last executing test programs: 12m19.061174553s ago: executing program 0 (id=227): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000140)={0x1, 0xf, &(0x7f0000000ac0)="e2868f4aefac7a67561422c516dc17"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0xc8b93000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(0x0, 0x0, &(0x7f00000004c0), 0x200000, &(0x7f0000000c00)=ANY=[]) chdir(&(0x7f0000000300)='./file0\x00') sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0000001f00010029bd7000fedbdf25fc000000000000000000000000000001000004d2020032000a0101020000000000000000000000001b090000000000800c0015005b073500f2520000b3d6cded9e62ee1bc81fec117070b98e80e0a320b181ce8d00c174c2376f1fea6d6b073b73a76fb67914798ce622cbefd9a4e7b04d1616c96014a6df257b916e53a848ad10233cfd5ffde3c7aa01bfe75b39f97874fa59a203c2e2a35d427c34beb3ba2e8132ffa6e9bbbe9d981660f02afc26beec7848009c8a820763f138204445d36eabd6c87eaabfbe90c8ad0293b80f274f43"], 0x4c}, 0x1, 0x0, 0x0, 0x8800}, 0xc8) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) r4 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 12m17.234674301s ago: executing program 0 (id=230): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) 12m12.99698108s ago: executing program 0 (id=239): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, 0x0, 0x8, 0x101, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x40844}, 0x200040d0) recvfrom(r1, 0x0, 0x0, 0x40000021, 0x0, 0x0) 12m10.809148795s ago: executing program 0 (id=242): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@uuid_off, 0x3a}], [], 0x2f}) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00') 12m9.265648901s ago: executing program 0 (id=250): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000018c0)) socket(0x400000000010, 0x3, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYRESDEC], 0x2c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) ppoll(&(0x7f0000000980)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000140)={0x4}) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000100)=""/30, 0x1e}], 0x1, 0xe8, 0x8) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r6 = socket$inet6(0xa, 0x5ea8cac2c10c6e72, 0x3) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="a406000000000000c2040000000001050000000000c204000000130106000000000000000100040109c304000000d6000100c20400000200"], 0x38) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r7, &(0x7f0000000080)='\x00\x00\x00\x00', 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x4, @mcast2, 0x4}, 0x1c) ioctl$sock_TIOCINQ(r7, 0x541b, &(0x7f0000000040)) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 12m1.876480375s ago: executing program 0 (id=260): r0 = gettid() rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8) tkill(r0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) mbind(&(0x7f000092a000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000000)=0x900020, 0x9, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_kvm_add_vcpu$x86(0x0, 0x0) 12m1.275088083s ago: executing program 32 (id=260): r0 = gettid() rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8) tkill(r0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) mbind(&(0x7f000092a000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000000)=0x900020, 0x9, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_kvm_add_vcpu$x86(0x0, 0x0) 9m36.16392096s ago: executing program 3 (id=573): fanotify_init(0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @remote}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040)=0x1, 0x4) 9m33.933883301s ago: executing program 3 (id=576): setreuid(0xffffffffffffffff, 0xee01) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0xff07) 9m33.829308717s ago: executing program 3 (id=577): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x34, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x18, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7f}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004011}, 0x20000000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r6, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'sit0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x40, r5, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}]}, 0x40}, 0x4, 0x700000000000000, 0x0, 0x8025}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x400c004}, 0x4044) r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x19) ioctl$KVM_CAP_X2APIC_API(r10, 0x4068aea3, &(0x7f0000000240)={0x81, 0x0, 0x3}) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x358, 0x0) ptrace$pokeuser(0x6, r0, 0x388, 0x7ffe) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r11, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) 9m32.978348222s ago: executing program 3 (id=581): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) io_uring_setup(0x7b86, &(0x7f0000000040)={0x0, 0xf0ce, 0x1, 0xfffffffc, 0x267}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x23, &(0x7f0000000000), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) memfd_create(0x0, 0x1) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x1, './file1\x00'}, 0x6e) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d1) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1']) chdir(&(0x7f0000000300)='./file0\x00') r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000180)=0x401, 0x4) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r4, &(0x7f0000000080), 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x200000000000000) 9m26.382536912s ago: executing program 3 (id=582): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$IPVS_CMD_GET_DAEMON(r1, 0x0, 0x20048880) accept(r1, 0x0, 0x0) 9m25.998803999s ago: executing program 3 (id=584): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x1d) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, 0x0, &(0x7f0000000080)) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 9m9.815235496s ago: executing program 33 (id=584): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x1d) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, 0x0, &(0x7f0000000080)) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 8m25.205378516s ago: executing program 1 (id=674): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/bnep\x00') r4 = io_uring_setup(0x68, &(0x7f00000000c0)={0x0, 0x1000, 0x2, 0x1, 0x8001, 0x0, r3}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x14, &(0x7f0000001900)=[0xffffffff], 0x2) 8m24.917190462s ago: executing program 1 (id=677): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8003) write$sndseq(0xffffffffffffffff, 0x0, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='nv', 0x2) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) 8m22.154505385s ago: executing program 1 (id=680): r0 = fsopen(&(0x7f0000000640)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) 8m21.551009928s ago: executing program 1 (id=681): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x34, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x18, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7f}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004011}, 0x20000000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r6, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'sit0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x40, r5, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}]}, 0x40}, 0x4, 0x700000000000000, 0x0, 0x8025}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r0}, @NL802154_ATTR_PID={0x8, 0x1c, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_PID={0x8, 0x1c, r0}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c004}, 0x4044) r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x19) ioctl$KVM_CAP_X2APIC_API(r10, 0x4068aea3, &(0x7f0000000240)={0x81, 0x0, 0x3}) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x358, 0x0) ptrace$pokeuser(0x6, r0, 0x388, 0x7ffe) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r11, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) 8m19.414308106s ago: executing program 1 (id=684): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x14, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/custom0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x90, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x10, 0xe}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x64, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x2}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x8}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xb81, 0xf}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x5}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x6}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x2}}]}}]}, 0x90}}, 0x4004000) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001340)=@newtfilter={0x3c, 0x2c, 0xf35, 0x70bd23, 0x2, {0x0, 0x0, 0x0, r4, {0xf2ff, 0x2400}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xcb}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x440}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x40) chdir(&(0x7f0000000340)='./file0\x00') openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x60001, 0x36) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r5, 0x1, 0x28, &(0x7f0000000000)=0x1, 0xffb2) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 8m18.654246599s ago: executing program 1 (id=688): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000380)={0x0, 0x6}, 0x8) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r5 = accept4(r3, 0x0, 0x0, 0x0) sendto(r5, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r4, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) 8m3.088588334s ago: executing program 34 (id=688): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000380)={0x0, 0x6}, 0x8) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r5 = accept4(r3, 0x0, 0x0, 0x0) sendto(r5, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r4, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) 15.212285113s ago: executing program 2 (id=2296): r0 = creat(&(0x7f0000000100)='./file0\x00', 0x7a) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000440)='.\x00', 0x449) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x64, 0x0, &(0x7f0000000480)="07003d8cfa7dbecb9093317efc4e550fe40f9d55dfe5b573b9861c207b358592cca77412039e58ef41cb725dc463f283798900589cc275a3f91190a5ea9235ae83bfac8ecc05032000246ad645e09c87c5a817ef4b935f4509ccfb39e1106269dcd6a2a0", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) close(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x17e) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r2, 0x402, 0x1a) openat$cgroup_ro(r2, 0x0, 0x275a, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000740)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f00000000c0)={r4}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000001c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={r5, 0x3, r3, 0x5}) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 14.953685412s ago: executing program 7 (id=2299): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, &(0x7f0000000140)={0x40, 0x9, 0xcf, {0xcf, 0x1, "083ae30f40706dfad4e4eff690651d940e902b9f40534e9ea4cc949164e6f3eaafeb7c04f2bba68fa16f605e9fc609dad0a81d6822c2be01d10944c8c54aba0b748935301216336464b2334f4b403bf3dcf8ef6d5d4f7a616efdf424bd309c76fa7d670b05f7627009e65ef7b036f9b839b8997917e506a677b7203fa7bd33432a6b9084dd8d411627dc6096452a605b785b89cc29f7d262cd85fa480b7c0618069bc37d1cdbfee79c319db6f5d1736dc327d42218f32caa581c097d42fe2a082df0e5876dcbea76b231cd264a"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xfcff}}, &(0x7f00000002c0)={0x0, 0x22, 0x8, {[@global=@item_012={0x0, 0x1, 0x2}, @global=@item_4={0x3, 0x1, 0x9, "4b44b003"}, @main=@item_012={0x1, 0x0, 0x8, "cd"}]}}, &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x80, 0x1, {0x22, 0xa6f}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x40, 0x17, 0x10, "20e147865ba92e31aea6e4f64451f612"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000440)={0x20, 0x1, 0xd7, "0663d49f11fc67ec83cb671b3dab6771410827f56bafc6fcc3c70e2e2e106c428f2e5bb6b27fe90c542e2ae944c324f0c5e3274e29a1cc9c10143446cbf5de7e75fd92f964d3ccbaf2fe57f5154ccd419b7ce49a45e47eb1a90e5ef7506b6a7b5322878452f064c7e82643b7d298d59831df0be54b9344db5f5fe34b4321531f96a51fb61e5c815406da8c69ed022b7f1a720425c0b8afd44a18d4111e8c55f7ede1f1e1ab87a6237de69099de5bbddd4a1b86c0894858aee7696bf5da8c49189289b3a0acbbf2bd27540a849d13c3fd81a9658e000b22"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0x4}}) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000940)={0xd, "95bc9233a0ffadb335984bb3280b7840ca36304441bfb8b79ebdfe0534843f462a2e51c23b47519839c74c89785759d861f0cbab603459d543d8937b4693682b"}) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$HIDIOCGRDESCSIZE(r1, 0x80044801, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000780)={0x20, 0x13, 0x29, "e437b99eec508d53f6a3e8be9a92ac72bff60f5fe9d4dabef50edf810c0cf6123c9ad0fbca181f1f81"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000840)={0x20, 0x1, 0x4f, "f65e2be80caa7aefb0982792b99da40a6c907be3b2f999c30daf096e38b9a2ae91d32dc646fecb2fbc073ae177aba60b6189ab1c255591cc9c48140013d9e1d0ffb7a5b42991d0a9b48e6a5b2fa0c4"}, &(0x7f00000008c0)={0x20, 0x3, 0x1, 0x40}}) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x8000) r2 = socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0xff, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) syz_usb_control_io(r0, 0x0, 0x0) 14.153120507s ago: executing program 2 (id=2302): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8}, 0x48) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mremap(&(0x7f0000b89000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00006e6000/0x3000)=nil) syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) 12.646959167s ago: executing program 6 (id=2307): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x2, 0x9}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r4, 0x7}}, 0x48) 11.949952071s ago: executing program 2 (id=2310): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) syz_emit_ethernet(0x2a, &(0x7f0000000bc0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 11.813522091s ago: executing program 7 (id=2311): r0 = epoll_create(0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)={'#! ', './file0'}, 0xb) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) gettid() rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000180)=0x1) openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x200040, 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, &(0x7f0000000040)={0x8098f905, 0x250, "6005588a3f9f90ac060100050000009a9f7e1db9c90600008040f722e62200", 0x1, 0xfff}) sched_setattr(0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) setxattr$system_posix_acl(&(0x7f00000001c0)='./bus\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) rmdir(&(0x7f0000000280)='./bus\x00') r7 = accept4(r5, 0x0, 0x0, 0x800) recvmsg(r7, 0x0, 0x12) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r8, &(0x7f0000000000), 0x0, 0x2, 0x0) 11.310742431s ago: executing program 2 (id=2313): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0xc040) ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x40043d14, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, 0x0, 0x22) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mbind(&(0x7f0000e49000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x1, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)=0x7fffffffffffffff) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100003441eb4023398a716af6b593a0010902240001000040000904"], 0x0) 11.285156796s ago: executing program 4 (id=2314): rt_sigprocmask(0x2, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$unix(0x1, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x40, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0xfff2}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x44, 0x2, 0x5, 0x6, 0x2, 0x6}, {0xfc, 0x1, 0x7, 0xffff, 0x1163, 0x10}, 0x7000000, 0xffff00, 0xc31}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 10.709501165s ago: executing program 4 (id=2317): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) r2 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'geneve0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r6, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) r7 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000a18000/0x4000)=nil, 0x4000, 0x100000b, 0x20010, r7, 0x180000000) mmap(&(0x7f0000a9b000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0xb424e000) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x8, 0x5d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000004200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x4000005}}], 0x1, 0x0) 10.280973845s ago: executing program 4 (id=2318): r0 = socket$qrtr(0x2a, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) ftruncate(r1, 0xc17a) writev(r0, &(0x7f0000000180)=[{&(0x7f0000002680)}], 0x1) 9.829426659s ago: executing program 4 (id=2320): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8}, 0x48) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mremap(&(0x7f0000b89000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00006e6000/0x3000)=nil) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) 7.453090437s ago: executing program 6 (id=2322): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.316853332s ago: executing program 6 (id=2323): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) pwritev(r0, &(0x7f0000000500), 0x0, 0x5, 0xfffffff9) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r1, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg$unix(r4, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000001380)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f00000012c0)={r8, 0x8002, 0x7fff, 0x0, 0x0, [0x0], [0x2], [0x0, 0x4, 0xfffffffe, 0x5e8]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r10}) 6.019107758s ago: executing program 7 (id=2325): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea800000000001090224000100000000090400000103000000092100000001220700090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) write$hidraw(r1, 0x0, 0x0) 3.509626917s ago: executing program 5 (id=2327): rt_sigprocmask(0x2, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$unix(0x1, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0xfff2}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x44, 0x2, 0x5, 0x6, 0x2, 0x6}, {0xfc, 0x1, 0x7, 0xffff, 0x1163, 0x10}, 0x7000000, 0xffff00, 0xc31}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 3.352853596s ago: executing program 2 (id=2328): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x7}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)="e1", 0x1}], 0x1}}], 0x1, 0x24000840) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)=ANY=[], 0x8397de475a1b5b02) 3.101908854s ago: executing program 6 (id=2329): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x2d) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x0, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x22) syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}}, 0x8000) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000}], 0xa0000) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000000100)={0xfffffffb, 0x0, 0x40}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r2], 0x60}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x3000c00, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYBLOB="2c726f6f746d6f64653d301b30303030300e00030000000000a7303034303030302c757365725f69643d1bcdff4bd2f34db2c0874921fef244dc6c581ab0962bce0fe8660155fdfa712c2c35642b51bfd010a3b8eaac336adb6b1747a4b5c45b8f8db10b6c80428c67e35d", @ANYRES32, @ANYBLOB="8b6e61"]) read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x0) 3.100072445s ago: executing program 5 (id=2330): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x14318, 0x1a2a1}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_AF_SPEC={0x4}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) 2.902230572s ago: executing program 5 (id=2331): rt_sigprocmask(0x2, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0xfff2}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x44, 0x2, 0x5, 0x6, 0x2, 0x6}, {0xfc, 0x1, 0x7, 0xffff, 0x1163, 0x10}, 0x7000000, 0xffff00, 0xc31}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg(r0, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@ll={0x11, 0x17, r6, 0x1, 0x4}, 0x80, 0x0}}], 0x1, 0x40000) 2.882352633s ago: executing program 4 (id=2332): syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3"]) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) 2.87448673s ago: executing program 6 (id=2333): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000407d1e9c3100000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000800)={0x24, 0x0, 0x0, &(0x7f0000000900)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x5, "bd"}, @local=@item_4={0x3, 0x2, 0x8, "301ef0fd"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x0, 0x3, 0x41, "f5d251d8ada79186797cbcc67ba8f8c527cc75b8df59fabcda84269b17ea372e2ab6b77a856cff4858599140218c82abadd44ff4742b0bbb95cb89058e63880096"}, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.843908319s ago: executing program 2 (id=2334): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, &(0x7f0000000140)={0x40, 0x9, 0xcf, {0xcf, 0x1, "083ae30f40706dfad4e4eff690651d940e902b9f40534e9ea4cc949164e6f3eaafeb7c04f2bba68fa16f605e9fc609dad0a81d6822c2be01d10944c8c54aba0b748935301216336464b2334f4b403bf3dcf8ef6d5d4f7a616efdf424bd309c76fa7d670b05f7627009e65ef7b036f9b839b8997917e506a677b7203fa7bd33432a6b9084dd8d411627dc6096452a605b785b89cc29f7d262cd85fa480b7c0618069bc37d1cdbfee79c319db6f5d1736dc327d42218f32caa581c097d42fe2a082df0e5876dcbea76b231cd264a"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xfcff}}, &(0x7f00000002c0)={0x0, 0x22, 0x8, {[@global=@item_012={0x0, 0x1, 0x2}, @global=@item_4={0x3, 0x1, 0x9, "4b44b003"}, @main=@item_012={0x1, 0x0, 0x8, "cd"}]}}, &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x80, 0x1, {0x22, 0xa6f}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x40, 0x17, 0x10, "20e147865ba92e31aea6e4f64451f612"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000440)={0x20, 0x1, 0xd7, "0663d49f11fc67ec83cb671b3dab6771410827f56bafc6fcc3c70e2e2e106c428f2e5bb6b27fe90c542e2ae944c324f0c5e3274e29a1cc9c10143446cbf5de7e75fd92f964d3ccbaf2fe57f5154ccd419b7ce49a45e47eb1a90e5ef7506b6a7b5322878452f064c7e82643b7d298d59831df0be54b9344db5f5fe34b4321531f96a51fb61e5c815406da8c69ed022b7f1a720425c0b8afd44a18d4111e8c55f7ede1f1e1ab87a6237de69099de5bbddd4a1b86c0894858aee7696bf5da8c49189289b3a0acbbf2bd27540a849d13c3fd81a9658e000b22"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0x4}}) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000940)={0xd, "95bc9233a0ffadb335984bb3280b7840ca36304441bfb8b79ebdfe0534843f462a2e51c23b47519839c74c89785759d861f0cbab603459d543d8937b4693682b"}) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000780)={0x20, 0x13, 0x29, "e437b99eec508d53f6a3e8be9a92ac72bff60f5fe9d4dabef50edf810c0cf6123c9ad0fbca181f1f81"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000840)={0x20, 0x1, 0x4f, "f65e2be80caa7aefb0982792b99da40a6c907be3b2f999c30daf096e38b9a2ae91d32dc646fecb2fbc073ae177aba60b6189ab1c255591cc9c48140013d9e1d0ffb7a5b42991d0a9b48e6a5b2fa0c4"}, &(0x7f00000008c0)={0x20, 0x3, 0x1, 0x40}}) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x8000) r1 = socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0xff, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) syz_usb_control_io(r0, 0x0, 0x0) 2.773826383s ago: executing program 7 (id=2335): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x48574653, 0x3, @stepwise={0xa, 0x5, 0x4, 0x71, 0x8, 0x9}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) socket(0x1e, 0x4, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x9d8, 0x5, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x5, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc3c, 0x3, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x4, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffffb, 0x4, 0x0, 0x4, 0x5, 0x8, 0x8000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0x14, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x7ff, 0xe000000000000, 0xe4, 0xf, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0x2000000009, 0x7, 0x0, 0x6, 0x6, 0xb, 0x100000002, 0x4, 0x4, 0x7, 0x7, 0x7, 0x8, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x100000003, 0x4, 0x7, 0x406, 0x3, 0x6, 0x2, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0xe, 0x3]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x33, 0x3d, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffdce) io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6931, 0x17, 0x0, 0x0) 2.636454501s ago: executing program 5 (id=2336): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)=0x10) 2.606879798s ago: executing program 7 (id=2337): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071109b000000000006000500"/32], 0x0, 0x5}, 0x94) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0xf}, 0x50) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xa7c, r4}, 0x38) sendto$packet(r2, &(0x7f0000000640)="0596d7692e5d15cde1f0f74f3aa53138bdd9e692f0", 0x15, 0xc855, &(0x7f0000000200)={0x11, 0x86dd, 0x0, 0x1, 0x8, 0x6, @random="842c4c45bc33"}, 0x14) sendto$packet(r1, &(0x7f0000000100)="867f85fcca5bea09e966dd6394169be0840c976a2844dc667d0094e6b7996f84e9dc86f7da2856e3d7e2b727b6382f5f086a078123e96416bc794a10350dc2bef434250aed51987d2e9d32ff1f36d8b8ebbf597188b87d2145f48f2088804892ed6173ffefc881849bddb286b7d120cebde29ab26947ad39b0bfbe900ad1da1c3c2a13ae14e87a4310b5ad0c333f1ca5509595d0b01cc8a0a282006618c19a595e9e9564831abdbf3a48bc224f0b0d381681d525f5ff573f46647913f03af8d2cf4a2032797f90b6a7a3f3cdff46ac232f406d907d5f55453ef7ed691c38b67a0443a9ea4b4deae41008", 0xea, 0x40000, &(0x7f0000000200)={0x11, 0xd, 0x0, 0x1, 0xa, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x14) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 2.485466682s ago: executing program 5 (id=2338): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, 0x0, &(0x7f0000000000)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = gettid() sched_setattr(r3, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0xdb, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000440), 0x3) read(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) linkat(r5, &(0x7f0000000000)='\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1400) ptrace(0x10, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) syz_open_dev$dri(&(0x7f00000001c0), 0x8, 0x47a45d90d8f77123) userfaultfd(0x80001) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) r6 = socket$inet_sctp(0x2, 0x400000000001, 0x84) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x16, 0x9}]}, 0x10) sendto$inet(r6, &(0x7f0000000800)='u', 0x1, 0x801, &(0x7f0000000040)={0x2, 0x4e23, @private=0xa010100}, 0x10) listen(r6, 0xda8c) accept4(r6, 0x0, 0x0, 0x0) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) io_pgetevents(0x0, 0x2, 0x0, 0x0, 0x0, 0x0) 2.445429182s ago: executing program 7 (id=2339): socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="40000f000000012721dcfe14c639a500ba17162716"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000100)=0x7fffffff, 0x4) r2 = fsopen(&(0x7f0000000500)='cifs\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000001c0)='acl\x00JN\xa0\xc3\xcd,\xebl>J\"f\xe7\xe0A\x04%\xb4\xd0\x7fb)\x9f\xd3\xeb\xfe\x8fi\xee\x02\x03\a\xb0p\xe9\xfe_\a0\xee\x82{\xa5\xbc\xb6\x8d\xe8\xe3K{H\xbc\xa0y+\xabL,\x8b^|#x\x85\xacc\xa5\xf3\xa7\x05Y~\xc3\xbag\x1d\x95\xcd\xaf\xd2\xd6\xc7v3\xe1r\xdbL\xcdPu\x91\xce\xa5\x86@vG\xb1t\x0f\xf2gg\xcb\xbc\xe9\x90\x00\xd5\xb2V0yZD/\xa1\x7f\xee{\xd3\xecN\xb1\xee\xb1\xb5\x1bu0=:\x84\xd5N2\xc5\x91\x8d\x12\xf7\xdd\xea\xad\xf8<$b\x8b\x89\x18\xe6\xaa\xf3\xa9\x01_\x9b\x89\x05\xc7\xb9\xac\xf5\xb8\x9d2\x8bt\x16\xe8\x9e\x02*\x8a\x83:\a\xef\xee\xeb\xf9\x96\xe9\b\v7`SN\xd1}s\xa7\x8c\x9bB\x13P\x11\x1fl\xc87\x96\xa2\x8f9\xfe\xb0Y~{=SU\xc8D\xe8(\x1c\xffQ\xa9\xdfY06\x19\xa7\x91&\x03Q\x95\xda\xde\x17\xd4\x954\xf8\xa6\xfad:c\xf4\xaa\x99\xcb\xd2GtO', 0x0, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000140)={@remote, r5}, 0x14) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f00000003c0)={@remote, r5}, 0x14) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(0xffffffffffffffff, 0x1, 0x80) fchdir(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r7, 0x7ffffffe, 0x1) getdents64(r7, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_usb_control_io$hid(r0, 0x0, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r8, 0x5b14, 0x0) 1.788031211s ago: executing program 4 (id=2340): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) pwritev(r0, &(0x7f0000000500), 0x0, 0x5, 0xfffffff9) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r1, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg$unix(r4, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000001380)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f00000012c0)={r8, 0x8002, 0x7fff, 0x0, 0x0, [0x0], [0x2], [0x0, 0x4, 0xfffffffe, 0x5e8]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r10}) 628.202589ms ago: executing program 6 (id=2341): socket$packet(0x11, 0x2, 0x300) syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000200)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7}) 0s ago: executing program 5 (id=2342): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0xa}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) kernel console output (not intermixed with test programs): 'lowerdir' [ 597.078081][ T6151] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 597.230946][ T6151] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 597.230984][ T6151] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 597.231007][ T6151] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 597.231061][ T6151] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 597.231085][ T6151] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.293341][ T6151] usb 7-1: config 0 descriptor?? [ 597.719507][ T6151] usbhid 7-1:0.0: can't add hid device: -71 [ 597.719739][ T6151] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 597.749899][ T6151] usb 7-1: USB disconnect, device number 10 [ 598.068636][T10998] netlink: 'syz.5.1311': attribute type 1 has an invalid length. [ 598.096710][T10998] vxlan0: entered promiscuous mode [ 598.096982][T10998] bridge0: port 3(vxlan0) entered blocking state [ 598.097082][T10998] bridge0: port 3(vxlan0) entered disabled state [ 598.097290][T10998] vxlan0: entered allmulticast mode [ 598.661629][T11022] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 598.903062][T11022] overlayfs: missing 'lowerdir' [ 600.136387][T11049] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1330'. [ 600.183044][T11049] fuse: Bad value for 'fd' [ 602.565877][T11083] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1344'. [ 603.011928][T11101] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1349'. [ 603.025887][T11101] fuse: Bad value for 'fd' [ 606.276225][T11139] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 606.369153][T11141] overlayfs: missing 'lowerdir' [ 608.267565][T11159] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1367'. [ 608.269350][T11159] fuse: Bad value for 'fd' [ 609.418243][ T6874] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 609.549742][ T6874] usb 6-1: device descriptor read/64, error -71 [ 610.128026][ T6874] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 610.258220][ T6874] usb 6-1: device descriptor read/64, error -71 [ 610.368487][ T6874] usb usb6-port1: attempt power cycle [ 610.708115][ T6874] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 610.729190][ T6874] usb 6-1: device descriptor read/8, error -71 [ 610.969626][ T6874] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 610.994687][ T6874] usb 6-1: device descriptor read/8, error -71 [ 611.098516][ T6874] usb usb6-port1: unable to enumerate USB device [ 616.721702][T11316] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1432'. [ 616.721821][T11316] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1432'. [ 617.138154][ T5880] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 617.288149][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 617.291535][ T5880] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 617.291560][ T5880] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 617.291624][ T5880] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 617.291641][ T5880] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 617.291672][ T5880] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 617.291688][ T5880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.385096][ T5880] usb 6-1: config 0 descriptor?? [ 617.517092][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.517193][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 617.517220][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 617.517266][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 617.517686][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.628306][ T9] usb 5-1: config 0 descriptor?? [ 617.875327][T11344] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1446'. [ 617.911815][T11344] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1446'. [ 618.724078][ T5880] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 618.746266][ T9] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 618.746304][ T9] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 618.746334][ T9] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 618.746362][ T9] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 618.746397][ T9] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 618.746426][ T9] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 618.746453][ T9] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 618.746482][ T9] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 618.746509][ T9] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 618.943141][ T9] plantronics 0003:047F:FFFF.000A: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 619.006303][ T9] usb 5-1: USB disconnect, device number 23 [ 619.114457][ T10] usb 6-1: USB disconnect, device number 21 [ 619.192740][T11357] fido_id[11357]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 622.702102][ T994] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 622.885282][ T994] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.885319][ T994] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.885342][ T994] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 622.885386][ T994] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 622.885410][ T994] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.944602][ T994] usb 5-1: config 0 descriptor?? [ 623.730376][ T994] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 623.837630][ T994] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 623.964720][ T10] usb 5-1: USB disconnect, device number 24 [ 624.219781][T11412] fido_id[11412]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 624.859892][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.984451][ T60] Bluetooth: hci0: command 0x0406 tx timeout [ 628.960646][T11486] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 632.378078][ T994] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 632.624023][ T994] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 632.624063][ T994] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 632.624091][ T994] usb 5-1: config 0 interface 0 has no altsetting 0 [ 632.624127][ T994] usb 5-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 632.624158][ T994] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.685451][ T994] usb 5-1: config 0 descriptor?? [ 633.161901][ T994] hid_parser_main: 6 callbacks suppressed [ 633.161935][ T994] thrustmaster 0003:044F:B323.000C: unknown main item tag 0x6 [ 633.161970][ T994] thrustmaster 0003:044F:B323.000C: invalid report_size 26545 [ 633.161988][ T994] thrustmaster 0003:044F:B323.000C: item 0 2 1 7 parsing failed [ 633.162779][ T994] thrustmaster 0003:044F:B323.000C: parse failed [ 633.162859][ T994] thrustmaster 0003:044F:B323.000C: probe with driver thrustmaster failed with error -22 [ 633.347082][ T6874] usb 5-1: USB disconnect, device number 25 [ 637.849194][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 637.882914][ T60] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 637.886640][ T60] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 637.912252][ T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 637.918521][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 638.133847][T11555] lo speed is unknown, defaulting to 1000 [ 640.438011][ T5798] Bluetooth: hci1: command tx timeout [ 640.641859][T11577] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1539'. [ 641.245760][T11588] overlay: Unknown parameter '/' [ 642.498151][ T5798] Bluetooth: hci1: command tx timeout [ 644.608049][ T5798] Bluetooth: hci1: command tx timeout [ 644.837691][T11612] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1550'. [ 644.850908][ T6054] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.049675][ T994] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 646.254441][ T994] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 646.254499][ T994] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 646.254546][ T994] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 646.254570][ T994] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.300054][ T994] usb 7-1: config 0 descriptor?? [ 646.325583][ T994] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 646.736252][T11618] overlay: Unknown parameter '/' [ 647.438011][ T5798] Bluetooth: hci1: command tx timeout [ 647.728177][T11623] CIFS: bad ip= option (%‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð) [ 647.866202][ T6054] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.894447][ T9082] usb 7-1: USB disconnect, device number 11 [ 647.962327][ T994] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 648.109394][ T994] usb 5-1: Using ep0 maxpacket: 8 [ 648.114113][ T994] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 648.114151][ T994] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 648.114174][ T994] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 648.114199][ T994] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 648.114226][ T994] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 648.114267][ T994] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 648.114291][ T994] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.231662][ T994] usb 5-1: config 0 descriptor?? [ 648.247060][T11624] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 648.496947][ T60] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 648.695035][ T5798] Bluetooth: hci2: Opcode 0x0c03 failed: -71 [ 648.713242][ T9] usb 5-1: USB disconnect, device number 26 [ 648.811636][ T6054] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.021025][T11555] chnl_net:caif_netlink_parms(): no params data found [ 651.497811][ T6054] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.892551][T11664] overlay: Unknown parameter '/' [ 655.266814][T11555] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.266944][T11555] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.267135][T11555] bridge_slave_0: entered allmulticast mode [ 655.291530][T11555] bridge_slave_0: entered promiscuous mode [ 655.366199][T11555] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.366322][T11555] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.366539][T11555] bridge_slave_1: entered allmulticast mode [ 655.388280][T11555] bridge_slave_1: entered promiscuous mode [ 655.689462][T11699] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1572'. [ 655.791215][T11555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 655.796604][ T6054] bridge_slave_1: left allmulticast mode [ 655.796628][ T6054] bridge_slave_1: left promiscuous mode [ 655.796817][ T6054] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.882301][ T6054] bridge_slave_0: left allmulticast mode [ 655.882350][ T6054] bridge_slave_0: left promiscuous mode [ 655.886050][ T6054] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.821303][T11718] overlay: Bad value for 'uuid' [ 661.028693][ T6054] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 661.290010][ T6054] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 663.222105][ T6054] bond0 (unregistering): Released all slaves [ 663.407503][T11555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 663.641515][T11555] team0: Port device team_slave_0 added [ 663.656919][T11555] team0: Port device team_slave_1 added [ 663.734518][T11555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 663.734538][T11555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.734568][T11555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 663.737364][T11555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 663.737380][T11555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.737409][T11555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 663.951173][T11555] hsr_slave_0: entered promiscuous mode [ 663.952651][T11555] hsr_slave_1: entered promiscuous mode [ 663.953613][T11555] debugfs: 'hsr0' already exists in 'hsr' [ 663.953639][T11555] Cannot create hsr debugfs directory [ 664.189440][T11762] overlay: Bad value for 'uuid' [ 664.545864][ T994] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 664.708599][ T994] usb 5-1: Using ep0 maxpacket: 8 [ 664.727772][ T994] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 664.727806][ T994] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 664.745836][ T994] usb 5-1: Product: syz [ 664.745860][ T994] usb 5-1: Manufacturer: syz [ 664.745877][ T994] usb 5-1: SerialNumber: syz [ 664.945545][ T994] usb 5-1: config 0 descriptor?? [ 664.956032][ T994] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 665.892958][T11776] vlan2: entered promiscuous mode [ 665.893188][T11776] vlan2: entered allmulticast mode [ 665.893244][T11776] hsr_slave_1: entered allmulticast mode [ 665.899880][ T994] gspca_zc3xx: reg_w_i err -110 [ 665.899967][ T994] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 666.125353][ T994] usb 5-1: USB disconnect, device number 27 [ 667.086042][ T6054] hsr_slave_0: left promiscuous mode [ 667.127171][ T6054] hsr_slave_1: left promiscuous mode [ 667.282963][ T6054] veth1_macvtap: left promiscuous mode [ 667.283074][ T6054] veth0_macvtap: left promiscuous mode [ 667.283335][ T6054] veth1_vlan: left promiscuous mode [ 667.283512][ T6054] veth0_vlan: left promiscuous mode [ 670.088112][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 670.207304][T11815] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1596'. [ 670.240356][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 670.242876][ T9] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 670.242927][ T9] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 670.242948][ T9] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 670.242967][ T9] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 670.245956][ T9] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 670.245978][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.246021][ T9] usb 5-1: Product: syz [ 670.246038][ T9] usb 5-1: Manufacturer: syz [ 670.246054][ T9] usb 5-1: SerialNumber: syz [ 670.372198][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 670.417174][ T9] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input17 [ 670.598925][ T9] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 670.598947][ T9] (id 0x00) [ 670.747997][ T9] rc_core: IR keymap rc-imon-pad not found [ 670.748022][ T9] Registered IR keymap rc-empty [ 670.748124][ T9] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 670.748143][ T9] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 670.830108][ T9] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 670.860607][ T9] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input18 [ 670.915692][ T9] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:28> initialized [ 671.721432][ T6054] team0 (unregistering): Port device team_slave_1 removed [ 671.778785][ T6054] team0 (unregistering): Port device team_slave_0 removed [ 672.062969][ T9082] lo speed is unknown, defaulting to 1000 [ 672.064100][ T9082] syz2: Port: 1 Link DOWN [ 672.540417][ T994] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 672.628226][ T9] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 672.658426][T11834] imon:send_packet: task interrupted [ 672.658650][T11834] imon:send_packet: packet tx failed (-512) [ 672.658786][T11834] imon:vfd_write: send packet #1 failed [ 672.659261][T11834] imon:send_packet: task interrupted [ 672.659275][T11834] imon:send_packet: packet tx failed (-512) [ 672.659315][T11834] imon:vfd_write: send packet #0 failed [ 672.660003][T11834] imon:send_packet: task interrupted [ 672.660017][T11834] imon:send_packet: packet tx failed (-512) [ 672.660057][T11834] imon:vfd_write: send packet #0 failed [ 672.661775][T11834] imon:send_packet: packet tx failed (-32) [ 672.661959][T11834] imon:vfd_write: send packet #0 failed [ 672.798137][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 672.808874][ T994] usb 6-1: Using ep0 maxpacket: 16 [ 672.813103][ T994] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 672.813178][ T994] usb 6-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 672.813204][ T994] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.825701][ T9] usb 7-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 672.825731][ T9] usb 7-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 672.825750][ T9] usb 7-1: Product: syz [ 672.825763][ T9] usb 7-1: Manufacturer: syz [ 672.825774][ T9] usb 7-1: SerialNumber: syz [ 672.848894][ T9082] usb 5-1: USB disconnect, device number 28 [ 673.009793][ T9] usb 7-1: config 0 descriptor?? [ 673.037422][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 673.103614][ T994] usb 6-1: config 0 descriptor?? [ 674.277463][ T9] gspca_zc3xx: reg_w_i err -110 [ 674.277567][ T9] gspca_zc3xx 7-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 674.464092][T11856] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1600'. [ 675.960736][ T994] usbhid 6-1:0.0: can't add hid device: -71 [ 675.960866][ T994] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 676.104673][ T994] usb 6-1: USB disconnect, device number 22 [ 676.175206][T11829] vlan3: entered promiscuous mode [ 676.175365][T11829] vlan3: entered allmulticast mode [ 676.175376][T11829] hsr_slave_1: entered allmulticast mode [ 678.238158][ T994] usb 7-1: USB disconnect, device number 12 [ 679.625190][T11555] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 679.686882][T11555] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 679.754226][T11555] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 679.845516][T11555] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 680.278936][T11912] fuse: Bad value for 'fd' [ 681.568404][ T5880] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 681.740736][ T5880] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 681.740773][ T5880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 681.740801][ T5880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 681.740824][ T5880] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 681.740868][ T5880] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 681.740892][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.519857][T11555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 682.530277][ T5880] usb 5-1: config 0 descriptor?? [ 683.430237][T11555] 8021q: adding VLAN 0 to HW filter on device team0 [ 683.565695][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.565901][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 683.676433][ T5880] usbhid 5-1:0.0: can't add hid device: -71 [ 683.676568][ T5880] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 683.705266][ T5880] usb 5-1: USB disconnect, device number 29 [ 683.706503][ T6054] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.706643][ T6054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 683.998052][ T5871] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 684.207970][ T5871] usb 6-1: Using ep0 maxpacket: 8 [ 684.408887][ T5871] usb 6-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 684.408923][ T5871] usb 6-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 684.408947][ T5871] usb 6-1: Product: syz [ 684.408959][ T5871] usb 6-1: Manufacturer: syz [ 684.408971][ T5871] usb 6-1: SerialNumber: syz [ 684.474157][ T5871] usb 6-1: config 0 descriptor?? [ 684.502539][ T5871] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 685.419420][T11938] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1618'. [ 685.609116][T11923] vlan2: entered promiscuous mode [ 685.614295][T11923] vlan2: entered allmulticast mode [ 685.614328][T11923] hsr_slave_1: entered allmulticast mode [ 686.028374][ T5871] gspca_zc3xx: reg_w_i err -110 [ 686.028446][ T5871] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 686.208686][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.450696][ T5871] usb 6-1: USB disconnect, device number 23 [ 686.685001][T11555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 687.217537][T11555] veth0_vlan: entered promiscuous mode [ 687.272972][T11555] veth1_vlan: entered promiscuous mode [ 687.520126][T11555] veth0_macvtap: entered promiscuous mode [ 687.560091][T11555] veth1_macvtap: entered promiscuous mode [ 687.656871][T11555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 687.670641][T11555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 689.746712][ T73] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.789161][ T73] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.790684][ T796] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.062252][ T796] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.510636][ T6060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 690.510659][ T6060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.637088][ T3492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 690.637110][ T3492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.738885][ T5880] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 690.892984][ T5880] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 690.893031][ T5880] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 690.893059][ T5880] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 690.893083][ T5880] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 690.893126][ T5880] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 690.893150][ T5880] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.988990][ T5880] usb 7-1: config 0 descriptor?? [ 691.606280][ T5880] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 692.074549][ T5959] usb 7-1: USB disconnect, device number 13 [ 692.300505][T12003] fido_id[12003]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 698.368093][ T5959] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 698.639711][ T5959] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 698.639739][ T5959] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 698.778339][ T5959] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 698.778364][ T5959] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.778379][ T5959] usb 3-1: Product: syz [ 698.778390][ T5959] usb 3-1: Manufacturer: syz [ 698.778400][ T5959] usb 3-1: SerialNumber: syz [ 698.825133][ T5959] usb 3-1: config 0 descriptor?? [ 698.968439][ T5880] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 699.061869][T12064] fuse: Bad value for 'fd' [ 699.201260][ T5959] ims_pcu 3-1:0.0: Missing CDC union descriptor [ 699.201307][ T5959] ims_pcu 3-1:0.0: probe with driver ims_pcu failed with error -22 [ 699.340495][ T5880] usb 7-1: config 171 has an invalid interface number: 109 but max is 0 [ 699.340525][ T5880] usb 7-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 699.340546][ T5880] usb 7-1: config 171 has no interface number 0 [ 699.340593][ T5880] usb 7-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 699.340620][ T5880] usb 7-1: config 171 interface 109 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 699.343792][ T5880] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 699.343823][ T5880] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.343844][ T5880] usb 7-1: Product: syz [ 699.343858][ T5880] usb 7-1: Manufacturer: syz [ 699.343873][ T5880] usb 7-1: SerialNumber: syz [ 699.488023][ T6874] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 699.613861][T12059] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 700.315275][ T6874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 700.315309][ T6874] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 700.315356][ T6874] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 700.315382][ T6874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.371370][ T6874] usb 5-1: config 0 descriptor?? [ 701.339980][ T6874] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 702.508390][T12073] netlink: 'syz.6.1647': attribute type 21 has an invalid length. [ 702.508591][T12073] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1647'. [ 702.510721][T12073] netlink: 'syz.6.1647': attribute type 21 has an invalid length. [ 702.510867][T12073] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1647'. [ 702.738298][ T5880] ath6kl: Failed to submit usb control message: -110 [ 702.738356][ T5880] ath6kl: unable to send the bmi data to the device: -110 [ 702.738372][ T5880] ath6kl: Unable to send get target info: -110 [ 702.742665][ T5880] ath6kl: Failed to init ath6kl core: -110 [ 702.749774][ T5880] ath6kl_usb 7-1:171.109: probe with driver ath6kl_usb failed with error -110 [ 702.776780][ T5880] usb 5-1: USB disconnect, device number 30 [ 704.850616][ T5871] usb 3-1: USB disconnect, device number 13 [ 706.768841][ T5880] usb 7-1: USB disconnect, device number 14 [ 709.035334][T12114] mac80211_hwsim hwsim17 syzkaller0: entered promiscuous mode [ 709.035405][T12114] mac80211_hwsim hwsim17 syzkaller0: entered allmulticast mode [ 709.198064][ T9] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 709.371727][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 709.371764][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 709.371791][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 709.371823][ T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 709.371840][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.490538][ T9] usb 7-1: config 0 descriptor?? [ 709.918840][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 709.918974][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 709.923422][ T9] usb 7-1: USB disconnect, device number 15 [ 712.795654][T12160] mac80211_hwsim hwsim21 syzkaller0: entered promiscuous mode [ 712.795683][T12160] mac80211_hwsim hwsim21 syzkaller0: entered allmulticast mode [ 718.441818][T12207] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.1689'. [ 718.818403][ T9] usb 6-1: new low-speed USB device number 24 using dummy_hcd [ 719.218775][ T9] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 719.218811][ T9] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 719.218839][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 719.218875][ T9] usb 6-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 719.218898][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.971627][ T9] usb 6-1: config 0 descriptor?? [ 720.610989][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 720.611088][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 720.618225][ T9] usb 6-1: USB disconnect, device number 24 [ 721.308017][T12207] infiniband syz1: set active [ 721.308043][T12207] infiniband syz1: added bond0 [ 721.370295][T12207] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 721.377066][T12207] infiniband syz1: Couldn't open port 1 [ 721.650550][T12207] RDS/IB: syz1: added [ 721.651672][T12207] smc: adding ib device syz1 with port count 1 [ 721.652075][T12207] smc: ib device syz1 port 1 has no pnetid [ 722.594910][T12238] ALSA: mixer_oss: invalid OSS volume 'lo' [ 723.388076][ T10] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 723.538123][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 723.540252][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 723.540289][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 723.540311][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 723.540374][ T10] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 723.540399][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.660833][ T10] usb 6-1: config 0 descriptor?? [ 724.074912][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 724.075065][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 724.115217][ T10] usb 6-1: USB disconnect, device number 25 [ 725.966110][T12271] ALSA: mixer_oss: invalid OSS volume 'lo' [ 726.870138][ T10] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 727.020246][ T10] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 727.020269][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 727.020284][ T10] usb 5-1: config 0 has no interface number 0 [ 727.020316][ T10] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 727.020333][ T10] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 727.022805][ T10] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 727.022835][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.022850][ T10] usb 5-1: Product: syz [ 727.022883][ T10] usb 5-1: Manufacturer: syz [ 727.022899][ T10] usb 5-1: SerialNumber: syz [ 727.079375][ T10] usb 5-1: config 0 descriptor?? [ 727.790238][ T5874] usb 5-1: USB disconnect, device number 31 [ 728.163457][T12301] ALSA: mixer_oss: invalid OSS volume 'lo' [ 729.142459][T12316] binder: 12315:12316 ioctl 4018620d 0 returned -22 [ 731.933728][T12345] binder: 12344:12345 ioctl 4018620d 0 returned -22 [ 732.075533][T12351] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 732.104839][T12351] overlayfs: missing 'lowerdir' [ 732.608197][ T5959] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 732.761895][ T5959] usb 5-1: Using ep0 maxpacket: 16 [ 732.764338][ T5959] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 732.764373][ T5959] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 732.764397][ T5959] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 732.764446][ T5959] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 732.764470][ T5959] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.770222][ T5959] usb 5-1: config 0 descriptor?? [ 733.202181][ T5959] usbhid 5-1:0.0: can't add hid device: -71 [ 733.202276][ T5959] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 733.205667][ T5959] usb 5-1: USB disconnect, device number 32 [ 733.309397][T12368] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.1749'. [ 738.825712][T12435] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 738.872321][T12435] overlayfs: missing 'lowerdir' [ 740.976749][T12448] syzkaller1: entered promiscuous mode [ 740.976770][T12448] syzkaller1: entered allmulticast mode [ 745.696688][T12487] loop2: detected capacity change from 0 to 7 [ 745.820203][T12482] Dev loop2: unable to read RDB block 7 [ 745.820273][T12482] loop2: unable to read partition table [ 745.820456][T12482] loop2: partition table beyond EOD, truncated [ 745.908421][T12487] Dev loop2: unable to read RDB block 7 [ 745.908483][T12487] loop2: unable to read partition table [ 745.908807][T12487] loop2: partition table beyond EOD, truncated [ 745.908835][T12487] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 746.340689][T12496] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 746.362474][T12496] overlayfs: missing 'lowerdir' [ 747.208098][ T6874] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 747.370261][ T6874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 747.370288][ T6874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 747.370316][ T6874] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 747.370334][ T6874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.377441][ T6874] usb 5-1: config 0 descriptor?? [ 747.636366][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.035122][ T36] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 748.122687][T12521] fuse: Bad value for 'fd' [ 748.833418][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 748.834108][ T6874] usbhid 5-1:0.0: can't add hid device: -71 [ 748.834241][ T6874] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 748.841856][ T6874] usb 5-1: USB disconnect, device number 33 [ 748.859663][ T36] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 748.862561][ T36] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 748.862591][ T36] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 748.862611][ T36] usb 3-1: Manufacturer: syz [ 748.979028][ T36] usb 3-1: config 0 descriptor?? [ 749.024262][ T36] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 749.628032][ T36] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 749.790541][ T36] usb 5-1: Using ep0 maxpacket: 16 [ 749.809099][ T36] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 749.809125][ T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 749.812529][ T36] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 749.812552][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.812567][ T36] usb 5-1: Product: syz [ 749.812578][ T36] usb 5-1: Manufacturer: syz [ 749.812588][ T36] usb 5-1: SerialNumber: syz [ 749.886467][ T36] usb 5-1: config 0 descriptor?? [ 749.899152][ T36] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 749.899190][ T36] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 750.422214][ T5880] usb 3-1: USB disconnect, device number 14 [ 750.520423][ T36] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 750.521465][ T36] em28xx 5-1:0.0: Config register raw data: 0x56 [ 750.724954][ T36] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 750.724972][ T36] em28xx 5-1:0.0: No AC97 audio processor [ 751.242907][T12551] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1809'. [ 751.245904][T12551] fuse: Bad value for 'fd' [ 752.385078][T12565] fuse: Bad value for 'fd' [ 752.471312][ T5880] usb 5-1: USB disconnect, device number 34 [ 752.473845][ T5880] em28xx 5-1:0.0: Disconnecting em28xx [ 752.669170][ T5880] em28xx 5-1:0.0: Freeing device [ 752.757583][T12570] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 756.469074][T12589] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1820'. [ 756.470327][T12589] fuse: Bad value for 'fd' [ 756.940597][ T6874] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 757.038277][ T9082] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 757.088246][ T6874] usb 3-1: Using ep0 maxpacket: 16 [ 757.354102][ T6874] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 757.354139][ T6874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 757.374262][ T6874] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 757.374332][ T6874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.374354][ T6874] usb 3-1: Product: syz [ 757.374369][ T6874] usb 3-1: Manufacturer: syz [ 757.374386][ T6874] usb 3-1: SerialNumber: syz [ 757.400353][ T9082] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 757.400392][ T9082] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 757.400415][ T9082] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 757.400459][ T9082] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 757.400482][ T9082] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.454125][ T6874] usb 3-1: config 0 descriptor?? [ 757.525366][ T9082] usb 7-1: config 0 descriptor?? [ 757.533495][ T6874] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 757.533530][ T6874] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 757.686870][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f784c00: rx timeout, send abort [ 757.975559][ T9082] usbhid 7-1:0.0: can't add hid device: -71 [ 757.975698][ T9082] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 758.000260][ T9082] usb 7-1: USB disconnect, device number 16 [ 758.074458][ T6874] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 758.076376][ T6874] em28xx 3-1:0.0: Config register raw data: 0x56 [ 758.190100][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f784c00: abort rx timeout. Force session deactivation [ 758.278754][ T6874] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 758.278783][ T6874] em28xx 3-1:0.0: No AC97 audio processor [ 758.699875][T12622] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1833'. [ 758.701166][T12622] fuse: Bad value for 'fd' [ 760.574222][ T6874] usb 3-1: USB disconnect, device number 15 [ 760.590923][ T6874] em28xx 3-1:0.0: Disconnecting em28xx [ 760.613692][ T6874] em28xx 3-1:0.0: Freeing device [ 761.689949][ C1] vcan0: j1939_tp_rxtimer: 0xffff888072ce4800: rx timeout, send abort [ 762.190040][ C1] vcan0: j1939_tp_rxtimer: 0xffff888072ce4800: abort rx timeout. Force session deactivation [ 762.190524][ C1] vcan0: j1939_tp_rxtimer: 0xffff888072ce4000: rx timeout, send abort [ 762.544220][T12661] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1844'. [ 762.573475][T12661] fuse: Bad value for 'fd' [ 762.658011][ T10] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 762.690728][ C1] vcan0: j1939_tp_rxtimer: 0xffff888072ce4000: abort rx timeout. Force session deactivation [ 762.825196][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 762.825236][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 762.827439][ T10] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 762.827471][ T10] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 762.827486][ T10] usb 5-1: Manufacturer: syz [ 762.882332][ T10] usb 5-1: config 0 descriptor?? [ 763.018460][ T5880] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 763.078617][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802aad8400: rx timeout, send abort [ 763.168107][ T5880] usb 7-1: Using ep0 maxpacket: 16 [ 763.170837][ T5880] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 763.170908][ T5880] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 763.174194][ T5880] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 763.174289][ T5880] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.174312][ T5880] usb 7-1: Product: syz [ 763.174327][ T5880] usb 7-1: Manufacturer: syz [ 763.174343][ T5880] usb 7-1: SerialNumber: syz [ 763.264908][ T5880] usb 7-1: config 0 descriptor?? [ 763.285493][ T5880] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 763.285520][ T5880] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 763.296192][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 763.296675][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 763.333498][ T10] usb 5-1: USB disconnect, device number 35 [ 763.578722][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802aad8400: abort rx timeout. Force session deactivation [ 763.878883][ T5880] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 763.879621][ T5880] em28xx 7-1:0.0: Config register raw data: 0x56 [ 764.081038][ T5880] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 764.081063][ T5880] em28xx 7-1:0.0: No AC97 audio processor [ 765.432367][ T5798] Bluetooth: hci1: command 0x0406 tx timeout [ 765.766518][ T9082] usb 7-1: USB disconnect, device number 17 [ 765.768486][ T9082] em28xx 7-1:0.0: Disconnecting em28xx [ 765.788682][ T9082] em28xx 7-1:0.0: Freeing device [ 766.549020][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804b0dc800: rx timeout, send abort [ 767.049121][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804b0dc800: abort rx timeout. Force session deactivation [ 767.049240][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804b0dc000: rx timeout, send abort [ 767.309350][T12704] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1857'. [ 767.313950][T12704] fuse: Bad value for 'fd' [ 767.549327][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804b0dc000: abort rx timeout. Force session deactivation [ 767.702736][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805fdd0400: rx timeout, send abort [ 767.778511][ T6874] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 767.952208][ T6874] usb 7-1: Using ep0 maxpacket: 16 [ 767.954291][ T6874] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 767.954327][ T6874] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 768.000841][ T6874] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 768.000873][ T6874] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.000895][ T6874] usb 7-1: Product: syz [ 768.000911][ T6874] usb 7-1: Manufacturer: syz [ 768.000927][ T6874] usb 7-1: SerialNumber: syz [ 768.007442][ T6874] usb 7-1: config 0 descriptor?? [ 768.135562][ T6874] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 768.135590][ T6874] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 768.202798][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805fdd0400: abort rx timeout. Force session deactivation [ 768.206477][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805fdd2400: rx timeout, send abort [ 768.412422][ T36] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 768.566645][ T36] usb 6-1: Using ep0 maxpacket: 32 [ 768.574512][ T36] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 768.574569][ T36] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 768.574598][ T36] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 768.574627][ T36] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 768.593139][ T36] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 768.593201][ T36] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.593271][ T36] usb 6-1: Product: syz [ 768.593286][ T36] usb 6-1: Manufacturer: syz [ 768.593302][ T36] usb 6-1: SerialNumber: syz [ 768.705202][ T6874] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 768.706536][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805fdd2400: abort rx timeout. Force session deactivation [ 768.706736][ T6874] em28xx 7-1:0.0: Config register raw data: 0x56 [ 768.852516][ C1] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 768.900296][ T36] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input21 [ 768.907310][ T6874] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 768.907334][ T6874] em28xx 7-1:0.0: No AC97 audio processor [ 769.058014][ T36] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 769.058036][ T36] (id 0x00) [ 769.328319][ T36] rc_core: IR keymap rc-imon-pad not found [ 769.328345][ T36] Registered IR keymap rc-empty [ 769.328439][ T36] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 769.328461][ T36] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 769.367121][ T36] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0 [ 769.430666][ T36] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0/input22 [ 769.673910][ T36] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:26> initialized [ 770.579961][ T6874] usb 7-1: USB disconnect, device number 18 [ 770.582424][ T6874] em28xx 7-1:0.0: Disconnecting em28xx [ 770.632053][ T6874] em28xx 7-1:0.0: Freeing device [ 770.637409][T12749] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1873'. [ 770.657784][T12749] fuse: Bad value for 'fd' [ 771.011121][ T37] audit: type=1326 audit(1775815908.213:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12758 comm="syz.4.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255de8c819 code=0x7ffc0000 [ 771.011180][ T37] audit: type=1326 audit(1775815908.213:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12758 comm="syz.4.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255de8c819 code=0x7ffc0000 [ 771.015001][ T37] audit: type=1326 audit(1775815908.213:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12758 comm="syz.4.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f255de8c819 code=0x7ffc0000 [ 771.127681][ T37] audit: type=1326 audit(1775815908.283:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12758 comm="syz.4.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255de8c819 code=0x7ffc0000 [ 771.160986][ C0] vcan0: j1939_tp_rxtimer: 0xffff888038af2400: rx timeout, send abort [ 771.205240][ T37] audit: type=1326 audit(1775815908.363:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12758 comm="syz.4.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f255de8c819 code=0x7ffc0000 [ 771.287222][T12767] imon:send_packet: task interrupted [ 771.287244][T12767] imon:send_packet: packet tx failed (-512) [ 771.287328][T12767] imon:vfd_write: send packet #4 failed [ 771.290640][T12767] imon:send_packet: task interrupted [ 771.290686][T12767] imon:send_packet: packet tx failed (-512) [ 771.290808][T12767] imon:vfd_write: send packet #0 failed [ 771.293406][T12767] imon:send_packet: task interrupted [ 771.293423][T12767] imon:send_packet: packet tx failed (-512) [ 771.293470][T12767] imon:vfd_write: send packet #0 failed [ 771.294433][T12767] imon:send_packet: packet tx failed (-32) [ 771.305310][T12767] imon:vfd_write: send packet #0 failed [ 771.400112][ T36] usb 6-1: USB disconnect, device number 26 [ 771.593119][ T37] audit: type=1326 audit(1775815908.783:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12758 comm="syz.4.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255de8c819 code=0x7ffc0000 [ 771.593180][ T37] audit: type=1326 audit(1775815908.783:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12758 comm="syz.4.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f255de8c819 code=0x7ffc0000 [ 771.593223][ T37] audit: type=1326 audit(1775815908.783:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12758 comm="syz.4.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255de8c819 code=0x7ffc0000 [ 771.593256][ T37] audit: type=1326 audit(1775815908.783:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12758 comm="syz.4.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f255de8c819 code=0x7ffc0000 [ 771.593288][ T37] audit: type=1326 audit(1775815908.783:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12758 comm="syz.4.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255de8c819 code=0x7ffc0000 [ 771.661105][ C0] vcan0: j1939_tp_rxtimer: 0xffff888038af2400: abort rx timeout. Force session deactivation [ 771.661225][ C0] vcan0: j1939_tp_rxtimer: 0xffff888038af3800: rx timeout, send abort [ 772.161318][ C0] vcan0: j1939_tp_rxtimer: 0xffff888038af3800: abort rx timeout. Force session deactivation [ 772.198096][ T9082] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 772.354530][ T9082] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 772.354556][ T9082] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 772.354572][ T9082] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 772.354603][ T9082] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 772.354650][ T9082] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.374079][ T9082] usb 7-1: config 0 descriptor?? [ 773.074391][ T9082] usbhid 7-1:0.0: can't add hid device: -71 [ 773.074595][ T9082] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 773.105763][ T9082] usb 7-1: USB disconnect, device number 19 [ 773.438039][ T5880] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 773.594167][ T5880] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 773.594205][ T5880] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 773.594246][ T5880] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 773.594270][ T5880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.653002][ T5880] usb 6-1: config 0 descriptor?? [ 773.768187][ T36] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 773.831726][T12788] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 773.942129][T12788] overlayfs: missing 'lowerdir' [ 773.982260][ T36] usb 3-1: Using ep0 maxpacket: 16 [ 773.991358][ T36] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 773.991434][ T36] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 774.003863][ T36] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 774.003957][ T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.003986][ T36] usb 3-1: Product: syz [ 774.004001][ T36] usb 3-1: Manufacturer: syz [ 774.004015][ T36] usb 3-1: SerialNumber: syz [ 774.213451][ T36] usb 3-1: config 0 descriptor?? [ 774.388928][ T36] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 774.388968][ T36] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 774.579787][ T5880] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 774.600030][ T5880] cp2112 0003:10C4:EA90.000E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 774.721673][ T5880] cp2112 0003:10C4:EA90.000E: Part Number: 0x63 Device Version: 0xD4 [ 774.936911][ T36] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 774.938016][ T36] em28xx 3-1:0.0: Config register raw data: 0x56 [ 774.965744][T12792] cp2112 0003:10C4:EA90.000E: pid 12792 passed too short report [ 774.967266][ T5880] cp2112 0003:10C4:EA90.000E: error requesting SMBus config [ 774.999871][ T5880] cp2112 0003:10C4:EA90.000E: probe with driver cp2112 failed with error -32 [ 775.139386][ T36] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 775.139410][ T36] em28xx 3-1:0.0: No AC97 audio processor [ 776.341686][ T5880] usb 6-1: USB disconnect, device number 27 [ 776.566203][ T36] usb 3-1: USB disconnect, device number 16 [ 776.602261][ T36] em28xx 3-1:0.0: Disconnecting em28xx [ 776.640776][ T36] em28xx 3-1:0.0: Freeing device [ 776.728036][ T5880] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 776.882863][ T5880] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 776.882901][ T5880] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 776.885982][ T5880] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 776.886013][ T5880] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 776.886035][ T5880] usb 6-1: Manufacturer: syz [ 776.953017][ T5880] usb 6-1: config 0 descriptor?? [ 777.489431][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 777.489554][ T5880] usbhid 6-1:0.0: can't add hid device: -32 [ 777.489645][ T5880] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 777.494019][ T5880] usb 6-1: USB disconnect, device number 28 [ 777.844434][ T9082] usb 5-1: new low-speed USB device number 36 using dummy_hcd [ 778.210454][ T9082] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 778.210494][ T9082] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 778.210524][ T9082] usb 5-1: config 0 interface 0 has no altsetting 0 [ 778.210558][ T9082] usb 5-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 778.210581][ T9082] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.226603][ T9082] usb 5-1: config 0 descriptor?? [ 778.776641][T12835] fuse: Bad value for 'fd' [ 778.845672][ T9082] usbhid 5-1:0.0: can't add hid device: -71 [ 778.845806][ T9082] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 778.901741][ T9082] usb 5-1: USB disconnect, device number 36 [ 780.318019][ T9082] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 780.428036][ T5880] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 780.470703][ T9082] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 780.470728][ T9082] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 780.470756][ T9082] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 780.470773][ T9082] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.474640][ T9082] usb 5-1: config 0 descriptor?? [ 780.585844][ T5880] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 780.612114][ T5880] usb 6-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=f6.6a [ 780.612162][ T5880] usb 6-1: New USB device strings: Mfr=181, Product=147, SerialNumber=160 [ 780.612212][ T5880] usb 6-1: Product: syz [ 780.612229][ T5880] usb 6-1: Manufacturer: syz [ 780.612243][ T5880] usb 6-1: SerialNumber: syz [ 780.656960][ T5880] usb 6-1: config 0 descriptor?? [ 780.763452][ T5880] comedi comedi5: Wrong number of endpoints [ 780.763502][ T5880] ni6501 6-1:0.0: driver 'ni6501' failed to auto-configure device. [ 780.916247][ T9082] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 780.960422][ T9082] cp2112 0003:10C4:EA90.000F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 781.097896][ T9082] cp2112 0003:10C4:EA90.000F: Part Number: 0x63 Device Version: 0xD4 [ 781.351621][T12845] cp2112 0003:10C4:EA90.000F: pid 12845 passed too short report [ 781.352680][ T9082] cp2112 0003:10C4:EA90.000F: error requesting SMBus config [ 781.420849][ T9082] cp2112 0003:10C4:EA90.000F: probe with driver cp2112 failed with error -32 [ 783.041300][ T6874] usb 6-1: USB disconnect, device number 29 [ 783.098249][ T5871] usb 5-1: USB disconnect, device number 37 [ 783.581376][T12860] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 783.711921][T12860] overlayfs: missing 'lowerdir' [ 784.232660][T12868] fuse: Bad value for 'fd' [ 784.812418][T12879] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1916'. [ 786.217969][ T6874] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 786.368375][ T6874] usb 3-1: Using ep0 maxpacket: 16 [ 786.374926][ T6874] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 786.374966][ T6874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 786.411325][ T6874] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 786.411360][ T6874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.411381][ T6874] usb 3-1: Product: syz [ 786.411396][ T6874] usb 3-1: Manufacturer: syz [ 786.411410][ T6874] usb 3-1: SerialNumber: syz [ 786.458753][ T6874] usb 3-1: config 0 descriptor?? [ 786.475955][ T6874] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 786.475982][ T6874] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 787.421111][ T6874] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 787.428223][ T6874] em28xx 3-1:0.0: Config register raw data: 0x56 [ 787.624370][ T6874] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 787.626996][ T6874] em28xx 3-1:0.0: No AC97 audio processor [ 788.253788][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803b79cc00: rx timeout, send abort [ 788.753874][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803b79cc00: abort rx timeout. Force session deactivation [ 788.753992][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803ca48800: rx timeout, send abort [ 789.124610][ T9082] usb 3-1: USB disconnect, device number 17 [ 789.127082][ T9082] em28xx 3-1:0.0: Disconnecting em28xx [ 789.183184][ T9082] em28xx 3-1:0.0: Freeing device [ 789.254115][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803ca48800: abort rx timeout. Force session deactivation [ 789.289826][T12912] fuse: Bad value for 'fd' [ 789.884342][T12928] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1928'. [ 790.942214][T12936] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 790.969548][T12936] overlayfs: missing 'lowerdir' [ 793.119953][ C1] vcan0: j1939_tp_rxtimer: 0xffff888061176800: rx timeout, send abort [ 793.620029][ C1] vcan0: j1939_tp_rxtimer: 0xffff888061176800: abort rx timeout. Force session deactivation [ 793.620167][ C1] vcan0: j1939_tp_rxtimer: 0xffff888061177000: rx timeout, send abort [ 794.120229][ C1] vcan0: j1939_tp_rxtimer: 0xffff888061177000: abort rx timeout. Force session deactivation [ 795.573992][T12980] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 795.595283][T12980] overlayfs: missing 'lowerdir' [ 795.748187][ T5959] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 795.998118][ T5959] usb 3-1: device descriptor read/64, error -71 [ 796.248115][ T5959] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 796.249769][ C0] vcan0: j1939_tp_rxtimer: 0xffff888060629400: rx timeout, send abort [ 796.388011][ T5959] usb 3-1: device descriptor read/64, error -71 [ 796.501370][ T5959] usb usb3-port1: attempt power cycle [ 796.749861][ C0] vcan0: j1939_tp_rxtimer: 0xffff888060629400: abort rx timeout. Force session deactivation [ 796.749985][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806062bc00: rx timeout, send abort [ 796.851671][ T5959] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 796.879568][ T5959] usb 3-1: device descriptor read/8, error -71 [ 797.118616][ T5959] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 797.141656][ T5959] usb 3-1: device descriptor read/8, error -71 [ 797.248476][ T5959] usb usb3-port1: unable to enumerate USB device [ 797.250078][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806062bc00: abort rx timeout. Force session deactivation [ 797.978063][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f9a6400: rx timeout, send abort [ 798.473998][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f9a7c00: rx timeout, send abort [ 798.478166][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f9a6400: abort rx timeout. Force session deactivation [ 798.974081][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f9a7c00: abort rx timeout. Force session deactivation [ 799.198023][ T6874] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 799.350021][ T6874] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 799.350048][ T6874] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 799.350076][ T6874] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 799.350093][ T6874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.416194][ T6874] usb 6-1: config 0 descriptor?? [ 799.840387][ T6874] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 799.860446][ T6874] cp2112 0003:10C4:EA90.0010: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 799.872685][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803bdca400: rx timeout, send abort [ 800.034776][ T6874] cp2112 0003:10C4:EA90.0010: Part Number: 0x63 Device Version: 0xD4 [ 800.372726][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803bdcac00: rx timeout, send abort [ 800.404433][T13034] cp2112 0003:10C4:EA90.0010: pid 13034 passed too short report [ 800.426371][ T6874] cp2112 0003:10C4:EA90.0010: error requesting SMBus config [ 800.501513][ T10] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 800.504174][ T6874] cp2112 0003:10C4:EA90.0010: probe with driver cp2112 failed with error -32 [ 800.647958][ T10] usb 7-1: device descriptor read/64, error -71 [ 800.872822][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803bdcac00: abort rx timeout. Force session deactivation [ 800.888902][ T10] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 800.928137][ T5871] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 801.018013][ T10] usb 7-1: device descriptor read/64, error -71 [ 801.084785][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 801.084823][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 801.086122][ T5871] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 801.086154][ T5871] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 801.086183][ T5871] usb 3-1: Manufacturer: syz [ 801.130061][ T10] usb usb7-port1: attempt power cycle [ 801.154368][ T5871] usb 3-1: config 0 descriptor?? [ 801.467954][ T10] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 801.489110][ T10] usb 7-1: device descriptor read/8, error -71 [ 801.585607][ C1] raw-gadget.2 gadget.2: ignoring, device is not running [ 801.586222][ T5871] usbhid 3-1:0.0: can't add hid device: -32 [ 801.586319][ T5871] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 801.615979][ T5871] usb 3-1: USB disconnect, device number 22 [ 801.729920][ T10] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 801.751751][ T10] usb 7-1: device descriptor read/8, error -71 [ 801.862768][ T10] usb usb7-port1: unable to enumerate USB device [ 801.963021][ T5880] usb 6-1: USB disconnect, device number 30 [ 802.508007][ T5880] usb 6-1: new low-speed USB device number 31 using dummy_hcd [ 802.521280][T13055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1973'. [ 802.658271][T13055] hsr_slave_1 (unregistering): left promiscuous mode [ 802.660747][ T5880] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 802.660782][ T5880] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 802.660810][ T5880] usb 6-1: config 0 interface 0 has no altsetting 0 [ 802.660850][ T5880] usb 6-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 802.660873][ T5880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.749367][ T5880] usb 6-1: config 0 descriptor?? [ 803.366699][ T5880] usbhid 6-1:0.0: can't add hid device: -71 [ 803.366810][ T5880] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 803.411644][ T5880] usb 6-1: USB disconnect, device number 31 [ 803.778008][ T6151] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 803.929900][ T6151] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 803.929927][ T6151] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 803.929954][ T6151] usb 7-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 803.929971][ T6151] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.935156][ T6151] usb 7-1: config 0 descriptor?? [ 804.379003][ T6151] isku 0003:1E7D:319C.0011: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.6-1/input0 [ 804.566450][ T6151] isku 0003:1E7D:319C.0011: couldn't init struct isku_device [ 804.566517][ T6151] isku 0003:1E7D:319C.0011: couldn't install keyboard [ 804.594683][ T6151] isku 0003:1E7D:319C.0011: probe with driver isku failed with error -5 [ 804.798078][ T5880] usb 7-1: USB disconnect, device number 24 [ 804.879686][T13072] fido_id[13072]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 804.981022][T13078] syzkaller0: entered promiscuous mode [ 804.981046][T13078] syzkaller0: entered allmulticast mode [ 805.118014][ T9082] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 805.274617][ T9082] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 805.274654][ T9082] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 805.274700][ T9082] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 805.274723][ T9082] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.308656][ T9082] usb 6-1: config 0 descriptor?? [ 805.718105][ T6151] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 805.751047][ T9082] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 805.811874][ T9082] cp2112 0003:10C4:EA90.0012: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 805.870684][ T6151] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 805.870720][ T6151] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 805.872201][ T6151] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 805.872230][ T6151] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 805.872251][ T6151] usb 7-1: Manufacturer: syz [ 805.930867][ T6151] usb 7-1: config 0 descriptor?? [ 805.951175][ T9082] cp2112 0003:10C4:EA90.0012: Part Number: 0x63 Device Version: 0xD4 [ 806.228545][T13089] cp2112 0003:10C4:EA90.0012: pid 13089 passed too short report [ 806.248195][ T9082] cp2112 0003:10C4:EA90.0012: error requesting SMBus config [ 806.404635][ T9082] cp2112 0003:10C4:EA90.0012: probe with driver cp2112 failed with error -32 [ 806.564213][ T6151] usbhid 7-1:0.0: can't add hid device: -71 [ 806.564354][ T6151] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 806.606827][ T6151] usb 7-1: USB disconnect, device number 25 [ 806.898056][ T5880] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 807.047950][ T5880] usb 5-1: device descriptor read/64, error -71 [ 807.288099][ T5880] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 807.671401][ T5880] usb 5-1: device descriptor read/64, error -71 [ 807.779722][ T5880] usb usb5-port1: attempt power cycle [ 807.933689][ T5959] usb 6-1: USB disconnect, device number 32 [ 808.128143][ T5880] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 808.150249][ T5880] usb 5-1: device descriptor read/8, error -71 [ 808.388004][ T5880] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 808.410627][ T5880] usb 5-1: device descriptor read/8, error -71 [ 808.518548][ T5880] usb usb5-port1: unable to enumerate USB device [ 809.068466][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.939096][ T5959] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 810.103385][ T5959] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 810.103419][ T5959] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.103440][ T5959] usb 6-1: Product: syz [ 810.103455][ T5959] usb 6-1: Manufacturer: syz [ 810.103470][ T5959] usb 6-1: SerialNumber: syz [ 810.226219][ T5959] usb 6-1: config 0 descriptor?? [ 810.278955][ T5959] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 810.332141][ T5959] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 810.337968][ T6151] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 810.418282][ T5959] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 810.418391][ T5959] usb 6-1: media controller created [ 810.446395][T13118] netlink: 'syz.5.1992': attribute type 1 has an invalid length. [ 810.446414][T13118] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1992'. [ 810.493608][ T6151] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 810.493647][ T6151] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 810.493692][ T6151] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 810.493717][ T6151] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.559316][ T6151] usb 3-1: config 0 descriptor?? [ 810.815574][ T5959] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 810.997585][ T6151] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 811.022067][ T6151] cp2112 0003:10C4:EA90.0013: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 811.194321][ T6151] cp2112 0003:10C4:EA90.0013: Part Number: 0x63 Device Version: 0xD4 [ 811.381653][ T5959] DVB: Unable to find symbol mt352_attach() [ 811.451140][T13142] cp2112 0003:10C4:EA90.0013: pid 13142 passed too short report [ 811.452060][ T6151] cp2112 0003:10C4:EA90.0013: error requesting SMBus config [ 811.457314][ T6151] cp2112 0003:10C4:EA90.0013: probe with driver cp2112 failed with error -32 [ 811.518900][ T5959] DVB: Unable to find symbol nxt6000_attach() [ 811.518913][ T5959] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 811.551738][ T5959] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input23 [ 811.560504][ T5959] dvb-usb: schedule remote query interval to 1000 msecs. [ 811.560564][ T5959] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 811.561809][ T5959] dvb-usb: bulk message failed: -22 (7/0) [ 811.561868][ T5959] dvb-usb: bulk message failed: -22 (7/0) [ 812.170840][ T5959] usb 6-1: USB disconnect, device number 33 [ 812.380144][ T5959] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 813.184806][ T5959] usb 3-1: USB disconnect, device number 23 [ 815.978951][T13182] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2009'. [ 815.980643][T13182] fuse: Bad value for 'fd' [ 816.402719][ T6151] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 816.547987][ T6874] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 816.555126][ T6151] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 816.555159][ T6151] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.555182][ T6151] usb 5-1: Product: syz [ 816.555196][ T6151] usb 5-1: Manufacturer: syz [ 816.555210][ T6151] usb 5-1: SerialNumber: syz [ 816.610543][ T6151] usb 5-1: config 0 descriptor?? [ 816.634209][ T6151] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 816.668743][ T6151] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 816.669664][ T6151] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 816.669722][ T6151] usb 5-1: media controller created [ 816.720857][ T6874] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 816.720895][ T6874] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 816.720936][ T6874] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 816.720961][ T6874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.724656][ T6151] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 816.798677][ T6874] usb 6-1: config 0 descriptor?? [ 816.868130][T13187] netlink: 'syz.4.2012': attribute type 1 has an invalid length. [ 816.868156][T13187] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2012'. [ 817.055521][ T6151] DVB: Unable to find symbol mt352_attach() [ 817.262103][ T6874] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 817.302954][ T6874] cp2112 0003:10C4:EA90.0014: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 817.499527][ T6874] cp2112 0003:10C4:EA90.0014: Part Number: 0x63 Device Version: 0xD4 [ 817.572929][ T6151] DVB: Unable to find symbol nxt6000_attach() [ 817.572956][ T6151] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 817.638928][ T6151] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input24 [ 817.687295][ T6151] dvb-usb: schedule remote query interval to 1000 msecs. [ 817.687389][ T6151] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 817.687409][ T6151] dvb-usb: bulk message failed: -22 (7/0) [ 817.687425][ T6151] dvb-usb: bulk message failed: -22 (7/0) [ 817.759934][T13205] cp2112 0003:10C4:EA90.0014: pid 13205 passed too short report [ 817.761203][ T6874] cp2112 0003:10C4:EA90.0014: error requesting SMBus config [ 817.795270][ T6874] cp2112 0003:10C4:EA90.0014: probe with driver cp2112 failed with error -32 [ 818.684699][ T6874] usb 5-1: USB disconnect, device number 42 [ 818.842108][ T6874] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 819.600369][ T5959] usb 6-1: USB disconnect, device number 34 [ 819.658002][ T6874] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 819.808045][ T6874] usb 5-1: Using ep0 maxpacket: 32 [ 819.839690][ T6874] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 819.839733][ T6874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.839756][ T6874] usb 5-1: Product: syz [ 819.839771][ T6874] usb 5-1: Manufacturer: syz [ 819.839786][ T6874] usb 5-1: SerialNumber: syz [ 819.847087][ T6874] usb 5-1: config 0 descriptor?? [ 820.697114][T13225] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2017'. [ 821.571708][T13225] input: syz0 as /devices/virtual/input/input25 [ 821.858867][ T6874] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: failure sending bit rate [ 821.858913][ T6874] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -110 [ 822.248731][T13229] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2022'. [ 822.249962][T13229] fuse: Bad value for 'fd' [ 823.278184][ T5959] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 823.449481][ T5959] usb 3-1: Using ep0 maxpacket: 32 [ 823.451646][ T5959] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 823.451704][ T5959] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 823.451732][ T5959] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 823.451764][ T5959] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 823.454310][ T5959] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 823.454339][ T5959] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.454365][ T5959] usb 3-1: Product: syz [ 823.454376][ T5959] usb 3-1: Manufacturer: syz [ 823.454387][ T5959] usb 3-1: SerialNumber: syz [ 823.569906][ C1] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 823.586916][ T5959] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input26 [ 823.785880][ T36] usb 5-1: USB disconnect, device number 43 [ 823.897943][ T5959] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 823.897965][ T5959] (id 0x00) [ 823.998057][ T5959] rc_core: IR keymap rc-imon-pad not found [ 823.998080][ T5959] Registered IR keymap rc-empty [ 824.002367][ T5959] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 824.002391][ T5959] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 824.103623][ T5959] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 824.156902][ T5959] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input27 [ 824.192194][ T5959] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:24> initialized [ 824.757992][ T6151] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 824.922008][ T6151] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 824.922048][ T6151] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 824.922092][ T6151] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 824.922123][ T6151] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.999836][ T6151] usb 6-1: config 0 descriptor?? [ 825.450460][ T6151] isku 0003:1E7D:319C.0015: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.5-1/input0 [ 825.834534][ T36] usb 6-1: USB disconnect, device number 35 [ 827.022798][T13248] imon:send_packet: task interrupted [ 827.022814][T13248] imon:send_packet: packet tx failed (-512) [ 827.022853][T13248] imon:vfd_write: send packet #4 failed [ 827.076006][ T6874] usb 3-1: USB disconnect, device number 24 [ 827.446149][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 827.446170][ T37] audit: type=1326 audit(1775815964.643:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13256 comm="syz.4.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255de8c819 code=0x7ffc0000 [ 827.481056][ T37] audit: type=1326 audit(1775815964.643:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13256 comm="syz.4.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255de8c819 code=0x7ffc0000 [ 827.481776][ T37] audit: type=1326 audit(1775815964.683:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13256 comm="syz.4.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f255de8c819 code=0x7ffc0000 [ 827.482292][ T37] audit: type=1326 audit(1775815964.683:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13256 comm="syz.4.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255de8c819 code=0x7ffc0000 [ 827.483068][ T37] audit: type=1326 audit(1775815964.683:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13256 comm="syz.4.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f255de8c819 code=0x7ffc0000 [ 827.483122][ T37] audit: type=1326 audit(1775815964.683:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13256 comm="syz.4.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255de8c819 code=0x7ffc0000 [ 827.483399][ T37] audit: type=1326 audit(1775815964.683:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13256 comm="syz.4.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f255de8c819 code=0x7ffc0000 [ 827.483688][ T37] audit: type=1326 audit(1775815964.683:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13256 comm="syz.4.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255de8c819 code=0x7ffc0000 [ 827.484054][ T37] audit: type=1326 audit(1775815964.683:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13256 comm="syz.4.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255de8c819 code=0x7ffc0000 [ 827.484336][ T37] audit: type=1326 audit(1775815964.683:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13256 comm="syz.4.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f255de8c819 code=0x7ffc0000 [ 827.778012][ T6874] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 827.933212][ T6874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 827.933248][ T6874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 827.933289][ T6874] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 827.933314][ T6874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.965647][T13268] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2033'. [ 827.991404][ T6874] usb 3-1: config 0 descriptor?? [ 828.029850][T13268] fuse: Bad value for 'fd' [ 828.377969][ T5959] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 828.447024][ T6874] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0 [ 828.468974][ T6874] cp2112 0003:10C4:EA90.0016: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 828.538084][ T5959] usb 7-1: Using ep0 maxpacket: 32 [ 828.544119][ T5959] usb 7-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 828.544153][ T5959] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.544174][ T5959] usb 7-1: Product: syz [ 828.544189][ T5959] usb 7-1: Manufacturer: syz [ 828.544205][ T5959] usb 7-1: SerialNumber: syz [ 828.602863][ T5959] usb 7-1: config 0 descriptor?? [ 828.610506][ T6874] cp2112 0003:10C4:EA90.0016: Part Number: 0x63 Device Version: 0xD4 [ 828.907673][T13276] cp2112 0003:10C4:EA90.0016: pid 13276 passed too short report [ 828.918443][ T6874] cp2112 0003:10C4:EA90.0016: error requesting SMBus config [ 828.936444][ T6874] cp2112 0003:10C4:EA90.0016: probe with driver cp2112 failed with error -32 [ 828.969269][T13277] input: syz0 as /devices/virtual/input/input28 [ 830.842380][ T5959] RobotFuzz Open Source InterFace, OSIF 7-1:0.0: failure sending bit rate [ 830.842414][ T5959] RobotFuzz Open Source InterFace, OSIF 7-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -110 [ 831.258002][ T6151] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 831.410090][ T6151] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 831.410130][ T6151] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 831.410159][ T6151] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 831.410176][ T6151] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.414782][ T6151] usb 6-1: config 0 descriptor?? [ 831.570001][ T36] usb 7-1: USB disconnect, device number 26 [ 831.771718][T13287] tipc: Started in network mode [ 831.771830][T13287] tipc: Node identity 080211000001, cluster identity 4711 [ 831.775620][T13287] tipc: Enabled bearer , priority 0 [ 831.857227][ T6151] isku 0003:1E7D:319C.0017: hidraw1: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.5-1/input0 [ 831.895190][T13287] tipc: Resetting bearer [ 832.096237][ T36] usb 3-1: USB disconnect, device number 25 [ 832.288474][ T5959] usb 6-1: USB disconnect, device number 36 [ 832.436102][T13289] fido_id[13289]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 832.558001][ T6151] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 832.738045][ T6151] usb 7-1: Using ep0 maxpacket: 32 [ 832.740135][ T6151] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 832.740175][ T6151] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 832.740194][ T6151] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 832.740213][ T6151] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 832.743463][ T6151] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 832.743485][ T6151] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.743500][ T6151] usb 7-1: Product: syz [ 832.743511][ T6151] usb 7-1: Manufacturer: syz [ 832.743521][ T6151] usb 7-1: SerialNumber: syz [ 832.861385][ C0] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 832.889946][ T5959] tipc: Node number set to 134418688 [ 832.918732][ T6151] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input29 [ 833.087986][ T6151] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 833.088008][ T6151] (id 0x00) [ 833.328059][ T6151] rc_core: IR keymap rc-imon-pad not found [ 833.328074][ T6151] Registered IR keymap rc-empty [ 833.328135][ T6151] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 833.328148][ T6151] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 833.383020][ T6151] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0 [ 833.403393][ T6151] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0/input30 [ 833.442123][ T6151] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:27> initialized [ 833.528009][ T5972] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 833.693755][ T5972] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 833.693793][ T5972] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 833.695290][ T5972] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 833.695321][ T5972] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 833.695350][ T5972] usb 3-1: Manufacturer: syz [ 833.783292][ T5972] usb 3-1: config 0 descriptor?? [ 834.508762][ T6151] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 834.658519][ T5972] uclogic 0003:256C:006D.0018: failed retrieving string descriptor #200: -71 [ 834.658597][ T5972] uclogic 0003:256C:006D.0018: failed retrieving pen parameters: -71 [ 834.658615][ T5972] uclogic 0003:256C:006D.0018: failed probing pen v2 parameters: -71 [ 834.658675][ T5972] uclogic 0003:256C:006D.0018: failed probing parameters: -71 [ 834.658793][ T5972] uclogic 0003:256C:006D.0018: probe with driver uclogic failed with error -71 [ 834.662925][ T6151] usb 5-1: Using ep0 maxpacket: 32 [ 834.729731][ T5972] usb 3-1: USB disconnect, device number 26 [ 834.736883][ T6151] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 834.736915][ T6151] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.736935][ T6151] usb 5-1: Product: syz [ 834.736950][ T6151] usb 5-1: Manufacturer: syz [ 834.736965][ T6151] usb 5-1: SerialNumber: syz [ 834.792033][ T6151] usb 5-1: config 0 descriptor?? [ 834.793706][T12665] udevd[12665]: setting owner of /dev/bus/usb/003/026 to uid=0, gid=0 failed: No such file or directory [ 835.343360][T13326] input: syz0 as /devices/virtual/input/input31 [ 836.278037][ T36] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 836.290385][T13321] imon:send_packet: task interrupted [ 836.290403][T13321] imon:send_packet: packet tx failed (-512) [ 836.294097][T13321] imon:vfd_write: send packet #4 failed [ 836.459802][ T36] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 836.459864][ T36] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 836.459906][ T36] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 836.459934][ T36] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.511907][ T36] usb 3-1: config 0 descriptor?? [ 836.767671][ T9082] usb 7-1: USB disconnect, device number 27 [ 836.898200][ T6151] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: failure sending bit rate [ 836.898246][ T6151] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -110 [ 837.132404][ T36] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0 [ 837.155020][ T36] cp2112 0003:10C4:EA90.0019: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 837.210038][ T36] cp2112 0003:10C4:EA90.0019: Part Number: 0x63 Device Version: 0xD4 [ 837.478977][T13345] cp2112 0003:10C4:EA90.0019: pid 13345 passed too short report [ 837.480607][ T36] cp2112 0003:10C4:EA90.0019: error requesting SMBus config [ 837.480980][T13344] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2058'. [ 837.646013][ T36] cp2112 0003:10C4:EA90.0019: probe with driver cp2112 failed with error -32 [ 838.821748][ T6151] usb 5-1: USB disconnect, device number 44 [ 839.074897][ T36] usb 3-1: USB disconnect, device number 27 [ 839.218427][ T6151] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 839.523036][ T6151] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 839.523072][ T6151] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 839.524915][ T6151] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 839.524947][ T6151] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 839.524968][ T6151] usb 5-1: Manufacturer: syz [ 840.421633][ T6151] usb 5-1: config 0 descriptor?? [ 841.335920][ T6151] uclogic 0003:256C:006D.001A: failed retrieving string descriptor #200: -71 [ 841.335987][ T6151] uclogic 0003:256C:006D.001A: failed retrieving pen parameters: -71 [ 841.336007][ T6151] uclogic 0003:256C:006D.001A: failed probing pen v2 parameters: -71 [ 841.336060][ T6151] uclogic 0003:256C:006D.001A: failed probing parameters: -71 [ 841.336174][ T6151] uclogic 0003:256C:006D.001A: probe with driver uclogic failed with error -71 [ 841.391408][ T6151] usb 5-1: USB disconnect, device number 45 [ 843.188012][ T5972] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 843.345860][ T5972] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 843.345899][ T5972] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 843.345939][ T5972] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 843.345964][ T5972] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.419293][ T5972] usb 6-1: config 0 descriptor?? [ 843.902842][ T5972] isku 0003:1E7D:319C.001B: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.5-1/input0 [ 844.318097][ T5880] usb 6-1: USB disconnect, device number 37 [ 844.840642][T13433] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2089'. [ 847.438030][ T36] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 847.600255][ T36] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 847.600295][ T36] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 847.600326][ T36] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 847.600343][ T36] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.607252][ T36] usb 3-1: config 0 descriptor?? [ 847.670593][ T36] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 847.726989][T13465] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2100'. [ 847.750699][T13465] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2100'. [ 847.858253][T13465] hsr_slave_1 (unregistering): left promiscuous mode [ 848.619093][ T36] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 848.788063][ T36] usb 5-1: Using ep0 maxpacket: 32 [ 848.806978][ T36] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 848.807019][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.807041][ T36] usb 5-1: Product: syz [ 848.807051][ T36] usb 5-1: Manufacturer: syz [ 848.807062][ T36] usb 5-1: SerialNumber: syz [ 848.855246][ T36] usb 5-1: config 0 descriptor?? [ 849.339582][T13489] input: syz0 as /devices/virtual/input/input32 [ 850.282509][ T5972] usb 3-1: USB disconnect, device number 28 [ 850.912054][ T36] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: failure sending bit rate [ 850.912101][ T36] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -110 [ 851.330205][T13504] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2113'. [ 851.383412][T13506] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2113'. [ 852.450087][ T5880] usb 5-1: USB disconnect, device number 46 [ 853.087948][T13536] netlink: 'syz.4.2120': attribute type 4 has an invalid length. [ 855.268369][ T9] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 855.420339][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 855.420375][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 855.420542][ T9] usb 7-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 855.420560][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.485169][ T9] usb 7-1: config 0 descriptor?? [ 856.503376][ T9] isku 0003:1E7D:319C.001C: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.6-1/input0 [ 856.878627][ T36] usb 7-1: USB disconnect, device number 28 [ 857.004962][T13572] fido_id[13572]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 859.671207][T13584] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 859.672014][T13584] block device autoloading is deprecated and will be removed. [ 862.538001][ T5959] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 862.720557][ T5959] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 862.720596][ T5959] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 862.720636][ T5959] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 862.720660][ T5959] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.776140][ T5959] usb 5-1: config 0 descriptor?? [ 863.158274][T13637] lo: entered allmulticast mode [ 863.372149][ T5959] isku 0003:1E7D:319C.001D: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.4-1/input0 [ 864.124147][ T5959] usb 5-1: USB disconnect, device number 47 [ 865.043008][T13644] fido_id[13644]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 866.248169][ T36] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 866.451230][ T36] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 866.473561][ T36] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=f6.6a [ 866.473585][ T36] usb 3-1: New USB device strings: Mfr=181, Product=147, SerialNumber=160 [ 866.473600][ T36] usb 3-1: Product: syz [ 866.473611][ T36] usb 3-1: Manufacturer: syz [ 866.473621][ T36] usb 3-1: SerialNumber: syz [ 866.519236][ T36] usb 3-1: config 0 descriptor?? [ 866.603456][ T36] comedi comedi5: Wrong number of endpoints [ 866.603480][ T36] ni6501 3-1:0.0: driver 'ni6501' failed to auto-configure device. [ 866.670150][ T9] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 867.157932][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 867.160156][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 867.160180][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 7 [ 867.160200][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 867.193079][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 867.193113][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.193134][ T9] usb 5-1: Product: syz [ 867.193149][ T9] usb 5-1: Manufacturer: syz [ 867.193163][ T9] usb 5-1: SerialNumber: syz [ 867.205155][ T9] usb 5-1: config 0 descriptor?? [ 867.349564][ T9] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 867.349601][ T9] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 867.896821][ T9] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 867.897311][ T9] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 867.897743][ T9] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 867.898356][ T9] em28xx 5-1:0.0: No AC97 audio processor [ 868.012756][ T9] usb 5-1: USB disconnect, device number 48 [ 868.015200][ T9] em28xx 5-1:0.0: Disconnecting em28xx [ 868.082351][ T9] em28xx 5-1:0.0: Freeing device [ 869.418798][ T5871] usb 3-1: USB disconnect, device number 29 [ 870.506664][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.828225][T13703] syzkaller1: entered promiscuous mode [ 870.828258][T13703] syzkaller1: entered allmulticast mode [ 870.959214][ T9082] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 871.197977][ T9082] usb 7-1: Using ep0 maxpacket: 16 [ 871.199767][ T9082] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 871.199791][ T9082] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 7 [ 871.199811][ T9082] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 871.206924][ T9082] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 871.206957][ T9082] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.206989][ T9082] usb 7-1: Product: syz [ 871.207005][ T9082] usb 7-1: Manufacturer: syz [ 871.207019][ T9082] usb 7-1: SerialNumber: syz [ 871.326617][ T9082] usb 7-1: config 0 descriptor?? [ 871.345672][ T9082] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 871.345708][ T9082] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 872.117268][ T9082] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 872.117752][ T9082] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 872.118647][ T9082] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 872.118666][ T9082] em28xx 7-1:0.0: No AC97 audio processor [ 872.190329][ T9082] usb 7-1: USB disconnect, device number 29 [ 872.191968][ T9082] em28xx 7-1:0.0: Disconnecting em28xx [ 872.212931][ T9082] em28xx 7-1:0.0: Freeing device [ 872.936565][T13719] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 873.352421][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880294e2c00: rx timeout, send abort [ 873.852518][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880294e2c00: abort rx timeout. Force session deactivation [ 873.852624][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880294e1000: rx timeout, send abort [ 874.603781][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880294e1000: abort rx timeout. Force session deactivation [ 875.004207][T13742] syzkaller1: entered promiscuous mode [ 875.004227][T13742] syzkaller1: entered allmulticast mode [ 876.081332][T13756] loop2: detected capacity change from 0 to 7 [ 876.095927][T13756] Dev loop2: unable to read RDB block 7 [ 876.096229][T13756] loop2: unable to read partition table [ 876.097440][T13756] loop2: partition table beyond EOD, truncated [ 876.137492][T13756] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 881.598256][ T5871] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 881.831721][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 881.831758][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 881.831799][ T5871] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 881.831823][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.837649][ T5871] usb 3-1: config 0 descriptor?? [ 882.424544][ T5871] isku 0003:1E7D:319C.001E: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 882.820519][ T5871] usb 3-1: USB disconnect, device number 30 [ 883.017743][T13842] fido_id[13842]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 883.208091][ T6874] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 883.382750][ T6874] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 883.382782][ T6874] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 883.382796][ T6874] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 883.382832][ T6874] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 883.390287][ T6874] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 883.390322][ T6874] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 883.390342][ T6874] usb 6-1: Product: syz [ 883.390357][ T6874] usb 6-1: Manufacturer: syz [ 883.723723][ T6874] usb 6-1: USB disconnect, device number 38 [ 884.089264][T13860] loop2: detected capacity change from 0 to 7 [ 884.098527][T12525] Dev loop2: unable to read RDB block 7 [ 884.098571][T12525] loop2: unable to read partition table [ 884.098830][T12525] loop2: partition table beyond EOD, truncated [ 884.125161][T13860] Dev loop2: unable to read RDB block 7 [ 884.125286][T13860] loop2: unable to read partition table [ 884.125832][T13860] loop2: partition table beyond EOD, truncated [ 884.125940][T13860] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 885.400932][T13882] overlayfs: missing 'lowerdir' [ 886.988097][ T9082] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 887.183517][ T9082] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 887.189814][ T9082] usb 7-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=f6.6a [ 887.189847][ T9082] usb 7-1: New USB device strings: Mfr=181, Product=147, SerialNumber=160 [ 887.189869][ T9082] usb 7-1: Product: syz [ 887.189883][ T9082] usb 7-1: Manufacturer: syz [ 887.189898][ T9082] usb 7-1: SerialNumber: syz [ 887.196446][ T9082] usb 7-1: config 0 descriptor?? [ 887.341265][ T9082] comedi comedi5: Wrong number of endpoints [ 887.341291][ T9082] ni6501 7-1:0.0: driver 'ni6501' failed to auto-configure device. [ 888.166827][T13900] loop2: detected capacity change from 0 to 7 [ 888.180795][T12525] Dev loop2: unable to read RDB block 7 [ 888.180890][T12525] loop2: unable to read partition table [ 888.181062][T12525] loop2: partition table beyond EOD, truncated [ 888.226468][T13900] Dev loop2: unable to read RDB block 7 [ 888.226601][T13900] loop2: unable to read partition table [ 888.227179][T13900] loop2: partition table beyond EOD, truncated [ 888.227284][T13900] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 889.035743][T13909] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 889.127527][T13910] syzkaller1: entered promiscuous mode [ 889.127555][T13910] syzkaller1: entered allmulticast mode [ 889.532126][ T5972] usb 7-1: USB disconnect, device number 30 [ 889.626493][T13923] binder: 13913:13923 ioctl c0306201 0 returned -14 [ 889.783550][T13927] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2250'. [ 889.841835][T13930] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2250'. [ 890.191765][T13936] overlayfs: missing 'lowerdir' [ 891.204244][T13943] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2253'. [ 891.222427][T13942] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 891.243524][T13942] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 892.385628][T13949] loop2: detected capacity change from 0 to 7 [ 892.386607][T13949] Dev loop2: unable to read RDB block 7 [ 892.386640][T13949] loop2: unable to read partition table [ 892.386791][T13949] loop2: partition table beyond EOD, truncated [ 892.386805][T13949] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 892.565636][T13951] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 893.507976][ T5972] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 893.660326][ T5972] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 893.660357][ T5972] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 893.660385][ T5972] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 893.660402][ T5972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.665163][ T5972] usb 3-1: config 0 descriptor?? [ 893.857977][ T9082] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 893.909600][T13962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2263'. [ 893.911803][T13962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2263'. [ 894.031637][ T9082] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 894.031687][ T9082] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 894.031712][ T9082] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.045299][ T9082] usb 7-1: config 0 descriptor?? [ 894.091586][ T9082] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 894.134035][ T5972] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0 [ 894.150012][ T5972] cp2112 0003:10C4:EA90.001F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 894.295296][ T5972] cp2112 0003:10C4:EA90.001F: Part Number: 0x63 Device Version: 0xD4 [ 894.550850][ T5972] cp2112 0003:10C4:EA90.001F: error requesting SMBus config [ 894.615837][ T5972] cp2112 0003:10C4:EA90.001F: probe with driver cp2112 failed with error -32 [ 894.660262][T13977] netlink: 'syz.5.2266': attribute type 4 has an invalid length. [ 894.968021][ T5972] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 895.120047][ T5972] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 895.120085][ T5972] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 895.120220][ T5972] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 895.120351][ T5972] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.124913][ T5972] usb 6-1: config 0 descriptor?? [ 895.351355][T13984] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 895.580806][ T5972] isku 0003:1E7D:319C.0020: hidraw1: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.5-1/input0 [ 896.245706][ T5972] usb 6-1: USB disconnect, device number 39 [ 896.306409][T13990] fido_id[13990]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 896.365332][T13994] input: syz0 as /devices/virtual/input/input33 [ 896.437993][ T36] usb 3-1: USB disconnect, device number 31 [ 896.743095][ T9] usb 7-1: USB disconnect, device number 31 [ 896.971457][T14001] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2271'. [ 897.949423][T14010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2275'. [ 898.024728][T14012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2275'. [ 898.188212][ T9] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 898.348007][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 898.368519][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 898.368554][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 898.368599][ T9] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 898.368624][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.379804][ T9] usb 7-1: config 0 descriptor?? [ 898.443144][ T9] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 900.945651][ T5972] usb 7-1: USB disconnect, device number 32 [ 901.087911][ T5880] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 901.377342][ T9] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 901.587970][ T5871] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 901.588027][ T5880] usb 3-1: Using ep0 maxpacket: 32 [ 901.599495][ T5880] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 901.599573][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.599637][ T5880] usb 3-1: Product: syz [ 901.599682][ T5880] usb 3-1: Manufacturer: syz [ 901.599726][ T5880] usb 3-1: SerialNumber: syz [ 901.660885][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 902.145861][ T5871] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 902.145898][ T5871] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 902.145938][ T5871] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 902.145963][ T5871] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.150337][ T9] usb 5-1: config 0 has no interfaces? [ 902.152340][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 902.152369][ T9] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 902.152390][ T9] usb 5-1: Manufacturer: syz [ 902.379881][ T5871] usb 7-1: config 0 descriptor?? [ 902.379885][ T5880] usb 3-1: config 0 descriptor?? [ 902.458210][ T9] usb 5-1: config 0 descriptor?? [ 902.492537][ T5880] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 902.492656][ T5880] dvb-usb: bulk message failed: -22 (4/0) [ 902.492674][ T5880] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 902.492806][ T5880] dvb-usb: bulk message failed: -22 (5/0) [ 902.492820][ T5880] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 902.562203][ T5880] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 902.566331][ T5880] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 902.566400][ T5880] usb 3-1: media controller created [ 902.691693][ T5880] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 902.800625][ T5880] usb 3-1: selecting invalid altsetting 3 [ 902.800648][ T5880] ttusb2: set interface to alts=3 failed [ 902.824595][ T5871] cp2112 0003:10C4:EA90.0021: unknown main item tag 0x0 [ 902.854102][ T5871] cp2112 0003:10C4:EA90.0021: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 902.993704][ T6151] usb 5-1: USB disconnect, device number 49 [ 903.020187][ T5871] cp2112 0003:10C4:EA90.0021: Part Number: 0x63 Device Version: 0xD4 [ 903.047703][T14040] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2283'. [ 903.092974][T14040] fuse: Bad value for 'fd' [ 903.175633][ T5880] DVB: Unable to find symbol tda10086_attach() [ 903.175652][ T5880] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 903.192232][ T5880] dvb-usb: bulk message failed: -22 (4/0) [ 903.192310][ T5880] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 903.192527][ T5880] dvb-usb: bulk message failed: -22 (5/0) [ 903.192544][ T5880] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 903.192685][ T5880] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 903.263650][ T5880] usb 3-1: USB disconnect, device number 32 [ 903.275374][ T5871] cp2112 0003:10C4:EA90.0021: error requesting SMBus config [ 903.399989][ T5871] cp2112 0003:10C4:EA90.0021: probe with driver cp2112 failed with error -32 [ 903.561223][ T5880] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 904.047976][ T5880] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 904.198798][ T5880] usb 3-1: Using ep0 maxpacket: 16 [ 904.224166][ T5880] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 904.224250][ T5880] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 904.226747][ T5880] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 904.226777][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.226801][ T5880] usb 3-1: Product: syz [ 904.226812][ T5880] usb 3-1: Manufacturer: syz [ 904.226822][ T5880] usb 3-1: SerialNumber: syz [ 904.268322][ T5880] usb 3-1: config 0 descriptor?? [ 904.660847][ T5871] usb 7-1: USB disconnect, device number 33 [ 905.498137][ T5880] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 905.709087][ T5880] usb 5-1: Using ep0 maxpacket: 16 [ 905.712326][ T5880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 905.712349][ T5880] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 905.712379][ T5880] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 905.712396][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.719724][ T5880] usb 5-1: config 0 descriptor?? [ 905.801752][ T5880] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 906.615573][T14081] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2294'. [ 906.616828][T14081] fuse: Bad value for 'fd' [ 906.781678][ T5880] usb 3-1: USB disconnect, device number 33 [ 907.282895][T14097] tap0: tun_chr_ioctl cmd 35111 [ 907.334040][T14097] netlink: 'syz.5.2300': attribute type 3 has an invalid length. [ 907.988016][ T5880] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 908.590158][ T5880] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 908.590210][ T5880] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 908.590237][ T5880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.600159][ T5880] usb 6-1: config 0 descriptor?? [ 908.618226][ T5880] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 908.671540][ T5959] usb 5-1: USB disconnect, device number 50 [ 909.091375][T14110] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2305'. [ 909.096198][T14110] fuse: Bad value for 'fd' [ 910.797403][ T6151] usb 6-1: USB disconnect, device number 40 [ 911.178658][T14138] netlink: 'syz.5.2315': attribute type 4 has an invalid length. [ 911.340883][T14140] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2316'. [ 911.342117][T14140] fuse: Bad value for 'fd' [ 912.727828][ T9] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 913.129908][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 913.129946][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 913.129987][ T9] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 913.130010][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.136113][ T9] usb 6-1: config 0 descriptor?? [ 913.188332][ T36] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 913.858832][ T9] cp2112 0003:10C4:EA90.0022: unknown main item tag 0x0 [ 913.865025][ T36] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 913.871454][ T36] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=f6.6a [ 913.871552][ T36] usb 3-1: New USB device strings: Mfr=181, Product=147, SerialNumber=160 [ 913.871610][ T36] usb 3-1: Product: syz [ 913.871647][ T36] usb 3-1: Manufacturer: syz [ 913.871690][ T36] usb 3-1: SerialNumber: syz [ 913.921024][ T36] usb 3-1: config 0 descriptor?? [ 914.003023][ T9] cp2112 0003:10C4:EA90.0022: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 914.100297][ T9] cp2112 0003:10C4:EA90.0022: Part Number: 0x63 Device Version: 0xD4 [ 914.303775][ T9] cp2112 0003:10C4:EA90.0022: error requesting SMBus config [ 914.318462][ T9] cp2112 0003:10C4:EA90.0022: probe with driver cp2112 failed with error -32 [ 915.847418][ T5959] usb 6-1: USB disconnect, device number 41 [ 918.237386][T14173] netlink: 'syz.5.2326': attribute type 4 has an invalid length. [ 918.552562][ T36] usb 3-1: can't set config #0, error -71 [ 918.587607][ T36] usb 3-1: USB disconnect, device number 34 [ 919.019507][T14181] xfrm0: entered allmulticast mode [ 919.022257][T14180] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2329'. [ 919.039131][T14180] fuse: Bad value for 'fd' [ 919.201106][T14183] loop2: detected capacity change from 0 to 7 [ 919.207688][T14183] Dev loop2: unable to read RDB block 7 [ 919.210756][T14183] loop2: unable to read partition table [ 919.211462][T14183] loop2: partition table beyond EOD, truncated [ 919.211517][T14183] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 919.465062][T14196] netlink: 'syz.7.2337': attribute type 4 has an invalid length. [ 919.518103][ T36] usb 7-1: new full-speed USB device number 34 using dummy_hcd [ 919.548031][ T5972] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 919.672580][T14202] ptrace attach of "./syz-executor exec"[8490] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ./file0 °ÿ Àÿ ÿÿÿÿ   /sys/kernel/debug/binder/stats 8   € \x09 Û  þÿÿú ÿÿÿÿ cgroup.controllers [ 919.707082][ T5972] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 919.707127][ T5972] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 919.707177][ T5972] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 919.707202][ T5972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.707539][ T36] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 919.707569][ T36] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 919.707606][ T36] usb 7-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 919.707631][ T36] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.936047][ T36] usb 7-1: config 0 descriptor?? [ 919.946959][ T5972] usb 3-1: config 0 descriptor?? [ 920.429503][ T36] isku 0003:1E7D:319C.0023: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.6-1/input0 [ 920.511424][ T5972] cp2112 0003:10C4:EA90.0024: unknown main item tag 0x0 [ 920.515696][ T5972] cp2112 0003:10C4:EA90.0024: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 920.584196][ T5972] cp2112 0003:10C4:EA90.0024: Part Number: 0x63 Device Version: 0xD4 [ 920.791094][ T6151] usb 7-1: USB disconnect, device number 34 [ 920.842432][ T5972] cp2112 0003:10C4:EA90.0024: error requesting SMBus config [ 920.858261][ T5972] cp2112 0003:10C4:EA90.0024: probe with driver cp2112 failed with error -32 [ 921.000565][T14205] fido_id[14205]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 921.768346][ T6151] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 921.918732][ T6151] usb 7-1: Using ep0 maxpacket: 32 [ 921.928925][ T6151] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 921.928957][ T6151] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.963748][ T6151] usb 7-1: config 0 descriptor?? [ 922.025057][ T6151] as10x_usb: device has been detected [ 922.026702][ T6151] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 922.096652][ T6151] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 922.169425][T14214] INFO: trying to register non-static key. [ 922.169437][T14214] The code is fine but needs lockdep annotation, or maybe [ 922.169443][T14214] you didn't initialize this object before use? [ 922.169449][T14214] turning off the locking correctness validator. [ 922.169470][T14214] CPU: 1 UID: 0 PID: 14214 Comm: syz.6.2341 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 922.169494][T14214] Tainted: [L]=SOFTLOCKUP [ 922.169500][T14214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 922.169522][T14214] Call Trace: [ 922.169529][T14214] [ 922.169536][T14214] dump_stack_lvl+0xe8/0x150 [ 922.169565][T14214] assign_lock_key+0x133/0x150 [ 922.169584][T14214] register_lock_class+0xcc/0x2e0 [ 922.169601][T14214] __lock_acquire+0xad/0x2cf0 [ 922.169616][T14214] ? __lock_acquire+0x6b5/0x2cf0 [ 922.169634][T14214] ? do_raw_spin_lock+0x12b/0x2f0 [ 922.169659][T14214] lock_acquire+0xf0/0x2e0 [ 922.169672][T14214] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 922.169694][T14214] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 922.169716][T14214] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 922.169735][T14214] mutex_lock_interruptible_nested+0x5a/0x1d0 [ 922.169760][T14214] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 922.169779][T14214] ? lockdep_hardirqs_on+0x7a/0x110 [ 922.169799][T14214] as102_dvb_dmx_start_feed+0x70/0x290 [ 922.169820][T14214] dmx_section_feed_start_filtering+0x518/0x6c0 [ 922.169841][T14214] dvb_dmxdev_filter_start+0xcf4/0x10e0 [ 922.169867][T14214] ? dvb_dmxdev_filter_set+0x2d1/0x580 [ 922.169891][T14214] dvb_demux_do_ioctl+0x473/0x540 [ 922.169915][T14214] dvb_usercopy+0x199/0x2e0 [ 922.169934][T14214] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 922.169957][T14214] ? __pfx_dvb_usercopy+0x10/0x10 [ 922.169981][T14214] ? __fget_files+0x3a6/0x420 [ 922.170002][T14214] ? __fget_files+0x2a/0x420 [ 922.170023][T14214] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 922.170045][T14214] dvb_demux_ioctl+0x29/0x40 [ 922.170067][T14214] __se_sys_ioctl+0xff/0x170 [ 922.170083][T14214] do_syscall_64+0x14d/0xf80 [ 922.170100][T14214] ? trace_irq_disable+0x3b/0x150 [ 922.170119][T14214] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.170135][T14214] ? clear_bhb_loop+0x40/0x90 [ 922.170153][T14214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.170168][T14214] RIP: 0033:0x7f381c31c819 [ 922.170186][T14214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 922.170201][T14214] RSP: 002b:00007f381a576028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 922.170218][T14214] RAX: ffffffffffffffda RBX: 00007f381c595fa0 RCX: 00007f381c31c819 [ 922.170229][T14214] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000005 [ 922.170240][T14214] RBP: 00007f381c3b2c91 R08: 0000000000000000 R09: 0000000000000000 [ 922.170249][T14214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 922.170259][T14214] R13: 00007f381c596038 R14: 00007f381c595fa0 R15: 00007ffea347a3b8 [ 922.170277][T14214] [ 922.315710][ T6151] as10x_usb: error during firmware upload part1 [ 922.316201][ T6151] Registered device nBox DVB-T Dongle [ 922.500341][ T6151] usb 7-1: USB disconnect, device number 35 [ 922.527045][ T6151] Unregistered device nBox DVB-T Dongle [ 922.528592][ T6151] as10x_usb: device has been disconnected [ 922.618976][ T9] usb 3-1: USB disconnect, device number 35 [ 931.942241][ T1322] ieee802154 phy1 wpan1: encryption failed: -22