last executing test programs: 9.726364822s ago: executing program 0 (id=930): r0 = memfd_create(&(0x7f0000000040)='<\xe0Vxv\xdbA\xa6\xdf\xca;0\x92\x99_\xa7\xeaJ\xd3?\x9apW2\x8cHpH\xad\xe9\x1b\xf2[\xeb\x85?\x007\b\x98*\xf2`\xb2\xf0\xf8\xc4L\xc03\xc5\x8f`\xf2\xd5\xaf', 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x68}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e"], 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0xffffffffffffffa9, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {0x0, 0x410c}}}, 0x1c}, 0x1, 0x0, 0x0, 0x400c015}, 0x8000) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0105b08, &(0x7f0000000040)) 6.562416538s ago: executing program 0 (id=955): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x10001, 0xb, 0x20000000, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) 6.27771455s ago: executing program 0 (id=958): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000013c0)=@newtfilter={0x104, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_u32={{0x8}, {0xd8, 0x2, [@TCA_U32_SEL={0xd4, 0x5, {0x3, 0x6, 0xd, 0x5, 0x4, 0x1, 0x5, 0x9, [{0x8, 0x1, 0x19, 0x7}, {0x0, 0x7, 0xfe000000, 0x1}, {0x9, 0x4, 0x4, 0x4}, {0x7, 0x7, 0xd, 0x1}, {0x5, 0x0, 0x3, 0xffffffff}, {0x101, 0x398, 0x8, 0x2}, {0x9, 0x0, 0x8, 0x36}, {0x4, 0xe8c, 0xcc, 0x5}, {0xff, 0x40, 0x347c, 0x1a80}, {0x7, 0xe, 0xcf1713ac, 0x35ad5b6d}, {0x1, 0x6, 0xff, 0x4}, {0x0, 0xffff, 0x78e, 0x400}]}}]}}]}, 0x104}}, 0x0) write$tun(r0, &(0x7f0000000280)=ANY=[], 0xfd6c) 2.733882798s ago: executing program 1 (id=963): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xdf\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\x8d\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x3, 0x42, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)={0x44, r3, 0x1, 0x0, 0x300, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}]}, 0x44}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0x18}}, 0x0) recvmsg(r1, &(0x7f0000004a00)={0x0, 0x0, &(0x7f0000004900)=[{&(0x7f00000000c0)=""/78, 0x4e}, {&(0x7f0000000180)=""/166, 0xa6}, {&(0x7f0000000240)=""/226, 0xe2}, {&(0x7f0000000640)=""/4085, 0xff5}, {&(0x7f00000047c0)=""/238, 0xee}, {&(0x7f00000048c0)=""/25, 0x19}], 0x6}, 0x40000000) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = openat$rdma_cm(0xffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000005c0)=0x8) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = dup2(r0, r8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r8, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) r10 = socket(0x40000000015, 0x5, 0x0) connect$inet(r10, &(0x7f0000000140)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x42}}, 0xd) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={r7, 0x10}, 0x8) setsockopt$inet6_int(r0, 0x29, 0xce, &(0x7f0000000580)=0xfffffffc, 0x4) 2.733724008s ago: executing program 3 (id=964): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x3, r9}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 2.733484658s ago: executing program 4 (id=965): r0 = memfd_create(&(0x7f0000000040)='<\xe0Vxv\xdbA\xa6\xdf\xca;0\x92\x99_\xa7\xeaJ\xd3?\x9apW2\x8cHpH\xad\xe9\x1b\xf2[\xeb\x85?\x007\b\x98*\xf2`\xb2\xf0\xf8\xc4L\xc03\xc5\x8f`\xf2\xd5\xaf', 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x68}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e"], 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0xffffffffffffffa9, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {0x0, 0x410c}}}, 0x1c}, 0x1, 0x0, 0x0, 0x400c015}, 0x8000) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0105b08, &(0x7f0000000040)) 2.624082401s ago: executing program 2 (id=966): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002400)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0}, 0x44840) 2.623769222s ago: executing program 0 (id=967): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r1, &(0x7f0000000200)=[{&(0x7f0000000500)=""/61, 0x3d}], 0x1, 0x40, 0x4, 0x0) 2.489948841s ago: executing program 2 (id=968): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x10001, 0xb, 0x20000000, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) 2.428922363s ago: executing program 3 (id=969): connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x80000001}, 0x1c) sched_setattr(0x0, &(0x7f0000000280)={0x88, 0x0, 0x0, 0x100, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x8, 0x1}, 0x0) 2.251989642s ago: executing program 3 (id=970): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007110ba000000000045fffffe000000009500000073029b17"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) ftruncate(r1, 0x2007ffb) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = fsopen(&(0x7f0000000100)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4682}, 0x1c) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x439, 0x10000000, 0x0, {0x0, 0x0, 0x0, r7, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2}}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r4, &(0x7f0000000180)="3b826a86871d9a3d70e7c44b615ec95585a8238e3651c99acb57b8", 0x1b, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r7, 0x1, 0x4, 0x6, @multicast}, 0x14) 2.231389716s ago: executing program 2 (id=971): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'wlan1\x00', 0x7101}) r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x600000, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}, 0x91ffffff}], 0x49, 0x20008000) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000004c0)=@gcm_128={{0x304}, '\x00', "17197bb86696ce1d27a0442d148a416e", "82028d89", "218c005d8ceddfc5"}, 0x28) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000008c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001c00010029bd7000fedbdf2507000000", @ANYRES32=r6, @ANYBLOB="8000ba060a000201aaaaaaaa00000000"], 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x4040000) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) userfaultfd(0x80001) 2.015557083s ago: executing program 2 (id=972): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f00000002c0)={"bcffffff", 0x0, 0x5, 0x1, 0x200, 0x2, "0000000000e0ff00", "00ad4a00", '\x00', "97ad3700", ["fdfbfdffffffffffffff0040", "84c9964f495c75ccffffffff", "0000ef000200", "3bf100000000000000c48400"]}) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000480)={0xe4a, 0x4e3bf1cf, 0x10, 0x10001, 0x0, 0x7d, "541b50ac0000deff8f9a25bb00", 0x4, 0x4, 0x8, 0x0, 0x4, 0x7}) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) read$FUSE(r3, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50, 0x0, r4, {0x7, 0x2b, 0xffffffde, 0x318145a8, 0x0, 0xfffe, 0x2, 0xfffffff6, 0x0, 0x0, 0x8, 0x100}}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) close(r3) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x800005}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f00000002c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmsg$inet(r6, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$inet(r6, &(0x7f0000000cc0)={&(0x7f0000000340)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000d00)=[@ip_retopts={{0x10}}], 0x10}, 0x0) ioctl$TIOCMBIC(r5, 0x5417, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r7, 0xc018480b, &(0x7f00000000c0)={0x3, 0x200, 0x0, 0x8, 0x7, 0xa}) socket$nl_generic(0x10, 0x3, 0x10) 1.812205027s ago: executing program 2 (id=973): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000880)={@in6={{0xa, 0x4e24, 0xf37, @empty, 0x8000}}, 0x0, 0x0, 0x1e, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e24740bd4c0b42a21d7214bff16d2ccd00"}, 0xd8) sendto$inet6(r0, &(0x7f0000000300)='q', 0x1, 0x20008045, &(0x7f0000000340)={0xa, 0x2, 0x28, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 1.695158523s ago: executing program 2 (id=974): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'team_slave_1\x00', 0x800}) r2 = socket$kcm(0x10, 0x2, 0x0) syz_usb_connect(0x5, 0x35, &(0x7f0000000b00)={{0x12, 0x1, 0x201, 0xd4, 0xc1, 0xd6, 0x20, 0x1c40, 0x534, 0x2724, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x23, 0x1, 0xa5, 0x8, 0x80, 0xb7, "", [{{0x9, 0x4, 0xa2, 0x5, 0x1, 0x47, 0xee, 0xb9, 0x9, [], [{{0x9, 0x5, 0x6, 0x0, 0x10, 0x8, 0x8, 0x40, [@generic={0x8, 0xb, "04c541edc61d"}]}}]}}]}}]}}, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x64, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_POLICY={0x8}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0300000004000000040000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000048e473529c00"/23], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000340)={r4, &(0x7f0000000280), &(0x7f0000000300)=""/56}, 0x20) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r5, 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x10000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa0, r0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x54}}}}, [@NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0xa}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x6}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xc7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0xc2d}]}, @NL80211_ATTR_MESH_SETUP={0x20, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x1}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BSS_BASIC_RATES={0x6, 0x24, [{0x1}, {0x5}]}]}, 0xa0}}, 0x840) sendmsg$NL80211_CMD_DEL_KEY(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r0, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8800) 1.66289976s ago: executing program 1 (id=975): sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x8, 0x6001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x13, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2827e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac008000000000000200", "f4bd00000000f1ffffff00000000000000000000000f7a929c064fa24a00", [0x8, 0xffffffff9673e359]}}) 1.612086601s ago: executing program 0 (id=976): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsopen(0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$video4linux(&(0x7f00000007c0), 0x4, 0x20040) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x0, 0x0, 0x100b, 0x4, 0x0, 0x0, 0x5, 0x4}}) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) close(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x0, 0x0, 0x2000}}}}, @TCA_STAB={0x4}]}, 0x4c}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f00000001c0)=ANY=[@ANYRES16=r3, @ANYRES64], 0x3a) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x20, 0x0, 0x7, 0x301, 0x0, 0x0, {0x2}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x80000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000010}, 0x8000) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file1/../file0', [], 0xa, "a93f46aef367039840d1a0c6630aa67a94a49dc47a68e39b44bd1cd6a5f0d0d3028e13f527c8799782903f02f2a2205b61acb6b5424641ef224de2c3b4d38bb95878652c9e580e0861bc56cd394d19c7f41db159dd7dfb946c9f010000000000"}, 0x29) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) mmap(&(0x7f0000cda000/0x4000)=nil, 0x4000, 0x9, 0x12, r0, 0x173b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 1.363476635s ago: executing program 1 (id=977): syz_emit_ethernet(0x18, &(0x7f0000000240)=ANY=[@ANYBLOB="0180c2000021001122334455000a424203"], 0x0) 1.33904488s ago: executing program 3 (id=978): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000013c0)=@newtfilter={0x104, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_u32={{0x8}, {0xd8, 0x2, [@TCA_U32_SEL={0xd4, 0x5, {0x3, 0x6, 0xd, 0x5, 0x4, 0x1, 0x5, 0x9, [{0x8, 0x1, 0x19, 0x7}, {0x0, 0x7, 0xfe000000, 0x1}, {0x9, 0x4, 0x4, 0x4}, {0x7, 0x7, 0xd, 0x1}, {0x5, 0x0, 0x3, 0xffffffff}, {0x101, 0x398, 0x8, 0x2}, {0x9, 0x0, 0x8, 0x36}, {0x4, 0xe8c, 0xcc, 0x5}, {0xff, 0x40, 0x347c, 0x1a80}, {0x7, 0xe, 0xcf1713ac, 0x35ad5b6d}, {0x1, 0x6, 0xff, 0x4}, {0x0, 0xffff, 0x78e, 0x400}]}}]}}]}, 0x104}}, 0x0) write$tun(r0, &(0x7f0000000280)=ANY=[], 0xfd6c) 1.24806605s ago: executing program 4 (id=979): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002400)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0}, 0x44840) 1.204114319s ago: executing program 1 (id=980): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x3, r5}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r2, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 1.096601652s ago: executing program 3 (id=981): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x10001, 0xb, 0x20000000, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) 1.031911006s ago: executing program 4 (id=982): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000880)={0x0, 0xa1, &(0x7f0000000840)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001200010100000000e0ffffff07000000", @ANYRES32=0x0, @ANYBLOB="4884000000c0010008001d00c3"], 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x0) 839.662318ms ago: executing program 4 (id=983): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f00000002c0)={"bcffffff", 0x0, 0x5, 0x1, 0x200, 0x2, "0000000000e0ff00", "00ad4a00", '\x00', "97ad3700", ["fdfbfdffffffffffffff0040", "84c9964f495c75ccffffffff", "0000ef000200", "3bf100000000000000c48400"]}) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000480)={0xe4a, 0x4e3bf1cf, 0x10, 0x10001, 0x0, 0x7d, "541b50ac0000deff8f9a25bb00", 0x4, 0x4, 0x8, 0x0, 0x4, 0x7}) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) read$FUSE(r3, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50, 0x0, r4, {0x7, 0x2b, 0xffffffde, 0x318145a8, 0x0, 0xfffe, 0x2, 0xfffffff6, 0x0, 0x0, 0x8, 0x100}}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) close(r3) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x800005}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f00000002c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmsg$inet(r6, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$inet(r6, &(0x7f0000000cc0)={&(0x7f0000000340)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000d00)=[@ip_retopts={{0x10}}], 0x10}, 0x0) ioctl$TIOCMBIC(r5, 0x5417, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r7, 0xc018480b, &(0x7f00000000c0)={0x3, 0x200, 0x0, 0x8, 0x7, 0xa}) socket$nl_generic(0x10, 0x3, 0x10) 839.471848ms ago: executing program 1 (id=984): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x3}, 0x1c) shutdown(r0, 0x2) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000880)={@in6={{0xa, 0x4e24, 0xf37, @empty, 0x8000}}, 0x0, 0x0, 0x1e, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e24740bd4c0b42a21d7214bff16d2ccd00"}, 0xd8) sendto$inet6(r0, &(0x7f0000000300)='q', 0x1, 0x20008045, &(0x7f0000000340)={0xa, 0x2, 0x28, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 839.133398ms ago: executing program 3 (id=985): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x4cd) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80000) mmap$panthor(&(0x7f0000154000/0x3000)=nil, 0x3000, 0x2, 0x8010, 0xffffffffffffffff, 0x800) openat$ppp(0xffffff9c, &(0x7f0000000040), 0x709100, 0x0) socket(0x2, 0x80805, 0x0) listen(r1, 0xb95) remap_file_pages(&(0x7f0000903000/0x1000)=nil, 0x1000, 0x0, 0x9, 0xf000000) 719.624044ms ago: executing program 1 (id=986): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r1, &(0x7f0000000200)=[{&(0x7f0000000500)=""/61, 0x3d}], 0x1, 0x40, 0x4, 0x0) 546.517391ms ago: executing program 4 (id=987): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000005c0)=0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = dup2(r0, r3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r4) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={r2, 0x10}, 0x8) setsockopt$inet6_int(r0, 0x29, 0xce, &(0x7f0000000580)=0xfffffffc, 0x4) 522.795467ms ago: executing program 0 (id=988): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007110ba000000000045fffffe000000009500000073029b17"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) ftruncate(r1, 0x2007ffb) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = fsopen(&(0x7f0000000100)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4682}, 0x1c) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x439, 0x10000000, 0x0, {0x0, 0x0, 0x0, r7, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2}}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r4, &(0x7f0000000180)="3b826a86871d9a3d70e7c44b615ec95585a8238e3651c99acb57b8", 0x1b, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r7, 0x1, 0x4, 0x6, @multicast}, 0x14) 0s ago: executing program 4 (id=989): r0 = memfd_create(&(0x7f0000000040)='<\xe0Vxv\xdbA\xa6\xdf\xca;0\x92\x99_\xa7\xeaJ\xd3?\x9apW2\x8cHpH\xad\xe9\x1b\xf2[\xeb\x85?\x007\b\x98*\xf2`\xb2\xf0\xf8\xc4L\xc03\xc5\x8f`\xf2\xd5\xaf', 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x68}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e"], 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0xffffffffffffffa9, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {0x0, 0x410c}}}, 0x1c}, 0x1, 0x0, 0x0, 0x400c015}, 0x8000) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0105b08, &(0x7f0000000040)) kernel console output (not intermixed with test programs): 1][ T7] usb 1-1: Product: syz [ 101.637085][ T7] usb 1-1: Manufacturer: syz [ 101.653969][ T4630] binder: 4628:4630 unknown command 1074553622 [ 101.660809][ T4630] binder: 4628:4630 ioctl c0306201 200000000640 returned -22 [ 101.677077][ T4630] netlink: 12 bytes leftover after parsing attributes in process `syz.3.102'. [ 101.866170][ T955] usb 1-1: USB disconnect, device number 4 [ 101.894082][ C1] wacom 0003:056A:033B.0001: Event data for report 2 was too short (9 vs 6) [ 102.099521][ T4321] usb 5-1: USB disconnect, device number 3 [ 102.243041][ T4631] fido_id[4631]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 102.908284][ T4647] loop8: detected capacity change from 0 to 7 [ 102.938569][ T4356] Dev loop8: unable to read RDB block 7 [ 102.945739][ T4356] loop8: unable to read partition table [ 102.991115][ T4356] loop8: partition table beyond EOD, truncated [ 103.047169][ T4647] Dev loop8: unable to read RDB block 7 [ 103.073282][ T4647] loop8: unable to read partition table [ 103.089481][ T4647] loop8: partition table beyond EOD, truncated [ 103.122778][ T4647] loop_reread_partitions: partition scan of loop8 (þ被xü^>æ) failed (rc=-5) [ 103.670630][ T7] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 103.811557][ T4664] binder: 4663:4664 unknown command 1074553622 [ 103.818017][ T4664] binder: 4663:4664 ioctl c0306201 200000000640 returned -22 [ 103.854111][ T4664] netlink: 12 bytes leftover after parsing attributes in process `syz.4.114'. [ 103.867281][ T7] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 103.910351][ T7] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 103.990357][ T7] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 104.051305][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.292681][ T7] usb 1-1: usb_control_msg returned -71 [ 104.298466][ T7] usbtmc 1-1:16.0: can't read capabilities [ 104.341043][ T7] usb 1-1: USB disconnect, device number 5 [ 104.400339][ T4321] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 104.590424][ T4320] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 104.602414][ T4321] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.621061][ T4321] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 104.639717][ T4321] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 104.669291][ T4321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 104.688232][ T4321] usb 5-1: Product: syz [ 104.698396][ T4321] usb 5-1: Manufacturer: syz [ 104.792414][ T4320] usb 4-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 104.810345][ T4320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.940989][ T7] usb 5-1: USB disconnect, device number 4 [ 105.186740][ T4689] loop8: detected capacity change from 0 to 7 [ 105.202889][ T4356] Dev loop8: unable to read RDB block 7 [ 105.208927][ T4356] loop8: unable to read partition table [ 105.225354][ T4356] loop8: partition table beyond EOD, truncated [ 105.232349][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 105.245053][ T4689] Dev loop8: unable to read RDB block 7 [ 105.255980][ T4320] wacom 0003:056A:033B.0002: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 105.266423][ T4689] loop8: unable to read partition table [ 105.286227][ T4689] loop8: partition table beyond EOD, truncated [ 105.306939][ T4320] wacom 0003:056A:033B.0002: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.3-1/input0 [ 105.311568][ T4690] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 105.341760][ T4689] loop_reread_partitions: partition scan of loop8 (þ被xü^>æ) failed (rc=-5) [ 105.357403][ T4320] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:056A:033B.0002/input/input8 [ 105.386629][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 105.438081][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 105.560561][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 105.661283][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 105.701135][ C1] wacom 0003:056A:033B.0002: Event data for report 2 was too short (9 vs 6) [ 105.712145][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 105.762497][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 105.937974][ T4700] binder: 4699:4700 unknown command 1074553622 [ 105.952379][ T4700] binder: 4699:4700 ioctl c0306201 200000000640 returned -22 [ 105.963887][ T7] usb 4-1: USB disconnect, device number 3 [ 105.969583][ T4700] netlink: 12 bytes leftover after parsing attributes in process `syz.0.127'. [ 106.377671][ T4715] netlink: 64 bytes leftover after parsing attributes in process `syz.2.130'. [ 106.680387][ T7] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 106.873610][ T7] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 106.903611][ T7] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.936385][ T4731] loop8: detected capacity change from 0 to 7 [ 106.956551][ T4356] Dev loop8: unable to read RDB block 7 [ 106.963407][ T4356] loop8: unable to read partition table [ 106.975432][ T4356] loop8: partition table beyond EOD, truncated [ 106.994131][ T4731] Dev loop8: unable to read RDB block 7 [ 107.003749][ T4731] loop8: unable to read partition table [ 107.016092][ T4731] loop8: partition table beyond EOD, truncated [ 107.023046][ T7] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 107.059786][ T4731] loop_reread_partitions: partition scan of loop8 (þ被xü^>æ) failed (rc=-5) [ 107.074347][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.342128][ T7] usb 2-1: usb_control_msg returned -71 [ 107.348490][ T7] usbtmc 2-1:16.0: can't read capabilities [ 107.387370][ T7] usb 2-1: USB disconnect, device number 4 [ 107.720429][ T4282] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 107.922592][ T4282] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.942800][ T4282] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 107.977105][ T4282] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 108.002291][ T4282] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 108.013372][ T4282] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 108.021826][ T4282] usb 1-1: Product: syz [ 108.026114][ T4282] usb 1-1: Manufacturer: syz [ 108.248323][ T7] usb 1-1: USB disconnect, device number 6 [ 108.867267][ T4746] binder: 4745:4746 unknown command 1074553622 [ 108.905467][ T4746] binder: 4745:4746 ioctl c0306201 200000000640 returned -22 [ 108.951598][ T4746] netlink: 12 bytes leftover after parsing attributes in process `syz.1.142'. [ 109.920410][ T4320] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 110.088628][ T4760] loop8: detected capacity change from 0 to 7 [ 110.104693][ T4320] usb 1-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 110.122097][ T4760] Dev loop8: unable to read RDB block 7 [ 110.138552][ T4320] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.160424][ T4760] loop8: unable to read partition table [ 110.234187][ T4760] loop8: partition table beyond EOD, truncated [ 110.297873][ T4760] loop_reread_partitions: partition scan of loop8 (þ被xü^>æ) failed (rc=-5) [ 110.600098][ T4320] wacom 0003:056A:033B.0003: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 110.617453][ T4320] wacom 0003:056A:033B.0003: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.0-1/input0 [ 110.637655][ T4320] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:056A:033B.0003/input/input11 [ 110.700419][ T4318] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 110.819069][ C0] wacom 0003:056A:033B.0003: Event data for report 2 was too short (9 vs 2) [ 110.820518][ T4321] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 110.835717][ T22] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 110.905629][ T4318] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 110.936162][ T4318] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.975845][ T4318] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 110.989319][ T4318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.023985][ C0] wacom 0003:056A:033B.0003: Event data for report 2 was too short (9 vs 6) [ 111.037184][ T22] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.052174][ T4321] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 111.066170][ T4321] usb 4-1: config 0 has no interface number 0 [ 111.066207][ T4778] binder: 4777:4778 unknown command 1074553622 [ 111.078244][ T22] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 111.078923][ T4778] binder: 4777:4778 ioctl c0306201 200000000640 returned -22 [ 111.097839][ T4778] netlink: 12 bytes leftover after parsing attributes in process `syz.2.156'. [ 111.109402][ T4321] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 111.130315][ T22] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 111.151125][ T22] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 111.168045][ T4321] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 111.177450][ T4321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.193232][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 111.205092][ T4321] usb 4-1: Product: syz [ 111.213253][ T4318] usb 2-1: usb_control_msg returned -71 [ 111.218906][ T4318] usbtmc 2-1:16.0: can't read capabilities [ 111.225378][ T22] usb 5-1: Product: syz [ 111.230643][ T4321] usb 4-1: Manufacturer: syz [ 111.235285][ T4321] usb 4-1: SerialNumber: syz [ 111.240133][ T22] usb 5-1: Manufacturer: syz [ 111.246317][ T4282] usb 1-1: USB disconnect, device number 7 [ 111.268187][ T4321] usb 4-1: config 0 descriptor?? [ 111.273942][ T4318] usb 2-1: USB disconnect, device number 5 [ 111.309667][ T4321] yurex 4-1:0.50: USB YUREX device now attached to Yurex #1 [ 111.472367][ T4321] usb 5-1: USB disconnect, device number 5 [ 111.503094][ T3654] usb 4-1: USB disconnect, device number 4 [ 111.524677][ T3654] yurex 4-1:0.50: USB YUREX #1 now disconnected [ 112.139842][ T4792] xt_policy: output policy not valid in PREROUTING and INPUT [ 112.558699][ T4799] netlink: 64 bytes leftover after parsing attributes in process `syz.3.162'. [ 112.705182][ T4804] loop8: detected capacity change from 0 to 7 [ 112.722033][ T4804] Dev loop8: unable to read RDB block 7 [ 112.739246][ T4804] loop8: unable to read partition table [ 112.758798][ T4804] loop8: partition table beyond EOD, truncated [ 112.781175][ T4804] loop_reread_partitions: partition scan of loop8 (þ被xü^>æ) failed (rc=-5) [ 114.041284][ T4818] netlink: 12 bytes leftover after parsing attributes in process `syz.0.169'. [ 114.110610][ T27] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 114.315567][ T27] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 114.337306][ T27] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 114.407979][ T27] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 114.426437][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.652097][ T27] usb 2-1: usb_control_msg returned -71 [ 114.662953][ T27] usbtmc 2-1:16.0: can't read capabilities [ 114.700304][ T4321] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 114.715521][ T27] usb 2-1: USB disconnect, device number 6 [ 114.916403][ T4321] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.930568][ T4321] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 114.946673][ T4321] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 114.979199][ T4321] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 114.990420][ T4321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 115.000288][ T4321] usb 1-1: Product: syz [ 115.004499][ T4321] usb 1-1: Manufacturer: syz [ 115.030341][ T7] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 115.235587][ T7] usb 3-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 115.236330][ T4321] usb 1-1: USB disconnect, device number 8 [ 115.250284][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.270610][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.697695][ T7] wacom 0003:056A:033B.0004: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 115.725891][ T7] wacom 0003:056A:033B.0004: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.2-1/input0 [ 115.783261][ T7] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:056A:033B.0004/input/input14 [ 115.941212][ C1] wacom 0003:056A:033B.0004: Event data for report 2 was too short (9 vs 2) [ 116.146743][ C1] wacom 0003:056A:033B.0004: Event data for report 2 was too short (9 vs 6) [ 116.363140][ T3654] usb 3-1: USB disconnect, device number 5 [ 116.380968][ T4836] loop8: detected capacity change from 0 to 7 [ 116.428302][ T4836] Dev loop8: unable to read RDB block 7 [ 116.444648][ T4836] loop8: unable to read partition table [ 116.490517][ T4836] loop8: partition table beyond EOD, truncated [ 116.503913][ T4836] loop_reread_partitions: partition scan of loop8 (þ被xü^>æ) failed (rc=-5) [ 117.099451][ T4860] netlink: 12 bytes leftover after parsing attributes in process `syz.4.183'. [ 117.310417][ T4321] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 117.367080][ T4318] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 117.502346][ T4321] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 117.523271][ T4321] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.554364][ T4318] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.572338][ T4321] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 117.589419][ T4318] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 117.609169][ T4321] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.619294][ T4318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 117.628692][ T4318] usb 2-1: Product: syz [ 117.635447][ T4318] usb 2-1: Manufacturer: syz [ 117.652561][ T4318] usb 2-1: selecting invalid altsetting 1 [ 117.660099][ T4318] dvb_ttusb_budget: ttusb_init_controller: error [ 117.667272][ T4318] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 117.815122][ T4318] DVB: Unable to find symbol cx22700_attach() [ 117.844616][ T4321] usb 3-1: usb_control_msg returned -71 [ 117.864428][ T4321] usbtmc 3-1:16.0: can't read capabilities [ 117.904256][ T4321] usb 3-1: USB disconnect, device number 6 [ 118.019160][ T4318] DVB: Unable to find symbol tda10046_attach() [ 118.029550][ T4318] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 118.040833][ T4318] usb 2-1: USB disconnect, device number 7 [ 118.206354][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 118.228049][ T4880] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 118.729354][ T4894] netlink: 12 bytes leftover after parsing attributes in process `syz.0.197'. [ 119.161096][ T3654] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 119.386598][ T3654] usb 2-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 119.399981][ T3654] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.570308][ T4321] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 119.762154][ T4321] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 119.775970][ T4321] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 119.804442][ T4321] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 119.831896][ T3654] wacom 0003:056A:033B.0005: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 119.845320][ T4321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.857127][ T3654] wacom 0003:056A:033B.0005: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.1-1/input0 [ 119.872874][ T7] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 119.889733][ T3654] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:056A:033B.0005/input/input17 [ 120.063528][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.079405][ T4321] usb 1-1: usb_control_msg returned -71 [ 120.085181][ C1] wacom 0003:056A:033B.0005: Event data for report 2 was too short (9 vs 2) [ 120.102128][ T7] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 120.123939][ T4321] usbtmc 1-1:16.0: can't read capabilities [ 120.146883][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 120.172207][ T4321] usb 1-1: USB disconnect, device number 9 [ 120.185281][ T7] usb 5-1: Product: syz [ 120.209720][ T7] usb 5-1: Manufacturer: syz [ 120.269181][ T7] usb 5-1: selecting invalid altsetting 1 [ 120.284217][ C1] wacom 0003:056A:033B.0005: Event data for report 2 was too short (9 vs 6) [ 120.293471][ T7] dvb_ttusb_budget: ttusb_init_controller: error [ 120.314486][ T7] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 120.486476][ T7] DVB: Unable to find symbol cx22700_attach() [ 120.503878][ T3654] usb 2-1: USB disconnect, device number 8 [ 120.674971][ T7] DVB: Unable to find symbol tda10046_attach() [ 120.683422][ T7] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 120.759057][ T7] usb 5-1: USB disconnect, device number 6 [ 121.193142][ T4933] binder: 4932:4933 unknown command 1074553622 [ 121.217651][ T4933] binder: 4932:4933 ioctl c0306201 200000000640 returned -22 [ 121.277771][ T4933] netlink: 12 bytes leftover after parsing attributes in process `syz.4.211'. [ 122.107566][ T4956] netlink: 12 bytes leftover after parsing attributes in process `syz.3.219'. [ 122.310371][ T7] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 122.504923][ T7] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 122.520309][ T4282] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 122.529235][ T7] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 122.559896][ T7] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 122.580013][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.725141][ T4282] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.755747][ T4282] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 122.781630][ T4282] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 122.803481][ T4282] usb 1-1: Product: syz [ 122.824929][ T4282] usb 1-1: Manufacturer: syz [ 122.837401][ T7] usb 5-1: usb_control_msg returned -71 [ 122.843357][ T7] usbtmc 5-1:16.0: can't read capabilities [ 122.855569][ T4282] usb 1-1: selecting invalid altsetting 1 [ 122.865068][ T4282] dvb_ttusb_budget: ttusb_init_controller: error [ 122.874261][ T7] usb 5-1: USB disconnect, device number 7 [ 122.880261][ T4282] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 123.090452][ T4282] DVB: Unable to find symbol cx22700_attach() [ 123.155940][ T4971] binder: 4969:4971 unknown command 1074553622 [ 123.180401][ T4971] binder: 4969:4971 ioctl c0306201 200000000640 returned -22 [ 123.193813][ T4971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.224'. [ 123.298922][ T4282] DVB: Unable to find symbol tda10046_attach() [ 123.316337][ T4282] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 123.354400][ T4282] usb 1-1: USB disconnect, device number 10 [ 123.812511][ T22] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 124.023393][ T22] usb 5-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 124.045905][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.200054][ T4992] Scaler: ================= START STATUS ================= [ 124.217964][ T4992] Scaler: ================== END STATUS ================== [ 124.508533][ T22] wacom 0003:056A:033B.0006: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 124.530578][ T22] wacom 0003:056A:033B.0006: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.4-1/input0 [ 124.566646][ T22] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:056A:033B.0006/input/input20 [ 124.961419][ C1] wacom 0003:056A:033B.0006: Event data for report 2 was too short (9 vs 6) [ 125.112225][ T5009] binder: 5007:5009 unknown command 1074553622 [ 125.127115][ T5009] binder: 5007:5009 ioctl c0306201 200000000640 returned -22 [ 125.164773][ T4321] usb 5-1: USB disconnect, device number 8 [ 125.179161][ T5009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.235'. [ 125.380476][ T955] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 125.600386][ T955] usb 1-1: Using ep0 maxpacket: 8 [ 125.608003][ T955] usb 1-1: config 0 has no interfaces? [ 125.627095][ T955] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 125.650548][ T955] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.681187][ T955] usb 1-1: config 0 descriptor?? [ 125.710399][ T4321] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 125.720327][ T22] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 125.905887][ T4318] usb 1-1: USB disconnect, device number 11 [ 125.915095][ T22] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.926469][ T4321] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 125.972575][ T4321] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.990395][ T4321] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 125.999808][ T4321] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.010373][ T22] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 126.036147][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 126.050867][ T22] usb 4-1: Product: syz [ 126.055347][ T22] usb 4-1: Manufacturer: syz [ 126.072033][ T22] usb 4-1: selecting invalid altsetting 1 [ 126.079651][ T22] dvb_ttusb_budget: ttusb_init_controller: error [ 126.086642][ T22] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 126.235104][ T4321] usb 3-1: usb_control_msg returned -71 [ 126.243947][ T4321] usbtmc 3-1:16.0: can't read capabilities [ 126.286486][ T4321] usb 3-1: USB disconnect, device number 7 [ 126.337002][ T22] DVB: Unable to find symbol cx22700_attach() [ 126.480518][ T22] DVB: Unable to find symbol tda10046_attach() [ 126.490135][ T22] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 126.517032][ T22] usb 4-1: USB disconnect, device number 5 [ 127.110445][ T22] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 127.324241][ T22] usb 5-1: config 150 has an invalid interface number: 204 but max is 2 [ 127.345277][ T22] usb 5-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 127.371013][ T22] usb 5-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 127.389183][ T22] usb 5-1: config 150 has no interface number 0 [ 127.409640][ T22] usb 5-1: config 150 interface 204 has no altsetting 0 [ 127.449940][ T22] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 127.478274][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.496769][ T22] usb 5-1: Product: syz [ 127.511630][ T22] usb 5-1: Manufacturer: syz [ 127.523238][ T22] usb 5-1: SerialNumber: syz [ 127.767151][ T22] xr_serial 5-1:150.204: skipping garbage [ 127.794329][ T22] usb 5-1: USB disconnect, device number 9 [ 127.961938][ T5050] binder: 5046:5050 unknown command 1074553622 [ 127.989680][ T5050] binder: 5046:5050 ioctl c0306201 200000000640 returned -22 [ 128.037719][ T5050] netlink: 12 bytes leftover after parsing attributes in process `syz.1.246'. [ 128.789455][ T4282] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 128.800307][ T27] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 128.991865][ T4282] usb 5-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 129.002284][ T27] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 129.013020][ T4282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.029000][ T27] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 129.060237][ T27] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 129.086705][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.317060][ T27] usb 4-1: usb_control_msg returned -71 [ 129.323638][ T27] usbtmc 4-1:16.0: can't read capabilities [ 129.341805][ T27] usb 4-1: USB disconnect, device number 6 [ 129.375051][ T5079] Scaler: ================= START STATUS ================= [ 129.383088][ T5079] Scaler: ================== END STATUS ================== [ 129.390861][ T22] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 129.461600][ T4282] wacom 0003:056A:033B.0007: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 129.482004][ T4282] wacom 0003:056A:033B.0007: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.4-1/input0 [ 129.500073][ T4282] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:056A:033B.0007/input/input23 [ 129.596255][ T22] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.632182][ T22] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 129.650236][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 129.682470][ T22] usb 2-1: Product: syz [ 129.686730][ T22] usb 2-1: Manufacturer: syz [ 129.753907][ T22] usb 2-1: selecting invalid altsetting 1 [ 129.759802][ T22] dvb_ttusb_budget: ttusb_init_controller: error [ 129.794127][ T22] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 129.928408][ C0] wacom 0003:056A:033B.0007: Event data for report 2 was too short (9 vs 6) [ 130.027255][ T22] DVB: Unable to find symbol cx22700_attach() [ 130.121689][ T22] DVB: Unable to find symbol tda10046_attach() [ 130.127922][ T22] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 130.132951][ T4323] usb 5-1: USB disconnect, device number 10 [ 130.202234][ T22] usb 2-1: USB disconnect, device number 9 [ 130.310478][ T4282] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 130.520627][ T4282] usb 3-1: Using ep0 maxpacket: 8 [ 130.527957][ T4282] usb 3-1: config 0 has no interfaces? [ 130.533642][ T4282] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 130.543409][ T4282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.561667][ T4282] usb 3-1: config 0 descriptor?? [ 130.802275][ T22] usb 3-1: USB disconnect, device number 8 [ 130.933615][ T5086] binder: 5085:5086 unknown command 1074553622 [ 130.939856][ T5086] binder: 5085:5086 ioctl c0306201 200000000640 returned -22 [ 130.971125][ T5086] netlink: 12 bytes leftover after parsing attributes in process `syz.4.260'. [ 132.290406][ T22] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 132.300693][ T4323] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 132.400330][ T4321] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 132.497016][ T4323] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 132.509535][ T4323] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.514892][ T22] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.545981][ T4323] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 132.562217][ T4323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.570857][ T22] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 132.596571][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 132.606896][ T4321] usb 4-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 132.636282][ T4321] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.651052][ T22] usb 5-1: Product: syz [ 132.657990][ T22] usb 5-1: Manufacturer: syz [ 132.699990][ T22] usb 5-1: selecting invalid altsetting 1 [ 132.713272][ T22] dvb_ttusb_budget: ttusb_init_controller: error [ 132.722146][ T22] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 132.782979][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.789926][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.797374][ T4323] usb 3-1: usb_control_msg returned -71 [ 132.804313][ T4323] usbtmc 3-1:16.0: can't read capabilities [ 132.849689][ T4323] usb 3-1: USB disconnect, device number 9 [ 132.991643][ T22] DVB: Unable to find symbol cx22700_attach() [ 133.083921][ T4321] wacom 0003:056A:033B.0008: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 133.104865][ T22] DVB: Unable to find symbol tda10046_attach() [ 133.111242][ T22] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 133.141284][ T4321] wacom 0003:056A:033B.0008: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.3-1/input0 [ 133.158592][ T22] usb 5-1: USB disconnect, device number 11 [ 133.168697][ T4321] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:056A:033B.0008/input/input26 [ 133.544294][ C1] wacom 0003:056A:033B.0008: Event data for report 2 was too short (9 vs 6) [ 133.746910][ T4320] usb 4-1: USB disconnect, device number 7 [ 133.928824][ T5135] binder: 5134:5135 unknown command 1074553622 [ 133.976805][ T5135] binder: 5134:5135 ioctl c0306201 200000000640 returned -22 [ 134.002162][ T5135] netlink: 12 bytes leftover after parsing attributes in process `syz.2.273'. [ 134.198759][ T5143] netlink: 168 bytes leftover after parsing attributes in process `syz.2.276'. [ 135.006708][ T955] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 135.221744][ T955] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 135.239703][ T5168] Scaler: ================= START STATUS ================= [ 135.249986][ T955] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.280996][ T5168] Scaler: ================== END STATUS ================== [ 135.292378][ T955] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 135.330276][ T955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.545564][ T955] usb 4-1: usb_control_msg returned -71 [ 135.552546][ T955] usbtmc 4-1:16.0: can't read capabilities [ 135.588776][ T955] usb 4-1: USB disconnect, device number 8 [ 135.664263][ T26] audit: type=1326 audit(1790496924.426:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5175 comm="syz.2.285" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe8bd59e159 code=0x0 [ 136.217672][ T5182] binder: 5181:5182 unknown command 1074553622 [ 136.224459][ T5182] binder: 5181:5182 ioctl c0306201 200000000640 returned -22 [ 136.240312][ T22] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 136.259456][ T5182] netlink: 12 bytes leftover after parsing attributes in process `syz.3.287'. [ 136.433583][ T22] usb 2-1: Using ep0 maxpacket: 8 [ 136.442497][ T22] usb 2-1: config 0 has no interfaces? [ 136.460697][ T22] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 136.460781][ T4282] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 136.484091][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.507218][ T22] usb 2-1: config 0 descriptor?? [ 136.717902][ T4282] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.732846][ T4282] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 136.742429][ T4282] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 136.751852][ T4282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.771302][ T4282] usb 5-1: config 0 descriptor?? [ 136.805889][ T4282] usb 2-1: USB disconnect, device number 10 [ 136.984156][ T4320] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 137.193590][ T4320] usb 4-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 137.207283][ T4320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.219259][ T5202] IPv6: Can't replace route, no match found [ 137.242440][ T5202] netlink: 64 bytes leftover after parsing attributes in process `syz.2.294'. [ 137.323861][ T3654] usb 5-1: USB disconnect, device number 12 [ 137.557910][ T22] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 137.634038][ T4320] wacom 0003:056A:033B.0009: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 137.652988][ T4320] wacom 0003:056A:033B.0009: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.3-1/input0 [ 137.666050][ T4320] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:056A:033B.0009/input/input29 [ 137.766295][ T22] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 137.774789][ T22] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.787534][ T22] usb 3-1: config 0 has no interface number 0 [ 137.796624][ T22] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 137.808134][ T22] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 137.818490][ T22] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 137.844339][ C1] wacom 0003:056A:033B.0009: Event data for report 2 was too short (9 vs 2) [ 137.869377][ T22] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 137.891127][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.903918][ T22] usb 3-1: Product: syz [ 137.908252][ T22] usb 3-1: Manufacturer: syz [ 137.913202][ T22] usb 3-1: SerialNumber: syz [ 137.943871][ T22] usb 3-1: config 0 descriptor?? [ 137.980377][ T4323] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 138.045131][ C1] wacom 0003:056A:033B.0009: Event data for report 2 was too short (9 vs 6) [ 138.180358][ T4323] usb 2-1: Using ep0 maxpacket: 32 [ 138.247963][ T22] usb 4-1: USB disconnect, device number 9 [ 138.306674][ T4323] usb 2-1: unable to get BOS descriptor or descriptor too short [ 138.321595][ T4323] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 138.339429][ T4323] usb 2-1: can't read configurations, error -71 [ 138.366741][ T5214] binder: 5213:5214 unknown command 1074553622 [ 138.375482][ T5214] binder: 5213:5214 ioctl c0306201 200000000640 returned -22 [ 138.386459][ T5214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.299'. [ 138.400477][ T4321] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 138.603117][ T4321] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 138.620483][ T4321] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.634027][ T4321] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 138.647041][ T4321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.874589][ T4321] usb 5-1: usb_control_msg returned -71 [ 138.891879][ T4321] usbtmc 5-1:16.0: can't read capabilities [ 138.966570][ T4321] usb 5-1: USB disconnect, device number 13 [ 139.089198][ T5228] netlink: 28 bytes leftover after parsing attributes in process `syz.1.303'. [ 139.117127][ T4277] Bluetooth: hci3: SCO packet for unknown connection handle 2850 [ 139.117705][ T4277] Bluetooth: hci3: Unknown advertising packet type: 0x20 [ 139.126032][ T4277] Bluetooth: hci3: Malformed LE Event: 0x0d [ 140.022290][ T5248] binder: 5247:5248 unknown command 1074553622 [ 140.048960][ T5248] binder: 5247:5248 ioctl c0306201 200000000640 returned -22 [ 140.082995][ T5253] Scaler: ================= START STATUS ================= [ 140.093998][ T5253] Scaler: ================== END STATUS ================== [ 140.097086][ T5248] netlink: 12 bytes leftover after parsing attributes in process `syz.4.310'. [ 140.212394][ T5256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.312'. [ 140.265810][ T4323] usb 3-1: USB disconnect, device number 10 [ 140.355240][ T22] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 140.552840][ T22] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.573589][ T22] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 140.588560][ T22] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 140.609797][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.632470][ T22] usb 4-1: config 0 descriptor?? [ 140.660369][ T4321] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 140.866092][ T4321] usb 5-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 140.881056][ T4321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.990426][ T22] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 141.193705][ T22] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 141.205584][ T22] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 141.218987][ T22] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 141.228473][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.302714][ T27] usb 4-1: USB disconnect, device number 10 [ 141.323668][ T4321] wacom 0003:056A:033B.000A: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 141.343602][ T4321] wacom 0003:056A:033B.000A: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.4-1/input0 [ 141.363692][ T4321] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:056A:033B.000A/input/input33 [ 141.469748][ T22] usb 3-1: usb_control_msg returned -71 [ 141.479302][ T22] usbtmc 3-1:16.0: can't read capabilities [ 141.496388][ T22] usb 3-1: USB disconnect, device number 11 [ 141.543914][ C1] wacom 0003:056A:033B.000A: Event data for report 2 was too short (9 vs 2) [ 141.744699][ C1] wacom 0003:056A:033B.000A: Event data for report 2 was too short (9 vs 6) [ 141.957208][ T4321] usb 5-1: USB disconnect, device number 14 [ 142.184485][ T5285] binder: 5284:5285 unknown command 1074553622 [ 142.223483][ T5285] binder: 5284:5285 ioctl c0306201 200000000640 returned -22 [ 142.238515][ T5287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.322'. [ 142.287112][ T5290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.323'. [ 142.668129][ T5304] Scaler: ================= START STATUS ================= [ 142.686306][ T5304] Scaler: ================== END STATUS ================== [ 142.843670][ T5307] process 'syz.2.330' launched './file0' with NULL argv: empty string added [ 143.067160][ T5316] binder: 5315:5316 unknown command 1074553622 [ 143.090320][ T5316] binder: 5315:5316 ioctl c0306201 200000000640 returned -22 [ 143.100807][ T5316] netlink: 12 bytes leftover after parsing attributes in process `syz.3.334'. [ 143.180636][ T22] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 143.220983][ T5318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.335'. [ 143.280337][ T4321] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 143.388073][ T22] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 143.403832][ T22] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.448020][ T22] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 143.468855][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.497980][ T4321] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.515834][ T4321] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 143.541579][ T4321] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 143.564344][ T4321] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.601296][ T4321] usb 2-1: config 0 descriptor?? [ 143.739648][ T22] usb 5-1: usb_control_msg returned -71 [ 143.748532][ T22] usbtmc 5-1:16.0: can't read capabilities [ 143.807699][ T22] usb 5-1: USB disconnect, device number 15 [ 144.195039][ T27] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 144.211369][ T955] usb 2-1: USB disconnect, device number 13 [ 144.392540][ T27] usb 1-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 144.429554][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.607200][ T5348] binder: 5347:5348 unknown command 1074553622 [ 144.624668][ T5348] binder: 5347:5348 ioctl c0306201 200000000640 returned -22 [ 144.638518][ T5348] netlink: 12 bytes leftover after parsing attributes in process `syz.2.345'. [ 144.874090][ T27] wacom 0003:056A:033B.000B: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 144.898216][ T27] wacom 0003:056A:033B.000B: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.0-1/input0 [ 144.947100][ T27] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:056A:033B.000B/input/input36 [ 144.973709][ T5352] device syzkaller0 entered promiscuous mode [ 145.080614][ C1] wacom 0003:056A:033B.000B: Event data for report 2 was too short (9 vs 2) [ 145.269165][ T5358] Scaler: ================= START STATUS ================= [ 145.294552][ T4321] usb 1-1: USB disconnect, device number 12 [ 145.309867][ T5358] Scaler: ================== END STATUS ================== [ 145.387858][ T5356] fido_id[5356]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 146.030301][ T955] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 146.129075][ T5379] binder: 5378:5379 unknown command 1074553622 [ 146.141427][ T5379] binder: 5378:5379 ioctl c0306201 200000000640 returned -22 [ 146.155721][ T5379] netlink: 12 bytes leftover after parsing attributes in process `syz.2.358'. [ 146.232241][ T955] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 146.261163][ T955] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 146.293517][ T955] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 146.308750][ T955] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.480299][ T27] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 146.542170][ T955] usb 2-1: usb_control_msg returned -71 [ 146.557132][ T955] usbtmc 2-1:16.0: can't read capabilities [ 146.591191][ T955] usb 2-1: USB disconnect, device number 14 [ 146.692558][ T27] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.715818][ T27] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 146.743750][ T27] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 146.762092][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.802521][ T27] usb 1-1: config 0 descriptor?? [ 147.149498][ T5386] device syzkaller0 entered promiscuous mode [ 147.463416][ T27] usb 1-1: USB disconnect, device number 13 [ 147.794367][ T26] audit: type=1326 audit(1790496936.556:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5403 comm="syz.3.368" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57b3d9e159 code=0x7ffc0000 [ 147.839090][ T26] audit: type=1326 audit(1790496936.556:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5403 comm="syz.3.368" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f57b3d9e159 code=0x7ffc0000 [ 147.892345][ T26] audit: type=1326 audit(1790496936.556:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5403 comm="syz.3.368" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57b3d9e159 code=0x7ffc0000 [ 147.940391][ T4323] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 148.125546][ T5401] block device autoloading is deprecated and will be removed. [ 148.134800][ T4323] usb 2-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 148.182995][ T4323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.226857][ T5412] binder: 5411:5412 unknown command 1074553622 [ 148.253215][ T5412] binder: 5411:5412 ioctl c0306201 200000000640 returned -22 [ 148.262513][ T5401] syz.2.365: attempt to access beyond end of device [ 148.262513][ T5401] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 148.321853][ T5412] netlink: 12 bytes leftover after parsing attributes in process `syz.0.370'. [ 148.619467][ T4323] wacom 0003:056A:033B.000C: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 148.642924][ T4323] wacom 0003:056A:033B.000C: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.1-1/input0 [ 148.682618][ T4323] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:056A:033B.000C/input/input39 [ 148.860458][ T3654] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 149.052112][ T3654] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 149.070037][ T3654] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.077948][ T27] usb 2-1: USB disconnect, device number 15 [ 149.112543][ T3654] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 149.133635][ T3654] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.184837][ T5427] device syzkaller0 entered promiscuous mode [ 149.231262][ T5424] fido_id[5424]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 149.383555][ T3654] usb 4-1: usb_control_msg returned -71 [ 149.389221][ T3654] usbtmc 4-1:16.0: can't read capabilities [ 149.428001][ T3654] usb 4-1: USB disconnect, device number 11 [ 150.128333][ T5435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.380'. [ 150.787997][ T22] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 150.997301][ T22] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.009230][ T22] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 151.047764][ T22] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 151.063071][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.078320][ T22] usb 3-1: config 0 descriptor?? [ 151.245981][ T5450] binder: 5449:5450 unknown command 1074553622 [ 151.252508][ T5450] binder: 5449:5450 ioctl c0306201 200000000640 returned -22 [ 151.265373][ T5450] netlink: 12 bytes leftover after parsing attributes in process `syz.3.385'. [ 151.502641][ T27] usb 3-1: USB disconnect, device number 12 [ 151.784242][ T5461] device syzkaller0 entered promiscuous mode [ 152.020455][ T955] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 152.050434][ T22] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 152.214347][ T955] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 152.224347][ T955] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 152.237424][ T955] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 152.246580][ T955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.254641][ T22] usb 2-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 152.271454][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.468443][ T955] usb 5-1: usb_control_msg returned -71 [ 152.477939][ T955] usbtmc 5-1:16.0: can't read capabilities [ 152.491134][ T955] usb 5-1: USB disconnect, device number 16 [ 152.690958][ T22] wacom 0003:056A:033B.000D: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 152.703399][ T22] wacom 0003:056A:033B.000D: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.1-1/input0 [ 152.716613][ T22] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:056A:033B.000D/input/input42 [ 152.942776][ C0] wacom 0003:056A:033B.000D: Event data for report 2 was too short (9 vs 2) [ 153.149156][ T3654] usb 2-1: USB disconnect, device number 16 [ 153.158172][ T5474] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 153.647333][ T5485] binder: 5484:5485 unknown command 1074553622 [ 153.662558][ T5485] binder: 5484:5485 ioctl c0306201 200000000640 returned -22 [ 153.687726][ T5485] netlink: 12 bytes leftover after parsing attributes in process `syz.4.399'. [ 153.873062][ T5487] netlink: 12 bytes leftover after parsing attributes in process `syz.1.400'. [ 154.116275][ T26] audit: type=1326 audit(1790496942.876:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5491 comm="syz.4.402" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea1f99e159 code=0x0 [ 154.324434][ T5498] device syzkaller0 entered promiscuous mode [ 154.555173][ T5506] Scaler: ================= START STATUS ================= [ 154.563335][ T5506] Scaler: ================== END STATUS ================== [ 154.810567][ T22] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 155.012091][ T22] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 155.026929][ T22] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 155.044831][ T22] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 155.056247][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.076563][ T5515] binder: 5514:5515 unknown command 1074553622 [ 155.090647][ T5515] binder: 5514:5515 ioctl c0306201 200000000640 returned -22 [ 155.106218][ T5515] netlink: 12 bytes leftover after parsing attributes in process `syz.1.411'. [ 155.160668][ T3654] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 155.288599][ T22] usb 3-1: usb_control_msg returned -71 [ 155.297292][ T22] usbtmc 3-1:16.0: can't read capabilities [ 155.325749][ T22] usb 3-1: USB disconnect, device number 13 [ 155.350547][ T3654] usb 1-1: Using ep0 maxpacket: 8 [ 155.357785][ T3654] usb 1-1: config 0 has no interfaces? [ 155.372024][ T3654] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 155.381956][ T3654] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.401271][ T3654] usb 1-1: config 0 descriptor?? [ 155.580401][ T955] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 155.611707][ T22] usb 1-1: USB disconnect, device number 14 [ 155.762052][ T955] usb 2-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 155.775676][ T955] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.197738][ T955] wacom 0003:056A:033B.000E: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 156.216465][ T955] wacom 0003:056A:033B.000E: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.1-1/input0 [ 156.237986][ T955] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:056A:033B.000E/input/input45 [ 156.411889][ C0] wacom 0003:056A:033B.000E: Event data for report 2 was too short (9 vs 6) [ 156.616808][ T955] usb 2-1: USB disconnect, device number 17 [ 156.777729][ T5531] fido_id[5531]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 157.078112][ T5542] netlink: 12 bytes leftover after parsing attributes in process `syz.0.421'. [ 157.287190][ T5548] binder: 5547:5548 unknown command 1074553622 [ 157.313938][ T5548] binder: 5547:5548 ioctl c0306201 200000000640 returned -22 [ 157.348206][ T5548] netlink: 12 bytes leftover after parsing attributes in process `syz.2.423'. [ 157.587164][ T5562] Scaler: ================= START STATUS ================= [ 157.601162][ T5562] Scaler: ================== END STATUS ================== [ 157.630426][ T4320] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 157.812177][ T4320] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 157.828796][ T4320] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.848453][ T4320] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 157.858199][ T4320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.120298][ T4320] usb 5-1: usb_control_msg returned -71 [ 158.126711][ T4320] usbtmc 5-1:16.0: can't read capabilities [ 158.163542][ T4320] usb 5-1: USB disconnect, device number 17 [ 158.212311][ T955] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 158.410419][ T955] usb 2-1: Using ep0 maxpacket: 8 [ 158.427051][ T955] usb 2-1: config 0 has no interfaces? [ 158.446111][ T955] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 158.465831][ T955] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.490060][ T955] usb 2-1: config 0 descriptor?? [ 158.716944][ T3654] usb 2-1: USB disconnect, device number 18 [ 158.864258][ T4320] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 158.873754][ T5585] netlink: 12 bytes leftover after parsing attributes in process `syz.4.438'. [ 158.890423][ T955] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 159.062071][ T4320] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.072528][ T4320] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 159.081701][ T4320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.085617][ T955] usb 1-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 159.104910][ T955] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.264407][ T3654] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 159.315810][ T4320] dvb_ttusb_budget: ttusb_init_controller: error [ 159.330390][ T4320] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 159.468624][ T4320] DVB: Unable to find symbol stv0299_attach() [ 159.485473][ T3654] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 159.504419][ T3654] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.516228][ T3654] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.531928][ T955] wacom 0003:056A:033B.000F: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 159.541724][ T3654] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 159.562652][ T955] wacom 0003:056A:033B.000F: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.0-1/input0 [ 159.596345][ T3654] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 159.609652][ T955] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:056A:033B.000F/input/input48 [ 159.628683][ T3654] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 159.639516][ T3654] usb 5-1: Manufacturer: syz [ 159.659310][ T3654] usb 5-1: config 0 descriptor?? [ 159.695967][ T4320] DVB: Unable to find symbol tda8083_attach() [ 159.708407][ T4320] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 159.751446][ T4320] usb 4-1: USB disconnect, device number 12 [ 160.000108][ T955] usb 1-1: USB disconnect, device number 15 [ 160.077150][ T3654] appleir 0003:05AC:8243.0010: unknown main item tag 0x0 [ 160.086128][ T3654] appleir 0003:05AC:8243.0010: No inputs registered, leaving [ 160.099504][ T3654] appleir 0003:05AC:8243.0010: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 160.622992][ T5605] netlink: 12 bytes leftover after parsing attributes in process `syz.2.442'. [ 160.907019][ T955] usb 5-1: USB disconnect, device number 18 [ 161.293096][ T5621] netlink: 12 bytes leftover after parsing attributes in process `syz.3.449'. [ 161.380320][ T955] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 161.568010][ T5628] Scaler: ================= START STATUS ================= [ 161.583379][ T955] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 161.594013][ T5628] Scaler: ================== END STATUS ================== [ 161.602253][ T955] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 161.616587][ T955] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 161.626126][ T955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.855550][ T955] usb 5-1: usb_control_msg returned -71 [ 161.868659][ T955] usbtmc 5-1:16.0: can't read capabilities [ 161.892800][ T955] usb 5-1: USB disconnect, device number 19 [ 162.160252][ T3654] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 162.400021][ T3654] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.410445][ T955] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 162.424258][ T3654] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 162.444215][ T3654] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.589195][ T5638] device syzkaller0 entered promiscuous mode [ 162.642489][ T955] usb 3-1: Using ep0 maxpacket: 8 [ 162.655231][ T955] usb 3-1: config 0 has no interfaces? [ 162.674832][ T955] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 162.692656][ T3654] dvb_ttusb_budget: ttusb_init_controller: error [ 162.700106][ T3654] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 162.719971][ T955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.745780][ T955] usb 3-1: config 0 descriptor?? [ 162.780390][ T7] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 162.921798][ T3654] DVB: Unable to find symbol stv0299_attach() [ 162.975884][ T4323] usb 3-1: USB disconnect, device number 14 [ 162.992726][ T7] usb 4-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 163.015067][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.125068][ T3654] DVB: Unable to find symbol tda8083_attach() [ 163.132567][ T3654] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 163.177478][ T3654] usb 1-1: USB disconnect, device number 16 [ 163.453436][ T7] wacom 0003:056A:033B.0011: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 163.475317][ T7] wacom 0003:056A:033B.0011: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.3-1/input0 [ 163.488207][ T7] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:056A:033B.0011/input/input51 [ 163.746992][ T5655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.463'. [ 163.907959][ T22] usb 4-1: USB disconnect, device number 13 [ 163.943929][ T5651] fido_id[5651]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 164.126655][ T5664] device syzkaller0 entered promiscuous mode [ 164.335818][ T27] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 164.542638][ T27] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 164.570098][ T27] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 164.614501][ T27] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 164.628875][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.858705][ T27] usb 5-1: usb_control_msg returned -71 [ 164.865995][ T27] usbtmc 5-1:16.0: can't read capabilities [ 164.889729][ T27] usb 5-1: USB disconnect, device number 20 [ 164.969043][ T5680] Scaler: ================= START STATUS ================= [ 164.977583][ T5680] Scaler: ================== END STATUS ================== [ 165.055213][ T5682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.476'. [ 165.215562][ T4321] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 165.432065][ T4321] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.448907][ T4321] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 165.458847][ T4321] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.692459][ T4321] dvb_ttusb_budget: ttusb_init_controller: error [ 165.698907][ T4321] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 165.910436][ T22] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 165.944322][ T4321] DVB: Unable to find symbol stv0299_attach() [ 166.076075][ T5700] device syzkaller0 entered promiscuous mode [ 166.110274][ T22] usb 4-1: Using ep0 maxpacket: 8 [ 166.118774][ T22] usb 4-1: config 0 has no interfaces? [ 166.132215][ T22] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 166.162014][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.199823][ T22] usb 4-1: config 0 descriptor?? [ 166.217077][ T4321] DVB: Unable to find symbol tda8083_attach() [ 166.226178][ T4321] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 166.259389][ T4321] usb 2-1: USB disconnect, device number 19 [ 166.678015][ T4321] usb 4-1: USB disconnect, device number 14 [ 166.815564][ T3654] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 166.944913][ T5713] netlink: 12 bytes leftover after parsing attributes in process `syz.4.487'. [ 167.002567][ T3654] usb 1-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 167.017256][ T3654] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.430471][ T27] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 167.463187][ T3654] wacom 0003:056A:033B.0012: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 167.498682][ T3654] wacom 0003:056A:033B.0012: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.0-1/input0 [ 167.528319][ T3654] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:056A:033B.0012/input/input54 [ 167.623094][ T27] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 167.650954][ T27] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 167.702056][ T27] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 167.730213][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.919520][ C0] wacom 0003:056A:033B.0012: Event data for report 2 was too short (9 vs 6) [ 167.935987][ T5724] fuse: Bad value for 'fd' [ 167.965720][ T27] usb 5-1: usb_control_msg returned -71 [ 167.980850][ T27] usbtmc 5-1:16.0: can't read capabilities [ 168.027808][ T27] usb 5-1: USB disconnect, device number 21 [ 168.125654][ T3654] usb 1-1: USB disconnect, device number 17 [ 168.791716][ T5738] device syzkaller0 entered promiscuous mode [ 168.863053][ T5742] netlink: 12 bytes leftover after parsing attributes in process `syz.0.498'. [ 169.053387][ T5745] Scaler: ================= START STATUS ================= [ 169.090351][ T5745] Scaler: ================== END STATUS ================== [ 169.840524][ T27] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 170.052736][ T27] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.080438][ T27] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 170.117077][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.343782][ T27] dvb_ttusb_budget: ttusb_init_controller: error [ 170.351652][ T27] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 170.516874][ T27] DVB: Unable to find symbol stv0299_attach() [ 170.580374][ T4320] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 170.675361][ T27] DVB: Unable to find symbol tda8083_attach() [ 170.687603][ T27] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 170.747098][ T27] usb 3-1: USB disconnect, device number 15 [ 170.792086][ T4320] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 170.816799][ T4320] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 170.843234][ T4320] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 170.857820][ T4320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.079061][ T4320] usb 4-1: usb_control_msg returned -71 [ 171.084873][ T4320] usbtmc 4-1:16.0: can't read capabilities [ 171.112582][ T4320] usb 4-1: USB disconnect, device number 15 [ 171.496905][ T5774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.509'. [ 171.807613][ T5780] device syzkaller0 entered promiscuous mode [ 172.000285][ T955] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 172.192304][ T955] usb 1-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 172.210257][ T955] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.653039][ T955] wacom 0003:056A:033B.0013: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 172.707458][ T955] wacom 0003:056A:033B.0013: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.0-1/input0 [ 172.731611][ T955] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:056A:033B.0013/input/input57 [ 172.802130][ T5795] Scaler: ================= START STATUS ================= [ 172.820147][ T5795] Scaler: ================== END STATUS ================== [ 172.855498][ C1] wacom 0003:056A:033B.0013: Event data for report 2 was too short (9 vs 2) [ 173.056208][ C1] wacom 0003:056A:033B.0013: Event data for report 2 was too short (9 vs 6) [ 173.264551][ T955] usb 1-1: USB disconnect, device number 18 [ 173.431173][ T5802] netlink: 12 bytes leftover after parsing attributes in process `syz.3.522'. [ 173.690637][ T27] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 173.715542][ T5810] device syzkaller0 entered promiscuous mode [ 173.882275][ T27] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 173.917535][ T27] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 173.968047][ T27] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 173.991496][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.230638][ T27] usb 5-1: usb_control_msg returned -71 [ 174.236294][ T27] usbtmc 5-1:16.0: can't read capabilities [ 174.269223][ T27] usb 5-1: USB disconnect, device number 22 [ 175.025219][ T5832] hub 1-0:1.0: USB hub found [ 175.039015][ T5832] hub 1-0:1.0: 1 port detected [ 175.515267][ T5840] netlink: 12 bytes leftover after parsing attributes in process `syz.2.538'. [ 176.030262][ T27] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 176.118643][ T5852] device syzkaller0 entered promiscuous mode [ 176.257981][ T27] usb 3-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 176.285872][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.662526][ T5863] Scaler: ================= START STATUS ================= [ 176.670011][ T5863] Scaler: ================== END STATUS ================== [ 176.724918][ T27] wacom 0003:056A:033B.0014: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 176.750979][ T27] wacom 0003:056A:033B.0014: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.2-1/input0 [ 176.766434][ T27] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:056A:033B.0014/input/input60 [ 177.173652][ C0] wacom 0003:056A:033B.0014: Event data for report 2 was too short (9 vs 6) [ 177.225118][ T5871] netlink: 12 bytes leftover after parsing attributes in process `syz.0.549'. [ 177.381031][ T27] usb 3-1: USB disconnect, device number 16 [ 177.992566][ T5883] hub 1-0:1.0: USB hub found [ 178.010478][ T5883] hub 1-0:1.0: 1 port detected [ 178.339198][ T5890] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 178.615992][ T5897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.560'. [ 178.814333][ T5899] device syzkaller0 entered promiscuous mode [ 179.530419][ T7] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 179.783148][ T7] usb 1-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 179.836912][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.913172][ T5932] netlink: 12 bytes leftover after parsing attributes in process `syz.2.572'. [ 180.132245][ T5934] Scaler: ================= START STATUS ================= [ 180.152249][ T5934] Scaler: ================== END STATUS ================== [ 180.276250][ T7] wacom 0003:056A:033B.0015: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 180.327631][ T7] wacom 0003:056A:033B.0015: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.0-1/input0 [ 180.366289][ T7] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:056A:033B.0015/input/input63 [ 180.743771][ C1] wacom 0003:056A:033B.0015: Event data for report 2 was too short (9 vs 6) [ 180.878562][ T5944] device syzkaller0 entered promiscuous mode [ 180.968514][ T4321] usb 1-1: USB disconnect, device number 19 [ 181.278846][ T5950] hub 1-0:1.0: USB hub found [ 181.304603][ T5950] hub 1-0:1.0: 1 port detected [ 181.527316][ T27] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 181.810306][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 181.826639][ T27] usb 3-1: config 0 has no interfaces? [ 181.840224][ T27] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 181.890079][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.931333][ T27] usb 3-1: config 0 descriptor?? [ 181.985954][ T5963] netlink: 12 bytes leftover after parsing attributes in process `syz.0.583'. [ 182.352200][ T5974] device syzkaller0 entered promiscuous mode [ 182.681654][ T3654] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 182.735127][ T4321] usb 3-1: USB disconnect, device number 17 [ 182.860539][ T3654] usb 5-1: device descriptor read/64, error -71 [ 183.131001][ T3654] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 183.290480][ T3654] usb 5-1: device descriptor read/64, error -71 [ 183.420658][ T3654] usb usb5-port1: attempt power cycle [ 183.533650][ T5992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.594'. [ 183.584662][ T4321] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 183.636240][ T5994] hub 1-0:1.0: USB hub found [ 183.677267][ T5994] hub 1-0:1.0: 1 port detected [ 183.792069][ T4321] usb 2-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 183.814963][ T4321] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.830459][ T3654] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 183.871027][ T3654] usb 5-1: device descriptor read/8, error -71 [ 184.011299][ T6005] device syzkaller0 entered promiscuous mode [ 184.160253][ T3654] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 184.200835][ T3654] usb 5-1: device descriptor read/8, error -71 [ 184.275137][ T4321] wacom 0003:056A:033B.0016: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 184.302542][ T4321] wacom 0003:056A:033B.0016: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.1-1/input0 [ 184.320529][ T3654] usb usb5-port1: unable to enumerate USB device [ 184.341228][ T4321] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:056A:033B.0016/input/input66 [ 184.489603][ C1] wacom 0003:056A:033B.0016: Event data for report 2 was too short (9 vs 2) [ 184.700948][ C1] wacom 0003:056A:033B.0016: Event data for report 2 was too short (9 vs 6) [ 184.797542][ T6007] tipc: Started in network mode [ 184.813854][ T6007] tipc: Node identity 2000004, cluster identity 4711 [ 184.854290][ T6007] tipc: Node number set to 33554436 [ 184.903609][ T4318] usb 2-1: USB disconnect, device number 20 [ 185.577931][ T6023] Scaler: ================= START STATUS ================= [ 185.590461][ T6022] netlink: 12 bytes leftover after parsing attributes in process `syz.4.606'. [ 185.613008][ T6023] Scaler: ================== END STATUS ================== [ 185.996308][ T6033] tipc: Started in network mode [ 186.016963][ T6033] tipc: Node identity 9, cluster identity 4711 [ 186.040069][ T6033] tipc: Node number set to 9 [ 186.056469][ T6033] tipc: Cannot configure node identity twice [ 186.095760][ T6035] device syzkaller0 entered promiscuous mode [ 186.800291][ T27] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 186.990275][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 187.111818][ T27] usb 2-1: config 0 has no interfaces? [ 187.117683][ T27] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 187.147273][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.168354][ T27] usb 2-1: config 0 descriptor?? [ 187.317436][ T6054] binder: 6053:6054 unknown command 1074553622 [ 187.324611][ T6054] binder: 6053:6054 ioctl c0306201 200000000640 returned -22 [ 187.340388][ T4321] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 187.348922][ T6054] netlink: 12 bytes leftover after parsing attributes in process `syz.2.619'. [ 187.480406][ T4318] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 187.540275][ T4321] usb 4-1: device descriptor read/64, error -71 [ 187.570492][ T3654] usb 2-1: USB disconnect, device number 21 [ 187.672186][ T4318] usb 1-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 187.688420][ T4318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.783964][ T6062] device syzkaller0 entered promiscuous mode [ 187.820472][ T4321] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 187.958262][ T6064] device syzkaller0 entered promiscuous mode [ 187.969091][ T6064] tipc: Started in network mode [ 187.974372][ T6064] tipc: Node identity becc7a9583ab, cluster identity 4711 [ 187.982961][ T6064] tipc: Enabled bearer , priority 0 [ 187.990400][ T4321] usb 4-1: device descriptor read/64, error -71 [ 188.000338][ T6063] tipc: Resetting bearer [ 188.031711][ T6063] tipc: Disabling bearer [ 188.128100][ T4321] usb usb4-port1: attempt power cycle [ 188.142336][ T4318] wacom 0003:056A:033B.0017: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 188.160669][ T4318] wacom 0003:056A:033B.0017: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.0-1/input0 [ 188.181710][ T4318] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:056A:033B.0017/input/input69 [ 188.580426][ T4321] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 188.631266][ T4321] usb 4-1: device descriptor read/8, error -71 [ 188.726436][ T27] usb 1-1: USB disconnect, device number 20 [ 188.920466][ T4321] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 188.970930][ T4321] usb 4-1: device descriptor read/8, error -71 [ 189.090452][ T4321] usb usb4-port1: unable to enumerate USB device [ 189.267723][ T6084] binder: 6083:6084 unknown command 1074553622 [ 189.277470][ T6084] binder: 6083:6084 ioctl c0306201 200000000640 returned -22 [ 189.322180][ T6084] netlink: 12 bytes leftover after parsing attributes in process `syz.2.631'. [ 189.515264][ T6089] device syzkaller0 entered promiscuous mode [ 190.086108][ T6090] tipc: Started in network mode [ 190.133791][ T6090] tipc: Node identity 2000004, cluster identity 4711 [ 190.150528][ T6090] tipc: Node number set to 33554436 [ 190.631135][ T6104] Scaler: ================= START STATUS ================= [ 190.654020][ T6104] Scaler: ================== END STATUS ================== [ 190.834937][ T6109] netlink: 3736 bytes leftover after parsing attributes in process `syz.2.641'. [ 191.021151][ T3654] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 191.213951][ T3654] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.233163][ T3654] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.246503][ T3654] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 191.266962][ T3654] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 191.277243][ T3654] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.304558][ T3654] usb 1-1: config 0 descriptor?? [ 191.330266][ T4320] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 191.410307][ T27] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 191.554505][ T4320] usb 3-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 191.570858][ T4320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.600354][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 191.633789][ T27] usb 2-1: config 0 has no interfaces? [ 191.639399][ T27] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 191.659237][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.705757][ T27] usb 2-1: config 0 descriptor?? [ 191.758792][ T3654] usbhid 1-1:0.0: can't add hid device: -71 [ 191.766102][ T3654] usbhid: probe of 1-1:0.0 failed with error -71 [ 191.797912][ T3654] usb 1-1: USB disconnect, device number 21 [ 191.934361][ T4323] usb 2-1: USB disconnect, device number 22 [ 192.004294][ T6119] binder: 6118:6119 unknown command 1074553622 [ 192.016039][ T4320] wacom 0003:056A:033B.0018: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 192.028748][ T6119] binder: 6118:6119 ioctl c0306201 200000000640 returned -22 [ 192.038062][ T4320] wacom 0003:056A:033B.0018: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.2-1/input0 [ 192.052367][ T4320] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:056A:033B.0018/input/input72 [ 192.076426][ T6119] netlink: 12 bytes leftover after parsing attributes in process `syz.4.645'. [ 192.444687][ T6124] device syzkaller0 entered promiscuous mode [ 192.622768][ T3654] usb 3-1: USB disconnect, device number 18 [ 192.730627][ T4318] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 192.900349][ T4318] usb 1-1: device descriptor read/64, error -71 [ 193.170392][ T4318] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 193.219342][ T6131] Scaler: ================= START STATUS ================= [ 193.233712][ T6131] Scaler: ================== END STATUS ================== [ 193.330435][ T4318] usb 1-1: device descriptor read/64, error -71 [ 193.460909][ T4318] usb usb1-port1: attempt power cycle [ 193.777749][ T6134] tipc: Cannot configure node identity twice [ 193.863856][ T7] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 193.890456][ T4318] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 193.932052][ T4318] usb 1-1: device descriptor read/8, error -71 [ 194.071249][ T7] usb 4-1: unable to get BOS descriptor or descriptor too short [ 194.124257][ T7] usb 4-1: not running at top speed; connect to a high speed hub [ 194.133507][ T7] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 194.161447][ T7] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 4 [ 194.193174][ T7] usb 4-1: New USB device found, idVendor=041e, idProduct=323b, bcdDevice= 0.40 [ 194.217805][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.231714][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.238137][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.244642][ T4318] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 194.271305][ T7] usb 4-1: Product: syz [ 194.280606][ T4320] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 194.301678][ T4318] usb 1-1: device descriptor read/8, error -71 [ 194.302938][ T7] usb 4-1: Manufacturer: syz [ 194.339351][ T7] usb 4-1: SerialNumber: syz [ 194.420464][ T4318] usb usb1-port1: unable to enumerate USB device [ 194.470772][ T4320] usb 2-1: Using ep0 maxpacket: 8 [ 194.478907][ T4320] usb 2-1: config 0 has no interfaces? [ 194.494570][ T4320] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 194.519929][ T4320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.553490][ T4320] usb 2-1: config 0 descriptor?? [ 194.565187][ T6137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.586664][ T6137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.625207][ T7] usb 4-1: 3:0: cannot get min/max values for control 2 (id 3) [ 194.645859][ T7] usb 4-1: 3:0: failed to get current value for ch 0 (-71) [ 194.742900][ T7] usb 4-1: USB disconnect, device number 20 [ 194.966528][ T3654] usb 2-1: USB disconnect, device number 23 [ 195.042201][ T4356] udevd[4356]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 195.235750][ T6155] binder: 6154:6155 unknown command 1074553622 [ 195.260281][ T6155] binder: 6154:6155 ioctl c0306201 200000000640 returned -22 [ 195.269944][ T6155] netlink: 12 bytes leftover after parsing attributes in process `syz.4.656'. [ 195.615184][ T6163] device syzkaller0 entered promiscuous mode [ 196.100280][ T4320] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 196.312581][ T4320] usb 5-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 196.331961][ T4320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.773908][ T4320] wacom 0003:056A:033B.0019: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 196.787651][ T4320] wacom 0003:056A:033B.0019: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.4-1/input0 [ 196.801128][ T4320] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:056A:033B.0019/input/input75 [ 197.284545][ T6186] binder: 6185:6186 unknown command 1074553622 [ 197.294326][ T6186] binder: 6185:6186 ioctl c0306201 200000000640 returned -22 [ 197.306633][ T6186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.669'. [ 197.376240][ T3654] usb 5-1: USB disconnect, device number 27 [ 197.688998][ T6177] tipc: Started in network mode [ 197.694038][ T6177] tipc: Node identity 2000004, cluster identity 4711 [ 197.707201][ T6177] tipc: Node number set to 33554436 [ 197.880403][ T4323] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 197.988907][ T6202] Scaler: ================= START STATUS ================= [ 198.017204][ T6202] Scaler: ================== END STATUS ================== [ 198.060356][ T4323] usb 3-1: device descriptor read/64, error -71 [ 198.206043][ T6209] device syzkaller0 entered promiscuous mode [ 198.330692][ T4323] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 198.492334][ T4323] usb 3-1: device descriptor read/64, error -71 [ 198.611462][ T4323] usb usb3-port1: attempt power cycle [ 198.810281][ T7] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 198.824955][ T6219] binder: 6218:6219 unknown command 1074553622 [ 198.833712][ T6219] binder: 6218:6219 ioctl c0306201 200000000640 returned -22 [ 198.847104][ T6219] netlink: 12 bytes leftover after parsing attributes in process `syz.3.680'. [ 199.020346][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 199.030307][ T4323] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 199.080980][ T4323] usb 3-1: device descriptor read/8, error -71 [ 199.129653][ T7] usb 2-1: config 0 has no interfaces? [ 199.143764][ T7] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 199.165197][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.211792][ T7] usb 2-1: config 0 descriptor?? [ 199.363440][ T4323] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 199.416742][ T4323] usb 3-1: device descriptor read/8, error -71 [ 199.559280][ T4323] usb usb3-port1: unable to enumerate USB device [ 199.641078][ T4320] usb 2-1: USB disconnect, device number 24 [ 199.710435][ T7] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 199.911897][ T7] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 199.924548][ T7] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.946076][ T7] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 199.959785][ T7] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 199.969928][ T7] usb 5-1: Product: syz [ 199.978762][ T7] usb 5-1: Manufacturer: syz [ 199.993971][ T6241] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 200.003344][ T7] hub 5-1:4.0: USB hub found [ 200.009576][ T6241] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 200.030600][ T6241] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 200.783437][ T27] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 201.002143][ T27] usb 2-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 201.002178][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.420361][ T4277] Bluetooth: hci0: command 0x0406 tx timeout [ 201.426691][ T49] Bluetooth: hci3: command 0x0406 tx timeout [ 201.426724][ T49] Bluetooth: hci4: command 0x0406 tx timeout [ 201.426779][ T49] Bluetooth: hci2: command 0x0406 tx timeout [ 201.426801][ T49] Bluetooth: hci1: command 0x0406 tx timeout [ 201.737951][ T6257] device syzkaller0 entered promiscuous mode [ 201.937451][ T6266] binder: 6265:6266 unknown command 1074553622 [ 201.944026][ T6266] binder: 6265:6266 ioctl c0306201 200000000640 returned -22 [ 201.955840][ T6266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.691'. [ 202.478006][ T7] hub 5-1:4.0: config failed, can't read hub descriptor (err -22) [ 202.521976][ T7] usb 5-1: USB disconnect, device number 28 [ 203.398018][ T6298] Scaler: ================= START STATUS ================= [ 203.420423][ T6298] Scaler: ================== END STATUS ================== [ 203.427084][ T4320] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 203.556889][ T27] usbhid 2-1:1.0: can't add hid device: -71 [ 203.570333][ T27] usbhid: probe of 2-1:1.0 failed with error -71 [ 203.596452][ T27] usb 2-1: USB disconnect, device number 25 [ 203.602743][ T4320] usb 3-1: device descriptor read/64, error -71 [ 203.852173][ T6307] binder: 6306:6307 unknown command 1074553622 [ 203.858541][ T6307] binder: 6306:6307 ioctl c0306201 200000000640 returned -22 [ 203.880401][ T4320] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 203.891285][ T6307] netlink: 12 bytes leftover after parsing attributes in process `syz.3.702'. [ 204.049260][ T6309] device syzkaller0 entered promiscuous mode [ 204.055502][ T4320] usb 3-1: device descriptor read/64, error -71 [ 204.190484][ T4320] usb usb3-port1: attempt power cycle [ 204.350326][ T3654] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 204.500360][ T27] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 204.552171][ T3654] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 204.570285][ T3654] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.602207][ T3654] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 204.615233][ T3654] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 204.623935][ T3654] usb 4-1: Product: syz [ 204.628142][ T3654] usb 4-1: Manufacturer: syz [ 204.631483][ T4320] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 204.668440][ T3654] hub 4-1:4.0: USB hub found [ 204.687666][ T4320] usb 3-1: device descriptor read/8, error -71 [ 204.720602][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 204.732993][ T27] usb 1-1: config 0 has no interfaces? [ 204.738846][ T27] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 204.753480][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.772248][ T27] usb 1-1: config 0 descriptor?? [ 204.980557][ T4320] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 204.995530][ T4321] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 205.013909][ T22] usb 1-1: USB disconnect, device number 26 [ 205.053288][ T4320] usb 3-1: device descriptor read/8, error -71 [ 205.170408][ T4321] usb 5-1: device descriptor read/64, error -71 [ 205.177123][ T4320] usb usb3-port1: unable to enumerate USB device [ 205.460321][ T4321] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 205.610250][ T4321] usb 5-1: device descriptor read/64, error -71 [ 205.730509][ T4321] usb usb5-port1: attempt power cycle [ 206.140303][ T4321] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 206.181371][ T4321] usb 5-1: device descriptor read/8, error -71 [ 206.450257][ T4321] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 206.504241][ T4321] usb 5-1: device descriptor read/8, error -71 [ 206.574744][ T4320] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 206.630456][ T4321] usb usb5-port1: unable to enumerate USB device [ 206.740673][ T4320] usb 1-1: device descriptor read/64, error -71 [ 207.010307][ T4320] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 207.166444][ T3654] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 207.186270][ T4320] usb 1-1: device descriptor read/64, error -71 [ 207.230942][ T3654] usb 4-1: USB disconnect, device number 21 [ 207.335952][ T4320] usb usb1-port1: attempt power cycle [ 207.609529][ T6350] binder: 6349:6350 unknown command 1074553622 [ 207.620361][ T6350] binder: 6349:6350 ioctl c0306201 200000000640 returned -22 [ 207.636258][ T6350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.715'. [ 207.730499][ T3654] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 207.750335][ T4320] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 207.776062][ T6352] Scaler: ================= START STATUS ================= [ 207.793930][ T6352] Scaler: ================== END STATUS ================== [ 207.816946][ T4320] usb 1-1: device descriptor read/8, error -71 [ 207.899946][ T6354] device syzkaller0 entered promiscuous mode [ 207.922321][ T3654] usb 4-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 207.938886][ T3654] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.110376][ T4320] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 208.171070][ T4320] usb 1-1: device descriptor read/8, error -71 [ 208.290520][ T4320] usb usb1-port1: unable to enumerate USB device [ 209.090478][ T955] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 209.280365][ T955] usb 2-1: Using ep0 maxpacket: 8 [ 209.291347][ T955] usb 2-1: config 0 has no interfaces? [ 209.309784][ T955] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 209.345365][ T955] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.433235][ T955] usb 2-1: config 0 descriptor?? [ 209.980384][ T22] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 210.081013][ T4323] usb 2-1: USB disconnect, device number 26 [ 210.182153][ T22] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 210.216346][ T22] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 210.285722][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.404511][ T3654] usbhid 4-1:1.0: can't add hid device: -71 [ 210.417428][ T3654] usbhid: probe of 4-1:1.0 failed with error -71 [ 210.444182][ T3654] usb 4-1: USB disconnect, device number 22 [ 210.539693][ T22] usb 1-1: USB disconnect, device number 31 [ 211.077627][ T6392] binder: 6391:6392 unknown command 1074553622 [ 211.120404][ T6392] binder: 6391:6392 ioctl c0306201 200000000640 returned -22 [ 211.144104][ T6392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.727'. [ 211.256940][ T955] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 211.288176][ T6398] device syzkaller0 entered promiscuous mode [ 211.452251][ T955] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 211.478713][ T955] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.508200][ T955] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 211.556476][ T955] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 211.621533][ T955] usb 3-1: Product: syz [ 211.651572][ T955] usb 3-1: Manufacturer: syz [ 211.698408][ T6412] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 211.716115][ T955] hub 3-1:4.0: USB hub found [ 212.442442][ T6426] Scaler: ================= START STATUS ================= [ 212.469911][ T6426] Scaler: ================== END STATUS ================== [ 212.490527][ T22] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 212.692372][ T22] usb 2-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 212.709863][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.910323][ T27] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 213.112243][ T27] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 213.140241][ T27] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 213.149370][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.403620][ T4321] usb 1-1: USB disconnect, device number 32 [ 213.620262][ T27] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 213.856180][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 213.954143][ T27] usb 4-1: config 0 has no interfaces? [ 213.959707][ T27] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 213.975474][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.996788][ T27] usb 4-1: config 0 descriptor?? [ 214.169690][ T955] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 214.241316][ T955] usb 3-1: USB disconnect, device number 27 [ 214.248642][ T27] usb 4-1: USB disconnect, device number 23 [ 214.321559][ T6439] binder: 6438:6439 unknown command 1074553622 [ 214.331534][ T6439] binder: 6438:6439 ioctl c0306201 200000000640 returned -22 [ 214.346145][ T6439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.742'. [ 214.717629][ T6443] device syzkaller0 entered promiscuous mode [ 215.227287][ T22] usbhid 2-1:1.0: can't add hid device: -71 [ 215.233769][ T22] usbhid: probe of 2-1:1.0 failed with error -71 [ 215.272011][ T22] usb 2-1: USB disconnect, device number 27 [ 216.270378][ T4321] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 216.348954][ T6473] binder: 6471:6473 unknown command 1074553622 [ 216.375552][ T6473] binder: 6471:6473 ioctl c0306201 200000000640 returned -22 [ 216.413828][ T6473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.753'. [ 216.481790][ T4321] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 216.511149][ T4321] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 216.550215][ T4321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.789370][ T6480] device syzkaller0 entered promiscuous mode [ 216.806767][ T27] usb 1-1: USB disconnect, device number 33 [ 217.540322][ T27] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 217.728737][ T6489] Scaler: ================= START STATUS ================= [ 217.736469][ T6489] Scaler: ================== END STATUS ================== [ 217.746744][ T27] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 217.768272][ T27] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.791494][ T27] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 217.829568][ T27] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 217.839669][ T27] usb 2-1: Product: syz [ 217.849780][ T27] usb 2-1: Manufacturer: syz [ 217.891173][ T27] hub 2-1:4.0: USB hub found [ 218.238100][ T127] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 218.453576][ T127] usb 3-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 218.492455][ T127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.632166][ T6504] binder: 6503:6504 unknown command 1074553622 [ 218.654865][ T6504] binder: 6503:6504 ioctl c0306201 200000000640 returned -22 [ 218.687740][ T6504] netlink: 12 bytes leftover after parsing attributes in process `syz.3.764'. [ 218.990272][ T7] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 219.180947][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 219.198252][ T7] usb 5-1: config 0 has no interfaces? [ 219.218475][ T7] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 219.283737][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.339240][ T7] usb 5-1: config 0 descriptor?? [ 219.604206][ T6511] device syzkaller0 entered promiscuous mode [ 219.783090][ T7] usb 5-1: USB disconnect, device number 33 [ 219.980354][ T955] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 220.172085][ T955] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 220.193661][ T955] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 220.207059][ T955] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 220.220656][ T955] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.247557][ T955] usbtmc 1-1:16.0: bulk endpoints not found [ 220.481233][ T3654] usb 1-1: USB disconnect, device number 34 [ 220.556572][ T27] hub 2-1:4.0: config failed, can't read hub descriptor (err -22) [ 220.631000][ T27] usb 2-1: USB disconnect, device number 28 [ 221.032307][ T127] usbhid 3-1:1.0: can't add hid device: -71 [ 221.038369][ T127] usbhid: probe of 3-1:1.0 failed with error -71 [ 221.063453][ T127] usb 3-1: USB disconnect, device number 28 [ 221.222662][ T6531] binder: 6529:6531 unknown command 1074553622 [ 221.250386][ T6531] binder: 6529:6531 ioctl c0306201 200000000640 returned -22 [ 221.279770][ T6534] netlink: 12 bytes leftover after parsing attributes in process `syz.3.775'. [ 221.588957][ T6540] device syzkaller0 entered promiscuous mode [ 222.014602][ T6549] Scaler: ================= START STATUS ================= [ 222.041745][ T6549] Scaler: ================== END STATUS ================== [ 222.430324][ T27] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 222.632088][ T27] usb 5-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 222.648075][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.737191][ T955] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 222.923513][ T3654] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 222.953199][ T955] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 222.972459][ T955] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 222.987794][ T955] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 223.003041][ T955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.041533][ T955] usbtmc 4-1:16.0: bulk endpoints not found [ 223.124155][ T3654] usb 3-1: Using ep0 maxpacket: 8 [ 223.183927][ T3654] usb 3-1: config 0 has no interfaces? [ 223.189479][ T3654] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 223.207281][ T3654] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.231944][ T3654] usb 3-1: config 0 descriptor?? [ 223.243320][ T955] usb 4-1: USB disconnect, device number 24 [ 223.267266][ T6563] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.276638][ T6563] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.285470][ T6563] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.294296][ T6563] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.451854][ T127] usb 3-1: USB disconnect, device number 29 [ 223.508850][ T6570] binder: 6569:6570 unknown command 1074553622 [ 223.517787][ T6570] binder: 6569:6570 ioctl c0306201 200000000640 returned -22 [ 223.530091][ T6570] netlink: 12 bytes leftover after parsing attributes in process `syz.1.790'. [ 223.610306][ T3654] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 223.812207][ T3654] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 223.830888][ T3654] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.863153][ T3654] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 223.888012][ T6577] device syzkaller0 entered promiscuous mode [ 223.893376][ T3654] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 223.911838][ T3654] usb 1-1: Product: syz [ 223.916076][ T3654] usb 1-1: Manufacturer: syz [ 223.929378][ T3654] hub 1-1:4.0: USB hub found [ 225.204360][ T27] usbhid 5-1:1.0: can't add hid device: -71 [ 225.220596][ T27] usbhid: probe of 5-1:1.0 failed with error -71 [ 225.280963][ T27] usb 5-1: USB disconnect, device number 34 [ 225.627776][ T6603] binder: 6602:6603 unknown command 1074553622 [ 225.636689][ T6603] binder: 6602:6603 ioctl c0306201 200000000640 returned -22 [ 225.657142][ T6603] netlink: 12 bytes leftover after parsing attributes in process `syz.4.804'. [ 225.680428][ T955] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 225.760360][ T4322] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 225.807372][ T6607] device syzkaller0 entered promiscuous mode [ 225.880436][ T955] usb 4-1: Using ep0 maxpacket: 8 [ 225.894818][ T955] usb 4-1: unable to get BOS descriptor or descriptor too short [ 225.923636][ T955] usb 4-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 225.933426][ T955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.941651][ T955] usb 4-1: Product: syz [ 225.946099][ T955] usb 4-1: Manufacturer: syz [ 225.952501][ T955] usb 4-1: SerialNumber: syz [ 225.957976][ T4322] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 225.970517][ T4322] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 225.998948][ T4322] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 226.009092][ T4322] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.040409][ T4322] usbtmc 2-1:16.0: bulk endpoints not found [ 226.117788][ T6612] Scaler: ================= START STATUS ================= [ 226.126238][ T6612] Scaler: ================== END STATUS ================== [ 226.202463][ T955] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 226.218617][ T955] usb 4-1: unit 2 not found! [ 226.229599][ T955] usb 4-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8214); report any issues to g@b4.vu [ 226.265868][ T955] usb 4-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 226.283697][ T4322] usb 2-1: USB disconnect, device number 29 [ 226.333112][ T955] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 226.374728][ T955] usb 4-1: USB disconnect, device number 25 [ 226.581677][ T3654] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 226.600869][ T4376] udevd[4376]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 226.631418][ T3654] usb 1-1: USB disconnect, device number 35 [ 227.040248][ T4322] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 227.262712][ T4322] usb 5-1: Using ep0 maxpacket: 8 [ 227.273585][ T4322] usb 5-1: config 0 has no interfaces? [ 227.286884][ T4322] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 227.305762][ T4322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.338357][ T4322] usb 5-1: config 0 descriptor?? [ 227.373571][ T3654] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 227.579076][ T955] usb 5-1: USB disconnect, device number 35 [ 227.585420][ T3654] usb 2-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 227.607367][ T3654] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.626168][ T6633] binder: 6632:6633 unknown command 1074553622 [ 227.633136][ T6633] binder: 6632:6633 ioctl c0306201 200000000640 returned -22 [ 227.643525][ T6633] netlink: 12 bytes leftover after parsing attributes in process `syz.3.816'. [ 228.590383][ T4323] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 228.810467][ T4321] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 228.828739][ T4323] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 228.854886][ T4323] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.889740][ T4323] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 228.909255][ T4323] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 228.922781][ T4323] usb 3-1: Product: syz [ 228.927056][ T4323] usb 3-1: Manufacturer: syz [ 228.933536][ T6667] binder: 6666:6667 unknown command 1074553622 [ 228.948825][ T6667] binder: 6666:6667 ioctl c0306201 200000000640 returned -22 [ 228.961520][ T4323] hub 3-1:4.0: USB hub found [ 228.976866][ T6667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.827'. [ 229.002012][ T4321] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 229.019346][ T4321] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 229.039551][ T4321] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 229.054535][ T4321] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 229.070661][ T4321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.094120][ T4321] usbtmc 1-1:16.0: bulk endpoints not found [ 229.293828][ T4321] usb 1-1: USB disconnect, device number 36 [ 230.059803][ T3654] usbhid 2-1:1.0: can't add hid device: -71 [ 230.075373][ T3654] usbhid: probe of 2-1:1.0 failed with error -71 [ 230.109157][ T3654] usb 2-1: USB disconnect, device number 30 [ 230.288738][ T6685] Scaler: ================= START STATUS ================= [ 230.300106][ T6685] Scaler: ================== END STATUS ================== [ 230.314979][ T6682] 0: reclassify loop, rule prio 0, protocol 800 [ 230.500220][ T955] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 230.690368][ T955] usb 5-1: Using ep0 maxpacket: 8 [ 230.697850][ T955] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 230.737150][ T955] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 230.763752][ T955] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 230.800289][ T955] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 230.831563][ T955] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 230.863390][ T955] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 230.883491][ T955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.921152][ T955] usbtmc 5-1:16.0: bulk endpoints not found [ 231.276096][ T6706] binder: 6705:6706 ioctl c0306201 0 returned -14 [ 231.320410][ T6706] netlink: 12 bytes leftover after parsing attributes in process `syz.3.838'. [ 231.380234][ T4323] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 231.473661][ T4323] usb 3-1: USB disconnect, device number 30 [ 231.529821][ T4320] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 231.676533][ T6701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.836'. [ 231.740308][ T4320] usb 1-1: Using ep0 maxpacket: 8 [ 231.754372][ T4320] usb 1-1: config 0 has no interfaces? [ 231.794107][ T4320] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 231.808639][ T4320] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.845808][ T4320] usb 1-1: config 0 descriptor?? [ 231.920352][ T3654] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 232.112711][ T3654] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 232.136045][ T3654] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 232.157365][ T3654] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 232.177414][ T3654] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 232.186945][ T3654] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.215343][ T3654] usbtmc 4-1:16.0: bulk endpoints not found [ 232.231105][ T3654] usb 1-1: USB disconnect, device number 37 [ 232.413562][ T127] usb 4-1: USB disconnect, device number 26 [ 232.470909][ T955] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 232.674345][ T955] usb 2-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 232.684133][ T955] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.109451][ T955] wacom 0003:056A:033B.001A: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 233.139028][ T955] wacom 0003:056A:033B.001A: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.1-1/input0 [ 233.158860][ T4320] usb 5-1: USB disconnect, device number 36 [ 233.171960][ T955] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:056A:033B.001A/input/input78 [ 233.361392][ C1] wacom 0003:056A:033B.001A: Event data for report 2 was too short (9 vs 2) [ 233.562159][ C1] wacom 0003:056A:033B.001A: Event data for report 2 was too short (9 vs 6) [ 233.765729][ T4320] usb 2-1: USB disconnect, device number 31 [ 233.838595][ T6744] binder: 6742:6744 ioctl c0306201 0 returned -14 [ 233.905986][ T6744] netlink: 12 bytes leftover after parsing attributes in process `syz.3.850'. [ 234.397129][ T6760] Scaler: ================= START STATUS ================= [ 234.410200][ T6760] Scaler: ================== END STATUS ================== [ 234.514199][ T6764] device syzkaller0 entered promiscuous mode [ 234.750237][ T127] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 234.952091][ T127] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 234.970244][ T127] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 234.990256][ T127] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 235.020381][ T127] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 235.051969][ T127] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.094521][ T127] usbtmc 1-1:16.0: bulk endpoints not found [ 235.297691][ T4321] usb 1-1: USB disconnect, device number 38 [ 235.399562][ T6783] binder: 6782:6783 ioctl c0306201 0 returned -14 [ 235.410357][ T127] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 235.439658][ T6783] netlink: 12 bytes leftover after parsing attributes in process `syz.4.862'. [ 235.603319][ T127] usb 3-1: Using ep0 maxpacket: 8 [ 235.829817][ T127] usb 3-1: config 0 has no interfaces? [ 235.835570][ T127] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 235.901170][ T127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.964698][ T127] usb 3-1: config 0 descriptor?? [ 236.191470][ T955] usb 3-1: USB disconnect, device number 31 [ 237.900518][ T4321] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 238.100284][ T4321] usb 2-1: Using ep0 maxpacket: 8 [ 238.109186][ T4321] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 238.134222][ T4321] usb 2-1: config 0 has no interface number 0 [ 238.157755][ T4321] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 238.187749][ T4321] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.238222][ T4321] usb 2-1: config 0 descriptor?? [ 238.386337][ T4321] viperboard 2-1:0.143: version 0.00 found at bus 002 address 032 [ 238.477349][ T4321] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 238.504071][ T4321] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 238.932068][ T955] usb 2-1: USB disconnect, device number 32 [ 241.320316][ T4321] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 241.526733][ T4321] usb 2-1: config index 0 descriptor too short (expected 8228, got 36) [ 241.540015][ T4321] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.573948][ T4321] usb 2-1: config 0 has no interfaces? [ 241.700302][ T4321] usb 2-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 241.750545][ T4321] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.787455][ T4321] usb 2-1: config 0 descriptor?? [ 242.018445][ T6904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.079570][ T6904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.370982][ T6937] netlink: 12 bytes leftover after parsing attributes in process `syz.4.906'. [ 243.848081][ T6941] Scaler: ================= START STATUS ================= [ 243.863102][ T6941] Scaler: ================== END STATUS ================== [ 244.709193][ T4321] usb 2-1: string descriptor 0 read error: -71 [ 244.725523][ T4321] usb 2-1: USB disconnect, device number 33 [ 245.183700][ T4323] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 245.199138][ T6957] device syzkaller0 entered promiscuous mode [ 245.370424][ T4323] usb 5-1: Using ep0 maxpacket: 8 [ 245.380340][ T3654] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 245.392180][ T4323] usb 5-1: config 0 has no interfaces? [ 245.453571][ T4323] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 245.536479][ T4323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.591690][ T3654] usb 4-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 245.619064][ T4323] usb 5-1: config 0 descriptor?? [ 245.627751][ T3654] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.966046][ T6971] netlink: 12 bytes leftover after parsing attributes in process `syz.2.917'. [ 246.080926][ T6967] fuse: root generation should be zero [ 246.126777][ T3654] wacom 0003:056A:033B.001B: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 246.178737][ T3654] wacom 0003:056A:033B.001B: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.3-1/input0 [ 246.192469][ T3654] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:056A:033B.001B/input/input81 [ 246.222928][ T4320] usb 5-1: USB disconnect, device number 37 [ 246.350986][ C1] wacom 0003:056A:033B.001B: Event data for report 2 was too short (9 vs 2) [ 246.551750][ C1] wacom 0003:056A:033B.001B: Event data for report 2 was too short (9 vs 6) [ 246.758550][ T4320] usb 4-1: USB disconnect, device number 27 [ 246.980093][ T6978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.920'. [ 247.690395][ T4321] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 247.869331][ T6992] device syzkaller0 entered promiscuous mode [ 247.900249][ T4321] usb 4-1: Using ep0 maxpacket: 8 [ 247.908620][ T4321] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 247.934868][ T4321] usb 4-1: config 0 has no interface number 0 [ 247.954792][ T4321] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 247.984788][ T4321] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.011068][ T4321] usb 4-1: config 0 descriptor?? [ 248.131622][ T4321] viperboard 4-1:0.143: version 0.00 found at bus 004 address 028 [ 248.165905][ T4321] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 248.183869][ T4321] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 248.221356][ T6994] netlink: 12 bytes leftover after parsing attributes in process `syz.1.928'. [ 248.627422][ T7010] Scaler: ================= START STATUS ================= [ 248.636165][ T4320] usb 4-1: USB disconnect, device number 28 [ 248.642103][ T7010] Scaler: ================== END STATUS ================== [ 249.360364][ T4320] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 249.472534][ T7019] device syzkaller0 entered promiscuous mode [ 249.550240][ T4320] usb 2-1: Using ep0 maxpacket: 8 [ 249.569676][ T4320] usb 2-1: config 0 has no interfaces? [ 249.585758][ T4320] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 249.596385][ T4320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.617433][ T4320] usb 2-1: config 0 descriptor?? [ 249.645387][ T7022] device syzkaller0 entered promiscuous mode [ 249.842913][ T127] usb 2-1: USB disconnect, device number 34 [ 249.914840][ T7027] binder: 7025:7027 unknown command 1074553622 [ 249.926033][ T7027] binder: 7025:7027 ioctl c0306201 200000000640 returned -22 [ 249.936540][ T7027] netlink: 12 bytes leftover after parsing attributes in process `syz.2.939'. [ 250.015667][ T7030] netlink: 64 bytes leftover after parsing attributes in process `syz.2.941'. [ 250.428670][ T7043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.324505][ T7058] binder: 7057:7058 unknown command 1074553622 [ 251.331186][ T7058] binder: 7057:7058 ioctl c0306201 200000000640 returned -22 [ 251.345793][ T7058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.952'. [ 251.712423][ T7067] device syzkaller0 entered promiscuous mode [ 251.813656][ T7067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.954'. [ 251.900737][ T4320] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 252.125204][ T4320] usb 5-1: config index 0 descriptor too short (expected 8228, got 36) [ 252.163741][ T4320] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.211122][ T4320] usb 5-1: config 0 has no interfaces? [ 252.239140][ T4320] usb 5-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 252.277336][ T4320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.328691][ T4320] usb 5-1: config 0 descriptor?? [ 252.569733][ T7062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.601403][ T7062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.779451][ T7091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.808342][ T4320] usb 5-1: string descriptor 0 read error: -71 [ 254.838161][ T4320] usb 5-1: USB disconnect, device number 38 [ 255.459277][ T7102] device syzkaller0 entered promiscuous mode [ 255.662517][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.668923][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.701372][ T3654] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 255.902009][ T3654] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 255.925631][ T3654] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 255.937725][ T3654] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 255.956574][ T3654] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 255.965872][ T3654] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.005568][ T3654] usbtmc: probe of 5-1:16.0 failed with error -22 [ 256.203839][ T3654] usb 5-1: USB disconnect, device number 39 [ 256.533982][ T7131] loop8: detected capacity change from 0 to 7 [ 256.547297][ T7132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.561099][ T7131] Dev loop8: unable to read RDB block 7 [ 256.570445][ T7131] loop8: AHDI p1 p2 [ 256.580516][ T7131] loop8: partition table partially beyond EOD, truncated [ 256.605235][ T7131] loop8: p1 start 1700754297 is beyond EOD, truncated [ 256.780671][ T3654] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 256.970410][ T3654] usb 3-1: Using ep0 maxpacket: 32 [ 256.985094][ T3654] usb 3-1: unable to get BOS descriptor or descriptor too short [ 257.002399][ T3654] usb 3-1: config 165 has an invalid interface number: 162 but max is 0 [ 257.029549][ T3654] usb 3-1: config 165 has no interface number 0 [ 257.045604][ T3654] usb 3-1: config 165 interface 162 has no altsetting 0 [ 257.069334][ T3654] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=27.24 [ 257.093600][ T3654] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.110023][ T3654] usb 3-1: Product: syz [ 257.116616][ T3654] usb 3-1: Manufacturer: syz [ 257.128201][ T3654] usb 3-1: SerialNumber: syz [ 257.461139][ T7155] netlink: 'syz.2.974': attribute type 21 has an invalid length. [ 257.510737][ T7155] netlink: 156 bytes leftover after parsing attributes in process `syz.2.974'. [ 257.961164][ T3654] i2c-tiny-usb 3-1:165.162: version 27.24 found at bus 003 address 032 [ 257.989807][ T3654] (null): failure setting delay to 10us [ 258.005962][ T3654] i2c-tiny-usb: probe of 3-1:165.162 failed with error -5 [ 258.049251][ T3654] usb 3-1: USB disconnect, device number 32 [ 258.236450][ T7152] mmap: syz.3.985 (7152) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 258.249991][ T7152] [ 258.252358][ T7152] ====================================================== [ 258.259397][ T7152] WARNING: possible circular locking dependency detected [ 258.266448][ T7152] syzkaller #0 Not tainted [ 258.270895][ T7152] ------------------------------------------------------ [ 258.277920][ T7152] syz.3.985/7152 is trying to acquire lock: [ 258.283819][ T7152] ffff888076f00f30 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: process_measurement+0x3af/0x1c40 [ 258.294588][ T7152] [ 258.294588][ T7152] but task is already holding lock: [ 258.301997][ T7152] ffff888029e017d8 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x1aa/0x7b0 [ 258.312042][ T7152] [ 258.312042][ T7152] which lock already depends on the new lock. [ 258.312042][ T7152] [ 258.322464][ T7152] [ 258.322464][ T7152] the existing dependency chain (in reverse order) is: [ 258.331518][ T7152] [ 258.331518][ T7152] -> #1 (&mm->mmap_lock){++++}-{3:3}: [ 258.339090][ T7152] down_read_killable+0x4c/0x340 [ 258.344575][ T7152] mmap_read_lock_killable+0x1d/0x60 [ 258.350414][ T7152] lock_mm_and_find_vma+0x2b1/0x2f0 [ 258.356145][ T7152] do_user_addr_fault+0x2e8/0xb20 [ 258.361707][ T7152] exc_page_fault+0x60/0x100 [ 258.366843][ T7152] asm_exc_page_fault+0x22/0x30 [ 258.372229][ T7152] fault_in_readable+0x13e/0x1f0 [ 258.377708][ T7152] fault_in_iov_iter_readable+0xbf/0x2f0 [ 258.383884][ T7152] generic_perform_write+0x1f1/0x5c0 [ 258.389712][ T7152] __generic_file_write_iter+0x148/0x2a0 [ 258.395902][ T7152] generic_file_write_iter+0xab/0x2e0 [ 258.401815][ T7152] vfs_write+0x482/0x9a0 [ 258.406632][ T7152] ksys_write+0x14d/0x260 [ 258.411521][ T7152] do_syscall_64+0x4c/0xa0 [ 258.416479][ T7152] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 258.422926][ T7152] [ 258.422926][ T7152] -> #0 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}: [ 258.431642][ T7152] __lock_acquire+0x2d18/0x7c40 [ 258.437036][ T7152] lock_acquire+0x1bb/0x4a0 [ 258.442080][ T7152] down_write+0x36/0x60 [ 258.446774][ T7152] process_measurement+0x3af/0x1c40 [ 258.452524][ T7152] ima_file_mmap+0xe9/0x140 [ 258.457571][ T7152] __se_sys_remap_file_pages+0x55a/0x7b0 [ 258.463752][ T7152] do_syscall_64+0x4c/0xa0 [ 258.468719][ T7152] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 258.475160][ T7152] [ 258.475160][ T7152] other info that might help us debug this: [ 258.475160][ T7152] [ 258.485395][ T7152] Possible unsafe locking scenario: [ 258.485395][ T7152] [ 258.492853][ T7152] CPU0 CPU1 [ 258.498226][ T7152] ---- ---- [ 258.503600][ T7152] lock(&mm->mmap_lock); [ 258.507942][ T7152] lock(&sb->s_type->i_mutex_key#13); [ 258.515959][ T7152] lock(&mm->mmap_lock); [ 258.522818][ T7152] lock(&sb->s_type->i_mutex_key#13); [ 258.528306][ T7152] [ 258.528306][ T7152] *** DEADLOCK *** [ 258.528306][ T7152] [ 258.536455][ T7152] 1 lock held by syz.3.985/7152: [ 258.541412][ T7152] #0: ffff888029e017d8 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x1aa/0x7b0 [ 258.551891][ T7152] [ 258.551891][ T7152] stack backtrace: [ 258.557803][ T7152] CPU: 1 PID: 7152 Comm: syz.3.985 Not tainted syzkaller #0 [ 258.565097][ T7152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 258.575162][ T7152] Call Trace: [ 258.578448][ T7152] [ 258.581391][ T7152] dump_stack_lvl+0x188/0x24e [ 258.586087][ T7152] ? load_image+0x410/0x410 [ 258.590612][ T7152] ? show_regs_print_info+0x12/0x12 [ 258.595822][ T7152] ? print_circular_bug+0x12b/0x1a0 [ 258.601038][ T7152] check_noncircular+0x296/0x330 [ 258.605997][ T7152] ? look_up_lock_class+0x75/0x140 [ 258.611124][ T7152] ? add_chain_block+0x9b0/0x9b0 [ 258.616081][ T7152] ? lockdep_lock+0xf1/0x1f0 [ 258.620695][ T7152] ? _find_first_zero_bit+0xd2/0x100 [ 258.626011][ T7152] __lock_acquire+0x2d18/0x7c40 [ 258.630891][ T7152] ? ima_match_policy+0x10d/0x21b0 [ 258.636012][ T7152] ? __lock_acquire+0x7c40/0x7c40 [ 258.641053][ T7152] ? verify_lock_unused+0x140/0x140 [ 258.646272][ T7152] ? ima_match_policy+0x10d/0x21b0 [ 258.651408][ T7152] ? ima_match_policy+0x211c/0x21b0 [ 258.656627][ T7152] lock_acquire+0x1bb/0x4a0 [ 258.661179][ T7152] ? process_measurement+0x3af/0x1c40 [ 258.666575][ T7152] ? __might_sleep+0xd0/0xd0 [ 258.671177][ T7152] ? read_lock_is_recursive+0x10/0x10 [ 258.676572][ T7152] ? ima_get_action+0x71/0xa0 [ 258.681270][ T7152] down_write+0x36/0x60 [ 258.685457][ T7152] ? process_measurement+0x3af/0x1c40 [ 258.690847][ T7152] process_measurement+0x3af/0x1c40 [ 258.696087][ T7152] ? ima_file_mmap+0x140/0x140 [ 258.700870][ T7152] ? aa_file_perm+0x112/0xf00 [ 258.705571][ T7152] ? mtree_load+0x100/0xa70 [ 258.710101][ T7152] ? apparmor_current_getsecid_subj+0xb1/0x110 [ 258.716281][ T7152] ima_file_mmap+0xe9/0x140 [ 258.720801][ T7152] ? ima_file_free+0x3e0/0x3e0 [ 258.725585][ T7152] ? common_file_perm+0x171/0x1c0 [ 258.730629][ T7152] ? bpf_lsm_mmap_file+0x5/0x10 [ 258.735519][ T7152] ? security_mmap_file+0x11b/0x180 [ 258.740733][ T7152] __se_sys_remap_file_pages+0x55a/0x7b0 [ 258.746392][ T7152] ? __x64_sys_remap_file_pages+0xc0/0xc0 [ 258.752135][ T7152] ? lock_chain_count+0x20/0x20 [ 258.757007][ T7152] ? lockdep_hardirqs_on+0x94/0x140 [ 258.762235][ T7152] ? __x64_sys_remap_file_pages+0x1c/0xc0 [ 258.767972][ T7152] do_syscall_64+0x4c/0xa0 [ 258.772408][ T7152] ? clear_bhb_loop+0x60/0xb0 [ 258.777094][ T7152] ? clear_bhb_loop+0x60/0xb0 [ 258.781782][ T7152] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 258.787706][ T7152] RIP: 0033:0x7f57b3d9e159 [ 258.792148][ T7152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.811774][ T7152] RSP: 002b:00007f57b4c1e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 258.820200][ T7152] RAX: ffffffffffffffda RBX: 00007f57b4025fa0 RCX: 00007f57b3d9e159 [ 258.828189][ T7152] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000200000903000 [ 258.836169][ T7152] RBP: 00007f57b3e3506b R08: 000000000f000000 R09: 0000000000000000 [ 258.844153][ T7152] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000000 [ 258.852136][ T7152] R13: 00007f57b4026038 R14: 00007f57b4025fa0 R15: 00007fff7d782a48 [ 258.860127][ T7152] [ 258.950373][ T27] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 259.141757][ T27] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 259.151756][ T27] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 259.161654][ T27] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 259.174669][ T27] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 259.183863][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.197894][ T27] usbtmc: probe of 5-1:16.0 failed with error -22 [ 259.399410][ T27] usb 5-1: USB disconnect, device number 40