last executing test programs: 2m25.178006586s ago: executing program 3 (id=186): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_sctp(0x2, 0x1, 0x84) socket(0x1d, 0x2, 0x6) socket(0x1d, 0x2, 0x6) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000340), 0x7ff, 0x2) fsopen(&(0x7f0000000200)='9p\x00', 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 2m25.02096586s ago: executing program 3 (id=188): socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) sendmsg$can_bcm(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r1], 0x48}}, 0x0) 2m24.895168795s ago: executing program 3 (id=189): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(0x3) openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000002000000", @ANYRES32=r0, @ANYRES64=r2, @ANYRESDEC, @ANYBLOB="0000000004400000000000000000002300000100"]) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff000900000009050a", @ANYRES16], 0x0) syz_usb_ep_read(r3, 0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) connect$unix(0xffffffffffffffff, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x86, 0x0, &(0x7f0000000100)="b9ff03076044238cb89e14f008000de0ffff00184000632b77fbacf0140ce000006a62079f4b4d2f87e505ca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x4c) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffd, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x2, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x4, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x7, '\x00', 0xdc}, {0x40, 0x1, 0x5, '\x00', 0x2}, {0xfe, 0x3, 0x26}, {0xcf, 0x3, 0xb, '\x00', 0x5}, {0xf, 0xee, 0xa, '\x00', 0xf}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x8, 0x2, '\x00', 0x8}, {0x5, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7}, {0x0, 0x80, 0x1, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x3, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4, '\x00', 0x8}]}}) syz_usb_ep_read(r3, 0xa, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x40, 0x0, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(0xffffffffffffffff, 0x7c65, 0x95f7, 0x1, 0x0, 0x0) 2m21.666627797s ago: executing program 3 (id=206): ioctl$XFS_IOC_FSGROWFSDATA(0xffffffffffffffff, 0x4010586e, 0x0) r0 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_tcp_int(r0, 0x11e, 0x8, 0x0, 0x0) listen(r0, 0x7fff) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, 0x0, 0x0) connect$inet6(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, 0x0, 0x400c854) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{0x0}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x6000) 2m21.503210262s ago: executing program 3 (id=209): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8) fchdir(r1) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) 2m21.330719618s ago: executing program 3 (id=212): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001f80)={'syz0\x00', {0x1, 0xc, 0x3000, 0x4}, 0x19, [0x1, 0x7, 0x9, 0x2, 0x9, 0x3, 0x2, 0x3, 0x1, 0x2, 0x87e5, 0x4, 0x1, 0x7, 0x25d5, 0x3, 0x5, 0x200, 0xff, 0x100009, 0x8, 0x8, 0x6a10, 0x8, 0xffff, 0x3, 0x3, 0x7, 0x8000, 0x9, 0x7, 0xfffffff2, 0x1, 0x9, 0x7ff, 0xb0c, 0x0, 0x0, 0x1, 0x3, 0x8, 0x4, 0x1000, 0x8, 0x0, 0x5f56, 0x6c, 0x9e78, 0x3, 0x4, 0x62, 0x406, 0x8, 0x4, 0x613, 0x40, 0x5, 0xd2fd, 0x6, 0x8, 0xffff, 0x3, 0x81, 0xcfd], [0x7, 0x4000000, 0xbb, 0x5, 0x3, 0x5a1, 0x800, 0xfffffffc, 0x8d9, 0x2, 0x1, 0x9, 0x1, 0x1, 0x8, 0x5, 0xe777, 0x7, 0x9, 0x5, 0x5, 0x3, 0x1, 0x1ff, 0x4, 0x8, 0x9a5d, 0x80, 0x4, 0x9, 0x7, 0x8, 0x80000001, 0x10000, 0x10000, 0x6, 0x3, 0x4, 0x1, 0x7, 0x6f, 0x6, 0x7, 0x10001, 0x2, 0xc0, 0x1, 0xfffffffe, 0x1, 0x201, 0x800, 0x100, 0x10, 0xe0d8, 0x8, 0xd, 0x7d80, 0xf1, 0x6, 0x101, 0x3, 0x10, 0x1, 0x10000], [0x3, 0x1, 0x6, 0x9, 0x0, 0xd, 0x2, 0x0, 0x0, 0x9, 0x0, 0x800, 0x0, 0x9, 0x8, 0x5, 0x0, 0x2, 0x0, 0x8, 0x6, 0x93, 0x0, 0x7ff, 0x2, 0x8, 0x8, 0x1c, 0x1, 0x9, 0x5, 0xf7, 0x9, 0x0, 0x0, 0x890, 0x3ff, 0x0, 0xb, 0x7, 0x9, 0x5, 0x1, 0x900, 0x6, 0x8, 0xffff, 0x80000000, 0x4, 0x2, 0x1, 0x700, 0x4, 0xfff, 0x200, 0x6, 0x100, 0x88d2c90c, 0xff, 0x1, 0x81, 0x0, 0x3, 0x5], [0x8, 0x9, 0x9, 0x5, 0x2fd, 0x10, 0xe, 0xfffff7c6, 0x84b, 0xc4, 0x1, 0xfac, 0x400, 0xb1, 0x8, 0x9ca8, 0x8, 0x1ff, 0x8001, 0x80000000, 0x7, 0xf, 0x6, 0x9, 0x81, 0x1, 0xc, 0x7, 0xb5800000, 0x5, 0x9ff, 0x4, 0xfffffffd, 0x7, 0x5, 0x80, 0xc, 0x1, 0xfffffff4, 0xa4, 0x8, 0xfff, 0x5, 0x1a, 0x3, 0x9, 0xff, 0x0, 0x2, 0x3, 0x680e627d, 0x8, 0x6, 0x1000, 0x7fffffff, 0x2, 0x8, 0x401, 0x2, 0x2, 0x4, 0x1, 0xf1d, 0x1]}, 0x45c) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x83, &(0x7f0000000480)={0x0, 0x2}, 0x8) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg$sock(r2, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f00000051c0)=[{&(0x7f0000004fc0)="14733f9daa4e98c0c2", 0x9}], 0x1}}], 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x10) r7 = socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="012000000000a538ae46463208004500001c0000000000029078ac1e0001e0000001110090"], 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf50009058402"], &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x44f}}]}) openat$mice(0xffffff9c, &(0x7f0000000140), 0x1ad100) connect$can_j1939(r2, &(0x7f0000000080)={0x1d, r3, 0x2, {0x2, 0xff, 0x4}, 0xfe}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r8, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004012}, 0x20000050) 2m6.277945785s ago: executing program 32 (id=212): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001f80)={'syz0\x00', {0x1, 0xc, 0x3000, 0x4}, 0x19, [0x1, 0x7, 0x9, 0x2, 0x9, 0x3, 0x2, 0x3, 0x1, 0x2, 0x87e5, 0x4, 0x1, 0x7, 0x25d5, 0x3, 0x5, 0x200, 0xff, 0x100009, 0x8, 0x8, 0x6a10, 0x8, 0xffff, 0x3, 0x3, 0x7, 0x8000, 0x9, 0x7, 0xfffffff2, 0x1, 0x9, 0x7ff, 0xb0c, 0x0, 0x0, 0x1, 0x3, 0x8, 0x4, 0x1000, 0x8, 0x0, 0x5f56, 0x6c, 0x9e78, 0x3, 0x4, 0x62, 0x406, 0x8, 0x4, 0x613, 0x40, 0x5, 0xd2fd, 0x6, 0x8, 0xffff, 0x3, 0x81, 0xcfd], [0x7, 0x4000000, 0xbb, 0x5, 0x3, 0x5a1, 0x800, 0xfffffffc, 0x8d9, 0x2, 0x1, 0x9, 0x1, 0x1, 0x8, 0x5, 0xe777, 0x7, 0x9, 0x5, 0x5, 0x3, 0x1, 0x1ff, 0x4, 0x8, 0x9a5d, 0x80, 0x4, 0x9, 0x7, 0x8, 0x80000001, 0x10000, 0x10000, 0x6, 0x3, 0x4, 0x1, 0x7, 0x6f, 0x6, 0x7, 0x10001, 0x2, 0xc0, 0x1, 0xfffffffe, 0x1, 0x201, 0x800, 0x100, 0x10, 0xe0d8, 0x8, 0xd, 0x7d80, 0xf1, 0x6, 0x101, 0x3, 0x10, 0x1, 0x10000], [0x3, 0x1, 0x6, 0x9, 0x0, 0xd, 0x2, 0x0, 0x0, 0x9, 0x0, 0x800, 0x0, 0x9, 0x8, 0x5, 0x0, 0x2, 0x0, 0x8, 0x6, 0x93, 0x0, 0x7ff, 0x2, 0x8, 0x8, 0x1c, 0x1, 0x9, 0x5, 0xf7, 0x9, 0x0, 0x0, 0x890, 0x3ff, 0x0, 0xb, 0x7, 0x9, 0x5, 0x1, 0x900, 0x6, 0x8, 0xffff, 0x80000000, 0x4, 0x2, 0x1, 0x700, 0x4, 0xfff, 0x200, 0x6, 0x100, 0x88d2c90c, 0xff, 0x1, 0x81, 0x0, 0x3, 0x5], [0x8, 0x9, 0x9, 0x5, 0x2fd, 0x10, 0xe, 0xfffff7c6, 0x84b, 0xc4, 0x1, 0xfac, 0x400, 0xb1, 0x8, 0x9ca8, 0x8, 0x1ff, 0x8001, 0x80000000, 0x7, 0xf, 0x6, 0x9, 0x81, 0x1, 0xc, 0x7, 0xb5800000, 0x5, 0x9ff, 0x4, 0xfffffffd, 0x7, 0x5, 0x80, 0xc, 0x1, 0xfffffff4, 0xa4, 0x8, 0xfff, 0x5, 0x1a, 0x3, 0x9, 0xff, 0x0, 0x2, 0x3, 0x680e627d, 0x8, 0x6, 0x1000, 0x7fffffff, 0x2, 0x8, 0x401, 0x2, 0x2, 0x4, 0x1, 0xf1d, 0x1]}, 0x45c) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x83, &(0x7f0000000480)={0x0, 0x2}, 0x8) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg$sock(r2, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f00000051c0)=[{&(0x7f0000004fc0)="14733f9daa4e98c0c2", 0x9}], 0x1}}], 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x10) r7 = socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="012000000000a538ae46463208004500001c0000000000029078ac1e0001e0000001110090"], 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf50009058402"], &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x44f}}]}) openat$mice(0xffffff9c, &(0x7f0000000140), 0x1ad100) connect$can_j1939(r2, &(0x7f0000000080)={0x1d, r3, 0x2, {0x2, 0xff, 0x4}, 0xfe}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r8, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004012}, 0x20000050) 9.226959827s ago: executing program 4 (id=804): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d2200000000000001090224000100000000090400000103000000092100000001220500090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {0xa, 0x9}, {}, {0xc, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x800) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000140)=""/215) 6.855162902s ago: executing program 2 (id=812): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x40) r1 = socket$unix(0x1, 0x2, 0x0) syz_usb_connect$uac2(0x2, 0x7b, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000300000040351213823fe701020301090269000301003003080b000201002006090400000001012000092401ff7f06090013090401000001026000"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x4e22, 0x3, 'rr\x00', 0x1e, 0x4, 0x68}, 0x2c) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000300)={0x1, 0x0, r2}) write$uinput_user_dev(r6, &(0x7f0000000340)={'syz0\x00', {0x3, 0xf801, 0x1, 0x7}, 0x2c, [0x8001, 0x0, 0x1, 0x700, 0x7, 0x7, 0x7, 0xffffffff, 0x2, 0xf980, 0x5, 0x5, 0x3ff, 0xffffffff, 0xf0, 0xfff, 0x7, 0x7fff, 0x2, 0x6, 0xfda, 0x8, 0x7, 0xfffffff8, 0x361, 0x80000000, 0xf6d, 0x3, 0x3, 0xb, 0x4, 0x6, 0x0, 0x5, 0x3, 0x7, 0x7, 0x401, 0x8, 0x5, 0x0, 0x9, 0x80000000, 0x4, 0x1, 0x5, 0x7, 0x2, 0x4, 0xafa2, 0x2, 0x8001, 0x9, 0x6683, 0xff, 0x6d00, 0x9, 0xffff, 0x2, 0x26b, 0x7, 0x3ff, 0xa0e0, 0xd], [0x2, 0x3, 0xa74, 0x3, 0x3, 0x2eda, 0x9, 0xd, 0x3, 0xfffffff8, 0x101, 0xfff, 0x4, 0x3, 0x723e0d6c, 0x9, 0x7, 0x9, 0x98e, 0x400, 0xd, 0x7, 0x0, 0x8, 0xfe, 0x1, 0x9, 0x3, 0x8000, 0x3, 0x1, 0x1, 0x37f47e45, 0x5, 0x4, 0x9, 0x7cc, 0x3, 0x4, 0x0, 0x101, 0x2, 0x9, 0xfce4, 0x3, 0x81, 0x9, 0x0, 0x8, 0x761f, 0x8, 0x1, 0x5, 0x80000001, 0x8, 0xd6b1, 0x21b, 0x8, 0x202b, 0x2, 0x9, 0x2, 0x9, 0x5], [0x5, 0x9, 0x3, 0x0, 0x1, 0x0, 0x8, 0x9, 0xfffffffd, 0x3db, 0x1ff, 0x8, 0x8, 0xaa, 0x5, 0x1, 0x9, 0x7, 0xc3, 0x8, 0x3cbc, 0x8, 0x8, 0x4, 0x3, 0x69f55213, 0x24a, 0x8, 0x432, 0x800, 0x7, 0x0, 0x8, 0x800, 0xfffffffc, 0x0, 0x80000001, 0xd, 0x3, 0x8, 0x2, 0x3, 0x800, 0x7fff, 0x1, 0x7, 0xf, 0x7, 0x7f, 0xc, 0x4, 0x80, 0x5, 0x7, 0x5880, 0x5, 0xcd, 0xa1c, 0xcce, 0x7fff, 0x7, 0x68fd, 0x40, 0x3], [0x8, 0x1, 0x10000, 0xffff, 0x1, 0x7, 0x8, 0x1fb4, 0x1, 0x8, 0x6, 0x7, 0xfffffff6, 0x15c, 0xd, 0xd38, 0x4, 0x7, 0x3, 0x5, 0x3, 0x1f, 0x9, 0x7, 0x4, 0x80000000, 0x1, 0x7, 0x920a, 0x9, 0x2, 0x7, 0x800, 0x2, 0x9, 0xf, 0x1000, 0xeb7b, 0xfffffffb, 0x5b, 0xd65d, 0x0, 0xfffffff8, 0x8000, 0x3ff, 0x2, 0x3, 0x9, 0x61ce, 0x1c11, 0xff, 0x6, 0x10001, 0x101, 0x0, 0x1, 0x1, 0x1000, 0x7fffffff, 0x1, 0xfffffff9, 0x6, 0x6, 0x7f]}, 0x45c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'lc\x00', 0x11, 0x3240, 0x3d}, {@loopback, 0x4e23, 0x4, 0x8628, 0x12d5c, 0x12d5c}}, 0x44) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x19, 0x3, "91abc12404cf378042f26c43f91f68d8a90767c0bc"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x98}}, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffc}}, 0x44) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x200c000) r8 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r8, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r8, 0x0) listen(r8, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000080)=0x4) syz_usb_connect(0x5, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="120110019ae8c94079092702506f0102030109021b00010607500e09040eda0129019105090503"], 0x0) r9 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x400082) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r9, 0x40045532, &(0x7f00000001c0)=0x4dca) 6.134861935s ago: executing program 4 (id=816): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x6ef, 0xfffb, 0x8632, 0x80000}, {0x6, 0x3, 0x6, 0xfeff, 0x6c, 0x200}, 0x6aba0e4b, 0x1, 0xd04}}, @TCA_TBF_RATE64={0xc, 0x4, 0x9b3bc4fd75e29128}, @TCA_TBF_PRATE64={0xc, 0x5, 0xb91e316295c500f1}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r8, &(0x7f00000004c0)="05031400d3fc140000004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x7, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) 5.03529057s ago: executing program 1 (id=818): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x8, r0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000280)={{0x5, 0x4}, {0x4, 0x273ec22e}, 0x10001, 0x4}) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{0x40000000, 0x3, 0x8, 0x0, 0x7}]}) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) get_mempolicy(0x0, 0x0, 0x5eb, &(0x7f0000001000/0x13000)=nil, 0x3) 4.943787153s ago: executing program 1 (id=819): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(0x3) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x40, 0x0, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(r0, 0x7c65, 0x95f7, 0x1, 0x0, 0x0) 4.233824536s ago: executing program 1 (id=820): memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x60, r5, 0xb7a006d1969b963b, 0x1, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @probe_request={{{}, {}, @broadcast, @device_b}, @val, @val, @void, @val={0x2d, 0x1a, {0x8802, 0x3, 0x6, 0x0, {0x6, 0xd, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x1, 0x95ce, 0x9}}, @val={0x72, 0x6}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8011}, 0x8014) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700014000780080006400000020008000840"], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 4.046902351s ago: executing program 4 (id=822): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x5) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x3) ioctl$TIOCSLCKTRMIOS(r2, 0x80047437, &(0x7f0000020780)) 3.741977531s ago: executing program 1 (id=824): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d2200000000000001090224000100000000090400000103000000092100000001220500090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {0xa, 0x9}, {}, {0xc, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x800) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000140)=""/215) 3.191276288s ago: executing program 2 (id=826): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x12) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, 0x0, 0x2, 0x0) writev(r1, &(0x7f0000002700)=[{&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)='c', 0x1}], 0x2) 3.046972213s ago: executing program 2 (id=827): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x8, r0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000280)={{0x5, 0x4}, {0x4, 0x273ec22e}, 0x10001, 0x4}) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{0x40000000, 0x3, 0x8, 0x0, 0x7}]}) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) get_mempolicy(0x0, 0x0, 0x5eb, &(0x7f0000001000/0x13000)=nil, 0x3) 2.991733205s ago: executing program 2 (id=828): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x40, 0x0, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(r1, 0x7c65, 0x95f7, 0x1, 0x0, 0x0) 2.934010926s ago: executing program 4 (id=829): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x7, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xf, 0xffe0}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000180)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 2.889854218s ago: executing program 2 (id=830): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x6ef, 0xfffb, 0x8632, 0x80000}, {0x6, 0x3, 0x6, 0xfeff, 0x6c, 0x200}, 0x6aba0e4b, 0x1, 0xd04}}, @TCA_TBF_RATE64={0xc, 0x4, 0x9b3bc4fd75e29128}, @TCA_TBF_PRATE64={0xc, 0x5, 0xb91e316295c500f1}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r8, &(0x7f00000004c0)="05031400d3fc140000004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x7, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.218888331s ago: executing program 0 (id=837): r0 = syz_open_dev$sndctrl(&(0x7f0000002b80), 0x1, 0x8000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc2c45513, &(0x7f0000002e00)={{0x8, 0x7, 0x3, 0x2, 'syz0\x00', 0x79}, 0x0, [0x0, 0x200000a, 0x1000, 0x0, 0xb3d, 0x7fffffff, 0x6, 0x0, 0xbc0, 0x7, 0x15c, 0x7, 0x5944, 0x5, 0x5, 0x8004a7, 0x9, 0x5, 0xb, 0x3, 0x2c, 0x400, 0x2000040, 0x10000000, 0x6, 0x80000000, 0x2, 0x800, 0x3, 0x3, 0x4, 0x6, 0x6, 0xff, 0x3ff, 0x1, 0x5, 0x3, 0x5, 0x6, 0x3, 0x8001, 0xffff8007, 0xe, 0xe, 0x0, 0x2, 0x5, 0xe, 0x4, 0x9, 0x80000001, 0x400, 0x1fb, 0x9, 0xfffff647, 0x408, 0x4, 0x4, 0x9, 0x800, 0x9, 0x5, 0x8, 0x98, 0xbe, 0xfffffffd, 0xa, 0x7, 0x81, 0x81, 0x10001, 0x2, 0x80000001, 0x69e, 0xb, 0x7000000, 0x1, 0x8, 0xd, 0x7, 0x0, 0x1, 0x3, 0xfffffffd, 0xffff, 0x6, 0x8000008, 0x7fb, 0x4, 0xef, 0xfd, 0x4, 0x3, 0xf86, 0x58a0, 0x1, 0x7, 0x895, 0x2000a, 0x9, 0x89, 0xfffffffe, 0xa1a9, 0xe0b2, 0x9, 0xfffff561, 0x12, 0x3, 0x800003, 0xfffffffa, 0x3, 0x2, 0x1, 0x2ba, 0x1, 0x80e, 0x5, 0x8, 0x2, 0xf2, 0x4, 0x1ff, 0x7, 0x2, 0x7, 0x6, 0x3]}) 1.154382193s ago: executing program 0 (id=838): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x6, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x8, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0x6, 0x9, 0x5, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x0, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x2, 0x1, 0x2, 0x2, 0x5, 0x5, 0xffffff1c, 0x5, 0x3, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8f, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0xcb1, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d4, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x5, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xfffffffe, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 546.905182ms ago: executing program 1 (id=839): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x40, 0x0, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(r1, 0x7c65, 0x95f7, 0x1, 0x0, 0x0) 523.629693ms ago: executing program 4 (id=840): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x28, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 476.203564ms ago: executing program 2 (id=841): quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000000c0)=@nullb, 0x0, &(0x7f0000000000)='.\x00') socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000400)={0x20, 0x1, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000540)={0x20, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000900)={0x1c, &(0x7f0000000780)={0x20, 0xe}, 0x0, 0x0}) syz_usb_control_io$uac2(0xffffffffffffffff, &(0x7f0000000000)={0xc, &(0x7f00000001c0)={0x40, 0xc, 0x89, {0x89, 0xd99c72c13b23cb21, "53788871008c213ead3a6cd82d554a27a5e155dc76c73fbdbb5ae2f3da49d0aa183f4552cfdaf763a10b08e43adac05fd5099a176c5c23437bad0199736d4db8c148a37aa0f1517f34563e5f8044b7ec589aaaf4ec0874b9321e34a1df7c6b7c6400093a9204067d2971ac0cfb389641155bbcdf5a23b83c05fbc9957a3c3e4acfe0646a8327d9"}}, &(0x7f0000000280)={0x0, 0x3, 0xa8, @string={0xa8, 0x3, "99a76b6ce1b7e69851b346c3b6c7e15cb0a8646f0ec727cce691efe35a8c845212b845a7bff42f29b9b0ba602d88e8c1ed05f86ec3feefe318fd3f1d10da52446813a34aa3bb1bc70fdebc9f08bc289982ef26e5eb3fc36e1bd60e951bf08f8f7715b7fcdcef7351587e618bb419cb46ae3e91642c1516cdcda4312859026eca06faab1c91c07f850f50e60d66e60bd3f20419a85d5bf3f026d01b5ae110dbbbd7228852c8dd"}}}, &(0x7f0000000500)={0x24, &(0x7f0000000580)={0x20, 0x8, 0xf1, "2d2591302494f8f675085d558228b66adf87463438fd8a67963cf244aeaeb2e19bf33cd1d4f9dfc5324ba468ac9e6beac66aef439e1bb29bccba0d4fcf790c95ff3d262742b375771fd318292cd1c7b5efebf678df1c4bedef51d737a216cc6e19c8cf5666bc5ad824528a1f02b558e9ef4dc7779a5aa0e3063401af90a78cf93d9aef471ed38502025bc2e67bd50af3957f1d23549f31140e6d7ddb9739be4c0b108b0ea668352eace12bea0f5073caf2c4553b11cd3e6e3bd5f43eb65172b57505f0071f51e909619a2d0733bc593ecb5423b41c09e23a67f3fed28e1c20a6b60c1aae7693023cb0b8d6fd79050e8bff"}, &(0x7f0000000040)={0x0, 0xa, 0x1, 0xd7}, 0x0, &(0x7f0000000140)={0x20, 0x81, 0x1, "90"}, &(0x7f0000000340)={0x20, 0x82, 0x3, "d3f0e5"}, &(0x7f00000003c0)={0x20, 0x83, 0x2, '\bO'}, &(0x7f0000000440)={0x20, 0x84, 0x2, "2f81"}, &(0x7f00000004c0)={0x20, 0x85, 0x3, "1ea6db"}}) syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f0000000740)={0xc, &(0x7f0000000680)={0x0, 0x22, 0x1c, {0x1c, 0x23, "808c2e9842f66e150206b041127813163cd8c2f189a9396b6a09"}}, &(0x7f00000006c0)={0x0, 0x3, 0x72, @string={0x72, 0x3, "d5b29c991f8077378f7019d16dca21469037b7e6ceb9c7b472c3426f30130a43872bfe7f20d54ef05602099e601d0d77e00daac83dcd0f9857cfa2428cc208fe255861b81455c276e488a67b790632e55555743ea52a2dc2f7245f5aaef9e574c2889ab8b5e3d8baec2121a2bc21c9c7"}}}, &(0x7f0000000800)={0x10, &(0x7f00000009c0)={0x20, 0x8, 0xd4, "ca4307cc1948004b4245433aa2bf6b4a7127e1be5450a1456ce06f80692cf3773f4ea6cd91ec8e644ebd0857a074a3ce91187be8914d94b5edbc2c7192fb4e35647465772d61a9ccd9889b25a086bd007ed694c785ab2d2efbdc7cbd751da138e2703a3f17b7937e9168e96f647ec1dddfa45027813650653fda949630a36791fc3afcd38b954dc2502357da5304fe07bd6bc76ea3390306148a3ee56ac86aad048547bc2134625fafab33ca6969e7403e33f51ebc392dd71ac6b087b75e3d0b35bf998318baac962028512a286d0341b9efc3a4"}, &(0x7f0000000ac0)={0xa1, 0x1, 0x400, "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"}, &(0x7f00000007c0)={0x21, 0x0, 0x1, '\''}}) 444.247576ms ago: executing program 4 (id=842): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x19, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0xf}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket(0x2b, 0x1, 0x1) listen(r2, 0x5) accept4$vsock_stream(r2, 0x0, 0x0, 0x80800) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2040, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0x8, 0x0, &(0x7f00000002c0)="b800000500000000", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) r3 = openat$vicodec0(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0cc5605, &(0x7f0000000300)={0xa, @pix={0x0, 0x101, 0x34565348, 0x7, 0x3, 0x8000, 0xc, 0x6, 0x0, 0x4, 0x2, 0x2}}) r4 = io_uring_setup(0x3823, &(0x7f0000000300)={0x0, 0xc429, 0x400, 0x3, 0x83}) syz_io_uring_setup(0x4954, &(0x7f0000000780)={0x0, 0x960e, 0x2000, 0x0, 0x364, 0x0, r4}, &(0x7f0000000400), &(0x7f0000000480), &(0x7f0000000600)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000800), r0) mprotect(&(0x7f0000adc000/0x2000)=nil, 0x2000, 0x3000002) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f00000004c0)={0x1, 0x4, 0x1, 0x7, @vifc_lcl_addr=@private=0xa010102, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 417.944097ms ago: executing program 1 (id=843): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) mprotect(&(0x7f000015e000/0x1000)=nil, 0x1000, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) r0 = openat$vim2m(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x4050) fsmount(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x9, 0x1}, 0x9, 0x42, &(0x7f00000001c0)="34ae728ae070ebe19bd3dcaa9b8c2a10de48411b22b60188059ba1563f58512a6c0445c069a65dc5b4dccd7027f4241e8050ef1644389ffc8442aa790be0d14c95a144e5aca988aed414f28959950e5de0cae1a226f3b98ba90eccb499ab0788e2962fdbba6473", 0x67, 0x5, 0xfffffffe, 0x0, 0x8, 0x4, &(0x7f0000000300)="46c7dd0213a91d72de89b8f5beeaafd316b54f920233eb4dff63d6b33bc4e5f89559c7ce395304c35b306695b48a61f600999a2b736ee396d8c785fae58238f520066964"}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x344c, &(0x7f0000000080)={0x0, 0xbf6e, 0x0, 0x7}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x0, 0x1}, 0x20) 355.891918ms ago: executing program 0 (id=844): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x12) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) writev(r1, 0x0, 0x0) 170.876704ms ago: executing program 0 (id=845): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x8, r0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000280)={{0x5, 0x4}, {0x4, 0x273ec22e}, 0x10001, 0x4}) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, &(0x7f0000002a40)) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, 0x0) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) get_mempolicy(0x0, 0x0, 0x5eb, &(0x7f0000001000/0x13000)=nil, 0x3) 84.562287ms ago: executing program 0 (id=846): r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@local, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) 0s ago: executing program 0 (id=847): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {0xa, 0x9}, {}, {0xc, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x800) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000140)=""/215) kernel console output (not intermixed with test programs): Bluetooth: hci2: command tx timeout [ 77.930182][ T5087] Bluetooth: hci3: command tx timeout [ 78.229443][ T5863] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.393931][ T28] af_packet: tpacket_rcv: packet too big, clamped from 90 to 4294967286. macoff=82 [ 79.547238][ T5880] kvm: pic: non byte read [ 79.551945][ T5880] kvm: pic: non byte read [ 79.775528][ T9] usb 2-1: USB disconnect, device number 2 [ 79.845242][ T5087] Bluetooth: hci0: command tx timeout [ 79.924671][ T5087] Bluetooth: hci1: command tx timeout [ 80.004367][ T5087] Bluetooth: hci3: command tx timeout [ 80.009802][ T5087] Bluetooth: hci2: command tx timeout [ 80.308082][ T788] usb 1-1: USB disconnect, device number 2 [ 80.803004][ T5905] netlink: 'syz.0.23': attribute type 10 has an invalid length. [ 80.812884][ T5905] syz_tun: entered promiscuous mode [ 80.836214][ T5905] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 81.287021][ T5830] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 81.308922][ T788] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 81.431967][ T5920] syzkaller0: entered promiscuous mode [ 81.438705][ T5920] syzkaller0: entered allmulticast mode [ 81.528547][ T5830] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 81.558902][ T788] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.580440][ T5830] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 81.593448][ T788] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 81.618525][ T5830] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 81.629373][ T788] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 81.648207][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.656580][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.682730][ T5830] usb 2-1: config 0 descriptor?? [ 81.700419][ T788] usb 1-1: config 0 descriptor?? [ 81.726637][ T788] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 81.735996][ T5830] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 81.746488][ T788] dvb-usb: bulk message failed: -22 (3/0) [ 81.762618][ T788] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 81.772973][ T788] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 81.791067][ T788] usb 1-1: media controller created [ 81.803228][ T788] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 81.827429][ T788] dvb-usb: bulk message failed: -22 (6/0) [ 81.845657][ T788] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 81.866867][ T788] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 81.948742][ T788] dvb-usb: schedule remote query interval to 150 msecs. [ 82.008137][ T788] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 82.173673][ T5830] dvb-usb: bulk message failed: -22 (1/0) [ 82.179627][ T5830] dvb-usb: error while querying for an remote control event. [ 82.364099][ T5830] dvb-usb: bulk message failed: -22 (1/0) [ 82.383568][ T5830] dvb-usb: error while querying for an remote control event. [ 82.495474][ T23] usb 1-1: USB disconnect, device number 3 [ 82.652359][ T23] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 83.073595][ T5830] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 83.266367][ T5830] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.286925][ T5830] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 83.300410][ T5830] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 83.323562][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.344860][ T5830] usb 3-1: config 0 descriptor?? [ 83.363823][ T5830] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 83.484797][ T5953] netlink: 32 bytes leftover after parsing attributes in process `syz.0.40'. [ 83.873609][ T23] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 84.058766][ T28] usb 2-1: USB disconnect, device number 3 [ 84.090606][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.114659][ T23] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 84.133730][ T23] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 84.142797][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.190867][ T23] usb 1-1: config 0 descriptor?? [ 84.210703][ T23] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 84.220573][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 84.245456][ T23] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 84.277555][ T23] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 84.303880][ T23] usb 1-1: media controller created [ 84.316007][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 84.358114][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 84.372428][ T23] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 84.395579][ T23] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 84.412945][ T23] dvb-usb: schedule remote query interval to 150 msecs. [ 84.441058][ T23] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 84.520573][ T5976] netlink: 92 bytes leftover after parsing attributes in process `syz.1.48'. [ 84.593341][ T5978] netlink: 40 bytes leftover after parsing attributes in process `syz.1.49'. [ 84.594350][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 84.621477][ T23] dvb-usb: error while querying for an remote control event. [ 84.661025][ T5978] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 84.793974][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 85.023818][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 85.038712][ T23] dvb-usb: error while querying for an remote control event. [ 85.063291][ T5830] usb 1-1: USB disconnect, device number 4 [ 85.112727][ T5830] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 85.237295][ T5989] syzkaller0: entered promiscuous mode [ 85.242984][ T5989] syzkaller0: entered allmulticast mode [ 85.254598][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 85.271949][ T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 85.286602][ T5989] Zero length message leads to an empty skb [ 85.307102][ T9] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 85.316965][ T5989] tipc: Started in network mode [ 85.321920][ T5989] tipc: Node identity 4a268169b129, cluster identity 4711 [ 85.333790][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.341835][ T9] usb 4-1: Product: syz [ 85.350659][ T5989] tipc: Enabled bearer , priority 0 [ 85.357418][ T9] usb 4-1: Manufacturer: syz [ 85.366798][ T9] usb 4-1: SerialNumber: syz [ 85.382280][ T5987] tipc: Resetting bearer [ 85.426511][ T5987] tipc: Disabling bearer [ 85.645413][ T9] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 85.663719][ T9] usb 4-1: unit 6 not found! [ 85.739776][ T9] usb 4-1: USB disconnect, device number 2 [ 85.820297][ T5771] udevd[5771]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 85.850590][ T5811] usb 3-1: USB disconnect, device number 2 [ 86.443668][ T5811] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 86.640159][ T6005] netlink: 320 bytes leftover after parsing attributes in process `syz.3.58'. [ 86.675295][ T5811] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 86.691920][ T5811] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 86.710975][ T5811] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 86.725675][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.743854][ T5811] usb 3-1: Product: syz [ 86.748881][ T5811] usb 3-1: Manufacturer: syz [ 86.757428][ T5811] usb 3-1: SerialNumber: syz [ 86.808632][ T5811] usb 3-1: config 0 descriptor?? [ 86.831799][ T5811] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 86.835360][ T787] cfg80211: failed to load regulatory.db [ 86.937430][ T6008] capability: warning: `syz.3.58' uses 32-bit capabilities (legacy support in use) [ 87.898136][ T5811] usb 3-1: USB disconnect, device number 3 [ 87.996932][ T6012] netlink: 32 bytes leftover after parsing attributes in process `syz.0.59'. [ 89.359555][ T6026] binder_alloc: 6022: binder_alloc_buf, no vma [ 89.754262][ T6030] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode broadcast(3) [ 90.367106][ T6044] netlink: 20 bytes leftover after parsing attributes in process `syz.2.68'. [ 90.678911][ T6049] syzkaller0: entered promiscuous mode [ 90.700056][ T6049] syzkaller0: entered allmulticast mode [ 90.877389][ T6060] netlink: 32 bytes leftover after parsing attributes in process `syz.3.72'. [ 91.083036][ T6066] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 91.529250][ T6075] netlink: 20 bytes leftover after parsing attributes in process `syz.0.79'. [ 91.613628][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 91.824392][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE8, skipping [ 91.853562][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 91.902754][ T9] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 91.928175][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.955529][ T9] usb 3-1: Product: syz [ 91.964907][ T9] usb 3-1: Manufacturer: syz [ 91.979107][ T9] usb 3-1: SerialNumber: syz [ 92.001390][ T9] usb 3-1: config 0 descriptor?? [ 92.124488][ T6083] syzkaller0: entered promiscuous mode [ 92.138351][ T6083] syzkaller0: entered allmulticast mode [ 92.347929][ T6092] syzkaller0: entered promiscuous mode [ 92.364238][ T6092] syzkaller0: entered allmulticast mode [ 92.414973][ T6094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.87'. [ 93.763644][ T23] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 93.803586][ T5811] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 93.956151][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.966719][ T23] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 93.975654][ T23] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 93.984908][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.985531][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.996760][ T23] usb 1-1: config 0 descriptor?? [ 94.014861][ T23] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 94.017545][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.022076][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 94.034255][ T5811] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 94.047506][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.054817][ T23] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 94.060592][ T5811] usb 2-1: config 0 descriptor?? [ 94.075006][ T23] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 94.082155][ T23] usb 1-1: media controller created [ 94.090108][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 94.123152][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 94.130274][ T23] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 94.142183][ T23] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 94.161572][ T23] dvb-usb: schedule remote query interval to 150 msecs. [ 94.182583][ T23] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 94.238509][ T6107] dibusb: i2c wr: len=100 is too big! [ 94.238509][ T6107] [ 94.334052][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 94.343588][ T23] dvb-usb: error while querying for an remote control event. [ 94.459125][ T2187] usb 3-1: USB disconnect, device number 4 [ 94.496215][ T5811] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 94.510815][ T5811] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 94.523780][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 94.529711][ T5811] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0001/input/input8 [ 94.562828][ T23] dvb-usb: error while querying for an remote control event. [ 94.586144][ T5811] cm6533_jd 0003:0D8C:0022.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 94.743841][ T2187] dvb-usb: bulk message failed: -22 (1/0) [ 94.749679][ T2187] dvb-usb: error while querying for an remote control event. [ 94.847702][ T2187] usb 2-1: USB disconnect, device number 4 [ 94.881641][ T787] usb 1-1: USB disconnect, device number 5 [ 95.508174][ T787] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 95.709807][ T6127] syz.2.96 uses obsolete (PF_INET,SOCK_PACKET) [ 95.860159][ T6135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.99'. [ 98.742233][ T6180] fuse: Unknown parameter 'user_i00000000000000000000' [ 98.766988][ T6175] syzkaller0: entered promiscuous mode [ 98.789595][ T6175] syzkaller0: entered allmulticast mode [ 99.115208][ T787] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 99.297747][ T787] usb 4-1: Using ep0 maxpacket: 8 [ 99.315203][ T787] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 99.325453][ T787] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 99.353685][ T787] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 99.370668][ T787] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 99.385317][ T787] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 99.404514][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.643905][ T787] usb 4-1: GET_CAPABILITIES returned 0 [ 99.650930][ T787] usbtmc 4-1:16.0: can't read capabilities [ 99.783662][ T2187] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 99.873872][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 99.888653][ T9] usb 4-1: USB disconnect, device number 3 [ 99.991530][ T2187] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 100.000106][ T2187] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.017323][ T2187] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.027684][ T2187] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 100.041065][ T2187] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 100.050413][ T2187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.069817][ T2187] usb 3-1: config 0 descriptor?? [ 100.503333][ T2187] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 100.525713][ T2187] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 100.548978][ T2187] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 100.559498][ T2187] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 100.592238][ T2187] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 100.613852][ T2187] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 100.622426][ T2187] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 100.661635][ T2187] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 100.787821][ T2187] usb 3-1: USB disconnect, device number 5 [ 100.842033][ T6200] fido_id[6200]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 100.919988][ T6202] netlink: 20 bytes leftover after parsing attributes in process `syz.1.123'. [ 100.977786][ T6208] fuse: Unknown parameter 'user_id00000000000000000000' [ 101.047628][ T6210] syzkaller0: entered promiscuous mode [ 101.053206][ T6210] syzkaller0: entered allmulticast mode [ 101.153647][ T788] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 101.336191][ T788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.355293][ T788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.386144][ T788] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 101.403764][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.419670][ T788] usb 1-1: config 0 descriptor?? [ 101.639516][ T27] audit: type=1326 audit(1781370392.920:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6224 comm="syz.2.133" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d639ce59 code=0x7ffc0000 [ 101.668674][ T27] audit: type=1326 audit(1781370392.920:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6224 comm="syz.2.133" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d639ce59 code=0x7ffc0000 [ 101.703820][ T27] audit: type=1326 audit(1781370392.920:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6224 comm="syz.2.133" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f88d639ce59 code=0x7ffc0000 [ 101.753636][ T27] audit: type=1326 audit(1781370392.920:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6224 comm="syz.2.133" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d639ce59 code=0x7ffc0000 [ 101.793770][ T6228] netlink: 20 bytes leftover after parsing attributes in process `syz.2.135'. [ 101.906880][ T788] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 101.914818][ T788] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 101.942491][ T788] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0003/input/input10 [ 102.046282][ T788] cm6533_jd 0003:0D8C:0022.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 102.162688][ T787] usb 1-1: USB disconnect, device number 6 [ 102.813194][ T6256] fuse: Unknown parameter 'user_id00000000000000000000' [ 103.396522][ T6260] netlink: 20 bytes leftover after parsing attributes in process `syz.1.145'. [ 104.041779][ T6279] syzkaller0: entered promiscuous mode [ 104.047391][ T6279] syzkaller0: entered allmulticast mode [ 104.299704][ T787] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 105.117806][ T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.139805][ T6285] netlink: 20 bytes leftover after parsing attributes in process `syz.1.155'. [ 105.157617][ T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.186085][ T787] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 105.199042][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.211210][ T787] usb 1-1: config 0 descriptor?? [ 105.228320][ T6290] syzkaller0: entered promiscuous mode [ 105.234548][ T6290] syzkaller0: entered allmulticast mode [ 105.241643][ T6292] fuse: Unknown parameter 'user_id00000000000000000000' [ 105.676349][ T787] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 105.684970][ T787] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 105.727592][ T787] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0004/input/input11 [ 105.753855][ T5811] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 105.829335][ T787] cm6533_jd 0003:0D8C:0022.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 105.990641][ T5811] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE8, skipping [ 106.105107][ T9] usb 1-1: USB disconnect, device number 7 [ 106.113663][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 106.149419][ T6304] fido_id[6304]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 106.155584][ T5811] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 106.224149][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.244553][ T5811] usb 2-1: Product: syz [ 106.251193][ T5811] usb 2-1: Manufacturer: syz [ 106.256587][ T5811] usb 2-1: SerialNumber: syz [ 106.269156][ T5811] usb 2-1: config 0 descriptor?? [ 106.815446][ T6312] netlink: 56 bytes leftover after parsing attributes in process `syz.3.165'. [ 107.937270][ T6327] syzkaller0: entered promiscuous mode [ 107.943269][ T6327] syzkaller0: entered allmulticast mode [ 107.961480][ T6323] netlink: 20 bytes leftover after parsing attributes in process `syz.0.168'. [ 108.015441][ T6329] fuse: Bad value for 'fd' [ 108.353747][ T9] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 109.375328][ T6343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.177'. [ 109.515435][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.550127][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 109.569809][ T9] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 109.604073][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.641316][ T9] usb 3-1: config 0 descriptor?? [ 109.648679][ T788] usb 2-1: USB disconnect, device number 5 [ 109.715910][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 109.735753][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 109.762549][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 109.825075][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 109.832219][ T9] usb 3-1: media controller created [ 109.859524][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 109.878541][ T6332] dibusb: i2c wr: len=100 is too big! [ 109.878541][ T6332] [ 109.916257][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 109.922110][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 109.987125][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input12 [ 110.014161][ T6361] syzkaller0: entered promiscuous mode [ 110.029476][ T6361] syzkaller0: entered allmulticast mode [ 110.036436][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 110.051968][ T6361] tipc: Started in network mode [ 110.062637][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 110.062786][ T6361] tipc: Node identity 5a114fb55517, cluster identity 4711 [ 110.086441][ T6361] tipc: Enabled bearer , priority 0 [ 110.108627][ T6360] tipc: Resetting bearer [ 110.154627][ T6360] tipc: Disabling bearer [ 110.213556][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 110.219362][ T9] dvb-usb: error while querying for an remote control event. [ 110.361677][ T6368] fuse: Bad value for 'fd' [ 110.393982][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 110.399785][ T9] dvb-usb: error while querying for an remote control event. [ 110.471461][ T9] usb 3-1: USB disconnect, device number 6 [ 110.540543][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 110.754751][ T6384] syzkaller0: entered promiscuous mode [ 110.760420][ T6384] syzkaller0: entered allmulticast mode [ 110.873663][ T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 111.078399][ T23] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE8, skipping [ 111.089019][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 111.102136][ T23] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 111.111241][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.119799][ T23] usb 4-1: Product: syz [ 111.124023][ T23] usb 4-1: Manufacturer: syz [ 111.128665][ T23] usb 4-1: SerialNumber: syz [ 111.136770][ T23] usb 4-1: config 0 descriptor?? [ 111.530725][ T6393] process 'syz.2.194' launched '/dev/fd/8/./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' with NULL argv: empty string added [ 111.730537][ T6401] netlink: 40 bytes leftover after parsing attributes in process `syz.0.196'. [ 111.841365][ T6392] syz.2.194[6392]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 112.173615][ T788] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 112.233855][ T9] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 112.398097][ T788] usb 3-1: config index 0 descriptor too short (expected 24929, got 36) [ 112.469879][ T788] usb 3-1: config 97 has too many interfaces: 97, using maximum allowed: 32 [ 112.502786][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.529704][ T788] usb 3-1: config 97 has an invalid descriptor of length 97, skipping remainder of the config [ 112.543886][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 112.572660][ T788] usb 3-1: config 97 has 0 interfaces, different from the descriptor's value: 97 [ 112.592946][ T9] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 112.615826][ T788] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 112.634604][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.719841][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.803940][ T9] usb 1-1: config 0 descriptor?? [ 112.811354][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 112.823888][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 112.858971][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 112.882770][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 112.892319][ T9] usb 1-1: media controller created [ 112.901757][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 112.919274][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 112.925163][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 112.937030][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input13 [ 112.952090][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 112.966099][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 113.028715][ T6405] dibusb: i2c wr: len=100 is too big! [ 113.028715][ T6405] [ 113.077133][ T788] usb 3-1: string descriptor 0 read error: -71 [ 113.093664][ T788] usb 3-1: USB disconnect, device number 7 [ 113.123867][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 113.130955][ T9] dvb-usb: error while querying for an remote control event. [ 113.293623][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 113.299405][ T9] dvb-usb: error while querying for an remote control event. [ 113.463790][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 113.473804][ T9] dvb-usb: error while querying for an remote control event. [ 113.556029][ T9] usb 1-1: USB disconnect, device number 8 [ 113.603459][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 113.685770][ T6421] binder_alloc: 6420: binder_alloc_buf, no vma [ 113.715439][ T5811] usb 4-1: USB disconnect, device number 4 [ 114.353605][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 114.493614][ T23] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 114.543659][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 114.550388][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.561334][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.571480][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 114.584767][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 114.595037][ T5811] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 114.603024][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.618367][ T9] usb 4-1: config 0 descriptor?? [ 114.676354][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.686579][ T23] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 114.696625][ T23] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 114.710432][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.730204][ T23] usb 3-1: config 0 descriptor?? [ 114.751937][ T23] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 114.763670][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 114.775654][ T23] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 114.793883][ T5811] usb 2-1: Using ep0 maxpacket: 16 [ 114.801021][ T23] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 114.806144][ T5811] usb 2-1: unable to get BOS descriptor or descriptor too short [ 114.818195][ T5811] usb 2-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 39, changing to 9 [ 114.822852][ T23] usb 3-1: media controller created [ 114.831476][ T5811] usb 2-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024 [ 114.840983][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 114.847272][ T5811] usb 2-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.868734][ T5811] usb 2-1: config 1 interface 0 has no altsetting 0 [ 114.881964][ T5811] usb 2-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 114.883358][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 114.898198][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.906953][ T23] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 114.918423][ T23] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input15 [ 114.927129][ T5811] usb 2-1: Product: syz [ 114.943910][ T5811] usb 2-1: Manufacturer: syz [ 114.944942][ T23] dvb-usb: schedule remote query interval to 150 msecs. [ 114.961705][ T5811] usb 2-1: SerialNumber: syz [ 114.962289][ T23] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 114.976166][ T6444] dibusb: i2c wr: len=100 is too big! [ 114.976166][ T6444] [ 114.992994][ T6442] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 115.053178][ T6441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.062505][ T6441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.072025][ T6441] netlink: 4 bytes leftover after parsing attributes in process `syz.3.212'. [ 115.116270][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 115.122044][ T23] dvb-usb: error while querying for an remote control event. [ 115.173630][ T5809] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 115.223685][ T6442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.233889][ T6442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.283958][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 115.297504][ T23] dvb-usb: error while querying for an remote control event. [ 115.310892][ T6442] loop9: detected capacity change from 0 to 7 [ 115.323143][ T6442] Dev loop9: unable to read RDB block 7 [ 115.329873][ T6442] loop9: AHDI p1 p2 p3 [ 115.334728][ T6442] loop9: partition table partially beyond EOD, truncated [ 115.343374][ T6442] loop9: p1 start 1601398130 is beyond EOD, truncated [ 115.350425][ T6442] loop9: p2 start 1702059890 is beyond EOD, truncated [ 115.379652][ T5809] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE8, skipping [ 115.391096][ T5809] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 115.416601][ T5809] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 115.426310][ T5809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.435033][ T5809] usb 1-1: Product: syz [ 115.439329][ T5809] usb 1-1: Manufacturer: syz [ 115.444599][ T5809] usb 1-1: SerialNumber: syz [ 115.456478][ T5811] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input16 [ 115.465615][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 115.465642][ T23] dvb-usb: error while querying for an remote control event. [ 115.481213][ T5809] usb 1-1: config 0 descriptor?? [ 115.508591][ T5127] bcm5974 2-1:1.0: could not read from device [ 115.521493][ T5127] bcm5974 2-1:1.0: could not read from device [ 115.547908][ T5127] bcm5974 2-1:1.0: could not read from device [ 115.549399][ T23] usb 3-1: USB disconnect, device number 8 [ 115.579190][ T5127] bcm5974 2-1:1.0: could not read from device [ 115.580760][ T5811] usb 2-1: USB disconnect, device number 6 [ 115.627307][ T23] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 116.830422][ T6481] netlink: 16 bytes leftover after parsing attributes in process `syz.2.227'. [ 117.022065][ T6486] syzkaller0: entered promiscuous mode [ 117.027916][ T6486] syzkaller0: entered allmulticast mode [ 117.588773][ T6497] tipc: Enabled bearer , priority 0 [ 117.604245][ T6497] syzkaller0: entered promiscuous mode [ 117.609868][ T6497] syzkaller0: entered allmulticast mode [ 117.627972][ T6497] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 117.672071][ T6497] tipc: Resetting bearer [ 117.689547][ T6495] tipc: Resetting bearer [ 117.727947][ T6495] tipc: Disabling bearer [ 117.883216][ T5830] usb 1-1: USB disconnect, device number 9 [ 117.972816][ T6507] fuse: Unknown parameter '0x0000000000000003' [ 117.983626][ T5810] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 118.164187][ T5810] usb 3-1: Using ep0 maxpacket: 16 [ 118.185588][ T5810] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 118.194814][ T5810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.205296][ T5810] usb 3-1: config 0 descriptor?? [ 118.213746][ T5810] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 118.699830][ T6519] netlink: 32 bytes leftover after parsing attributes in process `syz.0.243'. [ 118.763557][ T6519] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.796028][ T6519] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 118.843183][ T6520] syz_tun: Device is already in use. [ 119.663626][ T5830] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 119.895626][ T5830] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE8, skipping [ 119.911254][ T5830] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 119.916914][ T6532] netlink: 20 bytes leftover after parsing attributes in process `syz.0.248'. [ 119.927555][ T5830] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 119.946645][ T9] usbhid 4-1:0.0: can't add hid device: -32 [ 119.952679][ T9] usbhid: probe of 4-1:0.0 failed with error -32 [ 119.962092][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.976166][ T5830] usb 2-1: Product: syz [ 119.980379][ T5830] usb 2-1: Manufacturer: syz [ 119.985237][ T5830] usb 2-1: SerialNumber: syz [ 120.001333][ T5830] usb 2-1: config 0 descriptor?? [ 120.245205][ T5810] gspca_sonixj: reg_r err -32 [ 120.250100][ T5810] sonixj: probe of 3-1:0.0 failed with error -32 [ 120.685431][ T5810] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 120.875204][ T5810] usb 1-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 120.884304][ T5810] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 120.895581][ T5810] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 120.904747][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.912738][ T5810] usb 1-1: Product: syz [ 120.918991][ T5810] usb 1-1: Manufacturer: syz [ 120.923634][ T5810] usb 1-1: SerialNumber: syz [ 120.930364][ T5810] usb 1-1: config 0 descriptor?? [ 120.940844][ T5810] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 121.284462][ T28] usb 3-1: USB disconnect, device number 9 [ 121.793574][ T9] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 121.995182][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.012171][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 122.023973][ T9] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 122.033037][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.043730][ T9] usb 3-1: config 0 descriptor?? [ 122.052826][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 122.059913][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 122.070019][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 122.080746][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 122.088836][ T9] usb 3-1: media controller created [ 122.095977][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 122.110308][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 122.120625][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 122.129602][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input17 [ 122.143033][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 122.150606][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 122.167396][ T5809] usb 1-1: USB disconnect, device number 10 [ 122.258204][ T6551] dibusb: i2c wr: len=100 is too big! [ 122.258204][ T6551] [ 122.306206][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 122.311987][ T9] dvb-usb: error while querying for an remote control event. [ 122.430815][ T5809] usb 2-1: USB disconnect, device number 7 [ 122.476582][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 122.482359][ T9] dvb-usb: error while querying for an remote control event. [ 122.654944][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 122.660752][ T9] dvb-usb: error while querying for an remote control event. [ 122.809989][ T28] usb 3-1: USB disconnect, device number 10 [ 122.823895][ T5809] dvb-usb: bulk message failed: -22 (1/0) [ 122.833430][ T5809] dvb-usb: error while querying for an remote control event. [ 122.924719][ T28] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 123.123877][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 123.221545][ T6576] syzkaller0: entered promiscuous mode [ 123.230446][ T6576] syzkaller0: entered allmulticast mode [ 123.323736][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 123.330252][ T9] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 123.344340][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.368170][ T9] usb 1-1: config 0 descriptor?? [ 123.398579][ T9] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 123.989702][ T6588] syzkaller0: entered promiscuous mode [ 123.995372][ T6588] syzkaller0: entered allmulticast mode [ 124.123681][ T23] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 124.780695][ T6593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.274'. [ 125.565589][ T9] gspca_sonixj: reg_w1 err -110 [ 125.624377][ T9] sonixj: probe of 1-1:0.0 failed with error -110 [ 125.669611][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.679890][ T23] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 125.689187][ T23] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 125.698721][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.709326][ T23] usb 2-1: config 0 descriptor?? [ 125.722262][ T23] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 125.729297][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 125.742906][ T23] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 125.754478][ T23] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 125.762002][ T23] usb 2-1: media controller created [ 125.776902][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 125.801707][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 125.811987][ T23] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 125.825368][ T23] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input18 [ 125.863679][ T5811] usb 1-1: USB disconnect, device number 11 [ 125.864750][ T23] dvb-usb: schedule remote query interval to 150 msecs. [ 125.914559][ T23] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 125.931059][ T6586] dibusb: i2c wr: len=100 is too big! [ 125.931059][ T6586] [ 126.073860][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 126.079652][ T23] dvb-usb: error while querying for an remote control event. [ 126.253604][ T28] dvb-usb: bulk message failed: -22 (1/0) [ 126.259423][ T28] dvb-usb: error while querying for an remote control event. [ 126.415773][ T23] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 126.433744][ T28] dvb-usb: bulk message failed: -22 (1/0) [ 126.439509][ T28] dvb-usb: error while querying for an remote control event. [ 126.443607][ T5811] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 126.473127][ T9] usb 2-1: USB disconnect, device number 8 [ 126.516793][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 126.604417][ T23] usb 3-1: too many configurations: 151, using maximum allowed: 8 [ 126.627374][ T23] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 126.634594][ T5811] usb 1-1: Using ep0 maxpacket: 16 [ 126.640560][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 126.649906][ T5811] usb 1-1: unable to get BOS descriptor or descriptor too short [ 126.654964][ T5811] usb 1-1: config 4 has an invalid interface number: 55 but max is 0 [ 126.668897][ T23] usb 3-1: Product: syz [ 126.673093][ T23] usb 3-1: Manufacturer: syz [ 126.673862][ T5811] usb 1-1: config 4 has no interface number 0 [ 126.679051][ T23] usb 3-1: SerialNumber: syz [ 126.701401][ T23] usb 3-1: config 0 descriptor?? [ 126.703569][ T5811] usb 1-1: config 4 interface 55 has no altsetting 0 [ 126.726984][ T5811] usb 1-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=2f.cb [ 126.736475][ T5811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.738937][ T23] ims_pcu 3-1:0.0: Zero length descriptor [ 126.749451][ T5811] usb 1-1: Product: syz [ 126.755465][ T5811] usb 1-1: Manufacturer: syz [ 126.760162][ T5811] usb 1-1: SerialNumber: syz [ 126.768825][ T23] ims_pcu: probe of 3-1:0.0 failed with error -22 [ 127.199303][ T6618] netlink: 148 bytes leftover after parsing attributes in process `syz.0.276'. [ 127.289771][ T6619] netlink: 84 bytes leftover after parsing attributes in process `syz.1.278'. [ 127.372602][ T6618] netlink: 148 bytes leftover after parsing attributes in process `syz.0.276'. [ 127.418003][ T6622] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 127.464488][ T5811] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 127.483070][ T5811] gspca_mr97310a: reg write [21] error -22 [ 127.573789][ T5811] mr97310a: probe of 1-1:4.55 failed with error -22 [ 127.610772][ T23] usb 3-1: USB disconnect, device number 11 [ 127.642368][ T5811] usb 1-1: USB disconnect, device number 12 [ 128.176057][ T6629] syzkaller0: entered promiscuous mode [ 128.181585][ T6629] syzkaller0: entered allmulticast mode [ 128.583651][ T28] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 128.773687][ T28] usb 1-1: Using ep0 maxpacket: 16 [ 128.784881][ T28] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 128.796609][ T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.815460][ T28] usb 1-1: config 0 descriptor?? [ 128.827948][ T28] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 129.533364][ T6653] tipc: Started in network mode [ 129.543910][ T6653] tipc: Node identity 82df005c768a, cluster identity 4711 [ 129.551607][ T6653] tipc: Enabled bearer , priority 0 [ 129.559968][ T6653] syzkaller0: entered promiscuous mode [ 129.565539][ T6653] syzkaller0: entered allmulticast mode [ 129.575990][ T6653] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 129.599689][ T6653] tipc: Resetting bearer [ 129.621079][ T6652] tipc: Resetting bearer [ 129.625796][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 129.640080][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 129.654537][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 129.666333][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 129.666417][ T6652] tipc: Disabling bearer [ 129.679926][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 129.690762][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 130.021559][ T6657] chnl_net:caif_netlink_parms(): no params data found [ 130.069473][ T6668] syzkaller0: entered promiscuous mode [ 130.075243][ T6668] syzkaller0: entered allmulticast mode [ 130.141656][ T6670] syzkaller0: entered promiscuous mode [ 130.148034][ T6670] syzkaller0: entered allmulticast mode [ 130.192860][ T6657] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.201931][ T6657] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.217364][ T6657] bridge_slave_0: entered allmulticast mode [ 130.235437][ T6657] bridge_slave_0: entered promiscuous mode [ 130.249665][ T6670] tipc: Enabled bearer , priority 0 [ 130.257710][ T6657] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.266936][ T6657] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.274815][ T6657] bridge_slave_1: entered allmulticast mode [ 130.281482][ T6657] bridge_slave_1: entered promiscuous mode [ 130.288451][ T6669] tipc: Resetting bearer [ 130.312581][ T6669] tipc: Disabling bearer [ 130.355759][ T6657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.382970][ T6657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.480009][ T6657] team0: Port device team_slave_0 added [ 130.498777][ T6657] team0: Port device team_slave_1 added [ 130.539213][ T6657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.556997][ T6657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.585409][ C0] vkms_vblank_simulate: vblank timer overrun [ 130.614844][ T6657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.632662][ T6657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.640672][ T6657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.676006][ T6657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.736408][ T6657] hsr_slave_0: entered promiscuous mode [ 130.747473][ T6657] hsr_slave_1: entered promiscuous mode [ 130.756981][ T6657] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.768641][ T6657] Cannot create hsr debugfs directory [ 130.873702][ T28] gspca_sonixj: reg_r err -32 [ 130.878587][ T28] sonixj: probe of 1-1:0.0 failed with error -32 [ 131.053459][ T6657] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 131.069360][ T6657] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 131.082259][ T6657] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 131.121058][ T6657] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 131.456109][ T6657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.506650][ T6657] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.538651][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.546410][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.593772][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.601423][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.764269][ T5087] Bluetooth: hci4: command tx timeout [ 131.941880][ T5810] usb 1-1: USB disconnect, device number 13 [ 132.054446][ T6711] netlink: 20 bytes leftover after parsing attributes in process `syz.0.302'. [ 132.261232][ T6714] tipc: Enabled bearer , priority 0 [ 132.278842][ T6657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.308047][ T6714] syzkaller0: entered promiscuous mode [ 132.314009][ T6714] syzkaller0: entered allmulticast mode [ 132.334937][ T6714] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 132.417464][ T6722] tipc: Resetting bearer [ 132.434717][ T6713] tipc: Resetting bearer [ 132.465069][ T6713] tipc: Disabling bearer [ 132.505474][ T6723] syzkaller0: entered promiscuous mode [ 132.517250][ T6723] syzkaller0: entered allmulticast mode [ 132.594191][ T6723] tipc: Started in network mode [ 132.608968][ T6723] tipc: Node identity 02a0184e29c7, cluster identity 4711 [ 132.632105][ T6723] tipc: Enabled bearer , priority 0 [ 132.657670][ T6720] tipc: Resetting bearer [ 132.721885][ T6720] tipc: Disabling bearer [ 132.835333][ T6737] netlink: 40 bytes leftover after parsing attributes in process `syz.2.311'. [ 132.864677][ T6737] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 132.889191][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.895587][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.903594][ T23] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 132.932834][ T6739] wireguard: wg1: Could not create IPv4 socket [ 133.039254][ T6657] veth0_vlan: entered promiscuous mode [ 133.067601][ T6657] veth1_vlan: entered promiscuous mode [ 133.101403][ T6657] veth0_macvtap: entered promiscuous mode [ 133.109923][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 133.128422][ T23] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 133.128842][ T6657] veth1_macvtap: entered promiscuous mode [ 133.142393][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.173051][ T23] usb 2-1: config 0 descriptor?? [ 133.176559][ T6657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.188999][ T6657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.195081][ T23] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 133.200581][ T6657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.215722][ T6657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.226782][ T6657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.238136][ T6657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.248464][ T6657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.259309][ T6657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.280353][ T6657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.294073][ T5810] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 133.295996][ T6657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.312668][ T6657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.331215][ T6657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.343056][ T6657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.358601][ T6657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.376627][ T6657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.386893][ T6657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.401604][ T6657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.414836][ T6657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.430810][ T6657] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.443712][ T6657] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.452466][ T6657] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.465874][ T6657] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.493968][ T5810] usb 1-1: Using ep0 maxpacket: 16 [ 133.510059][ T5810] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 133.518517][ T5810] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.550932][ T5810] usb 1-1: config 0 has no interface number 0 [ 133.584977][ T5810] usb 1-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 133.593863][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.606909][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.612115][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.630234][ T5810] usb 1-1: Product: syz [ 133.643684][ T5810] usb 1-1: Manufacturer: syz [ 133.654291][ T5810] usb 1-1: SerialNumber: syz [ 133.676102][ T5810] usb 1-1: config 0 descriptor?? [ 133.695437][ T5810] usb 1-1: Found UVC 0.00 device syz (046c:14e8) [ 133.701961][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.710233][ T5810] usb 1-1: No valid video chain found. [ 133.716986][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.844105][ T5087] Bluetooth: hci4: command tx timeout [ 133.889515][ T6753] tipc: Started in network mode [ 133.904380][ T6753] tipc: Node identity d2c3f2bc030b, cluster identity 4711 [ 133.911784][ T6753] tipc: Enabled bearer , priority 0 [ 133.932342][ T6753] syzkaller0: entered promiscuous mode [ 133.938419][ T6753] syzkaller0: entered allmulticast mode [ 133.952974][ T6753] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 133.974195][ T5809] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 133.981525][ T6753] tipc: Resetting bearer [ 133.989893][ T6752] tipc: Resetting bearer [ 134.044349][ T6752] tipc: Disabling bearer [ 134.072720][ T2187] usb 1-1: USB disconnect, device number 14 [ 134.207816][ T5809] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 134.217028][ T5809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.237155][ T5809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.248055][ T5809] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 134.262413][ T5809] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 134.275327][ T5809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.293681][ T5809] usb 3-1: config 0 descriptor?? [ 134.309991][ T6759] syz.4.318 (6759) used greatest stack depth: 19560 bytes left [ 134.394288][ T6761] kvm: pic: non byte read [ 134.398786][ T6761] kvm: pic: non byte read [ 134.403322][ T6761] kvm: pic: non byte read [ 134.407973][ T6761] kvm: pic: non byte read [ 134.412502][ T6761] kvm: pic: non byte read [ 134.417524][ T6761] kvm: pic: non byte read [ 134.422054][ T6761] kvm: pic: non byte read [ 134.426714][ T6761] kvm: pic: non byte read [ 134.431410][ T6761] kvm: pic: non byte read [ 134.436532][ T6761] kvm: pic: non byte read [ 134.725952][ T5809] usbhid 3-1:0.0: can't add hid device: -71 [ 134.745308][ T5809] usbhid: probe of 3-1:0.0 failed with error -71 [ 134.758651][ T5809] usb 3-1: USB disconnect, device number 12 [ 135.249172][ T23] gspca_sonixj: reg_r err -32 [ 135.273773][ T23] sonixj: probe of 2-1:0.0 failed with error -32 [ 135.280494][ T6782] syzkaller0: entered promiscuous mode [ 135.289585][ T6782] syzkaller0: entered allmulticast mode [ 135.394466][ T6785] netlink: 20 bytes leftover after parsing attributes in process `syz.2.327'. [ 135.814184][ T2187] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 135.923841][ T5087] Bluetooth: hci4: command tx timeout [ 136.016332][ T2187] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.044345][ T2187] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 136.074627][ T2187] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 136.112675][ T2187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.124333][ T2187] usb 3-1: config 0 descriptor?? [ 136.141068][ T2187] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 136.215721][ T6813] netlink: 20 bytes leftover after parsing attributes in process `syz.0.336'. [ 136.282910][ T9] usb 2-1: USB disconnect, device number 9 [ 136.291688][ T6815] syzkaller0: entered promiscuous mode [ 136.297382][ T6815] syzkaller0: entered allmulticast mode [ 136.393715][ T5809] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 136.600796][ T5809] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 136.610774][ T5809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.627087][ T5809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.641076][ T5809] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 136.663624][ T5809] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 136.683180][ T5809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.708262][ T5809] usb 5-1: config 0 descriptor?? [ 136.793806][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 136.953097][ T6836] syzkaller0: entered promiscuous mode [ 136.959073][ T6836] syzkaller0: entered allmulticast mode [ 136.974256][ T9] usb 2-1: device descriptor read/64, error -71 [ 137.046009][ T6837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.067393][ T6837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.131495][ T5809] usbhid 5-1:0.0: can't add hid device: -71 [ 137.143289][ T5809] usbhid: probe of 5-1:0.0 failed with error -71 [ 137.156382][ T5809] usb 5-1: USB disconnect, device number 2 [ 137.208482][ T6842] netlink: 20 bytes leftover after parsing attributes in process `syz.0.345'. [ 137.244467][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 137.443714][ T9] usb 2-1: device descriptor read/64, error -71 [ 137.533623][ T787] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 137.573939][ T9] usb usb2-port1: attempt power cycle [ 137.713757][ T787] usb 1-1: Using ep0 maxpacket: 16 [ 137.726298][ T787] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 137.735850][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.764504][ T787] usb 1-1: config 0 descriptor?? [ 137.806582][ T787] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 138.006536][ T5087] Bluetooth: hci4: command tx timeout [ 138.007656][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 138.065424][ T9] usb 2-1: device descriptor read/8, error -71 [ 138.343881][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 138.391499][ T9] usb 2-1: device descriptor read/8, error -71 [ 138.523798][ T9] usb usb2-port1: unable to enumerate USB device [ 138.550671][ T9] usb 3-1: USB disconnect, device number 13 [ 138.630396][ T787] gspca_sonixj: reg_r err -32 [ 138.632694][ T6850] syzkaller0: entered promiscuous mode [ 138.635256][ T787] sonixj: probe of 1-1:0.0 failed with error -32 [ 138.640829][ T6850] syzkaller0: entered allmulticast mode [ 139.863602][ T787] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 140.063647][ T787] usb 2-1: Using ep0 maxpacket: 16 [ 140.100841][ T787] usb 2-1: unable to get BOS descriptor or descriptor too short [ 140.156663][ T787] usb 2-1: config 4 has an invalid interface number: 55 but max is 0 [ 140.172399][ T787] usb 2-1: config 4 has no interface number 0 [ 140.181031][ T787] usb 2-1: config 4 interface 55 has no altsetting 0 [ 140.191313][ T787] usb 2-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=2f.cb [ 140.201571][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.210203][ T787] usb 2-1: Product: syz [ 140.220312][ T787] usb 2-1: Manufacturer: syz [ 140.227146][ T787] usb 2-1: SerialNumber: syz [ 140.319392][ T9] usb 1-1: USB disconnect, device number 15 [ 140.553515][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 140.583516][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 140.793507][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 140.927872][ T6892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.355'. [ 141.373513][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 141.593507][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 141.713506][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 141.753508][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 142.374953][ T787] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 142.381247][ T787] gspca_mr97310a: reg write [21] error -22 [ 142.420926][ T787] mr97310a: probe of 2-1:4.55 failed with error -22 [ 142.545252][ T787] usb 2-1: USB disconnect, device number 14 [ 144.513584][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 144.593590][ T5810] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 144.699315][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 144.707086][ T9] usb 1-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 33, changing to 9 [ 144.718485][ T9] usb 1-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 144.729750][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 144.736582][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c20a, bcdDevice= 0.00 [ 144.745776][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.758515][ T9] usb 1-1: config 0 descriptor?? [ 144.764434][ T6924] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 144.774261][ T5810] usb 2-1: Using ep0 maxpacket: 16 [ 144.783202][ T5810] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 144.792527][ T5810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.814253][ T5810] usb 2-1: config 0 descriptor?? [ 144.822711][ T5810] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 145.062399][ T6937] tipc: Enabled bearer , priority 0 [ 145.077043][ T6937] syzkaller0: entered promiscuous mode [ 145.082652][ T6937] syzkaller0: entered allmulticast mode [ 145.096919][ T6937] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 145.128133][ T6937] tipc: Resetting bearer [ 145.185931][ T9] logitech 0003:046D:C20A.0005: unknown main item tag 0x0 [ 145.198598][ T9] logitech 0003:046D:C20A.0005: unknown main item tag 0x0 [ 145.210039][ T9] logitech 0003:046D:C20A.0005: unknown main item tag 0x0 [ 145.219593][ T9] logitech 0003:046D:C20A.0005: unknown main item tag 0x0 [ 145.227105][ T9] logitech 0003:046D:C20A.0005: unknown main item tag 0x0 [ 145.234689][ T9] logitech 0003:046D:C20A.0005: unknown main item tag 0x0 [ 145.241858][ T9] logitech 0003:046D:C20A.0005: unknown main item tag 0x0 [ 145.249433][ T9] logitech 0003:046D:C20A.0005: unknown main item tag 0x0 [ 145.258213][ T9] logitech 0003:046D:C20A.0005: unknown main item tag 0x0 [ 145.268843][ T9] logitech 0003:046D:C20A.0005: unknown main item tag 0x0 [ 145.278657][ T9] logitech 0003:046D:C20A.0005: unknown main item tag 0x0 [ 145.297889][ T9] logitech 0003:046D:C20A.0005: unknown main item tag 0x0 [ 145.308888][ T9] logitech 0003:046D:C20A.0005: unknown main item tag 0x0 [ 145.317878][ T6936] tipc: Resetting bearer [ 145.324743][ T9] logitech 0003:046D:C20A.0005: unknown main item tag 0x0 [ 145.331893][ T9] logitech 0003:046D:C20A.0005: unknown main item tag 0x0 [ 145.339340][ T9] logitech 0003:046D:C20A.0005: unknown main item tag 0x0 [ 145.346586][ T9] logitech 0003:046D:C20A.0005: unknown main item tag 0x0 [ 145.353962][ T9] logitech 0003:046D:C20A.0005: unknown main item tag 0x0 [ 145.361112][ T9] logitech 0003:046D:C20A.0005: unknown main item tag 0x0 [ 145.370633][ T6936] tipc: Disabling bearer [ 145.382108][ T9] logitech 0003:046D:C20A.0005: unknown main item tag 0x0 [ 145.389934][ T9] logitech 0003:046D:C20A.0005: unknown main item tag 0x0 [ 145.412199][ T9] logitech 0003:046D:C20A.0005: unknown main item tag 0x0 [ 145.433544][ T9] logitech 0003:046D:C20A.0005: unknown main item tag 0x0 [ 145.440708][ T9] logitech 0003:046D:C20A.0005: unknown main item tag 0x0 [ 145.476589][ T6941] syzkaller0: entered promiscuous mode [ 145.479153][ T9] logitech 0003:046D:C20A.0005: unknown main item tag 0x0 [ 145.482154][ T6941] syzkaller0: entered allmulticast mode [ 145.519232][ T9] logitech 0003:046D:C20A.0005: unknown main item tag 0x0 [ 145.537641][ T9] logitech 0003:046D:C20A.0005: unknown main item tag 0x0 [ 145.562505][ T9] logitech 0003:046D:C20A.0005: unknown main item tag 0x0 [ 145.577687][ T9] logitech 0003:046D:C20A.0005: unknown main item tag 0x0 [ 145.594415][ T9] logitech 0003:046D:C20A.0005: unknown main item tag 0x0 [ 145.623860][ T9] logitech 0003:046D:C20A.0005: unknown main item tag 0x0 [ 145.632066][ T9] logitech 0003:046D:C20A.0005: unknown main item tag 0x0 [ 145.649514][ T9] logitech 0003:046D:C20A.0005: unknown main item tag 0x0 [ 145.669766][ T5810] gspca_sonixj: reg_r err -32 [ 145.671221][ T9] logitech 0003:046D:C20A.0005: unknown main item tag 0x0 [ 145.683452][ T5810] sonixj: probe of 2-1:0.0 failed with error -32 [ 145.691449][ T9] logitech 0003:046D:C20A.0005: unknown main item tag 0x0 [ 145.707990][ T9] logitech 0003:046D:C20A.0005: unknown main item tag 0x0 [ 145.722427][ T9] logitech 0003:046D:C20A.0005: unknown main item tag 0x0 [ 145.732542][ T9] logitech 0003:046D:C20A.0005: unknown main item tag 0x0 [ 145.746602][ T9] logitech 0003:046D:C20A.0005: unknown main item tag 0x0 [ 145.757403][ T9] logitech 0003:046D:C20A.0005: unknown main item tag 0x0 [ 145.777073][ T9] logitech 0003:046D:C20A.0005: hidraw0: USB HID v8.0c Device [HID 046d:c20a] on usb-dummy_hcd.0-1/input0 [ 145.791360][ T9] logitech 0003:046D:C20A.0005: no inputs found [ 145.825855][ T9] usb 1-1: USB disconnect, device number 16 [ 146.025473][ T6949] fido_id[6949]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 147.381445][ T5809] usb 2-1: USB disconnect, device number 15 [ 147.833658][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 148.043861][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 148.064747][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 148.097610][ T9] usb 1-1: config 4 has an invalid interface number: 55 but max is 0 [ 148.143541][ T9] usb 1-1: config 4 has no interface number 0 [ 148.170111][ T9] usb 1-1: config 4 interface 55 has no altsetting 0 [ 148.184619][ T9] usb 1-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=2f.cb [ 148.210098][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.233756][ T9] usb 1-1: Product: syz [ 148.238100][ T9] usb 1-1: Manufacturer: syz [ 148.253219][ T9] usb 1-1: SerialNumber: syz [ 148.699915][ T2187] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 148.803970][ T9] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 148.823346][ T9] gspca_mr97310a: reg write [21] error -22 [ 148.846154][ T9] mr97310a: probe of 1-1:4.55 failed with error -22 [ 148.894247][ T9] usb 1-1: USB disconnect, device number 17 [ 148.907922][ T2187] usb 2-1: Using ep0 maxpacket: 16 [ 149.109429][ T2187] usb 2-1: unable to get BOS descriptor or descriptor too short [ 149.122107][ T2187] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 149.132603][ T2187] usb 2-1: can't read configurations, error -71 [ 152.498096][ T2187] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 152.763798][ T2187] usb 1-1: Using ep0 maxpacket: 16 [ 153.071325][ T2187] usb 1-1: unable to get BOS descriptor or descriptor too short [ 153.080702][ T2187] usb 1-1: config 4 has an invalid interface number: 55 but max is 0 [ 153.089234][ T2187] usb 1-1: config 4 has no interface number 0 [ 153.095805][ T2187] usb 1-1: config 4 interface 55 has no altsetting 0 [ 153.106069][ T2187] usb 1-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=2f.cb [ 153.115196][ T2187] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.123248][ T2187] usb 1-1: Product: syz [ 153.127977][ T2187] usb 1-1: Manufacturer: syz [ 153.133081][ T2187] usb 1-1: SerialNumber: syz [ 153.422725][ T2187] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 153.429175][ T2187] gspca_mr97310a: reg write [21] error -22 [ 153.435223][ T2187] mr97310a: probe of 1-1:4.55 failed with error -22 [ 153.449264][ T2187] usb 1-1: USB disconnect, device number 18 [ 155.576435][ T5809] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 155.793706][ T5809] usb 1-1: Using ep0 maxpacket: 8 [ 155.854736][ T5809] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 155.870848][ T5809] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 155.901146][ T5809] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 155.911224][ T5809] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 155.953591][ T5809] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 155.962662][ T5809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.261852][ T5809] usb 1-1: usb_control_msg returned -71 [ 156.299163][ T5809] usbtmc 1-1:16.0: can't read capabilities [ 156.332033][ T5809] usb 1-1: USB disconnect, device number 19 [ 156.433147][ T7072] syzkaller0: entered promiscuous mode [ 156.445414][ T7072] syzkaller0: entered allmulticast mode [ 157.338737][ T7029] Set syz1 is full, maxelem 65536 reached [ 159.113765][ T2187] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 159.413545][ T2187] usb 3-1: Using ep0 maxpacket: 16 [ 159.450104][ T2187] usb 3-1: unable to get BOS descriptor or descriptor too short [ 159.535623][ T2187] usb 3-1: config 4 has an invalid interface number: 55 but max is 0 [ 159.543955][ T2187] usb 3-1: config 4 has no interface number 0 [ 159.550157][ T2187] usb 3-1: config 4 interface 55 has no altsetting 0 [ 159.572653][ T2187] usb 3-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=2f.cb [ 159.583376][ T2187] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.598230][ T2187] usb 3-1: Product: syz [ 159.602556][ T2187] usb 3-1: Manufacturer: syz [ 159.609413][ T2187] usb 3-1: SerialNumber: syz [ 159.710474][ T7100] syzkaller0: entered promiscuous mode [ 159.717452][ T7100] syzkaller0: entered allmulticast mode [ 160.095516][ T2187] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 160.101932][ T2187] gspca_mr97310a: reg write [21] error -22 [ 160.148126][ T2187] mr97310a: probe of 3-1:4.55 failed with error -22 [ 160.190987][ T2187] usb 3-1: USB disconnect, device number 14 [ 162.673662][ T5829] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 162.875492][ T5829] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 162.904472][ T5829] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 162.941241][ T5829] usb 1-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 162.964603][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.982799][ T5829] usb 1-1: Product: syz [ 162.992906][ T5829] usb 1-1: Manufacturer: syz [ 163.003016][ T5829] usb 1-1: SerialNumber: syz [ 163.268845][ T5829] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 163.280327][ T5829] usb 1-1: unit 6 not found! [ 163.320053][ T5829] usb 1-1: USB disconnect, device number 20 [ 163.404237][ T7142] syzkaller0: entered promiscuous mode [ 163.413255][ T7142] syzkaller0: entered allmulticast mode [ 163.427214][ T6125] udevd[6125]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 164.869596][ T7151] tipc: Enabled bearer , priority 0 [ 164.891015][ T7151] syzkaller0: entered promiscuous mode [ 164.898668][ T7151] syzkaller0: entered allmulticast mode [ 164.939909][ T7151] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 165.014926][ T7151] tipc: Resetting bearer [ 165.055598][ T7150] tipc: Resetting bearer [ 165.129776][ T7150] tipc: Disabling bearer [ 165.709966][ T7162] syzkaller0: entered promiscuous mode [ 165.735655][ T7162] syzkaller0: entered allmulticast mode [ 166.343600][ T5809] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 166.580088][ T5809] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 166.597707][ T5809] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 166.625097][ T5809] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 166.646601][ T5809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.667344][ T5809] usb 2-1: Product: syz [ 166.678179][ T5809] usb 2-1: Manufacturer: syz [ 166.693599][ T5809] usb 2-1: SerialNumber: syz [ 166.714795][ T5809] usb 2-1: config 0 descriptor?? [ 166.746355][ T5809] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 167.982319][ T5809] usb 2-1: USB disconnect, device number 18 [ 168.096890][ T7183] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 168.193583][ T5830] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 169.496581][ T5830] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.536650][ T5830] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 169.570698][ T5830] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 169.601087][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.644497][ T5830] usb 3-1: config 0 descriptor?? [ 169.672949][ T5830] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 169.684056][ T7200] syzkaller0: entered promiscuous mode [ 169.695863][ T7200] syzkaller0: entered allmulticast mode [ 170.283575][ T5830] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 170.509311][ T5830] usb 1-1: Using ep0 maxpacket: 16 [ 170.518611][ T5830] usb 1-1: config 0 has no interfaces? [ 170.533542][ T5830] usb 1-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=e9.aa [ 170.552804][ T5830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.567800][ T5830] usb 1-1: Product: syz [ 170.577035][ T5830] usb 1-1: Manufacturer: syz [ 170.587163][ T5830] usb 1-1: SerialNumber: syz [ 170.617711][ T5830] usb 1-1: config 0 descriptor?? [ 170.653348][ T7216] syzkaller0: entered promiscuous mode [ 170.663529][ T7216] syzkaller0: entered allmulticast mode [ 170.670319][ T7215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.695144][ T7215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.791743][ T2187] usb 3-1: USB disconnect, device number 15 [ 173.158556][ T2187] usb 1-1: USB disconnect, device number 21 [ 173.493862][ T28] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 173.700875][ T28] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 173.717846][ T28] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 173.733350][ T28] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 173.749763][ T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.761986][ T28] usb 2-1: Product: syz [ 173.767642][ T28] usb 2-1: Manufacturer: syz [ 173.772384][ T28] usb 2-1: SerialNumber: syz [ 173.788528][ T28] usb 2-1: config 0 descriptor?? [ 173.802457][ T28] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 174.353600][ T2187] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 174.493493][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 174.544564][ T2187] usb 3-1: Using ep0 maxpacket: 16 [ 174.615366][ T2187] usb 3-1: unable to get BOS descriptor or descriptor too short [ 174.630631][ T2187] usb 3-1: config 4 has an invalid interface number: 55 but max is 0 [ 174.640036][ T2187] usb 3-1: config 4 has no interface number 0 [ 174.649524][ T2187] usb 3-1: config 4 interface 55 has no altsetting 0 [ 174.659275][ T2187] usb 3-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=2f.cb [ 174.672507][ T2187] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.681032][ T2187] usb 3-1: Product: syz [ 174.685994][ T2187] usb 3-1: Manufacturer: syz [ 174.690738][ T2187] usb 3-1: SerialNumber: syz [ 174.961089][ T2187] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 174.970174][ T2187] gspca_mr97310a: reg write [21] error -22 [ 174.977418][ T2187] mr97310a: probe of 3-1:4.55 failed with error -22 [ 175.007984][ T2187] usb 3-1: USB disconnect, device number 16 [ 175.048826][ T28] usb 2-1: USB disconnect, device number 19 [ 176.703553][ T5829] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 176.769202][ T7317] syzkaller0: entered promiscuous mode [ 176.775729][ T7317] syzkaller0: entered allmulticast mode [ 176.893753][ T5829] usb 2-1: Using ep0 maxpacket: 16 [ 176.902212][ T5829] usb 2-1: unable to get BOS descriptor or descriptor too short [ 176.916071][ T5829] usb 2-1: config 4 has an invalid interface number: 55 but max is 0 [ 176.938249][ T5829] usb 2-1: config 4 has no interface number 0 [ 176.953905][ T5829] usb 2-1: config 4 interface 55 has no altsetting 0 [ 176.969264][ T5829] usb 2-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=2f.cb [ 176.985554][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.995429][ T5829] usb 2-1: Product: syz [ 176.999688][ T5829] usb 2-1: Manufacturer: syz [ 177.004937][ T5829] usb 2-1: SerialNumber: syz [ 177.117817][ T7321] tipc: Enabled bearer , priority 0 [ 177.129683][ T7321] syzkaller0: entered promiscuous mode [ 177.136672][ T7321] syzkaller0: entered allmulticast mode [ 177.157766][ T7321] tipc: Resetting bearer [ 177.174612][ T7320] tipc: Resetting bearer [ 177.196812][ T7320] tipc: Disabling bearer [ 177.580834][ T5829] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 177.593715][ T5829] gspca_mr97310a: reg write [21] error -22 [ 177.614057][ T5829] mr97310a: probe of 2-1:4.55 failed with error -22 [ 177.626621][ T5829] usb 2-1: USB disconnect, device number 20 [ 177.873989][ T7345] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 177.887867][ T5829] IPVS: starting estimator thread 0... [ 178.003921][ T7347] IPVS: using max 26 ests per chain, 62400 per kthread [ 178.227598][ T7358] tipc: Enabled bearer , priority 0 [ 178.240072][ T7358] syzkaller0: entered promiscuous mode [ 178.248615][ T7358] syzkaller0: entered allmulticast mode [ 178.279020][ T7358] tipc: Resetting bearer [ 178.290766][ T7357] tipc: Resetting bearer [ 178.318100][ T7357] tipc: Disabling bearer [ 179.163671][ T5830] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 179.353562][ T5830] usb 2-1: Using ep0 maxpacket: 16 [ 179.361031][ T5830] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 179.376653][ T5830] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.390107][ T5830] usb 2-1: config 0 has no interface number 0 [ 179.404194][ T5830] usb 2-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 179.423549][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.431558][ T5830] usb 2-1: Product: syz [ 179.437351][ T5830] usb 2-1: Manufacturer: syz [ 179.441974][ T5830] usb 2-1: SerialNumber: syz [ 179.451440][ T5830] usb 2-1: config 0 descriptor?? [ 179.456685][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 179.474945][ T5830] usb 2-1: Found UVC 0.00 device syz (046c:14e8) [ 179.481330][ T5830] usb 2-1: No valid video chain found. [ 179.495601][ T7390] syzkaller0: entered promiscuous mode [ 179.503346][ T7390] syzkaller0: entered allmulticast mode [ 179.654334][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 179.662147][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 179.694647][ T9] usb 5-1: config 4 has an invalid interface number: 55 but max is 0 [ 179.700445][ T5810] usb 2-1: USB disconnect, device number 21 [ 179.709090][ T9] usb 5-1: config 4 has no interface number 0 [ 179.725542][ T9] usb 5-1: config 4 interface 55 has no altsetting 0 [ 179.745955][ T9] usb 5-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=2f.cb [ 179.763812][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.771818][ T9] usb 5-1: Product: syz [ 179.784514][ T9] usb 5-1: Manufacturer: syz [ 179.789154][ T9] usb 5-1: SerialNumber: syz [ 180.286737][ T7381] netlink: 148 bytes leftover after parsing attributes in process `syz.4.502'. [ 180.348274][ T7408] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 180.468327][ T7381] netlink: 148 bytes leftover after parsing attributes in process `syz.4.502'. [ 180.649829][ T9] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 180.663573][ T9] gspca_mr97310a: reg write [21] error -22 [ 180.674494][ T9] mr97310a: probe of 5-1:4.55 failed with error -22 [ 180.693804][ T9] usb 5-1: USB disconnect, device number 3 [ 180.733063][ T7416] syzkaller0: entered promiscuous mode [ 180.743887][ T7416] syzkaller0: entered allmulticast mode [ 181.423228][ T7420] picdev_read: 1376 callbacks suppressed [ 181.423240][ T7420] kvm: pic: non byte read [ 181.463765][ T7420] kvm: pic: non byte read [ 182.312170][ T7449] syzkaller0: entered promiscuous mode [ 182.335760][ T7449] syzkaller0: entered allmulticast mode [ 182.705050][ T7455] tipc: Enabled bearer , priority 0 [ 182.724834][ T7455] syzkaller0: entered promiscuous mode [ 182.730463][ T7455] syzkaller0: entered allmulticast mode [ 182.784159][ T7455] tipc: Resetting bearer [ 182.814279][ T7454] tipc: Resetting bearer [ 182.854652][ T7454] tipc: Disabling bearer [ 183.065597][ T7466] syzkaller0: entered promiscuous mode [ 183.071966][ T7466] syzkaller0: entered allmulticast mode [ 183.091501][ T7466] tipc: Enabled bearer , priority 0 [ 183.100494][ T7465] tipc: Resetting bearer [ 183.102799][ T7468] netlink: 20 bytes leftover after parsing attributes in process `syz.2.533'. [ 183.132303][ T7465] tipc: Disabling bearer [ 183.203636][ T5829] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 183.243824][ T28] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 183.358650][ T7475] syzkaller0: entered promiscuous mode [ 183.364491][ T7475] syzkaller0: entered allmulticast mode [ 183.403671][ T5829] usb 5-1: Using ep0 maxpacket: 16 [ 183.412786][ T5829] usb 5-1: unable to get BOS descriptor or descriptor too short [ 183.425519][ T5829] usb 5-1: config 4 has an invalid interface number: 55 but max is 0 [ 183.435422][ T5829] usb 5-1: config 4 has no interface number 0 [ 183.441575][ T5829] usb 5-1: config 4 interface 55 has no altsetting 0 [ 183.455386][ T5829] usb 5-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=2f.cb [ 183.464603][ T28] usb 2-1: Using ep0 maxpacket: 32 [ 183.470251][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.481072][ T5829] usb 5-1: Product: syz [ 183.485526][ T28] usb 2-1: config 0 has too many interfaces: 193, using maximum allowed: 32 [ 183.498292][ T5829] usb 5-1: Manufacturer: syz [ 183.502944][ T5829] usb 5-1: SerialNumber: syz [ 183.510531][ T28] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 193 [ 183.523237][ T28] usb 2-1: config 0 has no interface number 0 [ 183.554134][ T28] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.564023][ T28] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00 [ 183.574156][ T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.604459][ T28] usb 2-1: config 0 descriptor?? [ 183.616909][ T28] usbhid 2-1:0.1: couldn't find an input interrupt endpoint [ 183.871916][ T7488] netlink: 148 bytes leftover after parsing attributes in process `syz.4.529'. [ 183.923675][ T5811] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 183.962517][ T7488] netlink: 148 bytes leftover after parsing attributes in process `syz.4.529'. [ 183.988789][ T5829] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 184.003289][ T5829] gspca_mr97310a: reg write [21] error -22 [ 184.003331][ T5829] mr97310a: probe of 5-1:4.55 failed with error -22 [ 184.016018][ T5829] usb 5-1: USB disconnect, device number 4 [ 184.133593][ T5811] usb 3-1: Using ep0 maxpacket: 32 [ 184.140333][ T5811] usb 3-1: config 0 has an invalid interface number: 119 but max is 0 [ 184.148921][ T5811] usb 3-1: config 0 has no interface number 0 [ 184.155378][ T5811] usb 3-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 184.170651][ T5811] usb 3-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 184.181898][ T5811] usb 3-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 184.197593][ T5811] usb 3-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 184.207151][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.215428][ T5811] usb 3-1: Product: syz [ 184.219710][ T5811] usb 3-1: Manufacturer: syz [ 184.224714][ T5811] usb 3-1: SerialNumber: syz [ 184.239483][ T5811] usb 3-1: config 0 descriptor?? [ 184.245455][ T7482] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 184.257153][ T5811] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.119/input/input19 [ 184.466037][ T5829] usb 3-1: USB disconnect, device number 17 [ 184.539636][ T7497] binder: BINDER_SET_CONTEXT_MGR already set [ 184.546245][ T7497] binder: 7496:7497 ioctl 4018620d 200000004a80 returned -16 [ 184.942495][ T7505] syzkaller0: entered promiscuous mode [ 184.949467][ T7505] syzkaller0: entered allmulticast mode [ 185.440542][ T5811] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 185.603588][ T5830] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 185.626754][ T5811] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE8, skipping [ 185.642197][ T5811] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 185.666198][ T5811] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 185.681125][ T5811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.708264][ T5811] usb 1-1: Product: syz [ 185.712696][ T5811] usb 1-1: Manufacturer: syz [ 185.722103][ T5811] usb 1-1: SerialNumber: syz [ 185.736085][ T5811] usb 1-1: config 0 descriptor?? [ 185.804285][ T5830] usb 3-1: Using ep0 maxpacket: 16 [ 185.858271][ T5830] usb 3-1: unable to get BOS descriptor or descriptor too short [ 185.874880][ T5830] usb 3-1: config 4 has an invalid interface number: 55 but max is 0 [ 185.883125][ T5830] usb 3-1: config 4 has no interface number 0 [ 185.893264][ T5830] usb 3-1: config 4 interface 55 has no altsetting 0 [ 185.907663][ T5830] usb 3-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=2f.cb [ 185.916832][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.925208][ T5830] usb 3-1: Product: syz [ 185.932155][ T5830] usb 3-1: Manufacturer: syz [ 185.937541][ T5830] usb 3-1: SerialNumber: syz [ 185.988799][ T5811] usb 2-1: USB disconnect, device number 22 [ 186.122518][ T7530] tipc: Enabled bearer , priority 0 [ 186.130087][ T7530] syzkaller0: entered promiscuous mode [ 186.136227][ T7530] syzkaller0: entered allmulticast mode [ 186.145263][ T7530] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 186.176780][ T7530] tipc: Resetting bearer [ 186.186730][ T7529] tipc: Resetting bearer [ 186.209819][ T7529] tipc: Disabling bearer [ 186.381633][ T7516] netlink: 148 bytes leftover after parsing attributes in process `syz.2.551'. [ 186.414216][ T7536] syzkaller0: entered promiscuous mode [ 186.419792][ T7536] syzkaller0: entered allmulticast mode [ 186.455558][ T7516] netlink: 148 bytes leftover after parsing attributes in process `syz.2.551'. [ 186.487421][ T5830] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 186.493856][ T5830] gspca_mr97310a: reg write [21] error -22 [ 186.499832][ T5830] mr97310a: probe of 3-1:4.55 failed with error -22 [ 186.529482][ T5830] usb 3-1: USB disconnect, device number 18 [ 186.799129][ T7544] binder: BINDER_SET_CONTEXT_MGR already set [ 186.816523][ T7544] binder: 7543:7544 ioctl 4018620d 200000004a80 returned -16 [ 187.411744][ T7555] syzkaller0: entered promiscuous mode [ 187.417509][ T7555] syzkaller0: entered allmulticast mode [ 188.392844][ T9] usb 1-1: USB disconnect, device number 22 [ 189.712738][ T7565] tipc: Enabled bearer , priority 0 [ 189.721810][ T7566] syzkaller0: entered promiscuous mode [ 189.737530][ T7566] syzkaller0: entered allmulticast mode [ 189.799398][ T7566] tipc: Resetting bearer [ 189.821539][ T7566] tipc: Disabling bearer [ 189.956672][ T2187] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 190.155403][ T2187] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.252416][ T2187] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.263566][ T2187] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 190.276891][ T2187] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 190.286982][ T2187] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.313843][ T2187] usb 1-1: config 0 descriptor?? [ 190.323580][ T28] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 190.513733][ T28] usb 5-1: Using ep0 maxpacket: 16 [ 190.526964][ T28] usb 5-1: unable to get BOS descriptor or descriptor too short [ 190.549676][ T28] usb 5-1: config 4 has an invalid interface number: 55 but max is 0 [ 190.573811][ T28] usb 5-1: config 4 has no interface number 0 [ 190.580539][ T28] usb 5-1: config 4 interface 55 has no altsetting 0 [ 190.591128][ T28] usb 5-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=2f.cb [ 190.600733][ T28] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.608872][ T28] usb 5-1: Product: syz [ 190.613068][ T28] usb 5-1: Manufacturer: syz [ 190.617738][ T28] usb 5-1: SerialNumber: syz [ 190.747550][ T5829] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 190.763316][ T2187] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x4 [ 190.771669][ T2187] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 190.787294][ T2187] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 190.938388][ T5829] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE8, skipping [ 190.953605][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 190.975629][ T5829] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 190.991103][ T7592] netlink: 148 bytes leftover after parsing attributes in process `syz.4.573'. [ 191.000399][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.015027][ T5829] usb 3-1: Product: syz [ 191.024984][ T5829] usb 3-1: Manufacturer: syz [ 191.043130][ T5829] usb 3-1: SerialNumber: syz [ 191.070468][ T5829] usb 3-1: config 0 descriptor?? [ 191.081399][ T7592] netlink: 148 bytes leftover after parsing attributes in process `syz.4.573'. [ 191.127331][ T28] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 191.144958][ T28] gspca_mr97310a: reg write [21] error -22 [ 191.150871][ T28] mr97310a: probe of 5-1:4.55 failed with error -22 [ 191.160993][ T28] usb 5-1: USB disconnect, device number 5 [ 191.516888][ T7609] syzkaller0: entered promiscuous mode [ 191.522427][ T7609] syzkaller0: entered allmulticast mode [ 192.900446][ T5809] usb 1-1: USB disconnect, device number 23 [ 193.277121][ T7614] tipc: Enabling of bearer rejected, failed to enable media [ 193.531675][ T5809] usb 3-1: USB disconnect, device number 19 [ 193.821773][ T7649] syzkaller0: entered promiscuous mode [ 193.832497][ T7649] syzkaller0: entered allmulticast mode [ 193.849988][ T7649] tipc: Enabled bearer , priority 0 [ 193.863681][ T5829] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 193.888690][ T7648] tipc: Resetting bearer [ 193.933007][ T7648] tipc: Disabling bearer [ 194.057871][ T5829] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 194.114017][ T5829] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 194.148693][ T5829] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 194.177391][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.187817][ T27] audit: type=1326 audit(1781370485.460:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7650 comm="syz.0.588" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ebf19ce59 code=0x7ffc0000 [ 194.232606][ T5829] usb 5-1: Product: syz [ 194.250348][ T5829] usb 5-1: Manufacturer: syz [ 194.271468][ T5829] usb 5-1: SerialNumber: syz [ 194.298379][ T27] audit: type=1326 audit(1781370485.460:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7650 comm="syz.0.588" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ebf19ce59 code=0x7ffc0000 [ 194.334493][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.345347][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.374720][ T5829] usb 5-1: config 0 descriptor?? [ 194.407200][ T27] audit: type=1326 audit(1781370485.500:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7650 comm="syz.0.588" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f0ebf19ce59 code=0x7ffc0000 [ 194.411698][ T5829] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 194.439481][ T27] audit: type=1326 audit(1781370485.500:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7650 comm="syz.0.588" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ebf19ce59 code=0x7ffc0000 [ 194.489372][ T27] audit: type=1326 audit(1781370485.500:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7650 comm="syz.0.588" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ebf19ce59 code=0x7ffc0000 [ 194.581844][ T7653] syzkaller0: entered promiscuous mode [ 194.592938][ T7653] syzkaller0: entered allmulticast mode [ 195.136939][ T5810] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 195.344808][ T5810] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE8, skipping [ 195.360091][ T5810] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 195.382655][ T5810] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 195.392903][ T5810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.401095][ T5810] usb 3-1: Product: syz [ 195.408017][ T5810] usb 3-1: Manufacturer: syz [ 195.412721][ T5810] usb 3-1: SerialNumber: syz [ 195.420975][ T5810] usb 3-1: config 0 descriptor?? [ 195.657319][ T5829] usb 5-1: USB disconnect, device number 6 [ 196.391392][ T7655] tipc: Enabled bearer , priority 0 [ 196.398421][ T7658] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 196.416305][ T5781] Bluetooth: hci3: command 0x0406 tx timeout [ 196.419785][ T5087] Bluetooth: hci0: command 0x0406 tx timeout [ 196.422422][ T5781] Bluetooth: hci1: command 0x0406 tx timeout [ 196.428770][ T5087] Bluetooth: hci2: command 0x0406 tx timeout [ 196.463252][ T7669] tipc: Resetting bearer [ 196.487022][ T7654] tipc: Disabling bearer [ 197.153767][ T5829] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 197.263631][ T5809] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 197.383841][ T5829] usb 1-1: Using ep0 maxpacket: 16 [ 197.426762][ T5829] usb 1-1: unable to get BOS descriptor or descriptor too short [ 197.456312][ T5829] usb 1-1: config 4 has an invalid interface number: 55 but max is 0 [ 197.485714][ T5829] usb 1-1: config 4 has no interface number 0 [ 197.492093][ T5829] usb 1-1: config 4 interface 55 has no altsetting 0 [ 197.511499][ T5829] usb 1-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=2f.cb [ 197.526157][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.537891][ T5829] usb 1-1: Product: syz [ 197.543385][ T5829] usb 1-1: Manufacturer: syz [ 197.549435][ T5829] usb 1-1: SerialNumber: syz [ 197.886698][ T5829] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 197.924584][ T5829] gspca_mr97310a: reg write [21] error -22 [ 197.931781][ T2187] usb 3-1: USB disconnect, device number 20 [ 197.959047][ T5829] mr97310a: probe of 1-1:4.55 failed with error -22 [ 198.007581][ T5829] usb 1-1: USB disconnect, device number 24 [ 198.306682][ T7704] netlink: 20 bytes leftover after parsing attributes in process `syz.2.605'. [ 198.995428][ T7725] tipc: Enabled bearer , priority 0 [ 199.027171][ T7725] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 199.061986][ T7725] tipc: Resetting bearer [ 199.118180][ T7723] tipc: Disabling bearer [ 199.833647][ T5829] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 200.905380][ T5829] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE8, skipping [ 200.916400][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 200.932899][ T5829] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 200.943491][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.951504][ T5829] usb 3-1: Product: syz [ 200.973863][ T5829] usb 3-1: Manufacturer: syz [ 200.978703][ T5829] usb 3-1: SerialNumber: syz [ 200.993126][ T5829] usb 3-1: config 0 descriptor?? [ 201.277791][ T7747] netlink: 20 bytes leftover after parsing attributes in process `syz.4.616'. [ 201.731723][ T7760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.620'. [ 202.553777][ T5810] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 202.823680][ T5810] usb 5-1: Using ep0 maxpacket: 8 [ 202.904000][ T5810] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 203.001546][ T5810] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 203.126792][ T5810] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 203.140575][ T5829] usb 3-1: USB disconnect, device number 21 [ 203.195282][ T5810] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 203.233508][ T5810] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 203.302644][ T5810] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 203.337806][ T5810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.573622][ T5810] usb 5-1: usb_control_msg returned -32 [ 203.579260][ T5810] usbtmc 5-1:16.0: can't read capabilities [ 203.810373][ T5810] usb 5-1: USB disconnect, device number 8 [ 204.223754][ T23] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 204.651005][ T23] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE8, skipping [ 204.788915][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 204.915573][ T23] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 204.943579][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.988403][ T23] usb 2-1: Product: syz [ 204.992617][ T23] usb 2-1: Manufacturer: syz [ 205.016083][ T23] usb 2-1: SerialNumber: syz [ 205.041043][ T23] usb 2-1: config 0 descriptor?? [ 205.204609][ T7839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.639'. [ 205.236064][ T7839] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 205.243777][ T7839] IPv6: NLM_F_CREATE should be set when creating new route [ 205.279650][ T7840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.639'. [ 205.312827][ T7840] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 206.010171][ T7847] syzkaller0: entered promiscuous mode [ 206.034005][ T7847] syzkaller0: entered allmulticast mode [ 207.034249][ T28] usb 2-1: USB disconnect, device number 23 [ 208.411566][ T7880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.648'. [ 208.449687][ T7880] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 208.457021][ T7880] IPv6: NLM_F_CREATE should be set when creating new route [ 208.483559][ T7883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.648'. [ 208.500015][ T7883] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 208.903610][ T5830] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 208.963652][ T5809] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 209.805964][ T5830] usb 5-1: Using ep0 maxpacket: 32 [ 209.894383][ T5809] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE8, skipping [ 209.939781][ T5830] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 209.968265][ T5809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 210.042919][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.154561][ T5809] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 210.224942][ T5830] usb 5-1: config 0 descriptor?? [ 210.244648][ T5809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.341873][ T5809] usb 2-1: Product: syz [ 210.394019][ T5809] usb 2-1: Manufacturer: syz [ 210.457985][ T5809] usb 2-1: SerialNumber: syz [ 210.566925][ T5809] usb 2-1: config 0 descriptor?? [ 210.579516][ T5830] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 210.614461][ T5830] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 210.638645][ T5830] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 210.658589][ T5830] usb 5-1: media controller created [ 210.678320][ T5830] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 210.810289][ T7889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.652'. [ 210.824177][ T7889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.833174][ T7889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.922712][ T5829] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 210.966747][ T5830] az6027: usb out operation failed. (-71) [ 210.974260][ T5830] az6027: usb out operation failed. (-71) [ 210.980107][ T5830] stb0899_attach: Driver disabled by Kconfig [ 210.986719][ T5830] az6027: no front-end attached [ 210.986719][ T5830] [ 210.995467][ T5830] az6027: usb out operation failed. (-71) [ 211.001286][ T5830] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 211.009819][ T5830] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input20 [ 211.025754][ T5830] dvb-usb: schedule remote query interval to 400 msecs. [ 211.035790][ T5830] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 211.053191][ T5830] usb 5-1: USB disconnect, device number 9 [ 211.102393][ T5830] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 211.129328][ T5829] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 211.147701][ T5829] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.169895][ T5829] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 211.189857][ T5829] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 211.205555][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.216465][ T5829] usb 3-1: config 0 descriptor?? [ 211.459909][ T7913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.660'. [ 211.474998][ T7913] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 211.482251][ T7913] IPv6: NLM_F_CREATE should be set when creating new route [ 211.492068][ T7913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.660'. [ 211.501253][ T7913] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 211.642185][ T5829] usb 3-1: string descriptor 0 read error: -71 [ 211.658591][ T5829] usb 3-1: USB disconnect, device number 22 [ 212.625286][ T9] usb 2-1: USB disconnect, device number 24 [ 214.653562][ T5829] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 214.855293][ T5829] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 214.863791][ T5829] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.874294][ T5829] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 214.883293][ T5829] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 214.894245][ T7956] syzkaller0: entered promiscuous mode [ 214.899754][ T7956] syzkaller0: entered allmulticast mode [ 214.907116][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.919818][ T5829] usb 3-1: config 0 descriptor?? [ 215.043615][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 215.375583][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE8, skipping [ 215.493934][ T5829] usb 3-1: string descriptor 0 read error: -71 [ 215.587361][ T5829] usb 3-1: USB disconnect, device number 23 [ 215.934903][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 215.948653][ T9] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 215.957826][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.973664][ T9] usb 2-1: Product: syz [ 215.978286][ T9] usb 2-1: Manufacturer: syz [ 215.982899][ T9] usb 2-1: SerialNumber: syz [ 215.991357][ T9] usb 2-1: config 0 descriptor?? [ 216.672249][ T7986] syzkaller0: entered promiscuous mode [ 216.681080][ T7986] syzkaller0: entered allmulticast mode [ 217.740398][ T8000] binder: 7999:8000 ioctl 4018620d 0 returned -22 [ 217.798639][ T5829] usb 2-1: USB disconnect, device number 25 [ 219.140463][ T8018] syzkaller0: entered promiscuous mode [ 219.188310][ T8018] syzkaller0: entered allmulticast mode [ 219.486401][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 219.784014][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 219.849414][ T9] usb 5-1: config 0 has no interfaces? [ 219.928256][ T9] usb 5-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 220.012496][ T9] usb 5-1: New USB device strings: Mfr=251, Product=0, SerialNumber=0 [ 220.051621][ T9] usb 5-1: Manufacturer: syz [ 220.094814][ T9] usb 5-1: config 0 descriptor?? [ 220.112674][ T8032] netlink: 12 bytes leftover after parsing attributes in process `syz.1.702'. [ 220.122371][ T8032] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 220.129699][ T8032] IPv6: NLM_F_CREATE should be set when creating new route [ 220.139769][ T8032] netlink: 12 bytes leftover after parsing attributes in process `syz.1.702'. [ 220.148909][ T8032] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 220.283236][ T8038] binder: BINDER_SET_CONTEXT_MGR already set [ 220.290093][ T8038] binder: 8035:8038 ioctl 4018620d 200000004a80 returned -16 [ 220.623832][ T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 220.818421][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 220.836463][ T9] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 220.856839][ T9] usb 1-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 220.868928][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.880228][ T9] usb 1-1: Product: syz [ 220.888009][ T9] usb 1-1: Manufacturer: syz [ 220.895394][ T9] usb 1-1: SerialNumber: syz [ 221.192167][ T9] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 221.260721][ T9] usb 1-1: USB disconnect, device number 25 [ 222.197011][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 222.200970][ T5829] usb 5-1: USB disconnect, device number 10 [ 222.368477][ T8062] netlink: 12 bytes leftover after parsing attributes in process `syz.4.715'. [ 222.378323][ T8062] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 222.387384][ T8062] netlink: 12 bytes leftover after parsing attributes in process `syz.4.715'. [ 222.396502][ T8062] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 222.451500][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.476758][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 222.510331][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 222.538562][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.564767][ T9] usb 3-1: config 0 descriptor?? [ 222.576980][ T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 222.658664][ T8068] syzkaller0: entered promiscuous mode [ 222.668083][ T8068] syzkaller0: entered allmulticast mode [ 223.033719][ T5829] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 223.415220][ T5829] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 223.434023][ T5829] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 223.445731][ T5829] usb 2-1: config 0 interface 0 has no altsetting 0 [ 223.455595][ T5829] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 223.466237][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 223.475747][ T5829] usb 2-1: Product: syz [ 223.479949][ T5829] usb 2-1: Manufacturer: syz [ 223.484879][ T5829] usb 2-1: SerialNumber: syz [ 223.492964][ T5829] usb 2-1: config 0 descriptor?? [ 223.516715][ T8083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.532814][ T5829] usb 2-1: selecting invalid altsetting 0 [ 223.604060][ T8083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.115320][ T5830] usb 2-1: USB disconnect, device number 26 [ 224.853786][ T23] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 224.855063][ T5830] usb 3-1: USB disconnect, device number 24 [ 225.049957][ T8108] netlink: 'syz.2.723': attribute type 9 has an invalid length. [ 225.059542][ T23] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 225.079330][ T8108] macvlan2: entered promiscuous mode [ 225.087373][ T23] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 225.101164][ T8108] macvlan2: entered allmulticast mode [ 225.115566][ T23] usb 5-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 225.143068][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.168399][ T23] usb 5-1: Product: syz [ 225.172741][ T23] usb 5-1: Manufacturer: syz [ 225.184379][ T23] usb 5-1: SerialNumber: syz [ 225.452420][ T23] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 225.513041][ T8116] syzkaller0: entered promiscuous mode [ 225.534745][ T8116] syzkaller0: entered allmulticast mode [ 225.559681][ T23] usb 5-1: USB disconnect, device number 11 [ 225.631235][ T6125] udevd[6125]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 226.184008][ T23] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 226.323816][ T28] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 226.401989][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.413659][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 226.451469][ T23] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 226.473271][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.496923][ T8154] syzkaller0: entered promiscuous mode [ 226.502446][ T8154] syzkaller0: entered allmulticast mode [ 226.507548][ T23] usb 3-1: config 0 descriptor?? [ 226.515082][ T28] usb 1-1: device descriptor read/64, error -71 [ 226.536290][ T23] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 226.816643][ T28] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 227.086711][ T28] usb 1-1: device descriptor read/64, error -71 [ 227.300365][ T28] usb usb1-port1: attempt power cycle [ 227.688351][ T8174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.714469][ T8173] syzkaller0: entered promiscuous mode [ 227.714745][ T8174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.721070][ T8173] syzkaller0: entered allmulticast mode [ 227.895558][ T28] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 227.944988][ T28] usb 1-1: device descriptor read/8, error -71 [ 228.224680][ T28] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 228.353897][ T28] usb 1-1: device descriptor read/8, error -71 [ 228.477402][ T28] usb usb1-port1: unable to enumerate USB device [ 228.931996][ T5809] usb 3-1: USB disconnect, device number 25 [ 229.823654][ T5809] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 230.928404][ T5809] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE8, skipping [ 230.939203][ T5809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 230.952853][ T5809] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 230.963994][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.972020][ T5809] usb 3-1: Product: syz [ 230.976496][ T5809] usb 3-1: Manufacturer: syz [ 230.981160][ T5809] usb 3-1: SerialNumber: syz [ 231.076262][ T5809] usb 3-1: config 0 descriptor?? [ 231.320708][ T8] usb 3-1: USB disconnect, device number 26 [ 231.350158][ T8235] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 231.493694][ T28] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 231.663659][ T28] usb 2-1: device descriptor read/64, error -71 [ 231.953620][ T28] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 232.116913][ T28] usb 2-1: device descriptor read/64, error -71 [ 232.255357][ T28] usb usb2-port1: attempt power cycle [ 232.683784][ T28] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 232.764121][ T28] usb 2-1: device descriptor read/8, error -71 [ 233.043626][ T28] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 233.074017][ T28] usb 2-1: device descriptor read/8, error -71 [ 233.193772][ T28] usb usb2-port1: unable to enumerate USB device [ 233.363841][ T5773] Bluetooth: hci0: command 0x0406 tx timeout [ 233.365069][ T8233] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 234.252827][ T8233] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 234.283114][ T8233] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 234.290134][ T8233] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 234.301411][ T8233] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 234.308226][ T8233] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 234.318556][ T8233] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 234.326775][ T8233] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 234.337841][ T8233] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 234.344289][ T8233] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 234.352272][ T8233] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 234.590032][ T8258] syzkaller0: entered promiscuous mode [ 234.607257][ T8258] syzkaller0: entered allmulticast mode [ 234.633714][ T28] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 234.813739][ T5830] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 235.005308][ T5830] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 235.023677][ T28] usb 5-1: device not accepting address 12, error -71 [ 236.410244][ T5773] Bluetooth: hci0: command 0x0406 tx timeout [ 236.410261][ T5778] Bluetooth: hci3: command 0x0406 tx timeout [ 236.416352][ T5773] Bluetooth: hci2: command 0x0406 tx timeout [ 236.416393][ T5773] Bluetooth: hci1: command 0x0406 tx timeout [ 236.422480][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 236.744899][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.892071][ T5830] usb 3-1: config 0 descriptor?? [ 238.305251][ T5830] usb 3-1: can't set config #0, error -71 [ 238.595785][ T5830] usb 3-1: USB disconnect, device number 27 [ 238.599780][ T5773] Bluetooth: hci3: command 0x0406 tx timeout [ 238.608189][ T5773] Bluetooth: hci2: command 0x0406 tx timeout [ 238.743336][ T8295] syzkaller0: entered promiscuous mode [ 238.752218][ T8295] syzkaller0: entered allmulticast mode [ 238.803849][ T5773] Bluetooth: hci4: command 0x0c1a tx timeout [ 238.810389][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 239.383973][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 239.623646][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.243453][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 240.883676][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 241.040469][ T9] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 241.071227][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.085663][ T9] usb 5-1: config 0 descriptor?? [ 241.094739][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 241.835725][ T8339] netlink: 384 bytes leftover after parsing attributes in process `syz.2.791'. [ 243.371821][ T8] usb 5-1: USB disconnect, device number 14 [ 246.443665][ T28] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 246.665514][ T28] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.677429][ T28] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 246.688582][ T28] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.704979][ T28] usb 5-1: config 0 descriptor?? [ 246.723074][ T28] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 248.884501][ T5811] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 249.082599][ T5811] usb 3-1: unable to get BOS descriptor or descriptor too short [ 249.091460][ T5811] usb 3-1: not running at top speed; connect to a high speed hub [ 249.101203][ T5811] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.111418][ T5811] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 249.120136][ T5829] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 249.123162][ T5811] usb 3-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice=e7.3f [ 249.138485][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.146820][ T5811] usb 3-1: Product: syz [ 249.151010][ T5811] usb 3-1: Manufacturer: syz [ 249.156421][ T5811] usb 3-1: SerialNumber: syz [ 249.196748][ T9] usb 5-1: USB disconnect, device number 15 [ 249.353952][ T5829] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.372360][ T5829] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 249.389352][ T5829] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 249.412839][ T5829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.431345][ T5829] usb 2-1: config 0 descriptor?? [ 249.474238][ T28] IPVS: starting estimator thread 0... [ 249.574521][ T8427] IPVS: using max 20 ests per chain, 48000 per kthread [ 249.580738][ T8430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.598224][ T8430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.205421][ T8] usb 2-1: USB disconnect, device number 31 [ 251.124642][ T5811] usb 3-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8213); report any issues to g@b4.vu [ 251.136829][ T5811] usb 3-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 251.168283][ T5811] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 251.179768][ T5811] usb 3-1: USB disconnect, device number 28 [ 251.261666][ T6125] udevd[6125]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 252.033528][ T5811] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 252.226328][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.270433][ T5811] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 252.302269][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.328851][ T5811] usb 2-1: config 0 descriptor?? [ 252.349461][ T5811] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 254.781999][ T5829] usb 2-1: USB disconnect, device number 32 [ 254.784685][ T8508] syzkaller0: entered promiscuous mode [ 254.814871][ T8508] syzkaller0: entered allmulticast mode [ 255.483701][ T6441] unregister_netdevice: waiting for vcan0 to become free. Usage count = 2 [ 255.768217][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.776405][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.793612][ T5829] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 256.016183][ T5829] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.027829][ T5829] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.037699][ T5829] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 256.049819][ T5829] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.059829][ T5829] usb 1-1: config 0 descriptor?? [ 256.479894][ T5829] usbhid 1-1:0.0: can't add hid device: -71 [ 256.486399][ T5829] usbhid: probe of 1-1:0.0 failed with error -71 [ 256.495717][ T5829] usb 1-1: USB disconnect, device number 30