last executing test programs: 8.511750513s ago: executing program 0 (id=900): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r3, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000003, 0xfa10, 0xffffffff}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000000)={0xfff, 0x0, 0x3, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r5, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x7, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x40040814}, 0x40004) syz_emit_ethernet(0x6e, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYRESOCT=r2, @ANYRESDEC=r4, @ANYRESDEC=r2, @ANYRESOCT=r0, @ANYRES64=r0], 0x3c}}, 0x54) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}, 0xa000000}], 0x1, 0x20000014) shutdown(r0, 0x0) 8.28276459s ago: executing program 0 (id=902): mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) 8.151049355s ago: executing program 0 (id=903): ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000380)={{0x0, 0xfff, 0x4b, 0x8007}, 'syz0\x00', 0x3e}) r0 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000700)={0xc, 0x0, &(0x7f0000000940)=ANY=[]}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="20810100"], 0x0, 0x0, 0x0, 0x0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800090001000000fedbdf250a80200004030007"], 0x1c}}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) socket$packet(0x11, 0x2, 0x300) syz_open_procfs(0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000300)={0x0, "61b2c13a64c7a3fdf4d8186dbecd6aa50d61f492573729589a196e8b82f9c7b17428dc5c3d91bc5d5aad038e9c2edb9399d0214d28bc8710b6d5b4b201efe3b6", 0x11}, 0x48, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000280), 0x4d83, 0x101200) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000002c0)={0xf0f001, 0xfffffffb}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000340)=""/90) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000003c0)={0x60, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x7fffffff, 0x0, 0x0, 0x4, 0x24, 0x0, 0x0, 0x3f}) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) 6.833960246s ago: executing program 1 (id=907): syz_usb_connect(0x2, 0x3e, &(0x7f0000000700)=ANY=[@ANYBLOB="1201500279d6212099040e10f4f00102030109022c0001880b000209041e0002ff1e0a7106082402011003d10809050f0308000804"], &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$hid(0x5, 0x3f, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="95000000ba4fa2ab638311e8dc3c9e1a6badfb53393fa9c1e00ab9b5923c7e4d14629fb9b7671e706a6958e40c8016e5fb18ec4660311dc9da0513d3fec2148b208dfc0e0000"], &(0x7f0000000240)='GPL\x00', 0x5, 0x2d, &(0x7f0000000280)=""/45, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x102, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40488c0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'erspan0\x00'}) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = socket(0x29, 0x2, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000040)='4', 0x1}], 0x1, 0x0, 0x0, 0x0) r4 = syz_usb_connect$uac3(0x2, 0xbc, &(0x7f0000000380)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x499, 0x1044, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaa, 0x3, 0x1, 0x8, 0xd0, 0x4, {0x8, 0xb, 0x2, 0x1, 0x1, 0x20, 0x30, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xe8e2e774acb8a574, 0x10, 0x10}, [@cluster_info_segment={0x6, 0x20, 0xff, 0xad, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x4c, 0x2, 0x80, 0x4}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x6, 0x9, 0x0, 0xd3}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x10}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x3d4a877bd6563648, 0x9f, 0x4, 0x4, {0xa, 0x25, 0x25, 0x9, 0x9, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x0, 0x2, 0x4, "79461a7e362f"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1e7, 0x1, 0x3, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x38, 0x8, 0x6, {0xa, 0x25, 0x25, 0x4, 0x8, 0x4}}}}}}}}]}}, 0x0) syz_usb_control_io$uac3(r4, &(0x7f0000000a00)={0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f00000009c0)=ANY=[@ANYBLOB]}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) openat$fuse(0xffffff9c, &(0x7f0000000300), 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) 5.333584183s ago: executing program 3 (id=911): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x2, 0x27000000}}}}]}, 0x78}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xe, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffff, 0xd}}]}}]}, 0x40}}, 0x800) r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r8) socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000180)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 5.277801435s ago: executing program 2 (id=912): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e1e, @multicast2}, 0x10) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000240)={0xfffffffa, 0x80000001}, 0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) close(r1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/fscaps', 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGFEATURE(r3, 0xc0404807, &(0x7f0000000940)={0xd, "95bc9233a0ffadb335984bb3280b7840ca36304441bfb8b79ebdfe0534843f462a2e51c23b47519839c74c89785759d861f0cbab603459d543d8937b4693682b"}) syz_usb_control_io$hid(r0, 0x0, 0x0) 5.074273381s ago: executing program 0 (id=913): openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)={0x40200, 0x0, 0x8}, 0x18) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x800000, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) socket$inet(0xa, 0xa, 0x8001) sendfile(r2, r2, 0x0, 0x24002de8) ioctl$LOOP_SET_STATUS(r2, 0x4c02, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000002c0)={0x0, {}, 0x0, {}, 0x7, 0x6, 0x2, 0x18, "d1c759b1ddcf9eae07db96d9c14d6430cc544f61f4873134806f2d7105a86cca51fe2b4a3afa7976be1d5d4162fdab4c3e8855be083a28e69730a023d43cead9", "b4397d7b6efb5ba32db6d5f4c12dc083d947837bac641e00", [0x5, 0x9]}) socket$nl_route(0x10, 0x3, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x100000000) ptrace(0x10, 0x1) r3 = openat(0xffffffffffffffff, &(0x7f0000000180)='./cgroup\x00', 0x480100, 0x0) openat$cgroup_ro(r3, 0x0, 0x275a, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xd) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000140)={0xfa, 0x101, 0x1000, 0x10, 0xf, "24669c7029b3856e66e74b1117149e7a265ae1"}) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x6) r6 = landlock_create_ruleset(&(0x7f00000002c0)={0x2386, 0x2, 0x4}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) 5.069305972s ago: executing program 3 (id=914): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc53}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000280)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x8043, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x100000f, 0x9, 0x0, 0x1, 0x0, 0x2, 0x87b, 0x2, 0x0, 0x0, 0x0, 0x6, 0x6, 0x1, 0x3], 0x0, 0x8340}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.331953305s ago: executing program 4 (id=916): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x148, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x118, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x7ffffffe, 0x9, 0x0, 0x6}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) 4.190788359s ago: executing program 3 (id=917): syz_usb_connect(0x2, 0x58, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) 4.106125632s ago: executing program 4 (id=918): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x801) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) eventfd2(0x7f, 0x801) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x8000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100036756a42015140020982b0102030109021b00020c0630ea0904b70c003f7d0f060904e5"], &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 3.752889693s ago: executing program 0 (id=919): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4d0086d0492082a6d0000000109021b0001000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.722006724s ago: executing program 1 (id=920): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r3, @ANYRES64=r1], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x2c, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x10b85, 0x49800}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x0) 3.580741038s ago: executing program 3 (id=921): r0 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040), 0x0, &(0x7f00000002c0)=[@dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}], 0x20, 0x4855}, 0x24000052) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="48001a0054"], 0x18c0}, 0x1, 0x0, 0x0, 0x20000850}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x6c220208}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, r1, 0x8, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x40c0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0), 0xc) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54", 0xe) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_REQ_SET_REG(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000700)=ANY=[], 0x1c}}, 0x0) recvmsg(r7, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)=""/23, 0x17}], 0x1}, 0x142) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x2000005}, 0x1c) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r5, &(0x7f0000000400)={0x34}) 3.580083328s ago: executing program 1 (id=922): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff, 0xffff}, {0xfff1, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xdc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3.462024042s ago: executing program 3 (id=923): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, 0x0) r3 = dup(r1) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r6, 0x40184810, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003d40)={0x40, 0x40, 0x107, 0xfffffffe, 0x10000, {0x4, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x1c, 0x2, 0x0, 0x1, [@nested={0x18, 0xb, 0x0, 0x1, [@typed={0x14, 0x10, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x100000000, 0x800020, 0x3fffffffffffffff, 0x20000005f, 0x106c, 0xfe, 0x8000000000000, 0xa21, 0x1000, 0x8, 0x0, 0x4, 0x0, 0x8004], 0x54000, 0x1c0200}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x38, 0x6d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'ip6_vti0\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 3.398951064s ago: executing program 1 (id=924): ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000380)={{0x0, 0xfff, 0x4b, 0x8007}, 'syz0\x00', 0x3e}) r0 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000700)={0xc, 0x0, &(0x7f0000000940)=ANY=[]}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="20810100"], 0x0, 0x0, 0x0, 0x0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800090001000000fedbdf250a80200004030007"], 0x1c}}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) socket$packet(0x11, 0x2, 0x300) syz_open_procfs(0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000300)={0x0, "61b2c13a64c7a3fdf4d8186dbecd6aa50d61f492573729589a196e8b82f9c7b17428dc5c3d91bc5d5aad038e9c2edb9399d0214d28bc8710b6d5b4b201efe3b6", 0x11}, 0x48, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000280), 0x4d83, 0x101200) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000002c0)={0xf0f001, 0xfffffffb}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000340)=""/90) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000003c0)={0x60, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x7fffffff, 0x0, 0x0, 0x4, 0x24, 0x0, 0x0, 0x3f}) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) 3.126799552s ago: executing program 2 (id=925): syz_usb_connect(0x0, 0x1a2, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b6a57e4086805b0bc5e10102030109029001020000000009040000020e0100000a2401002200020102092100000001220000090500000000000000a7008d566539461c701919d99a91c3af134dfaf61ea66b8f08810855d90c55c91f11c4a6d847caf7b449c6c760e60f6b890d99ed23074bf2538ca7bba727dfe7c00b90d0bc7f2da56768ed5ce8df", @ANYRESOCT, @ANYRES64, @ANYRES32, @ANYRESOCT], 0x0) 2.128197344s ago: executing program 4 (id=926): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x2, 0x27000000}}}}]}, 0x78}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xe, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffff, 0xd}}]}}]}, 0x40}}, 0x800) r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r8) socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000180)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 1.893758881s ago: executing program 4 (id=927): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800090001000000fedbdf250a80200004030007"], 0x1c}}, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe33) 1.440500945s ago: executing program 2 (id=928): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc53}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000280)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x8043, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x100000f, 0x9, 0x0, 0x1, 0x0, 0x2, 0x87b, 0x2, 0x0, 0x0, 0x0, 0x6, 0x6, 0x1, 0x3], 0x0, 0x8340}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.320254529s ago: executing program 1 (id=929): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x148, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x118, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x7ffffffe, 0x9, 0x0, 0x6}}, @TCA_GRED_STAB={0x104, 0x2, "6a5c8d6e56a3857dfcdef7b2cc5943f5ab90a2a3c7b5b43b3c90ba420a16d00355354d134f9c2ee484adb8416e3f180a4b2d6e5552aa66ae89476a7ec13c04c39a107796cd115bcf28d72b188105acd71d1fee6f6a325169ef91d1e19089385aca27a7ccbdb2c2869cd2985c286e09ae436b1fed83c1b7d7fab107eb218151a560723252a1b16822925e4a160f93b0d43d9ba46411be3bcbad2c3f1e11a392b690c802177bd3ed3d1c2f69044f98128018c150e2c4b6322face88f5ed2cd741343af9eac5a454120c13ddc503835cbad8646351ba5d4af335af601dac0231ef35eb8933c4b7c235387bf398a3a26e3efbadc1616242f1131028e424db8c55351"}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) 1.27808959s ago: executing program 4 (id=930): openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)={0x40200, 0x0, 0x8}, 0x18) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x800000, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) socket$inet(0xa, 0xa, 0x8001) sendfile(r2, r2, 0x0, 0x24002de8) ioctl$LOOP_SET_STATUS(r2, 0x4c02, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000002c0)={0x0, {}, 0x0, {}, 0x7, 0x6, 0x2, 0x18, "d1c759b1ddcf9eae07db96d9c14d6430cc544f61f4873134806f2d7105a86cca51fe2b4a3afa7976be1d5d4162fdab4c3e8855be083a28e69730a023d43cead9", "b4397d7b6efb5ba32db6d5f4c12dc083d947837bac641e00", [0x5, 0x9]}) socket$nl_route(0x10, 0x3, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x100000000) ptrace(0x10, 0x1) r3 = openat(0xffffffffffffffff, &(0x7f0000000180)='./cgroup\x00', 0x480100, 0x0) openat$cgroup_ro(r3, 0x0, 0x275a, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xd) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000140)={0xfa, 0x101, 0x1000, 0x10, 0xf, "24669c7029b3856e66e74b1117149e7a265ae1"}) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x6) r6 = landlock_create_ruleset(&(0x7f00000002c0)={0x2386, 0x2, 0x4}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) 1.189801953s ago: executing program 1 (id=931): syz_usb_connect(0x2, 0x58, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) 679.840159ms ago: executing program 0 (id=932): syz_usb_connect(0x2, 0x3e, &(0x7f0000000700)=ANY=[@ANYBLOB="1201500279d6212099040e10f4f00102030109022c0001880b000209041e0002ff1e0a7106082402011003d10809050f0308000804"], &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$hid(0x5, 0x3f, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="95000000ba4fa2ab638311e8dc3c9e1a6badfb53393fa9c1e00ab9b5923c7e4d14629fb9b7671e706a6958e40c8016e5fb18ec4660311dc9da0513d3fec2148b208dfc0e0000"], &(0x7f0000000240)='GPL\x00', 0x5, 0x2d, &(0x7f0000000280)=""/45, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x102, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40488c0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'erspan0\x00'}) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = socket(0x29, 0x2, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000040)='4', 0x1}], 0x1, 0x0, 0x0, 0x0) r4 = syz_usb_connect$uac3(0x2, 0xbc, &(0x7f0000000380)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x499, 0x1044, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaa, 0x3, 0x1, 0x8, 0xd0, 0x4, {0x8, 0xb, 0x2, 0x1, 0x1, 0x20, 0x30, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xe8e2e774acb8a574, 0x10, 0x10}, [@cluster_info_segment={0x6, 0x20, 0xff, 0xad, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x4c, 0x2, 0x80, 0x4}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x6, 0x9, 0x0, 0xd3}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x10}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x3d4a877bd6563648, 0x9f, 0x4, 0x4, {0xa, 0x25, 0x25, 0x9, 0x9, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x0, 0x2, 0x4, "79461a7e362f"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1e7, 0x1, 0x3, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x38, 0x8, 0x6, {0xa, 0x25, 0x25, 0x4, 0x8, 0x4}}}}}}}}]}}, 0x0) syz_usb_control_io$uac3(r4, &(0x7f0000000a00)={0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f00000009c0)=ANY=[@ANYBLOB]}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) openat$fuse(0xffffff9c, &(0x7f0000000300), 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) 532.668324ms ago: executing program 2 (id=933): r0 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040), 0x0, &(0x7f00000002c0)=[@dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}], 0x20, 0x4855}, 0x24000052) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="c01800002000010a00000000000000000a0000002c01018028014880ed00a90013466820cd76bb221fbb4acd690c6a8b9c760a61eeec7793b579aefdb936d00f403d3f04637cdb9ac70e28c5dd66ddedde2d0930650e6821f9a26a4a193c1d06a3e75523f901e44fe087ae32c836c6d6ddba3af8e9a2beae8936168f9fa38c395f5cf7408df69c60bf584bee86a6312e9ce866e456c3eda6f2924082d78a2f385bdbd0c9afb54758c102bf13094645fb6aa34d424ec776691fee3d25307f61fed2752babf7c686e8a3d9b59a8343bcf4121bf5cf400a0c1070855fac565cad8968a97ce0a12a1161054d82d0a240b7dedf9ba3cc63e9d1c3b9a8402f7d5b4cafcd48928a3d4a76498900000014007c00ff01000000000000000000000000000108003d00", @ANYRES32=r3, @ANYBLOB="48001a0054"], 0x18c0}, 0x1, 0x0, 0x0, 0x20000850}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x6c220208}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, r1, 0x8, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x40c0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0), 0xc) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54", 0xe) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_REQ_SET_REG(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000700)=ANY=[], 0x1c}}, 0x0) recvmsg(r7, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)=""/23, 0x17}], 0x1}, 0x142) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x2000005}, 0x1c) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r5, &(0x7f0000000400)={0x34}) 366.182919ms ago: executing program 2 (id=934): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x0, 0x0, 0x1}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'geneve0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0xc0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r1 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xffff}) r2 = socket$inet(0x2b, 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040)={0x0, 0xff, 0x20}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r3, 0xc7d}, 0x8) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x8, 0x6, 0x3, @vifc_lcl_addr=@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) mbind(&(0x7f00004d0000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000200)=0x6, 0x7fff, 0x5) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0xbd, 0xc9, 0xe, 0xff}}}, 0x9) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000080)={0xf0f044}) close(0x3) 299.405871ms ago: executing program 3 (id=935): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, 0x0) r3 = dup(r1) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r6, 0x40184810, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x100000000, 0x800020, 0x3fffffffffffffff, 0x20000005f, 0x106c, 0xfe, 0x8000000000000, 0xa21, 0x1000, 0x8, 0x0, 0x4, 0x0, 0x8004], 0x54000, 0x1c0200}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x38, 0x6d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'ip6_vti0\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 112.765697ms ago: executing program 2 (id=936): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x801) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) eventfd2(0x7f, 0x801) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x8000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100036756a42015140020982b0102030109021b00020c0630ea0904b70c003f7d0f060904e5"], &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 0s ago: executing program 4 (id=937): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r3, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000003, 0xfa10, 0xffffffff}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000000)={0xfff, 0x0, 0x3, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r5, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x7, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x40040814}, 0x40004) syz_emit_ethernet(0x6e, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYRESOCT=r2, @ANYRESDEC=r4, @ANYRESDEC=r2, @ANYRESOCT=r0, @ANYRES64=r0], 0x3c}}, 0x54) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}, 0xa000000}], 0x1, 0x20000014) shutdown(r0, 0x0) kernel console output (not intermixed with test programs): ng 0 has an invalid endpoint with address 0xFF, skipping [ 140.251326][ T4195] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 140.264983][ T4195] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 140.274556][ T4195] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.284725][ T4195] usb 3-1: config 0 descriptor?? [ 140.294850][ T4234] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 140.304128][ T4234] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.312154][ T4234] usb 5-1: Product: syz [ 140.316866][ T4234] usb 5-1: Manufacturer: syz [ 140.321493][ T4234] usb 5-1: SerialNumber: syz [ 140.328611][ T4195] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 140.605661][ T4195] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 140.680239][ T5459] netlink: 16 bytes leftover after parsing attributes in process `syz.0.377'. [ 140.805540][ T1108] usb 5-1: USB disconnect, device number 16 [ 141.052747][ T4195] usb 2-1: unable to get BOS descriptor or descriptor too short [ 141.893108][ T4195] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 141.906036][ T4195] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.920536][ T4195] usb 2-1: Product: syz [ 141.927433][ T4195] usb 2-1: Manufacturer: syz [ 141.932255][ T4195] usb 2-1: SerialNumber: syz [ 141.986832][ T5477] device syzkaller0 entered promiscuous mode [ 141.993469][ T4234] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 142.196872][ T5457] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 142.204182][ T5457] IPv6: NLM_F_CREATE should be set when creating new route [ 142.211434][ T5457] IPv6: NLM_F_CREATE should be set when creating new route [ 142.218787][ T5457] IPv6: NLM_F_CREATE should be set when creating new route [ 142.233037][ T5457] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.375'. [ 142.393051][ T4234] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 142.402884][ T4195] usb 2-1: 1:1: cannot set freq 48000 to ep 0x1 [ 142.475674][ T4234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.518367][ T4234] usb 4-1: config 0 descriptor?? [ 142.554297][ T4195] usb 2-1: USB disconnect, device number 18 [ 142.664205][ T4277] usb 3-1: USB disconnect, device number 19 [ 142.747193][ T4236] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 142.824926][ T4424] udevd[4424]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 143.122965][ T4236] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 143.141913][ T4236] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 143.160147][ T4236] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 143.200057][ T4236] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.208529][ T4234] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 143.252831][ T4234] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 143.312852][ T4234] [drm:udl_init] *ERROR* Selecting channel failed [ 143.314070][ T5479] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 143.339638][ T4234] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 143.353883][ T4234] [drm] Initialized udl on minor 2 [ 143.382231][ T4234] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 143.448185][ T4234] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 143.493107][ T4234] usb 4-1: USB disconnect, device number 21 [ 143.533043][ T4236] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 143.554673][ T4236] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 143.569901][ T4236] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 143.738280][ T4270] usb 5-1: USB disconnect, device number 17 [ 143.912610][ T5503] device syzkaller0 entered promiscuous mode [ 144.455636][ T5518] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 144.514573][ T5518] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 145.333928][ T5525] device syzkaller0 entered promiscuous mode [ 145.964178][ T4236] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 146.162823][ T4270] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 146.342922][ T4236] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 146.363014][ T4236] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 146.402117][ T4236] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 146.411620][ T4236] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.442627][ T4236] usb 3-1: config 0 descriptor?? [ 146.492303][ T4236] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 146.562951][ T4270] usb 5-1: unable to get BOS descriptor or descriptor too short [ 146.613351][ T4270] usb 5-1: not running at top speed; connect to a high speed hub [ 146.693076][ T4270] usb 5-1: config 9 has too many interfaces: 138, using maximum allowed: 32 [ 146.706718][ T4270] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 146.719580][ T4270] usb 5-1: config 9 has 1 interface, different from the descriptor's value: 138 [ 146.731375][ T4270] usb 5-1: config 9 has no interface number 0 [ 146.903016][ T4270] usb 5-1: New USB device found, idVendor=0421, idProduct=df51, bcdDevice=d7.eb [ 146.913091][ T4270] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.921129][ T4270] usb 5-1: Product: syz [ 146.942983][ T4270] usb 5-1: Manufacturer: syz [ 146.947836][ T4270] usb 5-1: SerialNumber: syz [ 147.278201][ T4270] cdc_phonet 5-1:9.102: skipping garbage [ 147.287646][ T4270] cdc_phonet: probe of 5-1:9.102 failed with error -22 [ 147.325874][ T4270] usb 5-1: USB disconnect, device number 18 [ 148.016349][ T5561] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 148.023651][ T5561] IPv6: NLM_F_CREATE should be set when creating new route [ 148.030953][ T5561] IPv6: NLM_F_CREATE should be set when creating new route [ 148.038241][ T5561] IPv6: NLM_F_CREATE should be set when creating new route [ 148.051793][ T4234] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 148.064355][ T5561] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.405'. [ 148.453864][ T4234] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 148.475918][ T4234] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 148.499120][ T4234] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 148.511913][ T4234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.553181][ T5557] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 148.663996][ T5563] device syzkaller0 entered promiscuous mode [ 148.709354][ T4234] usb 3-1: USB disconnect, device number 20 [ 148.855892][ T5565] 8021q: adding VLAN 0 to HW filter on device bond1 [ 148.947779][ T5565] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 148.954385][ T4195] usb 2-1: USB disconnect, device number 19 [ 148.976382][ T5565] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 149.013844][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 149.120441][ T5575] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 149.131870][ T5575] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 149.822757][ T4277] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 150.052872][ T4195] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 150.192823][ T4234] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 150.273340][ T4277] usb 3-1: unable to get BOS descriptor or descriptor too short [ 150.319150][ T5594] device syzkaller0 entered promiscuous mode [ 150.325833][ T4277] usb 3-1: not running at top speed; connect to a high speed hub [ 150.333974][ T4195] usb 2-1: Using ep0 maxpacket: 32 [ 150.433272][ T4277] usb 3-1: config 9 has too many interfaces: 138, using maximum allowed: 32 [ 150.449012][ T4277] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 150.468103][ T4277] usb 3-1: config 9 has 1 interface, different from the descriptor's value: 138 [ 150.477890][ T4195] usb 2-1: config 0 has no interfaces? [ 150.484385][ T4277] usb 3-1: config 9 has no interface number 0 [ 150.593080][ T4234] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 150.611198][ T4234] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 150.651037][ T4234] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 150.673354][ T4234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.683021][ T4195] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 150.692588][ T4277] usb 3-1: New USB device found, idVendor=0421, idProduct=df51, bcdDevice=d7.eb [ 150.703161][ T4234] usb 4-1: config 0 descriptor?? [ 150.708185][ T4277] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.716742][ T4195] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.726214][ T4195] usb 2-1: Product: syz [ 150.730622][ T4277] usb 3-1: Product: syz [ 150.736141][ T4195] usb 2-1: Manufacturer: syz [ 150.741074][ T4277] usb 3-1: Manufacturer: syz [ 150.746564][ T4195] usb 2-1: SerialNumber: syz [ 150.751466][ T4277] usb 3-1: SerialNumber: syz [ 150.766712][ T4195] usb 2-1: config 0 descriptor?? [ 150.774606][ T4234] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 151.091059][ T4234] usb 2-1: USB disconnect, device number 20 [ 151.113351][ T4277] cdc_phonet 3-1:9.102: skipping garbage [ 151.123248][ T4277] cdc_phonet: probe of 3-1:9.102 failed with error -22 [ 151.141282][ T4277] usb 3-1: USB disconnect, device number 21 [ 151.645060][ T5604] 8021q: adding VLAN 0 to HW filter on device bond2 [ 151.765220][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 151.811824][ T5604] bond2: (slave batadv2): Enslaving as an active interface with an up link [ 151.889749][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 151.932504][ T5610] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 152.023279][ T5610] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 152.362826][ T4234] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 152.772916][ T4234] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 153.809265][ T4234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.819585][ T4234] usb 3-1: config 0 descriptor?? [ 153.883398][ T5628] device syzkaller0 entered promiscuous mode [ 153.912368][ T4270] usb 4-1: USB disconnect, device number 22 [ 154.109786][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.117361][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.200769][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.208193][ T5634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.217132][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.224307][ T5634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.319088][ T5634] team0: Port device bridge0 added [ 154.392751][ T4277] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 154.472237][ T5648] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 154.510615][ T5648] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 154.612850][ T4234] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 154.625824][ T4234] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 154.665319][ T4234] [drm:udl_init] *ERROR* Selecting channel failed [ 154.691411][ T4234] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 154.717185][ T4234] [drm] Initialized udl on minor 2 [ 154.773140][ T4277] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.784278][ T4234] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 154.792690][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 154.808751][ T4234] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 154.832941][ T4277] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.863190][ T4234] usb 3-1: USB disconnect, device number 22 [ 154.877628][ T4277] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 154.914634][ T4277] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.945729][ T4277] usb 2-1: config 0 descriptor?? [ 154.971249][ T4195] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 154.996873][ T4195] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 155.046530][ T4195] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 155.072508][ T5664] device syzkaller0 entered promiscuous mode [ 155.454894][ T4277] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 155.474697][ T4277] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 155.486534][ T4234] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 155.547387][ T4272] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 155.572935][ T4195] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 155.656264][ T5637] netlink: 'syz.1.433': attribute type 28 has an invalid length. [ 155.665779][ T5637] netlink: 'syz.1.433': attribute type 3 has an invalid length. [ 155.674652][ T5637] netlink: 132 bytes leftover after parsing attributes in process `syz.1.433'. [ 155.702876][ T4277] cp2112 0003:10C4:EA90.0005: error requesting version [ 155.788877][ T5674] udc-core: couldn't find an available UDC or it's busy [ 155.796380][ T5674] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 155.894475][ T4234] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 155.905611][ T4234] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 155.930953][ T4234] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 155.941326][ T4234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.972877][ T4195] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.983641][ T4234] usb 3-1: config 0 descriptor?? [ 156.003358][ T4272] usb 4-1: unable to get BOS descriptor or descriptor too short [ 156.025295][ T4234] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 156.043066][ T4272] usb 4-1: not running at top speed; connect to a high speed hub [ 156.132922][ T4272] usb 4-1: config 9 has too many interfaces: 138, using maximum allowed: 32 [ 156.142243][ T4272] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 156.153484][ T4272] usb 4-1: config 9 has 1 interface, different from the descriptor's value: 138 [ 156.162563][ T4272] usb 4-1: config 9 has no interface number 0 [ 156.172984][ T4195] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 156.182246][ T4195] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.190903][ T4195] usb 5-1: Product: syz [ 156.195521][ T4195] usb 5-1: Manufacturer: syz [ 156.200152][ T4195] usb 5-1: SerialNumber: syz [ 156.333297][ T4272] usb 4-1: New USB device found, idVendor=0421, idProduct=df51, bcdDevice=d7.eb [ 156.342465][ T4272] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.350870][ T4272] usb 4-1: Product: syz [ 156.355352][ T4272] usb 4-1: Manufacturer: syz [ 156.359990][ T4272] usb 4-1: SerialNumber: syz [ 156.505605][ T5670] udc-core: couldn't find an available UDC or it's busy [ 156.512605][ T5670] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 156.522047][ T5670] netlink: 'syz.4.446': attribute type 4 has an invalid length. [ 156.682955][ T4195] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 156.703508][ T4272] cdc_phonet 4-1:9.102: skipping garbage [ 156.709210][ T4272] cdc_phonet: probe of 4-1:9.102 failed with error -22 [ 156.716675][ T4195] usb 5-1: unit 2 not found! [ 156.724596][ T4272] usb 4-1: USB disconnect, device number 23 [ 156.760094][ T4195] snd-usb-audio: probe of 5-1:1.2 failed with error -16 [ 156.773149][ T4195] usb 5-1: USB disconnect, device number 19 [ 157.450992][ T5695] device syzkaller0 entered promiscuous mode [ 157.572816][ T4234] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 157.592951][ T5697] device syzkaller0 entered promiscuous mode [ 157.842740][ T4234] usb 5-1: Using ep0 maxpacket: 8 [ 158.023613][ T7] usb 3-1: USB disconnect, device number 23 [ 158.142341][ T4234] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.172848][ T4234] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 158.182073][ T4234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.214052][ T4234] usb 5-1: config 0 descriptor?? [ 158.256660][ T5701] 8021q: adding VLAN 0 to HW filter on device bond3 [ 158.274036][ T4234] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 158.320026][ T5703] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 158.349270][ T5703] bond3: (slave batadv3): Enslaving as an active interface with an up link [ 158.402942][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 158.599727][ T5710] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 158.607202][ T5710] IPv6: NLM_F_CREATE should be set when creating new route [ 158.614542][ T5710] IPv6: NLM_F_CREATE should be set when creating new route [ 158.621787][ T5710] IPv6: NLM_F_CREATE should be set when creating new route [ 158.661466][ T5711] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.461'. [ 158.922868][ T4234] gspca_vc032x: reg_r err -71 [ 158.927774][ T4234] vc032x: probe of 5-1:0.0 failed with error -71 [ 158.959101][ T4234] usb 5-1: USB disconnect, device number 20 [ 159.333327][ T5720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.464'. [ 159.542102][ T5724] device syzkaller0 entered promiscuous mode [ 159.692310][ T5726] device syzkaller0 entered promiscuous mode [ 160.132923][ T4272] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 160.542877][ T4272] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 160.593084][ T4272] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 160.606658][ T4272] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 160.616623][ T4272] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.627769][ T4272] usb 5-1: config 0 descriptor?? [ 160.685137][ T4272] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 160.749687][ T4277] cp2112: probe of 0003:10C4:EA90.0005 failed with error -32 [ 160.790501][ T1108] usb 2-1: USB disconnect, device number 21 [ 160.866697][ T5742] fido_id[5742]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 160.929372][ T5746] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 160.936695][ T5746] IPv6: NLM_F_CREATE should be set when creating new route [ 160.944015][ T5746] IPv6: NLM_F_CREATE should be set when creating new route [ 160.951245][ T5746] IPv6: NLM_F_CREATE should be set when creating new route [ 160.968621][ T5746] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.475'. [ 160.973409][ T7] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 161.132875][ T4235] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 161.343052][ T7] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 161.352609][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.370842][ T7] usb 3-1: config 0 descriptor?? [ 161.493020][ T4235] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 161.506574][ T4235] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 161.520005][ T4235] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 161.550374][ T4235] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.576724][ T4235] usb 4-1: config 0 descriptor?? [ 161.615376][ T4235] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 161.780970][ T5759] netlink: 68 bytes leftover after parsing attributes in process `syz.1.478'. [ 161.811418][ T5759] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 161.972885][ T7] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 161.981596][ T7] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 162.002825][ T7] [drm:udl_init] *ERROR* Selecting channel failed [ 162.014502][ T7] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 162.022122][ T7] [drm] Initialized udl on minor 2 [ 162.043070][ T7] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 162.051966][ T7] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 162.061899][ T7] usb 3-1: USB disconnect, device number 24 [ 162.081402][ T4235] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 162.090894][ T4235] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 162.099790][ T4235] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 162.199559][ T5763] picdev_read: 1374 callbacks suppressed [ 162.199577][ T5763] kvm: pic: non byte read [ 162.211627][ T5763] kvm: pic: non byte read [ 162.218100][ T5763] kvm: pic: non byte read [ 162.223312][ T5763] kvm: pic: non byte read [ 162.228719][ T5763] kvm: pic: non byte read [ 162.234166][ T5763] kvm: pic: non byte read [ 162.238998][ T5763] kvm: pic: non byte read [ 162.245039][ T5763] kvm: pic: non byte read [ 162.251189][ T5763] kvm: pic: non byte read [ 162.256212][ T5763] kvm: pic: non byte read [ 162.582437][ T5777] netlink: 92 bytes leftover after parsing attributes in process `syz.2.485'. [ 162.601847][ T5777] netlink: 16 bytes leftover after parsing attributes in process `syz.2.485'. [ 162.712748][ T7] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 162.930230][ T2015] usb 5-1: USB disconnect, device number 21 [ 163.095970][ T7] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 163.104593][ T7] usb 2-1: config 0 has no interface number 0 [ 163.111408][ T7] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 163.283064][ T7] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 163.296851][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.319778][ T7] usb 2-1: Product: syz [ 163.328326][ T7] usb 2-1: Manufacturer: syz [ 163.333616][ T7] usb 2-1: SerialNumber: syz [ 163.353677][ T7] usb 2-1: config 0 descriptor?? [ 163.389040][ T5797] device syzkaller1 entered promiscuous mode [ 163.428393][ T7] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 163.532770][ T2015] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 163.655165][ T5806] device netdevsim0 entered promiscuous mode [ 163.662550][ T5806] device batadv0 entered promiscuous mode [ 163.671306][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 163.802742][ T2015] usb 5-1: Using ep0 maxpacket: 32 [ 163.810375][ T4277] usb 4-1: USB disconnect, device number 24 [ 163.822821][ C0] usb 2-1: yurex_control_callback - control failed: -2 [ 163.833268][ T7] usb 2-1: USB disconnect, device number 22 [ 163.845794][ T7] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 163.972976][ T2015] usb 5-1: unable to get BOS descriptor or descriptor too short [ 164.012826][ T4272] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 164.083099][ T2015] usb 5-1: config 12 has an invalid interface number: 183 but max is 1 [ 164.091458][ T2015] usb 5-1: config 12 has an invalid interface number: 229 but max is 1 [ 164.100653][ T2015] usb 5-1: config 12 has no interface number 0 [ 164.107344][ T2015] usb 5-1: config 12 has no interface number 1 [ 164.114106][ T2015] usb 5-1: config 12 interface 183 has no altsetting 0 [ 164.262973][ T4277] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 164.282957][ T2015] usb 5-1: New USB device found, idVendor=1415, idProduct=2000, bcdDevice=2b.98 [ 164.292152][ T2015] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.300467][ T2015] usb 5-1: Product: syz [ 164.305626][ T2015] usb 5-1: Manufacturer: syz [ 164.310473][ T2015] usb 5-1: SerialNumber: syz [ 164.403225][ T4272] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 164.422722][ T4272] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 164.435887][ T4272] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 164.445253][ T4272] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.465047][ T4272] usb 3-1: config 0 descriptor?? [ 164.505400][ T4272] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 164.513264][ T4277] usb 4-1: Using ep0 maxpacket: 16 [ 164.682146][ T4277] usb 4-1: unable to get BOS descriptor or descriptor too short [ 164.783147][ T4277] usb 4-1: config 251 has an invalid interface number: 95 but max is 0 [ 164.801912][ T4277] usb 4-1: config 251 has no interface number 0 [ 164.817617][ T4277] usb 4-1: config 251 interface 95 has no altsetting 0 [ 164.982939][ T4277] usb 4-1: New USB device found, idVendor=0856, idProduct=ac32, bcdDevice=d8.41 [ 165.002499][ T4277] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.014823][ T4277] usb 4-1: Product: syz [ 165.019060][ T4277] usb 4-1: Manufacturer: syz [ 165.032922][ T4277] usb 4-1: SerialNumber: syz [ 165.170474][ T2015] usb 5-1: USB disconnect, device number 22 [ 165.318202][ T5812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.498'. [ 165.552902][ T4277] mos7840 4-1:251.95: required endpoints missing [ 165.578812][ T4277] usb 4-1: USB disconnect, device number 25 [ 166.332932][ T4272] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 166.362835][ T2015] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 166.735676][ T4272] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 166.757907][ T4272] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 166.772084][ T2015] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 166.783539][ T7] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 166.793043][ T2015] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 166.812700][ T4272] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 166.822110][ T2015] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 166.842685][ T4272] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.872359][ T4272] usb 2-1: config 0 descriptor?? [ 166.905635][ T4234] usb 3-1: USB disconnect, device number 25 [ 166.920014][ T4272] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 167.033122][ T2015] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 167.046852][ T2015] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.063564][ T2015] usb 5-1: Product: syz [ 167.073197][ T2015] usb 5-1: Manufacturer: syz [ 167.079226][ T2015] usb 5-1: SerialNumber: syz [ 167.111556][ T2015] usb 5-1: config 0 descriptor?? [ 167.183539][ T7] usb 4-1: unable to get BOS descriptor or descriptor too short [ 167.233085][ T7] usb 4-1: not running at top speed; connect to a high speed hub [ 167.312956][ T7] usb 4-1: config 61 has an invalid descriptor of length 0, skipping remainder of the config [ 167.332804][ T7] usb 4-1: config 61 has 0 interfaces, different from the descriptor's value: 1 [ 167.415193][ T2015] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 167.513049][ T7] usb 4-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 167.525822][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.543436][ T7] usb 4-1: Product: syz [ 167.547786][ T7] usb 4-1: Manufacturer: syz [ 167.552413][ T7] usb 4-1: SerialNumber: syz [ 167.565279][ T5882] picdev_read: 1374 callbacks suppressed [ 167.565294][ T5882] kvm: pic: non byte read [ 167.607896][ T5882] kvm: pic: non byte read [ 167.628981][ T5882] kvm: pic: non byte read [ 167.644839][ T5882] kvm: pic: non byte read [ 167.649561][ T5882] kvm: pic: non byte read [ 167.666633][ T2015] usb 5-1: USB disconnect, device number 23 [ 167.679810][ T5882] kvm: pic: non byte read [ 167.713155][ T5882] kvm: pic: non byte read [ 167.717885][ T5882] kvm: pic: non byte read [ 167.722517][ T5882] kvm: pic: non byte read [ 167.728246][ T5882] kvm: pic: non byte read [ 167.839787][ T7] usb 4-1: USB disconnect, device number 26 [ 168.712787][ T4235] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 168.742600][ T5903] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 168.764906][ T5903] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 169.050523][ T4234] usb 2-1: USB disconnect, device number 23 [ 169.093304][ T4235] usb 4-1: config 0 has no interfaces? [ 169.172845][ T2015] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 169.253483][ T4235] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 169.263001][ T4270] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 169.293923][ T4235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.302104][ T4235] usb 4-1: Product: syz [ 169.307015][ T4235] usb 4-1: Manufacturer: syz [ 169.311730][ T4235] usb 4-1: SerialNumber: syz [ 169.318872][ T4235] usb 4-1: config 0 descriptor?? [ 169.432381][ T5920] capability: warning: `syz.1.527' uses deprecated v2 capabilities in a way that may be insecure [ 169.583154][ T2015] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.590147][ T4235] usb 4-1: USB disconnect, device number 27 [ 169.623322][ T4270] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 169.633071][ T4270] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.651084][ T4270] usb 3-1: config 0 descriptor?? [ 169.782847][ T2015] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 169.791946][ T2015] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.800084][ T4234] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 169.822937][ T2015] usb 5-1: Product: syz [ 169.827158][ T2015] usb 5-1: Manufacturer: syz [ 169.831808][ T2015] usb 5-1: SerialNumber: syz [ 170.092907][ T4234] usb 2-1: Using ep0 maxpacket: 8 [ 170.208269][ T5931] udc-core: couldn't find an available UDC or it's busy [ 170.219873][ T5931] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 170.232911][ T4270] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 170.242937][ T4234] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.252388][ T4270] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 170.257000][ T5931] netlink: 'syz.4.521': attribute type 4 has an invalid length. [ 170.270402][ T4234] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 170.281715][ T4234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.283211][ T4270] [drm:udl_init] *ERROR* Selecting channel failed [ 170.321389][ T4234] usb 2-1: config 0 descriptor?? [ 170.323197][ T4270] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 170.372728][ T4270] [drm] Initialized udl on minor 2 [ 170.383290][ T4234] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 170.402826][ T4270] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 170.421804][ T4270] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 170.457749][ T4270] usb 3-1: USB disconnect, device number 26 [ 170.473455][ T7] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 170.489058][ T7] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 170.516813][ T7] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 170.563054][ T2015] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 170.603162][ T2015] usb 5-1: unit 2 not found! [ 170.638352][ T5940] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 170.660149][ T2015] snd-usb-audio: probe of 5-1:1.2 failed with error -16 [ 170.697994][ T2015] usb 5-1: USB disconnect, device number 24 [ 170.708633][ T5940] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 171.042929][ T4234] gspca_vc032x: reg_r err -71 [ 171.047750][ T4234] vc032x: probe of 2-1:0.0 failed with error -71 [ 171.091449][ T4234] usb 2-1: USB disconnect, device number 24 [ 171.203877][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.211851][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.395318][ T5961] 8021q: VLANs not supported on gre0 [ 171.804752][ T4234] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 171.822904][ T4235] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 171.889267][ T5975] loop6: detected capacity change from 0 to 2640 [ 171.896262][ T4195] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 171.907057][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 171.918176][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 171.926507][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 171.937515][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 171.955403][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 171.966442][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 171.978235][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 171.982375][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 0 [ 171.989178][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 172.008511][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 0 [ 172.013213][ C1] blk_update_request: I/O error, dev loop6, sector 2042 op 0x1:(WRITE) flags 0x8800 phys_seg 75 prio class 0 [ 172.020324][ C0] blk_update_request: I/O error, dev loop6, sector 1018 op 0x1:(WRITE) flags 0x8800 phys_seg 128 prio class 0 [ 172.031865][ C1] blk_update_request: I/O error, dev loop6, sector 2042 op 0x1:(WRITE) flags 0x8800 phys_seg 75 prio class 0 [ 172.055045][ C0] blk_update_request: I/O error, dev loop6, sector 1018 op 0x1:(WRITE) flags 0x8800 phys_seg 128 prio class 0 [ 172.069921][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 172.091398][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 172.106752][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 172.118160][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 172.126293][ T4406] ldm_validate_partition_table(): Disk read failed. [ 172.133607][ T4234] usb 4-1: Using ep0 maxpacket: 32 [ 172.150251][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 172.159038][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 172.172892][ T4406] Dev loop6: unable to read RDB block 0 [ 172.181654][ T4406] loop6: unable to read partition table [ 172.188076][ T4235] usb 5-1: Using ep0 maxpacket: 32 [ 172.200447][ T5975] ldm_validate_partition_table(): Disk read failed. [ 172.212135][ T5975] Dev loop6: unable to read RDB block 0 [ 172.219832][ T5975] loop6: unable to read partition table [ 172.231220][ T5975] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 172.310224][ T4234] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 172.319812][ T4234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.342260][ T4234] usb 4-1: config 0 descriptor?? [ 172.352972][ T4235] usb 5-1: unable to get BOS descriptor or descriptor too short [ 172.378714][ T5980] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 172.398843][ T5980] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 172.422966][ T4195] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 172.433319][ T4195] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.443469][ T4235] usb 5-1: config 12 has an invalid interface number: 183 but max is 1 [ 172.455011][ T4195] usb 2-1: config 0 descriptor?? [ 172.472814][ T4235] usb 5-1: config 12 has an invalid interface number: 229 but max is 1 [ 172.481131][ T4235] usb 5-1: config 12 has no interface number 0 [ 172.506249][ T4235] usb 5-1: config 12 has no interface number 1 [ 172.520005][ T4235] usb 5-1: config 12 interface 183 has no altsetting 0 [ 172.612835][ T4234] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 172.627586][ T4234] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 172.653425][ T4234] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 172.661957][ T4234] usb 4-1: media controller created [ 172.679918][ T4234] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 172.683424][ T4235] usb 5-1: New USB device found, idVendor=1415, idProduct=2000, bcdDevice=2b.98 [ 172.711228][ T4235] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.733128][ T4235] usb 5-1: Product: syz [ 172.738978][ T4235] usb 5-1: Manufacturer: syz [ 172.752415][ T4235] usb 5-1: SerialNumber: syz [ 172.843221][ T4234] az6027: usb out operation failed. (-71) [ 172.873838][ T4234] az6027: usb out operation failed. (-71) [ 172.879761][ T4234] stb0899_attach: Driver disabled by Kconfig [ 172.893256][ T4234] az6027: no front-end attached [ 172.893256][ T4234] [ 172.922843][ T4234] az6027: usb out operation failed. (-71) [ 172.928748][ T4234] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 172.964462][ T4234] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8 [ 173.000669][ T4234] dvb-usb: schedule remote query interval to 400 msecs. [ 173.008047][ T4234] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 173.050303][ T4234] usb 4-1: USB disconnect, device number 28 [ 173.056625][ T4195] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 173.072671][ T4195] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 173.103059][ T4195] [drm:udl_init] *ERROR* Selecting channel failed [ 173.145383][ T4195] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 173.163469][ T4234] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 173.172068][ T4195] [drm] Initialized udl on minor 2 [ 173.192809][ T4195] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 173.204951][ T4195] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 173.224508][ T4195] usb 2-1: USB disconnect, device number 25 [ 173.235450][ T4272] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 173.245521][ T4272] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 173.259695][ T4272] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 173.431826][ T6007] 8021q: VLANs not supported on gre0 [ 173.870791][ T6021] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 173.873186][ T7] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 173.964792][ T6021] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 174.029451][ T4235] usb 5-1: USB disconnect, device number 25 [ 174.128263][ T6028] device syzkaller0 entered promiscuous mode [ 174.264137][ T6030] fuse: Bad value for 'fd' [ 174.303552][ T7] usb 3-1: unable to get BOS descriptor or descriptor too short [ 174.343433][ T7] usb 3-1: not running at top speed; connect to a high speed hub [ 174.432882][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.483155][ T7] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 174.643185][ T7] usb 3-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 174.652439][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.660963][ T7] usb 3-1: Product: syz [ 174.665812][ T7] usb 3-1: Manufacturer: syz [ 174.670441][ T7] usb 3-1: SerialNumber: syz [ 174.862856][ T4195] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 174.945928][ T6011] udc-core: couldn't find an available UDC or it's busy [ 174.953141][ T6011] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 175.032449][ T6044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.555'. [ 175.060371][ T6044] netlink: 44 bytes leftover after parsing attributes in process `syz.2.555'. [ 175.081657][ T6044] netlink: 68 bytes leftover after parsing attributes in process `syz.2.555'. [ 175.121980][ T6044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.555'. [ 175.172735][ T1109] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 175.284035][ T4195] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 175.303647][ T4195] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 175.513983][ T4195] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 175.525159][ T4195] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.543395][ T4195] usb 2-1: Product: syz [ 175.547786][ T4195] usb 2-1: Manufacturer: syz [ 175.552414][ T4195] usb 2-1: SerialNumber: syz [ 175.553864][ T1109] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 175.582018][ T1109] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 175.593488][ T4195] usb 2-1: config 0 descriptor?? [ 175.632921][ T7] usb 3-1: cannot get ctl value: req = 0x83, wValue = 0x200, wIndex = 0x300, type = 4 [ 175.647579][ T4195] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 175.647796][ T7] usb 3-1: 3:0: cannot get min/max values for control 2 (id 3) [ 175.663275][ T1109] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 175.673237][ T1109] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.684106][ T1109] usb 5-1: config 0 descriptor?? [ 175.692911][ T7] usb 3-1: cannot get ctl value: req = 0x83, wValue = 0x300, wIndex = 0x300, type = 2 [ 175.784917][ T1109] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 175.793373][ T7] usb 3-1: 3:0: cannot get min/max values for control 3 (id 3) [ 175.812852][ T7] usb 3-1: cannot get ctl value: req = 0x83, wValue = 0x400, wIndex = 0x300, type = 2 [ 175.832827][ T7] usb 3-1: 3:0: cannot get min/max values for control 4 (id 3) [ 175.872866][ T7] usb 3-1: cannot get ctl value: req = 0x83, wValue = 0x500, wIndex = 0x300, type = 2 [ 175.886634][ T7] usb 3-1: 3:0: cannot get min/max values for control 5 (id 3) [ 175.912905][ T7] usb 3-1: cannot get ctl value: req = 0x83, wValue = 0x800, wIndex = 0x300, type = 7 [ 175.942568][ T7] usb 3-1: 3:0: cannot get min/max values for control 8 (id 3) [ 175.993102][ T7] usb 3-1: cannot get ctl value: req = 0x83, wValue = 0x300, wIndex = 0x300, type = 2 [ 176.012095][ T7] usb 3-1: 3:0: cannot get min/max values for control 3 (id 3) [ 176.043211][ T7] usb 3-1: cannot get ctl value: req = 0x83, wValue = 0x500, wIndex = 0x300, type = 2 [ 176.061914][ T7] usb 3-1: 3:0: cannot get min/max values for control 5 (id 3) [ 176.074493][ T4195] gspca_sunplus: reg_r err -71 [ 176.079636][ T4195] sunplus: probe of 2-1:0.0 failed with error -71 [ 176.103652][ T4195] usb 2-1: USB disconnect, device number 26 [ 176.116569][ T7] usb 3-1: USB disconnect, device number 27 [ 176.405864][ T4406] udevd[4406]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 176.455404][ T6068] fuse: Bad value for 'fd' [ 176.493785][ T6070] device syzkaller0 entered promiscuous mode [ 176.779674][ T6086] netlink: 68 bytes leftover after parsing attributes in process `syz.3.581'. [ 176.990549][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 177.042917][ T6094] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 177.065146][ T6094] sch_tbf: burst 7 is lower than device lo mtu (11337746) ! [ 177.129272][ T6100] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 177.141985][ T6100] device bridge_slave_0 left promiscuous mode [ 177.148606][ T6100] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.191596][ T6100] device bridge_slave_1 left promiscuous mode [ 177.198046][ T6100] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.217775][ T6100] bond0: (slave bond_slave_0): Releasing backup interface [ 177.235483][ T6100] bond0: (slave bond_slave_1): Releasing backup interface [ 177.305421][ T6100] team0: Port device team_slave_0 removed [ 177.342472][ T6100] team0: Port device team_slave_1 removed [ 177.354220][ T6100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.372077][ T6100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.389461][ T6100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.404140][ T6100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.444385][ T6100] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 177.740036][ T6118] netlink: 68 bytes leftover after parsing attributes in process `syz.0.592'. [ 177.932572][ T4195] usb 5-1: USB disconnect, device number 26 [ 177.959251][ T4234] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 178.422593][ T6137] device syzkaller0 entered promiscuous mode [ 178.442881][ T4234] usb 4-1: unable to get BOS descriptor or descriptor too short [ 178.463172][ T2015] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 178.483946][ T4234] usb 4-1: not running at top speed; connect to a high speed hub [ 178.525120][ T6139] netlink: 192 bytes leftover after parsing attributes in process `syz.1.601'. [ 178.582974][ T4234] usb 4-1: config 9 has too many interfaces: 138, using maximum allowed: 32 [ 178.632779][ T4234] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 178.653762][ T4234] usb 4-1: config 9 has 1 interface, different from the descriptor's value: 138 [ 178.702724][ T4234] usb 4-1: config 9 has no interface number 0 [ 178.782039][ T6148] netlink: 68 bytes leftover after parsing attributes in process `syz.1.605'. [ 178.903538][ T2015] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 178.921363][ T2015] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.929622][ T4234] usb 4-1: New USB device found, idVendor=0421, idProduct=df51, bcdDevice=d7.eb [ 178.945828][ T4234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.958039][ T6156] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4198] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6156] [ 178.987042][ T2015] usb 5-1: config 0 descriptor?? [ 179.001068][ T4234] usb 4-1: Product: syz [ 179.040897][ T4234] usb 4-1: Manufacturer: syz [ 179.046350][ T4234] usb 4-1: SerialNumber: syz [ 179.383426][ T4234] cdc_phonet 4-1:9.102: skipping garbage [ 179.391603][ T4234] cdc_phonet: probe of 4-1:9.102 failed with error -22 [ 179.424556][ T4234] usb 4-1: USB disconnect, device number 29 [ 179.487257][ T6171] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 179.526846][ T6171] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 179.612870][ T2015] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 179.637851][ T2015] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 179.674824][ T2015] [drm:udl_init] *ERROR* Selecting channel failed [ 179.698425][ T2015] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 179.724154][ T2015] [drm] Initialized udl on minor 2 [ 179.752938][ T2015] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 179.769944][ T2015] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 179.807614][ T2015] usb 5-1: USB disconnect, device number 27 [ 179.841215][ T4234] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 179.862445][ T4234] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 179.900451][ T4234] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 179.978939][ T6177] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.033359][ T6179] device syzkaller0 entered promiscuous mode [ 180.632805][ T6065] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 180.878001][ T6065] usb 5-1: Using ep0 maxpacket: 32 [ 180.960956][ T6214] device syzkaller0 entered promiscuous mode [ 180.967182][ T4195] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 181.043042][ T6065] usb 5-1: unable to get BOS descriptor or descriptor too short [ 181.133206][ T6065] usb 5-1: config 12 has an invalid interface number: 183 but max is 1 [ 181.141539][ T6065] usb 5-1: config 12 has an invalid interface number: 229 but max is 1 [ 181.160854][ T6065] usb 5-1: config 12 has no interface number 0 [ 181.168512][ T6065] usb 5-1: config 12 has no interface number 1 [ 181.182830][ T6065] usb 5-1: config 12 interface 183 has no altsetting 0 [ 181.183884][ T4277] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 181.207931][ T6218] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 181.229847][ T6218] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 181.306287][ T6221] fuse: Bad value for 'fd' [ 181.376547][ T6065] usb 5-1: New USB device found, idVendor=1415, idProduct=2000, bcdDevice=2b.98 [ 181.403675][ T6065] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.423212][ T4195] usb 4-1: unable to get BOS descriptor or descriptor too short [ 181.431238][ T6065] usb 5-1: Product: syz [ 181.436756][ T6065] usb 5-1: Manufacturer: syz [ 181.441388][ T6065] usb 5-1: SerialNumber: syz [ 181.472990][ T4195] usb 4-1: not running at top speed; connect to a high speed hub [ 181.553277][ T4195] usb 4-1: config 9 has too many interfaces: 138, using maximum allowed: 32 [ 181.570022][ T4195] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 181.590762][ T4195] usb 4-1: config 9 has 1 interface, different from the descriptor's value: 138 [ 181.610523][ T4195] usb 4-1: config 9 has no interface number 0 [ 181.617368][ T4277] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.632801][ T4277] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 181.652434][ T4277] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 181.724109][ T6237] netlink: 12 bytes leftover after parsing attributes in process `syz.2.637'. [ 181.740521][ T6235] device syzkaller0 entered promiscuous mode [ 181.823079][ T4195] usb 4-1: New USB device found, idVendor=0421, idProduct=df51, bcdDevice=d7.eb [ 181.842411][ T4195] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.851099][ T4277] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 181.863319][ T4277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.871909][ T4195] usb 4-1: Product: syz [ 181.892182][ T4195] usb 4-1: Manufacturer: syz [ 181.897118][ T4277] usb 2-1: Product: syz [ 181.911493][ T4195] usb 4-1: SerialNumber: syz [ 181.916699][ T4277] usb 2-1: Manufacturer: syz [ 181.921559][ T4277] usb 2-1: SerialNumber: syz [ 181.984435][ T4277] cdc_mbim 2-1:1.0: skipping garbage [ 181.992776][ T4277] cdc_mbim 2-1:1.0: CDC Union missing and no IAD found [ 182.009638][ T4277] cdc_mbim 2-1:1.0: bind() failure [ 182.253395][ T4195] cdc_phonet 4-1:9.102: skipping garbage [ 182.259115][ T4195] cdc_phonet: probe of 4-1:9.102 failed with error -22 [ 182.280985][ T4195] usb 4-1: USB disconnect, device number 30 [ 182.376543][ T6065] usb 5-1: USB disconnect, device number 28 [ 182.611108][ T6246] device syzkaller0 entered promiscuous mode [ 182.795734][ T6250] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 182.808915][ T6250] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 182.929365][ T6256] fuse: Bad value for 'fd' [ 183.232784][ T6065] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 183.364281][ T13] usb 2-1: USB disconnect, device number 27 [ 183.442719][ T6065] usb 5-1: device descriptor read/64, error -71 [ 183.524163][ T6273] device syzkaller0 entered promiscuous mode [ 183.732792][ T6065] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 183.932886][ T6065] usb 5-1: device descriptor read/64, error -71 [ 184.063480][ T6065] usb usb5-port1: attempt power cycle [ 184.243024][ T6282] netlink: 68 bytes leftover after parsing attributes in process `syz.3.651'. [ 184.472746][ T6065] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 184.573156][ T6065] usb 5-1: device descriptor read/8, error -71 [ 184.711781][ T6289] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 184.733129][ T6289] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 184.842793][ T6065] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 184.932875][ T6065] usb 5-1: device descriptor read/8, error -71 [ 185.042864][ T1109] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 185.053107][ T6065] usb usb5-port1: unable to enumerate USB device [ 185.282752][ T1109] usb 4-1: Using ep0 maxpacket: 32 [ 185.442872][ T1109] usb 4-1: unable to get BOS descriptor or descriptor too short [ 185.522941][ T1109] usb 4-1: config 12 has an invalid interface number: 183 but max is 1 [ 185.541566][ T1109] usb 4-1: config 12 has an invalid interface number: 229 but max is 1 [ 185.568985][ T1109] usb 4-1: config 12 has no interface number 0 [ 185.587292][ T1109] usb 4-1: config 12 has no interface number 1 [ 185.598281][ T1109] usb 4-1: config 12 interface 183 has no altsetting 0 [ 185.762834][ T1109] usb 4-1: New USB device found, idVendor=1415, idProduct=2000, bcdDevice=2b.98 [ 185.772510][ T1109] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.780618][ T1109] usb 4-1: Product: syz [ 185.785424][ T1109] usb 4-1: Manufacturer: syz [ 185.790072][ T1109] usb 4-1: SerialNumber: syz [ 186.453278][ T4272] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 186.461326][ T1109] usb 4-1: USB disconnect, device number 31 [ 186.842940][ T4272] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.858908][ T4272] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 186.877641][ T4272] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 187.100884][ T4272] usb 5-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 187.114908][ T4272] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.136612][ T4272] usb 5-1: Product: syz [ 187.147537][ T4272] usb 5-1: Manufacturer: syz [ 187.158885][ T4272] usb 5-1: SerialNumber: syz [ 187.181499][ T4272] usb 5-1: config 0 descriptor?? [ 187.466534][ T4277] usb 5-1: USB disconnect, device number 33 [ 187.832907][ T13] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 188.148152][ T6313] netlink: 68 bytes leftover after parsing attributes in process `syz.4.662'. [ 188.203103][ T13] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.249114][ T6313] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 188.373143][ T13] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 188.392548][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.423511][ T13] usb 3-1: Product: syz [ 188.427738][ T13] usb 3-1: Manufacturer: syz [ 188.442786][ T13] usb 3-1: SerialNumber: syz [ 188.777770][ T6335] udc-core: couldn't find an available UDC or it's busy [ 188.815757][ T6335] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 189.038630][ T4277] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 189.223015][ T13] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 189.252702][ T4277] usb 2-1: device descriptor read/64, error -71 [ 189.262941][ T13] usb 3-1: unit 2 not found! [ 189.310921][ T13] snd-usb-audio: probe of 3-1:1.2 failed with error -16 [ 189.339680][ T13] usb 3-1: USB disconnect, device number 28 [ 189.532779][ T4277] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 189.733003][ T4277] usb 2-1: device descriptor read/64, error -71 [ 189.862972][ T4277] usb usb2-port1: attempt power cycle [ 190.382918][ T4277] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 190.436793][ T6360] device syzkaller0 entered promiscuous mode [ 190.452973][ T4270] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 190.512870][ T4277] usb 2-1: device descriptor read/8, error -71 [ 190.600505][ T13] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 190.646517][ T6362] netlink: 68 bytes leftover after parsing attributes in process `syz.3.675'. [ 190.694253][ T6362] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 190.782782][ T4277] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 190.813118][ T4270] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.831923][ T4270] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 190.842154][ T4270] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 190.962792][ T4277] usb 2-1: device descriptor read/8, error -71 [ 190.973676][ T13] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 190.995218][ T13] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 191.010499][ T6371] netlink: 'syz.3.677': attribute type 1 has an invalid length. [ 191.022999][ T4270] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 191.045575][ T4270] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.071698][ T13] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 191.082883][ T4277] usb usb2-port1: unable to enumerate USB device [ 191.102250][ T4270] usb 3-1: Product: syz [ 191.113007][ T4277] Bluetooth: hci3: command 0x0406 tx timeout [ 191.113281][ T6371] 8021q: adding VLAN 0 to HW filter on device bond1 [ 191.120531][ T4277] Bluetooth: hci4: command 0x0406 tx timeout [ 191.132114][ T4277] Bluetooth: hci2: command 0x0406 tx timeout [ 191.137879][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.142569][ T4277] Bluetooth: hci1: command 0x0406 tx timeout [ 191.150947][ T4270] usb 3-1: Manufacturer: syz [ 191.179826][ T4270] usb 3-1: SerialNumber: syz [ 191.210598][ T13] usb 5-1: config 0 descriptor?? [ 191.240241][ T4270] usb 3-1: config 0 descriptor?? [ 191.264709][ T6065] Bluetooth: hci0: command 0x0406 tx timeout [ 191.291656][ T6371] bond1: (slave geneve2): making interface the new active one [ 191.303252][ T13] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 191.326850][ T6371] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 191.350640][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 191.362201][ T6371] syz.3.677 (6371) used greatest stack depth: 19416 bytes left [ 191.441698][ T6385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.679'. [ 191.509381][ T13] usb 3-1: USB disconnect, device number 29 [ 191.611904][ T6391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.681'. [ 192.192950][ T6403] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 192.269336][ T6403] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 192.712138][ T6415] netlink: 68 bytes leftover after parsing attributes in process `syz.3.687'. [ 192.786514][ T6415] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 192.942850][ T4277] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 193.202961][ T4277] usb 3-1: Using ep0 maxpacket: 32 [ 193.267450][ T13] usb 5-1: USB disconnect, device number 34 [ 193.321490][ T6441] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 193.342261][ T6441] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 193.388457][ T6444] netlink: 40 bytes leftover after parsing attributes in process `syz.4.694'. [ 193.502857][ T4277] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 193.523678][ T4277] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.540779][ T4277] usb 3-1: Product: syz [ 193.549675][ T4277] usb 3-1: Manufacturer: syz [ 193.561325][ T4277] usb 3-1: SerialNumber: syz [ 193.592315][ T4277] usb 3-1: config 0 descriptor?? [ 193.866103][ T4277] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 030 [ 193.922808][ T4195] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 194.082854][ T6417] udc-core: couldn't find an available UDC or it's busy [ 194.089871][ T6417] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 194.148048][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.154475][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.167448][ T4277] usb 3-1: USB disconnect, device number 30 [ 194.183542][ T6417] i2c i2c-1: failure writing data [ 194.352953][ T4195] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.369570][ T4195] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 194.388572][ T4195] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 194.619304][ T6463] netlink: 68 bytes leftover after parsing attributes in process `syz.1.701'. [ 194.652304][ T6463] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 194.660370][ T4195] usb 5-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 194.679333][ T4195] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.687528][ T4195] usb 5-1: Product: syz [ 194.691720][ T4195] usb 5-1: Manufacturer: syz [ 194.706945][ T4195] usb 5-1: SerialNumber: syz [ 194.723828][ T4195] usb 5-1: config 0 descriptor?? [ 194.872777][ T4277] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 194.988174][ T4272] usb 5-1: USB disconnect, device number 35 [ 195.132862][ T4277] usb 4-1: Using ep0 maxpacket: 32 [ 195.232808][ T13] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 195.312791][ T4277] usb 4-1: unable to get BOS descriptor or descriptor too short [ 195.392985][ T4277] usb 4-1: config 12 has an invalid interface number: 183 but max is 1 [ 195.401294][ T4277] usb 4-1: config 12 has an invalid interface number: 229 but max is 1 [ 195.409892][ T4277] usb 4-1: config 12 has no interface number 0 [ 195.416149][ T4277] usb 4-1: config 12 has no interface number 1 [ 195.422356][ T4277] usb 4-1: config 12 interface 183 has no altsetting 0 [ 195.429912][ T4234] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 195.591264][ T6488] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 195.600736][ T13] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 195.611576][ T13] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 195.616237][ T4277] usb 4-1: New USB device found, idVendor=1415, idProduct=2000, bcdDevice=2b.98 [ 195.626659][ T13] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 195.636932][ T6488] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 195.645229][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.661786][ T13] usb 3-1: config 0 descriptor?? [ 195.667251][ T4277] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.681061][ T4277] usb 4-1: Product: syz [ 195.688316][ T4277] usb 4-1: Manufacturer: syz [ 195.694049][ T4277] usb 4-1: SerialNumber: syz [ 195.715959][ T13] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 195.788444][ T6487] ODEBUG: Out of memory. ODEBUG disabled [ 195.880308][ T4234] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 196.078191][ T4234] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 196.097421][ T4234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.122887][ T4234] usb 2-1: Product: syz [ 196.130699][ T4234] usb 2-1: Manufacturer: syz [ 196.147671][ T4234] usb 2-1: SerialNumber: syz [ 196.166376][ T6499] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 196.182195][ T6496] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 196.194842][ T6496] netlink: 16 bytes leftover after parsing attributes in process `syz.4.710'. [ 196.205619][ T6496] netlink: 16 bytes leftover after parsing attributes in process `syz.4.710'. [ 196.215136][ T6496] netlink: 20 bytes leftover after parsing attributes in process `syz.4.710'. [ 196.224783][ T6496] netlink: 20 bytes leftover after parsing attributes in process `syz.4.710'. [ 196.370924][ T6502] picdev_read: 1374 callbacks suppressed [ 196.370938][ T6502] kvm: pic: non byte read [ 196.383945][ T6502] kvm: pic: non byte read [ 196.388493][ T6502] kvm: pic: non byte read [ 196.403422][ T6502] kvm: pic: non byte read [ 196.407983][ T6502] kvm: pic: non byte read [ 196.412523][ T6502] kvm: pic: non byte read [ 196.430499][ T6502] kvm: pic: non byte read [ 196.444192][ T6502] kvm: pic: non byte read [ 196.449175][ T6502] kvm: pic: non byte read [ 196.477310][ T6502] kvm: pic: non byte read [ 196.512019][ T6508] udc-core: couldn't find an available UDC or it's busy [ 196.533095][ T6508] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 196.875385][ T4234] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 196.922927][ T4234] usb 2-1: unit 2 not found! [ 196.980374][ T4234] snd-usb-audio: probe of 2-1:1.2 failed with error -16 [ 196.989045][ T4277] usb 4-1: USB disconnect, device number 32 [ 197.032805][ T4234] usb 2-1: USB disconnect, device number 32 [ 197.184755][ T6527] device syzkaller0 entered promiscuous mode [ 197.592837][ T4234] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 197.653032][ T4195] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 197.864658][ T4195] usb 5-1: device descriptor read/64, error -71 [ 198.012888][ T4234] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.030347][ T4235] usb 3-1: USB disconnect, device number 31 [ 198.058594][ T4234] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 198.115475][ T4234] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 198.162739][ T4195] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 198.186422][ T6544] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 198.291562][ T6551] fuse: Bad value for 'fd' [ 198.323102][ T4234] usb 2-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 198.342414][ T4234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.372096][ T4234] usb 2-1: Product: syz [ 198.376767][ T4195] usb 5-1: device descriptor read/64, error -71 [ 198.403614][ T4234] usb 2-1: Manufacturer: syz [ 198.429006][ T4234] usb 2-1: SerialNumber: syz [ 198.456489][ T4234] usb 2-1: config 0 descriptor?? [ 198.513421][ T4195] usb usb5-port1: attempt power cycle [ 198.719249][ T4235] usb 2-1: USB disconnect, device number 33 [ 198.902756][ T4234] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 198.962712][ T4195] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 198.982729][ T4272] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 199.082782][ T4195] usb 5-1: device descriptor read/8, error -71 [ 199.152713][ T4234] usb 3-1: Using ep0 maxpacket: 16 [ 199.293181][ T4234] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.311956][ T4234] usb 3-1: config 0 interface 0 has no altsetting 0 [ 199.327055][ T4234] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 199.350052][ T4234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.372997][ T4272] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 199.383807][ T4195] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 199.404810][ T4234] usb 3-1: config 0 descriptor?? [ 199.413502][ T4272] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 199.453201][ T4272] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 199.496666][ T4272] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.505077][ T4195] usb 5-1: device descriptor read/8, error -71 [ 199.539530][ T4272] usb 4-1: config 0 descriptor?? [ 199.595801][ T4272] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 199.643776][ T4195] usb usb5-port1: unable to enumerate USB device [ 200.538888][ T4234] hid-generic 0003:1E71:2009.0006: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 200.953378][ T4234] usb 3-1: USB disconnect, device number 32 [ 201.208569][ T6579] fido_id[6579]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 202.069319][ T4235] usb 4-1: USB disconnect, device number 33 [ 202.272792][ T4270] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 202.325736][ T6612] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 202.607261][ T6619] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 202.639864][ T6619] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 202.643798][ T4270] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 202.710576][ T4270] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 202.741373][ T4270] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 202.759196][ T4270] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.778138][ T4270] usb 3-1: config 0 descriptor?? [ 202.827827][ T4270] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 202.932842][ T13] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 203.292794][ T4270] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 203.302917][ T13] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 203.314052][ T13] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 203.323187][ T13] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 203.405940][ T6624] picdev_read: 1374 callbacks suppressed [ 203.405956][ T6624] kvm: pic: non byte read [ 203.417594][ T6624] kvm: pic: non byte read [ 203.422131][ T6624] kvm: pic: non byte read [ 203.427504][ T6624] kvm: pic: non byte read [ 203.432021][ T6624] kvm: pic: non byte read [ 203.438459][ T6624] kvm: pic: non byte read [ 203.443483][ T6624] kvm: pic: non byte read [ 203.447970][ T6624] kvm: pic: non byte read [ 203.455769][ T6624] kvm: pic: non byte read [ 203.460434][ T6624] kvm: pic: non byte read [ 203.482829][ T4270] usb 5-1: device descriptor read/64, error -71 [ 203.493546][ T13] usb 2-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 203.506204][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.524454][ T13] usb 2-1: Product: syz [ 203.533749][ T13] usb 2-1: Manufacturer: syz [ 203.544346][ T13] usb 2-1: SerialNumber: syz [ 203.568774][ T13] usb 2-1: config 0 descriptor?? [ 203.753037][ T4270] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 203.816645][ T4195] usb 2-1: USB disconnect, device number 34 [ 203.942744][ T4270] usb 5-1: device descriptor read/64, error -71 [ 204.063133][ T4270] usb usb5-port1: attempt power cycle [ 204.535904][ T4270] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 204.632974][ T4270] usb 5-1: device descriptor read/8, error -71 [ 204.902834][ T4270] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 205.002972][ T4270] usb 5-1: device descriptor read/8, error -71 [ 205.050984][ T13] usb 3-1: USB disconnect, device number 33 [ 205.132907][ T4270] usb usb5-port1: unable to enumerate USB device [ 205.357806][ T6655] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 205.402829][ T4234] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 205.448074][ T6658] device syzkaller0 entered promiscuous mode [ 205.601612][ T6660] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 205.618299][ T6660] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 205.773203][ T4234] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 205.784147][ T4234] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 205.797469][ T4234] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 205.806778][ T4234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.822379][ T4234] usb 2-1: config 0 descriptor?? [ 205.875235][ T4234] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 206.012833][ T13] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 206.412998][ T13] usb 3-1: unable to get BOS descriptor or descriptor too short [ 206.462871][ T13] usb 3-1: not running at top speed; connect to a high speed hub [ 206.542856][ T4234] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 206.543116][ T13] usb 3-1: config 9 has too many interfaces: 138, using maximum allowed: 32 [ 206.559692][ T13] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 206.570145][ T13] usb 3-1: config 9 has 1 interface, different from the descriptor's value: 138 [ 206.579828][ T13] usb 3-1: config 9 has no interface number 0 [ 206.732841][ T4195] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 206.742986][ T13] usb 3-1: New USB device found, idVendor=0421, idProduct=df51, bcdDevice=d7.eb [ 206.752295][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.761206][ T13] usb 3-1: Product: syz [ 206.765868][ T13] usb 3-1: Manufacturer: syz [ 206.770535][ T13] usb 3-1: SerialNumber: syz [ 206.953102][ T4234] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.103503][ T13] cdc_phonet 3-1:9.102: skipping garbage [ 207.109387][ T13] cdc_phonet: probe of 3-1:9.102 failed with error -22 [ 207.119787][ T13] usb 3-1: USB disconnect, device number 34 [ 207.173130][ T4195] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 207.183604][ T4234] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 207.193330][ T4234] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.201387][ T4234] usb 5-1: Product: syz [ 207.205746][ T4195] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 207.215037][ T4195] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 207.228098][ T4234] usb 5-1: Manufacturer: syz [ 207.232805][ T4234] usb 5-1: SerialNumber: syz [ 207.476273][ T4195] usb 4-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 207.485660][ T4195] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.493814][ T4195] usb 4-1: Product: syz [ 207.498061][ T4195] usb 4-1: Manufacturer: syz [ 207.502876][ T4195] usb 4-1: SerialNumber: syz [ 207.509732][ T4195] usb 4-1: config 0 descriptor?? [ 207.574856][ T6676] udc-core: couldn't find an available UDC or it's busy [ 207.581997][ T6676] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 207.765132][ T4270] usb 4-1: USB disconnect, device number 34 [ 207.833075][ T4234] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 207.864689][ T4234] usb 5-1: unit 2 not found! [ 207.912881][ T4195] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 207.933043][ T4234] snd-usb-audio: probe of 5-1:1.2 failed with error -16 [ 207.945601][ T4234] usb 5-1: USB disconnect, device number 44 [ 208.088081][ T2015] usb 2-1: USB disconnect, device number 35 [ 208.176155][ T6690] device syzkaller0 entered promiscuous mode [ 208.315457][ T4195] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 208.334585][ T6695] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 208.345818][ T4195] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.354824][ T6692] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 208.365807][ T4195] usb 3-1: config 0 descriptor?? [ 208.442650][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #30e!!! [ 208.642832][ T4270] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 208.822801][ T2015] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 208.882719][ T4270] usb 4-1: Using ep0 maxpacket: 8 [ 208.922909][ T4270] usb 4-1: no configurations [ 208.927591][ T4270] usb 4-1: can't read configurations, error -22 [ 208.962884][ T4195] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 208.981730][ T4195] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 209.002904][ T4195] [drm:udl_init] *ERROR* Selecting channel failed [ 209.044543][ T4195] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 209.052210][ T4195] [drm] Initialized udl on minor 2 [ 209.082752][ T2015] usb 2-1: Using ep0 maxpacket: 32 [ 209.083101][ T4270] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 209.103131][ T4195] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 209.111742][ T4195] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 209.130193][ T4195] usb 3-1: USB disconnect, device number 35 [ 209.141572][ T4234] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 209.160679][ T4234] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 209.175420][ T4234] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 209.273004][ T2015] usb 2-1: unable to get BOS descriptor or descriptor too short [ 209.302888][ T13] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 209.333221][ T4270] usb 4-1: Using ep0 maxpacket: 8 [ 209.362753][ T2015] usb 2-1: config 12 has an invalid interface number: 183 but max is 1 [ 209.371265][ T2015] usb 2-1: config 12 has an invalid interface number: 229 but max is 1 [ 209.374209][ T4270] usb 4-1: no configurations [ 209.392683][ T4270] usb 4-1: can't read configurations, error -22 [ 209.392682][ T2015] usb 2-1: config 12 has no interface number 0 [ 209.392705][ T2015] usb 2-1: config 12 has no interface number 1 [ 209.410544][ T4270] usb usb4-port1: attempt power cycle [ 209.442774][ T2015] usb 2-1: config 12 interface 183 has no altsetting 0 [ 209.632807][ T2015] usb 2-1: New USB device found, idVendor=1415, idProduct=2000, bcdDevice=2b.98 [ 209.652671][ T2015] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.660725][ T2015] usb 2-1: Product: syz [ 209.672650][ T2015] usb 2-1: Manufacturer: syz [ 209.677299][ T2015] usb 2-1: SerialNumber: syz [ 209.713136][ T13] usb 5-1: unable to get BOS descriptor or descriptor too short [ 209.763320][ T13] usb 5-1: not running at top speed; connect to a high speed hub [ 209.842957][ T13] usb 5-1: config 136 has an invalid interface number: 30 but max is 0 [ 209.851408][ T4270] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 209.862685][ T4195] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 209.863419][ T13] usb 5-1: config 136 has an invalid descriptor of length 0, skipping remainder of the config [ 209.891643][ T13] usb 5-1: config 136 has no interface number 0 [ 209.899625][ T13] usb 5-1: config 136 interface 30 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 209.962911][ T4270] usb 4-1: Using ep0 maxpacket: 8 [ 210.003134][ T4270] usb 4-1: no configurations [ 210.007789][ T4270] usb 4-1: can't read configurations, error -22 [ 210.082904][ T13] usb 5-1: New USB device found, idVendor=0499, idProduct=100e, bcdDevice=f0.f4 [ 210.096518][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.114619][ T13] usb 5-1: Product: syz [ 210.123349][ T13] usb 5-1: Manufacturer: syz [ 210.133128][ T13] usb 5-1: SerialNumber: syz [ 210.173260][ T4270] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 210.262914][ T4270] usb 4-1: Using ep0 maxpacket: 8 [ 210.303216][ T4270] usb 4-1: no configurations [ 210.308271][ T4270] usb 4-1: can't read configurations, error -22 [ 210.322929][ T4195] usb 3-1: unable to get BOS descriptor or descriptor too short [ 210.328961][ T4270] usb usb4-port1: unable to enumerate USB device [ 210.362930][ T4195] usb 3-1: not running at top speed; connect to a high speed hub [ 210.398644][ T6708] udc-core: couldn't find an available UDC or it's busy [ 210.412736][ T6708] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 210.482834][ T4195] usb 3-1: config 9 has too many interfaces: 138, using maximum allowed: 32 [ 210.491809][ T4195] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 210.503910][ T2015] usb 2-1: USB disconnect, device number 36 [ 210.516761][ T4195] usb 3-1: config 9 has 1 interface, different from the descriptor's value: 138 [ 210.529575][ T4195] usb 3-1: config 9 has no interface number 0 [ 210.723416][ T4195] usb 3-1: New USB device found, idVendor=0421, idProduct=df51, bcdDevice=d7.eb [ 210.733289][ T4195] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.741324][ T4195] usb 3-1: Product: syz [ 210.745653][ T4195] usb 3-1: Manufacturer: syz [ 210.750544][ T4195] usb 3-1: SerialNumber: syz [ 211.083338][ T4195] cdc_phonet 3-1:9.102: skipping garbage [ 211.089152][ T4195] cdc_phonet: probe of 3-1:9.102 failed with error -22 [ 211.213182][ T4195] usb 3-1: USB disconnect, device number 36 [ 211.683028][ T6734] device syzkaller0 entered promiscuous mode [ 211.921481][ T6743] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 211.946366][ T6743] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 212.149405][ T6746] device syzkaller0 entered promiscuous mode [ 212.161601][ T13] snd-usb-audio: probe of 5-1:136.30 failed with error -2 [ 212.176457][ T13] usb 5-1: USB disconnect, device number 45 [ 212.782750][ T13] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 212.889787][ T6759] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 213.289390][ T6766] device syzkaller0 entered promiscuous mode [ 213.453301][ T13] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 213.473034][ T13] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 213.496863][ T13] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 213.512178][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.537481][ T13] usb 5-1: config 0 descriptor?? [ 213.596227][ T13] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 213.617741][ T4406] udevd[4406]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:136.30/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 213.683082][ T1108] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 214.092866][ T1108] usb 2-1: unable to get BOS descriptor or descriptor too short [ 214.143292][ T1108] usb 2-1: not running at top speed; connect to a high speed hub [ 214.233033][ T1108] usb 2-1: config 136 has an invalid interface number: 30 but max is 0 [ 214.245127][ T1108] usb 2-1: config 136 has an invalid descriptor of length 0, skipping remainder of the config [ 214.275307][ T1108] usb 2-1: config 136 has no interface number 0 [ 214.288592][ T1108] usb 2-1: config 136 interface 30 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 214.411929][ T6782] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 214.438733][ T6779] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 214.452944][ T1108] usb 2-1: New USB device found, idVendor=0499, idProduct=100e, bcdDevice=f0.f4 [ 214.467269][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.482161][ T1108] usb 2-1: Product: syz [ 214.491493][ T1108] usb 2-1: Manufacturer: syz [ 214.501986][ T1108] usb 2-1: SerialNumber: syz [ 214.757984][ T6772] udc-core: couldn't find an available UDC or it's busy [ 214.767268][ T6772] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 215.114700][ T4234] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 215.376317][ T4270] usb 5-1: USB disconnect, device number 46 [ 215.513028][ T4234] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.534061][ T4234] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.558688][ T4234] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 215.594480][ T4234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.636558][ T4234] usb 3-1: config 0 descriptor?? [ 216.134943][ T4234] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 216.168866][ T4234] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 216.328309][ T6799] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 216.342179][ T6792] netlink: 'syz.2.796': attribute type 28 has an invalid length. [ 216.369242][ T6792] netlink: 'syz.2.796': attribute type 3 has an invalid length. [ 216.395941][ T6792] netlink: 132 bytes leftover after parsing attributes in process `syz.2.796'. [ 216.453064][ T4234] cp2112 0003:10C4:EA90.0007: error requesting version [ 216.524905][ T4234] cp2112: probe of 0003:10C4:EA90.0007 failed with error -32 [ 216.541425][ T4234] usb 3-1: USB disconnect, device number 37 [ 216.549918][ T6806] device syzkaller0 entered promiscuous mode [ 216.605065][ T1108] snd-usb-audio: probe of 2-1:136.30 failed with error -2 [ 216.624089][ T1108] usb 2-1: USB disconnect, device number 37 [ 216.752170][ T6811] fido_id[6811]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 216.872862][ T4270] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 217.183186][ T1108] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 217.252789][ T4270] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.353806][ T13] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 217.423088][ T4270] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 217.432297][ T4270] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.513745][ T4270] usb 4-1: Product: syz [ 217.518004][ T4270] usb 4-1: Manufacturer: syz [ 217.542972][ T4270] usb 4-1: SerialNumber: syz [ 217.553190][ T1108] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 217.588647][ T1108] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 217.655650][ T1108] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 217.686644][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.728180][ T1108] usb 2-1: config 0 descriptor?? [ 217.733820][ T13] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 217.760653][ T13] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 217.816667][ T13] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 217.828857][ T1108] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 217.879724][ T4406] udevd[4406]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:136.30/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 217.909647][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.963861][ T13] usb 3-1: config 0 descriptor?? [ 218.036303][ T13] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 218.133017][ T4270] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 218.163012][ T4270] usb 4-1: unit 2 not found! [ 218.208891][ T4270] snd-usb-audio: probe of 4-1:1.2 failed with error -16 [ 218.217780][ T4270] usb 4-1: USB disconnect, device number 39 [ 218.462847][ T4234] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 218.647308][ T6845] device syzkaller0 entered promiscuous mode [ 218.892899][ T4234] usb 5-1: unable to get BOS descriptor or descriptor too short [ 218.943106][ T4234] usb 5-1: not running at top speed; connect to a high speed hub [ 219.022893][ T4234] usb 5-1: config 136 has an invalid interface number: 30 but max is 0 [ 219.031257][ T4234] usb 5-1: config 136 has an invalid descriptor of length 0, skipping remainder of the config [ 219.051267][ T4234] usb 5-1: config 136 has no interface number 0 [ 219.057724][ T4234] usb 5-1: config 136 interface 30 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 219.092790][ T4270] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 219.222912][ T4234] usb 5-1: New USB device found, idVendor=0499, idProduct=100e, bcdDevice=f0.f4 [ 219.232169][ T4234] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.240762][ T4234] usb 5-1: Product: syz [ 219.245341][ T4234] usb 5-1: Manufacturer: syz [ 219.250057][ T4234] usb 5-1: SerialNumber: syz [ 219.372726][ T4270] usb 4-1: Using ep0 maxpacket: 32 [ 219.497779][ T6837] udc-core: couldn't find an available UDC or it's busy [ 219.505595][ T6837] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 219.532948][ T4270] usb 4-1: unable to get BOS descriptor or descriptor too short [ 219.622847][ T4270] usb 4-1: config 12 has an invalid interface number: 183 but max is 1 [ 219.631514][ T4270] usb 4-1: config 12 has an invalid interface number: 229 but max is 1 [ 219.652732][ T4270] usb 4-1: config 12 has no interface number 0 [ 219.660768][ T4270] usb 4-1: config 12 has no interface number 1 [ 219.677583][ T4270] usb 4-1: config 12 interface 183 has no altsetting 0 [ 219.810876][ T2015] usb 2-1: USB disconnect, device number 38 [ 219.863443][ T4270] usb 4-1: New USB device found, idVendor=1415, idProduct=2000, bcdDevice=2b.98 [ 219.874089][ T4270] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.882127][ T4270] usb 4-1: Product: syz [ 219.886934][ T4270] usb 4-1: Manufacturer: syz [ 219.891571][ T4270] usb 4-1: SerialNumber: syz [ 220.116510][ T1108] usb 3-1: USB disconnect, device number 38 [ 220.362754][ T2015] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 220.513763][ T4270] usb 4-1: USB disconnect, device number 40 [ 220.693084][ T1108] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 220.733009][ T2015] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.750987][ T2015] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.773341][ T2015] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 220.792726][ T2015] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.817250][ T2015] usb 2-1: config 0 descriptor?? [ 220.902760][ T1108] usb 3-1: device descriptor read/64, error -71 [ 221.183374][ T1108] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 221.206680][ T6871] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 221.259593][ T6871] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 221.320980][ T2015] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 221.349501][ T4234] snd-usb-audio: probe of 5-1:136.30 failed with error -2 [ 221.360038][ T2015] cp2112 0003:10C4:EA90.0008: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 221.384988][ T4234] usb 5-1: USB disconnect, device number 47 [ 221.392752][ T1108] usb 3-1: device descriptor read/64, error -71 [ 221.520697][ T6856] netlink: 'syz.1.817': attribute type 28 has an invalid length. [ 221.524371][ T1108] usb usb3-port1: attempt power cycle [ 221.535364][ T6877] device syzkaller0 entered promiscuous mode [ 221.544598][ T6856] netlink: 'syz.1.817': attribute type 3 has an invalid length. [ 221.560911][ T6856] netlink: 132 bytes leftover after parsing attributes in process `syz.1.817'. [ 221.582959][ T2015] cp2112 0003:10C4:EA90.0008: error requesting version [ 221.645299][ T2015] cp2112: probe of 0003:10C4:EA90.0008 failed with error -32 [ 221.675924][ T2015] usb 2-1: USB disconnect, device number 39 [ 221.737782][ T6881] fido_id[6881]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 221.752710][ T4234] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 221.952814][ T1108] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 222.004961][ T6883] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.826'. [ 222.082877][ T1108] usb 3-1: device descriptor read/8, error -71 [ 222.122854][ T4234] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.202956][ T6885] device syzkaller0 entered promiscuous mode [ 222.292902][ T4234] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 222.302006][ T4234] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.330438][ T4234] usb 5-1: Product: syz [ 222.338119][ T4234] usb 5-1: Manufacturer: syz [ 222.346899][ T4234] usb 5-1: SerialNumber: syz [ 222.372886][ T1108] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 222.472990][ T1108] usb 3-1: device descriptor read/8, error -71 [ 222.593270][ T1108] usb usb3-port1: unable to enumerate USB device [ 222.614522][ T4270] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 222.733035][ T4234] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 222.752991][ T4234] usb 5-1: unit 2 not found! [ 222.800418][ T4234] snd-usb-audio: probe of 5-1:1.2 failed with error -16 [ 222.809333][ T4406] udevd[4406]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:136.30/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 222.809379][ T4234] usb 5-1: USB disconnect, device number 48 [ 222.842789][ T13] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 223.023626][ T4270] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 223.034814][ T4270] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 223.048936][ T4270] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 223.059436][ T4270] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.070692][ T4270] usb 2-1: config 0 descriptor?? [ 223.116213][ T4270] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 223.203720][ T6892] device syzkaller0 entered promiscuous mode [ 223.233359][ T13] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 223.244421][ T13] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 223.258299][ T13] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 223.268024][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.279586][ T13] usb 4-1: config 0 descriptor?? [ 223.325684][ T13] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 223.782860][ T2015] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 224.022702][ T2015] usb 5-1: Using ep0 maxpacket: 32 [ 224.182788][ T2015] usb 5-1: unable to get BOS descriptor or descriptor too short [ 224.262782][ T2015] usb 5-1: config 12 has an invalid interface number: 183 but max is 1 [ 224.271149][ T2015] usb 5-1: config 12 has an invalid interface number: 229 but max is 1 [ 224.286868][ T2015] usb 5-1: config 12 has no interface number 0 [ 224.295876][ T2015] usb 5-1: config 12 has no interface number 1 [ 224.302081][ T2015] usb 5-1: config 12 interface 183 has no altsetting 0 [ 224.472905][ T2015] usb 5-1: New USB device found, idVendor=1415, idProduct=2000, bcdDevice=2b.98 [ 224.482321][ T2015] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.490486][ T2015] usb 5-1: Product: syz [ 224.494852][ T2015] usb 5-1: Manufacturer: syz [ 224.499553][ T2015] usb 5-1: SerialNumber: syz [ 225.083197][ T2015] usb 5-1: USB disconnect, device number 49 [ 225.346899][ T13] usb 2-1: USB disconnect, device number 40 [ 225.404068][ T6912] device syzkaller0 entered promiscuous mode [ 225.571007][ T6917] device syzkaller0 entered promiscuous mode [ 225.628994][ T6065] usb 4-1: USB disconnect, device number 41 [ 225.725795][ T6921] netlink: 5968 bytes leftover after parsing attributes in process `syz.4.840'. [ 226.062828][ T13] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 226.192718][ T6065] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 226.252826][ T13] usb 2-1: device descriptor read/64, error -71 [ 226.312755][ T4270] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 226.522964][ T13] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 226.559930][ T6065] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.742791][ T4270] usb 5-1: unable to get BOS descriptor or descriptor too short [ 227.152725][ T13] usb 2-1: device descriptor read/64, error -71 [ 227.292742][ T4270] usb 5-1: not running at top speed; connect to a high speed hub [ 227.361327][ T13] usb usb2-port1: attempt power cycle [ 227.408011][ T4270] usb 5-1: config 9 has too many interfaces: 138, using maximum allowed: 32 [ 227.420511][ T4270] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 227.431954][ T4270] usb 5-1: config 9 has 1 interface, different from the descriptor's value: 138 [ 227.441362][ T4270] usb 5-1: config 9 has no interface number 0 [ 227.503049][ T6065] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 227.512166][ T6065] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.520759][ T6065] usb 4-1: Product: syz [ 227.525175][ T6065] usb 4-1: Manufacturer: syz [ 227.529802][ T6065] usb 4-1: SerialNumber: syz [ 227.603032][ T4270] usb 5-1: New USB device found, idVendor=0421, idProduct=df51, bcdDevice=d7.eb [ 227.612249][ T4270] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.620775][ T4270] usb 5-1: Product: syz [ 227.625111][ T4270] usb 5-1: Manufacturer: syz [ 227.629741][ T4270] usb 5-1: SerialNumber: syz [ 227.722855][ T1109] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 227.792909][ T13] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 227.838050][ T6953] device syzkaller0 entered promiscuous mode [ 227.883183][ T13] usb 2-1: device descriptor read/8, error -71 [ 227.953567][ T4270] cdc_phonet 5-1:9.102: skipping garbage [ 227.959569][ T6065] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 227.967235][ T4270] cdc_phonet: probe of 5-1:9.102 failed with error -22 [ 227.983509][ T4270] usb 5-1: USB disconnect, device number 50 [ 227.992916][ T6065] usb 4-1: unit 2 not found! [ 228.039578][ T6065] snd-usb-audio: probe of 4-1:1.2 failed with error -16 [ 228.049496][ T6065] usb 4-1: USB disconnect, device number 42 [ 228.082941][ T1109] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 228.094696][ T1109] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 228.108281][ T1109] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 228.118046][ T1109] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.129910][ T1109] usb 3-1: config 0 descriptor?? [ 228.162849][ T13] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 228.176100][ T1109] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 228.252865][ T13] usb 2-1: device descriptor read/8, error -71 [ 228.373311][ T13] usb usb2-port1: unable to enumerate USB device [ 228.436670][ T6960] device syzkaller0 entered promiscuous mode [ 228.681284][ T6967] netlink: 5968 bytes leftover after parsing attributes in process `syz.4.854'. [ 228.899307][ T4277] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 229.172744][ T4277] usb 4-1: Using ep0 maxpacket: 32 [ 229.192833][ T13] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 229.252937][ T4234] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 229.343288][ T4277] usb 4-1: unable to get BOS descriptor or descriptor too short [ 229.423029][ T4277] usb 4-1: config 12 has an invalid interface number: 183 but max is 1 [ 229.431439][ T4277] usb 4-1: config 12 has an invalid interface number: 229 but max is 1 [ 229.451608][ T4277] usb 4-1: config 12 has no interface number 0 [ 229.458473][ T4277] usb 4-1: config 12 has no interface number 1 [ 229.464907][ T4277] usb 4-1: config 12 interface 183 has no altsetting 0 [ 229.513043][ T4234] usb 5-1: Using ep0 maxpacket: 8 [ 229.552804][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.564867][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.574959][ T13] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 229.585342][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.596981][ T13] usb 2-1: config 0 descriptor?? [ 229.642939][ T4234] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.653288][ T4277] usb 4-1: New USB device found, idVendor=1415, idProduct=2000, bcdDevice=2b.98 [ 229.662487][ T4277] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.671174][ T4234] usb 5-1: config 0 has no interfaces? [ 229.677073][ T4234] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 229.686498][ T4277] usb 4-1: Product: syz [ 229.691218][ T4277] usb 4-1: Manufacturer: syz [ 229.696226][ T4234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.704723][ T4277] usb 4-1: SerialNumber: syz [ 229.724362][ T4234] usb 5-1: config 0 descriptor?? [ 230.062371][ T4277] usb 4-1: USB disconnect, device number 43 [ 230.074588][ T13] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 230.092740][ T13] cp2112 0003:10C4:EA90.0009: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 230.292914][ T13] cp2112 0003:10C4:EA90.0009: error requesting version [ 230.334930][ T13] cp2112: probe of 0003:10C4:EA90.0009 failed with error -32 [ 230.351426][ T13] usb 2-1: USB disconnect, device number 45 [ 230.407168][ T6990] fido_id[6990]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 230.487964][ T4234] usb 3-1: USB disconnect, device number 43 [ 230.962802][ T13] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 231.101901][ T7011] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 231.129360][ T7011] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 231.161193][ T7013] netlink: 5968 bytes leftover after parsing attributes in process `syz.1.865'. [ 231.332786][ T13] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 231.512903][ T13] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 231.522789][ T1109] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 231.534954][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.559796][ T13] usb 4-1: Product: syz [ 231.571994][ T13] usb 4-1: Manufacturer: syz [ 231.583630][ T13] usb 4-1: SerialNumber: syz [ 231.732863][ T1109] usb 2-1: device descriptor read/64, error -71 [ 231.953095][ T6065] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 231.972993][ T13] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 231.990280][ T4277] usb 5-1: USB disconnect, device number 51 [ 231.994178][ T13] usb 4-1: unit 2 not found! [ 232.002927][ T1109] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 232.065403][ T13] snd-usb-audio: probe of 4-1:1.2 failed with error -16 [ 232.085404][ T13] usb 4-1: USB disconnect, device number 44 [ 232.223222][ T1109] usb 2-1: device descriptor read/64, error -71 [ 232.343262][ T1109] usb usb2-port1: attempt power cycle [ 232.363271][ T6065] usb 3-1: unable to get BOS descriptor or descriptor too short [ 232.423251][ T6065] usb 3-1: not running at top speed; connect to a high speed hub [ 232.502688][ T4277] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 232.504186][ T6065] usb 3-1: config 136 has an invalid interface number: 30 but max is 0 [ 232.531530][ T6065] usb 3-1: config 136 has an invalid descriptor of length 0, skipping remainder of the config [ 232.552287][ T6065] usb 3-1: config 136 has no interface number 0 [ 232.560096][ T6065] usb 3-1: config 136 interface 30 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 232.742785][ T6065] usb 3-1: New USB device found, idVendor=0499, idProduct=100e, bcdDevice=f0.f4 [ 232.755267][ T6065] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.772740][ T1109] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 232.782797][ T6065] usb 3-1: Product: syz [ 232.782931][ T4277] usb 5-1: Using ep0 maxpacket: 32 [ 232.787006][ T6065] usb 3-1: Manufacturer: syz [ 232.787024][ T6065] usb 3-1: SerialNumber: syz [ 232.892887][ T1109] usb 2-1: device descriptor read/8, error -71 [ 232.992786][ T4277] usb 5-1: unable to get BOS descriptor or descriptor too short [ 233.058410][ T7022] udc-core: couldn't find an available UDC or it's busy [ 233.069883][ T7022] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 233.102930][ T4277] usb 5-1: config 12 has an invalid interface number: 183 but max is 1 [ 233.120974][ T4277] usb 5-1: config 12 has an invalid interface number: 229 but max is 1 [ 233.152391][ T4277] usb 5-1: config 12 has no interface number 0 [ 233.162745][ T1109] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 233.168393][ T4277] usb 5-1: config 12 has no interface number 1 [ 233.197436][ T4277] usb 5-1: config 12 interface 183 has no altsetting 0 [ 233.262935][ T1109] usb 2-1: device descriptor read/8, error -71 [ 233.382879][ T1109] usb usb2-port1: unable to enumerate USB device [ 233.403033][ T4277] usb 5-1: New USB device found, idVendor=1415, idProduct=2000, bcdDevice=2b.98 [ 233.420516][ T4277] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.452672][ T4277] usb 5-1: Product: syz [ 233.457141][ T4277] usb 5-1: Manufacturer: syz [ 233.461773][ T4277] usb 5-1: SerialNumber: syz [ 233.859063][ T4277] usb 5-1: USB disconnect, device number 52 [ 234.404418][ T7042] netlink: 5968 bytes leftover after parsing attributes in process `syz.1.876'. [ 234.470210][ T7044] IPv6: NLM_F_CREATE should be specified when creating new route [ 234.479499][ T7044] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.877'. [ 234.483364][ T4270] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 234.568304][ T7046] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 234.579175][ T7046] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 234.786883][ T6065] snd-usb-audio: probe of 3-1:136.30 failed with error -2 [ 234.810933][ T6065] usb 3-1: USB disconnect, device number 44 [ 234.821943][ T4406] udevd[4406]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:136.30/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 234.872938][ T4270] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 234.884117][ T4270] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 234.917882][ T4270] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 234.934406][ T4270] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.953416][ T4270] usb 4-1: config 0 descriptor?? [ 234.995667][ T4270] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 235.263725][ T6065] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 235.762713][ T1109] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 235.833195][ T6065] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 235.847123][ T6065] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.909607][ T6065] usb 3-1: config 0 descriptor?? [ 236.153476][ T1109] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.333228][ T1109] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 236.343482][ T1109] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.353932][ T1109] usb 2-1: Product: syz [ 236.358217][ T1109] usb 2-1: Manufacturer: syz [ 236.363402][ T1109] usb 2-1: SerialNumber: syz [ 236.512815][ T6065] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 236.578335][ T6065] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 236.632435][ T6065] [drm:udl_init] *ERROR* Selecting channel failed [ 236.687839][ T6065] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 236.750065][ T6065] [drm] Initialized udl on minor 2 [ 236.822793][ T6065] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 236.847652][ T6065] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 236.881833][ T6065] usb 3-1: USB disconnect, device number 45 [ 236.932945][ T1109] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 236.950084][ T13] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 236.962835][ T1109] usb 2-1: unit 2 not found! [ 236.984503][ T13] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 236.996938][ T13] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 237.038648][ T1109] snd-usb-audio: probe of 2-1:1.2 failed with error -16 [ 237.083443][ T1109] usb 2-1: USB disconnect, device number 50 [ 237.148179][ T7083] netlink: 5968 bytes leftover after parsing attributes in process `syz.2.888'. [ 237.301000][ T6065] usb 4-1: USB disconnect, device number 45 [ 237.592770][ T4195] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 237.722748][ T6065] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 238.002764][ T4195] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.013862][ T4195] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.023752][ T4195] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 238.033158][ T4195] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.049404][ T4195] usb 3-1: config 0 descriptor?? [ 238.133426][ T6065] usb 4-1: unable to get BOS descriptor or descriptor too short [ 238.202891][ T6065] usb 4-1: not running at top speed; connect to a high speed hub [ 238.312907][ T6065] usb 4-1: config 136 has an invalid interface number: 30 but max is 0 [ 238.338049][ T6065] usb 4-1: config 136 has an invalid descriptor of length 0, skipping remainder of the config [ 238.350500][ T6065] usb 4-1: config 136 has no interface number 0 [ 238.357152][ T6065] usb 4-1: config 136 interface 30 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 238.455575][ T7093] fuse: Bad value for 'fd' [ 238.522851][ T6065] usb 4-1: New USB device found, idVendor=0499, idProduct=100e, bcdDevice=f0.f4 [ 238.533425][ T6065] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.541455][ T6065] usb 4-1: Product: syz [ 238.546277][ T6065] usb 4-1: Manufacturer: syz [ 238.551014][ T6065] usb 4-1: SerialNumber: syz [ 238.556735][ T4195] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 238.565425][ T4195] cp2112 0003:10C4:EA90.000A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 238.772952][ T4195] cp2112 0003:10C4:EA90.000A: error requesting version [ 238.809831][ T7087] udc-core: couldn't find an available UDC or it's busy [ 238.819175][ T4195] cp2112: probe of 0003:10C4:EA90.000A failed with error -32 [ 238.823009][ T7087] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 238.836708][ T4195] usb 3-1: USB disconnect, device number 46 [ 238.894251][ T7097] fido_id[7097]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 239.163615][ T7107] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.898'. [ 239.195143][ T6065] snd-usb-audio: probe of 4-1:136.30 failed with error -2 [ 239.202900][ T7110] netlink: 5968 bytes leftover after parsing attributes in process `syz.0.899'. [ 239.229807][ T6065] usb 4-1: USB disconnect, device number 46 [ 239.341011][ T7112] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 239.353141][ T7112] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 239.602705][ T6065] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 239.713201][ T4195] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 239.842713][ T6065] usb 4-1: Using ep0 maxpacket: 8 [ 239.962904][ T6065] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.973696][ T6065] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 239.983783][ T6065] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 239.994033][ T6065] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.005470][ T6065] usb 4-1: config 0 descriptor?? [ 240.044524][ T4406] udevd[4406]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:136.30/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 240.063315][ T13] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 240.122872][ T4195] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 240.133748][ T4195] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 240.147157][ T4195] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 240.156328][ T4195] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.166902][ T4195] usb 3-1: config 0 descriptor?? [ 240.205348][ T4195] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 240.253245][ T13] usb 5-1: device descriptor read/64, error -71 [ 240.522748][ T13] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 240.712746][ T13] usb 5-1: device descriptor read/64, error -71 [ 240.832878][ T13] usb usb5-port1: attempt power cycle [ 241.243681][ T4270] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 241.262828][ T13] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 241.364250][ T13] usb 5-1: device descriptor read/8, error -71 [ 241.632845][ T13] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 241.673010][ T4270] usb 2-1: unable to get BOS descriptor or descriptor too short [ 241.724084][ T13] usb 5-1: device descriptor read/8, error -71 [ 241.730401][ T4270] usb 2-1: not running at top speed; connect to a high speed hub [ 241.812941][ T4270] usb 2-1: config 136 has an invalid interface number: 30 but max is 0 [ 241.821945][ T4270] usb 2-1: config 136 has an invalid descriptor of length 0, skipping remainder of the config [ 241.833061][ T4270] usb 2-1: config 136 has no interface number 0 [ 241.839801][ T4270] usb 2-1: config 136 interface 30 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 241.854102][ T13] usb usb5-port1: unable to enumerate USB device [ 242.042954][ T4270] usb 2-1: New USB device found, idVendor=0499, idProduct=100e, bcdDevice=f0.f4 [ 242.052284][ T4270] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.061174][ T4270] usb 2-1: Product: syz [ 242.065806][ T4270] usb 2-1: Manufacturer: syz [ 242.070565][ T4270] usb 2-1: SerialNumber: syz [ 242.194808][ T2015] usb 4-1: USB disconnect, device number 47 [ 242.328581][ T7134] udc-core: couldn't find an available UDC or it's busy [ 242.336278][ T7134] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 242.384337][ T7140] netlink: 5968 bytes leftover after parsing attributes in process `syz.3.910'. [ 242.461890][ T2015] usb 3-1: USB disconnect, device number 47 [ 242.867663][ T7161] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4190] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7161] [ 242.882840][ T2015] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 242.894375][ T7163] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.915'. [ 243.252795][ T2015] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.269907][ T2015] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.294960][ T2015] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 243.311410][ T2015] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.338053][ T2015] usb 3-1: config 0 descriptor?? [ 243.824718][ T2015] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 243.841940][ T2015] cp2112 0003:10C4:EA90.000B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 244.022773][ T4277] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 244.052979][ T2015] cp2112 0003:10C4:EA90.000B: error requesting version [ 244.098669][ T7174] netlink: 48 bytes leftover after parsing attributes in process `syz.1.920'. [ 244.118263][ T2015] cp2112: probe of 0003:10C4:EA90.000B failed with error -32 [ 244.135134][ T2015] usb 3-1: USB disconnect, device number 48 [ 244.170067][ T4270] snd-usb-audio: probe of 2-1:136.30 failed with error -2 [ 244.208020][ T4270] usb 2-1: USB disconnect, device number 51 [ 244.249588][ T7178] netlink: 5968 bytes leftover after parsing attributes in process `syz.3.921'. [ 244.282806][ T4277] usb 5-1: Using ep0 maxpacket: 32 [ 244.296890][ T7176] fido_id[7176]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 244.473044][ T4277] usb 5-1: unable to get BOS descriptor or descriptor too short [ 244.562947][ T4277] usb 5-1: config 12 has an invalid interface number: 183 but max is 1 [ 244.571359][ T4277] usb 5-1: config 12 has an invalid interface number: 229 but max is 1 [ 244.580387][ T4277] usb 5-1: config 12 has no interface number 0 [ 244.586920][ T4277] usb 5-1: config 12 has no interface number 1 [ 244.593701][ T4277] usb 5-1: config 12 interface 183 has no altsetting 0 [ 244.623766][ T1109] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 244.782919][ T4277] usb 5-1: New USB device found, idVendor=1415, idProduct=2000, bcdDevice=2b.98 [ 244.783453][ T4270] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 244.793895][ T4277] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.808141][ T4277] usb 5-1: Product: syz [ 244.812341][ T4277] usb 5-1: Manufacturer: syz [ 244.817059][ T4277] usb 5-1: SerialNumber: syz [ 244.973042][ T13] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 244.993025][ T1109] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 245.004599][ T1109] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 245.018504][ T1109] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 245.028497][ T1109] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.043998][ T1109] usb 4-1: config 0 descriptor?? [ 245.086388][ T1109] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 245.207935][ T4277] usb 5-1: USB disconnect, device number 57 [ 245.223303][ T4270] usb 2-1: unable to get BOS descriptor or descriptor too short [ 245.332900][ T13] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.344547][ T13] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 245.353865][ T13] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 245.462924][ T4270] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 245.472516][ T4270] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.480640][ T4270] usb 2-1: Product: syz [ 245.485990][ T4270] usb 2-1: Manufacturer: syz [ 245.490632][ T4270] usb 2-1: SerialNumber: syz [ 245.522908][ T13] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 245.533766][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.541806][ T13] usb 3-1: Product: syz [ 245.546291][ T13] usb 3-1: Manufacturer: syz [ 245.550913][ T13] usb 3-1: SerialNumber: syz [ 245.559157][ T13] usb 3-1: config 0 descriptor?? [ 245.606110][ T13] usb 3-1: Found UVC 34.00 device syz (8086:0b5b) [ 245.613203][ T13] usb 3-1: No valid video chain found. [ 245.810184][ T13] usb 3-1: USB disconnect, device number 49 [ 245.854343][ T7184] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 245.861632][ T7184] IPv6: NLM_F_CREATE should be set when creating new route [ 245.868956][ T7184] IPv6: NLM_F_CREATE should be set when creating new route [ 245.876243][ T7184] IPv6: NLM_F_CREATE should be set when creating new route [ 245.908887][ T7198] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.924'. [ 245.938343][ T7200] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 245.945659][ T7200] IPv6: NLM_F_CREATE should be set when creating new route [ 245.952975][ T7200] IPv6: NLM_F_CREATE should be set when creating new route [ 245.960222][ T7200] IPv6: NLM_F_CREATE should be set when creating new route [ 246.082973][ T4270] usb 2-1: 1:1: cannot set freq 48000 to ep 0x1 [ 246.108205][ T4312] udevd[4312]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:136.30/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 246.125598][ T4270] usb 2-1: USB disconnect, device number 52 [ 246.375946][ T4424] udevd[4424]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 246.685313][ T7211] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4189] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7211] [ 246.832685][ T4277] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 247.044000][ T4277] usb 2-1: device descriptor read/64, error -71 [ 247.322723][ T4277] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 247.333411][ T7215] netlink: 5968 bytes leftover after parsing attributes in process `syz.2.933'. [ 247.439565][ T4270] usb 4-1: USB disconnect, device number 48 [ 247.542722][ T4277] usb 2-1: device descriptor read/64, error -71 [ 247.662892][ T4277] usb usb2-port1: attempt power cycle [ 247.847350][ T7225] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 247.857529][ T7225] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 247.892770][ T4270] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 247.907809][ T27] INFO: task kworker/1:5:4232 blocked for more than 143 seconds. [ 247.924213][ T27] Not tainted syzkaller #0 [ 247.931329][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 247.943176][ T27] task:kworker/1:5 state:D stack:22736 pid: 4232 ppid: 2 flags:0x00004000 [ 247.953616][ T27] Workqueue: usb_hub_wq hub_event [ 247.958732][ T27] Call Trace: [ 247.962037][ T27] [ 247.965945][ T27] __schedule+0x11ef/0x43c0 [ 247.970673][ T27] ? release_firmware_map_entry+0x190/0x190 [ 247.977504][ T27] ? try_to_wake_up+0x6cf/0x1050 [ 247.982497][ T27] ? mark_lock+0x94/0x320 [ 247.987930][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 247.993819][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 247.999235][ T27] schedule+0x11b/0x1e0 [ 248.003773][ T27] schedule_timeout+0xbd/0x2d0 [ 248.008553][ T27] ? console_conditional_schedule+0x40/0x40 [ 248.015405][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 248.020913][ T27] ? asm_sysvec_call_function_single+0x16/0x20 [ 248.027717][ T13] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 248.036397][ T27] do_wait_for_common+0x2a2/0x450 [ 248.043182][ T27] ? console_conditional_schedule+0x40/0x40 [ 248.049208][ T27] ? wait_for_completion_killable_timeout+0x60/0x60 [ 248.056800][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 248.061961][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 248.067930][ T27] ? kthread_data+0x4b/0xc0 [ 248.072966][ T4277] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 248.074804][ T27] wait_for_completion+0x48/0x60 [ 248.086103][ T27] flush_workqueue+0x664/0x13d0 [ 248.091237][ T27] ? ath6kl_usb_bmi_write+0x10d/0x160 [ 248.097499][ T27] ? rcu_work_rcufn+0x120/0x120 [ 248.103095][ T27] ? ath6kl_bmi_done+0x1a0/0x1a0 [ 248.108392][ T27] ath6kl_usb_power_off+0x34/0x40 [ 248.114760][ T27] ath6kl_core_init+0xac4/0x1090 [ 248.120013][ T27] ? lockdep_softirqs_off+0x430/0x430 [ 248.126901][ T27] ? ath6kl_core_rx_complete+0x70/0x70 [ 248.132947][ T27] ? memcpy+0x3c/0x60 [ 248.137452][ T27] ? ath6kl_core_create+0x7d6/0x980 [ 248.144067][ T27] ath6kl_usb_probe+0x1302/0x1410 [ 248.150061][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 248.157562][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 248.163971][ T27] ? _raw_spin_unlock+0x40/0x40 [ 248.172476][ T27] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 248.182508][ T27] ? usb_disable_lpm+0x72/0x370 [ 248.183426][ T4277] usb 2-1: device descriptor read/8, error -71 [ 248.188846][ T27] usb_probe_interface+0x5c5/0xb20 [ 248.202759][ T27] ? usb_register_driver+0x3d0/0x3d0 [ 248.208228][ T27] really_probe+0x284/0xc80 [ 248.214013][ T27] __driver_probe_device+0x1ef/0x390 [ 248.221863][ T27] driver_probe_device+0x4f/0x420 [ 248.231169][ T27] __device_attach_driver+0x2b0/0x500 [ 248.241522][ T27] ? deferred_probe_work_func+0x230/0x230 [ 248.248489][ T27] bus_for_each_drv+0x184/0x210 [ 248.260537][ T27] ? deferred_probe_work_func+0x230/0x230 [ 248.268323][ T27] ? subsys_find_device_by_id+0x360/0x360 [ 248.274955][ T4270] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 248.286052][ T13] usb 3-1: Using ep0 maxpacket: 32 [ 248.292164][ T27] __device_attach+0x2a8/0x480 [ 248.292216][ T4270] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 248.300382][ T4270] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 248.320128][ T4270] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.331826][ T4270] usb 4-1: config 0 descriptor?? [ 248.337335][ T27] ? device_attach+0x20/0x20 [ 248.342445][ T27] ? kobject_uevent_env+0x371/0x890 [ 248.348280][ T27] bus_probe_device+0xbc/0x1e0 [ 248.354250][ T27] device_add+0xa3a/0x1000 [ 248.358754][ T27] usb_set_configuration+0x1991/0x1fd0 [ 248.365028][ T27] ? kernfs_activate+0x1eb/0x210 [ 248.370032][ T27] usb_generic_driver_probe+0x89/0x150 [ 248.377689][ T27] usb_probe_device+0x139/0x270 [ 248.381293][ T4270] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 248.394792][ T27] ? usb_register_device_driver+0x230/0x230 [ 248.400764][ T27] really_probe+0x284/0xc80 [ 248.406042][ T27] __driver_probe_device+0x1ef/0x390 [ 248.411392][ T27] driver_probe_device+0x4f/0x420 [ 248.417325][ T27] __device_attach_driver+0x2b0/0x500 [ 248.423229][ T27] ? deferred_probe_work_func+0x230/0x230 [ 248.429084][ T27] bus_for_each_drv+0x184/0x210 [ 248.434825][ T27] ? deferred_probe_work_func+0x230/0x230 [ 248.442903][ T13] usb 3-1: unable to get BOS descriptor or descriptor too short [ 248.453932][ T27] ? subsys_find_device_by_id+0x360/0x360 [ 248.459710][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 248.465581][ T27] __device_attach+0x2a8/0x480 [ 248.470399][ T27] ? device_attach+0x20/0x20 [ 248.473310][ T4277] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 248.477387][ T27] ? kobject_uevent_env+0x371/0x890 [ 248.488458][ T27] bus_probe_device+0xbc/0x1e0 [ 248.493979][ T27] device_add+0xa3a/0x1000 [ 248.498870][ T27] usb_new_device+0xd65/0x1660 [ 248.505359][ T27] ? lock_chain_count+0x20/0x20 [ 248.510334][ T27] ? usb_disconnect+0x8a0/0x8a0 [ 248.516077][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 248.521353][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 248.526997][ T13] usb 3-1: config 12 has an invalid interface number: 183 but max is 1 [ 248.535870][ T27] hub_event+0x2e4a/0x55e0 [ 248.540395][ T27] ? hub_post_resume+0x120/0x120 [ 248.545821][ T13] usb 3-1: config 12 has an invalid interface number: 229 but max is 1 [ 248.554783][ T27] ? read_lock_is_recursive+0x10/0x10 [ 248.560215][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 248.566543][ T13] usb 3-1: config 12 has no interface number 0 [ 248.573051][ T4277] usb 2-1: device descriptor read/8, error -71 [ 248.574228][ T13] usb 3-1: config 12 has no interface number 1 [ 248.585774][ T27] ? _raw_spin_unlock+0x40/0x40 [ 248.590673][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 248.596484][ T13] usb 3-1: config 12 interface 183 has no altsetting 0 [ 248.603481][ T27] process_one_work+0x85f/0x1010 [ 248.608618][ T27] ? worker_detach_from_pool+0x240/0x240 [ 248.616317][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 248.621671][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 248.626889][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 248.633190][ T27] ? wq_worker_running+0x97/0x170 [ 248.638275][ T27] worker_thread+0xaa6/0x1290 [ 248.643114][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 248.648361][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 248.654931][ T27] kthread+0x436/0x520 [ 248.659052][ T27] ? rcu_lock_release+0x20/0x20 [ 248.664021][ T27] ? kthread_blkcg+0xd0/0xd0 [ 248.668649][ T27] ret_from_fork+0x1f/0x30 [ 248.674413][ T27] [ 248.687318][ T27] INFO: task udevd:4271 blocked for more than 144 seconds. [ 248.703032][ T4277] usb usb2-port1: unable to enumerate USB device [ 248.719238][ T27] Not tainted syzkaller #0 [ 248.733335][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 248.745581][ T27] task:udevd state:D stack:26448 pid: 4271 ppid: 3561 flags:0x00004002 [ 248.755520][ T27] Call Trace: [ 248.758870][ T27] [ 248.761850][ T27] __schedule+0x11ef/0x43c0 [ 248.766616][ T27] ? rcu_lock_acquire+0x30/0x30 [ 248.773277][ T13] usb 3-1: New USB device found, idVendor=1415, idProduct=2000, bcdDevice=2b.98 [ 248.788226][ T27] ? __mutex_lock_common+0xcf7/0x2400 [ 248.794205][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.802231][ T13] usb 3-1: Product: syz [ 248.806551][ T27] ? release_firmware_map_entry+0x190/0x190 [ 248.812582][ T27] ? __lock_acquire+0x7d10/0x7d10 [ 248.818228][ T13] usb 3-1: Manufacturer: syz [ 248.822949][ T13] usb 3-1: SerialNumber: syz [ 248.828339][ T27] ? __mutex_trylock_common+0x86/0x260 [ 248.834346][ T27] ? rcu_lock_release+0x20/0x20 [ 248.841568][ T27] schedule+0x11b/0x1e0 [ 248.845954][ T27] schedule_preempt_disabled+0xf/0x20 [ 248.851441][ T27] __mutex_lock_common+0xcfc/0x2400 [ 248.857744][ T27] ? uevent_show+0x17a/0x330 [ 248.862480][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 248.867894][ T27] mutex_lock_nested+0x17/0x20 [ 248.874329][ T27] uevent_show+0x17a/0x330 [ 248.878808][ T27] dev_attr_show+0x50/0xb0 [ 248.883389][ T27] ? device_get_ownership+0xa0/0xa0 [ 248.888632][ T27] sysfs_kf_seq_show+0x316/0x4c0 [ 248.894284][ T27] seq_read_iter+0x49b/0xd50 [ 248.898953][ T27] vfs_read+0x759/0xd60 [ 248.903226][ T27] ? kernel_read+0x1e0/0x1e0 [ 248.907935][ T27] ? __context_tracking_exit+0x4c/0x80 [ 248.913915][ T27] ? __fdget_pos+0x2c6/0x370 [ 248.918775][ T27] ksys_read+0x152/0x260 [ 248.923161][ T27] ? vfs_write+0xd60/0xd60 [ 248.927700][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 248.933506][ T27] do_syscall_64+0x4c/0xa0 [ 248.937970][ T27] ? clear_bhb_loop+0x30/0x80 [ 248.944135][ T27] ? clear_bhb_loop+0x30/0x80 [ 248.948872][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 248.955813][ T27] RIP: 0033:0x7fcea0574407 [ 248.960407][ T27] RSP: 002b:00007ffcf4aafc30 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 248.969094][ T27] RAX: ffffffffffffffda RBX: 00007fcea0486880 RCX: 00007fcea0574407 [ 248.978073][ T27] RDX: 0000000000001000 RSI: 000055f1f00bc1c0 RDI: 0000000000000008 [ 248.986312][ T27] RBP: 00007fcea06bcff0 R08: 0000000000000000 R09: 0000000000000000 [ 248.994754][ T27] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 249.003292][ T27] R13: 00007fcea06bcea0 R14: 0000000000000000 R15: 000055f1f009c8a0 [ 249.011330][ T27] [ 249.014549][ T27] [ 249.014549][ T27] Showing all locks held in the system: [ 249.022320][ T27] 4 locks held by kworker/0:1/13: [ 249.028649][ T27] #0: ffff8881413e8d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 249.039603][ T27] #1: ffffc90000d27d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 249.051451][ T27] #2: ffff8880242e0220 (&dev->mutex){....}-{3:3}, at: hub_event+0x19f/0x55e0 [ 249.061817][ T27] #3: ffff888076ed7220 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x480 [ 249.071609][ T27] 1 lock held by khungtaskd/27: [ 249.087509][ T27] #0: ffffffff8c31f360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 249.105931][ T27] 2 locks held by getty/3950: [ 249.121191][ T27] #0: ffff88814ce25098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 249.131566][ T27] #1: ffffc900026562e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5df/0x1a70 [ 249.142442][ T27] 5 locks held by kworker/1:5/4232: [ 249.148118][ T27] #0: ffff8881413e8d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 249.159581][ T27] #1: ffffc9000318fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 249.187024][ T13] usb 3-1: USB disconnect, device number 50 [ 249.193237][ T27] #2: ffff8880241ce220 (&dev->mutex){....}-{3:3}, at: hub_event+0x19f/0x55e0 [ 249.202336][ T27] #3: ffff888061df4220 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x480 [ 249.215609][ T27] #4: ffff8880796801a8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x480 [ 249.227009][ T27] 2 locks held by kworker/0:4/4233: [ 249.232527][ T27] #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 249.245843][ T27] #1: ffffc9000319fd00 ((work_completion)(&m->mpeg_thread)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 249.258151][ T27] 4 locks held by udevd/4271: [ 249.267748][ T27] #0: ffff88802195fc30 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xad/0xd50 [ 249.283425][ T27] #1: ffff888060999488 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x51/0x3c0 [ 249.300329][ T27] #2: ffff88802084d1d8 (kn->active#32){++++}-{0:0}, at: kernfs_seq_start+0x71/0x3c0 [ 249.310318][ T27] #3: ffff8880796801a8 (&dev->mutex){....}-{3:3}, at: uevent_show+0x17a/0x330 [ 249.327206][ T27] [ 249.329664][ T27] ============================================= [ 249.329664][ T27] [ 249.341508][ T27] NMI backtrace for cpu 0 [ 249.345884][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 249.353090][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 249.363158][ T27] Call Trace: [ 249.366458][ T27] [ 249.369402][ T27] dump_stack_lvl+0x188/0x250 [ 249.374107][ T27] ? show_regs_print_info+0x20/0x20 [ 249.379311][ T27] ? load_image+0x400/0x400 [ 249.383819][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 249.389203][ T27] ? nmi_cpu_backtrace+0x1b2/0x3d0 [ 249.394334][ T27] nmi_cpu_backtrace+0x3a2/0x3d0 [ 249.399308][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 249.405492][ T27] ? _printk+0xda/0x130 [ 249.409683][ T27] ? load_image+0x400/0x400 [ 249.414212][ T27] ? load_image+0x400/0x400 [ 249.418722][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 249.424797][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 249.430872][ T27] watchdog+0xe0f/0xe50 [ 249.435043][ T27] kthread+0x436/0x520 [ 249.439125][ T27] ? hungtask_pm_notify+0x40/0x40 [ 249.444175][ T27] ? kthread_blkcg+0xd0/0xd0 [ 249.448775][ T27] ret_from_fork+0x1f/0x30 [ 249.453205][ T27] [ 249.456880][ T27] Sending NMI from CPU 0 to CPUs 1: [ 249.462135][ C1] NMI backtrace for cpu 1 [ 249.462145][ C1] CPU: 1 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 249.462168][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 249.462179][ C1] Workqueue: bat_events batadv_nc_worker [ 249.462201][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 249.462222][ C1] Code: 66 2e 0f 1f 84 00 00 00 00 00 53 48 89 fb e8 17 00 00 00 48 8b 3d 30 c0 10 0c 48 89 de 5b e9 57 50 44 00 00 00 cc cc 00 00 cc <48> 8b 04 24 65 48 8b 0d c4 26 89 7e 65 8b 15 c5 26 89 7e 81 e2 00 [ 249.462245][ C1] RSP: 0018:ffffc90000ce7bd0 EFLAGS: 00000293 [ 249.462259][ C1] RAX: ffffffff899273a5 RBX: dffffc0000000000 RCX: ffff88813fe90000 [ 249.462273][ C1] RDX: 0000000000000000 RSI: ffffffff8a2b4420 RDI: ffffffff8a7a09c0 [ 249.462285][ C1] RBP: ffff888141d98880 R08: ffffffff8d8a06ef R09: 1ffffffff1b140dd [ 249.462298][ C1] R10: dffffc0000000000 R11: fffffbfff1b140de R12: 00000000000000e1 [ 249.462311][ C1] R13: ffff888079b68708 R14: ffff88807b4e0c80 R15: ffff888141d98890 [ 249.462324][ C1] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 249.462339][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 249.462351][ C1] CR2: 000000110c3b05e8 CR3: 000000001f8ad000 CR4: 00000000003506e0 [ 249.462366][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 249.462376][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 249.462387][ C1] Call Trace: [ 249.462392][ C1] [ 249.462398][ C1] rcu_lock_acquire+0xa/0x30 [ 249.462414][ C1] batadv_nc_worker+0xc9/0x5c0 [ 249.462435][ C1] process_one_work+0x85f/0x1010 [ 249.462462][ C1] ? worker_detach_from_pool+0x240/0x240 [ 249.462480][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 249.462501][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 249.462518][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 249.462537][ C1] ? wq_worker_running+0x97/0x170 [ 249.462554][ C1] worker_thread+0xaa6/0x1290 [ 249.462588][ C1] kthread+0x436/0x520 [ 249.462604][ C1] ? rcu_lock_release+0x20/0x20 [ 249.462622][ C1] ? kthread_blkcg+0xd0/0xd0 [ 249.462640][ C1] ret_from_fork+0x1f/0x30 [ 249.462668][ C1] [ 249.674810][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 249.681697][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 249.688923][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 249.699000][ T27] Call Trace: [ 249.702397][ T27] [ 249.705358][ T27] dump_stack_lvl+0x188/0x250 [ 249.710074][ T27] ? show_regs_print_info+0x20/0x20 [ 249.715341][ T27] ? load_image+0x400/0x400 [ 249.719893][ T27] panic+0x2e5/0x810 [ 249.723829][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 249.729504][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 249.734048][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 249.739645][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 249.745840][ T27] watchdog+0xe4e/0xe50 [ 249.750041][ T27] kthread+0x436/0x520 [ 249.754149][ T27] ? hungtask_pm_notify+0x40/0x40 [ 249.759211][ T27] ? kthread_blkcg+0xd0/0xd0 [ 249.763843][ T27] ret_from_fork+0x1f/0x30 [ 249.768305][ T27] [ 249.771819][ T27] Kernel Offset: disabled [ 249.776165][ T27] Rebooting in 86400 seconds..