last executing test programs: 28.00094866s ago: executing program 3 (id=1535): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff020000"], 0xffe) 17.825351012s ago: executing program 3 (id=1559): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x67c, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) accept$alg(r3, 0x0, 0x0) 17.473075529s ago: executing program 2 (id=1561): socket$packet(0x11, 0x2, 0x300) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x7, 0x0, 0x0) r0 = syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100), &(0x7f0000000000), 0x0) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x7, 0x0, 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) syz_emit_vhci(0x0, 0x0) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e30", 0x3, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r4) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f00000002c0)={0x0, [[0x3, 0x8, 0x80000000, 0x1, 0x8, 0x1, 0x6959, 0x1], [0x1, 0xffffe9c5, 0x1000, 0x7, 0x38e5, 0x38, 0x3ff, 0x3], [0x3, 0x7, 0x800, 0xd62d, 0x9, 0x5, 0x3, 0x1]], '\x00', [{0x40, 0xba, 0x0, 0x1, 0x1, 0x1}, {0x800, 0x21, 0x1}, {0xfffffffe, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x7f, 0x47, 0x1, 0x0, 0x1}, {0x7, 0x6, 0x1}, {0x80000001, 0xfffffffb, 0x1, 0x0, 0x1}, {0x5, 0x7, 0x0, 0x1, 0x1, 0x1}, {0x0, 0x3, 0x0, 0x0, 0x1, 0x1}, {0x9, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x400000, 0x1, 0x0, 0x1}, {0x7, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x6, 0x9, 0x1, 0x0, 0x1}], '\x00', 0xed21}) unshare(0x8000000) r5 = semget$private(0x0, 0x4000, 0x0) semtimedop(r5, &(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x20a00) r7 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, 0x0) ioctl$VIDIOC_QBUF(r7, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x1, 0x3, {}, {0x0, 0x1, 0x0, 0x0, 0x1, 0xfe, "8000"}, 0xfffffffc, 0x2, {}, 0x20800}) mmap$snddsp_control(&(0x7f0000ffa000/0x3000)=nil, 0x1000, 0x2000004, 0x110, r6, 0x83000000) 15.230211698s ago: executing program 2 (id=1563): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/198, 0x0, 0x8000000}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3, 0x3}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) 14.992247153s ago: executing program 2 (id=1565): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x21c8ccf7}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xb}, {0xe, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc1400e8034788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 14.313772868s ago: executing program 3 (id=1568): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000044) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f00000005c0)="bad330fbc93f8b78040000ea0756", 0xe, 0x4041, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) 12.066287097s ago: executing program 1 (id=1572): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_LIST_PHY(r0, 0x0, 0x40000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000200)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001c00)=ANY=[@ANYBLOB="28040000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r6], 0x428}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f00000000b060102000000000000000008000007400008800c00078005000300050000000c00078008000940000000080c00078008000a40000001ff0c00078008000840000000210c00078008000940000100004800078008000b40fffffff906001d400000000008000a40000001ff0c001b40000000000000052d0900130073797a3200000000060004404e2200000900120073797a32000000000900020073797a31000000000c00078008000640000000021c0007801800148014000240ff01edff00000000000000000000000120000880100007800c00148008000140000000000c0007800800084000000052"], 0xf0}, 0x1, 0x0, 0x0, 0x40040}, 0x4000894) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000001340)) write$dsp(r7, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x20940, 0x0) 10.198102327s ago: executing program 0 (id=1573): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) pread64(r3, 0x0, 0x0, 0x200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) 10.108994429s ago: executing program 1 (id=1574): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x3, 0x9, 0x8}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) sendto$inet6(r0, &(0x7f00000000c0)="11", 0x1, 0x44004, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback, 0xc5f}, 0x1c) 9.701642289s ago: executing program 1 (id=1575): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000002700)=""/73, 0x0, 0x60000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/198, 0x0, 0x8000000}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3, 0x3}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) 9.423234064s ago: executing program 1 (id=1576): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x66, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0x7, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 9.119241361s ago: executing program 0 (id=1578): pipe2$9p(&(0x7f0000001900), 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf67000000000000150002000fff52e84407000009300000d60600000ee60000bf050000000000001c63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070400000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999eef9d60bb39d0af449deaa27ea949e8f9000d885deea2783835e29eba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000400036c17fb01dde179c1f2686ee970d6482a2e71a55d6ebe700b3be005e47ef55e0dd81244b18590e000000000000356d82e43407a6d7fa94b21002f06cd247b126b6349ab62d7b07ba0a71a72145edade9941f49f300a8c8913e0e4ea9e4c77740ab3312edee62a4dc2fc85755d387bfa1bc9b49da28724ba9cd79fbee8f97af876d0e30c19555ffdd7d73815b459f4763c6222175c974be2f76fb5f330b015a68587a75c013000000000000000000000003000000000000d6ddc46e58eff8f4fbadfc6a3af8123b7f42407107000cdc9d7820c4eb67cc0f8b5fe9258eeacb5776aebbab3d5c55020000006082778366dadfc36029633e0514cbcee1f3928970bde148c940434f33acd377cbad17673b2d30b6339255c98eba97efb4e9ac1f11be815dd6045592edcbee7f253ec74c7c1313505bd7ff8fd58b3a6569c91dbdef1df585aeaea7346a2a65caee5c85f9eddeeeee3c8a2e523c864ac430eb47cb4d0c8767b9d4125661b5a1a170c04b64da3a99ddb93bf14fae3ca2d1e882375b8dbac83978e136c34f90b33cc0eeb57debcfe26589efc08124d5d62a7e593c9738a50171adf051ea4f07e7e7e770c2016eeacbe8511afffffbea75759a1ea5404f5453c0b5c46c9700808c096cf8cf5223f341cb003841b5cd224c1b381d56afebe9f99a00e3cd94dc0bb7af9e8709db487cc4d9b3b96723d69d512ddd57b0dee9b9f6ae80a502cce352098603e75414c91fce6c86287945bd8d258442760000ff010000000000000000000000300807f2f3906c1d45d05ba9df828d35376fed399fa311ff63a34f0c0b82b4f2825e729eb9b7f4c9ab3be5bc011ff29904bbc424880247fabe7325a6e8d139e99d2b2fbf7e84fca3b21c78840b858ce900a4eb9c2b8b9b7fb664d2aeac991ca09b1afc0ef7aed4541a2f7275130a9fa3853481c81e919c000000000000000000000000b1e0e4b55e0d5d8c657b4853fc18ec43be33e5f971cceda04d95c87489910ce692ee55c536d1671bffd4c9b98efb741b13f0ab26ac191c"], &(0x7f0000000100)='GPL\x00'}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x275a, 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0xae) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0) 8.971664054s ago: executing program 1 (id=1579): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f0000000900)=ANY=[@ANYBLOB="02000000010003000000000002000200", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000700", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000700", @ANYRES32=0x0, @ANYBLOB="040000000000000008000300", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080004", @ANYRES32=0x0, @ANYBLOB="000805000000000020000000"], 0x64, 0x2) lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}, {&(0x7f0000000200)=""/42, 0x2a}], 0x2, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[], 0x6a) 8.487363364s ago: executing program 4 (id=1580): sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="d5289f8a010803000000000000000000030000050900010073797a31000000000900010073797a30000000001c000480080006400000000108000a4000000008080005400000000f0900010073797a3100000000090001007379"], 0x74}, 0x1, 0x0, 0x0, 0x20040000}, 0x48040) r0 = syz_open_dev$usbfs(0x0, 0xf, 0x101301) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc802) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000180)) r3 = fcntl$dupfd(r2, 0x0, r0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000080)=ANY=[], 0x0, 0xfffffffb, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) pwritev2(r2, 0x0, 0x0, 0xb, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) ioctl$TCSBRK(r1, 0x5409, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102384, 0x18ff0) sendmsg$IPCTNL_MSG_CT_NEW(r3, 0x0, 0x4000000) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000001140)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff0000000007000034ba50436e5ccbe4009500000000000000"], &(0x7f0000000040)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x4, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9c}, 0x94) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="800009e92208a1ce", 0x8, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1e0000003a000100faff07000400000001"], 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x4) 7.357672789s ago: executing program 4 (id=1581): pipe2$9p(&(0x7f0000001900), 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x275a, 0x0) socket$inet(0x2, 0x2, 0x1) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0xae) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0) 7.357209129s ago: executing program 1 (id=1582): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x3}, {0xfff3}}}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="58010000", @ANYRES16=r1, @ANYBLOB="010000000000b721ce1c08000000180001801400020073797a5f74756e0000000000000000002c010280240103803000"], 0x158}, 0x1, 0x0, 0x0, 0x48000}, 0x2008040) syz_usb_connect$uac1(0x2, 0x8c, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x763, 0x2003, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x3, 0x1, 0x9, 0x40, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd2, 0x13}, [@output_terminal={0x9, 0x24, 0x3, 0x1, 0x305, 0x4, 0x5, 0x44}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xc, 0x8, 0xba, {0x7, 0x25, 0x1, 0x8, 0x4, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xfc, 0x3, 0x8, 0x1, "371f"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x5, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x3, 0x2, 0x1, {0x7, 0x25, 0x1, 0x0, 0xe, 0x3}}}}}}}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) 6.916142989s ago: executing program 2 (id=1583): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="400c1c"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x18, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000500)={&(0x7f00000018c0)=[{0x8, 0x0, 0x0, 0x0}], 0x1}) 6.896763629s ago: executing program 3 (id=1584): sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="d5289f8a010803000000000000000000030000050900010073797a31000000000900010073797a30000000001c000480080006400000000108000a400000000808000540"], 0x74}, 0x1, 0x0, 0x0, 0x20040000}, 0x48040) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(0x0, 0xf, 0x101301) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc802) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000180)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000080)=ANY=[], 0x0, 0xfffffffb, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) pwritev2(r1, 0x0, 0x0, 0xb, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102384, 0x18ff0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYRES16=r0, @ANYBLOB="0f7c264dcac468f723bf27b2999a2901a359fc526b829f0690959c47f359ad63d25f8b4c305cd5163f6ba048465837b586", @ANYRES32=0x0, @ANYRESOCT, @ANYRES16, @ANYRES8=r1, @ANYRES64=r2, @ANYRESHEX=0x0, @ANYRES32=r3, @ANYRESDEC=r1], 0xf8) connect$pppl2tp(r4, &(0x7f0000001140)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) 5.793827013s ago: executing program 0 (id=1585): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x67c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$alg(0x26, 0x5, 0x0) accept$alg(r1, 0x0, 0x0) 5.331561404s ago: executing program 0 (id=1586): writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioprio_set$pid(0x3, 0x0, 0x2004) socket$packet(0x11, 0x3, 0x300) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000440)=ANY=[@ANYBLOB="8718000000000000c910fe8000000000000000000000000000bbad1000000000000000000000000000000001c204000000210997cc258b6f36b6ba9ad50ff4a785e36f6ed1c26569ab5a195aea8fe83c31a01bfad1e99a4d1847463d4cc0f37ad4ea87e0edc18ceaa776372d7c4d2e411448bd1d1ee6121cd2e46b785fbb43130f652486d40dc60b0bf5bf9ffc3eb23db7b6e7aa008a5795c50aa345cd57cfbdb986e31ea005156b818c6dfc3a3a23e8064ba060d93214685e19"], 0xd0) 5.331283624s ago: executing program 3 (id=1587): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x10004, 0x5, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f00000009c0)={0x1}) connect$pppoe(r0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000060a010400000000000000000a0000040900010073797a31000000000900020073797a3200000000300004802c0001800a0001006d6174636800c9211c0002800800024000000002080003000000240008000100736574"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) 4.070382091s ago: executing program 4 (id=1588): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) pread64(r3, 0x0, 0x0, 0x200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) 4.069444061s ago: executing program 0 (id=1589): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x66, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0x7, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.73725753s ago: executing program 4 (id=1590): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r1, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r2, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040001}, 0x880) 2.145544423s ago: executing program 4 (id=1591): sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="d5289f8a010803000000000000000000030000050900010073797a31000000000900010073797a30000000001c000480080006400000000108000a4000000008080005400000000f0900010073797a3100000000090001007379"], 0x74}, 0x1, 0x0, 0x0, 0x20040000}, 0x48040) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc802) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000180)) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000080)=ANY=[], 0x0, 0xfffffffb, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) pwritev2(r2, 0x0, 0x0, 0xb, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) ioctl$TCSBRK(r1, 0x5409, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102384, 0x18ff0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYRES16=r0, @ANYBLOB="0f7c264dcac468f723bf27b2999a2901a359fc526b829f0690959c47f359ad63d25f8b4c305cd5163f6ba048465837b586", @ANYRES32=0x0, @ANYRESOCT=r3, @ANYRES16=r1, @ANYRES8=r2, @ANYRES64=r4, @ANYRESHEX=0x0, @ANYRES32=r5, @ANYRESDEC=r2], 0xf8) connect$pppl2tp(r6, &(0x7f0000001140)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff0000000007000034ba50436e5ccbe4009500000000000000"], &(0x7f0000000040)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x4, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9c}, 0x94) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) socket$inet6(0xa, 0x2, 0x3a) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb018031"], &(0x7f0000000f80)=""/4115, 0x31, 0x1013, 0x9}, 0x28) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1e0000003a000100faff07000400000001"], 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x4) 1.129407125s ago: executing program 2 (id=1592): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(0x0, 0xf, 0x101301) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc802) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETLED(r3, 0x4b31, &(0x7f0000000180)) r4 = fcntl$dupfd(r3, 0x0, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000080)=ANY=[], 0x0, 0xfffffffb, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) pwritev2(r3, 0x0, 0x0, 0xb, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) ioctl$TCSBRK(r2, 0x5409, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102384, 0x18ff0) sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x4000000) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000001140)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff0000000007000034ba50436e5ccbe4009500000000000000"], &(0x7f0000000040)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x4, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9c}, 0x94) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="800009e92208a1ce", 0x8, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1e0000003a000100faff07000400000001"], 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x4) 272.770354ms ago: executing program 4 (id=1593): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001340)=ANY=[@ANYBLOB="20000000150a0102cf"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) syz_emit_ethernet(0x7e, &(0x7f00000002c0)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "000100", 0x48, 0x2f, 0x1, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, [0x9, 0x9]}, {}, {0x8, 0x88be, 0xfffffff9, {{0x0, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x20}}}, {0x8, 0x22eb, 0x4, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x2, {0xfffcfff8, 0xfffe}}}}}}}}}, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) dup3(0xffffffffffffffff, r4, 0x0) 142.387297ms ago: executing program 3 (id=1594): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_LIST_PHY(r0, 0x0, 0x40000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000200)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001c00)=ANY=[@ANYBLOB="28040000", @ANYRES16=r5, @ANYBLOB="05002abd7000fddbdf2501000000060006004e24000004040880bc00008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b240001000000000000000000000000000000000000000000000000000000000000000000200004000a004e2000000001ff01000000000000000000000000000102000000240002001171ee8da334a5099295af229a5d237a7f4102f01f28b34347d6cbbe135d83ec24000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c08000300070000004c02008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff2402098058000080060001000200000041000200ac1e00010500030001000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200ffffffff050003000100000064000080060001000a00000014000200000000000000000000000000000000010500030002000000060001000200000008000200ac1414bb0500030002000000060001000a00000014000200000000000000000000000000000000010500030002000000dc000080060001000a0000001400020000000000000000000000ffffac1414aa05000300030000000600010002000000080002000a01010205000300020000000600010002000000080002007f00000105000300000000000600010002000000080002000a0101010500030003000000060001000200000008000200e00000010500030003000000060001000a00000014000200fc0100000000000000000000000000000500030001000000060001000200000008000200640101000500030000000000060001000200000008000200ac1e0101050003000200000088000080060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fe8800000000000000000000000001010500030002000000060001000a00000014000200ff020000000000000000000000000001050003000200000064000080080003000000000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000300000024000200379aa288b2244a5b504ba04bea45625d328fb93b62e607a1b2e4da2f7f76a5499400008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c080003000400000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e2200000000000000000000000008000100", @ANYRES32=r6], 0x428}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={0x0, 0xf0}, 0x1, 0x0, 0x0, 0x40040}, 0x4000894) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000001340)) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x20940, 0x0) 139.017067ms ago: executing program 2 (id=1595): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0xb5001, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f00000000c0)=0xc3) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0x83, "00000000000000000000ffff00000000000002"}) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x12, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) read$FUSE(r3, &(0x7f0000003f80)={0x2020}, 0x2020) r4 = syz_ublk_setup_io_uring(0x471, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x1, 0x158}, &(0x7f0000000780), 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r4}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x8000, 0x1, 0x401f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x3, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02", @ANYRES32=0x0, @ANYBLOB], 0x48) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x30, 0xffffffffffffffff, 0x100000000) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 0 (id=1596): pipe2$9p(&(0x7f0000001900), 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x275a, 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0xae) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0) kernel console output (not intermixed with test programs): d USB device number 7 using dummy_hcd [ 124.524855][ T4324] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 124.533765][ T4324] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 124.545009][ T4324] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 124.554372][ T4324] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 124.566071][ T4324] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 124.589099][ T4324] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 124.628558][ T4324] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 124.679121][ T4324] usb 5-1: Product: syz [ 124.683404][ T4324] usb 5-1: Manufacturer: syz [ 124.720105][ T4324] cdc_wdm 5-1:1.0: skipping garbage [ 124.725409][ T4324] cdc_wdm 5-1:1.0: skipping garbage [ 124.754915][ T4324] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 124.766296][ T4324] cdc_wdm 5-1:1.0: Unknown control protocol [ 124.776136][ T4857] netlink: 'syz.3.148': attribute type 1 has an invalid length. [ 124.813336][ T4857] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.967080][ T4857] CUSE: info not properly terminated [ 124.996172][ T4356] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 125.056355][ T4321] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 125.180014][ T4857] bond1: (slave geneve2): making interface the new active one [ 125.204867][ T4868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.151'. [ 125.256283][ T4321] usb 1-1: Using ep0 maxpacket: 32 [ 125.285317][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -75 [ 125.320932][ T4321] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.423511][ T4857] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 125.436799][ T4321] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 125.499354][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 125.611739][ T4321] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 125.694025][ T4321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.774174][ T4326] usb 5-1: USB disconnect, device number 7 [ 125.846818][ T4321] usb 1-1: config 0 descriptor?? [ 126.072146][ T4857] syz.3.148 (4857) used greatest stack depth: 20240 bytes left [ 126.085710][ T4321] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 126.965315][ T4876] ALSA: mixer_oss: invalid OSS volume '' [ 127.138203][ T4356] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.451370][ T4356] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.461951][ T4356] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 127.471540][ T4356] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.487976][ T4356] usb 3-1: config 0 descriptor?? [ 127.637263][ T4885] fuse: Bad value for 'fd' [ 127.734528][ T4356] usbhid 3-1:0.0: can't add hid device: -71 [ 127.741837][ T4356] usbhid: probe of 3-1:0.0 failed with error -71 [ 127.767347][ T4356] usb 3-1: USB disconnect, device number 7 [ 127.856551][ T4893] netlink: 'syz.4.157': attribute type 1 has an invalid length. [ 128.712714][ T4325] usb 1-1: USB disconnect, device number 5 [ 128.891285][ T4906] tipc: Enabling of bearer rejected, failed to enable media [ 129.066107][ T4912] Zero length message leads to an empty skb [ 129.114329][ T4916] device syzkaller0 entered promiscuous mode [ 129.223215][ T4912] tipc: Started in network mode [ 129.251099][ T4912] tipc: Node identity 3ac8b60ae80c, cluster identity 4711 [ 129.320982][ T4912] tipc: Enabled bearer , priority 0 [ 129.361907][ T4911] tipc: Resetting bearer [ 129.454010][ T4911] tipc: Disabling bearer [ 129.545806][ T4921] tipc: Enabling of bearer rejected, failed to enable media [ 130.377525][ T4935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.165'. [ 131.836257][ T4938] ALSA: mixer_oss: invalid OSS volume '' [ 132.208026][ T4942] fuse: Bad value for 'fd' [ 132.445960][ T22] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 132.538244][ T4944] vxcan1: tx drop: invalid sa for name 0x0000000000000003 [ 132.647940][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.684444][ T4953] fuse: root generation should be zero [ 132.757818][ T4955] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 132.767430][ T4955] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 132.825159][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.826813][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.856067][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.885754][ T22] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 133.255708][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.275151][ T22] usb 4-1: config 0 descriptor?? [ 133.708971][ T22] usbhid 4-1:0.0: can't add hid device: -71 [ 133.715040][ T22] usbhid: probe of 4-1:0.0 failed with error -71 [ 133.751026][ T22] usb 4-1: USB disconnect, device number 6 [ 134.115756][ T4965] device syzkaller0 entered promiscuous mode [ 134.128949][ T4974] ALSA: mixer_oss: invalid OSS volume '' [ 134.194436][ T4977] tipc: Enabling of bearer rejected, failed to enable media [ 134.720538][ T4988] device syzkaller0 entered promiscuous mode [ 134.778159][ T4988] tipc: Enabled bearer , priority 0 [ 134.786636][ T3654] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 134.806603][ T4990] device syzkaller0 entered promiscuous mode [ 134.840054][ T4987] tipc: Resetting bearer [ 134.914933][ T4987] tipc: Disabling bearer [ 134.931092][ T4990] tipc: Enabled bearer , priority 0 [ 134.955887][ T4989] tipc: Resetting bearer [ 134.976057][ T3654] usb 5-1: Using ep0 maxpacket: 32 [ 134.987326][ T3654] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.031108][ T4989] tipc: Disabling bearer [ 135.036233][ T3654] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.072258][ T3654] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 135.116053][ T3654] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.158630][ T3654] usb 5-1: config 0 descriptor?? [ 135.166112][ T4323] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 135.206654][ T3654] hub 5-1:0.0: USB hub found [ 135.428233][ T4323] usb 3-1: unable to get BOS descriptor or descriptor too short [ 135.452520][ T4323] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 135.458900][ T3654] hub 5-1:0.0: 1 port detected [ 135.471971][ T4994] netlink: 24 bytes leftover after parsing attributes in process `syz.3.183'. [ 135.498660][ T4323] usb 3-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice= 0.40 [ 135.508816][ T4323] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.518175][ T4323] usb 3-1: Product: syz [ 135.522744][ T4323] usb 3-1: Manufacturer: syz [ 135.527509][ T4323] usb 3-1: SerialNumber: syz [ 135.592883][ T4997] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 135.643581][ T4997] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 136.092863][ T3654] hub 5-1:0.0: activate --> -90 [ 136.312073][ T3654] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 136.320310][ T4356] usb 5-1: USB disconnect, device number 8 [ 136.589208][ T4323] usb 3-1: reset high-speed USB device number 8 using dummy_hcd [ 138.026075][ T4323] usb 3-1: device descriptor read/64, error -71 [ 138.072390][ T5018] fuse: Unknown parameter '0x0000000000000003' [ 138.446067][ T4872] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 139.306160][ T4872] usb 2-1: Using ep0 maxpacket: 8 [ 139.313302][ T4872] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 139.334019][ T4872] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 139.379334][ T4872] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 139.427858][ T4872] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 139.451839][ T4872] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.479734][ T4872] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 139.499263][ T4872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.658916][ T4323] snd-usb-audio: probe of 3-1:1.0 failed with error -11 [ 139.723843][ T4323] usb 3-1: USB disconnect, device number 8 [ 139.748473][ T4872] usb 2-1: usb_control_msg returned -32 [ 139.754211][ T4872] usbtmc 2-1:16.0: can't read capabilities [ 139.803806][ T5038] netlink: 'syz.4.197': attribute type 1 has an invalid length. [ 140.011567][ T5038] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.105587][ T5042] bond1: (slave geneve2): making interface the new active one [ 140.121823][ T5044] usbtmc 2-1:16.0: control status returned 0 [ 140.179484][ T5042] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 140.189119][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 140.277707][ T5045] device bridge1 entered promiscuous mode [ 140.322526][ T4325] usb 2-1: USB disconnect, device number 8 [ 142.048447][ T5060] fuse: Unknown parameter '0x0000000000000003' [ 143.424915][ T4324] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 143.518684][ T4324] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 143.736893][ T4323] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 143.994787][ T4323] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 144.009094][ T4323] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 144.032984][ T4323] usb 4-1: config 0 interface 0 has no altsetting 0 [ 144.057881][ T5083] netlink: 'syz.2.210': attribute type 1 has an invalid length. [ 144.092423][ T4323] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 144.122132][ T4323] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 144.151354][ T4323] usb 4-1: Product: syz [ 144.166239][ T5083] 8021q: adding VLAN 0 to HW filter on device bond1 [ 144.173591][ T4323] usb 4-1: Manufacturer: syz [ 144.191616][ T4323] usb 4-1: SerialNumber: syz [ 144.305292][ T4323] usb 4-1: config 0 descriptor?? [ 144.355257][ T5085] bond1: (slave geneve2): making interface the new active one [ 144.363441][ T4323] usb 4-1: selecting invalid altsetting 0 [ 144.415396][ T5085] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 144.429274][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 145.791178][ T5076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.591751][ T5076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.618631][ T5072] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 146.652145][ T4326] usb 4-1: USB disconnect, device number 7 [ 146.755427][ T4292] Bluetooth: hci3: unexpected event 0x18 length: 247 > 23 [ 146.837756][ T5113] fuse: Unknown parameter '0x0000000000000003' [ 148.575967][ T4322] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 148.597713][ T5129] netlink: 24 bytes leftover after parsing attributes in process `syz.2.221'. [ 148.629981][ T5132] netlink: 'syz.1.222': attribute type 1 has an invalid length. [ 148.741670][ T5132] 8021q: adding VLAN 0 to HW filter on device bond1 [ 148.766124][ T4322] usb 1-1: Using ep0 maxpacket: 8 [ 148.773270][ T4322] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 148.784868][ T4322] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 148.799566][ T5139] CUSE: info not properly terminated [ 148.831937][ T4322] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 148.870980][ T4322] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 148.897690][ T4322] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 148.964190][ T4322] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 148.983937][ T4322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.155669][ T5132] bond1: (slave geneve2): making interface the new active one [ 149.235394][ T4322] usb 1-1: usb_control_msg returned -32 [ 149.241941][ T4322] usbtmc 1-1:16.0: can't read capabilities [ 149.276447][ T5132] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 149.342576][ T5146] tipc: Enabled bearer , priority 0 [ 149.388427][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 149.602635][ T5148] usbtmc 1-1:16.0: control status returned 0 [ 149.621168][ T5134] tipc: Disabling bearer [ 149.804915][ T4323] usb 1-1: USB disconnect, device number 6 [ 149.993161][ T5156] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 150.186477][ T4325] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 150.771222][ T4325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.805419][ T4325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.823153][ T4325] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 150.988556][ T4325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.034508][ T4325] usb 3-1: config 0 descriptor?? [ 151.136744][ T5164] fuse: Unknown parameter '0x0000000000000003' [ 151.267811][ T5166] device bridge1 entered promiscuous mode [ 151.470362][ T4325] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 151.523405][ T4325] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 151.526331][ T4323] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 151.634687][ T5173] device syzkaller0 entered promiscuous mode [ 151.644655][ T5173] tipc: Started in network mode [ 151.654111][ T5173] tipc: Node identity f6e0b4963461, cluster identity 4711 [ 151.667221][ T5173] tipc: Enabled bearer , priority 0 [ 151.674096][ T4325] cp2112 0003:10C4:EA90.0006: Part Number: 0xE1 Device Version: 0x47 [ 151.755914][ T4323] usb 1-1: Using ep0 maxpacket: 32 [ 151.767228][ T4323] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.777930][ T5173] tipc: Resetting bearer [ 151.789885][ T5172] tipc: Resetting bearer [ 151.828482][ T4323] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 151.869559][ T4323] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 151.895312][ T4323] usb 1-1: Product: syz [ 151.902440][ T5172] tipc: Disabling bearer [ 151.908166][ T4323] usb 1-1: Manufacturer: syz [ 151.932189][ T5177] cp2112 0003:10C4:EA90.0006: pid 5177 passed too short report [ 151.960859][ T4323] hub 1-1:4.0: bad descriptor, ignoring hub [ 151.975652][ T4325] cp2112 0003:10C4:EA90.0006: error requesting SMBus config [ 151.995624][ T4323] hub: probe of 1-1:4.0 failed with error -5 [ 152.024598][ T4323] usbhid 1-1:4.0: couldn't find an input interrupt endpoint [ 152.112169][ T4325] cp2112: probe of 0003:10C4:EA90.0006 failed with error -32 [ 153.005987][ T4290] Bluetooth: hci3: command 0x0406 tx timeout [ 153.186190][ T4326] usb 1-1: USB disconnect, device number 7 [ 153.524404][ T5191] device syzkaller0 entered promiscuous mode [ 153.546510][ T5191] tipc: Enabled bearer , priority 0 [ 153.555019][ T5189] tipc: Resetting bearer [ 153.625499][ T5189] tipc: Disabling bearer [ 153.816147][ T4323] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 154.009440][ T4323] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.033112][ T4323] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.050357][ T4325] usb 3-1: USB disconnect, device number 9 [ 154.106571][ T4323] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 154.115702][ T4323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.153923][ T5202] fuse: Unknown parameter '0x0000000000000003' [ 154.176951][ T4323] usb 2-1: config 0 descriptor?? [ 154.326006][ T4324] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 154.345241][ T5204] device syzkaller0 entered promiscuous mode [ 154.377678][ T5204] tipc: Enabled bearer , priority 0 [ 154.396639][ T5209] netlink: 'syz.2.244': attribute type 1 has an invalid length. [ 154.420708][ T5209] 8021q: adding VLAN 0 to HW filter on device bond2 [ 154.438477][ T5203] tipc: Resetting bearer [ 154.513417][ T5203] tipc: Disabling bearer [ 154.546236][ T4324] usb 4-1: Using ep0 maxpacket: 8 [ 154.717449][ T4323] usbhid 2-1:0.0: can't add hid device: -71 [ 154.726058][ T4323] usbhid: probe of 2-1:0.0 failed with error -71 [ 154.735414][ T4324] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 154.750736][ T4323] usb 2-1: USB disconnect, device number 9 [ 154.798794][ T4324] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 154.854086][ T4324] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 154.888970][ T4324] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 154.907447][ T4324] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.930074][ T4324] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 154.944653][ T4324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.015736][ T5217] device bridge1 entered promiscuous mode [ 155.203147][ T4324] usb 4-1: usb_control_msg returned -32 [ 155.227247][ T4324] usbtmc 4-1:16.0: can't read capabilities [ 155.431781][ T5224] device syzkaller0 entered promiscuous mode [ 155.462391][ T5224] tipc: Enabled bearer , priority 0 [ 155.509286][ T5223] tipc: Resetting bearer [ 155.529161][ T5227] netlink: 12 bytes leftover after parsing attributes in process `syz.1.249'. [ 155.564665][ T5223] tipc: Disabling bearer [ 155.590761][ T5228] usbtmc 4-1:16.0: control status returned 0 [ 155.792681][ T4324] usb 4-1: USB disconnect, device number 8 [ 156.116013][ T4872] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 156.135997][ T4323] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 156.338421][ T4872] usb 3-1: config 12 has an invalid interface number: 1 but max is 0 [ 156.361350][ T4323] usb 1-1: config index 0 descriptor too short (expected 8228, got 36) [ 156.384261][ T4872] usb 3-1: config 12 has no interface number 0 [ 156.432324][ T4323] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.476816][ T4872] usb 3-1: config 12 interface 1 has no altsetting 0 [ 156.505111][ T5237] fuse: Unknown parameter '0x0000000000000003' [ 156.535045][ T4323] usb 1-1: config 0 has no interfaces? [ 156.543690][ T4872] usb 3-1: New USB device found, idVendor=0403, idProduct=c811, bcdDevice=3b.e0 [ 156.614071][ T4323] usb 1-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 156.653431][ T4872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.714821][ T4323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.733758][ T4872] usb 3-1: Product: syz [ 156.771748][ T4872] usb 3-1: Manufacturer: syz [ 156.808095][ T4323] usb 1-1: config 0 descriptor?? [ 156.816620][ T5245] netlink: 'syz.3.256': attribute type 1 has an invalid length. [ 156.841622][ T4872] usb 3-1: SerialNumber: syz [ 156.978325][ T5245] 8021q: adding VLAN 0 to HW filter on device bond2 [ 157.070968][ T5232] loop2: detected capacity change from 0 to 7 [ 157.137234][ T5247] tipc: Enabling of bearer rejected, failed to enable media [ 157.176730][ T5232] Dev loop2: unable to read RDB block 7 [ 157.212766][ T5251] device syzkaller0 entered promiscuous mode [ 157.269530][ T5251] tipc: Started in network mode [ 157.296229][ T5251] tipc: Node identity 82db0dfdad12, cluster identity 4711 [ 157.314948][ T5232] loop2: unable to read partition table [ 157.339653][ T5251] tipc: Enabled bearer , priority 0 [ 157.429312][ T5232] loop2: partition table beyond EOD, truncated [ 157.536001][ T5232] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 157.705550][ T4872] ftdi_sio 3-1:12.1: FTDI USB Serial Device converter detected [ 157.752377][ T5250] tipc: Resetting bearer [ 157.775445][ T4872] ftdi_sio ttyUSB0: unknown device type: 0x3be0 [ 157.899390][ T5250] tipc: Disabling bearer [ 157.920636][ T4872] usb 3-1: USB disconnect, device number 10 [ 157.967813][ T4872] ftdi_sio 3-1:12.1: device disconnected [ 158.435184][ T5267] netlink: 12 bytes leftover after parsing attributes in process `syz.1.260'. [ 158.466091][ T4321] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 158.674302][ T5269] device syzkaller0 entered promiscuous mode [ 158.698069][ T4321] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.736492][ T4321] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.752560][ T5270] tipc: Enabled bearer , priority 0 [ 158.796608][ T4321] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 158.821239][ T5268] tipc: Resetting bearer [ 158.849912][ T4321] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.920329][ T4321] usb 4-1: config 0 descriptor?? [ 158.969520][ T5268] tipc: Disabling bearer [ 159.335413][ T4321] usbhid 4-1:0.0: can't add hid device: -71 [ 159.342736][ T4321] usbhid: probe of 4-1:0.0 failed with error -71 [ 159.370091][ T4321] usb 4-1: USB disconnect, device number 9 [ 159.555999][ T4872] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 159.835983][ T4872] usb 3-1: Using ep0 maxpacket: 8 [ 159.844491][ T4872] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 159.872237][ T4872] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 159.898174][ T4872] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 159.980773][ T4872] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 160.038606][ T4872] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 160.067998][ T4872] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 160.117994][ T4872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.239811][ T5285] device bridge2 entered promiscuous mode [ 160.281720][ T5288] fuse: Unknown parameter 'fd0x0000000000000003' [ 160.355733][ T4872] usb 3-1: usb_control_msg returned -32 [ 160.361730][ T4872] usbtmc 3-1:16.0: can't read capabilities [ 160.380112][ T4323] usb 1-1: string descriptor 0 read error: -71 [ 160.414270][ T4323] usb 1-1: USB disconnect, device number 8 [ 160.658350][ T5292] device syzkaller0 entered promiscuous mode [ 160.688389][ T5292] tipc: Enabled bearer , priority 0 [ 160.718843][ T5295] usbtmc 3-1:16.0: control status returned 0 [ 160.735658][ T5294] netlink: 'syz.3.269': attribute type 1 has an invalid length. [ 160.841280][ T5294] 8021q: adding VLAN 0 to HW filter on device bond3 [ 160.875546][ T5291] tipc: Resetting bearer [ 160.927979][ T4324] usb 3-1: USB disconnect, device number 11 [ 160.935539][ T5291] tipc: Disabling bearer [ 161.042024][ T5299] device syzkaller0 entered promiscuous mode [ 161.093934][ T5299] tipc: Enabled bearer , priority 0 [ 161.263357][ T5307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.272'. [ 161.362248][ T5298] tipc: Resetting bearer [ 161.408547][ T5298] tipc: Disabling bearer [ 161.780485][ T5320] device syzkaller0 entered promiscuous mode [ 161.811513][ T5320] tipc: Enabled bearer , priority 0 [ 161.824874][ T5318] tipc: Resetting bearer [ 161.900081][ T5318] tipc: Disabling bearer [ 162.036405][ T3654] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 162.427226][ T3654] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.114049][ T3654] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.138929][ T3654] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 163.165952][ T3654] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.213471][ T3654] usb 1-1: config 0 descriptor?? [ 163.817087][ T3654] usbhid 1-1:0.0: can't add hid device: -71 [ 163.824385][ T3654] usbhid: probe of 1-1:0.0 failed with error -71 [ 163.854962][ T3654] usb 1-1: USB disconnect, device number 9 [ 163.869130][ T5346] netlink: 'syz.4.282': attribute type 1 has an invalid length. [ 163.982349][ T5346] 8021q: adding VLAN 0 to HW filter on device bond2 [ 164.463078][ T4322] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 164.795936][ T4322] usb 2-1: Using ep0 maxpacket: 8 [ 164.802932][ T4322] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 164.812009][ T4322] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 164.822124][ T4322] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 164.834897][ T4322] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 164.859304][ T5369] device bridge2 entered promiscuous mode [ 164.865263][ T4322] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 164.946319][ T4322] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 164.974555][ T4322] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.158140][ T5372] device syzkaller0 entered promiscuous mode [ 165.178403][ T5372] tipc: Enabled bearer , priority 0 [ 165.224107][ T4322] usb 2-1: usb_control_msg returned -32 [ 165.237096][ T4322] usbtmc 2-1:16.0: can't read capabilities [ 165.254638][ T5372] tipc: Resetting bearer [ 165.347347][ T5371] tipc: Resetting bearer [ 165.391295][ T5371] tipc: Disabling bearer [ 165.617315][ T5375] usbtmc 2-1:16.0: control status returned 0 [ 165.822393][ T4322] usb 2-1: USB disconnect, device number 10 [ 165.860708][ T5381] netlink: 'syz.2.295': attribute type 1 has an invalid length. [ 165.970841][ T5381] 8021q: adding VLAN 0 to HW filter on device bond3 [ 166.556066][ T4322] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 166.670173][ T5400] fuse: Bad value for 'user_id' [ 166.759122][ T4322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.770836][ T4322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.787512][ T4322] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 166.796929][ T4322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.805957][ T4321] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 166.827940][ T4322] usb 1-1: config 0 descriptor?? [ 167.009108][ T4321] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.027101][ T4321] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.241784][ T4321] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 167.251475][ T4321] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.262727][ T4321] usb 2-1: config 0 descriptor?? [ 167.308815][ T4322] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 167.325597][ T4322] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 167.344347][ T4322] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 167.375622][ T4322] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 167.420598][ T4322] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 167.467209][ T4322] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 167.491697][ T4322] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 167.523545][ T4322] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 167.622733][ T4322] cp2112 0003:10C4:EA90.0007: Part Number: 0x00 Device Version: 0x00 [ 167.681160][ T4321] usbhid 2-1:0.0: can't add hid device: -71 [ 167.693151][ T4321] usbhid: probe of 2-1:0.0 failed with error -71 [ 167.726135][ T4321] usb 2-1: USB disconnect, device number 11 [ 167.797408][ T5408] device syzkaller0 entered promiscuous mode [ 167.848356][ T5408] tipc: Enabled bearer , priority 0 [ 167.882929][ T5408] tipc: Resetting bearer [ 167.927193][ T5406] tipc: Resetting bearer [ 167.974107][ T5406] tipc: Disabling bearer [ 168.007838][ T5411] device syzkaller0 entered promiscuous mode [ 168.028849][ T5411] tipc: Enabled bearer , priority 0 [ 168.060949][ T5410] tipc: Resetting bearer [ 168.143626][ T5410] tipc: Disabling bearer [ 168.237817][ T5379] cp2112 0003:10C4:EA90.0007: Error starting transaction: -38 [ 168.256993][ T4322] cp2112 0003:10C4:EA90.0007: error reading lock byte: -71 [ 168.288451][ T4322] usb 1-1: USB disconnect, device number 10 [ 168.614075][ T5424] netlink: 'syz.2.309': attribute type 17 has an invalid length. [ 168.664554][ T5424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.309'. [ 168.694767][ T5416] fido_id[5416]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 168.878890][ T5426] user requested TSC rate below hardware speed [ 168.908236][ T5426] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 168.927256][ T4322] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 168.953386][ T5426] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 169.008110][ T4322] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 169.368651][ T5437] futex_wake_op: syz.0.314 tries to shift op by 144; fix this program [ 169.462884][ T5439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.314'. [ 169.903794][ T5449] device syzkaller0 entered promiscuous mode [ 169.921101][ T5449] tipc: Enabled bearer , priority 0 [ 169.945458][ T5449] tipc: Resetting bearer [ 169.968381][ T5448] tipc: Resetting bearer [ 169.994322][ T5448] tipc: Disabling bearer [ 170.036205][ T4322] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 170.286624][ T4322] usb 3-1: Using ep0 maxpacket: 8 [ 170.293592][ T4322] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 170.312294][ T4322] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 170.827980][ T4322] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 170.838372][ T4322] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 171.522230][ T4322] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 171.556475][ T4322] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 171.573758][ T4322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.822053][ T4322] usb 3-1: usb_control_msg returned -32 [ 171.828328][ T4322] usbtmc 3-1:16.0: can't read capabilities [ 172.164205][ T5479] device syzkaller0 entered promiscuous mode [ 172.193726][ T5479] tipc: Enabled bearer , priority 0 [ 172.240334][ T5479] tipc: Resetting bearer [ 172.276574][ T5478] tipc: Resetting bearer [ 172.296137][ T4321] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 172.336435][ T5478] tipc: Disabling bearer [ 172.509359][ T4321] usb 2-1: Using ep0 maxpacket: 32 [ 172.529426][ T4321] usb 2-1: unable to get BOS descriptor or descriptor too short [ 172.551583][ T5482] usbtmc 3-1:16.0: usb_clear_halt returned -32 [ 172.563956][ T4321] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 172.589838][ T4321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.620906][ T4321] usb 2-1: Product: syz [ 172.635335][ T4321] usb 2-1: Manufacturer: syz [ 172.645884][ T4321] usb 2-1: SerialNumber: syz [ 172.755623][ T4395] usb 3-1: USB disconnect, device number 12 [ 172.806086][ T4872] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 172.895958][ T4322] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 172.999064][ T4872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.030177][ T4872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.060989][ T4321] usb 2-1: USB disconnect, device number 12 [ 173.080342][ T4872] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 173.096130][ T4322] usb 1-1: Using ep0 maxpacket: 8 [ 173.110176][ T4322] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 173.110567][ T4872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.153030][ T4322] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 173.154583][ T4872] usb 4-1: config 0 descriptor?? [ 173.187199][ T4322] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.200052][ T4322] usb 1-1: Product: syz [ 173.210178][ T4322] usb 1-1: Manufacturer: syz [ 173.214869][ T4322] usb 1-1: SerialNumber: syz [ 173.267569][ T4322] usb 1-1: config 0 descriptor?? [ 173.337896][ T4322] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 173.385258][ T4322] usb 1-1: setting power ON [ 173.398141][ T4322] dvb-usb: bulk message failed: -22 (2/0) [ 173.444366][ T4322] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 173.464980][ T4322] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 173.484874][ T4322] usb 1-1: media controller created [ 173.533992][ T5484] dvb-usb: bulk message failed: -22 (3/0) [ 173.534799][ T4322] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 173.558032][ T5486] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 173.571557][ T5484] dvb-usb: bulk message failed: -22 (3/0) [ 173.582481][ T5484] dvb-usb: bulk message failed: -22 (3/0) [ 173.623637][ T4322] usb 1-1: selecting invalid altsetting 6 [ 173.630385][ T4322] usb 1-1: digital interface selection failed (-22) [ 173.631137][ T4872] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 173.647073][ T4322] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 173.657094][ T4322] usb 1-1: setting power OFF [ 173.662120][ T4322] dvb-usb: bulk message failed: -22 (2/0) [ 173.664591][ T4872] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 173.685687][ T4872] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 173.689147][ T4322] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 173.702223][ T4872] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 173.704104][ T4872] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 173.727559][ T4872] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 173.734600][ T4872] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 173.756294][ T4322] (NULL device *): no alternate interface [ 173.783217][ T4872] cp2112 0003:10C4:EA90.0009: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 173.822632][ T5488] device syzkaller0 entered promiscuous mode [ 173.832499][ T5488] tipc: Enabled bearer , priority 0 [ 173.850387][ T5487] tipc: Resetting bearer [ 173.869434][ T4322] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 173.924288][ T4872] cp2112 0003:10C4:EA90.0009: Part Number: 0x00 Device Version: 0x00 [ 173.934519][ T4322] usb 1-1: USB disconnect, device number 11 [ 173.936412][ T5487] tipc: Disabling bearer [ 175.254422][ T4872] cp2112 0003:10C4:EA90.0009: error reading lock byte: -71 [ 175.324612][ T4872] usb 4-1: USB disconnect, device number 10 [ 176.446249][ T4325] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 176.541645][ T5513] fido_id[5513]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 176.686265][ T4325] usb 2-1: Using ep0 maxpacket: 32 [ 176.698489][ T4325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.754635][ T4325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.785248][ T4325] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 176.824584][ T4325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.853362][ T4325] usb 2-1: config 0 descriptor?? [ 177.279088][ T4325] usbhid 2-1:0.0: can't add hid device: -71 [ 177.285148][ T4325] usbhid: probe of 2-1:0.0 failed with error -71 [ 177.319159][ T4325] usb 2-1: USB disconnect, device number 13 [ 177.366175][ T5531] device syzkaller0 entered promiscuous mode [ 177.412018][ T5531] tipc: Enabled bearer , priority 0 [ 177.488038][ T5530] tipc: Resetting bearer [ 177.549704][ T5530] tipc: Disabling bearer [ 177.884941][ T5538] device syzkaller0 entered promiscuous mode [ 177.960397][ T5538] tipc: Enabled bearer , priority 0 [ 177.991285][ T5538] tipc: Resetting bearer [ 178.094636][ T5537] tipc: Resetting bearer [ 178.169569][ T5537] tipc: Disabling bearer [ 179.248801][ T5570] device syzkaller0 entered promiscuous mode [ 179.268278][ T5570] tipc: Enabled bearer , priority 0 [ 179.284316][ T5569] tipc: Resetting bearer [ 179.363814][ T5569] tipc: Disabling bearer [ 179.895961][ T4356] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 180.106860][ T4356] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.135936][ T4356] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.178549][ T4356] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 180.256299][ T4356] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.276868][ T4356] usb 2-1: config 0 descriptor?? [ 180.820703][ T4356] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 180.857427][ T4356] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 181.023112][ T4356] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 181.169122][ T4356] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 181.320668][ T4356] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 181.338778][ T4356] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 181.362890][ T4356] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 181.398030][ T4356] cp2112 0003:10C4:EA90.000A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 181.526467][ T4356] cp2112 0003:10C4:EA90.000A: Part Number: 0x00 Device Version: 0x00 [ 181.546411][ T4356] cp2112 0003:10C4:EA90.000A: error requesting SMBus config [ 181.610373][ T4356] cp2112: probe of 0003:10C4:EA90.000A failed with error -32 [ 182.106719][ T5615] device bridge3 entered promiscuous mode [ 183.130929][ T3654] usb 2-1: USB disconnect, device number 14 [ 183.944508][ T5648] fuse: Unknown parameter 'group_i00000000000000000000' [ 185.977075][ T5672] device syzkaller0 entered promiscuous mode [ 186.056812][ T5672] tipc: Enabled bearer , priority 0 [ 186.094523][ T5672] tipc: Resetting bearer [ 186.126170][ T5669] tipc: Resetting bearer [ 186.218182][ T5669] tipc: Disabling bearer [ 186.929700][ T4325] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 187.077360][ T5688] fuse: Unknown parameter 'group_i00000000000000000000' [ 187.811194][ T4325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.840654][ T4325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.946003][ T4325] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 188.025614][ T4325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.097471][ T4325] usb 4-1: config 0 descriptor?? [ 188.538955][ T4325] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 188.563237][ T4325] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 188.586370][ T4325] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 188.614242][ T4325] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 188.635128][ T4325] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 188.652655][ T4325] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 188.670074][ T4325] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 188.710132][ T4325] cp2112 0003:10C4:EA90.000B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 188.807932][ T4325] cp2112 0003:10C4:EA90.000B: Part Number: 0x00 Device Version: 0x00 [ 189.008627][ T4325] cp2112 0003:10C4:EA90.000B: error requesting SMBus config [ 189.031500][ T4325] cp2112: probe of 0003:10C4:EA90.000B failed with error -32 [ 189.105668][ T5721] process 'syz.1.402' launched './file0' with NULL argv: empty string added [ 189.354594][ T5729] fuse: Unknown parameter 'group_i00000000000000000000' [ 189.433315][ T5732] device syzkaller0 entered promiscuous mode [ 189.444228][ T5732] tipc: Enabled bearer , priority 0 [ 189.462075][ T5732] tipc: Resetting bearer [ 189.470949][ T5731] tipc: Resetting bearer [ 189.493932][ T5731] tipc: Disabling bearer [ 189.632506][ T5735] device syzkaller0 entered promiscuous mode [ 190.443106][ T4356] usb 4-1: USB disconnect, device number 11 [ 190.495167][ T5743] netlink: 'syz.0.410': attribute type 1 has an invalid length. [ 190.538740][ T5743] 8021q: adding VLAN 0 to HW filter on device bond1 [ 190.634905][ T5750] bond1: (slave geneve2): making interface the new active one [ 190.639269][ T5750] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 190.639417][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 190.785368][ T5750] syz.0.410 (5750) used greatest stack depth: 20144 bytes left [ 191.219686][ T4325] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 191.299044][ T5767] device syzkaller0 entered promiscuous mode [ 191.364597][ T5768] tipc: Enabled bearer , priority 0 [ 191.391149][ T5770] device syzkaller0 entered promiscuous mode [ 191.429494][ T4325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.437488][ T5767] tipc: Resetting bearer [ 191.455657][ T4325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.477399][ T4325] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 191.494169][ T4325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.503482][ T5766] tipc: Resetting bearer [ 191.537474][ T4325] usb 3-1: config 0 descriptor?? [ 191.566097][ T5766] tipc: Disabling bearer [ 191.613930][ T5770] tipc: Enabled bearer , priority 0 [ 191.723177][ T5769] tipc: Resetting bearer [ 191.853720][ T5769] tipc: Disabling bearer [ 191.926893][ T5773] device syzkaller0 entered promiscuous mode [ 191.960001][ T4325] usbhid 3-1:0.0: can't add hid device: -71 [ 191.976747][ T4325] usbhid: probe of 3-1:0.0 failed with error -71 [ 192.023779][ T4325] usb 3-1: USB disconnect, device number 13 [ 193.276062][ T4326] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 193.569523][ T4326] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.580642][ T4326] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.591127][ T4326] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 193.600820][ T4326] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.618313][ T4326] usb 3-1: config 0 descriptor?? [ 194.053112][ T4326] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 194.078210][ T4326] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 194.087846][ T4326] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 194.109696][ T4326] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 194.128719][ T4326] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 194.142823][ T4326] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 194.153024][ T5811] device syzkaller0 entered promiscuous mode [ 194.167200][ T4326] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 194.189594][ T5811] tipc: Enabled bearer , priority 0 [ 194.202429][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.209310][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.218216][ T4326] cp2112 0003:10C4:EA90.000C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 194.317168][ T4326] cp2112 0003:10C4:EA90.000C: Part Number: 0x00 Device Version: 0x00 [ 194.539075][ T4326] cp2112 0003:10C4:EA90.000C: error requesting SMBus config [ 194.579472][ T4326] cp2112: probe of 0003:10C4:EA90.000C failed with error -32 [ 195.307453][ T4395] tipc: Node number set to 801705469 [ 196.113281][ T4325] usb 3-1: USB disconnect, device number 14 [ 198.876329][ T4325] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 199.127460][ T4325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.180282][ T4325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.211185][ T4325] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 199.221420][ T4325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.226202][ T4326] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 199.259212][ T4325] usb 1-1: config 0 descriptor?? [ 199.491173][ T5895] user requested TSC rate below hardware speed [ 199.501913][ T5895] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 199.512966][ T5899] tipc: Enabling of bearer rejected, already enabled [ 199.524623][ T5895] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 199.562749][ T5899] tipc: Resetting bearer [ 199.746636][ T4325] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 199.766905][ T4325] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 199.795519][ T4325] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 199.821004][ T4325] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 199.836176][ T4325] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 199.852906][ T4325] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 199.871122][ T4325] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 199.908433][ T4325] cp2112 0003:10C4:EA90.000D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 200.017138][ T4325] cp2112 0003:10C4:EA90.000D: Part Number: 0x00 Device Version: 0x00 [ 200.217929][ T4325] cp2112 0003:10C4:EA90.000D: error requesting SMBus config [ 200.236118][ T4325] cp2112: probe of 0003:10C4:EA90.000D failed with error -32 [ 200.377768][ T5909] device syzkaller0 entered promiscuous mode [ 200.456534][ T5909] tipc: Enabled bearer , priority 0 [ 200.511220][ T5909] tipc: Resetting bearer [ 200.529576][ T5907] tipc: Resetting bearer [ 200.600490][ T5907] tipc: Disabling bearer [ 201.109013][ T5915] device bridge3 entered promiscuous mode [ 201.211523][ T5920] bond0: invalid NS target ff00:: specified for addition [ 201.270246][ T5920] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 201.395906][ T4290] Bluetooth: hci1: command 0x0406 tx timeout [ 201.396281][ T4292] Bluetooth: hci4: command 0x0406 tx timeout [ 201.402226][ T4290] Bluetooth: hci0: command 0x0406 tx timeout [ 201.665209][ T4326] usb 3-1: unable to get BOS descriptor or descriptor too short [ 201.686235][ T4326] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 201.709147][ T4326] usb 3-1: can't read configurations, error -71 [ 201.741471][ T4356] usb 1-1: USB disconnect, device number 12 [ 201.947374][ T4325] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 202.107172][ T4325] usb 2-1: device descriptor read/64, error -71 [ 202.204445][ T5931] netlink: 'syz.4.471': attribute type 1 has an invalid length. [ 202.296989][ T5931] 8021q: adding VLAN 0 to HW filter on device bond3 [ 202.386478][ T4325] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 202.546024][ T4325] usb 2-1: device descriptor read/64, error -71 [ 202.702955][ T4325] usb usb2-port1: attempt power cycle [ 203.677524][ T4325] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 203.736672][ T4325] usb 2-1: device descriptor read/8, error -71 [ 204.006029][ T4325] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 204.047469][ T4325] usb 2-1: device descriptor read/8, error -71 [ 204.179883][ T4325] usb usb2-port1: unable to enumerate USB device [ 204.444557][ T4326] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 204.647671][ T4326] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.679350][ T4326] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.714229][ T4326] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 204.756561][ T4326] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.808835][ T4326] usb 1-1: config 0 descriptor?? [ 205.081462][ T4395] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 205.106239][ T4395] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 205.294119][ T4326] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 205.322006][ T4326] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 205.356677][ T4326] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 205.363743][ T4326] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 205.401373][ T4326] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 205.415873][ T4326] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 205.433239][ T4326] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 205.452520][ T4326] cp2112 0003:10C4:EA90.000F: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 205.546629][ T4326] cp2112 0003:10C4:EA90.000F: Part Number: 0x00 Device Version: 0x00 [ 205.560154][ T5985] device bridge2 entered promiscuous mode [ 205.878893][ T4326] cp2112 0003:10C4:EA90.000F: error requesting SMBus config [ 205.919405][ T4326] cp2112: probe of 0003:10C4:EA90.000F failed with error -32 [ 206.314241][ T5995] fuse: Bad value for 'group_id' [ 206.586079][ T4326] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 206.683801][ T6006] fuse: Bad value for 'user_id' [ 206.746393][ T4326] usb 5-1: device descriptor read/64, error -71 [ 206.775940][ T4325] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 206.956377][ T4325] usb 4-1: Using ep0 maxpacket: 32 [ 206.969833][ T4325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.982389][ T4325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.994958][ T4325] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 207.005399][ T4325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.015907][ T4326] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 207.028204][ T4325] usb 4-1: config 0 descriptor?? [ 207.175913][ T4326] usb 5-1: device descriptor read/64, error -71 [ 207.290485][ T4872] usb 1-1: USB disconnect, device number 13 [ 207.299328][ T4326] usb usb5-port1: attempt power cycle [ 207.445027][ T4325] usbhid 4-1:0.0: can't add hid device: -71 [ 207.459029][ T4325] usbhid: probe of 4-1:0.0 failed with error -71 [ 207.473685][ T4325] usb 4-1: USB disconnect, device number 12 [ 207.716178][ T4326] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 207.758538][ T4326] usb 5-1: device descriptor read/8, error -71 [ 207.829164][ T6022] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 207.981750][ T6022] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 208.046696][ T4326] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 208.078759][ T4326] usb 5-1: device descriptor read/8, error -71 [ 208.207150][ T4326] usb usb5-port1: unable to enumerate USB device [ 208.281437][ T6024] device syzkaller0 entered promiscuous mode [ 209.406700][ T4325] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 209.541304][ T6050] device syzkaller0 entered promiscuous mode [ 209.579654][ T6050] tipc: Enabled bearer , priority 0 [ 209.608350][ T4325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.627710][ T4325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.644615][ T4325] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 209.654786][ T4325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.696247][ T6050] tipc: Resetting bearer [ 209.711546][ T4325] usb 1-1: config 0 descriptor?? [ 209.793814][ T6049] tipc: Resetting bearer [ 209.938827][ T6049] tipc: Disabling bearer [ 210.125959][ T4321] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 210.160690][ T4325] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 210.176610][ T4325] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 210.183765][ T4325] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 210.194915][ T4325] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 210.205059][ T4325] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 210.212749][ T4325] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 210.219908][ T4325] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 210.365722][ T6061] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 210.400545][ T6061] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 210.745962][ T4321] usb 2-1: Using ep0 maxpacket: 32 [ 210.756698][ T4325] cp2112 0003:10C4:EA90.0010: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 210.765604][ T4321] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.846538][ T4321] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.885940][ T4321] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 210.887439][ T4325] cp2112 0003:10C4:EA90.0010: Part Number: 0x00 Device Version: 0x00 [ 210.923730][ T4321] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.957817][ T4321] usb 2-1: config 0 descriptor?? [ 211.073017][ T4325] cp2112 0003:10C4:EA90.0010: error requesting SMBus config [ 211.087816][ T4325] cp2112: probe of 0003:10C4:EA90.0010 failed with error -32 [ 211.397503][ T4321] usbhid 2-1:0.0: can't add hid device: -71 [ 211.409307][ T4321] usbhid: probe of 2-1:0.0 failed with error -71 [ 211.446154][ T4321] usb 2-1: USB disconnect, device number 19 [ 211.779810][ T6074] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 212.106449][ T6070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.148489][ T6070] device batadv_slave_1 entered promiscuous mode [ 212.336357][ T4321] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 212.379835][ T6090] device syzkaller0 entered promiscuous mode [ 212.496057][ T4321] usb 2-1: device descriptor read/64, error -71 [ 212.503742][ T6092] device syzkaller0 entered promiscuous mode [ 212.512976][ T4395] usb 1-1: USB disconnect, device number 14 [ 212.765909][ T4321] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 212.867155][ T6099] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 212.926234][ T4321] usb 2-1: device descriptor read/64, error -71 [ 212.976022][ T6099] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 213.046088][ T4321] usb usb2-port1: attempt power cycle [ 213.108906][ T6101] netlink: 20 bytes leftover after parsing attributes in process `syz.2.533'. [ 213.456047][ T4321] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 213.507810][ T4321] usb 2-1: device descriptor read/8, error -71 [ 213.846371][ T4321] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 213.914076][ T4321] usb 2-1: device descriptor read/8, error -71 [ 214.036831][ T4321] usb usb2-port1: unable to enumerate USB device [ 214.372299][ T6120] IPVS: Scheduler module ip_vs_ not found [ 214.781923][ T6129] device syzkaller0 entered promiscuous mode [ 214.788121][ T4321] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 215.047514][ T6123] user requested TSC rate below hardware speed [ 215.064980][ T6123] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 215.074457][ T6123] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 215.577242][ T6137] netlink: 92 bytes leftover after parsing attributes in process `syz.1.546'. [ 215.647924][ T6137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.546'. [ 215.977324][ T6146] device syzkaller0 entered promiscuous mode [ 216.015315][ T6146] tipc: Enabled bearer , priority 0 [ 216.075373][ T6146] tipc: Resetting bearer [ 216.110994][ T6145] tipc: Resetting bearer [ 216.242330][ T6145] tipc: Disabling bearer [ 216.328715][ T6150] fuse: Bad value for 'fd' [ 217.164785][ T6160] netlink: 'syz.3.554': attribute type 12 has an invalid length. [ 217.536717][ T6167] device syzkaller0 entered promiscuous mode [ 217.596331][ T4323] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 217.711941][ T4321] usb 5-1: unable to get BOS descriptor or descriptor too short [ 217.756465][ T4321] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 217.784754][ T4321] usb 5-1: can't read configurations, error -71 [ 217.791699][ T4323] usb 3-1: device descriptor read/64, error -71 [ 218.066063][ T4323] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 218.240174][ T4323] usb 3-1: device descriptor read/64, error -71 [ 218.367028][ T4323] usb usb3-port1: attempt power cycle [ 218.576828][ T6186] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 218.641985][ T6186] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 218.796131][ T4323] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 218.840125][ T4323] usb 3-1: device descriptor read/8, error -71 [ 218.871231][ T6185] fuse: Bad value for 'fd' [ 219.165967][ T4323] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 219.207434][ T4323] usb 3-1: device descriptor read/8, error -71 [ 219.336149][ T4323] usb usb3-port1: unable to enumerate USB device [ 219.933512][ T6202] device syzkaller0 entered promiscuous mode [ 220.096313][ T4872] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 220.389117][ T6200] user requested TSC rate below hardware speed [ 220.410874][ T6207] device syzkaller0 entered promiscuous mode [ 220.451427][ T6200] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 220.472636][ T6200] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 221.749366][ T4872] usb 4-1: unable to get BOS descriptor or descriptor too short [ 221.773400][ T4872] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 221.793696][ T4872] usb 4-1: can't read configurations, error -71 [ 221.936971][ T6227] fuse: Bad value for 'fd' [ 222.527724][ T6235] device syzkaller0 entered promiscuous mode [ 222.596304][ T4321] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 222.849160][ T4321] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.875903][ T4321] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.891917][ T4321] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 222.931661][ T4321] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.953278][ T4321] usb 3-1: config 0 descriptor?? [ 223.296476][ T4325] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 223.422055][ T4321] usbhid 3-1:0.0: can't add hid device: -32 [ 223.435193][ T4321] usbhid: probe of 3-1:0.0 failed with error -32 [ 223.445071][ T4321] usb 3-1: USB disconnect, device number 21 [ 223.456599][ T4325] usb 4-1: device descriptor read/64, error -71 [ 223.535667][ T6175] Set syz1 is full, maxelem 65536 reached [ 223.736099][ T4325] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 223.906352][ T4325] usb 4-1: device descriptor read/64, error -71 [ 224.037299][ T4325] usb usb4-port1: attempt power cycle [ 224.476088][ T4325] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 224.546715][ T4325] usb 4-1: device descriptor read/8, error -71 [ 224.680158][ T6263] netlink: 'syz.0.590': attribute type 1 has an invalid length. [ 224.713354][ T6263] 8021q: adding VLAN 0 to HW filter on device bond2 [ 224.823490][ T6268] tipc: Enabling of bearer rejected, already enabled [ 224.836574][ T4325] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 224.919823][ T6272] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 224.940210][ T6272] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 225.247980][ T4325] usb 4-1: device descriptor read/8, error -71 [ 225.416555][ T4325] usb usb4-port1: unable to enumerate USB device [ 225.617958][ T6277] device syzkaller0 entered promiscuous mode [ 225.763109][ T6281] fuse: Invalid rootmode [ 227.650169][ T6304] tipc: Enabled bearer , priority 0 [ 227.688091][ T6304] device syzkaller0 entered promiscuous mode [ 227.778031][ T6307] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 227.819349][ T6307] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 228.369232][ T6304] tipc: Resetting bearer [ 228.443931][ T6303] tipc: Resetting bearer [ 228.550140][ T6303] tipc: Disabling bearer [ 228.671177][ T6317] user requested TSC rate below hardware speed [ 228.682098][ T6317] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 228.691793][ T6317] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 228.798236][ T6323] device bridge2 entered promiscuous mode [ 228.883277][ T6325] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 228.895890][ T4323] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 228.948654][ T6325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 228.982325][ T6325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 228.993420][ T6325] device bridge_slave_0 left promiscuous mode [ 229.003756][ T6325] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.030362][ T6325] device bridge_slave_1 left promiscuous mode [ 229.047245][ T6325] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.049403][ T4323] usb 3-1: device descriptor read/64, error -71 [ 229.080870][ T6325] bond0: (slave bond_slave_0): Releasing backup interface [ 229.116820][ T6325] bond0: (slave bond_slave_1): Releasing backup interface [ 229.167760][ T6325] team0: Port device team_slave_0 removed [ 229.202120][ T6325] team0: Port device team_slave_1 removed [ 229.225119][ T6325] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.236422][ T6325] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.262006][ T6325] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.316585][ T6325] bond1: (slave geneve2): Releasing active interface [ 229.336674][ T4323] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 229.414972][ T6326] team0: Port device xfrm0 added [ 229.429091][ T6327] tipc: Enabled bearer , priority 0 [ 229.506275][ T4323] usb 3-1: device descriptor read/64, error -71 [ 229.636357][ T4323] usb usb3-port1: attempt power cycle [ 229.824001][ T6333] fuse: Invalid rootmode [ 230.126037][ T4323] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 230.166691][ T4323] usb 3-1: device descriptor read/8, error -71 [ 230.938490][ T4321] tipc: Node number set to 3263280278 [ 231.129944][ T4323] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 231.170866][ T4323] usb 3-1: device descriptor read/8, error -71 [ 231.202457][ T6343] device syzkaller0 entered promiscuous mode [ 231.233527][ T6343] tipc: Enabled bearer , priority 0 [ 231.278095][ T6343] tipc: Resetting bearer [ 231.307657][ T4323] usb usb3-port1: unable to enumerate USB device [ 231.381734][ T6342] tipc: Resetting bearer [ 231.480051][ T6342] tipc: Disabling bearer [ 232.297367][ T6364] user requested TSC rate below hardware speed [ 232.347769][ T6364] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 232.353189][ T6361] device syzkaller0 entered promiscuous mode [ 232.397313][ T6364] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 234.012899][ T6381] fuse: Invalid rootmode [ 236.741997][ T6389] device bridge4 entered promiscuous mode [ 237.173915][ T6409] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 237.201730][ T6409] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 237.812731][ T6416] netlink: 156 bytes leftover after parsing attributes in process `syz.0.636'. [ 238.274354][ T6432] fuse: Bad value for 'rootmode' [ 238.373058][ T6437] device syzkaller0 entered promiscuous mode [ 239.294324][ T6454] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 239.322508][ T6454] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 240.289112][ T6463] device syzkaller0 entered promiscuous mode [ 240.445376][ T6468] fuse: Bad value for 'user_id' [ 240.475396][ T6466] device syzkaller1 entered promiscuous mode [ 241.043588][ T6477] device syzkaller0 entered promiscuous mode [ 241.244909][ T6484] fuse: Bad value for 'rootmode' [ 241.254022][ T6480] sctp: [Deprecated]: syz.4.655 (pid 6480) Use of int in max_burst socket option. [ 241.254022][ T6480] Use struct sctp_assoc_value instead [ 241.809470][ T6498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 241.837313][ T6498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 242.525403][ T6502] device syzkaller0 entered promiscuous mode [ 242.614247][ T6502] tipc: Enabled bearer , priority 0 [ 242.649772][ T6510] fuse: Bad value for 'fd' [ 242.700899][ T6502] tipc: Resetting bearer [ 242.991787][ T6501] tipc: Resetting bearer [ 243.357495][ T6501] tipc: Disabling bearer [ 244.040725][ T6533] device syzkaller0 entered promiscuous mode [ 244.504593][ T6549] fuse: Bad value for 'rootmode' [ 245.404942][ T6567] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.510545][ T6567] device batadv_slave_1 entered promiscuous mode [ 246.207728][ T6580] netlink: 'syz.3.680': attribute type 1 has an invalid length. [ 246.359719][ T6580] 8021q: adding VLAN 0 to HW filter on device bond4 [ 246.716799][ T6590] device syzkaller0 entered promiscuous mode [ 246.798566][ T6590] tipc: Enabled bearer , priority 0 [ 246.852691][ T6590] tipc: Resetting bearer [ 246.894191][ T6592] device syzkaller1 entered promiscuous mode [ 246.924553][ T6589] tipc: Resetting bearer [ 246.991734][ T6589] tipc: Disabling bearer [ 247.101799][ T6602] tipc: Enabled bearer , priority 0 [ 247.128105][ T6594] device syzkaller0 entered promiscuous mode [ 247.139247][ T6606] device syzkaller0 entered promiscuous mode [ 247.202039][ T6594] tipc: Resetting bearer [ 247.229052][ T6593] tipc: Resetting bearer [ 247.276600][ T6593] tipc: Disabling bearer [ 247.535937][ T4395] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 248.564271][ T4395] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.574658][ T4395] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 248.588039][ T4395] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 248.597485][ T4395] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.618944][ T4395] usb 1-1: config 0 descriptor?? [ 248.627757][ T4395] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 248.872594][ T6636] netlink: 'syz.3.692': attribute type 1 has an invalid length. [ 249.043238][ T6636] 8021q: adding VLAN 0 to HW filter on device bond5 [ 249.112688][ T6643] tipc: Enabled bearer , priority 0 [ 249.304016][ T6648] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 249.459329][ T6648] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 249.576271][ T6647] device syzkaller0 entered promiscuous mode [ 249.689554][ T6653] tipc: Resetting bearer [ 249.731562][ T6642] tipc: Resetting bearer [ 249.809646][ T6642] tipc: Disabling bearer [ 249.837860][ T6657] device syzkaller1 entered promiscuous mode [ 249.906359][ T6659] device syzkaller0 entered promiscuous mode [ 250.003871][ T6661] fuse: Invalid rootmode [ 250.258594][ T6671] tipc: Failed to remove unknown binding: 66,0,0/0:4081144314/4081144316 [ 250.276646][ T6671] tipc: Failed to remove unknown binding: 66,0,0/0:4081144314/4081144315 [ 250.338926][ T6671] tipc: Failed to remove unknown binding: 66,0,0/0:4081144314/4081144316 [ 250.358342][ T6671] tipc: Failed to remove unknown binding: 66,0,0/0:4081144314/4081144315 [ 250.442920][ T6675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.702'. [ 250.504562][ T4321] usb 1-1: USB disconnect, device number 15 [ 251.574769][ T6689] device syzkaller0 entered promiscuous mode [ 251.617695][ T6695] netlink: 'syz.0.707': attribute type 1 has an invalid length. [ 252.093726][ T6695] 8021q: adding VLAN 0 to HW filter on device bond3 [ 252.245754][ T6704] tipc: Enabling of bearer rejected, failed to enable media [ 252.473957][ T6712] Driver unsupported XDP return value 0 on prog (id 19) dev N/A, expect packet loss! [ 252.503900][ T6714] device syzkaller1 entered promiscuous mode [ 252.578412][ T6718] fuse: Bad value for 'rootmode' [ 253.015180][ T6732] device syzkaller0 entered promiscuous mode [ 253.980966][ T6742] netlink: 'syz.4.721': attribute type 1 has an invalid length. [ 254.202288][ T6747] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 254.246013][ T6747] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 254.575944][ T6742] 8021q: adding VLAN 0 to HW filter on device bond4 [ 254.626582][ T6750] device syzkaller0 entered promiscuous mode [ 254.788705][ T6754] tipc: Enabling of bearer rejected, failed to enable media [ 255.091451][ T6765] device syzkaller1 entered promiscuous mode [ 255.098238][ T6768] fuse: Bad value for 'rootmode' [ 255.686625][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.693200][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.378223][ T6790] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 256.454285][ T6790] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 257.133844][ T6792] netlink: 'syz.4.736': attribute type 1 has an invalid length. [ 257.194214][ T6792] 8021q: adding VLAN 0 to HW filter on device bond5 [ 257.214605][ T6794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.242832][ T6794] device batadv_slave_1 entered promiscuous mode [ 257.436549][ T6809] device syzkaller0 entered promiscuous mode [ 257.458379][ T6809] tipc: Enabling of bearer rejected, failed to enable media [ 257.753830][ T6831] device syzkaller1 entered promiscuous mode [ 257.863736][ T6834] fuse: Bad value for 'rootmode' [ 258.022793][ T6836] device syzkaller0 entered promiscuous mode [ 258.473911][ T6850] netlink: 'syz.1.750': attribute type 1 has an invalid length. [ 258.634910][ T6850] 8021q: adding VLAN 0 to HW filter on device bond2 [ 258.806042][ T6861] device syzkaller0 entered promiscuous mode [ 259.178049][ T6884] device syzkaller1 entered promiscuous mode [ 259.414107][ T6892] fuse: Unknown parameter 'use00000000000000000000' [ 259.713163][ T6905] device syzkaller0 entered promiscuous mode [ 260.123812][ T6923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.767'. [ 260.340785][ T6929] device syzkaller0 entered promiscuous mode [ 260.766970][ T6937] device syzkaller1 entered promiscuous mode [ 260.854834][ T6941] fuse: Unknown parameter 'use00000000000000000000' [ 261.289170][ T6946] netlink: 24 bytes leftover after parsing attributes in process `syz.2.778'. [ 262.092876][ T6958] netlink: 24 bytes leftover after parsing attributes in process `syz.3.781'. [ 262.381108][ T6962] device syzkaller0 entered promiscuous mode [ 262.454212][ T6967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.785'. [ 263.064956][ T6974] fuse: Unknown parameter 'use00000000000000000000' [ 268.991660][ T6978] netlink: 24 bytes leftover after parsing attributes in process `syz.1.790'. [ 269.195556][ T6993] netlink: 20 bytes leftover after parsing attributes in process `syz.4.795'. [ 269.444001][ T7002] fuse: Unknown parameter 'user_i00000000000000000000' [ 269.846454][ T7008] device pim6reg1 entered promiscuous mode [ 269.925516][ T7012] netlink: 'syz.2.804': attribute type 1 has an invalid length. [ 270.019973][ T7012] 8021q: adding VLAN 0 to HW filter on device bond4 [ 270.425538][ T7022] netlink: 24 bytes leftover after parsing attributes in process `syz.2.807'. [ 271.527099][ T7038] fuse: Unknown parameter 'user_i00000000000000000000' [ 271.808369][ T7042] tipc: Enabled bearer , priority 0 [ 271.897294][ T7041] tipc: Disabling bearer [ 272.888000][ T7052] device syzkaller0 entered promiscuous mode [ 273.221846][ T7057] device syzkaller0 entered promiscuous mode [ 273.337322][ T7060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.823'. [ 273.561752][ T7066] fuse: Unknown parameter 'user_i00000000000000000000' [ 274.134711][ T7076] syz.4.831 sent an empty control message without MSG_MORE. [ 274.233108][ T7080] netlink: 24 bytes leftover after parsing attributes in process `syz.1.832'. [ 274.630794][ T3654] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 274.939110][ T3654] usb 5-1: device descriptor read/64, error -71 [ 275.075525][ T7093] fuse: Unknown parameter 'user_id00000000000000000000' [ 275.354867][ T3654] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 275.639132][ T3654] usb 5-1: device descriptor read/64, error -71 [ 275.674798][ T7109] fuse: Bad value for 'fd' [ 275.783191][ T3654] usb usb5-port1: attempt power cycle [ 276.348941][ T3654] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 276.430658][ T3654] usb 5-1: device descriptor read/8, error -71 [ 276.858644][ T3654] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 276.949616][ T3654] usb 5-1: device descriptor read/8, error -71 [ 277.027982][ T7118] device bridge3 entered promiscuous mode [ 277.098016][ T3654] usb usb5-port1: unable to enumerate USB device [ 278.455998][ T7124] device syzkaller0 entered promiscuous mode [ 278.612080][ T7130] fuse: Unknown parameter 'user_id00000000000000000000' [ 278.879205][ T7136] device syzkaller0 entered promiscuous mode [ 279.039133][ T4395] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 279.219716][ T4395] usb 2-1: device descriptor read/64, error -71 [ 279.500816][ T4395] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 279.671711][ T4395] usb 2-1: device descriptor read/64, error -71 [ 279.796186][ T4395] usb usb2-port1: attempt power cycle [ 280.225968][ T4395] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 280.277667][ T4395] usb 2-1: device descriptor read/8, error -71 [ 280.562608][ T4395] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 280.596905][ T4395] usb 2-1: device descriptor read/8, error -71 [ 280.726774][ T4395] usb usb2-port1: unable to enumerate USB device [ 281.881396][ T7152] fuse: Unknown parameter 'use00000000000000000000' [ 281.929441][ T7154] device dummy0 entered promiscuous mode [ 281.945557][ T7154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.862'. [ 282.155359][ T7154] device dummy0 left promiscuous mode [ 282.245598][ T7157] device syzkaller0 entered promiscuous mode [ 282.296820][ T7157] tipc: Enabled bearer , priority 0 [ 282.305111][ T7156] tipc: Resetting bearer [ 282.377283][ T7156] tipc: Disabling bearer [ 283.110353][ T7162] fuse: Unknown parameter 'user_id00000000000000000000' [ 283.330640][ T7164] fuse: Bad value for 'group_id' [ 283.985413][ T7166] tipc: Enabled bearer , priority 0 [ 284.054188][ T7166] tipc: Resetting bearer [ 284.098637][ T7165] tipc: Resetting bearer [ 284.835917][ T7180] netlink: 156 bytes leftover after parsing attributes in process `syz.1.871'. [ 285.215560][ T4321] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 285.376182][ T4321] usb 3-1: device descriptor read/64, error -71 [ 285.654159][ T4321] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 285.828283][ T4321] usb 3-1: device descriptor read/64, error -71 [ 285.956375][ T4321] usb usb3-port1: attempt power cycle [ 286.378883][ T4321] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 286.452331][ T4321] usb 3-1: device descriptor read/8, error -71 [ 286.731431][ T4321] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 286.771643][ T4321] usb 3-1: device descriptor read/8, error -71 [ 286.909579][ T4321] usb usb3-port1: unable to enumerate USB device [ 288.891451][ T7165] tipc: Disabling bearer [ 288.935998][ T4395] tipc: Node number set to 3536107018 [ 289.190379][ T7200] fuse: Bad value for 'fd' [ 290.312158][ T7219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.885'. [ 290.605609][ T7224] fuse: Bad value for 'fd' [ 292.183871][ T4324] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 292.361865][ T7241] netlink: 'syz.4.893': attribute type 1 has an invalid length. [ 292.403156][ T7241] 8021q: adding VLAN 0 to HW filter on device bond6 [ 292.637621][ T7247] netlink: 24 bytes leftover after parsing attributes in process `syz.3.894'. [ 292.687518][ T7246] device syzkaller0 entered promiscuous mode [ 292.705980][ T4324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.718904][ T4324] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 292.728486][ T4324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.762229][ T4324] usb 2-1: config 0 descriptor?? [ 292.803479][ T4324] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 293.029008][ T7255] fuse: Bad value for 'fd' [ 293.215121][ T7257] device syzkaller0 entered promiscuous mode [ 294.085082][ T7260] fuse: Bad value for 'fd' [ 294.852852][ T4395] usb 2-1: USB disconnect, device number 28 [ 295.174373][ T7278] team0: Device ipvlan2 failed to register rx_handler [ 296.524028][ T7299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.551724][ T7299] device batadv_slave_1 entered promiscuous mode [ 297.359193][ T7312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.918'. [ 297.567491][ T7314] device syzkaller0 entered promiscuous mode [ 300.034370][ T7335] netlink: 'syz.3.926': attribute type 1 has an invalid length. [ 300.338908][ T7335] 8021q: adding VLAN 0 to HW filter on device bond6 [ 305.990864][ T7393] device syzkaller0 entered promiscuous mode [ 306.008675][ T7393] tipc: Enabling of bearer rejected, failed to enable media [ 306.401200][ T7396] netlink: 'syz.3.941': attribute type 1 has an invalid length. [ 306.569235][ T7396] 8021q: adding VLAN 0 to HW filter on device bond7 [ 306.623642][ T7406] tipc: Enabling of bearer rejected, already enabled [ 311.728244][ T7464] tipc: Enabled bearer , priority 0 [ 311.775946][ T7463] tipc: Disabling bearer [ 311.819306][ T7466] device syzkaller0 entered promiscuous mode [ 314.928863][ T7497] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 314.953262][ T7497] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 315.802226][ T7497] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 315.831301][ T7501] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 317.075449][ T7519] fuse: Unknown parameter 'fd0x0000000000000003' [ 317.083070][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.096071][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.882770][ T7528] IPVS: lc: FWM 3 0x00000003 - no destination available [ 320.547269][ T7603] tipc: Enabling of bearer rejected, already enabled [ 321.996076][ T7623] netlink: 24 bytes leftover after parsing attributes in process `syz.4.986'. [ 322.191801][ T7628] fuse: Unknown parameter 'fd0x0000000000000003' [ 322.479318][ T7634] netlink: 'syz.1.991': attribute type 1 has an invalid length. [ 322.535932][ T4323] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 323.237116][ T4323] usb 5-1: unable to get BOS descriptor or descriptor too short [ 323.261540][ T4323] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 323.289243][ T7649] tipc: Enabled bearer , priority 0 [ 323.307099][ T4323] usb 5-1: can't read configurations, error -71 [ 323.356382][ T7648] tipc: Disabling bearer [ 326.558858][ T7684] netlink: 'syz.1.1003': attribute type 1 has an invalid length. [ 326.989563][ T7694] device syzkaller0 entered promiscuous mode [ 327.798845][ T4325] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 328.240349][ T7705] user requested TSC rate below hardware speed [ 328.292194][ T7705] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 328.340320][ T7705] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 333.925977][ T4325] usb 5-1: unable to get BOS descriptor or descriptor too short [ 334.000846][ T4325] usb 5-1: unable to read config index 0 descriptor/start: -32 [ 334.009104][ T4325] usb 5-1: chopping to 0 config(s) [ 334.014379][ T4325] usb 5-1: can't read configurations, error -32 [ 334.395165][ T4325] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 334.732980][ T4325] usb 5-1: device descriptor read/64, error -32 [ 334.923208][ T4325] usb usb5-port1: attempt power cycle [ 335.059454][ T7752] team0: Device ipvlan0 failed to register rx_handler [ 335.659300][ T4325] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 335.771751][ T4325] usb 5-1: device descriptor read/8, error -32 [ 336.163066][ T4325] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 336.344696][ T4325] usb 5-1: device descriptor read/8, error -32 [ 336.498133][ T4325] usb usb5-port1: unable to enumerate USB device [ 343.211608][ T4323] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 343.301102][ T7801] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1040'. [ 343.790437][ T7807] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1042'. [ 346.515700][ T7811] 8021q: adding VLAN 0 to HW filter on device bond4 [ 346.567485][ T7812] device macvlan2 entered promiscuous mode [ 346.573929][ T7812] device bond4 entered promiscuous mode [ 346.615587][ T7812] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 346.655996][ T7812] team0: Port device macvlan2 added [ 346.666916][ T4323] usb 1-1: device not accepting address 16, error -71 [ 346.999772][ T7815] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 347.020968][ T7815] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 347.054368][ T7815] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 348.033407][ T7820] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 348.065862][ T7820] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 348.086413][ T7820] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 350.719403][ T7852] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 350.737329][ T7852] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 350.765260][ T7852] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 352.030669][ T7861] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 352.788760][ T7861] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 352.819426][ T7861] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 352.871575][ T7867] device syzkaller0 entered promiscuous mode [ 352.964670][ T7870] team0: Device ipvlan2 failed to register rx_handler [ 353.727981][ T7879] device bridge3 entered promiscuous mode [ 355.849643][ T4322] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 356.263882][ T4322] usb 2-1: unable to get BOS descriptor or descriptor too short [ 356.328214][ T4322] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 356.336378][ T4322] usb 2-1: can't read configurations, error -71 [ 357.721109][ T7905] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1069'. [ 360.901606][ T7926] device bridge4 entered promiscuous mode [ 363.296245][ T7945] tipc: Enabling of bearer rejected, already enabled [ 363.561773][ T7951] tipc: Enabling of bearer rejected, failed to enable media [ 364.818287][ T7961] device syzkaller0 entered promiscuous mode [ 369.152367][ T7981] netlink: 'syz.4.1091': attribute type 1 has an invalid length. [ 369.231154][ T7981] 8021q: adding VLAN 0 to HW filter on device bond7 [ 369.323415][ T7985] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 369.346668][ T7987] device syzkaller0 entered promiscuous mode [ 369.380123][ T7985] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 369.388971][ T7985] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 369.452924][ T7991] tipc: Enabling of bearer rejected, failed to enable media [ 369.948490][ T7993] tipc: Enabled bearer , priority 0 [ 369.980902][ T7992] tipc: Disabling bearer [ 370.680054][ T4395] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 371.082889][ T4395] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.098458][ T4395] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.119803][ T4395] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 371.161458][ T4395] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.254045][ T4395] usb 3-1: config 0 descriptor?? [ 374.613313][ T8005] sched: RT throttling activated [ 375.209710][ T4395] usbhid 3-1:0.0: can't add hid device: -71 [ 375.231513][ T4395] usbhid: probe of 3-1:0.0 failed with error -71 [ 375.289247][ T4395] usb 3-1: USB disconnect, device number 30 [ 375.374887][ T8010] device syzkaller0 entered promiscuous mode [ 378.528811][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.536515][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.189657][ T4322] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 379.198624][ T8029] netlink: 'syz.0.1104': attribute type 1 has an invalid length. [ 379.411340][ T8029] 8021q: adding VLAN 0 to HW filter on device bond5 [ 379.455253][ T8032] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 379.463639][ T8032] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 379.494895][ T8032] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 380.212546][ T4322] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 380.225268][ T4322] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 381.175788][ T4322] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 381.184911][ T4322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 381.203646][ T4322] usb 5-1: SerialNumber: syz [ 381.329337][ T8046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1109'. [ 381.532150][ T4322] usb 5-1: 0:2 : does not exist [ 381.566925][ T8051] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1111'. [ 381.617980][ T4322] usb 5-1: USB disconnect, device number 25 [ 382.006919][ T6991] udevd[6991]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 383.433019][ T8074] device syzkaller0 entered promiscuous mode [ 383.684574][ T8080] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 383.719300][ T8080] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 383.728574][ T8080] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 390.179081][ T8179] tipc: Enabling of bearer rejected, already enabled [ 390.738721][ T8185] device bridge4 entered promiscuous mode [ 391.440320][ T8197] device syzkaller0 entered promiscuous mode [ 391.559750][ T4326] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 391.845103][ T4322] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 392.105340][ T4326] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 392.135816][ T4326] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 392.232616][ T4326] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 392.264681][ T4326] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 392.290849][ T4326] usb 5-1: SerialNumber: syz [ 392.474875][ T4322] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.516554][ T4322] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.582079][ T4326] usb 5-1: 0:2 : does not exist [ 392.594939][ T4322] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 392.638045][ T4326] usb 5-1: USB disconnect, device number 26 [ 392.649145][ T4322] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.711488][ T4322] usb 2-1: config 0 descriptor?? [ 392.979091][ T8205] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 393.000689][ T8205] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 393.009672][ T6991] udevd[6991]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 393.036693][ T8205] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 393.302107][ T4322] usbhid 2-1:0.0: can't add hid device: -71 [ 393.308794][ T4322] usbhid: probe of 2-1:0.0 failed with error -71 [ 393.351140][ T4322] usb 2-1: USB disconnect, device number 31 [ 393.875971][ T8214] tipc: Enabled bearer , priority 0 [ 393.923319][ T8213] tipc: Disabling bearer [ 393.957770][ T4292] block nbd0: Receive control failed (result -110) [ 395.425858][ T8233] device bridge5 entered promiscuous mode [ 398.967368][ T4323] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 398.975091][ T4321] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 399.548387][ T4321] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.559605][ T4323] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 399.569865][ T4323] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 399.578858][ T4321] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.599010][ T4321] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 399.620671][ T4321] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.640539][ T4321] usb 2-1: config 0 descriptor?? [ 399.667572][ T4323] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 399.679289][ T4323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 399.699311][ T4323] usb 1-1: SerialNumber: syz [ 399.982141][ T4323] usb 1-1: 0:2 : does not exist [ 400.054947][ T4323] usb 1-1: USB disconnect, device number 18 [ 400.121415][ T8201] udevd[8201]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 400.173890][ T4321] usbhid 2-1:0.0: can't add hid device: -71 [ 400.190561][ T4321] usbhid: probe of 2-1:0.0 failed with error -71 [ 400.222618][ T4321] usb 2-1: USB disconnect, device number 32 [ 400.835107][ T8253] device syzkaller0 entered promiscuous mode [ 401.997139][ T8277] device bridge5 entered promiscuous mode [ 403.800049][ T128] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 404.285388][ T128] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.296758][ T128] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.357655][ T128] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 404.395124][ T128] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.436736][ T128] usb 2-1: config 0 descriptor?? [ 404.995183][ T128] usbhid 2-1:0.0: can't add hid device: -71 [ 405.006261][ T128] usbhid: probe of 2-1:0.0 failed with error -71 [ 405.098962][ T128] usb 2-1: USB disconnect, device number 33 [ 405.409665][ T8302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1180'. [ 407.379670][ T128] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 407.711357][ T8316] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 407.830606][ T8316] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 407.988922][ T8316] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 408.442009][ T128] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 408.453402][ T128] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 409.433552][ T128] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 409.446241][ T128] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 409.479900][ T128] usb 4-1: SerialNumber: syz [ 409.501875][ T8327] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1188'. [ 409.838365][ T128] usb 4-1: 0:2 : does not exist [ 409.913857][ T128] usb 4-1: USB disconnect, device number 19 [ 410.002990][ T8333] device bridge6 entered promiscuous mode [ 410.289566][ T6991] udevd[6991]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 411.344701][ T4326] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 411.886549][ T8353] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 411.895002][ T8353] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 411.954317][ T4326] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.000073][ T4326] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.010075][ T8353] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 412.050750][ T4326] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 412.090897][ T4326] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.139130][ T4326] usb 5-1: config 0 descriptor?? [ 413.309079][ T8361] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1200'. [ 413.571313][ T4326] usbhid 5-1:0.0: can't add hid device: -71 [ 413.578398][ T4326] usbhid: probe of 5-1:0.0 failed with error -71 [ 413.687565][ T4326] usb 5-1: USB disconnect, device number 27 [ 414.661628][ T4322] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 415.798204][ T4322] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 415.808615][ T4322] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 415.890789][ T4322] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 415.900078][ T4322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 415.921405][ T4322] usb 3-1: SerialNumber: syz [ 416.298672][ T4322] usb 3-1: 0:2 : does not exist [ 416.355348][ T4322] usb 3-1: USB disconnect, device number 31 [ 417.539324][ T6991] udevd[6991]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 417.687589][ T8437] device bridge4 entered promiscuous mode [ 417.868950][ T8446] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1212'. [ 423.269423][ T4872] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 423.783949][ T4872] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 423.807614][ T4872] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 423.897854][ T4872] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 423.916276][ T4872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 423.935502][ T4872] usb 5-1: SerialNumber: syz [ 424.213912][ T4872] usb 5-1: 0:2 : does not exist [ 424.307314][ T4872] usb 5-1: USB disconnect, device number 28 [ 425.604840][ T6991] udevd[6991]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 426.940010][ T8530] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 427.008481][ T8530] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 428.784643][ T8530] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 429.846682][ T128] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 430.145493][ T128] usb 3-1: device descriptor read/64, error -71 [ 430.515348][ T128] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 430.851866][ T128] usb 3-1: device descriptor read/64, error -71 [ 431.023112][ T128] usb usb3-port1: attempt power cycle [ 431.269652][ T8551] team0: Device ipvlan2 failed to register rx_handler [ 431.613495][ T128] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 431.701372][ T8559] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1246'. [ 431.714239][ T128] usb 3-1: device descriptor read/8, error -71 [ 432.116787][ T128] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 433.673347][ T8577] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 433.697004][ T8577] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 433.705633][ T8577] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 437.032912][ T8593] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1257'. [ 437.303131][ T128] usb 3-1: device descriptor read/8, error -110 [ 437.480097][ T128] usb usb3-port1: unable to enumerate USB device [ 439.458222][ T8621] device syzkaller0 entered promiscuous mode [ 439.993317][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.999843][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.323937][ T3654] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 445.605527][ T3654] usb 1-1: device descriptor read/64, error -71 [ 447.014257][ T3654] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 447.399632][ T3654] usb 1-1: device descriptor read/64, error -71 [ 447.576658][ T3654] usb usb1-port1: attempt power cycle [ 448.194088][ T3654] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 452.844316][ T8714] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1288'. [ 453.005790][ T4324] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 453.249456][ T8719] device syzkaller0 entered promiscuous mode [ 453.344173][ T3654] usb 1-1: device descriptor read/8, error -110 [ 453.411839][ T4324] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 453.422471][ T4324] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 453.514026][ T4324] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 453.524471][ T4324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 453.533193][ T4324] usb 2-1: SerialNumber: syz [ 453.718088][ T3654] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 453.794269][ T3654] usb 1-1: device descriptor read/8, error -32 [ 453.839695][ T4324] usb 2-1: 0:2 : does not exist [ 453.910096][ T4324] usb 2-1: USB disconnect, device number 34 [ 453.941522][ T3654] usb usb1-port1: unable to enumerate USB device [ 454.353868][ T6991] udevd[6991]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 456.771416][ T8793] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1299'. [ 457.980423][ T8807] device syzkaller0 entered promiscuous mode [ 460.614646][ T8830] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1310'. [ 461.657951][ T8842] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1312'. [ 466.606297][ T8894] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1327'. [ 470.349356][ T8929] team0: Device ipvlan2 failed to register rx_handler [ 470.428551][ T4323] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 471.643604][ T4323] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 471.685198][ T4323] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 471.789677][ T4323] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 471.831838][ T4323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 471.849311][ T4323] usb 3-1: SerialNumber: syz [ 472.177874][ T4323] usb 3-1: 0:2 : does not exist [ 472.263698][ T4323] usb 3-1: USB disconnect, device number 36 [ 472.365507][ T8945] device syzkaller0 entered promiscuous mode [ 472.602385][ T6991] udevd[6991]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 477.463606][ T8981] device syzkaller0 entered promiscuous mode [ 477.601888][ T4321] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 478.137742][ T4321] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.170486][ T4321] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.190762][ T4321] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 478.225512][ T4321] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.264582][ T4321] usb 4-1: config 0 descriptor?? [ 478.995154][ T4321] usbhid 4-1:0.0: can't add hid device: -32 [ 479.011610][ T4321] usbhid: probe of 4-1:0.0 failed with error -32 [ 479.959252][ T3654] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 480.484550][ T3654] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 480.532478][ T4325] usb 4-1: USB disconnect, device number 20 [ 480.554812][ T3654] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.585444][ T3654] usb 2-1: Product: syz [ 480.590365][ T3654] usb 2-1: Manufacturer: syz [ 480.595005][ T3654] usb 2-1: SerialNumber: syz [ 480.630898][ T3654] usb 2-1: config 0 descriptor?? [ 480.903095][ T3654] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 484.871624][ T3654] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 484.928726][ T3654] usb 2-1: USB disconnect, device number 35 [ 486.320831][ T3654] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 486.774254][ T9070] device syzkaller0 entered promiscuous mode [ 486.874272][ T3654] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.895736][ T3654] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.923551][ T3654] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 486.943693][ T3654] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.975831][ T3654] usb 2-1: config 0 descriptor?? [ 487.545156][ T9080] tipc: Enabled bearer , priority 0 [ 487.604104][ T9079] tipc: Disabling bearer [ 487.715180][ T3654] usbhid 2-1:0.0: can't add hid device: -32 [ 487.721666][ T3654] usbhid: probe of 2-1:0.0 failed with error -32 [ 489.436052][ T3654] usb 2-1: USB disconnect, device number 36 [ 493.196612][ T9133] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1378'. [ 495.968259][ T4326] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 496.924683][ T4323] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 497.203363][ T4326] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.392385][ T4326] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.410642][ T4326] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 497.436429][ T4326] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.477799][ T4326] usb 3-1: config 0 descriptor?? [ 497.534959][ T9210] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1390'. [ 497.558858][ T4323] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 497.580506][ T4323] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 497.633708][ T4323] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 497.642859][ T4323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 497.667446][ T4323] usb 2-1: SerialNumber: syz [ 497.780288][ T9212] tipc: Enabled bearer , priority 0 [ 497.866593][ T9211] tipc: Disabling bearer [ 497.963994][ T4323] usb 2-1: 0:2 : does not exist [ 498.002822][ T4323] usb 2-1: USB disconnect, device number 37 [ 498.228149][ T4326] usbhid 3-1:0.0: can't add hid device: -32 [ 498.234389][ T4326] usbhid: probe of 3-1:0.0 failed with error -32 [ 498.334768][ T8201] udevd[8201]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 500.030743][ T4322] usb 3-1: USB disconnect, device number 37 [ 500.312932][ T9220] team0: Device ipvlan2 failed to register rx_handler [ 501.273328][ T9229] netlink: 'syz.1.1396': attribute type 1 has an invalid length. [ 501.353211][ T9229] 8021q: adding VLAN 0 to HW filter on device bond3 [ 501.405734][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.412135][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.580271][ T9243] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1401'. [ 506.235782][ T4323] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 506.792585][ T4323] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 506.818974][ T4323] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 506.883113][ T9259] set match dimension is over the limit! [ 506.953467][ T4323] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 506.971910][ T4323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 507.005080][ T4323] usb 5-1: SerialNumber: syz [ 507.343543][ T4323] usb 5-1: 0:2 : does not exist [ 507.439362][ T4323] usb 5-1: USB disconnect, device number 29 [ 507.976659][ T3654] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 508.516989][ T3654] usb 1-1: Using ep0 maxpacket: 32 [ 508.669725][ T6991] udevd[6991]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 508.696227][ T3654] usb 1-1: config index 0 descriptor too short (expected 27632, got 27) [ 508.704670][ T3654] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 508.752314][ T3654] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 508.780356][ T3654] usb 1-1: config 1 has no interface number 0 [ 508.812835][ T3654] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 508.857557][ T3654] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 508.897813][ T3654] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 508.922170][ T3654] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.998015][ T3654] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 509.214887][ T9263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.263067][ T9263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.288472][ T3654] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 510.060620][ T9278] tipc: Enabling of bearer rejected, already enabled [ 510.089944][ T9280] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1413'. [ 510.273936][ T9282] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 510.299319][ T9282] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 510.330408][ T9282] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 510.371997][ T3654] snd_usb_pod 1-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 511.097983][ T4325] usb 1-1: USB disconnect, device number 23 [ 511.212649][ T4325] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 511.741290][ T9294] set match dimension is over the limit! [ 512.969393][ T9302] device bridge1 entered promiscuous mode [ 513.301298][ T22] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 513.730834][ T22] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 513.750438][ T22] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 513.884502][ T22] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 513.905720][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 513.913792][ T22] usb 4-1: SerialNumber: syz [ 514.200182][ T22] usb 4-1: 0:2 : does not exist [ 514.252177][ T22] usb 4-1: USB disconnect, device number 21 [ 514.619196][ T6991] udevd[6991]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 514.929282][ T9310] tipc: Enabling of bearer rejected, already enabled [ 518.673228][ T9355] device bridge2 entered promiscuous mode [ 520.056494][ T9366] tipc: Enabled bearer , priority 0 [ 520.123379][ T9365] tipc: Disabling bearer [ 520.592069][ T9370] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1438'. [ 526.428084][ T9403] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1449'. [ 527.032159][ T9411] device bridge5 entered promiscuous mode [ 529.880043][ T9439] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1461'. [ 531.749146][ T9445] set match dimension is over the limit! [ 531.956461][ T9448] netlink: 'syz.4.1464': attribute type 1 has an invalid length. [ 532.074141][ T9448] 8021q: adding VLAN 0 to HW filter on device bond8 [ 532.265902][ T9449] device macvlan2 entered promiscuous mode [ 534.074958][ T9469] device bridge5 entered promiscuous mode [ 535.456297][ T9478] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1473'. [ 535.724157][ T22] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 536.143197][ T9488] team0: Device ipvlan2 failed to register rx_handler [ 536.262525][ T22] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 536.272260][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.291338][ T22] usb 3-1: Product: syz [ 536.304767][ T22] usb 3-1: Manufacturer: syz [ 536.319059][ T22] usb 3-1: SerialNumber: syz [ 536.353744][ T22] usb 3-1: config 0 descriptor?? [ 536.805553][ T22] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 540.503508][ T22] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -110 [ 540.615740][ T22] usb 3-1: USB disconnect, device number 38 [ 542.754917][ T9532] set match dimension is over the limit! [ 543.537501][ T9539] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1484'. [ 544.588034][ T9548] set match dimension is over the limit! [ 547.542702][ T22] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 547.870397][ T22] usb 3-1: Using ep0 maxpacket: 32 [ 548.010850][ T22] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 548.026354][ T22] usb 3-1: config 0 has no interface number 0 [ 548.132223][ T3654] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 548.214248][ T22] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 548.233099][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.259622][ T22] usb 3-1: Product: syz [ 548.273188][ T22] usb 3-1: Manufacturer: syz [ 548.285999][ T22] usb 3-1: SerialNumber: syz [ 548.313982][ T22] usb 3-1: config 0 descriptor?? [ 548.397215][ T22] smsc95xx v2.0.0 [ 548.841187][ T22] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 548.864840][ T22] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 549.142346][ T22] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 549.174679][ T22] smsc95xx: probe of 3-1:0.67 failed with error -32 [ 549.223423][ T3654] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 549.243749][ T3654] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 549.463213][ T3654] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 549.474489][ T3654] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 549.484702][ T9581] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1496'. [ 549.504025][ T3654] usb 1-1: SerialNumber: syz [ 549.818117][ T3654] usb 1-1: 0:2 : does not exist [ 549.862006][ T3654] usb 1-1: USB disconnect, device number 24 [ 550.200549][ T6991] udevd[6991]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 550.564206][ T4395] usb 3-1: USB disconnect, device number 39 [ 550.848216][ T9590] device bridge3 entered promiscuous mode [ 553.593888][ T9614] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1507'. [ 555.116953][ T9628] netlink: 'syz.0.1511': attribute type 1 has an invalid length. [ 555.299309][ T9628] 8021q: adding VLAN 0 to HW filter on device bond6 [ 558.849479][ T9656] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1518'. [ 560.472301][ T9672] netlink: 'syz.1.1522': attribute type 1 has an invalid length. [ 560.558996][ T9672] 8021q: adding VLAN 0 to HW filter on device bond4 [ 563.595995][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.602350][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.407859][ T4324] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 565.808445][ T9720] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1531'. [ 565.882873][ T4324] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 565.904116][ T4324] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 565.992043][ T9722] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1532'. [ 566.042789][ T4324] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 566.073470][ T4324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 566.099263][ T4324] usb 4-1: SerialNumber: syz [ 566.506082][ T4324] usb 4-1: 0:2 : does not exist [ 566.617848][ T4324] usb 4-1: USB disconnect, device number 22 [ 566.668731][ T6991] udevd[6991]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 567.070040][ T9732] netlink: 'syz.1.1534': attribute type 1 has an invalid length. [ 567.184564][ T9732] 8021q: adding VLAN 0 to HW filter on device bond5 [ 568.708486][ T9748] set match dimension is over the limit! [ 570.725824][ T9762] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1542'. [ 570.948477][ T9764] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1543'. [ 571.161659][ T9766] device syzkaller0 entered promiscuous mode [ 575.595652][ T9795] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1553'. [ 575.788963][ T9800] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1554'. [ 577.190035][ T9803] set match dimension is over the limit! [ 577.771284][ T9819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1560'. [ 580.336654][ T9833] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1564'. [ 580.618958][ T9835] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1566'. [ 581.005805][ T9839] device syzkaller0 entered promiscuous mode [ 581.776144][ T4323] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 582.479799][ T9847] Cannot find set identified by id 0 to match [ 583.131472][ T4323] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.149404][ T4323] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 583.185768][ T4323] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 583.234141][ T4323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.280498][ T4323] usb 1-1: config 0 descriptor?? [ 584.989340][ T4323] usb 1-1: can't set config #0, error -71 [ 585.054404][ T4323] usb 1-1: USB disconnect, device number 25 [ 585.943206][ T9867] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1576'. [ 586.239510][ T9888] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1577'. [ 586.988266][ T3654] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 587.949347][ T9904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1582'. [ 588.264109][ T3654] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 588.339073][ T3654] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 588.366412][ T4323] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 588.447515][ T3654] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 588.465385][ T3654] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 588.474418][ T3654] usb 1-1: SerialNumber: syz [ 588.537631][ T4325] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 588.772740][ T4395] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 588.792650][ T4323] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 588.803148][ T4323] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 588.823724][ T3654] usb 1-1: 0:2 : does not exist [ 588.886897][ T3654] usb 1-1: USB disconnect, device number 26 [ 588.906303][ T4323] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 588.915812][ T4323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 588.951162][ T4323] usb 5-1: SerialNumber: syz [ 589.102400][ T4325] usb 2-1: unable to get BOS descriptor or descriptor too short [ 589.150432][ T4325] usb 2-1: not running at top speed; connect to a high speed hub [ 589.163239][ T4395] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 589.174466][ T4395] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 589.213732][ T4395] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 589.265386][ T4323] usb 5-1: 0:2 : does not exist [ 589.279758][ T4395] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.335756][ T4323] usb 5-1: USB disconnect, device number 30 [ 589.350215][ T9912] udevd[9912]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 589.357604][ T4395] usb 3-1: config 0 descriptor?? [ 589.713295][ T9844] udevd[9844]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 589.872396][ T4325] usb 2-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 589.885692][ T4325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.893741][ T4325] usb 2-1: Product: syz [ 589.910460][ T4395] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 589.927476][ T4395] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 589.942306][ T4395] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 589.961274][ T4325] usb 2-1: Manufacturer: syz [ 589.966839][ T4395] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 589.982025][ T4395] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 589.996111][ T4325] usb 2-1: SerialNumber: syz [ 590.005190][ T4395] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 590.036906][ T4395] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 591.121385][ T4395] cp2112 0003:10C4:EA90.0011: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 591.512633][ T4395] cp2112 0003:10C4:EA90.0011: error requesting version [ 591.560595][ T4395] cp2112: probe of 0003:10C4:EA90.0011 failed with error -32 [ 591.871178][ T9923] Cannot find set identified by id 0 to match [ 592.699261][ T9954] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1590'. [ 593.696283][ T9958] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1591'. [ 593.705425][ T9958] openvswitch: netlink: Flow key attr not present in new flow. [ 593.994814][ T3654] usb 3-1: USB disconnect, device number 40 [ 594.336312][ T9961] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1592'. [ 594.345252][ T9961] openvswitch: netlink: Flow key attr not present in new flow. [ 594.876720][ T9963] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1589'. [ 595.306153][ T4325] usb 2-1: can't set config #1, error -110 [ 595.375927][ T9970] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1593'. [ 595.386289][ T9970] [ 595.388655][ T9970] ====================================================== [ 595.395704][ T9970] WARNING: possible circular locking dependency detected [ 595.402770][ T9970] syzkaller #0 Not tainted [ 595.407217][ T9970] ------------------------------------------------------ [ 595.414255][ T9970] syz.4.1593/9970 is trying to acquire lock: [ 595.420255][ T9970] ffff888074012ab8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_dumpreset_obj+0x6e/0x90 [ 595.430825][ T9970] [ 595.430825][ T9970] but task is already holding lock: [ 595.438216][ T9970] ffff8880539ed698 (nlk_cb_mutex-NETFILTER){+.+.}-{3:3}, at: __netlink_dump_start+0x11e/0x6f0 [ 595.448597][ T9970] [ 595.448597][ T9970] which lock already depends on the new lock. [ 595.448597][ T9970] [ 595.459023][ T9970] [ 595.459023][ T9970] the existing dependency chain (in reverse order) is: [ 595.468052][ T9970] [ 595.468052][ T9970] -> #2 (nlk_cb_mutex-NETFILTER){+.+.}-{3:3}: [ 595.476337][ T9970] __mutex_lock+0x12d/0xae0 [ 595.481484][ T9970] __netlink_dump_start+0x11e/0x6f0 [ 595.487248][ T9970] ip_set_dump+0x152/0x1e0 [ 595.492334][ T9970] nfnetlink_rcv_msg+0xcab/0x1290 [ 595.497963][ T9970] netlink_rcv_skb+0x1ef/0x440 [ 595.503278][ T9970] nfnetlink_rcv+0x2b0/0x2470 [ 595.508506][ T9970] netlink_unicast+0x7ad/0x920 [ 595.513830][ T9970] netlink_sendmsg+0x8ad/0xbd0 [ 595.519152][ T9970] ____sys_sendmsg+0x5ed/0x9a0 [ 595.524538][ T9970] ___sys_sendmsg+0x2a2/0x360 [ 595.529781][ T9970] __se_sys_sendmsg+0x1c3/0x2b0 [ 595.535193][ T9970] do_syscall_64+0x4c/0xa0 [ 595.540192][ T9970] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 595.546645][ T9970] [ 595.546645][ T9970] -> #1 (nfnl_subsys_ipset){+.+.}-{3:3}: [ 595.554500][ T9970] __mutex_lock+0x12d/0xae0 [ 595.559576][ T9970] ip_set_nfnl_get_byindex+0x63/0x230 [ 595.565508][ T9970] set_match_v1_checkentry+0x6d/0x220 [ 595.571436][ T9970] xt_check_match+0x499/0xc50 [ 595.576661][ T9970] __nft_match_init+0x63d/0x860 [ 595.582158][ T9970] nf_tables_newrule+0x170a/0x2810 [ 595.587827][ T9970] nfnetlink_rcv+0x1119/0x2470 [ 595.593147][ T9970] netlink_unicast+0x7ad/0x920 [ 595.598472][ T9970] netlink_sendmsg+0x8ad/0xbd0 [ 595.603792][ T9970] ____sys_sendmsg+0x5ed/0x9a0 [ 595.609113][ T9970] ___sys_sendmsg+0x2a2/0x360 [ 595.614349][ T9970] __se_sys_sendmsg+0x1c3/0x2b0 [ 595.619752][ T9970] do_syscall_64+0x4c/0xa0 [ 595.624782][ T9970] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 595.631240][ T9970] [ 595.631240][ T9970] -> #0 (&nft_net->commit_mutex){+.+.}-{3:3}: [ 595.639531][ T9970] __lock_acquire+0x2d18/0x7c40 [ 595.644998][ T9970] lock_acquire+0x1bb/0x4a0 [ 595.650055][ T9970] __mutex_lock+0x12d/0xae0 [ 595.655118][ T9970] nf_tables_dumpreset_obj+0x6e/0x90 [ 595.660987][ T9970] netlink_dump+0x683/0xcd0 [ 595.666059][ T9970] __netlink_dump_start+0x52c/0x6f0 [ 595.671815][ T9970] nft_netlink_dump_start_rcu+0xdb/0x1a0 [ 595.678008][ T9970] nf_tables_getobj_reset+0x1cb/0x610 [ 595.683933][ T9970] nfnetlink_rcv_msg+0x898/0x1290 [ 595.689513][ T9970] netlink_rcv_skb+0x1ef/0x440 [ 595.694850][ T9970] nfnetlink_rcv+0x2b0/0x2470 [ 595.700080][ T9970] netlink_unicast+0x7ad/0x920 [ 595.705396][ T9970] netlink_sendmsg+0x8ad/0xbd0 [ 595.710716][ T9970] ____sys_sendmsg+0x5ed/0x9a0 [ 595.716037][ T9970] ___sys_sendmsg+0x2a2/0x360 [ 595.721267][ T9970] __se_sys_sendmsg+0x1c3/0x2b0 [ 595.726665][ T9970] do_syscall_64+0x4c/0xa0 [ 595.731638][ T9970] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 595.738091][ T9970] [ 595.738091][ T9970] other info that might help us debug this: [ 595.738091][ T9970] [ 595.748433][ T9970] Chain exists of: [ 595.748433][ T9970] &nft_net->commit_mutex --> nfnl_subsys_ipset --> nlk_cb_mutex-NETFILTER [ 595.748433][ T9970] [ 595.762993][ T9970] Possible unsafe locking scenario: [ 595.762993][ T9970] [ 595.770461][ T9970] CPU0 CPU1 [ 595.775848][ T9970] ---- ---- [ 595.781230][ T9970] lock(nlk_cb_mutex-NETFILTER); [ 595.786290][ T9970] lock(nfnl_subsys_ipset); [ 595.793514][ T9970] lock(nlk_cb_mutex-NETFILTER); [ 595.801203][ T9970] lock(&nft_net->commit_mutex); [ 595.806253][ T9970] [ 595.806253][ T9970] *** DEADLOCK *** [ 595.806253][ T9970] [ 595.814417][ T9970] 1 lock held by syz.4.1593/9970: [ 595.819458][ T9970] #0: ffff8880539ed698 (nlk_cb_mutex-NETFILTER){+.+.}-{3:3}, at: __netlink_dump_start+0x11e/0x6f0 [ 595.830220][ T9970] [ 595.830220][ T9970] stack backtrace: [ 595.836151][ T9970] CPU: 0 PID: 9970 Comm: syz.4.1593 Not tainted syzkaller #0 [ 595.843551][ T9970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 595.853638][ T9970] Call Trace: [ 595.856999][ T9970] [ 595.860028][ T9970] dump_stack_lvl+0x188/0x24e [ 595.864783][ T9970] ? load_image+0x410/0x410 [ 595.869330][ T9970] ? show_regs_print_info+0x12/0x12 [ 595.874646][ T9970] ? print_circular_bug+0x12b/0x1a0 [ 595.879916][ T9970] check_noncircular+0x296/0x330 [ 595.884912][ T9970] ? add_chain_block+0x9b0/0x9b0 [ 595.889894][ T9970] ? lockdep_lock+0xf1/0x1f0 [ 595.894562][ T9970] ? _find_first_zero_bit+0xd2/0x100 [ 595.899921][ T9970] __lock_acquire+0x2d18/0x7c40 [ 595.904819][ T9970] ? mark_lock+0x94/0x320 [ 595.909176][ T9970] ? verify_lock_unused+0x140/0x140 [ 595.914395][ T9970] ? __lock_acquire+0x138a/0x7c40 [ 595.919446][ T9970] ? finish_task_switch+0x262/0x8e0 [ 595.924752][ T9970] ? lockdep_hardirqs_on+0x94/0x140 [ 595.930018][ T9970] ? finish_task_switch+0x262/0x8e0 [ 595.935248][ T9970] lock_acquire+0x1bb/0x4a0 [ 595.939779][ T9970] ? nf_tables_dumpreset_obj+0x6e/0x90 [ 595.945263][ T9970] ? nfnetlink_rcv+0x2b0/0x2470 [ 595.950144][ T9970] ? __might_sleep+0xd0/0xd0 [ 595.954748][ T9970] ? read_lock_is_recursive+0x10/0x10 [ 595.960143][ T9970] ? __sched_text_start+0x8/0x8 [ 595.965025][ T9970] __mutex_lock+0x12d/0xae0 [ 595.969557][ T9970] ? nf_tables_dumpreset_obj+0x6e/0x90 [ 595.975046][ T9970] ? nft_pernet+0x23/0x230 [ 595.979546][ T9970] ? nf_tables_dumpreset_obj+0x6e/0x90 [ 595.985050][ T9970] ? __lock_acquire+0x7c40/0x7c40 [ 595.990099][ T9970] ? mutex_lock_nested+0x10/0x10 [ 595.995066][ T9970] ? nft_pernet+0x23/0x230 [ 595.999531][ T9970] ? nft_pernet+0x23/0x230 [ 596.003979][ T9970] nf_tables_dumpreset_obj+0x6e/0x90 [ 596.009293][ T9970] netlink_dump+0x683/0xcd0 [ 596.013819][ T9970] ? netlink_lookup+0x200/0x200 [ 596.018686][ T9970] ? __netlink_lookup+0x69e/0x730 [ 596.023732][ T9970] ? netlink_lookup+0x30/0x200 [ 596.028520][ T9970] ? netlink_lookup+0x30/0x200 [ 596.033314][ T9970] ? nf_tables_dumpreset_obj_start+0x110/0x170 [ 596.039498][ T9970] __netlink_dump_start+0x52c/0x6f0 [ 596.044727][ T9970] ? nft_netlink_dump_start_rcu+0xbb/0x1a0 [ 596.050557][ T9970] nft_netlink_dump_start_rcu+0xdb/0x1a0 [ 596.056333][ T9970] nf_tables_getobj_reset+0x1cb/0x610 [ 596.061724][ T9970] ? nf_tables_delobj+0xfc0/0xfc0 [ 596.066776][ T9970] ? nf_tables_getobj_single+0x600/0x600 [ 596.072443][ T9970] ? nf_tables_dumpreset_obj_start+0x170/0x170 [ 596.078625][ T9970] ? nf_tables_dump_obj+0xd00/0xd00 [ 596.083866][ T9970] ? __nla_parse+0x3c/0x50 [ 596.088396][ T9970] ? nf_tables_delobj+0xfc0/0xfc0 [ 596.093449][ T9970] nfnetlink_rcv_msg+0x898/0x1290 [ 596.098503][ T9970] ? nfnetlink_rcv_msg+0x224/0x1290 [ 596.103745][ T9970] ? nfnetlink_unbind+0x160/0x160 [ 596.108791][ T9970] ? __schedule+0x1087/0x4030 [ 596.113504][ T9970] ? lock_chain_count+0x20/0x20 [ 596.118384][ T9970] ? preempt_schedule_irq+0xe6/0x160 [ 596.123696][ T9970] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 596.129706][ T9970] netlink_rcv_skb+0x1ef/0x440 [ 596.134498][ T9970] ? nfnetlink_unbind+0x160/0x160 [ 596.139546][ T9970] ? netlink_ack+0x1160/0x1160 [ 596.144334][ T9970] ? nfnetlink_rcv+0x206/0x2470 [ 596.149212][ T9970] nfnetlink_rcv+0x2b0/0x2470 [ 596.153910][ T9970] ? lock_chain_count+0x20/0x20 [ 596.158781][ T9970] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 596.164705][ T9970] ? lockdep_hardirqs_on+0x94/0x140 [ 596.169930][ T9970] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 596.175853][ T9970] ? __dev_queue_xmit+0x1d84/0x3810 [ 596.181144][ T9970] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 596.186739][ T9970] ? rcu_preempt_deferred_qs_irqrestore+0x827/0xbd0 [ 596.193522][ T9970] ? rcu_read_unlock_special+0x510/0x510 [ 596.199282][ T9970] ? memcpy+0x3c/0x60 [ 596.203353][ T9970] ? lockdep_hardirqs_off+0x70/0x100 [ 596.208691][ T9970] ? netlink_deliver_tap+0x2e/0x1b0 [ 596.213919][ T9970] ? __netlink_deliver_tap+0x7a9/0x7e0 [ 596.219410][ T9970] ? __lock_acquire+0x7c40/0x7c40 [ 596.224492][ T9970] ? __rcu_read_unlock+0x78/0xd0 [ 596.229449][ T9970] ? netlink_deliver_tap+0x2e/0x1b0 [ 596.234710][ T9970] netlink_unicast+0x7ad/0x920 [ 596.239509][ T9970] netlink_sendmsg+0x8ad/0xbd0 [ 596.244300][ T9970] ? netlink_getsockopt+0x550/0x550 [ 596.249538][ T9970] ? apparmor_socket_sendmsg+0x16c/0x330 [ 596.255256][ T9970] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 596.260591][ T9970] ? security_socket_sendmsg+0x7c/0xa0 [ 596.266112][ T9970] ? netlink_getsockopt+0x550/0x550 [ 596.271340][ T9970] ____sys_sendmsg+0x5ed/0x9a0 [ 596.276148][ T9970] ? __sys_sendmsg_sock+0x30/0x30 [ 596.281186][ T9970] ? __import_iovec+0x306/0x510 [ 596.286062][ T9970] ? import_iovec+0x6f/0xa0 [ 596.290589][ T9970] ___sys_sendmsg+0x2a2/0x360 [ 596.295293][ T9970] ? __sys_sendmsg+0x2a0/0x2a0 [ 596.300099][ T9970] __se_sys_sendmsg+0x1c3/0x2b0 [ 596.304985][ T9970] ? __x64_sys_sendmsg+0x80/0x80 [ 596.309953][ T9970] ? lockdep_hardirqs_on+0x94/0x140 [ 596.315171][ T9970] do_syscall_64+0x4c/0xa0 [ 596.319612][ T9970] ? clear_bhb_loop+0x60/0xb0 [ 596.324340][ T9970] ? clear_bhb_loop+0x60/0xb0 [ 596.329041][ T9970] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 596.334970][ T9970] RIP: 0033:0x7fa9da99de99 [ 596.339464][ T9970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 596.359124][ T9970] RSP: 002b:00007fa9db83c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 596.367612][ T9970] RAX: ffffffffffffffda RBX: 00007fa9dac26180 RCX: 00007fa9da99de99 [ 596.375609][ T9970] RDX: 0000000024040808 RSI: 0000200000000180 RDI: 0000000000000005 [ 596.383597][ T9970] RBP: 00007fa9daa33eaf R08: 0000000000000000 R09: 0000000000000000 [ 596.391590][ T9970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 596.399579][ T9970] R13: 00007fa9dac26218 R14: 00007fa9dac26180 R15: 00007ffcde371258 [ 596.407580][ T9970] [ 597.667589][ T4395] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 598.021361][ T4395] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 598.038944][ T4395] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 598.080386][ T3654] usb 2-1: USB disconnect, device number 38 [ 598.135830][ T4395] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 598.144980][ T4395] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 598.167851][ T4395] usb 1-1: SerialNumber: syz [ 598.363094][ T4395] usb 1-1: 0:2 : does not exist [ 598.420027][ T4395] usb 1-1: USB disconnect, device number 27