last executing test programs: 19.4402301s ago: executing program 3 (id=1911): syz_open_dev$vbi(0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001a00011027bd7000fedbdf250a803302fe01fd0000020000220004008fb2361e0a9c70c266633f0f70df2147564c3ada7bd81f796a9b1e3fd161e95959ea62e9e18b53bcf80b1ef1", @ANYRES32=0x0, @ANYBLOB="08001000"], 0x2c}, 0x1, 0x0, 0x0, 0x20044844}, 0x8c4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x100010, r1, 0xa94000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000100)=0x2c0000) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240)="948d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) close(r2) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, &(0x7f0000000400)) getpid() r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000100), 0x0) r6 = accept$alg(r5, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$XFS_IOC_FSINUMBERS(0xffffffffffffffff, 0xc0205867, &(0x7f0000000840)={&(0x7f0000000240)=0xdad3, 0xfffffff7, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}], 0x0}) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$tipc(r7, &(0x7f0000000640)={&(0x7f00000002c0)=@id={0x1e, 0x3, 0x1, {0x4e21, 0x2}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000380)="69efc79144346f136ab074b9002879e7026228415b0c199cc8cc5ac9c7ab21725179356fd942bba64de7433696c64d1a78b4891bec1ccf1b977d9461b33487ace8a49e18236eb842dd0c5880b5bb970140177ccbcab3a876efc31ee75b", 0x5d}, {&(0x7f0000000440)="75c2", 0x2}], 0x2, &(0x7f0000000500), 0x0, 0x40}, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x1000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000040)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r7, 0xc02064a4, &(0x7f0000000500)={r8, 0x8, &(0x7f00000001c0)=[0x6, 0x401, 0x4, 0x6, 0x7fff, 0x1, 0x3, 0x821], &(0x7f0000000200)=[0x2, 0x5, 0xd7e, 0x5, 0x8], &(0x7f0000000300)=[0x9, 0x3, 0xa, 0x8, 0x9]}) sendmmsg$alg(r6, &(0x7f00000008c0)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000003c0)="be1c40114d26f4f247484a4893025f47b6b86c2dcc558d647f0c", 0x1a}], 0x1, &(0x7f00000002c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2000c890}], 0x1, 0xc0041) recvmsg(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001b80)=""/25, 0x19}, {&(0x7f0000000b00)=""/111, 0x6f}], 0x2}, 0x8dff) 16.664223787s ago: executing program 0 (id=1922): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x8, 0xb2, 0xa8}, 0x39}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x2) close(r0) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r2, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e00000000acc10200000006125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) 15.569401522s ago: executing program 3 (id=1923): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xfff2, 0xb}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0xfbee}, 0x1, 0x1, 0x3, 0x3, 0xe, 0x1, 0xd, 0x5, 0x8, 0x6, {0xfffff800, 0x8, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x400c8a4}, 0x4890) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {}, {0xe}}}, 0x24}}, 0x40004) 14.658877861s ago: executing program 2 (id=1925): kexec_load(0x3, 0x7, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc56a4a866c499b04ef61edca4fc06d78b964868e16d82c97be81055b072720c06a8b8b3daad5131e84447a4809d131ce0927ee8ec587e37e0f2df3499327f170b861", 0xdf, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d7cf9989fa7b13df2f67b414330e5cff90a", 0xee, 0x5, 0xffffffff}, {&(0x7f0000000200), 0x0, 0x5, 0x4}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7d4e4921490b3aacd4082ccf6531bb82dbd4d13dbfbeb16dd11b3c041c7", 0x2f, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}, {&(0x7f00000004c0)="fd7cd1d51fb9987e67d12dded82fd30b5e7675f10da30291367bede16a4fe296961baf3caee5bd5c0d76b25c3de77c56ddefc936fa712ec3d7e51f4b16e682d3ee59b2abf6c05927c1edb91d54f66cf99928f710cf98acec87a3d75a6388bab3c5a1474d29cae1f0fd92cde6f444bf490f27f37e198aa55b403df846ce1732f7cf4c12d92aece1289b4b10b7d84532a07762548e3f3915b6575e8ef8130395476b9a721a7668c608c4d2f70aee2be4ae96ff0e5925b138fec99f91f19d8618037fe2842d248c8d44f425e54da4a668059f5124222cb4955f073d318b2f0dcecec611448d4ec0fd6b9bd0eac6bea1", 0xee, 0x5, 0x6}], 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb099330a50fb6", 0x45}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d622301673217c8ca26b5a362745ea01486a2ba576eb6601dfa400b", 0xb5}], 0x4}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13.951842843s ago: executing program 2 (id=1926): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_setup(0x2a72, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') read$FUSE(r1, &(0x7f0000000680)={0x2020}, 0x2020) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) io_uring_setup(0x5d59, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) ptrace$getregs(0xe, r3, 0x59, &(0x7f0000000180)=""/13) 11.523627579s ago: executing program 0 (id=1927): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000012c0)="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", 0x44a}], 0x1}], 0x1, 0x40800) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2275, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r1, 0x0, 0x0}, 0x10) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x3, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x2, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x800c, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0xe, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x9, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x2fcd0, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0xffff, 0x6, 0x96, 0xfbfffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x6, 0xe, 0x5, 0x7, 0x6, 0x2, 0x2, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8005, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x823, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x101, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c) socket(0x400000000010, 0x3, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x12}, @loopback, {[@routing={0x32, 0x0, 0x1, 0x4}]}}}}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x420d40, 0x0) 11.383838403s ago: executing program 3 (id=1929): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r1 = socket$kcm(0xa, 0x2, 0x0) close(r1) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x1a, 0x3}, 0x80, 0x0}, 0x26004055) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000800000000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r3, 0xfff) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r5, 0x80811501, &(0x7f0000000400)={0x80}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @loopback}}, [0x7, 0x2, 0x925, 0xffffffff00000001, 0xc42, 0x200, 0x6e1, 0x2090c5d2, 0xffffffffffff77ae, 0x2, 0x4, 0x7, 0x100000001, 0x2, 0x9]}, &(0x7f00000000c0)=0x100) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@map=r0, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 10.694351625s ago: executing program 4 (id=1931): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) fcntl$getownex(r0, 0x10, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x8800) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r3 = socket$packet(0x11, 0x3, 0x300) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2f2600, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={r3, 0xffffffffffffffff, 0x9, 0x0, @val=@kprobe_multi=@syms={0x0, 0x6, &(0x7f00000005c0)=[&(0x7f0000000380)='\x00', &(0x7f0000000400)='{,\x1a+#\x00', &(0x7f0000000240)=').^\xf6-:\x87r\xb4Nz\x83R\xca\xa0\xd6h\x93\xaal\xab\xf6\'a\\@\x00', &(0x7f00000004c0)='^,$+\x00', &(0x7f0000000500)='\a', &(0x7f0000000580)='/dev/zero\x00'], 0x0, 0x5}}, 0x30) setsockopt$packet_int(r3, 0x107, 0x3, 0x0, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) getpid() syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x0, 0x805, 0x32c}, 0x0, &(0x7f00000000c0), &(0x7f0000000540)) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r5, &(0x7f0000000080), 0x0}, 0x20) keyctl$dh_compute(0x17, &(0x7f0000000800)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 10.229876189s ago: executing program 3 (id=1932): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x100010, r1, 0xa94000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000100)=0x2c0000) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240)="948d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) close(r2) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, &(0x7f0000000400)) getpid() r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000100), 0x0) r6 = accept$alg(r5, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$XFS_IOC_FSINUMBERS(0xffffffffffffffff, 0xc0205867, &(0x7f0000000840)={&(0x7f0000000240)=0xdad3, 0xfffffff7, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}], 0x0}) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$tipc(r7, &(0x7f0000000640)={&(0x7f00000002c0)=@id={0x1e, 0x3, 0x1, {0x4e21, 0x2}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000380)="69efc79144346f136ab074b9002879e7026228415b0c199cc8cc5ac9c7ab21725179356fd942bba64de7433696c64d1a78b4891bec1ccf1b977d9461b33487ace8a49e18236eb842dd0c5880b5bb970140177ccbcab3a876efc31ee75b", 0x5d}, {&(0x7f0000000440)="75c2", 0x2}], 0x2, &(0x7f0000000500), 0x0, 0x40}, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x1000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000040)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r7, 0xc02064a4, &(0x7f0000000500)={r8, 0x8, &(0x7f00000001c0)=[0x6, 0x401, 0x4, 0x6, 0x7fff, 0x1, 0x3, 0x821], &(0x7f0000000200)=[0x2, 0x5, 0xd7e, 0x5, 0x8], &(0x7f0000000300)=[0x9, 0x3, 0xa, 0x8, 0x9]}) sendmmsg$alg(r6, &(0x7f00000008c0)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000003c0)="be1c40114d26f4f247484a4893025f47b6b86c2dcc558d647f0c", 0x1a}], 0x1, &(0x7f00000002c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2000c890}], 0x1, 0xc0041) recvmsg(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001b80)=""/25, 0x19}, {&(0x7f0000000b00)=""/111, 0x6f}], 0x2}, 0x8dff) 10.132561522s ago: executing program 2 (id=1933): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000001d00)={0x2020}, 0x2020) 7.550325873s ago: executing program 2 (id=1934): pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8080c61) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = socket$inet_smc(0x2b, 0x1, 0x0) read(r0, &(0x7f0000000480)=""/184, 0xb8) rseq(&(0x7f0000000180), 0x20, 0x2000000000000000, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x2049c0, 0x0) pipe2$watch_queue(&(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r2, 0x400000000000007c) r6 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000f80)='G', 0x1, 0xfffffffffffffffb) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r7, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x13}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000002900000037000000d4c6"], 0x18}, 0x40c0) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r3, 0x47) r8 = add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000340)={0x0, 0x0, @d}, 0x18, r6) keyctl$revoke(0x3, r8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b1600000000000000000200000844000480100001800b000100736f636b6574000030000180"], 0x98}, 0x1, 0x0, 0x0, 0x44840}, 0x40400c4) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0xe1) close_range(r1, 0xffffffffffffffff, 0x0) r10 = timerfd_create(0x7, 0x80000) timerfd_settime(r10, 0x3, &(0x7f0000000280)={{}, {0x77359400}}, 0x0) 7.463977656s ago: executing program 4 (id=1935): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040f204211400000040000109022400010000b000090401000903000000092100000001222900090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000600)={0x2c, &(0x7f0000000540)={0x40, 0x24, 0x30, {0x30, 0xb, "98c1b95e87ee9fa47fad7cc0fa5bba479c82dc874c88a7211f46d75fe34c250c0c1cb45655f4f5a487741efe7c78"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 7.272190192s ago: executing program 0 (id=1936): kexec_load(0x3, 0x7, &(0x7f00000005c0)=[{&(0x7f0000000000), 0x0, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d", 0xb3, 0x5, 0xffffffff}, {&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f695131fe4fc01630cb7751927628d8d7ec59d998200794f89eea832f53f0f9aa4c91322544bc7f07e8cdf4598c9879e4af2de4daca6cf629d11f9c6ebdccfeca156899a89ed0e619add", 0x7e, 0x5, 0x4}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7d4e4921490b3aacd4082ccf6531bb82dbd4d13dbfbeb16dd11b3c041c780b7", 0x31, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}, {&(0x7f00000004c0), 0x0, 0x5, 0x6}], 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb099330a50fb6", 0x45}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d62", 0x9b}], 0x4}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.754282609s ago: executing program 0 (id=1938): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x128400, 0x0) close(r3) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000009640)=@newtfilter={0x30, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xc, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030028590214600600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 5.353858702s ago: executing program 3 (id=1939): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xfff2, 0xb}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0xfbee}, 0x1, 0x1, 0x3, 0x3, 0xe, 0x1, 0xd, 0x5, 0x8, 0x6, {0xfffff800, 0x8, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x400c8a4}, 0x4890) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {}, {0xe}}}, 0x24}}, 0x40004) 4.568224827s ago: executing program 2 (id=1940): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000002c0)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 4.203105868s ago: executing program 4 (id=1941): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000f80)={0x14, 0x6, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x8000) 4.015868894s ago: executing program 1 (id=1942): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r1 = socket$kcm(0xa, 0x2, 0x0) close(r1) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x1a, 0x3}, 0x80, 0x0}, 0x26004055) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000800000000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r3, 0xfff) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r5, 0x80811501, &(0x7f0000000400)={0x80}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @loopback}}, [0x7, 0x2, 0x925, 0xffffffff00000001, 0xc42, 0x200, 0x6e1, 0x2090c5d2, 0xffffffffffff77ae, 0x2, 0x4, 0x7, 0x100000001, 0x2, 0x9]}, &(0x7f00000000c0)=0x100) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@map=r0, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 3.955086966s ago: executing program 4 (id=1943): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x80000, 0xfff) r1 = getpid() syz_pidfd_open(r1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@file={0x1, './file1\x00'}, 0x6e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) io_uring_setup(0x1b7e, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x30, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x1}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x11}, 0x4840) syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x2c}, 0x4000845) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000001640)=0x5, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4001000010000100fefffffffddbdf25fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0200000000000000ffffffffffffffff2a000000000000001f00000000000000b80700000000000002000000fcffffffbcffffff2abd700000"], 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x4000000, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 2.940707788s ago: executing program 1 (id=1944): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.329651377s ago: executing program 4 (id=1945): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) fcntl$getownex(r0, 0x10, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x8800) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r3 = socket$packet(0x11, 0x3, 0x300) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2f2600, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={r3, 0xffffffffffffffff, 0x9, 0x0, @val=@kprobe_multi=@syms={0x0, 0x6, &(0x7f00000005c0)=[&(0x7f0000000380)='\x00', &(0x7f0000000400)='{,\x1a+#\x00', &(0x7f0000000240)=').^\xf6-:\x87r\xb4Nz\x83R\xca\xa0\xd6h\x93\xaal\xab\xf6\'a\\@\x00', &(0x7f00000004c0)='^,$+\x00', &(0x7f0000000500)='\a', &(0x7f0000000580)='/dev/zero\x00'], 0x0, 0x5}}, 0x30) setsockopt$packet_int(r3, 0x107, 0x3, 0x0, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) getpid() syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x0, 0x805, 0x32c}, 0x0, &(0x7f00000000c0), &(0x7f0000000540)) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r5, &(0x7f0000000080), 0x0}, 0x20) keyctl$dh_compute(0x17, &(0x7f0000000800)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 1.723810996s ago: executing program 1 (id=1946): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto(r0, &(0x7f0000000000)="7cd1e8", 0x3, 0x4000080, 0x0, 0x0) 1.535524752s ago: executing program 1 (id=1947): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, "b1eddb851ba62b00d8730000000000000000000800"}}) 1.368175597s ago: executing program 1 (id=1948): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x13}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xb, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1, 0x1, 0x9, 0x1, 0x8}, 0xe, 0x0, 0x32, 0x5, 0x9, 0x7, 0x9, 0x1d, 0xff, 0xffffff5c, {0xa632, 0x23, 0x3, 0x40, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x440c9}, 0x400c000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.214241382s ago: executing program 4 (id=1949): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x100010, r1, 0xa94000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000100)=0x2c0000) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240)="948d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) close(r2) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, &(0x7f0000000400)) getpid() r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000100), 0x0) r6 = accept$alg(r5, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$XFS_IOC_FSINUMBERS(0xffffffffffffffff, 0xc0205867, &(0x7f0000000840)={&(0x7f0000000240)=0xdad3, 0xfffffff7, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}], 0x0}) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$tipc(r7, &(0x7f0000000640)={&(0x7f00000002c0)=@id={0x1e, 0x3, 0x1, {0x4e21, 0x2}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000380)="69efc79144346f136ab074b9002879e7026228415b0c199cc8cc5ac9c7ab21725179356fd942bba64de7433696c64d1a78b4891bec1ccf1b977d9461b33487ace8a49e18236eb842dd0c5880b5bb970140177ccbcab3a876efc31ee75b", 0x5d}, {&(0x7f0000000440)="75c2", 0x2}], 0x2, &(0x7f0000000500), 0x0, 0x40}, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x1000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000040)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r7, 0xc02064a4, &(0x7f0000000500)={r8, 0x8, &(0x7f00000001c0)=[0x6, 0x401, 0x4, 0x6, 0x7fff, 0x1, 0x3, 0x821], &(0x7f0000000200)=[0x2, 0x5, 0xd7e, 0x5, 0x8], &(0x7f0000000300)=[0x9, 0x3, 0xa, 0x8, 0x9]}) sendmmsg$alg(r6, &(0x7f00000008c0)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000003c0)="be1c40114d26f4f247484a4893025f47b6b86c2dcc558d647f0c", 0x1a}], 0x1, &(0x7f00000002c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2000c890}], 0x1, 0xc0041) recvmsg(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001b80)=""/25, 0x19}, {&(0x7f0000000b00)=""/111, 0x6f}], 0x2}, 0x8dff) 98.274517ms ago: executing program 2 (id=1950): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 97.719277ms ago: executing program 3 (id=1951): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040f204211400000040000109022400010000b000090401000903000000092100000001222900090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000600)={0x2c, &(0x7f0000000540)={0x40, 0x24, 0x30, {0x30, 0xb, "98c1b95e87ee9fa47fad7cc0fa5bba479c82dc874c88a7211f46d75fe34c250c0c1cb45655f4f5a487741efe7c78"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 72.064227ms ago: executing program 0 (id=1952): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008aec1, &(0x7f0000000000)) r1 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x458, 0x5012, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x1, 0x10, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x7, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x3, 0xfe, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x2, 0x51}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x3, 0x1, 0x9}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xc, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CAP_STEAL_TIME(r3, 0x4068aea3, &(0x7f0000000100)) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000000)={[{0x81fffffe, 0x4, 0xc1, 0x4f, 0x3, 0xbd, 0x80, 0x6, 0x1, 0x44, 0x8, 0x3, 0x100}, {0xb, 0xa6f2, 0x6, 0x8, 0x9, 0xfb, 0x44, 0x87, 0xa, 0x6, 0x7, 0x6}, {0x1fd, 0x8, 0xd, 0x21, 0x25, 0x9, 0x1, 0x16, 0x3, 0x15, 0x0, 0x7, 0x4}], 0x20000002}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x8000000000000000, 0x3fe, 0x0, 0x1000, 0x2, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x3, 0x2, 0x4, 0x63, 0x1aa], 0xeeee0000, 0x400}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_control_io(r1, &(0x7f00000004c0)={0x83, &(0x7f0000000340)=ANY=[@ANYRESOCT=r1, @ANYRES64, @ANYBLOB="86330b2eafdb0e3c0fe2d406c1f532f12d8ffe0dd9ba05a0fa0f1adff0f129ff4a37056a1713897a95abb402b212d2b67cdaaf7299ac83c75437c71a647a786a4e015f4f2389f946a1d16e5cf307f738b1a1afc3fd5d8c3e4f1d91ffa39a94f5774ea6b6dc84610de7870693acccad637dc251f4a7a897899245bd8ea955c611598d1457a11a0e37f7b18ed01d545dd9a1b100a0951ea48e99c1be7c6cbfe8a01097a23a3c97cdcfbebbad60f4b929479201f33f"], 0x0, 0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 1 (id=1953): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000f80)={0x14, 0x6, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x8000) kernel console output (not intermixed with test programs): T126] usbhid: probe of 4-1:0.0 failed with error -71 [ 372.126242][ T126] usb 4-1: USB disconnect, device number 79 [ 373.178147][ T8475] input: syz0 as /devices/virtual/input/input100 [ 373.898321][ T126] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 373.980228][ T8487] device syzkaller0 entered promiscuous mode [ 374.118081][ T126] usb 2-1: Using ep0 maxpacket: 32 [ 374.123774][ T8487] tipc: Enabled bearer , priority 0 [ 374.141982][ T8486] tipc: Resetting bearer [ 374.161578][ T126] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.193344][ T126] usb 2-1: config 0 has no interfaces? [ 374.221222][ T126] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 374.270808][ T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.314099][ T126] usb 2-1: Product: syz [ 374.329226][ T126] usb 2-1: Manufacturer: syz [ 374.360257][ T126] usb 2-1: SerialNumber: syz [ 374.429703][ T126] usb 2-1: config 0 descriptor?? [ 374.455361][ T8486] tipc: Disabling bearer [ 374.888736][ T8499] netlink: 'syz.3.1295': attribute type 1 has an invalid length. [ 374.907867][ T8499] netlink: 'syz.3.1295': attribute type 2 has an invalid length. [ 376.138143][ T3737] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 376.339934][ T3737] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 376.360603][ T3737] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 376.413183][ T3737] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 376.442779][ T3737] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.473699][ T3737] usb 5-1: Product: syz [ 376.484849][ T3737] usb 5-1: Manufacturer: syz [ 376.502638][ T3737] usb 5-1: SerialNumber: syz [ 376.542488][ T3737] usb 5-1: config 0 descriptor?? [ 377.247432][ T8527] input: syz0 as /devices/virtual/input/input101 [ 377.488413][ T3737] usb 2-1: USB disconnect, device number 81 [ 378.693175][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.700935][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.027260][ T126] usb 5-1: USB disconnect, device number 54 [ 379.258069][ T3737] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 379.306556][ T8549] netlink: 'syz.1.1308': attribute type 1 has an invalid length. [ 379.314806][ T8549] netlink: 'syz.1.1308': attribute type 2 has an invalid length. [ 379.458087][ T3737] usb 4-1: Using ep0 maxpacket: 32 [ 379.469630][ T3737] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.544876][ T3737] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.605396][ T3737] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 379.641579][ T3737] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 379.671214][ T3737] usb 4-1: Product: syz [ 379.685773][ T3737] usb 4-1: Manufacturer: syz [ 379.748389][ T3737] hub 4-1:4.0: USB hub found [ 379.914927][ T3737] hub 4-1:4.0: 2 ports detected [ 380.334731][ T3737] hub 4-1:4.0: set hub depth failed [ 380.386238][ T3737] usb 4-1: USB disconnect, device number 80 [ 381.328365][ T126] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 381.446420][ T8574] netlink: 'syz.0.1316': attribute type 1 has an invalid length. [ 381.464733][ T8574] netlink: 'syz.0.1316': attribute type 2 has an invalid length. [ 381.564726][ T22] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 381.573927][ T126] usb 3-1: Using ep0 maxpacket: 32 [ 381.592612][ T126] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.624566][ T126] usb 3-1: config 0 has no interfaces? [ 381.663188][ T126] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 381.678959][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.705862][ T126] usb 3-1: Product: syz [ 381.746529][ T126] usb 3-1: Manufacturer: syz [ 381.788178][ T126] usb 3-1: SerialNumber: syz [ 381.812140][ T22] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 381.831299][ T22] usb 5-1: config 0 has no interface number 0 [ 381.843918][ T126] usb 3-1: config 0 descriptor?? [ 381.888284][ T22] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.964177][ T22] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.980594][ T22] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 382.010573][ T22] usb 5-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 382.022825][ T22] usb 5-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 382.032498][ T22] usb 5-1: Product: syz [ 382.055146][ T22] usb 5-1: config 0 descriptor?? [ 382.507350][ T22] chicony 0003:04F2:1421.001C: unknown main item tag 0x3 [ 382.538194][ T22] chicony 0003:04F2:1421.001C: report_id 2141495278 is invalid [ 382.553599][ T22] chicony 0003:04F2:1421.001C: item 0 4 1 8 parsing failed [ 382.579642][ T22] chicony 0003:04F2:1421.001C: Chicony hid parse failed: -22 [ 382.599147][ T22] chicony: probe of 0003:04F2:1421.001C failed with error -22 [ 382.715064][ T3737] usb 5-1: USB disconnect, device number 55 [ 383.198041][ T4318] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 383.399908][ T4318] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 383.415065][ T4318] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 383.435292][ T4318] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 383.451600][ T4318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.498179][ T4318] usb 4-1: Product: syz [ 383.512692][ T4318] usb 4-1: Manufacturer: syz [ 383.526049][ T4318] usb 4-1: SerialNumber: syz [ 383.590725][ T4318] usb 4-1: config 0 descriptor?? [ 384.098137][ T22] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 384.318135][ T22] usb 5-1: Using ep0 maxpacket: 8 [ 384.325867][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.343533][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.382991][ T22] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 384.410605][ T22] usb 5-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 384.421780][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.456198][ T22] usb 5-1: config 0 descriptor?? [ 384.828081][ T4318] usb 3-1: USB disconnect, device number 64 [ 385.078213][ T22] usbhid 5-1:0.0: can't add hid device: -71 [ 385.107205][ T22] usbhid: probe of 5-1:0.0 failed with error -71 [ 385.182999][ T22] usb 5-1: USB disconnect, device number 56 [ 386.035990][ T22] usb 4-1: USB disconnect, device number 81 [ 386.499764][ T8626] netlink: 'syz.1.1330': attribute type 1 has an invalid length. [ 386.507796][ T8626] netlink: 'syz.1.1330': attribute type 2 has an invalid length. [ 386.615331][ T8628] input: syz0 as /devices/virtual/input/input102 [ 387.758231][ T8636] netlink: 'syz.3.1333': attribute type 1 has an invalid length. [ 387.794176][ T8636] netlink: 'syz.3.1333': attribute type 2 has an invalid length. [ 388.007999][ T4318] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 388.197995][ T4318] usb 3-1: Using ep0 maxpacket: 32 [ 388.205102][ T4318] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.276347][ T4318] usb 3-1: config 0 has no interfaces? [ 388.309646][ T4318] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 388.357741][ T4318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.408913][ T4318] usb 3-1: Product: syz [ 388.434015][ T4318] usb 3-1: Manufacturer: syz [ 388.454955][ T4318] usb 3-1: SerialNumber: syz [ 388.503388][ T4318] usb 3-1: config 0 descriptor?? [ 390.308076][ T4318] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 390.500334][ T4318] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.525243][ T4318] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 390.565513][ T4318] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 390.595895][ T4318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.653308][ T4318] usb 2-1: Product: syz [ 390.674616][ T4318] usb 2-1: Manufacturer: syz [ 390.704130][ T4318] usb 2-1: SerialNumber: syz [ 390.742010][ T4318] usb 2-1: config 0 descriptor?? [ 391.347289][ T4318] usb 3-1: USB disconnect, device number 65 [ 391.648265][ T22] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 391.840448][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 391.871391][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 391.936131][ T22] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 391.955972][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.972712][ T22] usb 5-1: Product: syz [ 391.980192][ T22] usb 5-1: Manufacturer: syz [ 391.987095][ T22] usb 5-1: SerialNumber: syz [ 392.019632][ T22] usb 5-1: config 0 descriptor?? [ 392.046578][ T22] hub 5-1:0.0: bad descriptor, ignoring hub [ 392.057811][ T22] hub: probe of 5-1:0.0 failed with error -5 [ 392.104113][ T22] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input103 [ 392.288243][ T126] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 392.492725][ T126] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 392.549319][ T126] usb 4-1: config 0 has no interface number 0 [ 392.557046][ T126] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.608268][ T126] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.647791][ T126] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 392.704762][ T126] usb 4-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 392.715331][ T3737] usb 5-1: USB disconnect, device number 57 [ 392.716802][ T126] usb 4-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 392.731638][ T126] usb 4-1: Product: syz [ 392.744713][ T126] usb 4-1: config 0 descriptor?? [ 393.067117][ T4318] usb 2-1: USB disconnect, device number 82 [ 393.171004][ T126] chicony 0003:04F2:1421.001D: unknown main item tag 0x3 [ 393.179300][ T126] chicony 0003:04F2:1421.001D: report_id 2141495278 is invalid [ 393.229248][ T126] chicony 0003:04F2:1421.001D: item 0 4 1 8 parsing failed [ 393.273115][ T126] chicony 0003:04F2:1421.001D: Chicony hid parse failed: -22 [ 393.317508][ T126] chicony: probe of 0003:04F2:1421.001D failed with error -22 [ 393.435018][ T4322] usb 4-1: USB disconnect, device number 82 [ 393.836652][ T8706] netlink: 'syz.1.1354': attribute type 1 has an invalid length. [ 393.863197][ T8706] netlink: 'syz.1.1354': attribute type 2 has an invalid length. [ 393.968288][ T4318] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 394.158270][ T4318] usb 1-1: Using ep0 maxpacket: 32 [ 394.185006][ T4318] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 394.278703][ T4318] usb 1-1: config 0 has no interfaces? [ 394.371327][ T4318] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 394.427326][ T4318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.463361][ T4318] usb 1-1: Product: syz [ 394.493979][ T4318] usb 1-1: Manufacturer: syz [ 394.511033][ T4318] usb 1-1: SerialNumber: syz [ 394.598207][ T4318] usb 1-1: config 0 descriptor?? [ 396.047048][ T8726] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1359'. [ 396.373326][ T8731] device syzkaller0 entered promiscuous mode [ 397.168150][ T4318] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 397.359731][ T4318] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.383962][ T4318] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 397.398565][ T126] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 397.417119][ T4318] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 397.486084][ T4318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.526661][ T4318] usb 4-1: Product: syz [ 397.557114][ T4318] usb 4-1: Manufacturer: syz [ 397.577408][ T4318] usb 4-1: SerialNumber: syz [ 397.634378][ T3737] usb 1-1: USB disconnect, device number 69 [ 397.649148][ T4318] usb 4-1: config 0 descriptor?? [ 397.692572][ T126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 397.747196][ T126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 397.798911][ T126] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 397.820274][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.838098][ T4323] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 397.860088][ T126] usb 3-1: Product: syz [ 397.865263][ T126] usb 3-1: Manufacturer: syz [ 397.873065][ T126] usb 3-1: SerialNumber: syz [ 397.900921][ T126] usb 3-1: config 0 descriptor?? [ 397.913925][ T126] hub 3-1:0.0: bad descriptor, ignoring hub [ 397.921485][ T126] hub: probe of 3-1:0.0 failed with error -5 [ 397.959443][ T126] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input104 [ 398.040400][ T4318] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 398.058135][ T4323] usb 5-1: Using ep0 maxpacket: 32 [ 398.072894][ T4323] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.103364][ T4323] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.132497][ T4323] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 398.143659][ T4323] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 398.153455][ T4323] usb 5-1: Product: syz [ 398.160678][ T4323] usb 5-1: Manufacturer: syz [ 398.186465][ T4323] hub 5-1:4.0: USB hub found [ 398.238089][ T4318] usb 2-1: Using ep0 maxpacket: 32 [ 398.249238][ T4318] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.278059][ T4318] usb 2-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 398.287396][ T4318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.305065][ T4318] usb 2-1: config 0 descriptor?? [ 398.377048][ T4323] hub 5-1:4.0: 2 ports detected [ 398.499085][ T4322] usb 3-1: USB disconnect, device number 66 [ 398.730361][ T4318] input: HID 5543:0042 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:5543:0042.001E/input/input105 [ 398.746867][ T4318] input: HID 5543:0042 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:5543:0042.001E/input/input106 [ 398.767006][ T4318] uclogic 0003:5543:0042.001E: input,hiddev0,hidraw0: USB HID v7f.fd Mouse [HID 5543:0042] on usb-dummy_hcd.1-1/input0 [ 398.788885][ T4323] hub 5-1:4.0: set hub depth failed [ 398.809478][ T4323] usb 5-1: USB disconnect, device number 58 [ 398.937038][ T4318] usb 2-1: USB disconnect, device number 83 [ 399.144888][ T8756] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1369'. [ 399.198225][ T8756] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1369'. [ 399.214029][ T8756] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1369'. [ 399.223658][ T8756] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1369'. [ 399.251887][ T8754] fido_id[8754]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 399.510050][ T8762] fuse: Unknown parameter 'grou00000000000000000000' [ 399.923032][ T4318] usb 4-1: USB disconnect, device number 83 [ 400.318062][ T4322] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 400.440056][ T8776] netlink: 'syz.3.1375': attribute type 1 has an invalid length. [ 400.449699][ T8776] netlink: 'syz.3.1375': attribute type 2 has an invalid length. [ 400.508102][ T4322] usb 3-1: Using ep0 maxpacket: 32 [ 400.520512][ T4322] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.573888][ T4322] usb 3-1: config 0 has no interfaces? [ 400.641386][ T4322] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 400.693604][ T4322] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.731400][ T4322] usb 3-1: Product: syz [ 400.746015][ T4322] usb 3-1: Manufacturer: syz [ 400.773065][ T4322] usb 3-1: SerialNumber: syz [ 400.819538][ T4322] usb 3-1: config 0 descriptor?? [ 401.042899][ T4322] usb 3-1: USB disconnect, device number 67 [ 401.238221][ T4322] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 401.738059][ T4318] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 401.939811][ T4318] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 401.973481][ T4318] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 402.055363][ T4318] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 402.118038][ T4318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.153384][ T4318] usb 5-1: Product: syz [ 402.178005][ T4318] usb 5-1: Manufacturer: syz [ 402.188463][ T4318] usb 5-1: SerialNumber: syz [ 402.224436][ T4318] usb 5-1: config 0 descriptor?? [ 402.243108][ T4318] hub 5-1:0.0: bad descriptor, ignoring hub [ 402.274436][ T4318] hub: probe of 5-1:0.0 failed with error -5 [ 402.320198][ T4318] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input107 [ 403.569982][ T4318] usb 5-1: USB disconnect, device number 59 [ 403.729102][ T8802] fuse: Unknown parameter 'grou00000000000000000000' [ 403.778039][ T4318] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 403.978111][ T4318] usb 5-1: Using ep0 maxpacket: 32 [ 403.995410][ T4318] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.028007][ T4318] usb 5-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 404.058255][ T4318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.095370][ T4318] usb 5-1: config 0 descriptor?? [ 404.118230][ T4322] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 404.177909][ T0] NOHZ tick-stop error: local softirq work is pending, handler #204!!! [ 404.338784][ T4322] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.359346][ T4322] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 404.446446][ T4322] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 404.497195][ T4322] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.556965][ T4318] input: HID 5543:0042 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:5543:0042.001F/input/input108 [ 404.584785][ T4322] usb 2-1: Product: syz [ 404.593363][ T4322] usb 2-1: Manufacturer: syz [ 404.623906][ T4322] usb 2-1: SerialNumber: syz [ 404.661411][ T4322] usb 2-1: config 0 descriptor?? [ 404.701572][ T4318] input: HID 5543:0042 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:5543:0042.001F/input/input109 [ 404.782062][ T4318] uclogic 0003:5543:0042.001F: input,hiddev0,hidraw0: USB HID v7f.fd Mouse [HID 5543:0042] on usb-dummy_hcd.4-1/input0 [ 404.855953][ T4318] usb 5-1: USB disconnect, device number 60 [ 404.920459][ T8818] 8021q: adding VLAN 0 to HW filter on device bond1 [ 405.016901][ T8820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1389'. [ 405.038379][ T8820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1389'. [ 405.368280][ T4323] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 405.536680][ T8826] tipc: Enabled bearer , priority 0 [ 405.560166][ T8823] fido_id[8823]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 405.568202][ T4323] usb 4-1: Using ep0 maxpacket: 32 [ 405.632956][ T4323] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.654491][ T8825] tipc: Disabling bearer [ 405.721463][ T4323] usb 4-1: config 0 has no interfaces? [ 405.764624][ T4323] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 405.814262][ T4323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.833893][ T4323] usb 4-1: Product: syz [ 405.839315][ T4323] usb 4-1: Manufacturer: syz [ 405.845037][ T4323] usb 4-1: SerialNumber: syz [ 405.863883][ T4323] usb 4-1: config 0 descriptor?? [ 406.208163][ T4318] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 406.409682][ T4318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 406.447231][ T4318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 406.490694][ T4318] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 406.526350][ T4318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.568228][ T4318] usb 3-1: Product: syz [ 406.598069][ T4318] usb 3-1: Manufacturer: syz [ 406.612721][ T4318] usb 3-1: SerialNumber: syz [ 406.642280][ T4318] usb 3-1: config 0 descriptor?? [ 406.666731][ T4318] hub 3-1:0.0: bad descriptor, ignoring hub [ 406.682359][ T4318] hub: probe of 3-1:0.0 failed with error -5 [ 406.708609][ T4318] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input110 [ 406.950623][ T4323] usb 2-1: USB disconnect, device number 84 [ 407.089771][ T8847] fuse: Unknown parameter 'grou00000000000000000000' [ 407.188405][ T3737] usb 3-1: USB disconnect, device number 69 [ 407.652967][ T8855] netlink: 'syz.1.1398': attribute type 1 has an invalid length. [ 407.662800][ T8855] netlink: 'syz.1.1398': attribute type 2 has an invalid length. [ 408.331727][ T8864] 8021q: adding VLAN 0 to HW filter on device bond2 [ 408.363267][ T8866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1401'. [ 408.374634][ T8866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1401'. [ 408.608424][ T4318] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 408.731735][ T4322] usb 4-1: USB disconnect, device number 84 [ 408.808004][ T4318] usb 5-1: Using ep0 maxpacket: 32 [ 408.816755][ T8871] tipc: Enabled bearer , priority 0 [ 408.834532][ T4318] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.850211][ T8870] tipc: Disabling bearer [ 408.877501][ T4318] usb 5-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 408.946285][ T4318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.991908][ T4318] usb 5-1: config 0 descriptor?? [ 409.449822][ T4318] input: HID 5543:0042 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:5543:0042.0020/input/input111 [ 409.534200][ T4318] input: HID 5543:0042 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:5543:0042.0020/input/input112 [ 409.655821][ T4318] uclogic 0003:5543:0042.0020: input,hiddev0,hidraw0: USB HID v7f.fd Mouse [HID 5543:0042] on usb-dummy_hcd.4-1/input0 [ 409.788389][ T4318] usb 5-1: USB disconnect, device number 61 [ 410.588269][ T8883] fido_id[8883]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 410.848017][ T4318] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 410.946452][ T8887] fuse: Unknown parameter 'group_i00000000000000000000' [ 411.062462][ T4318] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 411.099113][ T4318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.136447][ T4318] usb 5-1: Product: syz [ 411.167381][ T4318] usb 5-1: Manufacturer: syz [ 411.197139][ T4318] usb 5-1: SerialNumber: syz [ 411.245284][ T4318] usb 5-1: config 0 descriptor?? [ 411.538057][ T4322] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 411.739939][ T4322] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 411.778083][ T4322] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 411.833872][ T4322] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 411.906665][ T4322] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.942520][ T4322] usb 2-1: Product: syz [ 411.963838][ T4322] usb 2-1: Manufacturer: syz [ 411.997978][ T4322] usb 2-1: SerialNumber: syz [ 412.030240][ T4322] usb 2-1: config 0 descriptor?? [ 412.049780][ T4322] hub 2-1:0.0: bad descriptor, ignoring hub [ 412.071594][ T4322] hub: probe of 2-1:0.0 failed with error -5 [ 412.101402][ T4322] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input113 [ 412.198313][ T8906] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1414'. [ 412.253012][ T8902] 8021q: adding VLAN 0 to HW filter on device bond2 [ 412.318940][ T8904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1413'. [ 412.336326][ T8904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1413'. [ 412.367041][ T8904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.377462][ T8904] bond1: (slave bond0): making interface the new active one [ 412.391010][ T4322] usb 2-1: USB disconnect, device number 85 [ 412.423962][ T8904] bond1: (slave bond0): Enslaving as an active interface with an up link [ 412.451549][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 412.944557][ T8914] tipc: Enabled bearer , priority 0 [ 413.071643][ T8913] tipc: Disabling bearer [ 413.076301][ T8920] input: syz0 as /devices/virtual/input/input114 [ 413.298173][ T22] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 413.478272][ T22] usb 3-1: Using ep0 maxpacket: 32 [ 413.490370][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.506231][ T22] usb 3-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 413.525617][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.567076][ T22] usb 3-1: config 0 descriptor?? [ 413.586107][ T8929] netlink: 'syz.1.1420': attribute type 1 has an invalid length. [ 413.632483][ T4323] usb 5-1: USB disconnect, device number 62 [ 413.774274][ T8929] netlink: 'syz.1.1420': attribute type 2 has an invalid length. [ 413.970739][ T8933] fuse: Unknown parameter 'group_i00000000000000000000' [ 414.011032][ T22] input: HID 5543:0042 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:5543:0042.0021/input/input116 [ 414.074933][ T22] input: HID 5543:0042 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:5543:0042.0021/input/input117 [ 414.099538][ T22] uclogic 0003:5543:0042.0021: input,hiddev0,hidraw0: USB HID v7f.fd Mouse [HID 5543:0042] on usb-dummy_hcd.2-1/input0 [ 415.560813][ T8951] 8021q: adding VLAN 0 to HW filter on device bond1 [ 415.596824][ T8951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1426'. [ 415.661722][ T8951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1426'. [ 416.126929][ T22] usb 3-1: USB disconnect, device number 70 [ 416.501463][ T8960] tipc: Enabled bearer , priority 0 [ 416.538136][ T4318] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 416.633691][ T8959] tipc: Disabling bearer [ 416.729946][ T4318] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 416.762125][ T4318] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 416.836918][ T4318] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 416.891079][ T4318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.946689][ T4318] usb 1-1: Product: syz [ 416.961390][ T4318] usb 1-1: Manufacturer: syz [ 416.966161][ T4318] usb 1-1: SerialNumber: syz [ 417.043371][ T4318] usb 1-1: config 0 descriptor?? [ 417.085361][ T4318] hub 1-1:0.0: bad descriptor, ignoring hub [ 417.103912][ T4318] hub: probe of 1-1:0.0 failed with error -5 [ 417.163503][ T4318] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input118 [ 417.398363][ T951] usb 1-1: USB disconnect, device number 70 [ 417.498236][ T4323] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 417.697616][ T4323] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 417.743031][ T4323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.773563][ T4323] usb 4-1: Product: syz [ 417.778387][ T4323] usb 4-1: Manufacturer: syz [ 417.783732][ T4323] usb 4-1: SerialNumber: syz [ 417.833701][ T4323] usb 4-1: config 0 descriptor?? [ 418.149266][ T8974] fuse: Unknown parameter 'group_i00000000000000000000' [ 418.602429][ T8981] 8021q: adding VLAN 0 to HW filter on device bond2 [ 418.618441][ T8981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1437'. [ 418.627620][ T8981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1437'. [ 419.031618][ T8990] tipc: Enabled bearer , priority 0 [ 419.057512][ T8989] tipc: Disabling bearer [ 419.118036][ T951] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 419.325136][ T8998] netlink: 'syz.0.1442': attribute type 1 has an invalid length. [ 419.333331][ T951] usb 5-1: Using ep0 maxpacket: 32 [ 419.342114][ T951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.360469][ T8998] netlink: 'syz.0.1442': attribute type 2 has an invalid length. [ 419.394532][ T951] usb 5-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 419.434481][ T951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.509583][ T951] usb 5-1: config 0 descriptor?? [ 419.966617][ T951] input: HID 5543:0042 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:5543:0042.0022/input/input120 [ 420.090850][ T951] input: HID 5543:0042 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:5543:0042.0022/input/input121 [ 420.160164][ T951] uclogic 0003:5543:0042.0022: input,hiddev0,hidraw0: USB HID v7f.fd Mouse [HID 5543:0042] on usb-dummy_hcd.4-1/input0 [ 420.257911][ T0] NOHZ tick-stop error: local softirq work is pending, handler #384!!! [ 420.269441][ T0] NOHZ tick-stop error: local softirq work is pending, handler #386!!! [ 420.279237][ T0] NOHZ tick-stop error: local softirq work is pending, handler #386!!! [ 420.291381][ T951] usb 5-1: USB disconnect, device number 63 [ 420.297895][ T0] NOHZ tick-stop error: local softirq work is pending, handler #386!!! [ 420.430198][ T4318] usb 4-1: USB disconnect, device number 85 [ 420.584283][ T9006] device bond_slave_0 entered promiscuous mode [ 420.923891][ T9007] fido_id[9007]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 421.290406][ T9015] fuse: Unknown parameter 'group_id00000000000000000000' [ 423.223242][ T9033] tipc: Enabled bearer , priority 0 [ 423.356310][ T9032] tipc: Disabling bearer [ 424.038415][ T4323] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 424.072313][ T951] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 424.245402][ T4323] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 424.263860][ T4323] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.293235][ T951] usb 2-1: Using ep0 maxpacket: 32 [ 424.294534][ T4323] usb 3-1: Product: syz [ 424.300439][ T951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.307437][ T4323] usb 3-1: Manufacturer: syz [ 424.325304][ T4323] usb 3-1: SerialNumber: syz [ 424.358271][ T4323] usb 3-1: config 0 descriptor?? [ 424.384010][ T951] usb 2-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 424.436019][ T951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.485799][ T9047] fuse: Unknown parameter 'group_id00000000000000000000' [ 424.499152][ T951] usb 2-1: config 0 descriptor?? [ 424.947793][ T951] input: HID 5543:0042 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:5543:0042.0023/input/input123 [ 425.041739][ T951] input: HID 5543:0042 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:5543:0042.0023/input/input124 [ 425.094520][ T951] uclogic 0003:5543:0042.0023: input,hiddev0,hidraw0: USB HID v7f.fd Mouse [HID 5543:0042] on usb-dummy_hcd.1-1/input0 [ 425.218944][ T951] usb 2-1: USB disconnect, device number 86 [ 425.618862][ T9060] device syzkaller0 entered promiscuous mode [ 425.826159][ T9056] fido_id[9056]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 426.804073][ T4318] usb 3-1: USB disconnect, device number 71 [ 426.880750][ T9076] tipc: Enabled bearer , priority 0 [ 427.041498][ T9075] tipc: Disabling bearer [ 427.492884][ T9087] fuse: Unknown parameter 'group_id00000000000000000000' [ 427.513487][ T9086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1469'. [ 427.955046][ T9094] input: syz0 as /devices/virtual/input/input126 [ 428.115992][ T9097] netlink: 'syz.0.1472': attribute type 1 has an invalid length. [ 428.165417][ T9097] netlink: 'syz.0.1472': attribute type 2 has an invalid length. [ 428.233772][ T9100] device syzkaller0 entered promiscuous mode [ 429.188862][ T9118] tipc: Enabled bearer , priority 0 [ 429.227950][ T951] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 429.333060][ T9117] tipc: Disabling bearer [ 429.429674][ T951] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 429.469072][ T951] usb 2-1: config 0 has no interface number 0 [ 429.515514][ T951] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 429.598175][ T951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.631732][ T9124] fuse: Bad value for 'user_id' [ 429.637006][ T951] usb 2-1: Product: syz [ 429.642869][ T951] usb 2-1: Manufacturer: syz [ 429.684628][ T951] usb 2-1: SerialNumber: syz [ 429.748139][ T951] usb 2-1: config 0 descriptor?? [ 430.109130][ T951] dvb_usb_ec168: probe of 2-1:0.1 failed with error -32 [ 430.494666][ T9131] input: syz0 as /devices/virtual/input/input127 [ 432.055924][ T9158] input: syz0 as /devices/virtual/input/input128 [ 432.098530][ T4323] usb 2-1: USB disconnect, device number 87 [ 432.582128][ T9168] tipc: Enabled bearer , priority 0 [ 432.677073][ T9167] tipc: Disabling bearer [ 432.725352][ T9171] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1494'. [ 432.988062][ T951] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 433.023780][ T9177] input: syz0 as /devices/virtual/input/input129 [ 433.187161][ T9181] netlink: 'syz.1.1497': attribute type 1 has an invalid length. [ 433.197434][ T951] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 433.220610][ T951] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 433.270993][ T951] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 433.297772][ T951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.325158][ T9181] netlink: 'syz.1.1497': attribute type 2 has an invalid length. [ 433.362769][ T951] usb 5-1: config 0 descriptor?? [ 433.390251][ T951] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 433.407198][ T951] dvb-usb: bulk message failed: -22 (3/0) [ 433.453096][ T951] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 433.581941][ T9171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.605568][ T951] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 433.620723][ T9171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.680164][ T951] usb 5-1: media controller created [ 433.720105][ T951] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 433.729955][ T9171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.796227][ T9171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.818254][ T951] dvb-usb: bulk message failed: -22 (6/0) [ 433.836460][ T951] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 433.885812][ T951] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input130 [ 433.937023][ T951] dvb-usb: schedule remote query interval to 150 msecs. [ 433.954929][ T951] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 433.996961][ T951] usb 5-1: USB disconnect, device number 64 [ 434.086072][ T951] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 434.789457][ T9194] device syzkaller0 entered promiscuous mode [ 435.124096][ T9198] input: syz0 as /devices/virtual/input/input131 [ 435.278283][ T951] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 435.462758][ T9206] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1505'. [ 435.479462][ T951] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 435.517311][ T951] usb 4-1: config 0 has no interface number 0 [ 435.540682][ T951] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 435.672882][ T951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.701588][ T951] usb 4-1: Product: syz [ 435.718355][ T951] usb 4-1: Manufacturer: syz [ 435.734337][ T951] usb 4-1: SerialNumber: syz [ 435.786697][ T951] usb 4-1: config 0 descriptor?? [ 436.017771][ T951] dvb_usb_ec168: probe of 4-1:0.1 failed with error -32 [ 436.027940][ T4318] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 436.231047][ T4318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 436.267099][ T4318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 436.320551][ T4318] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 436.344250][ T4318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.354133][ T4318] usb 3-1: Product: syz [ 436.370701][ T4318] usb 3-1: Manufacturer: syz [ 436.383447][ T4318] usb 3-1: SerialNumber: syz [ 436.420610][ T9218] input: syz0 as /devices/virtual/input/input132 [ 436.428857][ T4318] usb 3-1: config 0 descriptor?? [ 436.446516][ T4318] hub 3-1:0.0: bad descriptor, ignoring hub [ 436.454348][ T4318] hub: probe of 3-1:0.0 failed with error -5 [ 436.463809][ T4318] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input133 [ 436.779092][ T4322] usb 3-1: USB disconnect, device number 72 [ 436.795347][ T9224] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1511'. [ 436.830363][ T9226] device syzkaller1 entered promiscuous mode [ 437.078570][ T22] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 437.293273][ T22] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 437.306038][ T22] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 437.317178][ T22] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 437.328315][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.362965][ T22] usb 1-1: config 0 descriptor?? [ 437.398197][ T22] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 437.406319][ T22] dvb-usb: bulk message failed: -22 (3/0) [ 437.425839][ T9237] input: syz0 as /devices/virtual/input/input134 [ 437.456067][ T22] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 437.488571][ T22] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 437.497333][ T22] usb 1-1: media controller created [ 437.529833][ T22] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 437.580850][ T22] dvb-usb: bulk message failed: -22 (6/0) [ 437.588229][ T22] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 437.600378][ T9224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.610914][ T9224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.627675][ T22] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input135 [ 437.645373][ T9224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.656897][ T22] dvb-usb: schedule remote query interval to 150 msecs. [ 437.673208][ T9224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.739251][ T22] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 437.859040][ T9242] input: syz0 as /devices/virtual/input/input136 [ 437.878163][ T22] usb 1-1: USB disconnect, device number 71 [ 437.940074][ T9243] input: syz1 as /devices/virtual/input/input137 [ 437.971092][ T22] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 438.013833][ T4318] usb 4-1: USB disconnect, device number 86 [ 438.439350][ T9251] netlink: 'syz.3.1519': attribute type 1 has an invalid length. [ 438.460076][ T9251] netlink: 'syz.3.1519': attribute type 2 has an invalid length. [ 438.663003][ T9255] input: syz0 as /devices/virtual/input/input138 [ 439.012658][ T9261] device syzkaller0 entered promiscuous mode [ 439.458144][ T4322] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 439.668919][ T4322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 439.713015][ T4322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 439.755716][ T4322] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 439.771914][ T4322] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.784798][ T4322] usb 3-1: Product: syz [ 439.796836][ T4322] usb 3-1: Manufacturer: syz [ 439.813776][ T4322] usb 3-1: SerialNumber: syz [ 439.826674][ T4322] usb 3-1: config 0 descriptor?? [ 439.856239][ T4322] hub 3-1:0.0: bad descriptor, ignoring hub [ 439.876237][ T4322] hub: probe of 3-1:0.0 failed with error -5 [ 439.906694][ T4322] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input140 [ 440.009285][ T4322] usb 3-1: USB disconnect, device number 73 [ 440.131559][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.139414][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.408094][ T22] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 440.445374][ T9279] input: syz0 as /devices/virtual/input/input141 [ 440.523455][ T9279] input: syz1 as /devices/virtual/input/input142 [ 440.601496][ T22] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 440.625286][ T22] usb 1-1: config 0 has no interface number 0 [ 440.649238][ T22] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 440.738435][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.778616][ T22] usb 1-1: Product: syz [ 440.783677][ T22] usb 1-1: Manufacturer: syz [ 440.808068][ T4318] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 440.808105][ T22] usb 1-1: SerialNumber: syz [ 440.886847][ T22] usb 1-1: config 0 descriptor?? [ 441.010284][ T4318] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.059546][ T4318] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 441.125489][ T4318] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 441.136984][ T22] dvb_usb_ec168: probe of 1-1:0.1 failed with error -32 [ 441.215265][ T4318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.312096][ T4318] usb 5-1: config 0 descriptor?? [ 441.342496][ T4318] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 441.388398][ T4318] dvb-usb: bulk message failed: -22 (3/0) [ 441.428153][ T4318] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 441.461694][ T4318] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 441.473216][ T4318] usb 5-1: media controller created [ 441.493628][ T4318] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 441.531824][ T4318] dvb-usb: bulk message failed: -22 (6/0) [ 441.539887][ T9281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.559476][ T9281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.563602][ T4318] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 441.586090][ T4318] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input143 [ 441.598051][ T951] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 441.610469][ T9281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.623869][ T9281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.634090][ T4318] dvb-usb: schedule remote query interval to 150 msecs. [ 441.657247][ T4318] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 441.706776][ T4318] usb 5-1: USB disconnect, device number 65 [ 441.772882][ T951] usb 2-1: device descriptor read/64, error -71 [ 441.794157][ T4318] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 441.868245][ T9290] input: syz0 as /devices/virtual/input/input144 [ 441.993005][ T9294] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1535'. [ 442.053549][ T951] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 442.238250][ T951] usb 2-1: device descriptor read/64, error -71 [ 442.358201][ T951] usb usb2-port1: attempt power cycle [ 442.778072][ T951] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 442.822359][ T951] usb 2-1: device descriptor read/8, error -71 [ 443.098395][ T951] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 443.138694][ T951] usb 2-1: device descriptor read/8, error -71 [ 443.207579][ T22] usb 1-1: USB disconnect, device number 72 [ 443.258247][ T951] usb usb2-port1: unable to enumerate USB device [ 443.966692][ T9316] input: syz0 as /devices/virtual/input/input146 [ 443.978100][ T951] usb 1-1: new full-speed USB device number 73 using dummy_hcd [ 444.057327][ T9316] input: syz1 as /devices/virtual/input/input147 [ 444.197375][ T951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 444.249210][ T951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 444.301381][ T951] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 444.358009][ T951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.428144][ T951] usb 1-1: Product: syz [ 444.447785][ T951] usb 1-1: Manufacturer: syz [ 444.470489][ T951] usb 1-1: SerialNumber: syz [ 444.506331][ T951] usb 1-1: config 0 descriptor?? [ 444.541411][ T951] hub 1-1:0.0: bad descriptor, ignoring hub [ 444.547383][ T951] hub: probe of 1-1:0.0 failed with error -5 [ 444.561402][ T9322] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1546'. [ 444.577307][ T951] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input148 [ 444.724969][ T9325] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 444.837821][ T9329] device macvlan2 entered promiscuous mode [ 444.889610][ T9329] device bond3 entered promiscuous mode [ 444.898029][ T9329] device bridge1 entered promiscuous mode [ 444.920073][ T9329] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 444.945583][ T9329] device bond3 left promiscuous mode [ 444.967576][ T9329] device bridge1 left promiscuous mode [ 445.578056][ T4323] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 445.805500][ T4323] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.818583][ T4323] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 445.829560][ T4323] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 445.839981][ T4323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.853151][ T4323] usb 3-1: config 0 descriptor?? [ 445.865935][ T4323] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 445.888119][ T4323] dvb-usb: bulk message failed: -22 (3/0) [ 445.923469][ T4323] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 445.940775][ T4323] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 445.949204][ T4323] usb 3-1: media controller created [ 445.959389][ T4323] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 445.975121][ T4323] dvb-usb: bulk message failed: -22 (6/0) [ 445.982084][ T4323] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 445.995108][ T4323] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input149 [ 446.011918][ T4323] dvb-usb: schedule remote query interval to 150 msecs. [ 446.020231][ T4323] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 446.066852][ T9337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.111551][ T9337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.178308][ T4323] dvb-usb: bulk message failed: -22 (1/0) [ 446.185627][ T4323] dvb-usb: error while querying for an remote control event. [ 446.239471][ T9354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.250441][ T9354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.358317][ T4323] dvb-usb: bulk message failed: -22 (1/0) [ 446.365258][ T4323] dvb-usb: error while querying for an remote control event. [ 446.529892][ T4323] dvb-usb: bulk message failed: -22 (1/0) [ 446.536753][ T4323] dvb-usb: error while querying for an remote control event. [ 446.698980][ T4323] dvb-usb: bulk message failed: -22 (1/0) [ 446.706129][ T4323] dvb-usb: error while querying for an remote control event. [ 446.873230][ T4323] dvb-usb: bulk message failed: -22 (1/0) [ 446.881020][ T9358] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1554'. [ 446.891973][ T4323] dvb-usb: error while querying for an remote control event. [ 447.067213][ T4323] dvb-usb: bulk message failed: -22 (1/0) [ 447.074406][ T4323] dvb-usb: error while querying for an remote control event. [ 447.240590][ T4323] dvb-usb: bulk message failed: -22 (1/0) [ 447.247041][ T4323] dvb-usb: error while querying for an remote control event. [ 447.418061][ T4323] dvb-usb: bulk message failed: -22 (1/0) [ 447.437723][ T4323] dvb-usb: error while querying for an remote control event. [ 447.608320][ T4323] dvb-usb: bulk message failed: -22 (1/0) [ 447.627398][ T4323] dvb-usb: error while querying for an remote control event. [ 447.839581][ T4323] dvb-usb: bulk message failed: -22 (1/0) [ 447.846780][ T4323] dvb-usb: error while querying for an remote control event. [ 448.012268][ T4323] dvb-usb: bulk message failed: -22 (1/0) [ 448.021772][ T4323] dvb-usb: error while querying for an remote control event. [ 448.196171][ T4323] dvb-usb: bulk message failed: -22 (1/0) [ 448.204988][ T4323] dvb-usb: error while querying for an remote control event. [ 448.368231][ T4323] dvb-usb: bulk message failed: -22 (1/0) [ 448.374553][ T4323] dvb-usb: error while querying for an remote control event. [ 448.567136][ T4323] dvb-usb: bulk message failed: -22 (1/0) [ 448.573590][ T4323] dvb-usb: error while querying for an remote control event. [ 448.709682][ T22] usb 1-1: USB disconnect, device number 73 [ 448.763822][ T4323] dvb-usb: bulk message failed: -22 (1/0) [ 448.770878][ T4323] dvb-usb: error while querying for an remote control event. [ 448.908362][ T22] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 448.938181][ T4323] dvb-usb: bulk message failed: -22 (1/0) [ 448.944647][ T4323] dvb-usb: error while querying for an remote control event. [ 449.078070][ T22] usb 1-1: device descriptor read/64, error -71 [ 449.128113][ T4323] dvb-usb: bulk message failed: -22 (1/0) [ 449.135272][ T4323] dvb-usb: error while querying for an remote control event. [ 449.135386][ T4318] usb 3-1: USB disconnect, device number 75 [ 449.259370][ T4318] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 449.358446][ T22] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 449.528098][ T22] usb 1-1: device descriptor read/64, error -71 [ 449.594403][ T9374] device syzkaller0 entered promiscuous mode [ 449.658452][ T22] usb usb1-port1: attempt power cycle [ 449.667958][ T4323] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 449.873707][ T4323] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 449.893958][ T4323] usb 2-1: config 0 has no interface number 0 [ 449.928205][ T4323] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.962312][ T4323] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.994723][ T4323] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 450.061799][ T4323] usb 2-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 450.072865][ T4323] usb 2-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 450.082707][ T22] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 450.093758][ T4323] usb 2-1: Product: syz [ 450.126652][ T4323] usb 2-1: config 0 descriptor?? [ 450.145917][ T22] usb 1-1: device descriptor read/8, error -71 [ 450.438083][ T22] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 450.463880][ T4322] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 450.500415][ T22] usb 1-1: device descriptor read/8, error -71 [ 450.556746][ T4323] chicony 0003:04F2:1421.0024: unknown main item tag 0x3 [ 450.576050][ T4323] chicony 0003:04F2:1421.0024: report_id 2141495278 is invalid [ 450.605799][ T4323] chicony 0003:04F2:1421.0024: item 0 4 1 8 parsing failed [ 450.618475][ T22] usb usb1-port1: unable to enumerate USB device [ 450.649941][ T4323] chicony 0003:04F2:1421.0024: Chicony hid parse failed: -22 [ 450.669634][ T4323] chicony: probe of 0003:04F2:1421.0024 failed with error -22 [ 450.675589][ T4322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 450.714678][ T4322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 450.760452][ T4322] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 450.783114][ T4323] usb 2-1: USB disconnect, device number 92 [ 450.797601][ T4322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.828225][ T4322] usb 4-1: Product: syz [ 450.843763][ T4322] usb 4-1: Manufacturer: syz [ 450.853004][ T4322] usb 4-1: SerialNumber: syz [ 450.888133][ T4322] usb 4-1: config 0 descriptor?? [ 450.927445][ T4322] hub 4-1:0.0: bad descriptor, ignoring hub [ 450.951067][ T4322] hub: probe of 4-1:0.0 failed with error -5 [ 450.975517][ T4322] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input150 [ 451.331908][ T4322] usb 4-1: USB disconnect, device number 87 [ 451.619652][ T9390] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1565'. [ 452.024359][ T9397] device syzkaller0 entered promiscuous mode [ 452.138125][ T951] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 452.340661][ T951] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.364258][ T951] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 452.391534][ T951] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 452.445842][ T951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.484409][ T951] usb 1-1: config 0 descriptor?? [ 452.542382][ T951] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 452.587090][ T951] dvb-usb: bulk message failed: -22 (3/0) [ 452.650034][ T951] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 452.709722][ T9394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.749248][ T951] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 452.756374][ T951] usb 1-1: media controller created [ 452.768907][ T9394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.816811][ T951] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 452.869215][ T9408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.918587][ T9408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.920755][ T951] dvb-usb: bulk message failed: -22 (6/0) [ 452.954553][ T951] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 452.986551][ T951] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input151 [ 453.055336][ T951] dvb-usb: schedule remote query interval to 150 msecs. [ 453.083333][ T951] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 453.215919][ T951] usb 1-1: USB disconnect, device number 78 [ 453.274352][ T951] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 453.599586][ T4322] usb 4-1: new full-speed USB device number 88 using dummy_hcd [ 454.558293][ T4323] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 454.771722][ T4323] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 454.808162][ T4323] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 454.843190][ T4323] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 454.864885][ T4323] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.906168][ T4323] usb 2-1: Product: syz [ 454.958109][ T4323] usb 2-1: Manufacturer: syz [ 454.963733][ T4323] usb 2-1: SerialNumber: syz [ 455.044624][ T4323] usb 2-1: config 0 descriptor?? [ 455.090598][ T4323] hub 2-1:0.0: bad descriptor, ignoring hub [ 455.097782][ T4323] hub: probe of 2-1:0.0 failed with error -5 [ 455.160100][ T4323] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input152 [ 455.428597][ T4318] usb 2-1: USB disconnect, device number 93 [ 455.645146][ T4322] usb 4-1: unable to get BOS descriptor or descriptor too short [ 455.668632][ T4322] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 455.693917][ T4322] usb 4-1: can't read configurations, error -71 [ 455.893927][ T9447] input: syz0 as /devices/virtual/input/input153 [ 455.960913][ T9447] input: syz1 as /devices/virtual/input/input154 [ 456.906846][ T9463] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1588'. [ 456.978125][ T4323] usb 1-1: new full-speed USB device number 79 using dummy_hcd [ 457.202196][ T4323] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 457.224779][ T4323] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 457.269592][ T4323] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 457.323472][ T4323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.381111][ T4323] usb 1-1: config 0 descriptor?? [ 457.429681][ T4323] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 457.438237][ T4323] dvb-usb: bulk message failed: -22 (3/0) [ 457.501372][ T4323] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 457.570147][ T4323] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 457.599559][ T4323] usb 1-1: media controller created [ 457.609254][ T9456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.645039][ T4323] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 457.653538][ T9456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.704584][ T9456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.757149][ T4323] dvb-usb: bulk message failed: -22 (6/0) [ 457.770314][ T4323] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 457.803255][ T4323] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input155 [ 457.818791][ T9456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.839253][ T4323] dvb-usb: schedule remote query interval to 150 msecs. [ 457.872356][ T4323] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 457.946872][ T4323] usb 1-1: USB disconnect, device number 79 [ 458.046720][ T9466] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 458.066316][ T4323] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 458.101014][ T9472] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 458.909802][ T9495] device syzkaller0 entered promiscuous mode [ 459.268257][ T4322] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 459.361283][ T9499] input: syz0 as /devices/virtual/input/input156 [ 459.460362][ T4322] usb 1-1: Using ep0 maxpacket: 8 [ 459.480392][ T9499] input: syz1 as /devices/virtual/input/input157 [ 459.480803][ T4322] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 459.567511][ T4322] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.642775][ T4322] usb 1-1: Product: syz [ 459.687971][ T4322] usb 1-1: Manufacturer: syz [ 459.742753][ T4322] usb 1-1: SerialNumber: syz [ 459.765649][ T4322] usb 1-1: config 0 descriptor?? [ 459.768007][ T4323] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 459.785034][ T4322] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 459.800959][ T4322] dvb-usb: bulk message failed: -22 (2/0) [ 459.844946][ T4322] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 459.895327][ T4322] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 459.935669][ T4322] usb 1-1: media controller created [ 460.001845][ T4322] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 460.033604][ T9505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.057759][ T9505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.160922][ T4322] cxusb: set interface failed [ 460.166122][ T4322] dvb-usb: bulk message failed: -22 (1/0) [ 460.482247][ T4322] DVB: Unable to find symbol mt352_attach() [ 460.492948][ T4322] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 460.928163][ T4322] rc_core: IR keymap rc-dvico-portable not found [ 460.934643][ T4322] Registered IR keymap rc-empty [ 460.979933][ T4322] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 461.069746][ T4322] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input158 [ 461.141842][ T4322] dvb-usb: schedule remote query interval to 100 msecs. [ 461.203733][ T4322] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 461.295759][ T4322] usb 1-1: USB disconnect, device number 80 [ 461.432283][ T4322] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 461.579318][ T22] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 461.652525][ T4323] usb 3-1: unable to get BOS descriptor or descriptor too short [ 461.662736][ T4323] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 461.672314][ T4323] usb 3-1: can't read configurations, error -71 [ 461.757936][ T4318] usb 4-1: new full-speed USB device number 90 using dummy_hcd [ 461.780053][ T22] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 461.791232][ T22] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 461.802187][ T22] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 461.812339][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.826262][ T22] usb 5-1: config 0 descriptor?? [ 461.837062][ T22] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 461.844833][ T22] dvb-usb: bulk message failed: -22 (3/0) [ 461.856240][ T22] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 461.868735][ T22] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 461.876596][ T22] usb 5-1: media controller created [ 461.883807][ T22] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 461.904810][ T22] dvb-usb: bulk message failed: -22 (6/0) [ 461.916544][ T22] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 461.926700][ T22] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input159 [ 461.950072][ T4318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 461.951083][ T22] dvb-usb: schedule remote query interval to 150 msecs. [ 461.966613][ T4318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 461.971204][ T22] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 462.016130][ T4318] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 462.037963][ T4318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.040075][ T9526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.046658][ T4318] usb 4-1: Product: syz [ 462.046682][ T4318] usb 4-1: Manufacturer: syz [ 462.046700][ T4318] usb 4-1: SerialNumber: syz [ 462.049026][ T4318] usb 4-1: config 0 descriptor?? [ 462.074821][ T9526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.132451][ T22] dvb-usb: bulk message failed: -22 (1/0) [ 462.138627][ T4318] hub 4-1:0.0: bad descriptor, ignoring hub [ 462.138659][ T4318] hub: probe of 4-1:0.0 failed with error -5 [ 462.141166][ T4318] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input160 [ 462.180923][ T22] dvb-usb: error while querying for an remote control event. [ 462.206971][ T9526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.254570][ T9526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.352848][ T4322] usb 5-1: USB disconnect, device number 66 [ 462.426208][ T4322] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 462.588286][ T9437] usb 4-1: USB disconnect, device number 90 [ 463.207176][ T9549] device syzkaller0 entered promiscuous mode [ 463.662657][ T9569] netlink: 'syz.4.1619': attribute type 1 has an invalid length. [ 463.743416][ T9569] netlink: 'syz.4.1619': attribute type 2 has an invalid length. [ 464.388147][ T4322] usb 1-1: new full-speed USB device number 81 using dummy_hcd [ 464.619181][ T9573] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 465.338077][ T4323] usb 3-1: new full-speed USB device number 78 using dummy_hcd [ 465.552919][ T4323] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.575268][ T4323] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 465.627793][ T4323] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 465.676319][ T4323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.742155][ T4323] usb 3-1: config 0 descriptor?? [ 465.802807][ T4323] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 465.856981][ T4323] dvb-usb: bulk message failed: -22 (3/0) [ 465.895414][ T4323] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 465.949750][ T4323] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 466.000336][ T9595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.010395][ T4323] usb 3-1: media controller created [ 466.021349][ T4323] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 466.037179][ T9595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.080494][ T9595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.091545][ T4323] dvb-usb: bulk message failed: -22 (6/0) [ 466.098820][ T4323] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 466.108361][ T9595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.124212][ T4323] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input161 [ 466.168009][ T4318] usb 2-1: new full-speed USB device number 94 using dummy_hcd [ 466.181134][ T4323] dvb-usb: schedule remote query interval to 150 msecs. [ 466.239161][ T4323] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 466.254830][ T4323] usb 3-1: USB disconnect, device number 78 [ 466.369820][ T4318] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 466.394555][ T4323] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 466.399872][ T4318] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 466.456744][ T4318] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 466.481789][ T4322] usb 1-1: unable to get BOS descriptor or descriptor too short [ 466.506901][ T4318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.516207][ T4322] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 466.544149][ T4322] usb 1-1: can't read configurations, error -71 [ 466.550855][ T4318] usb 2-1: Product: syz [ 466.558233][ T4318] usb 2-1: Manufacturer: syz [ 466.572814][ T4318] usb 2-1: SerialNumber: syz [ 466.603574][ T4318] usb 2-1: config 0 descriptor?? [ 466.610526][ T4318] hub 2-1:0.0: bad descriptor, ignoring hub [ 466.616483][ T4318] hub: probe of 2-1:0.0 failed with error -5 [ 466.663920][ T4318] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input162 [ 466.843693][ T9610] device syzkaller0 entered promiscuous mode [ 467.506368][ T9625] device syzkaller0 entered promiscuous mode [ 467.570373][ T9628] tipc: Enabling of bearer rejected, failed to enable media [ 468.330098][ T9649] netlink: 'syz.2.1639': attribute type 1 has an invalid length. [ 468.378250][ T9649] netlink: 'syz.2.1639': attribute type 2 has an invalid length. [ 468.950484][ T9657] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1643'. [ 469.147990][ T4322] usb 4-1: new full-speed USB device number 91 using dummy_hcd [ 469.174413][ T9664] device syzkaller0 entered promiscuous mode [ 469.242869][ T951] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 469.440420][ T951] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.477888][ T951] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 469.505452][ T951] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 469.535316][ T951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.568290][ T9437] usb 1-1: new full-speed USB device number 83 using dummy_hcd [ 469.587216][ T951] usb 5-1: config 0 descriptor?? [ 469.617786][ T951] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 469.645572][ T951] dvb-usb: bulk message failed: -22 (3/0) [ 469.684111][ T951] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 469.721737][ T951] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 469.748161][ T951] usb 5-1: media controller created [ 469.765553][ T951] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 469.795577][ T9437] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 469.810189][ T9657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.860360][ T951] dvb-usb: bulk message failed: -22 (6/0) [ 469.866286][ T951] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 469.874437][ T9437] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 469.878565][ T9657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.973516][ T9437] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 469.988442][ T951] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input163 [ 470.020483][ T9437] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.030022][ T9659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.051014][ T951] dvb-usb: schedule remote query interval to 150 msecs. [ 470.070458][ T9437] usb 1-1: Product: syz [ 470.074725][ T9437] usb 1-1: Manufacturer: syz [ 470.078807][ T9659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.088611][ T951] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 470.109546][ T9437] usb 1-1: SerialNumber: syz [ 470.179142][ T9437] usb 1-1: config 0 descriptor?? [ 470.219815][ T9437] hub 1-1:0.0: bad descriptor, ignoring hub [ 470.258039][ T9437] hub: probe of 1-1:0.0 failed with error -5 [ 470.286161][ T9437] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input164 [ 470.388693][ T951] dvb-usb: bulk message failed: -22 (1/0) [ 470.394540][ T951] dvb-usb: error while querying for an remote control event. [ 470.480436][ T9672] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1649'. [ 470.587921][ T951] dvb-usb: bulk message failed: -22 (1/0) [ 470.593795][ T951] dvb-usb: error while querying for an remote control event. [ 470.808227][ T951] dvb-usb: bulk message failed: -22 (1/0) [ 470.815330][ T951] dvb-usb: error while querying for an remote control event. [ 471.008145][ T951] dvb-usb: bulk message failed: -22 (1/0) [ 471.014317][ T951] dvb-usb: error while querying for an remote control event. [ 471.031558][ T4322] usb 4-1: unable to get BOS descriptor or descriptor too short [ 471.053536][ T4322] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 471.084823][ T4322] usb 4-1: can't read configurations, error -71 [ 471.115747][ T9685] tipc: Enabling of bearer rejected, failed to enable media [ 471.228100][ T951] dvb-usb: bulk message failed: -22 (1/0) [ 471.234061][ T951] dvb-usb: error while querying for an remote control event. [ 471.428249][ T951] dvb-usb: bulk message failed: -22 (1/0) [ 471.434775][ T951] dvb-usb: error while querying for an remote control event. [ 471.601630][ T4318] usb 2-1: USB disconnect, device number 94 [ 471.628571][ T951] dvb-usb: bulk message failed: -22 (1/0) [ 471.644569][ T951] dvb-usb: error while querying for an remote control event. [ 471.644692][ T4323] usb 5-1: USB disconnect, device number 67 [ 471.762786][ T9692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1652'. [ 471.766770][ T4323] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 472.074042][ T9692] device bond3 entered promiscuous mode [ 472.122311][ T9692] 8021q: adding VLAN 0 to HW filter on device bond3 [ 472.305066][ T9698] 8021q: adding VLAN 0 to HW filter on device bond3 [ 472.313880][ T9698] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 472.327449][ T9698] bond3: (slave vti0): Error -95 calling set_mac_address [ 473.155089][ T9723] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1659'. [ 473.309056][ T9723] kvm: vcpu 0: requested 3200 ns lapic timer period limited to 200000 ns [ 473.328700][ T9723] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 473.354372][ T4322] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 473.376147][ T9726] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1660'. [ 473.563215][ T4322] usb 4-1: Using ep0 maxpacket: 32 [ 473.583317][ T4322] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 473.612998][ T4322] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 473.656027][ T4322] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 473.683716][ T4322] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 473.701617][ T9731] netlink: 'syz.0.1662': attribute type 1 has an invalid length. [ 473.714606][ T4322] usb 4-1: Product: syz [ 473.720613][ T4322] usb 4-1: Manufacturer: syz [ 473.733963][ T9732] netlink: 'syz.1.1661': attribute type 1 has an invalid length. [ 473.841290][ T9732] netlink: 'syz.1.1661': attribute type 2 has an invalid length. [ 476.029241][ T7] usb 1-1: USB disconnect, device number 83 [ 476.115150][ T4322] usb 4-1: USB disconnect, device number 93 [ 476.659249][ T4322] usb 4-1: new full-speed USB device number 94 using dummy_hcd [ 476.866201][ T4322] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.876568][ T4322] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 476.886704][ T4322] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 476.896161][ T4322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.914866][ T4322] usb 4-1: config 0 descriptor?? [ 476.926713][ T4322] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 476.934099][ T4322] dvb-usb: bulk message failed: -22 (3/0) [ 476.952099][ T4322] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 476.962410][ T4322] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 476.969970][ T4322] usb 4-1: media controller created [ 476.976605][ T4322] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 477.025476][ T4322] dvb-usb: bulk message failed: -22 (6/0) [ 477.037254][ T4322] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 477.053786][ T4322] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input165 [ 477.067335][ T4322] dvb-usb: schedule remote query interval to 150 msecs. [ 477.080671][ T4322] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 477.130994][ T9766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.144491][ T9766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.210321][ T9772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.243650][ T4322] dvb-usb: bulk message failed: -22 (1/0) [ 477.250005][ T4322] dvb-usb: error while querying for an remote control event. [ 477.259082][ T9772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.409046][ T4322] dvb-usb: bulk message failed: -22 (1/0) [ 477.415064][ T4322] dvb-usb: error while querying for an remote control event. [ 477.577985][ T4322] dvb-usb: bulk message failed: -22 (1/0) [ 477.583896][ T4322] dvb-usb: error while querying for an remote control event. [ 477.595602][ T9740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1664'. [ 477.604883][ T9740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1664'. [ 477.619469][ T9740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.652761][ T9740] bond1: (slave bond0): making interface the new active one [ 477.699390][ T9740] bond1: (slave bond0): Enslaving as an active interface with an up link [ 477.729089][ T9741] tipc: Enabling of bearer rejected, failed to enable media [ 477.744914][ T9761] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1666'. [ 477.758019][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 477.764229][ T7] dvb-usb: error while querying for an remote control event. [ 477.823255][ T9762] device syzkaller0 entered promiscuous mode [ 477.839409][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 477.855789][ T4318] usb 4-1: USB disconnect, device number 94 [ 477.909913][ T4318] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 477.993260][ T4322] usb 3-1: new full-speed USB device number 79 using dummy_hcd [ 478.239246][ T4322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 478.267389][ T4322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 478.306911][ T4322] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 478.319156][ T4322] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.327679][ T4322] usb 3-1: Product: syz [ 478.334968][ T4322] usb 3-1: Manufacturer: syz [ 478.343413][ T4322] usb 3-1: SerialNumber: syz [ 478.373509][ T4322] usb 3-1: config 0 descriptor?? [ 478.402808][ T4322] hub 3-1:0.0: bad descriptor, ignoring hub [ 478.413509][ T4322] hub: probe of 3-1:0.0 failed with error -5 [ 478.437410][ T4322] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input166 [ 479.026560][ T4322] usb 3-1: USB disconnect, device number 79 [ 479.709883][ T9791] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1671'. [ 480.013413][ T9793] kvm: vcpu 0: requested 3200 ns lapic timer period limited to 200000 ns [ 480.022987][ T9793] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 481.254663][ T9789] C: renamed from team_slave_0 [ 481.272535][ T9789] netlink: 'syz.3.1670': attribute type 2 has an invalid length. [ 481.297204][ T9789] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1670'. [ 481.323253][ T9789] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 481.721381][ T9814] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1677'. [ 482.005099][ T9817] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 482.128153][ T9823] tipc: Enabling of bearer rejected, failed to enable media [ 482.342749][ T9827] 8021q: adding VLAN 0 to HW filter on device bond3 [ 482.405707][ T9832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1679'. [ 482.436648][ T9832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1679'. [ 482.476178][ T9832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.515710][ T9832] bond3: (slave bond0): making interface the new active one [ 482.525154][ T9832] bond3: (slave bond0): Enslaving as an active interface with an up link [ 482.535669][ T9829] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1680'. [ 482.557252][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 482.565017][ T4318] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 482.578112][ T7] usb 2-1: new full-speed USB device number 95 using dummy_hcd [ 482.789773][ T4318] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 482.840995][ T4318] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 482.860894][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 482.908051][ T7] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 482.931190][ T4318] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 482.948423][ T7] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 482.985575][ T4318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.001913][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.011837][ T4318] usb 5-1: Product: syz [ 483.016329][ T4318] usb 5-1: Manufacturer: syz [ 483.036868][ T7] usb 2-1: config 0 descriptor?? [ 483.046114][ T4318] usb 5-1: SerialNumber: syz [ 483.069734][ T7] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 483.076598][ T4318] usb 5-1: config 0 descriptor?? [ 483.092250][ T4318] hub 5-1:0.0: bad descriptor, ignoring hub [ 483.104398][ T7] dvb-usb: bulk message failed: -22 (3/0) [ 483.120817][ T4318] hub: probe of 5-1:0.0 failed with error -5 [ 483.138828][ T7] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 483.154835][ T4318] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input167 [ 483.167029][ T7] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 483.187977][ T7] usb 2-1: media controller created [ 483.220906][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 483.254098][ T9846] device syzkaller0 entered promiscuous mode [ 483.262749][ T9829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.268436][ T7] dvb-usb: bulk message failed: -22 (6/0) [ 483.308255][ T9829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.324043][ T7] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 483.347705][ T9829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.364503][ T7] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input168 [ 483.392869][ T9829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.548636][ T7] dvb-usb: schedule remote query interval to 150 msecs. [ 483.576680][ T7] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 483.585659][ T9437] usb 5-1: USB disconnect, device number 68 [ 483.627048][ T7] usb 2-1: USB disconnect, device number 95 [ 483.701787][ T7] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 486.944477][ T9857] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 486.960956][ T9862] device syzkaller1 entered promiscuous mode [ 487.373521][ T9885] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1692'. [ 487.423122][ T9857] infiniband syz2: set down [ 487.451402][ T9857] infiniband syz2: added bond_slave_0 [ 487.474509][ T9857] rdma_rxe: unable to create cq [ 487.520285][ T9857] infiniband syz2: Couldn't create ib_mad CQ [ 487.549308][ T9857] infiniband syz2: Couldn't open port 1 [ 487.667730][ T9888] device macvlan2 entered promiscuous mode [ 487.680661][ T9888] device bond3 entered promiscuous mode [ 487.692295][ T9888] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 487.740691][ T9888] device bond3 left promiscuous mode [ 487.770595][ T9857] RDS/IB: syz2: added [ 487.775463][ T9857] smc: adding ib device syz2 with port count 1 [ 487.886420][ T9857] smc: ib device syz2 port 1 has pnetid [ 487.918375][ T9887] tipc: Enabled bearer , priority 0 [ 487.979418][ T9903] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1696'. [ 488.239743][ T9886] tipc: Disabling bearer [ 488.877962][ T9437] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 489.083531][ T9437] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 489.124793][ T9437] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 489.178443][ T9437] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 489.217505][ T9437] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.253610][ T9437] usb 2-1: Product: syz [ 489.280284][ T9437] usb 2-1: Manufacturer: syz [ 489.296102][ T9437] usb 2-1: SerialNumber: syz [ 489.334177][ T9437] usb 2-1: config 0 descriptor?? [ 489.364123][ T9437] hub 2-1:0.0: bad descriptor, ignoring hub [ 489.384816][ T9437] hub: probe of 2-1:0.0 failed with error -5 [ 489.432897][ T9437] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input169 [ 489.687368][ T9919] device syzkaller0 entered promiscuous mode [ 489.798422][ T7] usb 2-1: USB disconnect, device number 96 [ 493.456911][ T9946] device syzkaller0 entered promiscuous mode [ 493.487109][ T9934] device syzkaller1 entered promiscuous mode [ 496.721186][ T9970] netlink: 762 bytes leftover after parsing attributes in process `syz.3.1710'. [ 496.736349][ T9970] bridge: RTM_NEWNEIGH with unconfigured vlan 149 on bridge0 [ 496.745588][ T9973] tipc: Enabled bearer , priority 0 [ 496.767403][ T9956] tipc: Disabling bearer [ 497.047596][ T9986] device syzkaller0 entered promiscuous mode [ 497.663863][ T4322] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 497.876321][ T4322] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 497.927371][ T4322] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 497.971397][ T4322] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 498.006131][ T4322] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.033234][ T4322] usb 5-1: Product: syz [ 498.046456][T10012] netlink: 'syz.3.1722': attribute type 29 has an invalid length. [ 498.057266][ T4322] usb 5-1: Manufacturer: syz [ 498.071741][ T4322] usb 5-1: SerialNumber: syz [ 498.108827][ T4322] usb 5-1: config 0 descriptor?? [ 498.137211][ T4322] hub 5-1:0.0: bad descriptor, ignoring hub [ 498.151581][T10008] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1721'. [ 498.173788][ T4322] hub: probe of 5-1:0.0 failed with error -5 [ 498.180117][T10012] netlink: 'syz.3.1722': attribute type 29 has an invalid length. [ 498.199505][T10013] netlink: 'syz.3.1722': attribute type 29 has an invalid length. [ 498.207738][ T4322] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input170 [ 498.251028][T10014] netlink: 'syz.3.1722': attribute type 29 has an invalid length. [ 498.378003][ T126] usb 2-1: new full-speed USB device number 97 using dummy_hcd [ 498.604112][ T126] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 498.625732][ T126] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 498.637289][ T126] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 498.648462][ T126] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.680857][ T126] usb 2-1: config 0 descriptor?? [ 498.701985][T10024] tipc: Enabled bearer , priority 0 [ 498.721191][ T126] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 498.729907][ T126] dvb-usb: bulk message failed: -22 (3/0) [ 498.747603][ T126] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 498.773358][T10023] tipc: Disabling bearer [ 498.789927][ T126] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 498.797732][ T126] usb 2-1: media controller created [ 498.810753][ T126] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 498.864424][ T126] dvb-usb: bulk message failed: -22 (6/0) [ 498.898869][ T126] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 498.912063][T10008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.948979][T10008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.980331][ T126] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input171 [ 498.987151][T10026] device syzkaller0 entered promiscuous mode [ 499.030436][ T126] dvb-usb: schedule remote query interval to 150 msecs. [ 499.039577][ T126] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 499.122936][T10010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.142799][T10010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.198303][ T126] dvb-usb: bulk message failed: -22 (1/0) [ 499.207612][ T126] dvb-usb: error while querying for an remote control event. [ 499.378443][ T126] dvb-usb: bulk message failed: -22 (1/0) [ 499.385497][ T126] dvb-usb: error while querying for an remote control event. [ 499.598453][ T126] dvb-usb: bulk message failed: -22 (1/0) [ 499.605497][ T126] dvb-usb: error while querying for an remote control event. [ 499.838186][ T126] dvb-usb: bulk message failed: -22 (1/0) [ 499.845229][ T126] dvb-usb: error while querying for an remote control event. [ 500.020641][T10049] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1736'. [ 500.031580][ T126] dvb-usb: bulk message failed: -22 (1/0) [ 500.038621][ T126] dvb-usb: error while querying for an remote control event. [ 500.208086][ T126] dvb-usb: bulk message failed: -22 (1/0) [ 500.218897][ T126] dvb-usb: error while querying for an remote control event. [ 500.408037][ T126] dvb-usb: bulk message failed: -22 (1/0) [ 500.415054][ T126] dvb-usb: error while querying for an remote control event. [ 500.638043][ T126] dvb-usb: bulk message failed: -22 (1/0) [ 500.644978][ T126] dvb-usb: error while querying for an remote control event. [ 500.848092][ T126] dvb-usb: bulk message failed: -22 (1/0) [ 500.855045][ T126] dvb-usb: error while querying for an remote control event. [ 501.048088][ T126] dvb-usb: bulk message failed: -22 (1/0) [ 501.055039][ T126] dvb-usb: error while querying for an remote control event. [ 501.278016][ T126] dvb-usb: bulk message failed: -22 (1/0) [ 501.285629][ T126] dvb-usb: error while querying for an remote control event. [ 501.478078][ T126] dvb-usb: bulk message failed: -22 (1/0) [ 501.485227][ T126] dvb-usb: error while querying for an remote control event. [ 501.572948][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.580934][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.668043][ T126] dvb-usb: bulk message failed: -22 (1/0) [ 501.675166][ T126] dvb-usb: error while querying for an remote control event. [ 501.868325][ T126] dvb-usb: bulk message failed: -22 (1/0) [ 501.875574][ T126] dvb-usb: error while querying for an remote control event. [ 502.078136][ T126] dvb-usb: bulk message failed: -22 (1/0) [ 502.085396][ T126] dvb-usb: error while querying for an remote control event. [ 502.268075][ T4323] dvb-usb: bulk message failed: -22 (1/0) [ 502.275227][ T4323] dvb-usb: error while querying for an remote control event. [ 502.468099][ T4323] dvb-usb: bulk message failed: -22 (1/0) [ 502.475307][ T4323] dvb-usb: error while querying for an remote control event. [ 502.614048][T10067] tipc: Enabled bearer , priority 0 [ 502.645377][T10055] tipc: Disabling bearer [ 502.668182][ T126] dvb-usb: bulk message failed: -22 (1/0) [ 502.675500][ T126] dvb-usb: error while querying for an remote control event. [ 502.722174][ T4322] usb 2-1: USB disconnect, device number 97 [ 502.788843][ T4322] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 502.797636][ T7] usb 5-1: USB disconnect, device number 69 [ 503.034616][T10085] device syzkaller0 entered promiscuous mode [ 503.918290][ T4323] usb 1-1: new full-speed USB device number 84 using dummy_hcd [ 504.172833][ T4323] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 504.199053][ T4323] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 504.303723][ T4323] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 504.348771][ T4323] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.379449][ T4323] usb 1-1: Product: syz [ 504.384526][ T4323] usb 1-1: Manufacturer: syz [ 504.445610][ T4323] usb 1-1: SerialNumber: syz [ 504.467791][ T4323] usb 1-1: config 0 descriptor?? [ 504.494425][ T4323] hub 1-1:0.0: bad descriptor, ignoring hub [ 504.510844][ T4323] hub: probe of 1-1:0.0 failed with error -5 [ 504.524779][ T4323] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input172 [ 504.758349][ T126] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 504.927511][T10147] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1750'. [ 504.968138][ T126] usb 2-1: Using ep0 maxpacket: 32 [ 504.970316][ T4322] usb 1-1: USB disconnect, device number 84 [ 504.977277][ T126] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.014244][ T126] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.026178][ T126] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 505.045936][ T126] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.058842][ T126] usb 2-1: config 0 descriptor?? [ 505.091024][ T126] hub 2-1:0.0: USB hub found [ 505.136007][T10151] tipc: Enabled bearer , priority 0 [ 505.157030][T10150] tipc: Disabling bearer [ 505.218077][ T7] usb 4-1: new full-speed USB device number 95 using dummy_hcd [ 505.282264][ T126] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 505.420064][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 505.439748][ T7] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 505.473231][ T7] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 505.494218][T10157] netlink: 'syz.2.1755': attribute type 1 has an invalid length. [ 505.504772][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.519053][T10157] netlink: 'syz.2.1755': attribute type 2 has an invalid length. [ 505.533203][ T7] usb 4-1: config 0 descriptor?? [ 505.554707][ T7] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 505.581814][ T7] dvb-usb: bulk message failed: -22 (3/0) [ 505.604040][ T7] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 505.657080][ T7] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 505.705524][ T7] usb 4-1: media controller created [ 505.712790][ T126] hid-generic 0003:046D:C31C.0025: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 505.743102][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 505.754595][T10147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.779633][T10147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.812991][ T7] dvb-usb: bulk message failed: -22 (6/0) [ 505.837033][ T7] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 505.896287][ T7] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input173 [ 505.896620][T10167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.956670][ T7] dvb-usb: schedule remote query interval to 150 msecs. [ 505.984119][ T7] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 506.013048][T10167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.078411][ T9437] usb 2-1: USB disconnect, device number 98 [ 506.138093][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 506.144184][ T7] dvb-usb: error while querying for an remote control event. [ 506.324123][T10168] fido_id[10168]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 506.330138][ T9437] dvb-usb: bulk message failed: -22 (1/0) [ 506.353020][ T9437] dvb-usb: error while querying for an remote control event. [ 506.416537][T10173] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1758'. [ 506.557960][ T9437] dvb-usb: bulk message failed: -22 (1/0) [ 506.563769][ T9437] dvb-usb: error while querying for an remote control event. [ 506.768296][ T9437] dvb-usb: bulk message failed: -22 (1/0) [ 506.776469][ T9437] dvb-usb: error while querying for an remote control event. [ 506.917440][T10176] device syzkaller0 entered promiscuous mode [ 506.988093][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 506.995083][ T7] dvb-usb: error while querying for an remote control event. [ 507.189021][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 507.197318][ T7] dvb-usb: error while querying for an remote control event. [ 507.378208][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 507.384186][ T7] dvb-usb: error while querying for an remote control event. [ 507.462793][T10181] device syzkaller0 entered promiscuous mode [ 507.578133][ T9437] dvb-usb: bulk message failed: -22 (1/0) [ 507.584307][ T9437] dvb-usb: error while querying for an remote control event. [ 507.768436][ T9437] dvb-usb: bulk message failed: -22 (1/0) [ 507.786442][ T9437] dvb-usb: error while querying for an remote control event. [ 507.988318][ T9437] dvb-usb: bulk message failed: -22 (1/0) [ 507.994214][ T9437] dvb-usb: error while querying for an remote control event. [ 508.025894][T10183] device syzkaller0 entered promiscuous mode [ 508.043522][ T9437] usb 4-1: USB disconnect, device number 95 [ 508.080839][ T9437] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 508.597956][ T9437] usb 4-1: new full-speed USB device number 96 using dummy_hcd [ 508.817385][ T9437] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 508.865160][ T9437] usb 4-1: config 0 has no interfaces? [ 508.901518][ T9437] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 508.932572][ T9437] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.976786][ T9437] usb 4-1: config 0 descriptor?? [ 509.202398][T10190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.228772][T10190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.304500][T10200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.335379][T10200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.418132][ T4322] usb 1-1: new full-speed USB device number 85 using dummy_hcd [ 509.620940][ T4322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 509.637895][ T4322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 509.658454][ T4322] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 509.674053][ T4322] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.682758][ T4322] usb 1-1: Product: syz [ 509.687073][ T4322] usb 1-1: Manufacturer: syz [ 509.692193][ T4322] usb 1-1: SerialNumber: syz [ 509.707331][ T4322] usb 1-1: config 0 descriptor?? [ 509.717544][ T4322] hub 1-1:0.0: bad descriptor, ignoring hub [ 509.724034][ T4322] hub: probe of 1-1:0.0 failed with error -5 [ 509.741624][ T4322] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input174 [ 511.814858][ T9437] usb 4-1: USB disconnect, device number 96 [ 512.059807][ T4322] usb 1-1: USB disconnect, device number 85 [ 512.340397][T10215] device syzkaller0 entered promiscuous mode [ 512.488429][ T4323] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 512.620999][T10217] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1774'. [ 512.632028][T10220] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1775'. [ 512.698232][ T4323] usb 2-1: Using ep0 maxpacket: 32 [ 512.714270][ T4323] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.733668][ T4323] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.744682][ T4323] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 512.764237][ T4323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.811725][ T4323] usb 2-1: config 0 descriptor?? [ 512.816958][T10225] device macvlan2 entered promiscuous mode [ 512.822702][T10225] device bond4 entered promiscuous mode [ 512.831193][T10225] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 512.843774][T10225] device bond4 left promiscuous mode [ 512.889684][ T4323] hub 2-1:0.0: USB hub found [ 512.907947][ T9437] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 513.082497][ T4323] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 513.101232][ T9437] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 513.132692][ T9437] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 513.189157][ T9437] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 513.222946][ T9437] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.250700][ T9437] usb 5-1: config 0 descriptor?? [ 513.284332][ T9437] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 513.317989][ T9437] dvb-usb: bulk message failed: -22 (3/0) [ 513.344936][ T9437] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 513.354240][ T9437] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 513.362024][ T9437] usb 5-1: media controller created [ 513.369375][ T9437] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 513.399080][ T9437] dvb-usb: bulk message failed: -22 (6/0) [ 513.405070][ T9437] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 513.447420][ T9437] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input175 [ 513.471121][T10217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.524410][T10217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.538486][ T9437] dvb-usb: schedule remote query interval to 150 msecs. [ 513.538573][ T4323] hid-generic 0003:046D:C31C.0026: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 513.573172][ T9437] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 513.619411][T10219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.688718][T10219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.727988][ T9437] dvb-usb: bulk message failed: -22 (1/0) [ 513.734188][ T9437] dvb-usb: error while querying for an remote control event. [ 513.743825][T10234] device syzkaller0 entered promiscuous mode [ 513.784474][ T4322] usb 5-1: USB disconnect, device number 70 [ 513.845010][ T4322] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 513.948621][ T4318] usb 2-1: USB disconnect, device number 99 [ 513.999887][T10242] fido_id[10242]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 514.048246][ T7] usb 4-1: new full-speed USB device number 97 using dummy_hcd [ 514.271232][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 514.290558][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 514.330231][ T7] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 514.339913][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.348659][ T7] usb 4-1: Product: syz [ 514.353065][ T7] usb 4-1: Manufacturer: syz [ 514.357681][ T7] usb 4-1: SerialNumber: syz [ 514.373537][ T7] usb 4-1: config 0 descriptor?? [ 514.404317][ T7] hub 4-1:0.0: bad descriptor, ignoring hub [ 514.410480][ T7] hub: probe of 4-1:0.0 failed with error -5 [ 514.429805][ T7] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input176 [ 514.828388][ T7] usb 4-1: USB disconnect, device number 97 [ 514.998248][T10262] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1785'. [ 518.937104][T10281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1787'. [ 519.478259][ T7] usb 1-1: new full-speed USB device number 87 using dummy_hcd [ 519.680358][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 519.701819][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 519.730749][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 519.764815][ T7] usb 1-1: New USB device found, idVendor=0525, idProduct=aea1, bcdDevice= 0.1c [ 519.845569][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.863973][ T7] usb 1-1: Product: syz [ 519.877031][ T7] usb 1-1: Manufacturer: syz [ 519.889158][ T7] usb 1-1: SerialNumber: syz [ 519.914434][ T4318] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 519.924701][T10284] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 519.964432][ T7] cdc_mbim 1-1:1.0: skipping garbage [ 519.995862][ T7] usb 1-1: selecting invalid altsetting 1 [ 520.138322][ T4318] usb 2-1: Using ep0 maxpacket: 32 [ 520.150637][ T4318] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.222229][ T4318] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.289590][ T4318] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 520.362266][ T4318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.405427][T10304] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1797'. [ 520.436059][ T4318] usb 2-1: config 0 descriptor?? [ 520.473117][ T4318] hub 2-1:0.0: USB hub found [ 520.482238][ T7] cdc_mbim 1-1:1.0: failed GET_NTB_PARAMETERS [ 520.500514][ T7] cdc_mbim 1-1:1.0: bind() failure [ 520.515156][ T7] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 520.522458][ T7] cdc_ncm 1-1:1.1: bind() failure [ 520.553409][ T7] usb 1-1: USB disconnect, device number 87 [ 520.661955][ T4318] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 521.025481][T10309] device syzkaller0 entered promiscuous mode [ 521.070403][ T4318] hid-generic 0003:046D:C31C.0027: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 521.083656][T10308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1798'. [ 521.458408][ T4322] usb 2-1: USB disconnect, device number 100 [ 521.677732][T10312] fido_id[10312]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 524.568093][ T4323] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 524.788093][ T4323] usb 2-1: Using ep0 maxpacket: 32 [ 524.797669][ T4323] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.828304][ T4323] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 524.838894][ T4323] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 524.848784][ T4323] usb 2-1: Product: syz [ 524.853675][ T4323] usb 2-1: Manufacturer: syz [ 524.901876][ T4323] hub 2-1:4.0: bad descriptor, ignoring hub [ 524.909315][ T4323] hub: probe of 2-1:4.0 failed with error -5 [ 524.923174][ T4323] usbhid 2-1:4.0: couldn't find an input interrupt endpoint [ 526.104105][T10370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1811'. [ 526.188167][ T4322] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 526.423137][ T4322] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 526.444139][ T4322] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 526.462469][ T4322] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 526.490774][ T4322] usb 4-1: New USB device found, idVendor=0525, idProduct=aea1, bcdDevice= 0.1c [ 526.504842][ T4322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.514644][ T4322] usb 4-1: Product: syz [ 526.523828][ T4322] usb 4-1: Manufacturer: syz [ 526.530210][ T4322] usb 4-1: SerialNumber: syz [ 526.539448][T10368] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 526.553582][ T4322] cdc_mbim 4-1:1.0: skipping garbage [ 526.563941][ T4322] usb 4-1: selecting invalid altsetting 1 [ 526.986852][ T4322] cdc_mbim 4-1:1.0: failed GET_NTB_PARAMETERS [ 526.997317][ T4322] cdc_mbim 4-1:1.0: bind() failure [ 527.006903][ T4322] cdc_ncm 4-1:1.1: skipping garbage [ 527.013394][ T4322] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 527.021995][ T4322] cdc_ncm 4-1:1.1: bind() failure [ 527.043240][ T4322] usb 4-1: USB disconnect, device number 98 [ 527.480441][T10392] device syzkaller0 entered promiscuous mode [ 527.508187][ T4322] usb 2-1: USB disconnect, device number 101 [ 528.024491][T10411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1825'. [ 529.183277][T10441] device syzkaller0 entered promiscuous mode [ 529.458271][ T4323] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 529.674940][T10452] device syzkaller0 entered promiscuous mode [ 529.682011][ T4323] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 529.706925][ T4323] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 529.742120][ T4323] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 529.807362][ T4323] usb 5-1: New USB device found, idVendor=0525, idProduct=aea1, bcdDevice= 0.1c [ 529.849105][ T4323] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.898161][ T4323] usb 5-1: Product: syz [ 529.903240][ T4323] usb 5-1: Manufacturer: syz [ 529.919040][ T4323] usb 5-1: SerialNumber: syz [ 529.942868][T10434] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 529.966280][ T4323] cdc_mbim 5-1:1.0: skipping garbage [ 529.988107][ T4323] usb 5-1: selecting invalid altsetting 1 [ 530.372160][ T4323] cdc_mbim 5-1:1.0: failed GET_NTB_PARAMETERS [ 530.398154][ T4323] cdc_mbim 5-1:1.0: bind() failure [ 530.420561][ T4323] cdc_ncm 5-1:1.1: skipping garbage [ 530.426762][ T4323] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 530.438361][ T4323] cdc_ncm 5-1:1.1: bind() failure [ 530.448354][ T4323] usb 5-1: USB disconnect, device number 71 [ 530.599752][T10470] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1844'. [ 531.297425][T10489] device syzkaller0 entered promiscuous mode [ 531.705568][T10493] device syzkaller0 entered promiscuous mode [ 532.031648][T10435] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 534.258056][ T7] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 534.450739][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 534.491851][ T7] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 534.569720][ T7] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 534.653209][ T7] usb 5-1: New USB device found, idVendor=0525, idProduct=aea1, bcdDevice= 0.1c [ 534.702629][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.741259][ T7] usb 5-1: Product: syz [ 534.775468][ T7] usb 5-1: Manufacturer: syz [ 534.815638][ T7] usb 5-1: SerialNumber: syz [ 534.840455][T10533] device syzkaller0 entered promiscuous mode [ 534.881215][T10524] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 534.910886][ T7] cdc_mbim 5-1:1.0: skipping garbage [ 534.916238][ T7] usb 5-1: selecting invalid altsetting 1 [ 535.282015][T10538] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1863'. [ 535.333065][ T7] cdc_mbim 5-1:1.0: failed GET_NTB_PARAMETERS [ 535.347952][ T7] cdc_mbim 5-1:1.0: bind() failure [ 535.375157][ T7] cdc_ncm 5-1:1.1: skipping garbage [ 535.398991][ T7] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 535.436348][ T7] cdc_ncm 5-1:1.1: bind() failure [ 535.497260][ T7] usb 5-1: USB disconnect, device number 72 [ 542.007512][T10613] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1880'. [ 542.455663][ T4323] usb 2-1: new full-speed USB device number 102 using dummy_hcd [ 542.671316][ T4323] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 542.719849][ T4323] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 542.824638][ T4323] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 542.914361][ T4323] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 542.993529][ T4323] usb 2-1: New USB device found, idVendor=0525, idProduct=aea1, bcdDevice= 0.1c [ 543.064449][ T4323] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.104263][ T4323] usb 2-1: Product: syz [ 543.138046][ T4323] usb 2-1: Manufacturer: syz [ 543.172351][ T4323] usb 2-1: SerialNumber: syz [ 543.222894][T10620] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 543.261316][ T4323] cdc_mbim 2-1:1.0: skipping garbage [ 543.267765][ T4323] usb 2-1: selecting invalid altsetting 1 [ 543.668316][ T4323] cdc_mbim 2-1:1.0: failed GET_NTB_PARAMETERS [ 543.681668][ T4323] cdc_mbim 2-1:1.0: bind() failure [ 543.699115][ T4323] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 543.707359][ T4323] cdc_ncm 2-1:1.1: bind() failure [ 543.744038][ T4323] usb 2-1: USB disconnect, device number 102 [ 546.980027][T10664] device syzkaller0 entered promiscuous mode [ 548.963610][T10686] device syzkaller0 entered promiscuous mode [ 549.808124][ T4322] usb 1-1: new full-speed USB device number 88 using dummy_hcd [ 549.999706][ T4322] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 550.024096][ T4322] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 550.053064][ T4322] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 550.108828][ T4322] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 550.168617][ T4322] usb 1-1: New USB device found, idVendor=0525, idProduct=aea1, bcdDevice= 0.1c [ 550.192974][ T4322] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.212031][ T4322] usb 1-1: Product: syz [ 550.216282][ T4322] usb 1-1: Manufacturer: syz [ 550.237697][ T4322] usb 1-1: SerialNumber: syz [ 550.274062][T10695] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 550.293625][ T4322] cdc_mbim 1-1:1.0: skipping garbage [ 550.312647][ T4322] usb 1-1: selecting invalid altsetting 1 [ 550.525789][T10704] device syzkaller0 entered promiscuous mode [ 550.722190][ T4322] cdc_mbim 1-1:1.0: failed GET_NTB_PARAMETERS [ 550.735910][ T4322] cdc_mbim 1-1:1.0: bind() failure [ 550.766521][ T4322] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 550.787679][ T4322] cdc_ncm 1-1:1.1: bind() failure [ 550.835579][ T4322] usb 1-1: USB disconnect, device number 88 [ 556.075638][T10752] device syzkaller0 entered promiscuous mode [ 556.224484][T10759] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1911'. [ 556.683727][T10773] netlink: 'syz.1.1917': attribute type 1 has an invalid length. [ 556.693523][T10773] netlink: 'syz.1.1917': attribute type 2 has an invalid length. [ 557.698354][ T4323] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 557.922132][ T4323] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 557.951657][ T4323] usb 3-1: config 0 has no interface number 0 [ 557.964306][ T4323] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 558.019449][T10787] device syzkaller0 entered promiscuous mode [ 558.046060][ T4323] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 558.100619][ T4323] usb 3-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 558.137266][ T4323] usb 3-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 558.167676][ T4323] usb 3-1: Product: syz [ 558.192568][ T4323] usb 3-1: config 0 descriptor?? [ 558.245788][ T4323] usbhid 3-1:0.1: couldn't find an input interrupt endpoint [ 560.560492][ T4323] usb 3-1: USB disconnect, device number 80 [ 563.011262][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.018592][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.153177][T10842] input: syz1 as /devices/virtual/input/input178 [ 564.796339][T10849] netlink: 'syz.4.1931': attribute type 1 has an invalid length. [ 564.861684][T10849] netlink: 'syz.4.1931': attribute type 2 has an invalid length. [ 568.248062][ T4323] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 568.441661][ T4323] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 568.468083][ T4323] usb 5-1: config 0 has no interface number 0 [ 568.485742][ T4323] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 568.508493][ T4322] usb 2-1: new full-speed USB device number 103 using dummy_hcd [ 568.525457][ T4323] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 568.559624][ T4323] usb 5-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 568.588041][ T4323] usb 5-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 568.613209][ T4323] usb 5-1: Product: syz [ 568.626641][ T4323] usb 5-1: config 0 descriptor?? [ 568.661219][ T4323] usbhid 5-1:0.1: couldn't find an input interrupt endpoint [ 570.019688][T10871] device syzkaller0 entered promiscuous mode [ 570.117601][ T26] audit: type=1326 audit(1779399379.558:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10875 comm="syz.2.1934" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdca99ce59 code=0x7ffc0000 [ 570.178160][ T26] audit: type=1326 audit(1779399379.598:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10875 comm="syz.2.1934" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdca99ce59 code=0x7ffc0000 [ 570.213619][ T4322] usb 2-1: unable to get BOS descriptor or descriptor too short [ 570.231762][ T4322] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 570.238025][ T26] audit: type=1326 audit(1779399379.598:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10875 comm="syz.2.1934" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdca99ce59 code=0x7ffc0000 [ 570.250424][ T4322] usb 2-1: can't read configurations, error -71 [ 570.270157][ T26] audit: type=1326 audit(1779399379.598:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10875 comm="syz.2.1934" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdca99ce59 code=0x7ffc0000 [ 570.270201][ T26] audit: type=1326 audit(1779399379.598:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10875 comm="syz.2.1934" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efdca99ce59 code=0x7ffc0000 [ 570.270237][ T26] audit: type=1326 audit(1779399379.608:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10875 comm="syz.2.1934" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdca99ce59 code=0x7ffc0000 [ 570.270272][ T26] audit: type=1326 audit(1779399379.608:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10875 comm="syz.2.1934" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdca99ce59 code=0x7ffc0000 [ 570.384248][ T26] audit: type=1326 audit(1779399379.608:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10875 comm="syz.2.1934" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdca99ce59 code=0x7ffc0000 [ 570.418063][ T26] audit: type=1326 audit(1779399379.608:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10875 comm="syz.2.1934" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdca99ce59 code=0x7ffc0000 [ 570.444557][ T26] audit: type=1326 audit(1779399379.608:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10875 comm="syz.2.1934" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7efdca99ce59 code=0x7ffc0000 [ 570.495102][T10877] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1934'. [ 571.021096][ T7] usb 5-1: USB disconnect, device number 73 [ 571.710540][ T4322] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 571.935879][ T4322] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 571.947500][ T4322] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.961649][ T4322] usb 5-1: Product: syz [ 571.965874][ T4322] usb 5-1: Manufacturer: syz [ 571.985498][ T4322] usb 5-1: SerialNumber: syz [ 572.208813][ T4322] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 572.251886][ T4322] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 572.278671][ T4322] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 572.290654][ T4322] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 572.337157][ T4322] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 572.374396][ T4322] lan78xx: probe of 5-1:1.0 failed with error -71 [ 572.395373][ T4322] usb 5-1: USB disconnect, device number 74 [ 573.228977][T10898] netlink: 'syz.4.1945': attribute type 1 has an invalid length. [ 573.266934][T10898] netlink: 'syz.4.1945': attribute type 2 has an invalid length. [ 573.613890][T10901] ieee802154 phy0 wpan0: encryption failed: -22 [ 575.466076][T10922] [ 575.468476][T10922] ====================================================== [ 575.475595][T10922] WARNING: possible circular locking dependency detected [ 575.482627][T10922] syzkaller #0 Not tainted [ 575.487052][T10922] ------------------------------------------------------ [ 575.494076][T10922] syz.2.1950/10922 is trying to acquire lock: [ 575.500148][T10922] ffff88801cf61058 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x60 [ 575.510189][T10922] [ 575.510189][T10922] but task is already holding lock: [ 575.517565][T10922] ffff88802fc5ce50 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 575.528510][T10922] [ 575.528510][T10922] which lock already depends on the new lock. [ 575.528510][T10922] [ 575.539015][T10922] [ 575.539015][T10922] the existing dependency chain (in reverse order) is: [ 575.548120][T10922] [ 575.548120][T10922] -> #1 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}: [ 575.556835][T10922] down_write+0x36/0x60 [ 575.561604][T10922] process_measurement+0x3a2/0x1c30 [ 575.567366][T10922] ima_file_mmap+0x102/0x150 [ 575.572482][T10922] __se_sys_remap_file_pages+0x559/0x7b0 [ 575.578659][T10922] do_syscall_64+0x4c/0xa0 [ 575.583637][T10922] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 575.590096][T10922] [ 575.590096][T10922] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 575.597764][T10922] __lock_acquire+0x2d07/0x7d10 [ 575.603619][T10922] lock_acquire+0x1bb/0x4a0 [ 575.608659][T10922] down_read_killable+0x4c/0x340 [ 575.614143][T10922] mmap_read_lock_killable+0x1d/0x60 [ 575.619959][T10922] lock_mm_and_find_vma+0x2b1/0x2f0 [ 575.625683][T10922] do_user_addr_fault+0x2db/0xb10 [ 575.631255][T10922] exc_page_fault+0x60/0x100 [ 575.636506][T10922] asm_exc_page_fault+0x22/0x30 [ 575.641891][T10922] fault_in_readable+0x13e/0x1f0 [ 575.647427][T10922] fault_in_iov_iter_readable+0xbb/0x2e0 [ 575.653643][T10922] generic_perform_write+0x1f1/0x5c0 [ 575.659468][T10922] __generic_file_write_iter+0x148/0x2a0 [ 575.665639][T10922] generic_file_write_iter+0xab/0x2e0 [ 575.671607][T10922] vfs_write+0x4b1/0xa30 [ 575.676426][T10922] ksys_write+0x14c/0x250 [ 575.681299][T10922] do_syscall_64+0x4c/0xa0 [ 575.686257][T10922] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 575.692695][T10922] [ 575.692695][T10922] other info that might help us debug this: [ 575.692695][T10922] [ 575.702950][T10922] Possible unsafe locking scenario: [ 575.702950][T10922] [ 575.710420][T10922] CPU0 CPU1 [ 575.715808][T10922] ---- ---- [ 575.721188][T10922] lock(&sb->s_type->i_mutex_key#13); [ 575.726690][T10922] lock(&mm->mmap_lock); [ 575.733554][T10922] lock(&sb->s_type->i_mutex_key#13); [ 575.741561][T10922] lock(&mm->mmap_lock); [ 575.745902][T10922] [ 575.745902][T10922] *** DEADLOCK *** [ 575.745902][T10922] [ 575.754051][T10922] 3 locks held by syz.2.1950/10922: [ 575.759259][T10922] #0: ffff88807bd3afe8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 575.768609][T10922] #1: ffff8880295b2460 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x26b/0xa30 [ 575.777537][T10922] #2: ffff88802fc5ce50 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 575.788907][T10922] [ 575.788907][T10922] stack backtrace: [ 575.794808][T10922] CPU: 0 PID: 10922 Comm: syz.2.1950 Not tainted syzkaller #0 [ 575.802278][T10922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 575.812351][T10922] Call Trace: [ 575.815789][T10922] [ 575.818780][T10922] dump_stack_lvl+0x188/0x24e [ 575.823516][T10922] ? load_image+0x400/0x400 [ 575.828066][T10922] ? show_regs_print_info+0x12/0x12 [ 575.833287][T10922] ? print_circular_bug+0x12b/0x1a0 [ 575.838513][T10922] check_noncircular+0x296/0x330 [ 575.843478][T10922] ? add_chain_block+0x940/0x940 [ 575.848439][T10922] ? lockdep_lock+0xf1/0x1f0 [ 575.853051][T10922] ? _find_first_zero_bit+0xcf/0x100 [ 575.858385][T10922] __lock_acquire+0x2d07/0x7d10 [ 575.863434][T10922] ? verify_lock_unused+0x140/0x140 [ 575.868653][T10922] ? cgroup_rstat_updated+0xd7/0x350 [ 575.873990][T10922] ? verify_lock_unused+0x140/0x140 [ 575.879206][T10922] ? verify_lock_unused+0x140/0x140 [ 575.884425][T10922] ? mark_lock+0x94/0x320 [ 575.888779][T10922] lock_acquire+0x1bb/0x4a0 [ 575.893388][T10922] ? mmap_read_lock_killable+0x1d/0x60 [ 575.898869][T10922] ? read_lock_is_recursive+0x10/0x10 [ 575.904256][T10922] ? cmp_ex_search+0x1a/0x70 [ 575.908873][T10922] ? bsearch+0x8a/0xb0 [ 575.912951][T10922] ? fault_in_readable+0x13e/0x1f0 [ 575.918078][T10922] ? search_extable+0x8c/0xd0 [ 575.922788][T10922] ? trim_init_extable+0x3b0/0x3b0 [ 575.927908][T10922] ? mmap_read_lock_killable+0x1d/0x60 [ 575.933397][T10922] down_read_killable+0x4c/0x340 [ 575.938352][T10922] ? mmap_read_lock_killable+0x1d/0x60 [ 575.943818][T10922] mmap_read_lock_killable+0x1d/0x60 [ 575.949117][T10922] lock_mm_and_find_vma+0x2b1/0x2f0 [ 575.954337][T10922] do_user_addr_fault+0x2db/0xb10 [ 575.959375][T10922] ? _raw_spin_unlock_irq+0x1f/0x40 [ 575.964764][T10922] exc_page_fault+0x60/0x100 [ 575.969376][T10922] asm_exc_page_fault+0x22/0x30 [ 575.974243][T10922] RIP: 0010:fault_in_readable+0x13e/0x1f0 [ 575.980017][T10922] Code: d8 57 c4 ff 4d 89 f4 49 81 cc ff 0f 00 00 4d 89 f7 49 01 dc 49 81 e4 00 f0 ff ff 4d 39 e6 77 44 e8 b7 57 c4 ff 4d 39 e7 74 47 <41> 8a 07 88 44 24 07 49 81 c7 00 10 00 00 4d 39 e7 74 07 e8 9a 57 [ 575.999663][T10922] RSP: 0018:ffffc900048f7ab0 EFLAGS: 00050287 [ 576.005779][T10922] RAX: ffffffff81be2ef9 RBX: 0000000000001000 RCX: 0000000000080000 [ 576.013875][T10922] RDX: ffffc9000d5d7000 RSI: 0000000000014dbe RDI: 0000000000014dbf [ 576.021861][T10922] RBP: 0000000000000000 R08: ffff888072a95940 R09: 0000000000000002 [ 576.029843][T10922] R10: 0000000000000006 R11: 0000000000000002 R12: 00002000000c5000 [ 576.037824][T10922] R13: 0000000000000000 R14: 00002000000c3100 R15: 00002000000c4000 [ 576.045809][T10922] ? fault_in_readable+0x139/0x1f0 [ 576.050947][T10922] fault_in_iov_iter_readable+0xbb/0x2e0 [ 576.056599][T10922] generic_perform_write+0x1f1/0x5c0 [ 576.061906][T10922] ? generic_file_direct_write+0x330/0x330 [ 576.067726][T10922] ? __file_remove_privs+0x5f0/0x5f0 [ 576.073031][T10922] ? rwsem_write_trylock+0x135/0x1c0 [ 576.078337][T10922] ? clear_nonspinnable+0x60/0x60 [ 576.083374][T10922] ? generic_write_checks_count+0x3d9/0x4c0 [ 576.089322][T10922] __generic_file_write_iter+0x148/0x2a0 [ 576.094979][T10922] generic_file_write_iter+0xab/0x2e0 [ 576.100369][T10922] vfs_write+0x4b1/0xa30 [ 576.104634][T10922] ? file_end_write+0x250/0x250 [ 576.109593][T10922] ? __fget_files+0x43d/0x4b0 [ 576.114287][T10922] ? __fdget_pos+0x2ae/0x360 [ 576.118908][T10922] ? ksys_write+0x71/0x250 [ 576.123347][T10922] ksys_write+0x14c/0x250 [ 576.127691][T10922] ? __ia32_sys_read+0x80/0x80 [ 576.132471][T10922] ? lockdep_hardirqs_on+0x94/0x140 [ 576.137686][T10922] do_syscall_64+0x4c/0xa0 [ 576.142117][T10922] ? clear_bhb_loop+0x60/0xb0 [ 576.146806][T10922] ? clear_bhb_loop+0x60/0xb0 [ 576.151512][T10922] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 576.157447][T10922] RIP: 0033:0x7efdca99ce59 [ 576.161874][T10922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 576.181509][T10922] RSP: 002b:00007efdcb867028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 576.189934][T10922] RAX: ffffffffffffffda RBX: 00007efdcac15fa0 RCX: 00007efdca99ce59 [ 576.197924][T10922] RDX: 000000000208e24b RSI: 0000200000000100 RDI: 0000000000000005 [ 576.205909][T10922] RBP: 00007efdcaa32d6f R08: 0000000000000000 R09: 0000000000000000 [ 576.213902][T10922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 576.221898][T10922] R13: 00007efdcac16038 R14: 00007efdcac15fa0 R15: 00007ffe32d9f0d8 [ 576.229887][T10922] [ 576.308062][ T7] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 576.511453][ T7] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 576.529759][ T7] usb 4-1: config 0 has no interface number 0 [ 576.535945][ T7] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.557934][ T7] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 576.560371][ T4323] usb 1-1: new full-speed USB device number 89 using dummy_hcd [ 576.572236][ T7] usb 4-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 576.607895][ T7] usb 4-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 576.616139][ T7] usb 4-1: Product: syz [ 576.630780][ T7] usb 4-1: config 0 descriptor?? [ 576.640189][ T7] usbhid 4-1:0.1: couldn't find an input interrupt endpoint [ 576.666871][T10922] kvm [10920]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xffc7000069f8 [ 576.681725][T10922] kvm [10920]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xffb00000190a [ 576.724504][T10922] kvm [10920]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xff9a000000ca [ 577.160317][ T4323] usb 1-1: unable to get BOS descriptor or descriptor too short [ 577.169648][ T4323] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 577.177545][ T4323] usb 1-1: can't read configurations, error -71 [ 578.271181][ T7] usb 4-1: USB disconnect, device number 99