last executing test programs: 8m23.747411888s ago: executing program 1 (id=269): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0x8, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x100, 0x5, 0x80000003, 0x8}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x80) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 8m21.218383932s ago: executing program 1 (id=277): syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd010203010902"], 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x2, 0x1, 0x5}) 8m18.053886997s ago: executing program 1 (id=285): openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) dup(0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x20001, 0x0) syz_usb_connect(0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x5f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m10.942981395s ago: executing program 1 (id=301): socket$packet(0x11, 0x2, 0x300) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) eventfd2(0x800, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r1, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 8m10.808058439s ago: executing program 1 (id=302): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x141800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000004c0)={0x79, 0x0, 0x3}) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000540)={0x81, 0x0, 0x5}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa}}, '.\x00'}) io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) close(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x67, 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000080)={'vlan0\x00', {0x2, 0x0, @multicast1}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=ANY=[@ANYBLOB="02000000040000000400000022bf00", @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32], 0x50) mmap(&(0x7f0000fa3000/0x3000)=nil, 0x3000, 0x0, 0x13, r6, 0x600000) write(r5, &(0x7f0000000540)="89", 0x1) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x181}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r7, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2000000000000, 0xc81c0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r8, 0xc0045540, &(0x7f0000000080)=0x2) 8m10.723207362s ago: executing program 1 (id=303): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffc, 0xf9, 0x8000, 0x0, "7a58beca3900000060000000000000000200"}) ppoll(&(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c2000003ece65fbcee5586dd6001010000161100fe80000000000000005b0000000000bbfe8000000000000000000000000000aa00030e22001690780203000014000000ffb00afe4e70333b9ffb6c9589695f1b8ddeae25f8c4f75bd09725e7375f6bb1f8feab8c22ded2ccb3366d2b2f9a04da659df6d1b901f0a278d76d02a17895332ab442f1ea23c4aa3a0d0616fdd4944902445c3ecf2907f77ef541448d90cda361a0009a4c61078f279fc72053557a7d4f3c165225943646086f1331235ee379a178c88bc6cd4e00000000000000000000000097420100"], 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1}, 0x4) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, 0x0, 0x0, 0x300) 7m55.002762236s ago: executing program 32 (id=303): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffc, 0xf9, 0x8000, 0x0, "7a58beca3900000060000000000000000200"}) ppoll(&(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c2000003ece65fbcee5586dd6001010000161100fe80000000000000005b0000000000bbfe8000000000000000000000000000aa00030e22001690780203000014000000ffb00afe4e70333b9ffb6c9589695f1b8ddeae25f8c4f75bd09725e7375f6bb1f8feab8c22ded2ccb3366d2b2f9a04da659df6d1b901f0a278d76d02a17895332ab442f1ea23c4aa3a0d0616fdd4944902445c3ecf2907f77ef541448d90cda361a0009a4c61078f279fc72053557a7d4f3c165225943646086f1331235ee379a178c88bc6cd4e00000000000000000000000097420100"], 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1}, 0x4) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, 0x0, 0x0, 0x300) 9.219669381s ago: executing program 2 (id=2001): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x9, 0x1}, 0xc) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = fsopen(&(0x7f0000000180)='btrfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xf, &(0x7f00000004c0)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x10) 7.568111038s ago: executing program 2 (id=2005): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)='i', 0x1}], 0x1) 7.427692892s ago: executing program 2 (id=2006): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x40010) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff00", @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) sendto$packet(r3, &(0x7f00000002c0)="44c33b69ebc9e0", 0x7, 0x830, &(0x7f0000000440)={0x11, 0x0, r7, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote, r7}, 0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, r8}, 0x14) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)={0x0, 0x7ff, 0x0, 0x0, 0x9}) r9 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r9, 0x1, 0x3c, &(0x7f0000000040)={0x0, 0x2}, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) 7.1500083s ago: executing program 2 (id=2009): socket$unix(0x1, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, 0x0}, 0x8400) landlock_create_ruleset(&(0x7f0000000680)={0x1, 0x2}, 0x18, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1) r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000080)={'dt2815\x00', [0x3c4, 0x10, 0x2, 0x3, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x87ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x2, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0xe2df, 0xaa14, 0x1, 0x4, 0x3, 0x7, 0xf58, 0x6]}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 5.985633693s ago: executing program 2 (id=2018): sysfs$2(0x2, 0x7ff, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020}, 0xfffffffffffffef4) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x2c) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1000}, 0x0) socket$xdp(0x2c, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r1 = memfd_secret(0x0) futimesat(r1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10000008b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r2 = syz_clone(0x20000000, 0x0, 0x8, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = syz_pidfd_open(r2, 0x0) process_mrelease(r3, 0x700000000000000) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) 5.911643385s ago: executing program 4 (id=2020): syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x34, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x000'], 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1}, 0x4) 5.223749174s ago: executing program 3 (id=2027): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x8, 0x12, r0, 0x0) ftruncate(r0, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8032, 0xffffffffffffffff, 0x28f41000) gettid() mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000100)) 5.02803725s ago: executing program 2 (id=2029): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x208080, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioprio_get$uid(0x3, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x10001, 0x6, 0x9001}) ptrace$peek(0x2, r0, &(0x7f0000000180)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r3, 0xc01864c1, &(0x7f0000000080)={r4}) landlock_restrict_self(0xffffffffffffffff, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) r6 = fcntl$dupfd(r5, 0x0, r5) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000001340)=""/4129, 0x1021}], 0x1, 0x301, 0x6cd) ioctl$TCFLSH(r6, 0x400455c8, 0x2) 5.0254588s ago: executing program 4 (id=2030): r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f00000001c0)={0x401, {"ac0e6bc507fae10f0cabd07969a0a850", "5b0b1778095b1bc658889b108a3b2b39", "9041c3b5d94e4fbe421b980141e57c01"}, 0x906, 0x5}) close_range(r0, 0xffffffffffffffff, 0x0) 3.697197527s ago: executing program 4 (id=2033): socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x3) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00'}) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0x48, 0x0, 0x0, 0x0) 3.146984523s ago: executing program 0 (id=2034): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x30000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x3c, &(0x7f0000000080)=0x3, 0x4) 3.083741484s ago: executing program 4 (id=2035): r0 = socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8b00, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xd4) listen(0xffffffffffffffff, 0x8) close(r0) 2.471311812s ago: executing program 5 (id=2036): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05", 0x34}], 0x2}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)}], 0x2}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYBLOB="7c0100", @ANYRES16, @ANYBLOB="01002bbd7000fbdbdf25070000000c000180080003000100000074000180140002007767320000000000000000000000000008000300020000001400020070696d3672656730000000000000000014000200677265746170300000", @ANYRES32, @ANYRES32=r0, @ANYBLOB="400001801400020070696d3672656730"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.225995928s ago: executing program 0 (id=2037): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)}], 0x2, &(0x7f0000000cc0)=[@timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x30}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYBLOB], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.225390188s ago: executing program 4 (id=2038): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x80000) syz_80211_inject_frame(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0xa, 0x300) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="04050400c900", @ANYRES16], 0x7) 2.15264399s ago: executing program 3 (id=2039): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x20, r1, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x4}]}, 0x20}}, 0x0) 2.1518777s ago: executing program 5 (id=2040): syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x34, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x000'], 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1}, 0x4) 2.074905593s ago: executing program 0 (id=2041): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803", 0x81}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db6", 0x66}], 0x2}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)}], 0x2}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYRES32], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.999690154s ago: executing program 3 (id=2042): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$l2tp(0x2, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0552060000c9000028001280090001007665746800000000180002801400010000000000", @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x0) 1.892273847s ago: executing program 0 (id=2043): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xfff1}, {0x0, 0x8}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 1.057161109s ago: executing program 4 (id=2044): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x30000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/52, 0x34}, {0x0}], 0x2, 0xb, 0x1000) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82002) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000180)=0xf0) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000080)=0xd0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a3000000000090003007379"], 0xa4}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000"], 0x122}}, 0x0) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000014000101a4bd7000fddbdf25011f88104e244e"], 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x40000) 1.025832491s ago: executing program 5 (id=2045): socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x3) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00'}) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0x48, 0x0, 0x0, 0x0) 994.668901ms ago: executing program 0 (id=2046): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) 933.459393ms ago: executing program 3 (id=2047): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) close(r1) close(r0) mknodat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x81c0, 0x0) 779.658408ms ago: executing program 5 (id=2048): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0xe758, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x3, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x4001, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, 'gre0\x00'}}, 0x1e) 669.647951ms ago: executing program 3 (id=2049): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)}], 0x2}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYRES32=r0], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 348.50391ms ago: executing program 5 (id=2050): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05", 0x34}], 0x2}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)}], 0x2}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYBLOB="7c0100", @ANYRES16, @ANYBLOB="01002bbd7000fbdbdf25070000000c000180080003000100000074000180140002007767320000000000000000000000000008000300020000001400020070696d3672656730000000000000000014000200677265746170300000", @ANYRES32, @ANYRES32=r0, @ANYBLOB="400001801400020070696d3672656730"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 215.633824ms ago: executing program 3 (id=2051): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)}], 0x2, &(0x7f0000000cc0)=[@timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x30}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYBLOB], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 23.281849ms ago: executing program 0 (id=2052): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x3, 0x0) fcntl$notify(r1, 0x402, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r4) sendmsg$NFC_CMD_SE_IO(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, r5, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 0s ago: executing program 5 (id=2053): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803", 0x81}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db6", 0x66}], 0x2}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)}], 0x2}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYRES32], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): ][ T4238] usb 1-1: config 11 interface 244 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 274.442445][ T4238] usb 1-1: config 11 interface 244 has no altsetting 0 [ 274.484440][ T5877] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 274.870695][ T4278] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 274.956388][ T4278] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 275.179849][ T4278] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 275.212842][ T4278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.289303][ T6903] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 275.297545][ T6915] device syzkaller0 entered promiscuous mode [ 275.338741][ T4238] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a [ 275.360856][ T4238] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.388641][ T4238] usb 1-1: Product: syz [ 275.418754][ T4238] usb 1-1: can't set config #11, error -71 [ 275.458969][ T4238] usb 1-1: USB disconnect, device number 19 [ 275.722196][ T6903] udc-core: couldn't find an available UDC or it's busy [ 275.754041][ T6903] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 276.075334][ T6903] udc-core: couldn't find an available UDC or it's busy [ 276.109604][ T6903] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 276.523807][ T5877] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 276.581908][ T5877] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 276.630049][ T5877] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 276.679641][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.799003][ T6900] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 277.224022][ T5877] usb 4-1: USB disconnect, device number 14 [ 278.211347][ T6941] netlink: 4 bytes leftover after parsing attributes in process `syz.5.673'. [ 278.282913][ T4233] usb 3-1: USB disconnect, device number 18 [ 278.430893][ T4181] udevd[4181]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 279.483900][ T4233] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 279.758669][ T4233] usb 6-1: Using ep0 maxpacket: 8 [ 279.804527][ T6956] syz.2.678 (6956): drop_caches: 2 [ 280.614084][ T6956] syz.2.678 (6956): drop_caches: 2 [ 280.618721][ T4233] usb 6-1: unable to get BOS descriptor or descriptor too short [ 280.720074][ T4233] usb 6-1: config 11 has an invalid interface number: 244 but max is 0 [ 280.742733][ T6964] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 280.758126][ T4233] usb 6-1: config 11 has no interface number 0 [ 280.895576][ T4233] usb 6-1: config 11 interface 244 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 280.914877][ T4233] usb 6-1: config 11 interface 244 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 280.931478][ T6964] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 280.936623][ T4233] usb 6-1: config 11 interface 244 has no altsetting 0 [ 280.977869][ T6975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.683'. [ 281.005520][ T6975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.683'. [ 281.049629][ T4278] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 281.241547][ T4233] usb 6-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a [ 281.251310][ T4233] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.259684][ T4233] usb 6-1: Product: syz [ 281.263870][ T4233] usb 6-1: Manufacturer: syz [ 281.268479][ T4233] usb 6-1: SerialNumber: syz [ 281.678735][ T4233] peak_usb 6-1:11.244 can0: unable to request usb[type=0 value=1] err=-71 [ 281.688142][ T4233] peak_usb 6-1:11.244: unable to read PCAN-USB X6 firmware info (err -71) [ 281.758984][ T6984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.686'. [ 282.587942][ T4192] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 282.615393][ T4233] peak_usb: probe of 6-1:11.244 failed with error -71 [ 283.131355][ T4233] usb 6-1: USB disconnect, device number 8 [ 283.178903][ T4278] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.190822][ T4278] usb 3-1: config 0 has no interfaces? [ 283.368850][ T4192] usb 1-1: Using ep0 maxpacket: 8 [ 283.408769][ T4278] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 283.418200][ T4278] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.538735][ T4233] Bluetooth: hci5: command 0x0406 tx timeout [ 284.218029][ T4278] usb 3-1: Product: syz [ 284.223368][ T4278] usb 3-1: Manufacturer: syz [ 284.228322][ T4278] usb 3-1: SerialNumber: syz [ 284.242804][ T4278] usb 3-1: config 0 descriptor?? [ 284.268746][ T4278] usb 3-1: can't set config #0, error -71 [ 284.279403][ T4278] usb 3-1: USB disconnect, device number 19 [ 284.318693][ T4192] usb 1-1: device descriptor read/all, error -71 [ 285.477686][ T7028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.701'. [ 285.606072][ T7030] netlink: 36 bytes leftover after parsing attributes in process `syz.5.702'. [ 287.388677][ T5877] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 287.438708][ T4192] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 287.728681][ T4192] usb 1-1: Using ep0 maxpacket: 8 [ 287.789065][ T5877] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.815430][ T5877] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 287.918771][ T4192] usb 1-1: unable to get BOS descriptor or descriptor too short [ 287.978815][ T5877] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 288.048829][ T4192] usb 1-1: config 11 has an invalid interface number: 244 but max is 0 [ 288.066177][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.074756][ T5877] usb 4-1: Product: syz [ 288.079640][ T5877] usb 4-1: Manufacturer: syz [ 288.084405][ T5877] usb 4-1: SerialNumber: syz [ 288.092079][ T5877] usb 4-1: config 0 descriptor?? [ 288.099795][ T4192] usb 1-1: config 11 has no interface number 0 [ 288.106144][ T4192] usb 1-1: config 11 interface 244 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 288.116454][ T4192] usb 1-1: config 11 interface 244 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 288.126868][ T4192] usb 1-1: config 11 interface 244 has no altsetting 0 [ 288.838727][ T4192] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a [ 288.878943][ T4192] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.887254][ T4192] usb 1-1: Product: syz [ 288.891587][ T4192] usb 1-1: Manufacturer: syz [ 288.921387][ T4192] usb 1-1: can't set config #11, error -71 [ 289.029382][ T4192] usb 1-1: USB disconnect, device number 22 [ 289.069805][ T7069] binder: BINDER_SET_CONTEXT_MGR already set [ 289.076124][ T7069] binder: 7065:7069 ioctl 4018620d 200000004a80 returned -16 [ 289.085523][ T7069] binder: 7065:7069 ioctl c0306201 0 returned -14 [ 289.102790][ T7069] syz.0.710 (7069): drop_caches: 2 [ 289.109222][ T7069] syz.0.710 (7069): drop_caches: 2 [ 290.074062][ T4238] usb 4-1: USB disconnect, device number 15 [ 290.402589][ T7092] kvm: pic: non byte write [ 292.538905][ T4236] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 293.168635][ T4236] usb 6-1: Using ep0 maxpacket: 16 [ 293.322760][ T4236] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.340354][ T4236] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 293.373059][ T5877] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 294.147754][ T7132] binder: 7131:7132 ioctl c0306201 0 returned -14 [ 294.164249][ T7132] syz.0.729 (7132): drop_caches: 2 [ 294.258834][ T4236] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 294.308448][ T4236] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.310555][ T7132] syz.0.729 (7132): drop_caches: 2 [ 294.338891][ T5877] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.358038][ T5877] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 294.383669][ T4236] usb 6-1: Product: syz [ 294.398743][ T4236] usb 6-1: Manufacturer: syz [ 294.427470][ T4236] usb 6-1: SerialNumber: syz [ 294.518965][ T5877] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 294.539503][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.547568][ T5877] usb 5-1: Product: syz [ 294.585243][ T5877] usb 5-1: Manufacturer: syz [ 294.590503][ T5877] usb 5-1: SerialNumber: syz [ 294.701064][ T5877] usb 5-1: config 0 descriptor?? [ 294.793226][ T4236] usb 6-1: 0:2 : does not exist [ 294.970090][ T4238] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 295.266204][ T4236] usb 6-1: USB disconnect, device number 9 [ 295.296471][ T4206] udevd[4206]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 295.452340][ T4238] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 295.473768][ T4238] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 295.488232][ T4238] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 295.504220][ T4238] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.539624][ T7140] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 295.793469][ T7140] udc-core: couldn't find an available UDC or it's busy [ 296.390644][ T7140] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 296.543110][ T7168] kvm: pic: non byte write [ 296.568382][ T4236] usb 5-1: USB disconnect, device number 21 [ 296.600474][ T7140] udc-core: couldn't find an available UDC or it's busy [ 296.613117][ T7140] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 297.168823][ T4233] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 297.569000][ T4233] usb 1-1: config 0 has no interfaces? [ 297.603887][ T7184] binder: 7183:7184 ioctl c0306201 0 returned -14 [ 297.618349][ T7184] syz.4.744 (7184): drop_caches: 2 [ 297.654837][ T7184] syz.4.744 (7184): drop_caches: 2 [ 301.758954][ T4233] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 301.769678][ T4233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.803559][ T4233] usb 1-1: Product: syz [ 303.097152][ T4233] usb 1-1: Manufacturer: syz [ 303.122397][ T4233] usb 1-1: config 0 descriptor?? [ 303.168906][ T4233] usb 1-1: can't set config #0, error -71 [ 303.223617][ T4233] usb 1-1: USB disconnect, device number 23 [ 303.238620][ T4236] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 303.270338][ T7219] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 303.276054][ T23] usb 4-1: USB disconnect, device number 16 [ 303.528209][ T7225] kvm: pic: non byte write [ 304.118913][ T4236] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.156713][ T4236] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 304.328960][ T4236] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 304.342726][ T4236] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.371548][ T4236] usb 5-1: Product: syz [ 304.375931][ T4236] usb 5-1: Manufacturer: syz [ 304.460079][ T4236] usb 5-1: SerialNumber: syz [ 304.507419][ T4236] usb 5-1: config 0 descriptor?? [ 305.684999][ T5072] usb 5-1: USB disconnect, device number 22 [ 315.268761][ T4278] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 315.758824][ T4278] usb 1-1: Using ep0 maxpacket: 16 [ 316.009108][ T4278] usb 1-1: unable to get BOS descriptor or descriptor too short [ 316.028846][ T4278] usb 1-1: no configurations [ 316.033658][ T4278] usb 1-1: can't read configurations, error -22 [ 316.076248][ T7362] device syzkaller0 entered promiscuous mode [ 316.598947][ T7352] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 317.307269][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.313695][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.686123][ T7402] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 322.168945][ T5877] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 322.228642][ T4192] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 322.549162][ T5877] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.589941][ T5877] usb 5-1: config 0 interface 0 has no altsetting 0 [ 322.808818][ T5877] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 322.829329][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.837376][ T5877] usb 5-1: Product: syz [ 322.867962][ T5877] usb 5-1: Manufacturer: syz [ 322.887958][ T5877] usb 5-1: SerialNumber: syz [ 322.924355][ T5877] usb 5-1: config 0 descriptor?? [ 322.961595][ T5877] usb 5-1: can't set config #0, error -71 [ 322.995363][ T5877] usb 5-1: USB disconnect, device number 23 [ 323.028974][ T4192] usb 6-1: Using ep0 maxpacket: 8 [ 323.202432][ T7459] netlink: 28 bytes leftover after parsing attributes in process `syz.3.820'. [ 323.229700][ T4192] usb 6-1: unable to get BOS descriptor or descriptor too short [ 323.359865][ T4192] usb 6-1: config 11 has an invalid interface number: 244 but max is 0 [ 323.389146][ T4192] usb 6-1: config 11 has no interface number 0 [ 323.476449][ T4192] usb 6-1: config 11 interface 244 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 323.584844][ T4192] usb 6-1: config 11 interface 244 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 323.925803][ T4192] usb 6-1: config 11 interface 244 has no altsetting 0 [ 324.048903][ T4192] usb 6-1: string descriptor 0 read error: -71 [ 324.100656][ T4192] usb 6-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a [ 324.214365][ T4192] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.234877][ T7478] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.302366][ T7485] syz.2.827 (7485): drop_caches: 2 [ 324.311907][ T7478] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.320398][ T7485] syz.2.827 (7485): drop_caches: 2 [ 324.321808][ T4192] usb 6-1: can't set config #11, error -71 [ 324.357800][ T4192] usb 6-1: USB disconnect, device number 10 [ 324.420878][ T7482] netlink: 'syz.5.824': attribute type 16 has an invalid length. [ 324.433897][ T7482] netlink: 'syz.5.824': attribute type 17 has an invalid length. [ 324.450558][ T7482] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 324.458273][ T7482] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 324.473549][ T7482] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 324.481944][ T7482] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 324.495082][ T7482] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 324.503953][ T7482] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 324.534381][ T7482] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.541668][ T7482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.551919][ T7482] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.559302][ T7482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.956367][ T7502] netlink: 40 bytes leftover after parsing attributes in process `syz.3.832'. [ 325.853637][ T7515] netlink: 28 bytes leftover after parsing attributes in process `syz.0.831'. [ 326.098859][ T4278] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 326.218916][ T5877] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 326.358779][ T4278] usb 6-1: Using ep0 maxpacket: 8 [ 326.579323][ T4278] usb 6-1: unable to get BOS descriptor or descriptor too short [ 326.818783][ T4278] usb 6-1: config 11 has an invalid interface number: 244 but max is 0 [ 326.908748][ T5877] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 326.917931][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.928808][ T4278] usb 6-1: config 11 has no interface number 0 [ 326.935504][ T4278] usb 6-1: config 11 interface 244 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 326.956766][ T4278] usb 6-1: config 11 interface 244 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 326.969323][ T4278] usb 6-1: config 11 interface 244 has no altsetting 0 [ 327.278907][ T4278] usb 6-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a [ 327.575736][ T5877] usb 4-1: Product: syz [ 327.633618][ T4278] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.641934][ T4278] usb 6-1: Product: syz [ 327.646300][ T4278] usb 6-1: Manufacturer: syz [ 327.651010][ T4278] usb 6-1: SerialNumber: syz [ 327.707914][ T5877] usb 4-1: Manufacturer: syz [ 327.712688][ T5877] usb 4-1: SerialNumber: syz [ 327.729966][ T5877] usb 4-1: config 0 descriptor?? [ 327.790782][ T5877] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 328.068822][ T4278] peak_usb 6-1:11.244 can0: unable to request usb[type=0 value=1] err=-71 [ 328.159555][ T4278] peak_usb 6-1:11.244: unable to read PCAN-USB X6 firmware info (err -71) [ 328.920408][ T4278] peak_usb: probe of 6-1:11.244 failed with error -71 [ 328.939080][ T4278] usb 6-1: USB disconnect, device number 11 [ 329.049078][ T7561] netlink: 28 bytes leftover after parsing attributes in process `syz.0.847'. [ 329.799074][ T5877] gspca_stk1135: reg_w 0x200 err -71 [ 329.806054][ T5877] gspca_stk1135: serial bus timeout: status=0x00 [ 329.919101][ T5877] gspca_stk1135: Sensor write failed [ 330.061568][ T5877] gspca_stk1135: serial bus timeout: status=0x00 [ 330.074492][ T5877] gspca_stk1135: Sensor write failed [ 330.084267][ T5877] gspca_stk1135: serial bus timeout: status=0x00 [ 330.093937][ T5877] gspca_stk1135: Sensor read failed [ 330.104605][ T5877] gspca_stk1135: serial bus timeout: status=0x00 [ 330.114538][ T5877] gspca_stk1135: Sensor read failed [ 330.147442][ T4278] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 330.169315][ T5877] gspca_stk1135: Detected sensor type unknown (0x0) [ 330.209135][ T5877] gspca_stk1135: serial bus timeout: status=0x00 [ 330.255735][ T5877] gspca_stk1135: Sensor read failed [ 330.477845][ T5877] gspca_stk1135: serial bus timeout: status=0x00 [ 331.206359][ T5877] gspca_stk1135: Sensor read failed [ 331.219162][ T5877] gspca_stk1135: serial bus timeout: status=0x00 [ 331.225898][ T5877] gspca_stk1135: Sensor write failed [ 331.235311][ T5877] gspca_stk1135: serial bus timeout: status=0x00 [ 331.244393][ T5877] gspca_stk1135: Sensor write failed [ 331.252557][ T5877] stk1135: probe of 4-1:0.0 failed with error -71 [ 331.278300][ T5877] usb 4-1: USB disconnect, device number 17 [ 331.508910][ T4278] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.528689][ T4278] usb 6-1: config 0 interface 0 has no altsetting 0 [ 331.888751][ T5877] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 332.058863][ T4278] usb 6-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 332.073306][ T4278] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.149539][ T5877] usb 1-1: Using ep0 maxpacket: 8 [ 332.318873][ T23] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 332.339311][ T5877] usb 1-1: unable to get BOS descriptor or descriptor too short [ 332.449186][ T5877] usb 1-1: config 11 has an invalid interface number: 244 but max is 0 [ 332.460364][ T7602] netlink: 28 bytes leftover after parsing attributes in process `syz.4.859'. [ 332.541947][ T5877] usb 1-1: config 11 has no interface number 0 [ 332.648966][ T5877] usb 1-1: config 11 interface 244 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 332.749350][ T23] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 332.795116][ T5877] usb 1-1: config 11 interface 244 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 332.842144][ T23] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 332.938342][ T4278] usb 6-1: Product: syz [ 332.948744][ T4278] usb 6-1: Manufacturer: syz [ 332.949332][ T5877] usb 1-1: config 11 interface 244 has no altsetting 0 [ 332.955814][ T4278] usb 6-1: config 0 descriptor?? [ 332.970016][ T23] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 332.978874][ T4278] usb 6-1: can't set config #0, error -71 [ 332.987203][ T4278] usb 6-1: USB disconnect, device number 12 [ 332.999706][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.039048][ T7594] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 333.290009][ T7594] udc-core: couldn't find an available UDC or it's busy [ 333.312473][ T7594] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 333.513433][ T4278] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 333.541957][ T7594] udc-core: couldn't find an available UDC or it's busy [ 333.569106][ T7594] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 334.728752][ T4278] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 334.738229][ T4278] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.768944][ T5877] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a [ 334.778427][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.783187][ T4278] usb 4-1: Product: syz [ 334.810912][ T5877] usb 1-1: Product: syz [ 334.821498][ T4278] usb 4-1: Manufacturer: syz [ 334.826369][ T4278] usb 4-1: SerialNumber: syz [ 334.829537][ T5877] usb 1-1: Manufacturer: syz [ 334.846259][ T5877] usb 1-1: SerialNumber: syz [ 334.893425][ T4278] usb 4-1: config 0 descriptor?? [ 334.915753][ T7628] syz.2.868 (7628): drop_caches: 2 [ 334.934854][ T4192] usb 3-1: USB disconnect, device number 20 [ 334.985875][ T4278] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 334.986619][ T7628] syz.2.868 (7628): drop_caches: 2 [ 335.218899][ T5877] peak_usb 1-1:11.244 can0: unable to request usb[type=0 value=1] err=-71 [ 335.240052][ T5877] peak_usb 1-1:11.244: unable to read PCAN-USB X6 firmware info (err -71) [ 335.310943][ T5877] peak_usb: probe of 1-1:11.244 failed with error -71 [ 335.420080][ T5877] usb 1-1: USB disconnect, device number 26 [ 336.223001][ T7640] netlink: 28 bytes leftover after parsing attributes in process `syz.5.872'. [ 336.268785][ T5877] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 336.628119][ T7653] netlink: 8 bytes leftover after parsing attributes in process `syz.5.876'. [ 336.662958][ T7653] netlink: 4 bytes leftover after parsing attributes in process `syz.5.876'. [ 336.728917][ T5877] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.762097][ T5877] usb 1-1: config 0 interface 0 has no altsetting 0 [ 337.719447][ T5877] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 337.886255][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.041377][ T5877] usb 1-1: Product: syz [ 338.046173][ T5877] usb 1-1: Manufacturer: syz [ 338.058898][ T5877] usb 1-1: SerialNumber: syz [ 338.095685][ T5877] usb 1-1: config 0 descriptor?? [ 338.138733][ T4278] gspca_stk1135: reg_w 0x200 err -71 [ 338.140477][ T5877] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 338.145705][ T4278] gspca_stk1135: serial bus timeout: status=0x00 [ 338.189453][ T5877] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 338.209907][ T4278] gspca_stk1135: Sensor write failed [ 338.225740][ T4278] gspca_stk1135: serial bus timeout: status=0x00 [ 338.245395][ T5877] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 338.245973][ T4278] gspca_stk1135: Sensor write failed [ 338.264622][ T5877] usb 1-1: media controller created [ 338.290855][ T4278] gspca_stk1135: serial bus timeout: status=0x00 [ 338.297446][ T4278] gspca_stk1135: Sensor read failed [ 338.299843][ T5877] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 338.323355][ T4278] gspca_stk1135: serial bus timeout: status=0x00 [ 338.347836][ T4278] gspca_stk1135: Sensor read failed [ 338.376289][ T4278] gspca_stk1135: Detected sensor type unknown (0x0) [ 338.406802][ T4278] gspca_stk1135: serial bus timeout: status=0x00 [ 338.414996][ T4278] gspca_stk1135: Sensor read failed [ 338.439387][ T4278] gspca_stk1135: serial bus timeout: status=0x00 [ 338.444758][ T5877] DVB: Unable to find symbol tda10046_attach() [ 338.456237][ T4278] gspca_stk1135: Sensor read failed [ 338.461680][ T5877] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 338.476534][ T4278] gspca_stk1135: serial bus timeout: status=0x00 [ 338.483330][ T4278] gspca_stk1135: Sensor write failed [ 338.496133][ T4278] gspca_stk1135: serial bus timeout: status=0x00 [ 338.508681][ T5877] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 338.514998][ T4278] gspca_stk1135: Sensor write failed [ 338.535584][ T4278] stk1135: probe of 4-1:0.0 failed with error -71 [ 338.554911][ T5877] dvb_usb_m920x: probe of 1-1:0.0 failed with error -71 [ 338.581648][ T5877] usb 1-1: USB disconnect, device number 27 [ 338.603091][ T4278] usb 4-1: USB disconnect, device number 18 [ 338.838807][ T4192] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 339.090940][ T4278] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 341.918789][ T4192] usb 5-1: unable to read config index 0 descriptor/all [ 341.926058][ T4192] usb 5-1: can't read configurations, error -71 [ 342.002303][ T7680] netlink: 28 bytes leftover after parsing attributes in process `syz.5.884'. [ 342.024496][ T7686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.887'. [ 342.055232][ T7686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.887'. [ 342.737177][ T4278] usb 4-1: device not accepting address 19, error -71 [ 344.098649][ T23] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 345.618623][ T4278] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 346.088940][ T4233] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 346.108805][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.162163][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 346.519046][ T4233] usb 3-1: Using ep0 maxpacket: 8 [ 346.610151][ T23] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 346.917216][ T4233] usb 3-1: unable to get BOS descriptor or descriptor too short [ 346.925395][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.934124][ T23] usb 1-1: Product: syz [ 346.938943][ T23] usb 1-1: Manufacturer: syz [ 346.943721][ T23] usb 1-1: SerialNumber: syz [ 346.967488][ T23] usb 1-1: config 0 descriptor?? [ 346.973107][ T7724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.900'. [ 346.988833][ T23] usb 1-1: can't set config #0, error -71 [ 347.008696][ T4233] usb 3-1: config 11 has an invalid interface number: 244 but max is 0 [ 347.013198][ T7724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.900'. [ 347.017581][ T4233] usb 3-1: config 11 has no interface number 0 [ 347.017627][ T4233] usb 3-1: config 11 interface 244 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 347.017655][ T4233] usb 3-1: config 11 interface 244 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 347.017680][ T4233] usb 3-1: config 11 interface 244 has no altsetting 0 [ 347.020835][ T23] usb 1-1: USB disconnect, device number 28 [ 347.222532][ T4233] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a [ 347.345722][ T4233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.481056][ T4233] usb 3-1: Product: syz [ 347.579789][ T4233] usb 3-1: Manufacturer: syz [ 347.693896][ T4233] usb 3-1: SerialNumber: syz [ 348.618807][ T4233] peak_usb 3-1:11.244 can0: unable to request usb[type=0 value=1] err=-71 [ 348.658888][ T4233] peak_usb 3-1:11.244: unable to read PCAN-USB X6 firmware info (err -71) [ 348.808871][ T4233] peak_usb: probe of 3-1:11.244 failed with error -71 [ 349.586517][ T4233] usb 3-1: USB disconnect, device number 21 [ 349.607435][ T7746] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 351.458737][ T4233] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 351.908908][ T4233] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.995427][ T4233] usb 5-1: config 0 interface 0 has no altsetting 0 [ 352.208755][ T4233] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 352.898613][ T1325] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 352.913939][ T4233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.932486][ T4233] usb 5-1: Product: syz [ 352.936848][ T4233] usb 5-1: Manufacturer: syz [ 352.941921][ T4233] usb 5-1: SerialNumber: syz [ 352.948800][ T4233] usb 5-1: config 0 descriptor?? [ 352.990712][ T4233] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 353.007950][ T4233] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 353.028915][ T4233] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 353.043773][ T4233] usb 5-1: media controller created [ 353.065540][ T4233] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 353.178272][ T7805] binder: 7800:7805 ioctl c0306201 0 returned -14 [ 353.198717][ T1325] usb 1-1: Using ep0 maxpacket: 8 [ 353.359276][ T1325] usb 1-1: unable to get BOS descriptor or descriptor too short [ 353.479094][ T1325] usb 1-1: config 11 has an invalid interface number: 244 but max is 0 [ 353.500691][ T1325] usb 1-1: config 11 has no interface number 0 [ 353.539725][ T1325] usb 1-1: config 11 interface 244 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 353.606830][ T1325] usb 1-1: config 11 interface 244 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 353.729387][ T1325] usb 1-1: config 11 interface 244 has no altsetting 0 [ 353.949495][ T1325] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a [ 353.996642][ T1325] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.072867][ T1325] usb 1-1: Product: syz [ 354.109927][ T23] Bluetooth: hci5: command 0x0405 tx timeout [ 354.144153][ T1325] usb 1-1: Manufacturer: syz [ 354.164430][ T1325] usb 1-1: SerialNumber: syz [ 354.261089][ T5072] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 354.327256][ T4233] DVB: Unable to find symbol tda10046_attach() [ 354.337477][ T4233] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 354.366471][ T4233] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 354.502379][ T4233] dvb_usb_m920x: probe of 5-1:0.0 failed with error -71 [ 356.123478][ T4233] usb 5-1: USB disconnect, device number 26 [ 356.148675][ T5072] usb 6-1: Using ep0 maxpacket: 32 [ 356.218666][ T5072] usb 6-1: device descriptor read/all, error -71 [ 356.218668][ T1325] peak_usb 1-1:11.244 can0: unable to request usb[type=0 value=1] err=-71 [ 356.218698][ T1325] peak_usb 1-1:11.244: unable to read PCAN-USB X6 firmware info (err -71) [ 357.102334][ T1325] peak_usb: probe of 1-1:11.244 failed with error -71 [ 357.120099][ T1325] usb 1-1: USB disconnect, device number 29 [ 357.260295][ T7863] comedi comedi3: No hardware detected at I/O base 0x3c4 [ 362.098694][ T5072] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 362.519287][ T5072] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 362.662165][ T5072] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 362.916912][ T5072] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 362.988631][ T5072] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.048964][ T7923] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 363.587005][ T7923] udc-core: couldn't find an available UDC or it's busy [ 363.745774][ T7923] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 364.098726][ T7923] udc-core: couldn't find an available UDC or it's busy [ 364.427969][ T7923] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 367.169098][ T4267] usb 1-1: USB disconnect, device number 30 [ 369.160936][ T4238] libceph: connect (1)[c::]:6789 error -101 [ 369.161336][ T4238] libceph: mon0 (1)[c::]:6789 connect error [ 369.421064][ T4238] libceph: connect (1)[c::]:6789 error -101 [ 369.428397][ T4238] libceph: mon0 (1)[c::]:6789 connect error [ 369.753255][ T8012] ceph: No mds server is up or the cluster is laggy [ 372.099840][ T8039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.982'. [ 372.171965][ T8039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.982'. [ 372.202589][ T8046] netlink: 24 bytes leftover after parsing attributes in process `syz.0.986'. [ 373.185699][ T8059] capability: warning: `syz.2.990' uses 32-bit capabilities (legacy support in use) [ 373.198629][ T4267] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 374.991876][ T4267] usb 1-1: not running at top speed; connect to a high speed hub [ 375.135514][ T4267] usb 1-1: config 5 has an invalid interface number: 16 but max is 0 [ 375.164764][ T4267] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 375.207864][ T4267] usb 1-1: config 5 has no interface number 0 [ 375.226621][ T4267] usb 1-1: config 5 interface 16 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 375.304846][ T4267] usb 1-1: config 5 interface 16 has no altsetting 0 [ 375.382065][ T4267] usb 1-1: string descriptor 0 read error: -71 [ 375.392975][ T4267] usb 1-1: New USB device found, idVendor=0421, idProduct=03cd, bcdDevice=bc.96 [ 375.429580][ T4267] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.502042][ T4267] usb 1-1: can't set config #5, error -71 [ 375.525875][ T4267] usb 1-1: USB disconnect, device number 31 [ 376.746402][ T8089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1000'. [ 377.255166][ T8089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1000'. [ 378.742146][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.748736][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.087250][ T8124] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1010'. [ 380.282881][ T1325] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 380.391620][ T8119] sctp: failed to load transform for md5: -2 [ 381.255701][ T8141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1014'. [ 381.553463][ T5072] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 381.649319][ T1325] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 383.727950][ T1325] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.736593][ T1325] usb 6-1: Product: syz [ 383.740907][ T1325] usb 6-1: Manufacturer: syz [ 383.745628][ T1325] usb 6-1: SerialNumber: syz [ 383.798732][ T1325] usb 6-1: can't set config #1, error -71 [ 383.812932][ T5072] usb 5-1: unable to get BOS descriptor or descriptor too short [ 383.815230][ T1325] usb 6-1: USB disconnect, device number 15 [ 383.938837][ T5072] usb 5-1: config 63 has an invalid interface number: 66 but max is 0 [ 383.948630][ T5072] usb 5-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 384.028859][ T5072] usb 5-1: config 63 has no interface number 0 [ 384.159801][ T5072] usb 5-1: config 63 interface 66 has no altsetting 0 [ 384.181404][ T8168] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1022'. [ 384.478737][ T1325] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 384.958727][ T5072] usb 5-1: string descriptor 0 read error: -71 [ 384.965025][ T5072] usb 5-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 384.968691][ T8177] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1026'. [ 384.979369][ T5072] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.051188][ T5072] usb 5-1: can't set config #63, error -71 [ 385.093962][ T8177] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1026'. [ 385.112112][ T5072] usb 5-1: USB disconnect, device number 27 [ 385.128930][ T1325] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 385.142981][ T8181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1027'. [ 385.199052][ T1325] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 385.255910][ T1325] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 385.306102][ T1325] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.367437][ T8192] device syzkaller0 entered promiscuous mode [ 385.388998][ T8172] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 385.588734][ T5877] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 385.911200][ T8172] udc-core: couldn't find an available UDC or it's busy [ 385.940405][ T8172] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 386.058704][ T5877] usb 3-1: unable to get BOS descriptor or descriptor too short [ 386.158702][ T5877] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 386.166532][ T5877] usb 3-1: can't read configurations, error -71 [ 386.181701][ T8172] udc-core: couldn't find an available UDC or it's busy [ 386.188839][ T8172] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 386.211022][ T8206] loop8: detected capacity change from 0 to 7 [ 386.222990][ T7206] Dev loop8: unable to read RDB block 7 [ 386.229119][ T7206] loop8: unable to read partition table [ 386.235907][ T7206] loop8: partition table beyond EOD, truncated [ 386.249805][ T8206] Dev loop8: unable to read RDB block 7 [ 386.256111][ T8206] loop8: unable to read partition table [ 386.262382][ T8206] loop8: partition table beyond EOD, truncated [ 386.268812][ T8206] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 386.355103][ T8209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1037'. [ 386.371818][ T8209] device syz_tun entered promiscuous mode [ 386.378018][ T8209] device macvtap3 entered promiscuous mode [ 386.424433][ T8209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1037'. [ 386.439015][ T5072] usb 6-1: USB disconnect, device number 16 [ 386.495389][ T8209] device syz_tun left promiscuous mode [ 386.589870][ T8212] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1039'. [ 392.797189][ T8278] comedi comedi3: No hardware detected at I/O base 0x3c4 [ 393.958741][ T4237] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 394.106260][ T8302] netlink: 'syz.5.1067': attribute type 16 has an invalid length. [ 394.213372][ T4237] usb 5-1: Using ep0 maxpacket: 16 [ 395.608710][ T4237] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.628769][ T4237] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 395.652539][ T4237] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 395.675384][ T4237] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 395.716664][ T4237] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 395.838794][ T4237] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 395.868469][ T4237] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 395.873166][ T8314] syz.3.1072 (8314): drop_caches: 2 [ 395.877098][ T4237] usb 5-1: Manufacturer: syz [ 395.907497][ T8314] syz.3.1072 (8314): drop_caches: 2 [ 395.915769][ T4237] usb 5-1: config 0 descriptor?? [ 396.348714][ T4237] rc_core: IR keymap rc-hauppauge not found [ 396.354802][ T4237] Registered IR keymap rc-empty [ 396.376676][ T4237] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 396.438745][ T4237] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 396.491890][ T4237] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 396.537479][ T4237] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input11 [ 396.619088][ T4237] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 396.659728][ T4237] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 396.708666][ T4237] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 396.758767][ T4237] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 396.808761][ T4237] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 396.848904][ T4237] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 396.898689][ T4237] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 396.933834][ T8324] comedi comedi3: No hardware detected at I/O base 0x3c4 [ 396.968720][ T4237] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 397.008645][ T4237] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 397.058667][ T4237] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 397.100096][ T4237] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 397.129903][ T4237] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 397.137406][ T8334] netlink: 'syz.3.1078': attribute type 16 has an invalid length. [ 397.211009][ T4237] usb 5-1: USB disconnect, device number 28 [ 397.358799][ T4267] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 398.878611][ T4267] usb 3-1: Using ep0 maxpacket: 8 [ 398.978669][ T4233] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 398.998720][ T4267] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 399.048277][ T4267] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.098764][ T4237] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 399.113088][ T4267] pvrusb2: Hardware description: Terratec Grabster AV400 [ 399.126200][ T4267] pvrusb2: ********** [ 399.135478][ T4267] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 399.158206][ T4267] pvrusb2: Important functionality might not be entirely working. [ 399.174796][ T4267] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 399.204834][ T4267] pvrusb2: ********** [ 399.274811][ T4233] usb 6-1: Using ep0 maxpacket: 16 [ 399.330684][ T2426] pvrusb2: Invalid write control endpoint [ 399.358738][ T4237] usb 1-1: Using ep0 maxpacket: 16 [ 399.398944][ T4233] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 399.414241][ T4233] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 399.457312][ T2426] pvrusb2: Invalid write control endpoint [ 399.476330][ T2426] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 399.505140][ T2426] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 399.518964][ T4237] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 399.531036][ T2426] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 399.557979][ T23] usb 3-1: USB disconnect, device number 24 [ 399.561855][ T2426] pvrusb2: Device being rendered inoperable [ 399.584947][ T2426] cx25840 5-0044: Unable to detect h/w, assuming cx23887 [ 399.595630][ T2426] cx25840 5-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 399.638727][ T4233] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 399.647835][ T4233] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.657507][ T4233] usb 6-1: Product: syz [ 399.662085][ T4233] usb 6-1: Manufacturer: syz [ 399.666815][ T4233] usb 6-1: SerialNumber: syz [ 399.668627][ T2426] pvrusb2: Attached sub-driver cx25840 [ 399.692844][ T2426] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 399.717309][ T2426] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 399.733372][ T4237] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 399.785884][ T4237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.811718][ T4237] usb 1-1: Product: syz [ 399.998818][ T4237] usb 1-1: Manufacturer: syz [ 400.003489][ T4237] usb 1-1: SerialNumber: syz [ 400.010970][ T4237] usb 1-1: config 0 descriptor?? [ 400.058798][ T4233] usb 6-1: 0:2 : does not exist [ 400.085303][ T4233] usb 6-1: USB disconnect, device number 17 [ 401.137525][ T7206] udevd[7206]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 402.150587][ T8383] comedi comedi3: No hardware detected at I/O base 0x3c4 [ 402.170282][ T4267] usb 1-1: USB disconnect, device number 32 [ 402.415700][ T8393] Bluetooth: hci0: invalid length 0, exp 2 for type 3 [ 402.576113][ T4278] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 402.687934][ T8400] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1098'. [ 403.494618][ T23] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 403.528589][ T4278] usb 5-1: Using ep0 maxpacket: 8 [ 403.648670][ T4278] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 403.748680][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 403.753865][ T4237] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 403.761628][ T4233] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 403.808697][ T4278] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 403.817893][ T4278] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.832726][ T4278] usb 5-1: Product: syz [ 403.836956][ T4278] usb 5-1: Manufacturer: syz [ 403.841639][ T4278] usb 5-1: SerialNumber: syz [ 403.856915][ T4278] usb 5-1: config 0 descriptor?? [ 403.869146][ T23] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 403.879532][ T23] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 403.890351][ T23] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 403.900748][ T4278] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 403.901277][ T23] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 403.915574][ T4278] usb 5-1: setting power ON [ 403.922384][ T23] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 403.927169][ T4278] dvb-usb: bulk message failed: -22 (2/0) [ 403.936186][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.955555][ T4278] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 403.978687][ T4267] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 403.986595][ T4278] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 403.995293][ T4278] usb 5-1: media controller created [ 404.007305][ T4278] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 404.022538][ T4237] usb 1-1: Using ep0 maxpacket: 32 [ 404.027837][ T4233] usb 6-1: Using ep0 maxpacket: 16 [ 404.031898][ T4278] usb 5-1: selecting invalid altsetting 6 [ 404.039539][ T4278] usb 5-1: digital interface selection failed (-22) [ 404.046368][ T4278] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 404.088884][ T4278] usb 5-1: setting power OFF [ 404.094131][ T4278] dvb-usb: bulk message failed: -22 (2/0) [ 404.107991][ T4278] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 404.117675][ T4278] (NULL device *): no alternate interface [ 404.134104][ T4278] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 404.159078][ T4233] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 404.161909][ T4278] usb 5-1: USB disconnect, device number 29 [ 404.169917][ T4237] usb 1-1: config 0 has an invalid interface number: 146 but max is 0 [ 404.192234][ T4233] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 404.204731][ T4237] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.218732][ T4267] usb 4-1: Using ep0 maxpacket: 16 [ 404.228711][ T23] usb 3-1: GET_CAPABILITIES returned 0 [ 404.234251][ T23] usbtmc 3-1:16.0: can't read capabilities [ 404.240520][ T4237] usb 1-1: config 0 has no interface number 0 [ 404.338980][ T4267] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.399803][ T4233] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 404.409032][ T4233] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.417061][ T4233] usb 6-1: Product: syz [ 404.421682][ T4237] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 404.431029][ T4233] usb 6-1: Manufacturer: syz [ 404.435823][ T4237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.443957][ T4233] usb 6-1: SerialNumber: syz [ 404.449467][ T4237] usb 1-1: Product: syz [ 404.453661][ T4237] usb 1-1: Manufacturer: syz [ 404.458275][ T4237] usb 1-1: SerialNumber: syz [ 404.483204][ T4237] usb 1-1: config 0 descriptor?? [ 404.486559][ T4278] usb 3-1: USB disconnect, device number 25 [ 404.508753][ T4267] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 404.518104][ T4267] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.528214][ T4267] usb 4-1: Product: syz [ 404.532606][ T4267] usb 4-1: Manufacturer: syz [ 404.533669][ T4237] microtek usb (rev 0.4.3): expecting 3 got 0 endpoints! Bailing out. [ 404.537296][ T4267] usb 4-1: SerialNumber: syz [ 404.559837][ T4267] usb 4-1: config 0 descriptor?? [ 404.744200][ T4267] usb 1-1: USB disconnect, device number 33 [ 404.838862][ T4233] usb 6-1: 0:2 : does not exist [ 404.849846][ T4233] usb 6-1: USB disconnect, device number 18 [ 405.092759][ T7206] udevd[7206]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 406.029757][ T8439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1113'. [ 406.771924][ T4267] usb 4-1: USB disconnect, device number 21 [ 408.373532][ T8477] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1125'. [ 408.728682][ T4192] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 408.998729][ T4192] usb 6-1: Using ep0 maxpacket: 32 [ 409.119143][ T4192] usb 6-1: config 123 interface 0 has no altsetting 0 [ 409.472551][ T4192] usb 6-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 409.726230][ T8493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1127'. [ 409.853130][ T4192] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.861577][ T4192] usb 6-1: Product: syz [ 409.866199][ T4192] usb 6-1: Manufacturer: syz [ 409.873329][ T4192] usb 6-1: SerialNumber: syz [ 410.200954][ T4192] usb 6-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 410.217975][ T4192] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 410.228889][ T4192] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 410.236256][ T4192] usb 6-1: media controller created [ 410.255386][ T4192] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 410.298828][ T4192] set interface failed [ 410.298860][ T4192] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 410.317963][ T4192] error writing reg: 0xff, val: 0x00 [ 410.355345][ T4192] dvb_usb_mxl111sf: probe of 6-1:123.0 failed with error -22 [ 410.481589][ T4192] usb 6-1: USB disconnect, device number 19 [ 412.001968][ T8519] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1138'. [ 413.837829][ T8517] syz.4.1136 sent an empty control message without MSG_MORE. [ 413.916874][ T8538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1140'. [ 416.336563][ T8562] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1150'. [ 417.120341][ T8574] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 417.415814][ T8586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1156'. [ 417.881040][ T8588] input: syz0 as /devices/virtual/input/input12 [ 418.065808][ T8591] input: syz1 as /devices/virtual/input/input13 [ 418.281610][ T8596] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1160'. [ 419.491206][ T8616] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1165'. [ 423.127411][ T8652] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1173'. [ 426.950053][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 427.022177][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 427.081690][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 427.224734][ T8696] device bridge_slave_0 left promiscuous mode [ 427.321370][ T8696] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.476111][ T8696] device bridge_slave_1 left promiscuous mode [ 428.505499][ T8696] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.600974][ T8696] bond0: (slave bond_slave_0): Releasing backup interface [ 428.666880][ T8696] bond0: (slave bond_slave_1): Releasing backup interface [ 428.731922][ T8696] device team_slave_0 left promiscuous mode [ 428.845077][ T8696] team0: Port device team_slave_0 removed [ 428.878894][ T8696] device team_slave_1 left promiscuous mode [ 428.930028][ T8696] team0: Port device team_slave_1 removed [ 428.976908][ T8696] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.013939][ T8696] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.080545][ T8696] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.115969][ T8696] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.205475][ T8696] bond0: (slave vxlan0): Releasing backup interface [ 429.292957][ T8704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1187'. [ 432.399767][ T4267] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 432.848841][ T4267] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 434.253473][ T8762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.818936][ T4267] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 434.833835][ T4267] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 434.849117][ T4267] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.958641][ T4267] usb 5-1: can't set config #27, error -71 [ 434.968220][ T4267] usb 5-1: USB disconnect, device number 30 [ 435.768658][ T4192] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 436.400697][ T4192] usb 6-1: unable to get BOS descriptor or descriptor too short [ 436.558797][ T4192] usb 6-1: config 63 has an invalid interface number: 66 but max is 0 [ 436.587743][ T4192] usb 6-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 436.655428][ T4192] usb 6-1: config 63 has no interface number 0 [ 436.668439][ T4192] usb 6-1: config 63 interface 66 has no altsetting 0 [ 437.680714][ T4192] usb 6-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 437.698626][ T4192] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.706823][ T4192] usb 6-1: Product: syz [ 437.711547][ T4192] usb 6-1: Manufacturer: syz [ 437.716422][ T4192] usb 6-1: SerialNumber: syz [ 439.216665][ T26] audit: type=1326 audit(1779165984.693:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8800 comm="syz.3.1220" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7db37be59 code=0x7ffc0000 [ 439.301158][ T26] audit: type=1326 audit(1779165984.723:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8800 comm="syz.3.1220" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb7db37be59 code=0x7ffc0000 [ 439.305690][ T4192] usb 6-1: USB disconnect, device number 20 [ 439.478988][ T26] audit: type=1326 audit(1779165984.723:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8800 comm="syz.3.1220" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb7db37be59 code=0x7ffc0000 [ 440.185332][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.191740][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.207218][ T8836] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1230'. [ 441.966064][ T4237] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 442.748712][ T4237] usb 6-1: unable to get BOS descriptor or descriptor too short [ 442.853499][ T4237] usb 6-1: config 63 has an invalid interface number: 66 but max is 0 [ 442.872564][ T4237] usb 6-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 442.914996][ T4237] usb 6-1: config 63 has no interface number 0 [ 442.938697][ T4237] usb 6-1: config 63 interface 66 has no altsetting 0 [ 443.119555][ T4237] usb 6-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 443.143091][ T4237] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.176707][ T4237] usb 6-1: Product: syz [ 443.192019][ T4237] usb 6-1: Manufacturer: syz [ 443.205685][ T4237] usb 6-1: SerialNumber: syz [ 443.671368][ T4237] usb 6-1: USB disconnect, device number 21 [ 444.148864][ T4237] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 444.265894][ T8880] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1242'. [ 445.148608][ T4237] usb 6-1: device descriptor read/64, error -71 [ 447.628069][ T8919] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1256'. [ 448.788596][ T4238] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 449.028629][ T4238] usb 3-1: Using ep0 maxpacket: 16 [ 449.072308][ T4192] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 449.153545][ T4238] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.174000][ T4238] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 449.205813][ T4238] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 449.226320][ T4238] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 449.236600][ T4238] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 449.258817][ T4267] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 449.328787][ T4238] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 449.339656][ T4238] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 449.352354][ T4238] usb 3-1: Manufacturer: syz [ 449.359401][ T4238] usb 3-1: config 0 descriptor?? [ 449.678870][ T4192] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 449.696354][ T4192] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 449.716410][ T4192] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.758657][ T4238] rc_core: IR keymap rc-hauppauge not found [ 449.764646][ T4238] Registered IR keymap rc-empty [ 449.770501][ T4238] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 449.792565][ T4192] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 449.833244][ T8950] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1268'. [ 449.860414][ T4267] usb 5-1: config 0 has no interfaces? [ 450.039243][ T4267] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 450.113131][ T4267] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.190576][ T4267] usb 5-1: Product: syz [ 450.230182][ T4267] usb 5-1: Manufacturer: syz [ 450.281794][ T4267] usb 5-1: SerialNumber: syz [ 450.607355][ T4267] usb 5-1: config 0 descriptor?? [ 450.629140][ T4238] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 450.670664][ T4238] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 450.704995][ T4238] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input14 [ 450.788940][ T4238] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 450.806340][ T8957] serio: Serial port ttynull [ 450.924868][ T4238] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 450.958672][ T4238] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 450.980766][ T4192] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 451.025930][ T4238] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 451.126956][ T8963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1272'. [ 451.223121][ T4238] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 451.348943][ T4238] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 451.448972][ T4238] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 451.549007][ T4238] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 452.632795][ T4238] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 452.830328][ T4192] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -110 [ 452.858731][ T4238] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 452.933676][ T4192] stv0680 4-1:4.0: last error: 86, command = 0x7c [ 452.951122][ T4238] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 453.081914][ T4238] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 453.092846][ T4238] usb 3-1: USB disconnect, device number 26 [ 453.144933][ T4192] usb 4-1: USB disconnect, device number 22 [ 453.160713][ T4267] usb 5-1: USB disconnect, device number 31 [ 453.539037][ T4267] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 453.956542][ T8981] comedi comedi3: No hardware detected at I/O base 0x3c4 [ 454.019065][ T4267] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.037626][ T4267] usb 5-1: config 0 interface 0 has no altsetting 0 [ 454.285779][ T4267] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 454.324548][ T4267] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.395584][ T4267] usb 5-1: Product: syz [ 454.433873][ T4267] usb 5-1: Manufacturer: syz [ 454.474144][ T4267] usb 5-1: SerialNumber: syz [ 454.529553][ T4267] usb 5-1: config 0 descriptor?? [ 454.620897][ T4267] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 454.671128][ T4267] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 454.749086][ T4267] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 454.780953][ T4267] usb 5-1: media controller created [ 454.945128][ T4267] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 455.286170][ T4267] DVB: Unable to find symbol tda10046_attach() [ 455.292569][ T4267] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 455.541439][ T4267] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 455.638833][ T4267] dvb_usb_m920x: probe of 5-1:0.0 failed with error -71 [ 455.656223][ T9008] sch_fq: defrate 2 ignored. [ 455.703020][ T4267] usb 5-1: USB disconnect, device number 32 [ 456.138589][ T23] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 457.588740][ T4238] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 457.768770][ T23] usb 4-1: config 0 has no interfaces? [ 457.928827][ T23] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 457.939178][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.947533][ T23] usb 4-1: Product: syz [ 457.952737][ T23] usb 4-1: Manufacturer: syz [ 457.957649][ T23] usb 4-1: SerialNumber: syz [ 457.965279][ T23] usb 4-1: config 0 descriptor?? [ 457.998662][ T4238] usb 3-1: unable to get BOS descriptor or descriptor too short [ 458.078646][ T4238] usb 3-1: config 63 has an invalid interface number: 66 but max is 0 [ 458.090498][ T4238] usb 3-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 458.105613][ T4238] usb 3-1: config 63 has no interface number 0 [ 458.113559][ T4238] usb 3-1: config 63 interface 66 has no altsetting 0 [ 459.433464][ T4267] usb 4-1: USB disconnect, device number 23 [ 459.578710][ T4238] usb 3-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 459.598069][ T4238] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.742365][ T4238] usb 3-1: Product: syz [ 459.793887][ T4238] usb 3-1: can't set config #63, error -71 [ 459.815306][ T4238] usb 3-1: USB disconnect, device number 27 [ 462.302884][ T9063] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1300'. [ 462.628593][ T4267] usb 3-1: new low-speed USB device number 28 using dummy_hcd [ 463.249963][ T4267] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 463.280048][ T4267] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 463.363775][ T9076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1307'. [ 464.064913][ T4267] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 464.082916][ T4267] usb 3-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 464.093534][ T4267] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.108434][ T4267] usb 3-1: config 0 descriptor?? [ 464.129077][ T9059] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 464.379457][ T4238] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 464.478652][ T4267] usbhid 3-1:0.0: can't add hid device: -71 [ 464.484883][ T4267] usbhid: probe of 3-1:0.0 failed with error -71 [ 464.535282][ T4267] usb 3-1: USB disconnect, device number 28 [ 464.738884][ T4238] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 464.761424][ T4238] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 464.805703][ T4238] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 464.841833][ T4238] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.889484][ T9080] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 465.125165][ T9080] udc-core: couldn't find an available UDC or it's busy [ 465.132344][ T9080] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 465.361562][ T9080] udc-core: couldn't find an available UDC or it's busy [ 465.442814][ T9111] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1316'. [ 465.691692][ T9080] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 467.289005][ T4237] usb 5-1: USB disconnect, device number 33 [ 467.721212][ T9152] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1328'. [ 468.695631][ T9156] device syzkaller0 entered promiscuous mode [ 469.188695][ T23] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 469.460820][ T4237] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 469.538586][ T4238] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 469.789073][ T23] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 469.808142][ T23] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 469.825634][ T23] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 469.835829][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.858937][ T4237] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.872753][ T4237] usb 3-1: config 0 interface 0 has no altsetting 0 [ 469.889486][ T9168] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 469.908830][ T4238] usb 6-1: config 0 has no interfaces? [ 470.042115][ T4237] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 470.051688][ T4237] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.064708][ T4237] usb 3-1: Product: syz [ 470.069219][ T4237] usb 3-1: Manufacturer: syz [ 470.073837][ T4237] usb 3-1: SerialNumber: syz [ 470.084268][ T4237] usb 3-1: config 0 descriptor?? [ 470.089467][ T4238] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 470.100619][ T4238] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.108755][ T4238] usb 6-1: Product: syz [ 470.112928][ T4238] usb 6-1: Manufacturer: syz [ 470.117521][ T4238] usb 6-1: SerialNumber: syz [ 470.124154][ T4238] usb 6-1: config 0 descriptor?? [ 470.137192][ T9168] udc-core: couldn't find an available UDC or it's busy [ 470.140581][ T4237] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 470.144735][ T9168] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 470.161109][ T4237] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 470.191478][ T4237] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 470.200909][ T4237] usb 3-1: media controller created [ 470.216236][ T4237] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 470.252515][ T4237] DVB: Unable to find symbol tda10046_attach() [ 470.259647][ T4237] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 470.268280][ T4237] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 470.365653][ T9168] udc-core: couldn't find an available UDC or it's busy [ 470.368657][ T4237] dvb_usb_m920x: probe of 3-1:0.0 failed with error -71 [ 471.599322][ T4192] usb 6-1: USB disconnect, device number 24 [ 471.647339][ T9168] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 471.669364][ T4237] usb 3-1: USB disconnect, device number 29 [ 472.828731][ T4192] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 472.937471][ T1325] usb 5-1: USB disconnect, device number 34 [ 473.098581][ T4192] usb 4-1: Using ep0 maxpacket: 16 [ 473.220280][ T4192] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 473.231148][ T4192] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 473.242411][ T4192] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 473.252751][ T4192] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 473.267362][ T4192] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 473.358822][ T4192] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 473.377909][ T4192] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 473.395342][ T4192] usb 4-1: Manufacturer: syz [ 473.414510][ T4192] usb 4-1: config 0 descriptor?? [ 473.798585][ T4192] rc_core: IR keymap rc-hauppauge not found [ 473.804787][ T4192] Registered IR keymap rc-empty [ 473.810486][ T4192] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 473.838912][ T4192] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 473.929379][ T4192] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 474.159671][ T4192] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input15 [ 474.224248][ T4192] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 474.268628][ T4192] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 474.298718][ T4192] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 474.328619][ T4192] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 474.358610][ T4192] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 474.388609][ T4192] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 474.418630][ T4192] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 474.448671][ T4192] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 474.458644][ T4233] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 474.488674][ T4192] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 474.518602][ T4192] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 474.819912][ T4192] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 474.836794][ T4192] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 474.878828][ T4192] usb 4-1: USB disconnect, device number 24 [ 474.988831][ T4233] usb 3-1: config 0 has no interfaces? [ 475.150331][ T4233] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 475.173943][ T4233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.206314][ T4233] usb 3-1: Product: syz [ 475.225937][ T4233] usb 3-1: Manufacturer: syz [ 475.242200][ T4233] usb 3-1: SerialNumber: syz [ 475.271919][ T4233] usb 3-1: config 0 descriptor?? [ 476.766552][ T4192] usb 3-1: USB disconnect, device number 30 [ 477.785429][ T9325] comedi comedi3: No hardware detected at I/O base 0x3c4 [ 478.028734][ T4192] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 478.358651][ T4192] usb 6-1: Using ep0 maxpacket: 16 [ 478.708847][ T4192] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 478.824256][ T4192] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 478.838619][ T4192] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 478.849131][ T4192] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 478.859375][ T4192] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 478.948966][ T4192] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 478.978138][ T4192] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 479.001825][ T4192] usb 6-1: Manufacturer: syz [ 479.031706][ T4192] usb 6-1: config 0 descriptor?? [ 479.401891][ T9348] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 480.607049][ T4192] rc_core: IR keymap rc-hauppauge not found [ 480.659511][ T4192] Registered IR keymap rc-empty [ 480.664581][ T4192] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 480.778650][ T4192] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 480.829346][ T4192] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 480.856607][ T4192] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input16 [ 480.895431][ T4192] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 480.930373][ T4192] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 480.968708][ T4192] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 481.008639][ T4192] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 481.038631][ T4192] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 481.078689][ T4192] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 481.088658][ T4278] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 481.099970][ T9372] device syzkaller0 entered promiscuous mode [ 481.128760][ T4192] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 481.160245][ T4192] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 481.199480][ T4192] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 481.238630][ T4192] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 481.300696][ T4192] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 481.319531][ T4192] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 481.355217][ T4192] usb 6-1: USB disconnect, device number 25 [ 481.435727][ T9379] comedi comedi3: No hardware detected at I/O base 0x3c4 [ 481.459114][ T4278] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 481.477230][ T4278] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 481.498744][ T4278] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 481.508669][ T4278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.542688][ T9365] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 481.780373][ T9365] udc-core: couldn't find an available UDC or it's busy [ 481.796523][ T9365] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 482.028324][ T9365] udc-core: couldn't find an available UDC or it's busy [ 482.045496][ T9365] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 484.054621][ T4267] usb 3-1: USB disconnect, device number 31 [ 484.109758][ T9417] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1409'. [ 484.522631][ T9432] comedi comedi3: No hardware detected at I/O base 0x3c4 [ 485.205430][ T4204] Bluetooth: Wrong link type (-22) [ 486.078643][ T4238] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 486.326341][ T9465] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1424'. [ 486.488870][ T4238] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 486.528678][ T4238] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 486.599973][ T4238] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 486.634188][ T4238] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.718886][ T9458] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 486.945867][ T9458] udc-core: couldn't find an available UDC or it's busy [ 486.962498][ T9458] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 487.310055][ T9458] udc-core: couldn't find an available UDC or it's busy [ 487.348524][ T9458] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 488.065621][ T9510] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1436'. [ 488.966447][ T23] usb 5-1: USB disconnect, device number 35 [ 488.984431][ T9525] comedi comedi3: No hardware detected at I/O base 0x3c4 [ 489.347855][ T9531] device syzkaller0 entered promiscuous mode [ 491.848666][ T4192] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 493.465289][ T4192] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 493.507088][ T4192] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 493.558707][ T4192] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 493.567944][ T4192] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.688921][ T9559] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 493.963098][ T9559] udc-core: couldn't find an available UDC or it's busy [ 493.971957][ T9559] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 494.202436][ T9559] udc-core: couldn't find an available UDC or it's busy [ 494.212140][ T9559] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 495.780274][ T4238] usb 3-1: USB disconnect, device number 32 [ 498.420405][ T9614] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1472'. [ 501.901704][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.908115][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.519175][ T9663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1483'. [ 503.573192][ T4237] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 504.139707][ T4237] usb 6-1: device descriptor read/64, error -71 [ 504.798534][ T4237] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 504.988576][ T4237] usb 6-1: device descriptor read/64, error -71 [ 505.108747][ T4237] usb usb6-port1: attempt power cycle [ 506.239624][ T4237] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 506.308764][ T4237] usb 6-1: device descriptor read/8, error -71 [ 510.374304][ T9744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1497'. [ 510.881930][ T26] audit: type=1326 audit(1779166056.363:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9751 comm="syz.0.1511" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe137f41e59 code=0x7ffc0000 [ 511.160100][ T26] audit: type=1326 audit(1779166056.363:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9751 comm="syz.0.1511" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe137f41e59 code=0x7ffc0000 [ 511.232224][ T26] audit: type=1326 audit(1779166056.363:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9751 comm="syz.0.1511" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe137f41e59 code=0x7ffc0000 [ 511.259116][ T26] audit: type=1326 audit(1779166056.363:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9751 comm="syz.0.1511" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe137f41e59 code=0x7ffc0000 [ 511.316893][ T26] audit: type=1326 audit(1779166056.363:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9751 comm="syz.0.1511" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe137f41e59 code=0x7ffc0000 [ 511.457154][ T26] audit: type=1326 audit(1779166056.363:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9751 comm="syz.0.1511" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe137f41e59 code=0x7ffc0000 [ 512.070306][ T26] audit: type=1326 audit(1779166056.363:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9751 comm="syz.0.1511" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe137f41e59 code=0x7ffc0000 [ 514.162353][ T9805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1526'. [ 515.059470][ T9778] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 516.115592][ T4278] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 516.698709][ T4278] usb 3-1: device descriptor read/64, error -71 [ 517.323903][ T4278] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 517.336114][ T9841] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1540'. [ 517.992618][ T4278] usb 3-1: device descriptor read/64, error -71 [ 518.119491][ T4278] usb usb3-port1: attempt power cycle [ 518.538841][ T4278] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 518.799272][ T4278] usb 3-1: device descriptor read/8, error -71 [ 519.990771][ T9887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1554'. [ 520.628979][ T4237] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 521.488882][ T4238] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 521.648787][ T4237] usb 5-1: unable to get BOS descriptor or descriptor too short [ 521.708904][ T4237] usb 5-1: not running at top speed; connect to a high speed hub [ 521.716721][ T4238] usb 3-1: device descriptor read/64, error -71 [ 521.818916][ T4237] usb 5-1: config 3 has an invalid interface number: 233 but max is 0 [ 521.837613][ T4237] usb 5-1: config 3 has no interface number 0 [ 521.847754][ T4237] usb 5-1: config 3 interface 233 altsetting 6 has a duplicate endpoint with address 0xB, skipping [ 521.868518][ T4237] usb 5-1: config 3 interface 233 has no altsetting 0 [ 521.988856][ T4238] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 522.048954][ T4237] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=2d.0d [ 522.729144][ T4237] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.781046][ T4237] usb 5-1: Product: syz [ 522.785264][ T4237] usb 5-1: Manufacturer: syz [ 522.800693][ T4237] usb 5-1: SerialNumber: syz [ 522.918571][ T4238] usb 3-1: device descriptor read/64, error -71 [ 523.048872][ T4238] usb usb3-port1: attempt power cycle [ 523.204658][ T4237] usb 5-1: Cannot retrieve CPort count: -71 [ 523.216409][ T4237] usb 5-1: Cannot retrieve CPort count: -71 [ 523.247716][ T4237] es2_ap_driver: probe of 5-1:3.233 failed with error -71 [ 523.309266][ T4237] usb 5-1: USB disconnect, device number 36 [ 523.488763][ T4238] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 523.744563][ T4238] usb 3-1: device descriptor read/8, error -71 [ 524.059367][ T9936] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1567'. [ 524.728744][ T23] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 525.048794][ T4237] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 525.098883][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 525.898807][ T23] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 525.907033][ T23] usb 5-1: config 0 has no interface number 0 [ 525.938729][ T23] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 525.949041][ T4237] usb 6-1: Using ep0 maxpacket: 16 [ 525.976600][ T23] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 526.078745][ T4237] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 526.105831][ T4237] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 526.135882][ T4237] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 526.169128][ T4237] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 526.179774][ T23] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 526.198570][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.206943][ T4237] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 526.220681][ T4238] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 526.230145][ T23] usb 5-1: Product: syz [ 526.234515][ T23] usb 5-1: Manufacturer: syz [ 526.244748][ T23] usb 5-1: SerialNumber: syz [ 526.268005][ T23] usb 5-1: config 0 descriptor?? [ 526.299043][ T9945] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 526.326603][ T9945] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 526.350015][ T4237] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 526.368118][ T4237] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 526.376767][ T4237] usb 6-1: Manufacturer: syz [ 526.384151][ T4237] usb 6-1: config 0 descriptor?? [ 526.430827][ T4238] usb 3-1: device descriptor read/64, error -71 [ 526.552772][ T9945] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 526.560655][ T9945] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 526.698729][ T4238] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 526.718818][ T4237] rc_core: IR keymap rc-hauppauge not found [ 526.725064][ T4237] Registered IR keymap rc-empty [ 526.732876][ T4237] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 526.778706][ T4237] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 526.819512][ T4237] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 526.834764][ T4237] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input17 [ 526.858653][ T4237] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 526.889839][ T4237] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 526.898792][ T4238] usb 3-1: device descriptor read/64, error -71 [ 526.919439][ T4237] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 526.948615][ T4237] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 526.978978][ T4237] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 527.008724][ T4237] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 527.029060][ T4238] usb usb3-port1: attempt power cycle [ 527.058827][ T4237] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 527.089596][ T4237] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 527.129655][ T4237] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 527.159367][ T4237] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 527.210220][ T4237] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 527.231281][ T4237] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 527.382530][ T9977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1580'. [ 527.765165][ T4192] usb 6-1: USB disconnect, device number 30 [ 527.843757][ T4238] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 528.048854][ T4238] usb 3-1: device descriptor read/8, error -71 [ 528.376176][ T4238] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 529.299564][ T4238] usb 3-1: device descriptor read/8, error -71 [ 529.419513][ T4238] usb usb3-port1: unable to enumerate USB device [ 529.448824][ T23] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 529.484439][ T23] asix: probe of 5-1:0.34 failed with error -71 [ 529.523763][ T23] usb 5-1: USB disconnect, device number 37 [ 529.751527][T10034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1594'. [ 531.671799][ T4238] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 531.998898][ T4238] usb 5-1: no configurations [ 532.003843][ T4238] usb 5-1: can't read configurations, error -22 [ 532.295396][T10070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1607'. [ 532.387647][ T4238] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 533.069163][ T4238] usb 5-1: no configurations [ 533.075526][ T4238] usb 5-1: can't read configurations, error -22 [ 533.115023][ T4238] usb usb5-port1: attempt power cycle [ 534.198636][ T4238] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 534.215731][T10115] comedi comedi3: No hardware detected at I/O base 0x3c4 [ 534.298761][ T4238] usb 5-1: device descriptor read/8, error -71 [ 537.002253][T10167] comedi comedi3: No hardware detected at I/O base 0x3c4 [ 537.208545][ T1325] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 538.498905][ T1325] usb 6-1: no configurations [ 538.505383][ T1325] usb 6-1: can't read configurations, error -22 [ 538.635425][T10182] sctp: failed to load transform for md5: -4 [ 538.642126][T10187] sctp: failed to load transform for md5: -4 [ 538.648681][T10192] sctp: failed to load transform for md5: -4 [ 538.678668][ T1325] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 539.688906][ T1325] usb 6-1: no configurations [ 539.723157][ T1325] usb 6-1: can't read configurations, error -22 [ 540.273208][ T1325] usb usb6-port1: attempt power cycle [ 540.311787][T10213] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1648'. [ 541.098421][T10234] comedi comedi3: No hardware detected at I/O base 0x3c4 [ 542.490773][T10251] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1657'. [ 543.339820][T10254] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1660'. [ 543.388934][ T4192] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 543.758648][ T4192] usb 6-1: no configurations [ 543.763362][ T4192] usb 6-1: can't read configurations, error -22 [ 543.918634][ T4192] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 545.009074][ T4192] usb 6-1: no configurations [ 545.013837][ T4192] usb 6-1: can't read configurations, error -22 [ 545.021574][ T4192] usb usb6-port1: attempt power cycle [ 545.049261][T10275] comedi comedi3: No hardware detected at I/O base 0x3c4 [ 545.063099][T10280] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1670'. [ 545.072925][T10280] netlink: 212 bytes leftover after parsing attributes in process `syz.4.1670'. [ 545.082248][T10280] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1670'. [ 545.235919][T10287] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1673'. [ 545.438583][ T4192] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 545.446424][ T1325] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 545.628575][ T13] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 545.708692][ T4192] usb 6-1: device not accepting address 36, error -71 [ 545.738567][ T1325] usb 5-1: Using ep0 maxpacket: 8 [ 545.898755][ T13] usb 4-1: Using ep0 maxpacket: 16 [ 545.939005][ T1325] usb 5-1: unable to get BOS descriptor or descriptor too short [ 546.031779][ T13] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 546.159624][ T1325] usb 5-1: config 11 has an invalid interface number: 244 but max is 0 [ 546.168619][ T4192] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 546.189503][ T1325] usb 5-1: config 11 has an invalid descriptor of length 0, skipping remainder of the config [ 546.200342][ T1325] usb 5-1: config 11 has no interface number 0 [ 546.206825][ T1325] usb 5-1: config 11 interface 244 altsetting 5 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 546.964545][ T1325] usb 5-1: config 11 interface 244 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 547.007470][ T1325] usb 5-1: config 11 interface 244 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 547.122724][ T13] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 547.132375][ T4192] usb 6-1: Using ep0 maxpacket: 16 [ 547.137922][ T1325] usb 5-1: config 11 interface 244 has no altsetting 0 [ 547.145200][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.158672][ T13] usb 4-1: Product: syz [ 547.162982][ T13] usb 4-1: Manufacturer: syz [ 547.168886][ T13] usb 4-1: SerialNumber: syz [ 547.193866][ T13] r8152-cfgselector 4-1: config 0 descriptor?? [ 547.276317][ T4192] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 547.287163][ T4192] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 547.315027][ T4192] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 547.325922][ T1325] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a [ 547.347017][ T1325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.357230][ T4192] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 547.368420][ T1325] usb 5-1: Product: syz [ 547.373035][ T1325] usb 5-1: Manufacturer: syz [ 547.377801][ T4192] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 547.401319][ T1325] usb 5-1: SerialNumber: syz [ 547.489023][ T4192] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 547.508569][ T4192] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 547.554601][ T4192] usb 6-1: Manufacturer: syz [ 547.587567][ T4192] usb 6-1: config 0 descriptor?? [ 548.238799][ T1325] peak_usb 5-1:11.244 can0: unable to request usb[type=0 value=1] err=-71 [ 548.248716][ T1325] peak_usb 5-1:11.244: unable to read PCAN-USB X6 firmware info (err -71) [ 548.308733][ T13] r8152-cfgselector 4-1: Unknown version 0x0000 [ 548.315588][ T13] r8152-cfgselector 4-1: bad CDC descriptors [ 548.322137][ T4192] rc_core: IR keymap rc-hauppauge not found [ 548.329062][ T1325] peak_usb: probe of 5-1:11.244 failed with error -71 [ 548.338376][ T4192] Registered IR keymap rc-empty [ 548.373027][ T1325] usb 5-1: USB disconnect, device number 42 [ 548.379304][ T4192] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 548.387947][T10329] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1687'. [ 548.419388][ T13] r8152-cfgselector 4-1: Unknown version 0x0000 [ 548.439744][ T4192] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 548.451362][ T13] r8152-cfgselector 4-1: USB disconnect, device number 25 [ 548.489338][ T4192] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 548.527090][ T4192] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input18 [ 548.549916][ T4192] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 548.578833][ T4192] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 548.618684][ T4192] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 548.650689][ T4192] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 548.689692][ T4192] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 548.718632][ T4192] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 548.748750][ T4192] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 548.780363][ T4192] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 548.808834][ T4192] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 548.854751][ T4192] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 548.898282][ T4267] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 548.907387][ T4192] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 548.923971][ T4192] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 548.979141][ T4192] usb 6-1: USB disconnect, device number 37 [ 549.128648][ T4267] usb 3-1: device descriptor read/64, error -71 [ 549.777064][ T4267] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 550.028519][ T4267] usb 3-1: device descriptor read/64, error -71 [ 550.610329][ T4267] usb usb3-port1: attempt power cycle [ 551.157577][ T4267] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 551.252478][T10371] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1699'. [ 551.318772][ T4267] usb 3-1: device descriptor read/8, error -71 [ 551.718589][ T4237] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 551.750470][ T4267] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 552.525537][ T4267] usb 3-1: device not accepting address 48, error -71 [ 552.534236][ T4267] usb usb3-port1: unable to enumerate USB device [ 552.618771][ T4237] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 552.635265][ T4237] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 552.839144][ T13] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 553.748749][ T4237] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 553.757854][ T4237] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.796471][ T4237] usb 5-1: Product: syz [ 553.808856][ T4237] usb 5-1: Manufacturer: syz [ 553.815243][ T4237] usb 5-1: SerialNumber: syz [ 553.828560][ T13] usb 6-1: Using ep0 maxpacket: 16 [ 554.389398][ T4237] usb 5-1: config 0 descriptor?? [ 554.428680][ T4237] usb 5-1: can't set config #0, error -71 [ 554.437007][ T4237] usb 5-1: USB disconnect, device number 43 [ 554.468733][ T13] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 554.651350][ T13] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 554.668378][ T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.686087][ T13] usb 6-1: Product: syz [ 554.691083][ T13] usb 6-1: Manufacturer: syz [ 554.695788][ T13] usb 6-1: SerialNumber: syz [ 554.789480][ T13] r8152-cfgselector 6-1: config 0 descriptor?? [ 554.979071][ T1325] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 555.248657][ T1325] usb 3-1: device descriptor read/64, error -71 [ 555.528577][ T1325] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 555.657454][T10423] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1713'. [ 555.728691][ T1325] usb 3-1: device descriptor read/64, error -71 [ 555.818697][ T13] r8152-cfgselector 6-1: Unknown version 0x0000 [ 555.846073][ T13] r8152-cfgselector 6-1: bad CDC descriptors [ 555.853387][ T1325] usb usb3-port1: attempt power cycle [ 555.880599][ T13] r8152-cfgselector 6-1: Unknown version 0x0000 [ 555.964858][T10435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1718'. [ 555.999853][ T13] r8152-cfgselector 6-1: USB disconnect, device number 38 [ 556.328604][ T1325] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 556.489883][ T1325] usb 3-1: device descriptor read/8, error -71 [ 556.828785][ T1325] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 557.041025][ T1325] usb 3-1: device descriptor read/8, error -71 [ 557.213147][ T1325] usb usb3-port1: unable to enumerate USB device [ 561.598644][T10499] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1739'. [ 563.171898][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.178361][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.448537][ T4238] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 566.718531][ T4238] usb 3-1: Using ep0 maxpacket: 32 [ 566.769299][ T4238] usb 3-1: no configurations [ 566.773953][ T4238] usb 3-1: can't read configurations, error -22 [ 566.938538][ T4238] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 567.208539][ T4238] usb 3-1: Using ep0 maxpacket: 32 [ 567.220795][T10553] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1755'. [ 567.349936][ T4238] usb 3-1: no configurations [ 567.358557][ T4238] usb 3-1: can't read configurations, error -22 [ 567.369656][ T4238] usb usb3-port1: attempt power cycle [ 568.323524][T10558] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4190] was attempted by ""[10558] [ 569.588523][ T4238] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 569.738933][ T4238] usb 3-1: Using ep0 maxpacket: 32 [ 570.238913][ T4238] usb 3-1: no configurations [ 570.243959][ T4238] usb 3-1: can't read configurations, error -22 [ 570.418868][T10576] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1763'. [ 570.488618][ T4238] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 570.547641][ T26] audit: type=1326 audit(1779166116.023:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10581 comm="syz.5.1766" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f12edd02e59 code=0x0 [ 570.598632][ T4238] usb 3-1: device descriptor read/8, error -71 [ 570.776297][T10598] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1770'. [ 570.849535][ T4238] usb usb3-port1: unable to enumerate USB device [ 572.616595][T10623] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1780'. [ 572.728680][ T13] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 573.161097][T10634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1773'. [ 573.938682][ T13] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 573.955088][ T13] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 573.968505][ T1325] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 573.988747][ T13] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 573.998034][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.038869][T10615] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 574.208619][ T1325] usb 4-1: Using ep0 maxpacket: 32 [ 574.329249][ T1325] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 574.337921][ T1325] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 574.375094][ T1325] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 574.402548][ T1325] usb 4-1: config 1 has no interface number 0 [ 574.432916][ T1325] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 574.460874][ T1325] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 574.488511][ T1325] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 574.497733][ T1325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.506964][T10615] udc-core: couldn't find an available UDC or it's busy [ 574.518505][T10615] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 574.529419][T10647] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1787'. [ 574.602080][ T1325] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 574.822205][ T1325] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 576.038627][ T1325] snd_usb_pod 4-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 576.076225][T10661] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1792'. [ 576.881167][ T1325] usb 3-1: USB disconnect, device number 57 [ 577.073333][ T23] usb 4-1: USB disconnect, device number 26 [ 577.088875][ T23] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 578.180268][T10693] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1802'. [ 578.423803][T10697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1799'. [ 579.221540][T10710] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1805'. [ 579.898852][T10727] comedi comedi3: No hardware detected at I/O base 0x3c4 [ 580.325499][T10741] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1816'. [ 580.947836][T10746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1814'. [ 581.297901][T10755] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1821'. [ 582.809214][T10788] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1831'. [ 583.308568][ T4238] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 583.478528][ T23] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 583.590809][T10795] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1836'. [ 583.745656][ T4238] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 583.770437][ T4238] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 584.590350][ T4238] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 584.599864][ T4238] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.638988][T10786] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 584.659047][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 584.684133][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 584.700114][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 584.751922][ T23] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 584.770759][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.831947][ T23] usb 3-1: config 0 descriptor?? [ 584.886813][T10786] udc-core: couldn't find an available UDC or it's busy [ 584.902733][T10786] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 585.100178][T10819] overlayfs: failed to clone lowerpath [ 585.735277][T10786] udc-core: couldn't find an available UDC or it's busy [ 585.743602][T10786] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 586.014954][T10827] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1845'. [ 586.239218][ T23] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 586.311377][ T23] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 587.081650][ T4192] usb 5-1: USB disconnect, device number 44 [ 587.255389][T10844] comedi comedi3: No hardware detected at I/O base 0x3c4 [ 587.499792][ C0] plantronics 0003:047F:FFFF.0002: usb_submit_urb(ctrl) failed: -1 [ 588.171783][T10868] ubi16: attaching mtd0 [ 588.305670][T10868] ubi16: scanning is finished [ 588.313434][T10868] ubi16: empty MTD device detected [ 588.377761][ T4192] usb 3-1: USB disconnect, device number 58 [ 588.521463][T10866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1848'. [ 588.644136][T10871] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1858'. [ 588.653816][T10876] ieee802154 phy0 wpan0: encryption failed: -22 [ 588.784153][T10876] ieee802154 phy0 wpan0: encryption failed: -22 [ 588.882082][T10868] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB) [ 588.890369][T10868] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 588.897789][T10868] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 588.914467][T10868] ubi16: VID header offset: 64 (aligned 64), data offset: 128 [ 588.932520][T10868] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 589.062778][T10868] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 589.128529][T10868] ubi16: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 707991301 [ 589.139283][T10868] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 589.151405][T10912] ubi16: background thread "ubi_bgt16d" started, PID 10912 [ 591.317415][T10938] comedi comedi3: No hardware detected at I/O base 0x3c4 [ 591.498808][ T1091] block nbd5: Attempted send on invalid socket [ 591.507203][ T1091] blk_update_request: I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 591.523318][ T150] block nbd5: Attempted send on invalid socket [ 591.530881][ T150] blk_update_request: I/O error, dev nbd5, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 591.555318][T10949] Mount JFS Failure: -5 [ 592.574352][ T4192] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 593.558655][ T4192] usb 4-1: no configurations [ 593.563401][ T4192] usb 4-1: can't read configurations, error -22 [ 593.604839][T10987] comedi comedi3: No hardware detected at I/O base 0x3c4 [ 593.718507][ T1325] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 593.726288][ T4192] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 593.745600][T10989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1880'. [ 594.018870][ T4192] usb 4-1: no configurations [ 594.023618][ T4192] usb 4-1: can't read configurations, error -22 [ 594.030997][ T4192] usb usb4-port1: attempt power cycle [ 594.088808][ T1325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.106786][ T1325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 594.127170][ T1325] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 594.247023][ T1325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.268983][ T1325] usb 5-1: config 0 descriptor?? [ 594.351632][T10993] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 594.649396][ T4192] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 594.849503][ T4192] usb 4-1: no configurations [ 594.858993][ T4192] usb 4-1: can't read configurations, error -22 [ 595.072545][ T4192] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 595.114235][T10997] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1888'. [ 595.147395][T10997] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1888'. [ 595.178742][ T1325] usbhid 5-1:0.0: can't add hid device: -71 [ 595.190697][ T1325] usbhid: probe of 5-1:0.0 failed with error -71 [ 595.198723][ T4192] usb 4-1: device descriptor read/8, error -71 [ 595.248229][ T1325] usb 5-1: USB disconnect, device number 45 [ 595.321754][ T4192] usb usb4-port1: unable to enumerate USB device [ 596.628722][ T1325] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 597.059421][T11037] comedi comedi3: No hardware detected at I/O base 0x3c4 [ 597.167124][T11040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1897'. [ 598.194320][ T4233] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 599.278783][ T4233] usb 3-1: no configurations [ 599.283526][ T4233] usb 3-1: can't read configurations, error -22 [ 599.360381][ T4238] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 599.458654][ T4233] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 599.824848][T11077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1912'. [ 599.876834][ T1325] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 600.265763][ T1325] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 600.488768][ T1325] usb 6-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 600.518886][ T1325] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.528021][ T1325] usb 6-1: Product: syz [ 600.548896][ T1325] usb 6-1: Manufacturer: syz [ 600.567756][ T1325] usb 6-1: SerialNumber: syz [ 600.585274][ T1325] usb 6-1: config 0 descriptor?? [ 600.625159][ T4233] usb 3-1: no configurations [ 600.630093][ T4233] usb 3-1: can't read configurations, error -22 [ 600.665314][ T4233] usb usb3-port1: attempt power cycle [ 600.762241][ T4238] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.783540][ T1325] powermate: probe of 6-1:0.0 failed with error -22 [ 600.822536][ T4238] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.838700][ T4238] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 600.847783][ T4238] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.861342][ T1325] usb 6-1: USB disconnect, device number 39 [ 600.885174][ T4238] usb 5-1: config 0 descriptor?? [ 601.118751][ T4233] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 601.248735][ T4233] usb 3-1: device descriptor read/8, error -71 [ 601.618639][ T4238] usbhid 5-1:0.0: can't add hid device: -71 [ 601.624982][ T4238] usbhid: probe of 5-1:0.0 failed with error -71 [ 601.714755][ T4238] usb 5-1: USB disconnect, device number 47 [ 602.378639][ T4192] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 602.798618][ T4192] usb 4-1: Using ep0 maxpacket: 8 [ 602.866939][T11120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1923'. [ 603.758606][ T23] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 603.758657][ T4233] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 604.107331][ T4192] usb 4-1: unable to get BOS descriptor or descriptor too short [ 605.478939][ T23] usb 5-1: no configurations [ 605.483638][ T23] usb 5-1: can't read configurations, error -22 [ 605.548625][ T4192] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 605.548624][ T4233] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.548659][ T4233] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.556666][ T4192] usb 4-1: can't read configurations, error -71 [ 605.663674][ T4233] usb 6-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 605.725617][ T4233] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.736318][ T4233] usb 6-1: config 0 descriptor?? [ 608.789488][ T4233] usb 6-1: can't set config #0, error -71 [ 608.978712][ T4233] usb 6-1: USB disconnect, device number 40 [ 609.578880][ T23] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 609.939527][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 609.997336][T11174] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1930'. [ 610.138672][ T23] usb 5-1: unable to get BOS descriptor or descriptor too short [ 610.238739][ T23] usb 5-1: config 11 has an invalid interface number: 244 but max is 0 [ 610.255626][ T23] usb 5-1: config 11 has no interface number 0 [ 610.264758][ T23] usb 5-1: config 11 interface 244 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 610.281398][ T23] usb 5-1: config 11 interface 244 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 610.295728][ T23] usb 5-1: config 11 interface 244 has no altsetting 0 [ 610.308650][ T1325] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 610.398561][ T4192] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 610.558629][ T23] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a [ 610.568562][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.576594][ T23] usb 5-1: Product: syz [ 610.580856][ T23] usb 5-1: Manufacturer: syz [ 610.585484][ T23] usb 5-1: SerialNumber: syz [ 610.688743][ T1325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.700830][ T4192] usb 4-1: no configurations [ 610.705739][ T4192] usb 4-1: can't read configurations, error -22 [ 610.723299][ T4192] usb usb4-port1: attempt power cycle [ 610.730056][ T1325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.753842][ T1325] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 610.770009][ T1325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.978926][ T23] peak_usb 5-1:11.244 can0: unable to request usb[type=0 value=1] err=-71 [ 610.995679][ T23] peak_usb 5-1:11.244: unable to read PCAN-USB X6 firmware info (err -71) [ 611.614638][ T1325] usb 3-1: config 0 descriptor?? [ 611.752746][ T23] peak_usb: probe of 5-1:11.244 failed with error -71 [ 611.777938][ T23] usb 5-1: USB disconnect, device number 50 [ 611.868537][ T4192] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 611.968708][ T1325] usbhid 3-1:0.0: can't add hid device: -71 [ 611.976039][ T1325] usbhid: probe of 3-1:0.0 failed with error -71 [ 612.028772][ T4192] usb 4-1: no configurations [ 612.033532][ T4192] usb 4-1: can't read configurations, error -22 [ 612.067901][ T1325] usb 3-1: USB disconnect, device number 63 [ 612.920820][ T4192] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 613.446841][ T1325] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 613.478753][ T4192] usb 4-1: device descriptor read/8, error -71 [ 613.632453][ T4192] usb usb4-port1: unable to enumerate USB device [ 614.848484][T11233] ubi: mtd0 is already attached to ubi16 [ 615.022018][ T13] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 615.055469][ T13] Bluetooth: hci0: Injecting HCI hardware error event [ 615.091806][ T4204] Bluetooth: hci0: hardware error 0x00 [ 616.108691][ T13] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 616.711857][T11260] process 'syz.2.1973' launched './file0' with NULL argv: empty string added [ 617.558475][ T4267] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 617.678770][ T13] usb 5-1: Using ep0 maxpacket: 8 [ 617.838693][ T13] usb 5-1: unable to get BOS descriptor or descriptor too short [ 617.896229][ T4267] usb 4-1: no configurations [ 617.901571][ T4267] usb 4-1: can't read configurations, error -22 [ 617.928671][ T13] usb 5-1: config 11 has an invalid interface number: 244 but max is 0 [ 617.947334][ T13] usb 5-1: config 11 has no interface number 0 [ 617.954328][ T13] usb 5-1: config 11 interface 244 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 617.985186][ T13] usb 5-1: config 11 interface 244 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 618.038521][ T13] usb 5-1: config 11 interface 244 has no altsetting 0 [ 618.108715][ T4267] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 618.338319][T11271] ubi: mtd0 is already attached to ubi16 [ 618.608813][ T13] usb 5-1: string descriptor 0 read error: -71 [ 618.615330][ T13] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a [ 618.636097][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.669455][ T13] usb 5-1: can't set config #11, error -71 [ 618.693963][ T13] usb 5-1: USB disconnect, device number 51 [ 618.807071][T11279] tipc: Started in network mode [ 618.828109][T11279] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 618.852135][T11279] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 618.867398][T11279] tipc: Enabled bearer , priority 10 [ 618.878798][ T4267] usb 4-1: no configurations [ 618.885772][ T4267] usb 4-1: can't read configurations, error -22 [ 618.895599][ T4267] usb usb4-port1: attempt power cycle [ 619.981244][ T13] tipc: Node number set to 1 [ 620.242310][T11310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1984'. [ 621.863643][ T4267] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 622.108529][ T4267] usb 5-1: Using ep0 maxpacket: 8 [ 622.308538][ T4267] usb 5-1: unable to get BOS descriptor or descriptor too short [ 622.408619][ T4267] usb 5-1: config 11 has an invalid interface number: 244 but max is 0 [ 622.430790][ T4267] usb 5-1: config 11 has no interface number 0 [ 622.451474][ T4267] usb 5-1: config 11 interface 244 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 622.478080][ T4267] usb 5-1: config 11 interface 244 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 622.499530][ T4267] usb 5-1: config 11 interface 244 has no altsetting 0 [ 622.669387][ T4267] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a [ 622.688499][ T23] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 622.696262][ T4267] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.713887][ T4267] usb 5-1: Product: syz [ 622.725995][ T4267] usb 5-1: Manufacturer: syz [ 622.743237][ T4267] usb 5-1: SerialNumber: syz [ 623.138670][ T4267] peak_usb 5-1:11.244 can0: unable to request usb[type=0 value=1] err=-71 [ 623.156646][ T4267] peak_usb 5-1:11.244: unable to read PCAN-USB X6 firmware info (err -71) [ 623.188812][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 623.217067][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 623.228771][ T4267] peak_usb: probe of 5-1:11.244 failed with error -71 [ 623.257909][ T23] usb 6-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 623.258141][ T4267] usb 5-1: USB disconnect, device number 52 [ 623.281644][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.914681][ T23] usb 6-1: config 0 descriptor?? [ 624.268760][ T23] usbhid 6-1:0.0: can't add hid device: -71 [ 624.274791][ T23] usbhid: probe of 6-1:0.0 failed with error -71 [ 624.377438][ T23] usb 6-1: USB disconnect, device number 41 [ 624.482174][T11345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1999'. [ 624.828814][ T23] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 625.127518][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.139872][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.235253][T11348] ubi: mtd0 is already attached to ubi16 [ 625.778681][ T23] usb 6-1: device descriptor read/all, error -71 [ 626.379598][T11360] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2006'. [ 626.637599][T11372] comedi comedi3: No hardware detected at I/O base 0x3c4 [ 626.981988][T11385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2012'. [ 627.932091][T11403] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2021'. [ 628.715695][T11423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2028'. [ 629.979313][ T9310] Bluetooth: (null): Invalid header checksum [ 630.074021][ T9310] Bluetooth: (null): Invalid header checksum [ 631.565497][T11455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 631.907280][T11466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2043'. [ 631.927049][T11466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2043'. [ 632.040396][T11468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2042'. [ 632.873651][T11479] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2044'. [ 632.903166][T11481] input: syz0 as /devices/virtual/input/input19 [ 633.635292][ T4238] [ 633.637682][ T4238] ====================================================== [ 633.644715][ T4238] WARNING: possible circular locking dependency detected [ 633.651758][ T4238] syzkaller #0 Not tainted [ 633.656198][ T4238] ------------------------------------------------------ [ 633.663237][ T4238] kworker/1:6/4238 is trying to acquire lock: [ 633.669324][ T4238] ffff88807a758c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 633.680499][ T4238] [ 633.680499][ T4238] but task is already holding lock: [ 633.687982][ T4238] ffffffff8d6c65a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 633.697175][ T4238] [ 633.697175][ T4238] which lock already depends on the new lock. [ 633.697175][ T4238] [ 633.707684][ T4238] [ 633.707684][ T4238] the existing dependency chain (in reverse order) is: [ 633.716806][ T4238] [ 633.716806][ T4238] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 633.724842][ T4238] __mutex_lock_common+0x1e3/0x2400 [ 633.730734][ T4238] mutex_lock_nested+0x17/0x20 [ 633.736056][ T4238] rfkill_register+0x33/0x980 [ 633.741293][ T4238] hci_register_dev+0x452/0x970 [ 633.746696][ T4238] vhci_create_device+0x32c/0x5c0 [ 633.752358][ T4238] vhci_write+0x391/0x450 [ 633.757237][ T4238] vfs_write+0x745/0xd60 [ 633.762031][ T4238] ksys_write+0x152/0x260 [ 633.766910][ T4238] do_syscall_64+0x4c/0xa0 [ 633.771875][ T4238] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 633.778324][ T4238] [ 633.778324][ T4238] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 633.786272][ T4238] __mutex_lock_common+0x1e3/0x2400 [ 633.792030][ T4238] mutex_lock_nested+0x17/0x20 [ 633.797604][ T4238] vhci_send_frame+0x88/0x100 [ 633.802850][ T4238] hci_send_frame+0x1a9/0x2e0 [ 633.808073][ T4238] hci_tx_work+0x9f9/0x1710 [ 633.813124][ T4238] process_one_work+0x85f/0x1010 [ 633.818615][ T4238] worker_thread+0xaa6/0x1290 [ 633.823843][ T4238] kthread+0x436/0x520 [ 633.828627][ T4238] ret_from_fork+0x1f/0x30 [ 633.833590][ T4238] [ 633.833590][ T4238] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 633.842923][ T4238] __flush_work+0x116/0x210 [ 633.848068][ T4238] hci_dev_do_close+0x1e7/0x1030 [ 633.853650][ T4238] hci_error_reset+0x101/0x2c0 [ 633.858971][ T4238] process_one_work+0x85f/0x1010 [ 633.864657][ T4238] worker_thread+0xaa6/0x1290 [ 633.869882][ T4238] kthread+0x436/0x520 [ 633.874489][ T4238] ret_from_fork+0x1f/0x30 [ 633.879460][ T4238] [ 633.879460][ T4238] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 633.887228][ T4238] __mutex_lock_common+0x1e3/0x2400 [ 633.892973][ T4238] mutex_lock_nested+0x17/0x20 [ 633.898293][ T4238] bg_scan_update+0x44/0x3b0 [ 633.903425][ T4238] process_one_work+0x85f/0x1010 [ 633.908905][ T4238] worker_thread+0xaa6/0x1290 [ 633.914133][ T4238] kthread+0x436/0x520 [ 633.918741][ T4238] ret_from_fork+0x1f/0x30 [ 633.923697][ T4238] [ 633.923697][ T4238] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 633.933535][ T4238] __lock_acquire+0x2c42/0x7d10 [ 633.938937][ T4238] lock_acquire+0x19e/0x400 [ 633.943986][ T4238] __flush_work+0x116/0x210 [ 633.949034][ T4238] __cancel_work_timer+0x3f4/0x560 [ 633.954689][ T4238] hci_request_cancel_all+0xcc/0x300 [ 633.960518][ T4238] hci_dev_do_close+0x4e/0x1030 [ 633.965914][ T4238] hci_rfkill_set_block+0x10a/0x190 [ 633.971652][ T4238] rfkill_set_block+0x1c9/0x3d0 [ 633.977132][ T4238] rfkill_epo+0x75/0x170 [ 633.981918][ T4238] rfkill_op_handler+0x76/0x220 [ 633.987305][ T4238] process_one_work+0x85f/0x1010 [ 633.992787][ T4238] worker_thread+0xaa6/0x1290 [ 633.998006][ T4238] kthread+0x436/0x520 [ 634.002627][ T4238] ret_from_fork+0x1f/0x30 [ 634.007584][ T4238] [ 634.007584][ T4238] other info that might help us debug this: [ 634.007584][ T4238] [ 634.017918][ T4238] Chain exists of: [ 634.017918][ T4238] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 634.017918][ T4238] [ 634.033946][ T4238] Possible unsafe locking scenario: [ 634.033946][ T4238] [ 634.041448][ T4238] CPU0 CPU1 [ 634.046831][ T4238] ---- ---- [ 634.052224][ T4238] lock(rfkill_global_mutex); [ 634.057005][ T4238] lock(&data->open_mutex); [ 634.064131][ T4238] lock(rfkill_global_mutex); [ 634.071433][ T4238] lock((work_completion)(&hdev->bg_scan_update)); [ 634.078054][ T4238] [ 634.078054][ T4238] *** DEADLOCK *** [ 634.078054][ T4238] [ 634.086477][ T4238] 3 locks held by kworker/1:6/4238: [ 634.091698][ T4238] #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 634.102095][ T4238] #1: ffffc900031dfd00 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 634.112486][ T4238] #2: ffffffff8d6c65a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 634.122004][ T4238] [ 634.122004][ T4238] stack backtrace: [ 634.127908][ T4238] CPU: 1 PID: 4238 Comm: kworker/1:6 Not tainted syzkaller #0 [ 634.135382][ T4238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 634.145455][ T4238] Workqueue: events rfkill_op_handler [ 634.150855][ T4238] Call Trace: [ 634.154372][ T4238] [ 634.157312][ T4238] dump_stack_lvl+0x188/0x250 [ 634.162019][ T4238] ? load_image+0x400/0x400 [ 634.166645][ T4238] ? show_regs_print_info+0x20/0x20 [ 634.171880][ T4238] ? print_circular_bug+0x12b/0x1a0 [ 634.177101][ T4238] check_noncircular+0x296/0x330 [ 634.182061][ T4238] ? add_chain_block+0x940/0x940 [ 634.187022][ T4238] ? lockdep_lock+0xf1/0x1f0 [ 634.191637][ T4238] ? __lock_acquire+0x12e8/0x7d10 [ 634.196697][ T4238] ? mark_lock+0x94/0x320 [ 634.201048][ T4238] __lock_acquire+0x2c42/0x7d10 [ 634.205933][ T4238] ? verify_lock_unused+0x140/0x140 [ 634.211156][ T4238] ? deref_stack_reg+0xd0/0x120 [ 634.216036][ T4238] lock_acquire+0x19e/0x400 [ 634.220561][ T4238] ? __flush_work+0xfa/0x210 [ 634.225225][ T4238] ? __lock_acquire+0x7d10/0x7d10 [ 634.230281][ T4238] ? read_lock_is_recursive+0x10/0x10 [ 634.235675][ T4238] ? start_flush_work+0x776/0x820 [ 634.240809][ T4238] __flush_work+0x116/0x210 [ 634.245330][ T4238] ? __flush_work+0xfa/0x210 [ 634.249936][ T4238] ? flush_work+0x20/0x20 [ 634.254297][ T4238] ? try_to_grab_pending+0xfa/0x7f0 [ 634.259524][ T4238] ? mark_lock+0x94/0x320 [ 634.263878][ T4238] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 634.269881][ T4238] ? lock_chain_count+0x20/0x20 [ 634.274759][ T4238] ? mark_lock+0x94/0x320 [ 634.279105][ T4238] ? __cancel_work_timer+0x36a/0x560 [ 634.284414][ T4238] __cancel_work_timer+0x3f4/0x560 [ 634.289560][ T4238] ? cancel_work_sync+0x20/0x20 [ 634.294445][ T4238] ? __cancel_work+0x1f9/0x2e0 [ 634.299305][ T4238] ? lockdep_hardirqs_on+0x94/0x140 [ 634.304710][ T4238] ? __cancel_work+0x27b/0x2e0 [ 634.309511][ T4238] ? cancel_work+0x20/0x20 [ 634.313952][ T4238] hci_request_cancel_all+0xcc/0x300 [ 634.319267][ T4238] hci_dev_do_close+0x4e/0x1030 [ 634.324143][ T4238] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 634.330068][ T4238] ? _raw_spin_unlock+0x40/0x40 [ 634.335026][ T4238] hci_rfkill_set_block+0x10a/0x190 [ 634.340249][ T4238] ? rcu_lock_release+0x20/0x20 [ 634.345116][ T4238] rfkill_set_block+0x1c9/0x3d0 [ 634.349964][ T4238] rfkill_epo+0x75/0x170 [ 634.354200][ T4238] rfkill_op_handler+0x76/0x220 [ 634.359044][ T4238] process_one_work+0x85f/0x1010 [ 634.363980][ T4238] ? worker_detach_from_pool+0x240/0x240 [ 634.369834][ T4238] ? lockdep_hardirqs_off+0x70/0x100 [ 634.375114][ T4238] ? _raw_spin_lock_irq+0xb7/0xf0 [ 634.380149][ T4238] ? _raw_spin_lock_irqsave+0x100/0x100 [ 634.385688][ T4238] ? wq_worker_running+0x97/0x170 [ 634.390707][ T4238] worker_thread+0xaa6/0x1290 [ 634.395391][ T4238] ? lockdep_hardirqs_on+0x94/0x140 [ 634.400587][ T4238] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 634.406501][ T4238] kthread+0x436/0x520 [ 634.410562][ T4238] ? rcu_lock_release+0x20/0x20 [ 634.415433][ T4238] ? kthread_blkcg+0xd0/0xd0 [ 634.420014][ T4238] ret_from_fork+0x1f/0x30 [ 634.424423][ T4238]