last executing test programs: 11.996067245s ago: executing program 0 (id=491): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r1, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 11.933090666s ago: executing program 0 (id=492): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) prlimit64(0x0, 0xe, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000680)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}}}, 0xa) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$uac2(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) 10.281960307s ago: executing program 2 (id=496): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ptrace$cont(0x1f, r0, 0x0, 0x7) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newpolicy={0xc4, 0x13, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@sec_ctx={0xc, 0x10, {0x8}}]}, 0xc4}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) readv(r2, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1) syz_open_procfs(0x0, &(0x7f0000001040)='net/nf_conntrack_expect\x00') syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 9.956419925s ago: executing program 2 (id=502): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r4) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xf, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x5, 0x8001, 0xfffffbff}, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r2, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)='\'', 0x14}], 0x1}, 0x4004003) 9.940736035s ago: executing program 3 (id=503): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, 0x0) socket$netlink(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000310000/0x3000)=nil, 0x3000, 0x100000c, 0x2172, r2, 0x70d2000) r3 = syz_open_dev$vim2m(&(0x7f0000000400), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x6, 0xfffffffe, 0x3631564e, 0x8, 0x2, 0x6, 0x4, 0x10, 0x0, 0x0, 0x2, 0x6}}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000010027bda887b752df2500000000", @ANYRES32=0x0, @ANYBLOB="000000001740000014001680100001800c000900030000800800000014000300626f6e64300000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x20040801}, 0x2c040004) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x208402, 0x0, 0x0, 0x0, 0x0) write$sysctl(r5, &(0x7f0000000580)='1\x00', 0x2) close(0xffffffffffffffff) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="120119feffffff406a0563000000000000010902"], 0x0) write$sysctl(r5, &(0x7f00000000c0)='2\x00', 0x2) 9.806477479s ago: executing program 2 (id=506): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) prlimit64(0x0, 0xe, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000680)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}}}, 0xa) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$uac2(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000140)={&(0x7f0000001680)=[{0x7, 0x0, 0x1, &(0x7f00000001c0)="ce"}], 0x1}) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000007c0)={0x24, &(0x7f0000000580)={0x40, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setpgid(0x0, 0x0) 8.752078474s ago: executing program 0 (id=512): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ptrace$cont(0x1f, r0, 0x0, 0x7) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newpolicy={0xc4, 0x13, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@sec_ctx={0xc, 0x10, {0x8}}]}, 0xc4}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) readv(r2, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1) syz_open_procfs(0x0, &(0x7f0000001040)='net/nf_conntrack_expect\x00') syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 8.356400194s ago: executing program 0 (id=518): r0 = syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x8, 0x90, 0x4a, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x5f467d72, 0x5, 0x9, 0x5}, {0x6, 0x24, 0x1a, 0x8, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x81, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x9, 0x6, 0xde}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x7f, 0xd}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_PTRACER(0x59616d61, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x45, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040351201820001010203010902450002010080fa080b00"], 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0x4, 0xd8f9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000) r3 = openat$vicodec1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_EDID(r3, 0xc0245628, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000200)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket(0x10, 0x803, 0x0) r5 = openat$vcs(0xffffff9c, &(0x7f0000000180), 0xa00, 0x0) connect$pppl2tp(r5, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x4, 0x1, 0x3, 0x1, {0xa, 0x4e23, 0x0, @empty}}}, 0x3a) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) 7.845771217s ago: executing program 1 (id=523): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) prlimit64(0x0, 0xe, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000680)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}}}, 0xa) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$uac2(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) 6.684129565s ago: executing program 3 (id=525): syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r0 = syz_clone(0x40002000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff000000001fa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYBLOB="0000000001000000b70300"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000040), &(0x7f00000000c0)=0x1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000380)={0x18, 0x0, {0x2, @empty, 'hsr0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 5.220086391s ago: executing program 2 (id=530): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x605, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000000906050600000000000000000200000005000100070000000900020073797a3000000000240007800c000180080001407f0000010c000280080001407ffd000108000a40"], 0x4c}}, 0x0) 4.790574942s ago: executing program 1 (id=533): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) close(0x3) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r2) close(0x4) 4.44803065s ago: executing program 1 (id=535): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 4.351339503s ago: executing program 1 (id=536): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, 0x0) socket$netlink(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000310000/0x3000)=nil, 0x3000, 0x100000c, 0x2172, r2, 0x70d2000) r3 = syz_open_dev$vim2m(&(0x7f0000000400), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x6, 0xfffffffe, 0x3631564e, 0x8, 0x2, 0x6, 0x4, 0x10, 0x0, 0x0, 0x2, 0x6}}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000010027bda887b752df2500000000", @ANYRES32=0x0, @ANYBLOB="000000001740000014001680100001800c000900030000800800000014000300626f6e64300000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x20040801}, 0x2c040004) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x208402, 0x0, 0x0, 0x0, 0x0) write$sysctl(r5, &(0x7f0000000580)='1\x00', 0x2) close(0xffffffffffffffff) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="120119feffffff406a0563000000000000010902"], 0x0) write$sysctl(r5, &(0x7f00000000c0)='2\x00', 0x2) 4.133388508s ago: executing program 0 (id=537): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01032757c38d085641a7260000000c00018008"], 0x20}, 0x1, 0x0, 0x0, 0x20000805}, 0x48d4) 3.899133844s ago: executing program 0 (id=538): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="880000000001010400000000141a000002000000240001801400018008000100e000000108000200640101000c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007400000000124001080"], 0x88}}, 0x0) mprotect(&(0x7f00003db000/0x4000)=nil, 0x4000, 0x5) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="002290"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x8000) syz_usb_disconnect(r2) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f00000003c0)={0xc, &(0x7f0000000640)={0x20, 0x21, 0x102, {0x102, 0x31, "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"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44e}}}, &(0x7f0000000280)={0x24, &(0x7f0000000040)={0x20, 0x27, 0x27, "7a8d465d0986d56a50c54ac585d1cda527f2658d010ecea2885859dedcf199872ccdee418c07c0"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x6}, 0x0, &(0x7f0000000500)={0x20, 0x82, 0x3, "fcb041"}, &(0x7f0000000240)={0x20, 0x83, 0x2, "b93c"}, &(0x7f0000000580)={0x20, 0x84, 0x3, "3e3fba"}, &(0x7f00000005c0)={0x20, 0x85, 0x3, "f3e413"}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xc4}}, 0x0) 3.793203517s ago: executing program 3 (id=539): syz_io_uring_setup(0x3b05, &(0x7f0000000140)={0x0, 0x0, 0x13580}, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5e81, &(0x7f0000000240)={0x0, 0x0, 0x13290, 0x1, 0xef}, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x3, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x406, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x3, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x43, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x6, 0x5, 0x6, 0x4, 0xfb, 0x1, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x8000, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x8, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0xfffffffe, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x8, 0xfff, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x2, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x0, 0x2, 0x15c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7b, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3.458615904s ago: executing program 3 (id=541): r0 = socket$can_raw(0x1d, 0x3, 0x1) sched_setscheduler(0xffffffffffffffff, 0x6, &(0x7f0000000240)=0xa) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) io_setup(0x1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000180)={r4, @in6={{0xa, 0x4e24, 0x68, @mcast1, 0xbc}}, 0xa, 0x0, 0x81, 0xfffffffd, 0x17, 0x9}, &(0x7f0000000380)=0x9c) 2.989310906s ago: executing program 4 (id=542): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ptrace$cont(0x1f, r0, 0x0, 0x7) socket$nl_xfrm(0x10, 0x3, 0x6) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) readv(r1, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1) syz_open_procfs(0x0, &(0x7f0000001040)='net/nf_conntrack_expect\x00') syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 2.545045787s ago: executing program 4 (id=543): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r3) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xf, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x5, 0x8001, 0xfffffbff}, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, 0x0, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)='\'', 0x14}], 0x1}, 0x4004003) 1.926597552s ago: executing program 4 (id=544): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) prlimit64(0x0, 0xe, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000680)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}}}, 0xa) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$uac2(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) 1.041310644s ago: executing program 4 (id=545): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) 931.971277ms ago: executing program 4 (id=546): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) close(0x3) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(0xffffffffffffffff) close(0x4) 751.716371ms ago: executing program 2 (id=547): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 604.859645ms ago: executing program 1 (id=548): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = epoll_create(0x7) r4 = socket$xdp(0x2c, 0x3, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r4, &(0x7f00000000c0)={r3, 0xffffffffffffffff, 0x6}) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x3) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) pwritev2(r5, &(0x7f0000000cc0), 0x0, 0xfff, 0xc, 0x4) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r6, 0x25, &(0x7f0000000040)={0x1, 0x0, 0x6, 0x4}) r7 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r7, 0xc0505350, &(0x7f0000000140)={{0x0, 0x1}, {0xf}}) fcntl$lock(r6, 0x24, &(0x7f0000000000)={0x2, 0x0, 0x990, 0xfae}) mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r6, 0x4010e501, 0x0) 530.478767ms ago: executing program 3 (id=549): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x9801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x7) pivot_root(&(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00') 522.019107ms ago: executing program 2 (id=550): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101c01, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x169140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x800000000000006e, 0xfffffffffffffffe, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x80000100, 0x8000000000000001, 0x80000004000080, 0x37ffff, 0x8, 0x3, 0x1, 0x0, 0x8000], 0x8080000, 0x104280}) r3 = eventfd2(0x2, 0x80800) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x6, 0x1, 0x0, r3, 0xa}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) ppoll(&(0x7f0000000080)=[{r4, 0x800}], 0x1, &(0x7f0000000180)={0x0, 0x3938700}, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000200)=0xfffffdf9) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) r6 = fsopen(&(0x7f0000000140)='cgroup\x00', 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r8, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 257.939354ms ago: executing program 4 (id=551): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r1}, &(0x7f0000000080)={'enc=', 'pkcs1', ' hash=', {'md5\x00'}}, 0x0, 0x0) 181.259355ms ago: executing program 3 (id=552): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) prlimit64(0x0, 0xe, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000680)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}}}, 0xa) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$uac2(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000140)={&(0x7f0000001680)=[{0x7, 0x0, 0x1, &(0x7f00000001c0)="ce"}], 0x1}) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000007c0)={0x24, &(0x7f0000000580)={0x40, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=553): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ptrace$cont(0x1f, r0, 0x0, 0x7) socket$nl_xfrm(0x10, 0x3, 0x6) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) readv(r1, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1) syz_open_procfs(0x0, &(0x7f0000001040)='net/nf_conntrack_expect\x00') syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) kernel console output (not intermixed with test programs): 014][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.862358][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.876078][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.895093][ T4198] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.904719][ T4198] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.915210][ T4198] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.925361][ T4198] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.936530][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.945357][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.954262][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.963634][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.973337][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.982327][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.995335][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.006122][ T4187] device veth0_macvtap entered promiscuous mode [ 69.028987][ T4188] device veth0_macvtap entered promiscuous mode [ 69.060756][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.072135][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.079642][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.089132][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.098625][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.107872][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.121328][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.129123][ T4187] device veth1_macvtap entered promiscuous mode [ 69.144557][ T4188] device veth1_macvtap entered promiscuous mode [ 69.162308][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.176650][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.228076][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.244944][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.257868][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.299139][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.308386][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.317902][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.327149][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.338582][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.350988][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.363296][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.393831][ T4190] device veth0_vlan entered promiscuous mode [ 69.409540][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.419415][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.435042][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.454356][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.467384][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.483175][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.496393][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.508023][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.525486][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.533022][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.541925][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.551354][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.559828][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.568408][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.577843][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.587596][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.595769][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.617124][ T1177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.629300][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.642155][ T1177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.654038][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.664566][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.676049][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.687533][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.724427][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.733389][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.743519][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.756679][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.765565][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.778353][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.787283][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.798279][ T4190] device veth1_vlan entered promiscuous mode [ 69.811018][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.819593][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.828316][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.836994][ T4232] Bluetooth: hci1: command 0x040f tx timeout [ 69.844671][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.854584][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.874123][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.917178][ T4232] Bluetooth: hci3: command 0x040f tx timeout [ 69.923809][ T4232] Bluetooth: hci0: command 0x040f tx timeout [ 69.933094][ T4232] Bluetooth: hci2: command 0x040f tx timeout [ 69.939208][ T4232] Bluetooth: hci4: command 0x040f tx timeout [ 69.947327][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.047503][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.059026][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.075405][ T4190] device veth0_macvtap entered promiscuous mode [ 70.086607][ T4190] device veth1_macvtap entered promiscuous mode [ 70.099064][ T1177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.107211][ T4186] device veth0_vlan entered promiscuous mode [ 70.119249][ T1177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.146052][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.159415][ T4267] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 70.178835][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.206561][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.223141][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.236421][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.257260][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.268964][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.308949][ T1262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.321909][ T4186] device veth1_vlan entered promiscuous mode [ 70.328795][ T1262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.360127][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.378064][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.388551][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.405995][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.417367][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.428296][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.453423][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.470524][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.478484][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.505312][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.589324][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.599611][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.624882][ T4186] device veth0_macvtap entered promiscuous mode [ 70.635534][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.647238][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.657455][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.668211][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.679278][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.691003][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.702948][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.727618][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.728581][ T4186] device veth1_macvtap entered promiscuous mode [ 70.750294][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.767737][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.777285][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.787307][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.797482][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.808150][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.824724][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.835214][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.848759][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.857237][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.874454][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.886142][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.930458][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.980190][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.021066][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.048963][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.065034][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.074984][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.091781][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.105308][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.118715][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.143195][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.153308][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.164088][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.174000][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.184534][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.195198][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.205754][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.215709][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.234065][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.249100][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.273821][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.283109][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.289659][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.300919][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.310358][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.322891][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.345428][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.378112][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.394208][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.404413][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.546542][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.570163][ T4278] fuse: root generation should be zero [ 71.604219][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.635854][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.676573][ T1177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.693799][ T1177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.748708][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.814165][ T1262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.842532][ T1262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.851893][ T4288] process 'syz.0.6' launched './file0' with NULL argv: empty string added [ 71.893260][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.911333][ T1262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.919198][ T1262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.925152][ T4234] Bluetooth: hci1: command 0x0419 tx timeout [ 71.933793][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.980332][ T4289] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4'. [ 71.991619][ T4231] Bluetooth: hci4: command 0x0419 tx timeout [ 71.997974][ T4231] Bluetooth: hci2: command 0x0419 tx timeout [ 72.029970][ T4231] Bluetooth: hci0: command 0x0419 tx timeout [ 72.045307][ T4231] Bluetooth: hci3: command 0x0419 tx timeout [ 72.446479][ T4302] sch_tbf: burst 0 is lower than device macvtap0 mtu (1514) ! [ 73.419784][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28e!!! [ 74.757901][ T4234] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 75.160162][ T4234] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.209557][ T4234] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.226194][ T4234] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 75.243540][ T4234] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 75.254008][ T4234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.270077][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.298841][ T4234] usb 2-1: config 0 descriptor?? [ 75.529927][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 75.790684][ T4234] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 75.810218][ T7] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 75.840425][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.869826][ T7] usb 1-1: Product: syz [ 75.877012][ T7] usb 1-1: Manufacturer: syz [ 75.885160][ T4234] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 75.897690][ T7] usb 1-1: SerialNumber: syz [ 75.928589][ T7] usb 1-1: config 0 descriptor?? [ 76.053020][ T4343] usb usb8: usbfs: process 4343 (syz.4.18) did not claim interface 0 before use [ 76.283271][ T4343] sctp: failed to load transform for md5: -2 [ 76.410025][ T7] airspy 1-1:0.0: Board ID: 00 [ 76.415323][ T7] airspy 1-1:0.0: Firmware version: [ 76.429954][ T4234] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 76.710364][ T4234] usb 3-1: Using ep0 maxpacket: 16 [ 76.855349][ T4234] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.885682][ T4234] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 76.927139][ T4234] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 76.938170][ T4234] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 76.948221][ T4234] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 76.969980][ T7] airspy 1-1:0.0: usb_control_msg() failed -71 request 0e [ 77.030534][ T7] airspy 1-1:0.0: Registered as swradio24 [ 77.060117][ T4234] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 77.074881][ T7] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 77.088657][ T4234] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 77.117994][ T4234] usb 3-1: Manufacturer: syz [ 77.148591][ T4234] usb 3-1: config 0 descriptor?? [ 77.159971][ T7] usb 1-1: USB disconnect, device number 2 [ 77.240555][ C1] plantronics 0003:047F:FFFF.0001: usb_submit_urb(ctrl) failed: -1 [ 77.614481][ T4234] rc_core: IR keymap rc-hauppauge not found [ 77.621939][ T4234] Registered IR keymap rc-empty [ 77.627187][ T4234] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 77.663484][ T4234] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 77.705540][ T4234] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 77.719593][ T4234] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input5 [ 77.745165][ T4234] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 77.780695][ T4234] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 77.829944][ T4234] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 77.870105][ T4234] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 77.930081][ T4234] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 77.969939][ T4234] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 78.002481][ T4234] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 78.029533][ T4381] udc-core: couldn't find an available UDC or it's busy [ 78.036712][ T4381] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 78.044892][ T4234] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 78.089897][ T4234] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 78.130813][ T4234] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 78.163915][ T4234] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 78.173397][ T4234] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 78.182050][ T1108] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 78.375030][ T4265] usb 2-1: USB disconnect, device number 2 [ 78.460559][ T1108] usb 1-1: Using ep0 maxpacket: 32 [ 78.569876][ T4265] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 78.591419][ T1108] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 78.599684][ T1108] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 78.613563][ T1108] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 78.624871][ T1108] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 78.639146][ T1108] usb 1-1: config 0 interface 0 has no altsetting 0 [ 78.699917][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 78.840050][ T1108] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 78.849350][ T1108] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 78.857946][ T1108] usb 1-1: Product: syz [ 78.862359][ T1108] usb 1-1: Manufacturer: syz [ 78.867068][ T1108] usb 1-1: SerialNumber: syz [ 78.879806][ T1108] usb 1-1: config 0 descriptor?? [ 78.921726][ T1108] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 78.930522][ T4265] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.944337][ T4265] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 78.953892][ T1108] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 79.050116][ T4265] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 79.059407][ T4265] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 79.067816][ T4265] usb 2-1: SerialNumber: syz [ 79.072856][ T7] usb 5-1: too many endpoints for config 0 interface 0 altsetting 18: 254, using maximum allowed: 30 [ 79.092655][ T7] usb 5-1: config 0 interface 0 altsetting 18 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 79.104065][ T7] usb 5-1: config 0 interface 0 altsetting 18 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 79.115549][ T7] usb 5-1: config 0 interface 0 altsetting 18 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 79.141024][ T4265] usb 2-1: bad CDC descriptors [ 79.163699][ T7] usb 5-1: config 0 interface 0 has no altsetting 0 [ 79.170731][ T7] usb 5-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 79.179839][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.196567][ T7] usb 5-1: config 0 descriptor?? [ 79.207561][ T1108] usb 3-1: USB disconnect, device number 2 [ 79.220233][ T4383] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 79.266535][ T4388] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 79.273288][ T4388] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 79.312368][ T4388] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 79.318866][ T4388] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 79.328345][ T4388] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 79.334940][ T4388] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 79.353322][ T4388] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 79.359812][ T4388] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 79.368280][ T4388] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 79.429386][ T4378] input: syz0 as /devices/virtual/input/input6 [ 79.515686][ T4265] usb 2-1: USB disconnect, device number 3 [ 79.879987][ T4234] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 80.023881][ T4236] usb 1-1: USB disconnect, device number 3 [ 80.047779][ T4236] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 80.120134][ T7] usbhid 5-1:0.0: can't add hid device: -71 [ 80.126176][ T7] usbhid: probe of 5-1:0.0 failed with error -71 [ 80.143868][ T4234] usb 4-1: Using ep0 maxpacket: 16 [ 80.169969][ T7] usb 5-1: USB disconnect, device number 2 [ 80.283708][ T4234] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 80.524107][ T4234] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 80.547186][ T4234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.592349][ T4234] usb 4-1: Product: syz [ 80.627498][ T4234] usb 4-1: Manufacturer: syz [ 80.643270][ T4234] usb 4-1: SerialNumber: syz [ 80.693511][ T4234] usb 4-1: config 0 descriptor?? [ 80.774496][ T4234] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 80.792112][ T4414] netlink: 'syz.2.37': attribute type 1 has an invalid length. [ 80.810713][ T4234] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 80.967270][ T4416] syz.2.38 uses obsolete (PF_INET,SOCK_PACKET) [ 81.019151][ T4416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.38'. [ 81.065241][ T4416] netlink: 284 bytes leftover after parsing attributes in process `syz.2.38'. [ 81.099904][ T4248] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 81.124857][ T4416] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.161949][ T4416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.182218][ T4416] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.189831][ T4416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.346715][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 81.393354][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.409972][ T4234] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 81.436575][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.470129][ T4248] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 81.488848][ T4420] device bridge_slave_0 left promiscuous mode [ 81.508832][ T4248] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 81.523764][ T4420] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.559215][ T4248] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 81.589168][ T4248] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.613748][ T4420] device bridge_slave_1 left promiscuous mode [ 81.640317][ T4410] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 81.649489][ T4420] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.743522][ T4420] bond0: (slave bond_slave_0): Releasing backup interface [ 81.812782][ T4420] bond0: (slave bond_slave_1): Releasing backup interface [ 81.920060][ T4234] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 81.928644][ T4234] em28xx 4-1:0.0: board has no eeprom [ 81.987906][ T4420] team0: Port device team_slave_0 removed [ 82.008546][ T4432] Zero length message leads to an empty skb [ 82.038956][ T4420] team0: Port device team_slave_1 removed [ 82.047163][ T1108] usb 1-1: USB disconnect, device number 4 [ 82.063966][ T4420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.109075][ T4420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.178479][ T4420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.198125][ T4420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.429999][ T4234] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 82.445791][ T4234] em28xx 4-1:0.0: dvb set to bulk mode. [ 82.467587][ T4236] em28xx 4-1:0.0: Binding DVB extension [ 82.897990][ T4444] netlink: 28 bytes leftover after parsing attributes in process `syz.0.43'. [ 83.750887][ T4434] em28xx 4-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 83.797479][ T1108] usb 4-1: USB disconnect, device number 2 [ 83.824952][ T1108] em28xx 4-1:0.0: Disconnecting em28xx [ 83.875298][ T4236] em28xx 4-1:0.0: Registering input extension [ 83.911043][ T1108] em28xx 4-1:0.0: Closing input extension [ 84.005928][ T1108] em28xx 4-1:0.0: Freeing device [ 84.941534][ T4458] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 85.017055][ T4458] bond1: (slave lo): Enslaving as an active interface with an up link [ 85.058968][ T4458] net_ratelimit: 2039 callbacks suppressed [ 85.058986][ T4458] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 85.361785][ T4458] syz.3.46 (4458) used greatest stack depth: 20976 bytes left [ 85.529616][ T4477] syz.4.53 invoked oom-killer: gfp_mask=0x482cc0(GFP_KERNEL_ACCOUNT|__GFP_NOWARN|__GFP_NOMEMALLOC), order=2, oom_score_adj=1000 [ 85.544266][ T4477] CPU: 0 PID: 4477 Comm: syz.4.53 Not tainted syzkaller #0 [ 85.551665][ T4477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 85.561772][ T4477] Call Trace: [ 85.565091][ T4477] [ 85.568057][ T4477] dump_stack_lvl+0x188/0x250 [ 85.572799][ T4477] ? show_regs_print_info+0x20/0x20 [ 85.578046][ T4477] ? load_image+0x410/0x410 [ 85.582626][ T4477] ? local_lock_release+0x170/0x170 [ 85.587867][ T4477] ? __rwlock_init+0x140/0x140 [ 85.592684][ T4477] dump_header+0xd9/0x780 [ 85.597063][ T4477] oom_kill_process+0x20e/0x3d0 [ 85.601962][ T4477] out_of_memory+0xdb2/0x1190 [ 85.606694][ T4477] ? mem_cgroup_out_of_memory+0xbd/0x3b0 [ 85.612366][ T4477] ? mutex_lock_io_nested+0x60/0x60 [ 85.617614][ T4477] ? unregister_oom_notifier+0x20/0x20 [ 85.623125][ T4477] mem_cgroup_out_of_memory+0x2b9/0x3b0 [ 85.628720][ T4477] ? mem_cgroup_oom_trylock+0x210/0x210 [ 85.634324][ T4477] ? do_raw_spin_unlock+0x11d/0x230 [ 85.639571][ T4477] try_charge_memcg+0x1075/0x15b0 [ 85.644655][ T4477] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 85.650505][ T4477] ? rcu_lock_acquire+0x30/0x30 [ 85.655402][ T4477] ? slab_post_alloc_hook+0x4c/0x380 [ 85.660731][ T4477] ? __alloc_skb+0xf4/0x750 [ 85.665265][ T4477] ? sock_alloc_send_pskb+0x87f/0x9a0 [ 85.670689][ T4477] obj_cgroup_charge_pages+0x87/0x190 [ 85.676114][ T4477] ? __memcg_kmem_charge_page+0x380/0x380 [ 85.681899][ T4477] ? rcu_lock_acquire+0x30/0x30 [ 85.686791][ T4477] obj_cgroup_charge+0x19f/0x320 [ 85.691776][ T4477] ? mod_objcg_mlstate+0x2e0/0x2e0 [ 85.696945][ T4477] slab_pre_alloc_hook+0x9d/0xc0 [ 85.701945][ T4477] __kmalloc_node_track_caller+0x68/0x3a0 [ 85.707726][ T4477] ? alloc_skb_with_frags+0xa7/0x720 [ 85.713052][ T4477] ? __alloc_skb+0xf4/0x750 [ 85.717596][ T4477] ? alloc_skb_with_frags+0xa7/0x720 [ 85.722927][ T4477] __alloc_skb+0x22c/0x750 [ 85.727389][ T4477] alloc_skb_with_frags+0xa7/0x720 [ 85.732681][ T4477] sock_alloc_send_pskb+0x87f/0x9a0 [ 85.737961][ T4477] ? sock_kzfree_s+0x50/0x50 [ 85.742597][ T4477] ? __lock_acquire+0x7b50/0x7b50 [ 85.747681][ T4477] unix_stream_sendmsg+0x428/0xc90 [ 85.752837][ T4477] ? unix_stream_sendmsg+0x781/0xc90 [ 85.758178][ T4477] ? unix_show_fdinfo+0xa0/0xa0 [ 85.763064][ T4477] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 85.769528][ T4477] ? apparmor_socket_sendmsg+0x88/0x230 [ 85.775119][ T4477] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 85.780472][ T4477] ? security_socket_sendmsg+0x7c/0xa0 [ 85.785985][ T4477] ? unix_show_fdinfo+0xa0/0xa0 [ 85.790875][ T4477] ____sys_sendmsg+0x5be/0x8f0 [ 85.795701][ T4477] ? __sys_sendmsg_sock+0x30/0x30 [ 85.800782][ T4477] ? import_iovec+0x6f/0xa0 [ 85.805328][ T4477] ___sys_sendmsg+0x236/0x2e0 [ 85.810052][ T4477] ? __sys_sendmsg+0x290/0x290 [ 85.814897][ T4477] __se_sys_sendmsg+0x1b7/0x2a0 [ 85.819807][ T4477] ? __x64_sys_sendmsg+0x80/0x80 [ 85.824788][ T4477] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 85.830869][ T4477] ? lockdep_hardirqs_on+0x94/0x140 [ 85.836115][ T4477] do_syscall_64+0x4c/0xa0 [ 85.840575][ T4477] ? clear_bhb_loop+0x30/0x80 [ 85.845291][ T4477] ? clear_bhb_loop+0x30/0x80 [ 85.850014][ T4477] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.855989][ T4477] RIP: 0033:0x7fb8ebd780d9 [ 85.860444][ T4477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.880088][ T4477] RSP: 002b:00007fb8e9fd0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 85.888554][ T4477] RAX: ffffffffffffffda RBX: 00007fb8ebffffa0 RCX: 00007fb8ebd780d9 [ 85.896571][ T4477] RDX: 0000000000000003 RSI: 0000200000000500 RDI: 0000000000000007 [ 85.904581][ T4477] RBP: 00007fb8ebe0f024 R08: 0000000000000000 R09: 0000000000000000 [ 85.912618][ T4477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.920624][ T4477] R13: 00007fb8ec000038 R14: 00007fb8ebffffa0 R15: 00007ffcbc27bf18 [ 85.928650][ T4477] [ 85.978063][ T4477] memory: usage 92kB, limit 96kB, failcnt 37 [ 85.986406][ T4477] memory+swap: usage 92kB, limit 9007199254740988kB, failcnt 0 [ 86.016906][ T4477] kmem: usage 92kB, limit 9007199254740988kB, failcnt 0 [ 86.067177][ T4477] Memory cgroup stats for /syz4/test: [ 86.088279][ T4477] anon 0 [ 86.088279][ T4477] file 0 [ 86.088279][ T4477] kernel_stack 0 [ 86.088279][ T4477] pagetables 0 [ 86.088279][ T4477] percpu 0 [ 86.088279][ T4477] sock 0 [ 86.088279][ T4477] shmem 0 [ 86.088279][ T4477] file_mapped 0 [ 86.088279][ T4477] file_dirty 0 [ 86.088279][ T4477] file_writeback 0 [ 86.088279][ T4477] swapcached 0 [ 86.088279][ T4477] anon_thp 0 [ 86.088279][ T4477] file_thp 0 [ 86.088279][ T4477] shmem_thp 0 [ 86.088279][ T4477] inactive_anon 0 [ 86.088279][ T4477] active_anon 0 [ 86.088279][ T4477] inactive_file 0 [ 86.088279][ T4477] active_file 0 [ 86.088279][ T4477] unevictable 0 [ 86.088279][ T4477] slab_reclaimable 3856 [ 86.088279][ T4477] slab_unreclaimable 22792 [ 86.088279][ T4477] slab 26648 [ 86.088279][ T4477] workingset_refault_anon 0 [ 86.088279][ T4477] workingset_refault_file 0 [ 86.088279][ T4477] workingset_activate_anon 0 [ 86.088279][ T4477] workingset_activate_file 0 [ 86.348587][ T4477] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz4/test,task_memcg=/syz4/test,task=syz.4.53,pid=4476,uid=0 [ 86.423618][ T4477] Memory cgroup out of memory: Killed process 4476 (syz.4.53) total-vm:104220kB, anon-rss:1392kB, file-rss:21872kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 86.540854][ T4234] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 86.633290][ T13] cfg80211: failed to load regulatory.db [ 86.950405][ T4234] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 86.969044][ T4234] usb 4-1: config 220 has an invalid descriptor of length 69, skipping remainder of the config [ 87.002247][ T4234] usb 4-1: config 220 has no interface number 2 [ 87.008576][ T4234] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 87.070596][ T4234] usb 4-1: config 220 interface 0 has no altsetting 0 [ 87.102829][ T4234] usb 4-1: config 220 interface 76 has no altsetting 0 [ 87.154347][ T4234] usb 4-1: config 220 interface 1 has no altsetting 0 [ 87.340160][ T4234] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 87.389920][ T4234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.418567][ T4234] usb 4-1: Product: syz [ 87.427267][ T4234] usb 4-1: Manufacturer: syz [ 87.519896][ T4234] usb 4-1: SerialNumber: syz [ 87.847929][ T4484] device syzkaller0 entered promiscuous mode [ 88.160540][ T4502] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 88.172150][ T4234] uvcvideo 4-1:220.1: Unknown video format 448b07f5-fe05-ffff-ffff-030000ffffff [ 88.212376][ T4234] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 88.245124][ T4234] usb 4-1: No valid video chain found. [ 88.257138][ T4234] usb 4-1: selecting invalid altsetting 0 [ 88.360791][ T4234] usb 4-1: selecting invalid altsetting 0 [ 88.360813][ T4234] usbtest: probe of 4-1:220.1 failed with error -22 [ 88.365855][ T4234] usb 4-1: USB disconnect, device number 3 [ 89.439885][ T13] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 89.689882][ T13] usb 5-1: Using ep0 maxpacket: 8 [ 89.970070][ T13] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 89.985075][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.014789][ T13] usb 5-1: Product: syz [ 90.030090][ T13] usb 5-1: Manufacturer: syz [ 90.045056][ T13] usb 5-1: SerialNumber: syz [ 90.070757][ T13] usb 5-1: config 0 descriptor?? [ 90.142250][ T13] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 90.229976][ T13] pctv452e: pctv452e_power_ctrl: 1 [ 90.229976][ T13] [ 90.270414][ T13] usb 5-1: selecting invalid altsetting 3 [ 90.296507][ T13] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 90.296507][ T13] [ 90.350295][ T13] dvb-usb: bulk message failed: -22 (5/0) [ 90.383551][ T13] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 90.461131][ T13] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 90.492038][ T13] usb 5-1: media controller created [ 90.518208][ T13] dvb-usb: bulk message failed: -22 (8/0) [ 90.547375][ T13] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 90.578808][ T13] dvb-usb: MAC address reading failed. [ 90.665954][ T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 91.050448][ T13] DVB: Unable to find symbol stb0899_attach() [ 91.056593][ T13] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 91.402212][ T13] rc_core: IR keymap rc-tt-1500 not found [ 91.408911][ T13] Registered IR keymap rc-empty [ 91.442469][ T13] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 91.456592][ T13] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input8 [ 91.493698][ T13] dvb-usb: schedule remote query interval to 100 msecs. [ 91.503682][ T13] pctv452e: pctv452e_power_ctrl: 0 [ 91.503682][ T13] [ 91.516628][ T13] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 91.613746][ T13] dvb-usb: bulk message failed: -22 (4/0) [ 91.625074][ T13] dvb-usb: error -22 while querying for an remote control event. [ 91.659887][ T4232] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 91.750764][ T13] dvb-usb: bulk message failed: -22 (4/0) [ 91.758223][ T13] dvb-usb: error -22 while querying for an remote control event. [ 91.892462][ T13] dvb-usb: bulk message failed: -22 (4/0) [ 91.898261][ T13] dvb-usb: error -22 while querying for an remote control event. [ 91.910022][ T4232] usb 1-1: Using ep0 maxpacket: 32 [ 92.035451][ T13] dvb-usb: bulk message failed: -22 (4/0) [ 92.042762][ T13] dvb-usb: error -22 while querying for an remote control event. [ 92.060036][ T4232] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 92.078728][ T4232] usb 1-1: config 0 has no interface number 0 [ 92.125042][ T13] usb 5-1: USB disconnect, device number 3 [ 92.249215][ T13] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 92.294751][ T4232] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 92.336935][ T4232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.359831][ T4232] usb 1-1: Product: syz [ 92.364060][ T4232] usb 1-1: Manufacturer: syz [ 92.390392][ T4232] usb 1-1: SerialNumber: syz [ 92.410855][ T4232] usb 1-1: config 0 descriptor?? [ 92.451902][ T4232] smsc95xx v2.0.0 [ 92.458186][ T4555] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 93.779950][ T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 94.219949][ T23] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 94.245644][ T23] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 94.287394][ T23] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 94.318713][ T23] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 94.379837][ T23] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 94.423569][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.555574][ T23] usb 3-1: invalid MIDI out EP 0 [ 94.636665][ T23] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 94.721294][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 95.064881][ T4232] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 95.090831][ T4232] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 95.150090][ T4232] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 95.179284][ T4232] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 95.256497][ T4232] usb 1-1: USB disconnect, device number 5 [ 95.630106][ T4232] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 95.770032][ T4265] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 95.879880][ T4232] usb 1-1: Using ep0 maxpacket: 8 [ 95.949150][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 95.989593][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 96.000002][ T4232] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 96.029126][ T4232] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 96.049918][ T4265] usb 2-1: Using ep0 maxpacket: 32 [ 96.090745][ T4634] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 96.176992][ T4232] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 96.190272][ T4265] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.223572][ T4265] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.256318][ T4232] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 96.256320][ T4265] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 96.256351][ T4265] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.336465][ T4232] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 96.366091][ T4265] usb 2-1: config 0 descriptor?? [ 96.431918][ T4265] hub 2-1:0.0: USB hub found [ 96.466589][ T4232] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 96.492823][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.660040][ T4265] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 96.799939][ T4232] usb 1-1: usb_control_msg returned -32 [ 96.805569][ T4232] usbtmc 1-1:16.0: can't read capabilities [ 97.095113][ T4265] hid-generic 0003:046D:C31C.0002: unknown main item tag 0x0 [ 97.117337][ T4265] hid-generic 0003:046D:C31C.0002: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 97.206296][ T4232] usb 1-1: USB disconnect, device number 6 [ 97.220227][ T4613] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 97.542100][ T26] audit: type=1804 audit(1786665203.798:2): pid=4613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.80" name="file1" dev="ramfs" ino=34937 res=1 errno=0 [ 97.564164][ T4668] fuse: Bad value for 'fd' [ 97.793927][ T4617] usb 2-1: reset high-speed USB device number 4 using dummy_hcd [ 97.823457][ T4232] usb 3-1: USB disconnect, device number 3 [ 98.414627][ T4234] usb 2-1: USB disconnect, device number 4 [ 98.421749][ T4617] usbhid 2-1:0.0: reset_resume error -19 [ 99.194008][ T4265] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 99.510179][ T7] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 99.580022][ T4265] usb 5-1: too many endpoints for config 0 interface 0 altsetting 18: 254, using maximum allowed: 30 [ 99.606099][ T4265] usb 5-1: config 0 interface 0 altsetting 18 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 99.620033][ T4234] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 99.684689][ T4265] usb 5-1: config 0 interface 0 altsetting 18 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 99.719018][ T4265] usb 5-1: config 0 interface 0 altsetting 18 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 99.759930][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 99.772149][ T4265] usb 5-1: config 0 interface 0 has no altsetting 0 [ 99.802077][ T4265] usb 5-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 99.840172][ T4265] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.875117][ T4265] usb 5-1: config 0 descriptor?? [ 99.880455][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 99.899954][ T4234] usb 1-1: Using ep0 maxpacket: 16 [ 99.930231][ T4702] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 100.039944][ T4234] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 100.071042][ T7] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 100.088480][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.107947][ T7] usb 3-1: Product: syz [ 100.112837][ T7] usb 3-1: Manufacturer: syz [ 100.118806][ T7] usb 3-1: SerialNumber: syz [ 100.131408][ T7] usb 3-1: config 0 descriptor?? [ 100.173473][ T7] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 100.186965][ T7] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 100.240191][ T4234] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 100.257305][ T4234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.265664][ T4234] usb 1-1: Product: syz [ 100.270067][ T4234] usb 1-1: Manufacturer: syz [ 100.274727][ T4234] usb 1-1: SerialNumber: syz [ 100.284774][ T4234] usb 1-1: config 0 descriptor?? [ 100.332492][ T4234] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 100.347467][ T4234] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 100.652631][ T4753] fuse: Bad value for 'fd' [ 100.690678][ T4265] usbhid 5-1:0.0: can't add hid device: -71 [ 100.696680][ T4265] usbhid: probe of 5-1:0.0 failed with error -71 [ 100.721770][ T4265] usb 5-1: USB disconnect, device number 4 [ 100.819924][ T7] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 100.984383][ T4234] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 101.340039][ T7] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 101.371602][ T7] em28xx 3-1:0.0: board has no eeprom [ 101.501288][ T4234] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 101.521622][ T4234] em28xx 1-1:0.0: board has no eeprom [ 101.635321][ T4764] Set syz1 is full, maxelem 2076 reached [ 101.841197][ T7] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 101.852266][ T7] em28xx 3-1:0.0: dvb set to bulk mode. [ 101.858477][ T4265] em28xx 3-1:0.0: Binding DVB extension [ 101.869875][ T4232] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 102.119847][ T4232] usb 2-1: Using ep0 maxpacket: 32 [ 102.239912][ T4232] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.251391][ T4232] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.261489][ T4232] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 102.270796][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.290428][ T4232] usb 2-1: config 0 descriptor?? [ 102.335187][ T4232] hub 2-1:0.0: USB hub found [ 102.539971][ T4232] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 102.709973][ T4234] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 102.722833][ T4234] em28xx 1-1:0.0: dvb set to bulk mode. [ 102.972831][ T4232] hid-generic 0003:046D:C31C.0003: unknown main item tag 0x0 [ 102.986104][ T4232] hid-generic 0003:046D:C31C.0003: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 103.000016][ T4718] em28xx 3-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 103.010121][ T7] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 103.020175][ T4724] em28xx 3-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 103.057474][ T23] usb 3-1: USB disconnect, device number 4 [ 103.069363][ T4265] em28xx 3-1:0.0: Registering input extension [ 103.087145][ T4234] em28xx 1-1:0.0: Binding DVB extension [ 103.094761][ T23] em28xx 3-1:0.0: Disconnecting em28xx [ 103.123604][ T13] usb 1-1: USB disconnect, device number 7 [ 103.132012][ T13] em28xx 1-1:0.0: Disconnecting em28xx [ 103.270461][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 103.282332][ T4234] em28xx 1-1:0.0: Registering input extension [ 103.297989][ T23] em28xx 3-1:0.0: Closing input extension [ 103.306541][ T13] em28xx 1-1:0.0: Closing input extension [ 103.332241][ T23] em28xx 3-1:0.0: Freeing device [ 103.359267][ T13] em28xx 1-1:0.0: Freeing device [ 103.392343][ T7] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 103.424958][ T7] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 103.478859][ T7] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 103.493863][ T7] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 103.504888][ T7] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 103.531060][ T7] usb 5-1: config 0 has no interface number 0 [ 103.557924][ T7] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 103.575343][ T7] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 103.586066][ T7] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 103.602187][ T7] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 103.622777][ T7] usb 5-1: config 0 interface 125 has no altsetting 0 [ 103.643720][ T7] usb 5-1: config 0 interface 125 has no altsetting 2 [ 103.704029][ T4265] usb 2-1: USB disconnect, device number 5 [ 103.820082][ T7] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 103.835596][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.858008][ T7] usb 5-1: Product: syz [ 103.874465][ T7] usb 5-1: Manufacturer: syz [ 103.890023][ T7] usb 5-1: SerialNumber: syz [ 103.932119][ T7] usb 5-1: config 0 descriptor?? [ 103.941622][ T4812] device syzkaller0 entered promiscuous mode [ 103.991214][ T7] usb 5-1: selecting invalid altsetting 2 [ 104.188819][ T4819] Set syz1 is full, maxelem 2076 reached [ 104.462320][ T4832] netlink: 20 bytes leftover after parsing attributes in process `syz.2.127'. [ 104.565636][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.606403][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.655254][ T4788] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.114' sets config #0 [ 104.676918][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.029853][ T7] get_1284_register timeout [ 105.039831][ C0] usb 5-1: async_complete: urb error -104 [ 105.046113][ C0] usb 5-1: async_complete: urb error -104 [ 105.310090][ T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 105.322487][ T4851] udc-core: couldn't find an available UDC or it's busy [ 105.348993][ T4851] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 105.570033][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 105.589960][ T4232] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 105.709991][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 105.812104][ T4858] device syzkaller0 entered promiscuous mode [ 105.859938][ T4232] usb 1-1: Using ep0 maxpacket: 16 [ 105.920746][ T23] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 105.935250][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.956568][ T23] usb 4-1: Product: syz [ 105.968564][ T23] usb 4-1: Manufacturer: syz [ 105.973471][ T23] usb 4-1: SerialNumber: syz [ 105.997749][ T23] usb 4-1: config 0 descriptor?? [ 106.004296][ T4232] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 106.072771][ T23] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 106.093892][ T23] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 106.101890][ T4866] netlink: 20 bytes leftover after parsing attributes in process `syz.4.139'. [ 106.115388][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.127467][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.230594][ T4232] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 106.273020][ T4232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.309776][ T4232] usb 1-1: Product: syz [ 106.314001][ T4232] usb 1-1: Manufacturer: syz [ 106.318629][ T4232] usb 1-1: SerialNumber: syz [ 106.348826][ T4232] usb 1-1: config 0 descriptor?? [ 106.422993][ T4232] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 106.434465][ T4232] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 106.453672][ T4884] udc-core: couldn't find an available UDC or it's busy [ 106.468655][ T4884] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 106.542815][ T4890] device syzkaller0 entered promiscuous mode [ 106.742271][ T23] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 106.870139][ T4897] fuse: Bad value for 'fd' [ 107.059425][ T4900] Set syz1 is full, maxelem 2076 reached [ 107.079909][ T4232] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 107.189188][ T4904] netlink: 20 bytes leftover after parsing attributes in process `syz.4.155'. [ 107.203295][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.212628][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.280093][ T23] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 107.288154][ T23] em28xx 4-1:0.0: board has no eeprom [ 107.413756][ T4909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.157'. [ 107.423293][ T4909] netlink: 180 bytes leftover after parsing attributes in process `syz.2.157'. [ 107.437932][ T4910] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 107.595600][ T4232] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 107.608722][ T4232] em28xx 1-1:0.0: board has no eeprom [ 107.619935][ T4919] device syzkaller0 entered promiscuous mode [ 107.840471][ T4932] fuse: Bad value for 'fd' [ 107.989882][ T13] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 108.039878][ T4232] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 108.050319][ T4232] em28xx 1-1:0.0: dvb set to bulk mode. [ 108.083458][ T4232] em28xx 1-1:0.0: Binding DVB extension [ 108.219438][ T4937] netlink: 20 bytes leftover after parsing attributes in process `syz.4.169'. [ 108.233422][ T4265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.243142][ T4265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.390413][ T13] usb 2-1: too many endpoints for config 0 interface 0 altsetting 18: 254, using maximum allowed: 30 [ 108.402053][ T13] usb 2-1: config 0 interface 0 altsetting 18 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 108.414232][ T13] usb 2-1: config 0 interface 0 altsetting 18 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 108.426223][ T13] usb 2-1: config 0 interface 0 altsetting 18 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 108.440456][ T13] usb 2-1: config 0 interface 0 has no altsetting 0 [ 108.447138][ T13] usb 2-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 108.450213][ T4840] em28xx 4-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 108.464972][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.479839][ T23] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 108.490145][ T4848] em28xx 4-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 108.520760][ T4942] usb usb8: usbfs: process 4942 (syz.4.170) did not claim interface 0 before use [ 108.535825][ T23] em28xx 4-1:0.0: dvb set to bulk mode. [ 108.560740][ T13] usb 2-1: config 0 descriptor?? [ 108.565358][ T23] usb 4-1: USB disconnect, device number 4 [ 108.608458][ T23] em28xx 4-1:0.0: Disconnecting em28xx [ 108.646186][ T4236] usb 1-1: USB disconnect, device number 8 [ 108.652329][ T4232] em28xx 1-1:0.0: Registering input extension [ 108.661785][ T1108] em28xx 4-1:0.0: Binding DVB extension [ 108.668798][ T4236] em28xx 1-1:0.0: Disconnecting em28xx [ 108.700307][ T4923] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 108.775270][ T1108] em28xx 4-1:0.0: Registering input extension [ 108.794381][ T4236] em28xx 1-1:0.0: Closing input extension [ 108.801951][ T23] em28xx 4-1:0.0: Closing input extension [ 108.841228][ T4236] em28xx 1-1:0.0: Freeing device [ 108.870581][ T23] em28xx 4-1:0.0: Freeing device [ 108.979629][ T4951] vivid-004: ================= START STATUS ================= [ 108.991935][ T4951] vivid-004: Radio HW Seek Mode: Bounded [ 108.998608][ T4951] vivid-004: Radio Programmable HW Seek: false [ 109.010089][ T4951] vivid-004: RDS Rx I/O Mode: Block I/O [ 109.023204][ T4951] vivid-004: Generate RBDS Instead of RDS: false [ 109.060956][ T4951] vivid-004: RDS Reception: true [ 109.076293][ T4951] vivid-004: RDS Program Type: 0 inactive [ 109.082388][ T4951] vivid-004: RDS PS Name: inactive [ 109.092942][ T4951] vivid-004: RDS Radio Text: inactive [ 109.102574][ T4951] vivid-004: RDS Traffic Announcement: false inactive [ 109.119693][ T4951] vivid-004: RDS Traffic Program: false inactive [ 109.127477][ T4951] vivid-004: RDS Music: false inactive [ 109.300060][ T4951] vivid-004: ================== END STATUS ================== [ 109.659933][ T13] usbhid 2-1:0.0: can't add hid device: -71 [ 109.676363][ T13] usbhid: probe of 2-1:0.0 failed with error -71 [ 109.708795][ T13] usb 2-1: USB disconnect, device number 6 [ 109.771252][ T4961] device syzkaller0 entered promiscuous mode [ 110.083657][ T4969] fuse: Bad value for 'fd' [ 110.201025][ T4971] netlink: 20 bytes leftover after parsing attributes in process `syz.3.181'. [ 110.251121][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.259483][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.340265][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.939909][ T7] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 111.049852][ T13] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 111.199828][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 111.218038][ T4994] udc-core: couldn't find an available UDC or it's busy [ 111.228209][ T4994] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 111.273652][ T4998] device syzkaller0 entered promiscuous mode [ 111.350946][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 111.550190][ T7] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 111.571138][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.588525][ T7] usb 4-1: Product: syz [ 111.602232][ T7] usb 4-1: Manufacturer: syz [ 111.612716][ T7] usb 4-1: SerialNumber: syz [ 111.639292][ T7] usb 4-1: config 0 descriptor?? [ 111.667523][ T5007] Set syz1 is full, maxelem 2076 reached [ 111.693543][ T7] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 111.723926][ T7] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 111.883222][ T5012] udc-core: couldn't find an available UDC or it's busy [ 111.899077][ T5012] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 111.941419][ T5013] netlink: 20 bytes leftover after parsing attributes in process `syz.0.195'. [ 112.330042][ T7] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 112.779867][ T4232] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 112.850037][ T7] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 112.864863][ T7] em28xx 4-1:0.0: board has no eeprom [ 112.954018][ T5021] fuse: Bad value for 'fd' [ 113.019846][ T4232] usb 1-1: Using ep0 maxpacket: 32 [ 113.139920][ T4232] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.154533][ T4232] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.171988][ T4232] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 113.194430][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.216607][ T4232] usb 1-1: config 0 descriptor?? [ 113.263263][ T4232] hub 1-1:0.0: USB hub found [ 113.309932][ T7] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 113.317806][ T7] em28xx 4-1:0.0: dvb set to bulk mode. [ 113.353042][ T7] em28xx 4-1:0.0: Binding DVB extension [ 113.479938][ T4232] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 113.890022][ T13] usb 2-1: unable to get BOS descriptor or descriptor too short [ 113.937732][ T4232] hid-generic 0003:046D:C31C.0004: unknown main item tag 0x0 [ 114.004632][ T4232] hid-generic 0003:046D:C31C.0004: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 114.070451][ T13] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 114.090365][ T13] usb 2-1: can't read configurations, error -71 [ 114.209185][ T5062] netlink: 20 bytes leftover after parsing attributes in process `syz.1.208'. [ 114.223841][ T1111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.234783][ T1111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.316704][ T5067] udc-core: couldn't find an available UDC or it's busy [ 114.324647][ T5067] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 114.383678][ T5069] fuse: Bad value for 'fd' [ 114.530069][ T4985] em28xx 4-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 114.541123][ T5019] usb 1-1: reset high-speed USB device number 9 using dummy_hcd [ 114.557352][ T4248] usb 4-1: USB disconnect, device number 5 [ 114.569904][ T5056] em28xx 4-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 114.580952][ T4248] em28xx 4-1:0.0: Disconnecting em28xx [ 114.719204][ T7] em28xx 4-1:0.0: Registering input extension [ 114.729969][ T4248] em28xx 4-1:0.0: Closing input extension [ 114.744301][ T4248] em28xx 4-1:0.0: Freeing device [ 115.178676][ T4232] usb 1-1: USB disconnect, device number 9 [ 115.181507][ T5019] usbhid 1-1:0.0: reset_resume error -19 [ 115.662724][ T5100] netlink: 20 bytes leftover after parsing attributes in process `syz.4.221'. [ 115.716569][ T4248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.754026][ T4248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.788302][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.041914][ T5110] fuse: Bad value for 'fd' [ 116.070272][ T26] audit: type=1326 audit(1786665222.318:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5103 comm="syz.3.223" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d944260d9 code=0x7ffc0000 [ 116.191852][ T26] audit: type=1326 audit(1786665222.368:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5103 comm="syz.3.223" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d944260d9 code=0x7ffc0000 [ 116.767873][ T5141] netlink: 20 bytes leftover after parsing attributes in process `syz.3.236'. [ 116.786398][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.798372][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.823159][ T4248] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 116.889842][ T4232] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 117.007911][ T5146] device syzkaller0 entered promiscuous mode [ 117.010249][ T4236] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 117.089972][ T4248] usb 1-1: Using ep0 maxpacket: 16 [ 117.240004][ T4248] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 117.259998][ T4236] usb 2-1: Using ep0 maxpacket: 32 [ 117.280036][ T4232] usb 3-1: too many endpoints for config 0 interface 0 altsetting 18: 254, using maximum allowed: 30 [ 117.298662][ T4232] usb 3-1: config 0 interface 0 altsetting 18 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 117.317100][ T4232] usb 3-1: config 0 interface 0 altsetting 18 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 117.337286][ T4232] usb 3-1: config 0 interface 0 altsetting 18 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 117.355490][ T4232] usb 3-1: config 0 interface 0 has no altsetting 0 [ 117.369942][ T4232] usb 3-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 117.389904][ T4236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.404350][ T4232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.420810][ T4248] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 117.433978][ T4236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.444074][ T4248] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.450877][ T4236] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 117.462467][ T4232] usb 3-1: config 0 descriptor?? [ 117.468204][ T4236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.468653][ T4248] usb 1-1: Product: syz [ 117.482355][ T5133] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 117.498509][ T4236] usb 2-1: config 0 descriptor?? [ 117.509337][ T4248] usb 1-1: Manufacturer: syz [ 117.519264][ T4248] usb 1-1: SerialNumber: syz [ 117.537751][ T4248] usb 1-1: config 0 descriptor?? [ 117.544118][ T4236] hub 2-1:0.0: USB hub found [ 117.582851][ T4248] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 117.596772][ T4248] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 117.750203][ T4236] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 118.139562][ T5165] udc-core: couldn't find an available UDC or it's busy [ 118.148492][ T5165] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 118.211928][ T4236] hid-generic 0003:046D:C31C.0005: unknown main item tag 0x0 [ 118.249913][ T4248] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 118.291592][ T4236] hid-generic 0003:046D:C31C.0005: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 118.390059][ T4232] usbhid 3-1:0.0: can't add hid device: -71 [ 118.397142][ T4232] usbhid: probe of 3-1:0.0 failed with error -71 [ 118.438937][ T4232] usb 3-1: USB disconnect, device number 5 [ 118.779933][ T4248] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 118.787987][ T4248] em28xx 1-1:0.0: board has no eeprom [ 118.850203][ T5139] usb 2-1: reset high-speed USB device number 9 using dummy_hcd [ 118.899929][ T1111] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 119.021414][ T5178] netlink: 'syz.4.247': attribute type 11 has an invalid length. [ 119.052827][ T5178] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 119.061607][ T5178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.070466][ T5178] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 119.089030][ T5180] netlink: 20 bytes leftover after parsing attributes in process `syz.2.248'. [ 119.170170][ T1111] usb 4-1: Using ep0 maxpacket: 16 [ 119.178944][ T5183] fuse: Bad value for 'fd' [ 119.249885][ T4248] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 119.260033][ T4248] em28xx 1-1:0.0: dvb set to bulk mode. [ 119.278612][ T5185] device syzkaller0 entered promiscuous mode [ 119.281916][ T4248] em28xx 1-1:0.0: Binding DVB extension [ 119.320133][ T1111] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 119.444026][ T23] usb 2-1: USB disconnect, device number 9 [ 119.462041][ T5139] usbhid 2-1:0.0: reset_resume error -19 [ 119.550395][ T1111] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 119.566181][ T1111] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.585714][ T1111] usb 4-1: Product: syz [ 119.590412][ T1111] usb 4-1: Manufacturer: syz [ 119.595267][ T1111] usb 4-1: SerialNumber: syz [ 119.608626][ T1111] usb 4-1: config 0 descriptor?? [ 119.666019][ T1111] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 119.681293][ T1111] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 120.330015][ T1111] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 120.460017][ T5123] em28xx 1-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 120.471189][ T4232] usb 1-1: USB disconnect, device number 10 [ 120.486303][ T4232] em28xx 1-1:0.0: Disconnecting em28xx [ 120.685276][ T4248] em28xx 1-1:0.0: Registering input extension [ 120.699504][ T4232] em28xx 1-1:0.0: Closing input extension [ 120.728525][ T4232] em28xx 1-1:0.0: Freeing device [ 120.880064][ T1111] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 120.899962][ T4236] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 120.909893][ T1111] em28xx 4-1:0.0: board has no eeprom [ 121.099049][ T5223] netlink: 20 bytes leftover after parsing attributes in process `syz.4.261'. [ 121.144668][ T5225] device syzkaller0 entered promiscuous mode [ 121.237983][ T5228] fuse: Bad value for 'fd' [ 121.280273][ T4236] usb 3-1: too many endpoints for config 0 interface 0 altsetting 18: 254, using maximum allowed: 30 [ 121.295438][ T4236] usb 3-1: config 0 interface 0 altsetting 18 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 121.307888][ T4236] usb 3-1: config 0 interface 0 altsetting 18 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 121.319902][ T4236] usb 3-1: config 0 interface 0 altsetting 18 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 121.333976][ T4236] usb 3-1: config 0 interface 0 has no altsetting 0 [ 121.340973][ T4236] usb 3-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 121.350425][ T4236] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.362121][ T1111] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 121.379898][ T4236] usb 3-1: config 0 descriptor?? [ 121.394654][ T1111] em28xx 4-1:0.0: dvb set to bulk mode. [ 121.400508][ T5216] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 121.433979][ T1111] em28xx 4-1:0.0: Binding DVB extension [ 121.769846][ T13] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 122.029921][ T13] usb 1-1: Using ep0 maxpacket: 32 [ 122.159911][ T4236] usbhid 3-1:0.0: can't add hid device: -71 [ 122.163058][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.166146][ T4236] usbhid: probe of 3-1:0.0 failed with error -71 [ 122.189130][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.201257][ T4236] usb 3-1: USB disconnect, device number 6 [ 122.212900][ T13] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 122.227649][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.263560][ T13] usb 1-1: config 0 descriptor?? [ 122.321234][ T13] hub 1-1:0.0: USB hub found [ 122.549957][ T13] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 122.611510][ T5226] em28xx 4-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 122.621962][ T4236] usb 4-1: USB disconnect, device number 6 [ 122.635788][ T4236] em28xx 4-1:0.0: Disconnecting em28xx [ 122.779143][ T1111] em28xx 4-1:0.0: Registering input extension [ 122.797873][ T4236] em28xx 4-1:0.0: Closing input extension [ 122.851620][ T4236] em28xx 4-1:0.0: Freeing device [ 122.986617][ T13] hid-generic 0003:046D:C31C.0006: unknown main item tag 0x0 [ 123.032126][ T13] hid-generic 0003:046D:C31C.0006: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 123.048360][ T5257] KVM: debugfs: duplicate directory 5257-8 [ 123.158321][ T5265] netlink: 20 bytes leftover after parsing attributes in process `syz.4.273'. [ 123.377327][ T5275] device syzkaller0 entered promiscuous mode [ 123.469994][ T4236] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 123.593450][ T5282] fuse: Bad value for 'fd' [ 123.620314][ T5234] usb 1-1: reset high-speed USB device number 11 using dummy_hcd [ 123.789977][ T4236] usb 3-1: Using ep0 maxpacket: 16 [ 123.950379][ T4236] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 124.140134][ T4236] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 124.159503][ T4236] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.175598][ T4236] usb 3-1: Product: syz [ 124.185752][ T4236] usb 3-1: Manufacturer: syz [ 124.200848][ T4236] usb 3-1: SerialNumber: syz [ 124.221523][ T4248] usb 1-1: USB disconnect, device number 11 [ 124.230439][ T5234] usbhid 1-1:0.0: reset_resume error -19 [ 124.237196][ T4236] usb 3-1: config 0 descriptor?? [ 124.302386][ T4236] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 124.351657][ T4236] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 124.850009][ T4248] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 124.942035][ T4236] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 125.025392][ T5308] netlink: 20 bytes leftover after parsing attributes in process `syz.0.288'. [ 125.188390][ T5310] device syzkaller0 entered promiscuous mode [ 125.220059][ T4248] usb 2-1: too many endpoints for config 0 interface 0 altsetting 18: 254, using maximum allowed: 30 [ 125.235954][ T4248] usb 2-1: config 0 interface 0 altsetting 18 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 125.247464][ T4248] usb 2-1: config 0 interface 0 altsetting 18 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 125.258852][ T4248] usb 2-1: config 0 interface 0 altsetting 18 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 125.272730][ T4248] usb 2-1: config 0 interface 0 has no altsetting 0 [ 125.279388][ T4248] usb 2-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 125.288898][ T7] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 125.296600][ T4248] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.320882][ T4248] usb 2-1: config 0 descriptor?? [ 125.340194][ T5299] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 125.511372][ T4236] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 125.530667][ T4236] em28xx 3-1:0.0: board has no eeprom [ 125.549869][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 125.578959][ T5320] usb usb8: usbfs: process 5320 (syz.0.292) did not claim interface 0 before use [ 125.670803][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 125.745890][ T5320] sctp: failed to load transform for md5: -2 [ 125.850757][ T7] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 125.870417][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.910276][ T7] usb 4-1: Product: syz [ 125.924251][ T7] usb 4-1: Manufacturer: syz [ 125.933319][ T7] usb 4-1: SerialNumber: syz [ 125.957351][ T7] usb 4-1: config 0 descriptor?? [ 125.980025][ T4236] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 126.004162][ T4236] em28xx 3-1:0.0: dvb set to bulk mode. [ 126.011758][ T7] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 126.043414][ T7] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 126.054899][ T1108] em28xx 3-1:0.0: Binding DVB extension [ 126.650053][ T7] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 126.769918][ T4248] usbhid 2-1:0.0: can't add hid device: -71 [ 126.776009][ T4248] usbhid: probe of 2-1:0.0 failed with error -71 [ 126.806388][ T4248] usb 2-1: USB disconnect, device number 10 [ 127.160346][ T7] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 127.178891][ T7] em28xx 4-1:0.0: board has no eeprom [ 127.190041][ T5268] em28xx 3-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 127.264006][ T4248] usb 3-1: USB disconnect, device number 7 [ 127.271005][ T4248] em28xx 3-1:0.0: Disconnecting em28xx [ 127.340464][ T1108] em28xx 3-1:0.0: Registering input extension [ 127.352048][ T4248] em28xx 3-1:0.0: Closing input extension [ 127.389017][ T4248] em28xx 3-1:0.0: Freeing device [ 127.417049][ T5343] fuse: Bad value for 'fd' [ 127.609929][ T7] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 127.658564][ T7] em28xx 4-1:0.0: dvb set to bulk mode. [ 127.706293][ T7] em28xx 4-1:0.0: Binding DVB extension [ 127.919805][ T5350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.298'. [ 127.961003][ T5350] netlink: 'syz.1.298': attribute type 1 has an invalid length. [ 128.008014][ T23] usb 4-1: USB disconnect, device number 7 [ 128.034101][ T23] em28xx 4-1:0.0: Disconnecting em28xx [ 128.123553][ T7] em28xx 4-1:0.0: Registering input extension [ 128.131262][ T4248] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 128.148974][ T23] em28xx 4-1:0.0: Closing input extension [ 128.172236][ T23] em28xx 4-1:0.0: Freeing device [ 128.180799][ T5360] netlink: 20 bytes leftover after parsing attributes in process `syz.0.300'. [ 128.429851][ T4248] usb 3-1: Using ep0 maxpacket: 32 [ 128.457780][ T5366] device syzkaller0 entered promiscuous mode [ 128.565721][ T4248] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.577758][ T4248] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.647470][ T4248] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 128.699224][ T4248] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.720449][ T4248] usb 3-1: config 0 descriptor?? [ 128.775817][ T4248] hub 3-1:0.0: USB hub found [ 128.989960][ T4248] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 129.285054][ T5389] udc-core: couldn't find an available UDC or it's busy [ 129.294700][ T5389] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 129.412305][ T4248] hid-generic 0003:046D:C31C.0007: unknown main item tag 0x0 [ 129.441609][ T4248] hid-generic 0003:046D:C31C.0007: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 129.489812][ T4265] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 129.535510][ T5396] fuse: Bad value for 'fd' [ 129.870193][ T5401] netlink: 20 bytes leftover after parsing attributes in process `syz.0.314'. [ 129.939979][ T4265] usb 2-1: too many endpoints for config 0 interface 0 altsetting 18: 254, using maximum allowed: 30 [ 129.960193][ T4265] usb 2-1: config 0 interface 0 altsetting 18 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 129.989759][ T4265] usb 2-1: config 0 interface 0 altsetting 18 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 130.024040][ T4265] usb 2-1: config 0 interface 0 altsetting 18 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 130.053036][ T5355] usb 3-1: reset high-speed USB device number 8 using dummy_hcd [ 130.063838][ T5404] udc-core: couldn't find an available UDC or it's busy [ 130.083591][ T4265] usb 2-1: config 0 interface 0 has no altsetting 0 [ 130.092169][ T5404] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 130.110003][ T4265] usb 2-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 130.119088][ T4265] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.151515][ T4265] usb 2-1: config 0 descriptor?? [ 130.200171][ T5388] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 130.249696][ T5410] device syzkaller0 entered promiscuous mode [ 130.674960][ T4248] usb 3-1: USB disconnect, device number 8 [ 130.680865][ T5355] usbhid 3-1:0.0: reset_resume error -19 [ 130.907247][ T5432] udc-core: couldn't find an available UDC or it's busy [ 130.932830][ T5432] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 131.109881][ T4265] usbhid 2-1:0.0: can't add hid device: -71 [ 131.115942][ T4265] usbhid: probe of 2-1:0.0 failed with error -71 [ 131.122426][ T23] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 131.153232][ T4265] usb 2-1: USB disconnect, device number 11 [ 131.487509][ T5438] netlink: 20 bytes leftover after parsing attributes in process `syz.2.327'. [ 131.678191][ T5443] fuse: Bad value for 'fd' [ 131.702817][ T5441] device syzkaller0 entered promiscuous mode [ 132.469880][ T1108] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 132.714322][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.719835][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28e!!! [ 132.723809][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.736803][ T1108] usb 3-1: Using ep0 maxpacket: 16 [ 132.870688][ T1108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 133.001074][ T5472] udc-core: couldn't find an available UDC or it's busy [ 133.008070][ T5472] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 133.050340][ T1108] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 133.066401][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.112114][ T1108] usb 3-1: Product: syz [ 133.137069][ T1108] usb 3-1: Manufacturer: syz [ 133.164147][ T1108] usb 3-1: SerialNumber: syz [ 133.204305][ T1108] usb 3-1: config 0 descriptor?? [ 133.228950][ T5472] udc-core: couldn't find an available UDC or it's busy [ 133.239376][ T5472] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 133.263277][ T1108] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 133.276009][ T1108] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 133.382002][ T5480] device syzkaller0 entered promiscuous mode [ 133.409831][ T4265] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 133.699816][ T4265] usb 1-1: Using ep0 maxpacket: 16 [ 133.810052][ T1111] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 133.860070][ T4265] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 133.909988][ T1108] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 134.013977][ T5485] netlink: 20 bytes leftover after parsing attributes in process `syz.4.343'. [ 134.060655][ T4265] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 134.070079][ T4265] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.078341][ T4265] usb 1-1: Product: syz [ 134.083273][ T4265] usb 1-1: Manufacturer: syz [ 134.088164][ T4265] usb 1-1: SerialNumber: syz [ 134.104706][ T4265] usb 1-1: config 0 descriptor?? [ 134.151763][ T4265] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 134.166715][ T4265] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 134.224661][ T1111] usb 2-1: too many endpoints for config 0 interface 0 altsetting 18: 254, using maximum allowed: 30 [ 134.241468][ T1111] usb 2-1: config 0 interface 0 altsetting 18 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 134.258414][ T1111] usb 2-1: config 0 interface 0 altsetting 18 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 134.274815][ T1111] usb 2-1: config 0 interface 0 altsetting 18 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 134.288351][ T1111] usb 2-1: config 0 interface 0 has no altsetting 0 [ 134.295575][ T1111] usb 2-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 134.309990][ T1111] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.335186][ T1111] usb 2-1: config 0 descriptor?? [ 134.370750][ T5483] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 134.405032][ T5496] fuse: Bad value for 'fd' [ 134.449957][ T1108] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 134.458401][ T1108] em28xx 3-1:0.0: board has no eeprom [ 134.561388][ T23] usb 4-1: unable to get BOS descriptor or descriptor too short [ 134.694381][ T23] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 134.703263][ T23] usb 4-1: can't read configurations, error -71 [ 134.819910][ T4265] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 134.873324][ T1108] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 134.894742][ T1108] em28xx 3-1:0.0: dvb set to bulk mode. [ 134.910159][ T4234] em28xx 3-1:0.0: Binding DVB extension [ 135.200063][ T1111] usbhid 2-1:0.0: can't add hid device: -71 [ 135.209819][ T1111] usbhid: probe of 2-1:0.0 failed with error -71 [ 135.230397][ T1111] usb 2-1: USB disconnect, device number 12 [ 135.363688][ T4265] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 135.372417][ T4265] em28xx 1-1:0.0: board has no eeprom [ 135.493029][ T5514] udc-core: couldn't find an available UDC or it's busy [ 135.504284][ T5514] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 135.593671][ T5516] device syzkaller0 entered promiscuous mode [ 135.734495][ T5514] udc-core: couldn't find an available UDC or it's busy [ 135.750073][ T5514] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 135.790833][ T4265] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 135.793656][ T5518] netlink: 20 bytes leftover after parsing attributes in process `syz.3.355'. [ 135.807841][ T4265] em28xx 1-1:0.0: dvb set to bulk mode. [ 136.130899][ T5459] em28xx 3-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 136.150710][ T5474] em28xx 3-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 136.158860][ T4265] usb 3-1: USB disconnect, device number 9 [ 136.170784][ T4265] em28xx 3-1:0.0: Disconnecting em28xx [ 136.234397][ T4234] em28xx 3-1:0.0: Registering input extension [ 136.251874][ T1111] em28xx 1-1:0.0: Binding DVB extension [ 136.497668][ T1108] usb 1-1: USB disconnect, device number 12 [ 136.559548][ T1108] em28xx 1-1:0.0: Disconnecting em28xx [ 136.565245][ T4234] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 136.617185][ T1111] em28xx 1-1:0.0: Registering input extension [ 136.634582][ T4265] em28xx 3-1:0.0: Closing input extension [ 136.665969][ T1108] em28xx 1-1:0.0: Closing input extension [ 136.676228][ T4265] em28xx 3-1:0.0: Freeing device [ 136.807851][ T5534] udc-core: couldn't find an available UDC or it's busy [ 136.859006][ T1108] em28xx 1-1:0.0: Freeing device [ 137.003210][ T5534] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 137.395823][ T5539] fuse: Bad value for 'fd' [ 137.847580][ T5547] device syzkaller0 entered promiscuous mode [ 138.449813][ T23] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 138.860119][ T23] usb 3-1: too many endpoints for config 0 interface 0 altsetting 18: 254, using maximum allowed: 30 [ 138.894113][ T23] usb 3-1: config 0 interface 0 altsetting 18 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 138.925290][ T5555] netlink: 20 bytes leftover after parsing attributes in process `syz.0.368'. [ 138.946991][ T23] usb 3-1: config 0 interface 0 altsetting 18 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 139.006887][ T23] usb 3-1: config 0 interface 0 altsetting 18 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 139.052052][ T5557] Set syz1 is full, maxelem 2076 reached [ 139.087735][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 139.112800][ T23] usb 3-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 139.156819][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.224840][ T23] usb 3-1: config 0 descriptor?? [ 139.280123][ T5553] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 139.559892][ T1108] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 139.739855][ T4234] usb 4-1: unable to get BOS descriptor or descriptor too short [ 139.850018][ T1108] usb 2-1: Using ep0 maxpacket: 32 [ 139.855242][ T4236] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 139.902852][ T4234] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 139.944908][ T4234] usb 4-1: can't read configurations, error -71 [ 139.992839][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.014596][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.038119][ T1108] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 140.067841][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.104860][ T1108] usb 2-1: config 0 descriptor?? [ 140.120695][ T4236] usb 1-1: Using ep0 maxpacket: 16 [ 140.151118][ T1108] hub 2-1:0.0: USB hub found [ 140.239969][ T4236] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 140.249984][ T23] usbhid 3-1:0.0: can't add hid device: -71 [ 140.256000][ T23] usbhid: probe of 3-1:0.0 failed with error -71 [ 140.283034][ T23] usb 3-1: USB disconnect, device number 10 [ 140.370008][ T1108] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 140.409959][ T4234] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 140.430082][ T4236] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 140.449451][ T4236] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.469794][ T4236] usb 1-1: Product: syz [ 140.474016][ T4236] usb 1-1: Manufacturer: syz [ 140.478671][ T4236] usb 1-1: SerialNumber: syz [ 140.496052][ T4236] usb 1-1: config 0 descriptor?? [ 140.542406][ T4236] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 140.560077][ T4236] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 140.649805][ T4234] usb 4-1: Using ep0 maxpacket: 16 [ 140.779778][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 140.789771][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 140.799769][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 140.809762][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 140.819768][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 140.829569][ T4234] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 140.858664][ T1108] hid-generic 0003:046D:C31C.0008: unknown main item tag 0x0 [ 140.930692][ T1108] hid-generic 0003:046D:C31C.0008: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 141.061512][ T5579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.377'. [ 141.080157][ T4234] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 141.101633][ T4234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.109685][ T4234] usb 4-1: Product: syz [ 141.114166][ T4234] usb 4-1: Manufacturer: syz [ 141.119580][ T4234] usb 4-1: SerialNumber: syz [ 141.122697][ T4265] usb 2-1: USB disconnect, device number 13 [ 141.147782][ T4234] usb 4-1: config 0 descriptor?? [ 141.191753][ T4234] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 141.209347][ T4234] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 141.219909][ T4236] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 141.300751][ T5583] fido_id[5583]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 141.319036][ T5582] device syzkaller0 entered promiscuous mode [ 141.456793][ T5588] fuse: Bad value for 'fd' [ 141.750111][ T4236] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 141.755351][ T4265] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 141.758164][ T4236] em28xx 1-1:0.0: board has no eeprom [ 141.839884][ T4234] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 141.974100][ T5594] Set syz1 is full, maxelem 2076 reached [ 142.030002][ T4265] usb 2-1: Using ep0 maxpacket: 32 [ 142.170031][ T4265] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.180026][ T4236] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 142.188776][ T4236] em28xx 1-1:0.0: dvb set to bulk mode. [ 142.189880][ T4265] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.212456][ T23] em28xx 1-1:0.0: Binding DVB extension [ 142.219773][ T4265] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 142.245257][ T4265] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.289301][ T4265] usb 2-1: config 0 descriptor?? [ 142.359996][ T4234] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 142.368061][ T4234] em28xx 4-1:0.0: board has no eeprom [ 142.385866][ T4265] usb 2-1: can't set config #0, error -71 [ 142.433737][ T4265] usb 2-1: USB disconnect, device number 14 [ 142.481318][ T5605] udc-core: couldn't find an available UDC or it's busy [ 142.488598][ T5605] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 142.810465][ T4234] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 142.819672][ T4234] em28xx 4-1:0.0: dvb set to bulk mode. [ 143.399850][ T5563] em28xx 1-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 143.412201][ T1108] usb 1-1: USB disconnect, device number 13 [ 143.424261][ T1108] em28xx 1-1:0.0: Disconnecting em28xx [ 143.430004][ T5568] em28xx 1-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 143.569885][ T4265] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 143.615953][ T23] em28xx 1-1:0.0: Registering input extension [ 143.627406][ T4236] em28xx 4-1:0.0: Binding DVB extension [ 143.878800][ T23] usb 4-1: USB disconnect, device number 11 [ 143.886595][ T23] em28xx 4-1:0.0: Disconnecting em28xx [ 144.010144][ T4265] usb 2-1: too many endpoints for config 0 interface 0 altsetting 18: 254, using maximum allowed: 30 [ 144.078321][ T4265] usb 2-1: config 0 interface 0 altsetting 18 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 144.138954][ T4236] em28xx 4-1:0.0: Registering input extension [ 144.153695][ T1108] em28xx 1-1:0.0: Closing input extension [ 144.166777][ T23] em28xx 4-1:0.0: Closing input extension [ 144.197903][ T1108] em28xx 1-1:0.0: Freeing device [ 144.207420][ T23] em28xx 4-1:0.0: Freeing device [ 144.214038][ T4265] usb 2-1: config 0 interface 0 altsetting 18 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 144.270782][ T4265] usb 2-1: config 0 interface 0 altsetting 18 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 144.325309][ T4265] usb 2-1: config 0 interface 0 has no altsetting 0 [ 144.346944][ T4265] usb 2-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 144.384803][ T4265] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.468602][ T5623] fuse: Bad value for 'fd' [ 144.488250][ T4265] usb 2-1: config 0 descriptor?? [ 144.562160][ T5616] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 145.579946][ T4265] usbhid 2-1:0.0: can't add hid device: -71 [ 145.585985][ T4265] usbhid: probe of 2-1:0.0 failed with error -71 [ 145.628166][ T4265] usb 2-1: USB disconnect, device number 15 [ 145.779873][ T23] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 145.955973][ T5649] udc-core: couldn't find an available UDC or it's busy [ 145.974524][ T5649] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 146.029961][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 146.151003][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.181615][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.207792][ T23] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 146.232918][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.259759][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 146.275936][ T23] usb 1-1: config 0 descriptor?? [ 146.321909][ T23] hub 1-1:0.0: USB hub found [ 146.540041][ T23] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 146.785334][ T5665] udc-core: couldn't find an available UDC or it's busy [ 146.820034][ T5665] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 146.908350][ T5674] fuse: Bad value for 'fd' [ 146.972610][ T23] hid-generic 0003:046D:C31C.0009: unknown main item tag 0x0 [ 146.991425][ T23] hid-generic 0003:046D:C31C.0009: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 147.159934][ T1108] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 147.409812][ T1108] usb 2-1: Invalid ep0 maxpacket: 64 [ 147.559822][ T1108] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 147.613928][ T5639] usb 1-1: reset high-speed USB device number 14 using dummy_hcd [ 147.799985][ T1108] usb 2-1: Invalid ep0 maxpacket: 64 [ 147.806094][ T1108] usb usb2-port1: attempt power cycle [ 148.025735][ T5694] udc-core: couldn't find an available UDC or it's busy [ 148.043878][ T5694] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 148.200122][ T4236] usb 1-1: USB disconnect, device number 14 [ 148.220022][ T5639] usbhid 1-1:0.0: reset_resume error -19 [ 148.225973][ T1108] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 148.330096][ T1108] usb 2-1: Invalid ep0 maxpacket: 64 [ 148.479860][ T1108] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 148.600009][ T1108] usb 2-1: Invalid ep0 maxpacket: 64 [ 148.607187][ T1108] usb usb2-port1: unable to enumerate USB device [ 149.401426][ T5714] fuse: Bad value for 'fd' [ 149.419974][ T4265] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 149.669797][ T4265] usb 3-1: Using ep0 maxpacket: 16 [ 149.709819][ T4236] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 149.790118][ T4265] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 149.960022][ T4265] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 149.980213][ T4265] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.988262][ T4265] usb 3-1: Product: syz [ 150.000328][ T4236] usb 4-1: Using ep0 maxpacket: 16 [ 150.019408][ T4265] usb 3-1: Manufacturer: syz [ 150.029867][ T4265] usb 3-1: SerialNumber: syz [ 150.056059][ T4265] usb 3-1: config 0 descriptor?? [ 150.101732][ T5730] udc-core: couldn't find an available UDC or it's busy [ 150.116756][ T5730] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 150.127352][ T4265] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 150.138184][ T4265] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 150.152177][ T4236] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 150.333583][ T4236] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 150.344309][ T4236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.348345][ T5730] udc-core: couldn't find an available UDC or it's busy [ 150.360433][ T5730] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 150.377363][ T4236] usb 4-1: Product: syz [ 150.385834][ T4236] usb 4-1: Manufacturer: syz [ 150.393781][ T4236] usb 4-1: SerialNumber: syz [ 150.407055][ T4236] usb 4-1: config 0 descriptor?? [ 150.456185][ T4236] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 150.482869][ T4236] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 150.769866][ T4265] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 151.110067][ T4236] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 151.124670][ T5750] fuse: Bad value for 'fd' [ 151.279927][ T4265] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 151.284166][ T23] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 151.298869][ T4265] em28xx 3-1:0.0: board has no eeprom [ 151.399842][ T1111] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 151.650107][ T4236] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 151.659439][ T4236] em28xx 4-1:0.0: board has no eeprom [ 151.700073][ T23] usb 2-1: too many endpoints for config 0 interface 0 altsetting 18: 254, using maximum allowed: 30 [ 151.711559][ T23] usb 2-1: config 0 interface 0 altsetting 18 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 151.720035][ T4265] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 151.723764][ T23] usb 2-1: config 0 interface 0 altsetting 18 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 151.742226][ T23] usb 2-1: config 0 interface 0 altsetting 18 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 151.759829][ T23] usb 2-1: config 0 interface 0 has no altsetting 0 [ 151.766666][ T4265] em28xx 3-1:0.0: dvb set to bulk mode. [ 151.770371][ T23] usb 2-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 151.787112][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.825638][ T23] usb 2-1: config 0 descriptor?? [ 151.846656][ T4265] em28xx 3-1:0.0: Binding DVB extension [ 151.860218][ T5746] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 152.079945][ T4236] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 152.093237][ T4236] em28xx 4-1:0.0: dvb set to bulk mode. [ 152.346913][ T5764] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 152.381663][ T5764] kvm: apic: phys broadcast and lowest prio [ 152.629936][ T23] usbhid 2-1:0.0: can't add hid device: -71 [ 152.636376][ T23] usbhid: probe of 2-1:0.0 failed with error -71 [ 152.664264][ T23] usb 2-1: USB disconnect, device number 20 [ 152.910036][ T5703] em28xx 3-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 152.920634][ T4248] usb 3-1: USB disconnect, device number 11 [ 152.930395][ T5715] em28xx 3-1:0.0: writing to i2c device at 0xe failed (error=-19) [ 152.941547][ T4248] em28xx 3-1:0.0: Disconnecting em28xx [ 152.950814][ T23] usb 4-1: USB disconnect, device number 12 [ 152.973275][ T23] em28xx 4-1:0.0: Disconnecting em28xx [ 153.022333][ T5780] udc-core: couldn't find an available UDC or it's busy [ 153.022510][ T4265] em28xx 3-1:0.0: Registering input extension [ 153.029331][ T5780] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 153.038418][ T4248] em28xx 3-1:0.0: Closing input extension [ 153.055339][ T4230] em28xx 4-1:0.0: Binding DVB extension [ 153.087202][ T4248] em28xx 3-1:0.0: Freeing device [ 153.132083][ T4230] em28xx 4-1:0.0: Registering input extension [ 153.144130][ T23] em28xx 4-1:0.0: Closing input extension [ 153.164995][ T23] em28xx 4-1:0.0: Freeing device [ 153.255195][ T5780] udc-core: couldn't find an available UDC or it's busy [ 153.265126][ T5780] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 153.388869][ T5785] syz.1.444 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 153.615680][ T5789] fuse: Bad value for 'fd' [ 154.076329][ T1111] usb 1-1: unable to get BOS descriptor or descriptor too short [ 154.209894][ T1111] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 154.225257][ T1111] usb 1-1: can't read configurations, error -71 [ 154.377020][ T5818] udc-core: couldn't find an available UDC or it's busy [ 154.394878][ T5818] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 154.619897][ T4248] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 154.629862][ T1111] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 154.640925][ T5824] fuse: Bad value for 'fd' [ 154.859984][ T4248] usb 3-1: Using ep0 maxpacket: 16 [ 154.979996][ T4248] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 154.990252][ T1111] usb 1-1: too many endpoints for config 0 interface 0 altsetting 18: 254, using maximum allowed: 30 [ 155.018426][ T1111] usb 1-1: config 0 interface 0 altsetting 18 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 155.030202][ T1111] usb 1-1: config 0 interface 0 altsetting 18 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 155.040531][ T23] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 155.043109][ T1111] usb 1-1: config 0 interface 0 altsetting 18 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 155.065866][ T1111] usb 1-1: config 0 interface 0 has no altsetting 0 [ 155.075284][ T1111] usb 1-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 155.087270][ T1111] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.099622][ T1111] usb 1-1: config 0 descriptor?? [ 155.120255][ T5815] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 155.182412][ T4248] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 155.191871][ T4248] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.204491][ T4248] usb 3-1: Product: syz [ 155.208710][ T4248] usb 3-1: Manufacturer: syz [ 155.213766][ T4248] usb 3-1: SerialNumber: syz [ 155.226889][ T4248] usb 3-1: config 0 descriptor?? [ 155.271903][ T4248] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 155.284743][ T4248] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 155.299879][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 155.357167][ T5843] udc-core: couldn't find an available UDC or it's busy [ 155.374409][ T5843] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 155.420536][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.439058][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.459954][ T23] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 155.479155][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.499244][ T23] usb 2-1: config 0 descriptor?? [ 155.552083][ T23] hub 2-1:0.0: USB hub found [ 155.769962][ T23] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 155.879886][ T1111] usbhid 1-1:0.0: can't add hid device: -71 [ 155.885977][ T1111] usbhid: probe of 1-1:0.0 failed with error -71 [ 155.904159][ T1111] usb 1-1: USB disconnect, device number 16 [ 155.919938][ T4248] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 156.202154][ T23] hid-generic 0003:046D:C31C.000A: unknown main item tag 0x0 [ 156.214509][ T23] hid-generic 0003:046D:C31C.000A: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 156.429871][ T4248] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 156.446573][ T4248] em28xx 3-1:0.0: board has no eeprom [ 156.509136][ T5849] device syzkaller0 entered promiscuous mode [ 156.840727][ T5827] usb 2-1: reset high-speed USB device number 21 using dummy_hcd [ 157.650808][ T5819] em28xx 3-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 157.669905][ T4248] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 157.684801][ T4248] em28xx 3-1:0.0: dvb set to bulk mode. [ 157.717647][ T4248] usb 3-1: USB disconnect, device number 12 [ 157.732145][ T5861] fuse: Bad value for 'fd' [ 157.763451][ T4248] em28xx 3-1:0.0: Disconnecting em28xx [ 157.785332][ T4265] em28xx 3-1:0.0: Binding DVB extension [ 157.849887][ T4265] em28xx 3-1:0.0: Registering input extension [ 157.863966][ T4248] em28xx 3-1:0.0: Closing input extension [ 157.879019][ T4248] em28xx 3-1:0.0: Freeing device [ 158.259954][ T4265] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 158.316187][ T5881] device syzkaller0 entered promiscuous mode [ 158.509847][ T4265] usb 4-1: Using ep0 maxpacket: 16 [ 158.518306][ T4230] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 158.629885][ T4265] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 158.800149][ T4265] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 158.809442][ T4265] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.818029][ T4265] usb 4-1: Product: syz [ 158.823216][ T4265] usb 4-1: Manufacturer: syz [ 158.827949][ T4265] usb 4-1: SerialNumber: syz [ 158.845927][ T4265] usb 4-1: config 0 descriptor?? [ 158.892768][ T4265] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 158.902318][ T4265] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 158.930128][ T4230] usb 1-1: too many endpoints for config 0 interface 0 altsetting 18: 254, using maximum allowed: 30 [ 158.945181][ T4230] usb 1-1: config 0 interface 0 altsetting 18 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 158.966110][ T4230] usb 1-1: config 0 interface 0 altsetting 18 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 158.988122][ T5908] udc-core: couldn't find an available UDC or it's busy [ 158.996529][ T5908] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 159.005692][ T4230] usb 1-1: config 0 interface 0 altsetting 18 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 159.029189][ T4230] usb 1-1: config 0 interface 0 has no altsetting 0 [ 159.039851][ T4230] usb 1-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 159.056785][ T4230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.088368][ T4230] usb 1-1: config 0 descriptor?? [ 159.120669][ T5879] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 159.499907][ T4236] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 159.529873][ T4265] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 159.920144][ T4230] usbhid 1-1:0.0: can't add hid device: -71 [ 159.926357][ T4230] usbhid: probe of 1-1:0.0 failed with error -71 [ 159.935849][ T4230] usb 1-1: USB disconnect, device number 17 [ 159.942333][ T4236] usb 3-1: config 1 interface 0 has no altsetting 0 [ 160.039913][ T4265] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 160.048252][ T4265] em28xx 4-1:0.0: board has no eeprom [ 160.111315][ T4236] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 160.120639][ T4236] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.128683][ T4236] usb 3-1: Product: syz [ 160.133622][ T4236] usb 3-1: Manufacturer: syz [ 160.138286][ T4236] usb 3-1: SerialNumber: syz [ 160.455553][ T5913] device syzkaller0 entered promiscuous mode [ 160.460461][ T4265] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 160.474289][ T4265] em28xx 4-1:0.0: dvb set to bulk mode. [ 160.482229][ T4248] em28xx 4-1:0.0: Binding DVB extension [ 160.603271][ T4236] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 37 proto 1 vid 0x04B8 pid 0x0202 [ 160.969901][ T4236] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 161.249864][ T4236] usb 1-1: Using ep0 maxpacket: 16 [ 161.399942][ T4236] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 161.620022][ T4236] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 161.630466][ T4236] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.640933][ T4236] usb 1-1: Product: syz [ 161.645352][ T4236] usb 1-1: Manufacturer: syz [ 161.650590][ T4236] usb 1-1: SerialNumber: syz [ 161.655822][ T5870] em28xx 4-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 161.672560][ T4236] usb 1-1: config 0 descriptor?? [ 161.694602][ T1108] usb 4-1: USB disconnect, device number 13 [ 161.701930][ T1108] em28xx 4-1:0.0: Disconnecting em28xx [ 161.718137][ T4248] em28xx 4-1:0.0: Registering input extension [ 161.728492][ T1108] em28xx 4-1:0.0: Closing input extension [ 161.737763][ T4236] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 161.749024][ T4236] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 161.767070][ T1108] em28xx 4-1:0.0: Freeing device [ 161.945506][ T5926] udc-core: couldn't find an available UDC or it's busy [ 161.952715][ T5926] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 162.253794][ T4230] usb 3-1: USB disconnect, device number 13 [ 162.259862][ C1] usblp0: nonzero write bulk status received: -71 [ 162.285060][ T4230] usblp0: removed [ 162.380021][ T5827] usbhid 2-1:0.0: reset_resume error -32 [ 162.384502][ T4236] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 162.510762][ T1108] usb 2-1: USB disconnect, device number 21 [ 162.668874][ T5949] device syzkaller0 entered promiscuous mode [ 162.951135][ T4236] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 162.964143][ T4236] em28xx 1-1:0.0: board has no eeprom [ 163.089822][ T4230] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 163.126528][ T5968] udc-core: couldn't find an available UDC or it's busy [ 163.133809][ T1108] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 163.145641][ T5968] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 163.320528][ T4236] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 163.333074][ T4236] em28xx 1-1:0.0: dvb set to bulk mode. [ 163.360888][ T5968] udc-core: couldn't find an available UDC or it's busy [ 163.378601][ T23] em28xx 1-1:0.0: Binding DVB extension [ 163.388314][ T5968] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 163.405669][ T4236] usb 1-1: USB disconnect, device number 18 [ 163.411808][ T1108] usb 3-1: Using ep0 maxpacket: 16 [ 163.420538][ T4236] em28xx 1-1:0.0: Disconnecting em28xx [ 163.534153][ T23] em28xx 1-1:0.0: Registering input extension [ 163.540461][ T1108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 163.559482][ T4236] em28xx 1-1:0.0: Closing input extension [ 163.574241][ T4236] em28xx 1-1:0.0: Freeing device [ 163.734261][ T1108] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 163.746507][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.761274][ T1108] usb 3-1: Product: syz [ 163.766905][ T1108] usb 3-1: Manufacturer: syz [ 163.783230][ T1108] usb 3-1: SerialNumber: syz [ 163.799082][ T1108] usb 3-1: config 0 descriptor?? [ 163.854736][ T1108] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 163.874513][ T1108] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 164.036051][ T5988] netlink: 'syz.4.515': attribute type 1 has an invalid length. [ 164.108479][ T5988] netlink: 'syz.4.515': attribute type 2 has an invalid length. [ 164.174986][ T5991] device syzkaller0 entered promiscuous mode [ 164.519844][ T4248] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 164.531141][ T1108] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 164.940040][ T4248] usb 1-1: unable to get BOS descriptor or descriptor too short [ 165.020779][ T4248] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 165.030906][ T4248] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 165.069986][ T4236] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 165.099969][ T1108] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 165.109784][ T1108] em28xx 3-1:0.0: board has no eeprom [ 165.199993][ T4248] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 165.213726][ T4248] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.222940][ T4248] usb 1-1: Product: syz [ 165.227134][ T4248] usb 1-1: Manufacturer: syz [ 165.235622][ T4248] usb 1-1: SerialNumber: syz [ 165.329875][ T4236] usb 2-1: Using ep0 maxpacket: 16 [ 165.470139][ T4236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 165.549879][ T1108] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 165.558078][ T1108] em28xx 3-1:0.0: dvb set to bulk mode. [ 165.568842][ T1108] em28xx 3-1:0.0: Binding DVB extension [ 165.580064][ T4248] cdc_ncm 1-1:1.0: bind() failure [ 165.594069][ T4248] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 165.606446][ T4248] cdc_ncm 1-1:1.1: bind() failure [ 165.623876][ T4248] usb 1-1: USB disconnect, device number 19 [ 165.700083][ T4236] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 165.712869][ T4236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.724691][ T4236] usb 2-1: Product: syz [ 165.728963][ T4236] usb 2-1: Manufacturer: syz [ 165.733920][ T4236] usb 2-1: SerialNumber: syz [ 165.742000][ T4236] usb 2-1: config 0 descriptor?? [ 165.803419][ T4236] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 165.813070][ T4236] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 165.920031][ T4230] usb 4-1: unable to get BOS descriptor or descriptor too short [ 166.059878][ T4230] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 166.067781][ T4230] usb 4-1: can't read configurations, error -71 [ 166.079903][ T4248] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 166.169515][ T6019] udc-core: couldn't find an available UDC or it's busy [ 166.176838][ T6019] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 166.439905][ T4230] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 166.449981][ T4236] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 166.450495][ T4248] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.466852][ T4248] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 166.659931][ T4248] usb 1-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 166.669323][ T4248] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.679821][ T4230] usb 4-1: Using ep0 maxpacket: 32 [ 166.683402][ T4248] usb 1-1: Product: syz [ 166.689152][ T4248] usb 1-1: Manufacturer: syz [ 166.695989][ T4248] usb 1-1: SerialNumber: syz [ 166.765449][ T5961] em28xx 3-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 166.780963][ T1108] em28xx 3-1:0.0: Registering input extension [ 166.782947][ T4248] usb 3-1: USB disconnect, device number 14 [ 166.800133][ T4230] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 166.813895][ T4230] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 166.828932][ T4248] em28xx 3-1:0.0: Disconnecting em28xx [ 166.829217][ T4230] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 166.834867][ T4248] em28xx 3-1:0.0: Closing input extension [ 166.854809][ T4230] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 166.868523][ T4230] usb 4-1: config 0 interface 0 has no altsetting 0 [ 166.879958][ T4248] em28xx 3-1:0.0: Freeing device [ 166.960123][ T4236] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 166.968372][ T4236] em28xx 2-1:0.0: board has no eeprom [ 167.039901][ T4230] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 167.049185][ T4230] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 167.057763][ T4230] usb 4-1: Product: syz [ 167.062202][ T4230] usb 4-1: Manufacturer: syz [ 167.066867][ T4230] usb 4-1: SerialNumber: syz [ 167.075938][ T4230] usb 4-1: config 0 descriptor?? [ 167.121635][ T4230] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 167.146037][ T4230] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 167.289936][ T4236] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 167.297904][ T4236] em28xx 2-1:0.0: dvb set to bulk mode. [ 167.304119][ T4230] em28xx 2-1:0.0: Binding DVB extension [ 167.314483][ T4236] usb 2-1: USB disconnect, device number 22 [ 167.331223][ T4236] em28xx 2-1:0.0: Disconnecting em28xx [ 167.396420][ T6035] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 167.402935][ T6035] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 167.424498][ T4230] em28xx 2-1:0.0: Registering input extension [ 167.440660][ T4236] em28xx 2-1:0.0: Closing input extension [ 167.458448][ T4236] em28xx 2-1:0.0: Freeing device [ 167.464754][ T6035] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 167.471266][ T6035] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 167.505439][ T6035] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 167.511989][ T6035] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 167.535517][ T6035] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 167.542072][ T6035] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 167.560794][ T6035] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 167.567282][ T6035] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 167.583660][ T6037] device syzkaller0 entered promiscuous mode [ 168.240124][ T4248] usb 4-1: USB disconnect, device number 15 [ 168.254856][ T4248] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 168.386794][ T4189] usb 1-1: USB disconnect, device number 20 [ 168.760314][ T4230] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 168.934383][ T6061] udc-core: couldn't find an available UDC or it's busy [ 168.955990][ T6061] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 169.252627][ T4236] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 169.499825][ T4236] usb 1-1: Using ep0 maxpacket: 32 [ 169.623351][ T4236] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.634929][ T4236] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.645068][ T4236] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 169.681986][ T4236] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.699841][ T1108] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 169.735328][ T4236] usb 1-1: config 0 descriptor?? [ 169.817385][ T4236] hub 1-1:0.0: USB hub found [ 170.029956][ T4236] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 170.070008][ T1108] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 170.088890][ T1108] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 170.133755][ T1108] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 170.148507][ T6075] device syzkaller0 entered promiscuous mode [ 170.180128][ T1108] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.224988][ T1108] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 170.261646][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.354925][ T1108] usb 4-1: invalid MIDI out EP 0 [ 170.460646][ T1108] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 170.474051][ T4236] hid-generic 0003:046D:C31C.000B: unknown main item tag 0x0 [ 170.522123][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 170.548673][ T4236] hid-generic 0003:046D:C31C.000B: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 170.892743][ T6081] udc-core: couldn't find an available UDC or it's busy [ 170.908207][ T6081] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 171.560714][ T6086] netlink: 4 bytes leftover after parsing attributes in process `syz.4.545'. [ 171.990102][ T4234] usb 4-1: USB disconnect, device number 16 [ 172.039916][ T4230] usb 2-1: unable to get BOS descriptor or descriptor too short [ 172.269863][ T4230] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 172.294678][ T4230] usb 2-1: can't read configurations, error -71 [ 172.399733][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #88!!! [ 172.419741][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 172.636809][ T6105] ------------[ cut here ]------------ [ 172.649306][ T6105] kernel BUG at include/linux/scatterlist.h:143! [ 172.661861][ T6105] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 172.668062][ T6105] CPU: 1 PID: 6105 Comm: syz.4.551 Not tainted syzkaller #0 [ 172.675372][ T6105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.685448][ T6105] RIP: 0010:sg_init_one+0x14a/0x160 [ 172.690661][ T6105] Code: 80 c1 03 38 c1 7c cf e8 f4 4d d8 fd eb c8 44 89 f1 80 e1 07 80 c1 03 38 c1 7c d2 4c 89 f7 e8 dd 4d d8 fd eb c8 e8 b6 2a 93 fd <0f> 0b e8 af 2a 93 fd 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 [ 172.710274][ T6105] RSP: 0018:ffffc90005cf7928 EFLAGS: 00010287 [ 172.716351][ T6105] RAX: ffffffff83e5d1fa RBX: ffffc90005cf7c40 RCX: 0000000000080000 [ 172.724325][ T6105] RDX: ffffc900068a1000 RSI: 00000000000012f2 RDI: 00000000000012f3 [ 172.732299][ T6105] RBP: 0000000000000000 R08: ffffc90005cf7a9f R09: ffffc90005cf7a88 [ 172.740271][ T6105] R10: dffffc0000000000 R11: fffff52000b9ef54 R12: 1ffff92000b9ef50 [ 172.748242][ T6105] R13: dffffc0000000000 R14: ffffc90005cf7a80 R15: 0000000000000010 [ 172.756224][ T6105] FS: 00007fb8e9fd06c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 172.765177][ T6105] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 172.771768][ T6105] CR2: 000000110c29375c CR3: 0000000025333000 CR4: 00000000003526e0 [ 172.779754][ T6105] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 172.787757][ T6105] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 172.795739][ T6105] Call Trace: [ 172.799039][ T6105] [ 172.801973][ T6105] software_key_eds_op+0x4f6/0xb30 [ 172.807114][ T6105] ? stack_depot_save+0x41b/0x460 [ 172.812151][ T6105] ? software_key_query+0x830/0x830 [ 172.817372][ T6105] ? asymmetric_key_eds_op+0xe9/0x130 [ 172.822751][ T6105] keyctl_pkey_e_d_s+0x208/0x300 [ 172.827701][ T6105] ? keyctl_pkey_params_get+0x4c0/0x4c0 [ 172.833273][ T6105] ? __might_sleep+0xf0/0xf0 [ 172.837955][ T6105] ? __might_fault+0xb7/0x110 [ 172.842636][ T6105] __se_sys_keyctl+0x6c6/0xa20 [ 172.847404][ T6105] ? __x64_sys_keyctl+0xc0/0xc0 [ 172.852279][ T6105] ? __context_tracking_exit+0x4c/0x80 [ 172.857747][ T6105] ? __lock_acquire+0x7b50/0x7b50 [ 172.862779][ T6105] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 172.868769][ T6105] ? lock_chain_count+0x20/0x20 [ 172.873627][ T6105] ? lockdep_hardirqs_on+0x94/0x140 [ 172.878830][ T6105] ? __x64_sys_keyctl+0x1c/0xc0 [ 172.883681][ T6105] do_syscall_64+0x4c/0xa0 [ 172.888097][ T6105] ? clear_bhb_loop+0x30/0x80 [ 172.892769][ T6105] ? clear_bhb_loop+0x30/0x80 [ 172.897448][ T6105] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 172.903340][ T6105] RIP: 0033:0x7fb8ebd780d9 [ 172.907760][ T6105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.927363][ T6105] RSP: 002b:00007fb8e9fd0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 172.935780][ T6105] RAX: ffffffffffffffda RBX: 00007fb8ebffffa0 RCX: 00007fb8ebd780d9 [ 172.943773][ T6105] RDX: 0000200000000080 RSI: 0000200000000180 RDI: 000000000000001a [ 172.951761][ T6105] RBP: 00007fb8ebe0f024 R08: 0000000000000000 R09: 0000000000000000 [ 172.959734][ T6105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.967717][ T6105] R13: 00007fb8ec000038 R14: 00007fb8ebffffa0 R15: 00007ffcbc27bf18 [ 172.975697][ T6105] [ 172.978738][ T6105] Modules linked in: [ 173.006531][ T6105] ---[ end trace 0019fb988b9014df ]--- [ 173.014437][ T6105] RIP: 0010:sg_init_one+0x14a/0x160 [ 173.020249][ T6105] Code: 80 c1 03 38 c1 7c cf e8 f4 4d d8 fd eb c8 44 89 f1 80 e1 07 80 c1 03 38 c1 7c d2 4c 89 f7 e8 dd 4d d8 fd eb c8 e8 b6 2a 93 fd <0f> 0b e8 af 2a 93 fd 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 [ 173.043126][ T6105] RSP: 0018:ffffc90005cf7928 EFLAGS: 00010287 [ 173.049327][ T6105] RAX: ffffffff83e5d1fa RBX: ffffc90005cf7c40 RCX: 0000000000080000 [ 173.058013][ T6105] RDX: ffffc900068a1000 RSI: 00000000000012f2 RDI: 00000000000012f3 [ 173.068408][ T6105] RBP: 0000000000000000 R08: ffffc90005cf7a9f R09: ffffc90005cf7a88 [ 173.078158][ T6105] R10: dffffc0000000000 R11: fffff52000b9ef54 R12: 1ffff92000b9ef50 [ 173.088308][ T6105] R13: dffffc0000000000 R14: ffffc90005cf7a80 R15: 0000000000000010 [ 173.101121][ T6105] FS: 00007fb8e9fd06c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 173.113555][ T6105] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 173.131606][ T6105] CR2: 000000110c375a5f CR3: 0000000025333000 CR4: 00000000003526e0 [ 173.150834][ T6105] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 173.159090][ T6105] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 173.174405][ T6105] Kernel panic - not syncing: Fatal exception [ 173.180809][ T6105] Kernel Offset: disabled [ 173.185154][ T6105] Rebooting in 86400 seconds..