.976439][ C0] __cancel_work_sync+0x6d/0x110 [ 3361.980966][T10674] wacom 0003:056A:00C5.0051: unknown main item tag 0x0 [ 3361.990843][ C0] mmc_free_host+0x19/0x30 [ 3361.990986][ C0] call_timer_fn+0x18d/0x5f0 [ 3361.991014][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 3361.991100][ C0] ? call_timer_fn+0xd5/0x5f0 [ 3361.991122][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 3361.991150][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 3361.991212][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 3362.040021][T10674] wacom 0003:056A:00C5.0051: unknown main item tag 0x0 [ 3362.043165][ C0] __run_timer_base+0x652/0x8b0 [ 3362.043208][ C0] ? ktime_get+0x45/0x220 [ 3362.043252][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 3362.043294][ C0] ? ktime_get+0x1f5/0x220 [ 3362.043329][ C0] ? lapic_next_event+0x11/0x20 [ 3362.043359][ C0] run_timer_softirq+0xb7/0x170 [ 3362.043394][ C0] handle_softirqs+0x226/0x860 [ 3362.043425][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 3362.043459][ C0] __irq_exit_rcu+0xcb/0x220 [ 3362.043484][ C0] irq_exit_rcu+0x9/0x30 [ 3362.064734][T10674] wacom 0003:056A:00C5.0051: unknown main item tag 0x0 [ 3362.066141][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 3362.066184][ C0] [ 3362.066193][ C0] [ 3362.066203][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3362.066230][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 3362.066260][ C0] Code: f7 e8 8d 29 c0 f5 f7 c3 00 02 00 00 74 05 e8 c0 60 ec f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 74 47 b1 f5 65 48 8b 05 2c ce af 07 48 85 c0 74 18 5b 41 5e c3 [ 3362.066281][ C0] RSP: 0000:ffffc90006c572a8 EFLAGS: 00000206 [ 3362.066305][ C0] RAX: 0000000000000006 RBX: 0000000000000286 RCX: 8000000000000001 [ 3362.066328][ C0] RDX: 0000000000000006 RSI: ffffffff8e46df3e RDI: 0000000000000001 [ 3362.066344][ C0] RBP: 0000000000000000 R08: ffffffff9079c73f R09: 1ffffffff20f38e7 [ 3362.066362][ C0] R10: dffffc0000000000 R11: fffffbfff20f38e8 R12: ffffffff81b3ed40 [ 3362.066380][ C0] R13: ffffc90006c57320 R14: ffffffff9ac7ab18 R15: ffffc90006c57320 [ 3362.066402][ C0] ? __pfx_process_timeout+0x10/0x10 [ 3362.066446][ C0] timer_init_key_on_stack+0x3c/0x110 [ 3362.076370][T10674] wacom 0003:056A:00C5.0051: unknown main item tag 0x0 [ 3362.083360][ C0] schedule_timeout+0x140/0x2c0 [ 3362.091387][T10674] wacom 0003:056A:00C5.0051: unknown main item tag 0x0 [ 3362.096845][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 3362.096890][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 3362.096921][ C0] wait_for_completion_timeout+0x2cf/0x610 [ 3362.105886][T10674] wacom 0003:056A:00C5.0051: unknown main item tag 0x0 [ 3362.112894][ C0] ? wait_for_completion_timeout+0x265/0x610 [ 3362.121491][T10674] wacom 0003:056A:00C5.0051: unknown main item tag 0x0 [ 3362.124142][ C0] ? __pfx_wait_for_completion_timeout+0x10/0x10 [ 3362.124180][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 3362.202014][T10674] usb 6-1: USB disconnect, device number 52 [ 3362.202325][ C0] usb_start_wait_urb+0x1e9/0x5b0 [ 3362.414736][ C0] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 3362.420396][ C0] usb_control_msg+0x234/0x3e0 [ 3362.425205][ C0] hub_ext_port_status+0x114/0x810 [ 3362.430433][ C0] hub_port_debounce+0xa7/0x330 [ 3362.435363][ C0] ? kobject_put+0x50f/0x550 [ 3362.439977][ C0] hub_event+0x1c57/0x4d30 [ 3362.444422][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 3362.449719][ C0] ? register_lock_class+0x31/0x2e0 [ 3362.455068][ C0] ? __pfx_hub_event+0x10/0x10 [ 3362.459908][ C0] ? process_scheduled_works+0x97a/0x1630 [ 3362.465685][ C0] ? rcu_is_watching+0x16/0xb0 [ 3362.470479][ C0] ? process_scheduled_works+0x97a/0x1630 [ 3362.476281][ C0] process_scheduled_works+0xc3d/0x1630 [ 3362.481977][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 3362.488039][ C0] ? assign_work+0x3cf/0x5d0 [ 3362.492654][ C0] worker_thread+0xa47/0xfb0 [ 3362.497343][ C0] ? __kthread_parkme+0x71/0x1f0 [ 3362.502326][ C0] kthread+0x38b/0x480 [ 3362.506491][ C0] ? __pfx_worker_thread+0x10/0x10 [ 3362.511628][ C0] ? __pfx_kthread+0x10/0x10 [ 3362.516307][ C0] ret_from_fork+0x514/0xb70 [ 3362.520949][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 3362.526123][ C0] ? load_gs_index+0x97/0xc0 [ 3362.530744][ C0] ? __switch_to+0xc89/0x1420 [ 3362.535484][ C0] ? __pfx_kthread+0x10/0x10 [ 3362.540113][ C0] ret_from_fork_asm+0x1a/0x30 [ 3362.544925][ C0] [ 3362.548016][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 3362.555311][ C0] CPU: 0 UID: 0 PID: 10918 Comm: kworker/0:11 Tainted: G L syzkaller #0 PREEMPT(full) [ 3362.566430][ C0] Tainted: [L]=SOFTLOCKUP [ 3362.570768][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3362.580840][ C0] Workqueue: usb_hub_wq hub_event [ 3362.585887][ C0] Call Trace: [ 3362.589175][ C0] [ 3362.592025][ C0] vpanic+0x56d/0xa60 [ 3362.596035][ C0] ? __pfx__printk+0x10/0x10 [ 3362.600651][ C0] ? __pfx_vpanic+0x10/0x10 [ 3362.605184][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 3362.610494][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 3362.615718][ C0] panic+0xc5/0xd0 [ 3362.619474][ C0] ? __pfx_panic+0x10/0x10 [ 3362.623926][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 3362.628894][ C0] __warn+0x315/0x4c0 [ 3362.632893][ C0] ? __might_sleep+0x92/0xf0 [ 3362.637512][ C0] ? __might_sleep+0x92/0xf0 [ 3362.642136][ C0] __report_bug+0x276/0x570 [ 3362.646788][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 3362.651581][ C0] ? __might_sleep+0x92/0xf0 [ 3362.656202][ C0] ? __pfx___report_bug+0x10/0x10 [ 3362.661247][ C0] ? wait_for_completion_timeout+0x265/0x610 [ 3362.667287][ C0] ? wait_for_completion_timeout+0x265/0x610 [ 3362.673313][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 3362.678464][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 3362.684305][ C0] ? debug_object_assert_init+0x20d/0x380 [ 3362.690081][ C0] report_bug_entry+0x19b/0x290 [ 3362.694948][ C0] ? __might_sleep+0xac/0xf0 [ 3362.699540][ C0] ? __might_sleep+0xb1/0xf0 [ 3362.704129][ C0] handle_bug+0xce/0x200 [ 3362.708369][ C0] exc_invalid_op+0x1a/0x50 [ 3362.712869][ C0] asm_exc_invalid_op+0x1a/0x20 [ 3362.717711][ C0] RIP: 0010:__might_sleep+0xac/0xf0 [ 3362.722911][ C0] Code: 00 00 48 89 3c 24 41 89 f5 4c 8d 35 de b5 e6 0e 43 80 3c 3c 00 74 08 48 89 df e8 ff e6 a0 00 48 8b 0b 4c 89 f7 89 ee 48 89 ca <67> 48 0f b9 3a 44 89 ee 48 8b 3c 24 eb b5 44 89 f1 80 e1 07 80 c1 [ 3362.742512][ C0] RSP: 0000:ffffc90000007c08 EFLAGS: 00010246 [ 3362.748575][ C0] RAX: 0000000000000000 RBX: ffff888029a87660 RCX: ffffffff8be1b175 [ 3362.756536][ C0] RDX: ffffffff8be1b175 RSI: 0000000000000002 RDI: ffffffff907cbfc0 [ 3362.764499][ C0] RBP: 0000000000000002 R08: 0000000000000100 R09: 1ffffffff20f38e7 [ 3362.772464][ C0] R10: dffffc0000000000 R11: fffffbfff20f38e8 R12: 1ffff11005350ecc [ 3362.780431][ C0] R13: 00000000000011c8 R14: ffffffff907cbfc0 R15: dffffc0000000000 [ 3362.788405][ C0] ? wait_for_completion_timeout+0x265/0x610 [ 3362.794391][ C0] ? wait_for_completion_timeout+0x265/0x610 [ 3362.800376][ C0] __cancel_work_sync+0x6d/0x110 [ 3362.805320][ C0] mmc_free_host+0x19/0x30 [ 3362.809746][ C0] call_timer_fn+0x18d/0x5f0 [ 3362.814327][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 3362.821003][ C0] ? call_timer_fn+0xd5/0x5f0 [ 3362.825672][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 3362.830783][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 3362.835976][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 3362.842649][ C0] __run_timer_base+0x652/0x8b0 [ 3362.847502][ C0] ? ktime_get+0x45/0x220 [ 3362.851840][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 3362.857241][ C0] ? ktime_get+0x1f5/0x220 [ 3362.861661][ C0] ? lapic_next_event+0x11/0x20 [ 3362.866509][ C0] run_timer_softirq+0xb7/0x170 [ 3362.871364][ C0] handle_softirqs+0x226/0x860 [ 3362.876127][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 3362.880888][ C0] __irq_exit_rcu+0xcb/0x220 [ 3362.885482][ C0] irq_exit_rcu+0x9/0x30 [ 3362.889740][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 3362.895378][ C0] [ 3362.898310][ C0] [ 3362.901275][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3362.907270][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 3362.913687][ C0] Code: f7 e8 8d 29 c0 f5 f7 c3 00 02 00 00 74 05 e8 c0 60 ec f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 74 47 b1 f5 65 48 8b 05 2c ce af 07 48 85 c0 74 18 5b 41 5e c3 [ 3362.933292][ C0] RSP: 0000:ffffc90006c572a8 EFLAGS: 00000206 [ 3362.939352][ C0] RAX: 0000000000000006 RBX: 0000000000000286 RCX: 8000000000000001 [ 3362.947314][ C0] RDX: 0000000000000006 RSI: ffffffff8e46df3e RDI: 0000000000000001 [ 3362.955276][ C0] RBP: 0000000000000000 R08: ffffffff9079c73f R09: 1ffffffff20f38e7 [ 3362.963243][ C0] R10: dffffc0000000000 R11: fffffbfff20f38e8 R12: ffffffff81b3ed40 [ 3362.971208][ C0] R13: ffffc90006c57320 R14: ffffffff9ac7ab18 R15: ffffc90006c57320 [ 3362.979176][ C0] ? __pfx_process_timeout+0x10/0x10 [ 3362.984477][ C0] timer_init_key_on_stack+0x3c/0x110 [ 3362.989850][ C0] schedule_timeout+0x140/0x2c0 [ 3362.994696][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 3363.000069][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 3363.005267][ C0] wait_for_completion_timeout+0x2cf/0x610 [ 3363.011106][ C0] ? wait_for_completion_timeout+0x265/0x610 [ 3363.017110][ C0] ? __pfx_wait_for_completion_timeout+0x10/0x10 [ 3363.023444][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 3363.028662][ C0] usb_start_wait_urb+0x1e9/0x5b0 [ 3363.033704][ C0] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 3363.039267][ C0] usb_control_msg+0x234/0x3e0 [ 3363.044036][ C0] hub_ext_port_status+0x114/0x810 [ 3363.049156][ C0] hub_port_debounce+0xa7/0x330 [ 3363.054008][ C0] ? kobject_put+0x50f/0x550 [ 3363.058592][ C0] hub_event+0x1c57/0x4d30 [ 3363.062996][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 3363.068122][ C0] ? register_lock_class+0x31/0x2e0 [ 3363.073348][ C0] ? __pfx_hub_event+0x10/0x10 [ 3363.078107][ C0] ? process_scheduled_works+0x97a/0x1630 [ 3363.083828][ C0] ? rcu_is_watching+0x16/0xb0 [ 3363.088582][ C0] ? process_scheduled_works+0x97a/0x1630 [ 3363.094294][ C0] process_scheduled_works+0xc3d/0x1630 [ 3363.099861][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 3363.105843][ C0] ? assign_work+0x3cf/0x5d0 [ 3363.110442][ C0] worker_thread+0xa47/0xfb0 [ 3363.115036][ C0] ? __kthread_parkme+0x71/0x1f0 [ 3363.119992][ C0] kthread+0x38b/0x480 [ 3363.124060][ C0] ? __pfx_worker_thread+0x10/0x10 [ 3363.129165][ C0] ? __pfx_kthread+0x10/0x10 [ 3363.133756][ C0] ret_from_fork+0x514/0xb70 [ 3363.138370][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 3363.143481][ C0] ? load_gs_index+0x97/0xc0 [ 3363.148066][ C0] ? __switch_to+0xc89/0x1420 [ 3363.152739][ C0] ? __pfx_kthread+0x10/0x10 [ 3363.157327][ C0] ret_from_fork_asm+0x1a/0x30 [ 3363.162123][ C0] [ 3363.165410][ C0] Kernel Offset: disabled [ 3363.169794][ C0] Rebooting in 86400 seconds..